last executing test programs: 5.283829909s ago: executing program 3 (id=5265): r0 = socket(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0xf47, @private2, 0x100}, 0x1c) 4.850392998s ago: executing program 3 (id=5272): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000740)="2400000021002551241c01e1000c00000000000000000000000000001000000800000000", 0x24) 4.389600585s ago: executing program 3 (id=5277): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)='#,d\x00') 4.004930237s ago: executing program 3 (id=5282): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe73) 3.727966317s ago: executing program 3 (id=5286): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x84d0, 0x2000000000000000, 0x200002, 0x2, 0x2, 0x7b, 0xfffffffffffffffd, 0x107ff}) 3.415185474s ago: executing program 5 (id=5290): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) 2.955133525s ago: executing program 2 (id=5293): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000280)={[{@part={'part', 0x3d, 0x10ffff}}, {@umask={'umask', 0x3d, 0x4ffff}}, {@codepage={'codepage', 0x3d, 'cp861'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0x4, 0x344, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 2.920400111s ago: executing program 5 (id=5295): r0 = syz_socket_connect_nvme_tcp() close(r0) 2.593996787s ago: executing program 2 (id=5297): r0 = syz_open_dev$MSR(&(0x7f0000000080), 0xfffffffffffffffa, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, 0x0) 2.54653891s ago: executing program 5 (id=5299): r0 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005e00010200"/19], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 2.34193925s ago: executing program 2 (id=5301): r0 = syz_open_dev$evdev(&(0x7f0000001240), 0x726, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000001280)=""/132) 2.212940243s ago: executing program 5 (id=5304): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000017c0)={0x7fffffff, 0x2, 'client0\x00', 0x3, "6bc1444dfc6765c4", "e493cce62669f1e53411a5dd2175f2d8cbe40a7b470a9aa77184d0ed9f04957b", 0x8, 0x2}) 2.072905595s ago: executing program 2 (id=5306): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x8, &(0x7f0000000100)=ANY=[], 0x1, 0x1dc, &(0x7f0000001200)="$eJzslT/v0kAYx793xRYMr8DFQRJxsLRFjQsJLE4OJv4hDiYSKQQtYqCDkBjlFbi7Obi6Oplo3HwRBl100UnnmutdyxkLWgL8SH7PJ+Hhe23v6fPcwfdAEMSx5cvnX4voZ+NrEUAZFVjq+jdj+QzXnv9U/PHk/dUr7ed3Xn20FnYpK2cU/f/7CwDetQyE6dw/Z1fU9w3wVN8Exzml22Cwlb4LjltK+2C4rfR9TY/E87bdGwS+fW8UdIVwRHBF8ESopy9PupszdLX6mFbfZDp70AkCf7xD8a/1+97iaGj16ftlQ1braOvngsNVug6G60pfhpWsjcOeBb6b5J8znCos8xtr+zchhPgdbaX/3t+3StvJ7I8nJoDNpgNsL3ufU5g52zEQi2RHD6SLLQoUDqKMHYu3Tbl/yZXoqRzny9NcccvMmUetfOpP0UuGs5o/SSt5ER81tXD4qDaZzs4Php2+3/cfel79knPBcS56tdiIZFzjf6XYn04u82eeSQKTmXjcCcOxK2M69mTMclwe+x9H9QxOiLFwU1NP+gEoakOmPhyDN1JV5Z/rdXllDwRBEEfBabDYk2NfToQ6TdIbUeRdy55u7bNWgiAIgiAIgiAIgiA243cAAAD//xTPXnQ=") open(&(0x7f00000003c0)='./file3\x00', 0x8000, 0x10) 1.933020988s ago: executing program 5 (id=5309): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.745881045s ago: executing program 1 (id=5311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@acquire={0x134, 0x17, 0x1, 0xfffffffe, 0x0, {{@in=@private=0xa010100}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x84}, {{@in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x4, 0x8000000}, {}, 0x9, 0x6e6bba, 0x2}, 0x400}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x4}}]}, 0x134}}, 0x0) 1.54468716s ago: executing program 0 (id=5312): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000007c0)={0x4, 0xfff8, 0x7}) 1.529392966s ago: executing program 4 (id=5313): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) poll(&(0x7f0000000000)=[{r0, 0xd010}], 0x1, 0x9) 1.511405171s ago: executing program 1 (id=5314): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=0x0}}) 1.283697954s ago: executing program 0 (id=5315): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x15}) 1.280613282s ago: executing program 3 (id=5316): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(aegis128-aesni)\x00'}, 0x58) 1.241299994s ago: executing program 1 (id=5317): r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)) 1.225202031s ago: executing program 4 (id=5318): timer_create(0x8, 0x0, &(0x7f00000001c0)) timer_delete(0x0) 1.201240244s ago: executing program 2 (id=5319): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001200010028bd700000000000ff01000000f4ff000000000000010900000004d60d00ff000c0015"], 0x34}}, 0x0) 996.875933ms ago: executing program 1 (id=5320): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 972.540795ms ago: executing program 4 (id=5321): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x19, 0x0, 0x1, 0x9, 0x6, @random="9a9d0aca5e9a"}, 0x14) 962.349926ms ago: executing program 0 (id=5322): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000008007e227f3ad7a9", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 831.646528ms ago: executing program 2 (id=5323): syz_usb_connect$hid(0x5, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a09058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) 662.789456ms ago: executing program 0 (id=5324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 644.106492ms ago: executing program 4 (id=5325): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0xd, 0x4, 0x4, 0x800, 0x4, 0x4, 0x7, 0x54c6cff3, 0x22, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xcae3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 580.355678ms ago: executing program 1 (id=5326): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 500.144338ms ago: executing program 0 (id=5327): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, 0x3f, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x28}}, 0x0) 397.921818ms ago: executing program 4 (id=5328): syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x3000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="6469725f756d61736b3d303030303030303030303030303030342c66696c655f756d61736b3d30303030303030303030303030303030303030313334302c696f636861727365743d6d61637475726b6973682c636f6465706167653d69736f383835392d362c63726561746f723d4ddd71752c00eace691af6ae10469da9b01baceb6a9486a6be7f83429052dab3e6e5e287ba3d79e809945e4361c0019a8ed88ae1c6c541bb9a966c0e4d7bde2f8e3add0af5a9c74c520f889381fbcf573e0000000000"], 0x11, 0x2e1, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 192.044321ms ago: executing program 0 (id=5329): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x81, 0xfffffffb}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="04000000000200"/17, @ANYRES32], 0x50) 191.446699ms ago: executing program 1 (id=5330): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r0, 0x3) 11.289635ms ago: executing program 5 (id=5331): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 4 (id=5332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): by syz.5.4269 (16043) [ 664.001871][T16074] loop1: detected capacity change from 0 to 512 [ 664.061484][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.071158][T16072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.123722][T16074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.210891][T16043] BTRFS info (device loop5): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 664.250539][T16078] loop4: detected capacity change from 0 to 1024 [ 664.277457][T16043] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 664.321393][T16078] hfsplus: invalid btree flag [ 664.326382][T16078] hfsplus: failed to load attributes file [ 664.433457][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.534649][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.769815][T16059] loop2: detected capacity change from 0 to 32768 [ 664.791481][T16059] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4270 (16059) [ 664.844927][T16043] BTRFS info (device loop5): enabling ssd optimizations [ 664.872136][T16043] BTRFS info (device loop5): enabling free space tree [ 664.881901][T16059] BTRFS info (device loop2): first mount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 664.917395][T16059] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 665.057935][T16109] loop0: detected capacity change from 0 to 16 [ 665.112198][T16109] erofs (device loop0): mounted with root inode @ nid 36. [ 665.155215][T16059] BTRFS info (device loop2): enabling ssd optimizations [ 665.162222][T16059] BTRFS info (device loop2): enabling free space tree [ 665.302939][ T5831] BTRFS info (device loop5): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 665.327311][ T10] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 665.497737][ T5830] BTRFS info (device loop2): last unmount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 665.575083][T16122] loop0: detected capacity change from 0 to 128 [ 665.581776][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 665.622943][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.669475][ T10] usb 5-1: config 0 descriptor?? [ 665.901564][ T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 665.942377][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 666.021226][T16128] loop0: detected capacity change from 0 to 16 [ 666.047678][T16128] erofs (device loop0): mounted with root inode @ nid 36. [ 666.071255][T16083] loop3: detected capacity change from 0 to 32768 [ 666.105096][ T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 666.111850][ T10] [drm] Initialized udl on minor 2 [ 666.146949][T16083] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4277 (16083) [ 666.213568][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 666.247153][T16083] BTRFS info (device loop3): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 666.253969][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 666.299521][ T5925] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 666.322767][T16083] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 666.392821][ T5925] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 666.400900][ T5925] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 666.433391][ T10] usb 5-1: USB disconnect, device number 124 [ 666.559144][T16101] loop1: detected capacity change from 0 to 32768 [ 666.622391][T16101] BTRFS: device fsid 9399ba92-402c-46cb-a272-9c4c6c4f62f5 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4279 (16101) [ 666.677949][T16083] BTRFS info (device loop3): enabling ssd optimizations [ 666.702098][T16101] BTRFS info (device loop1): first mount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5 [ 666.720994][T16083] BTRFS info (device loop3): enabling free space tree [ 666.735101][ T5966] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 666.739675][T16101] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 666.834334][T16150] loop0: detected capacity change from 0 to 1024 [ 666.932593][T16150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.002081][ T5966] usb 3-1: unable to get BOS descriptor or descriptor too short [ 667.098379][ T5966] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 667.107140][ T5966] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 667.128495][T16165] loop4: detected capacity change from 0 to 1024 [ 667.176378][ T5836] BTRFS info (device loop3): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 667.185798][ T5966] usb 3-1: config 1 has no interface number 1 [ 667.192705][ T5966] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 667.237355][ T5966] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 667.268122][ T5966] usb 3-1: string descriptor 0 read error: -22 [ 667.275285][ T5966] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 667.296775][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.338263][T16165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.352125][T16101] BTRFS info (device loop1): enabling ssd optimizations [ 667.388222][T16101] BTRFS info (device loop1): enabling free space tree [ 667.459871][ T5966] usb 3-1: low speed audio streaming not supported [ 667.499180][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.648306][ T5966] usb 3-1: USB disconnect, device number 123 [ 667.662739][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.678506][ T5835] BTRFS info (device loop1): last unmount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5 [ 667.859168][T16176] loop4: detected capacity change from 0 to 512 [ 667.915188][T16174] loop0: detected capacity change from 0 to 2048 [ 668.022247][T16176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.051746][T16174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.201285][ T24] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 668.241852][T16145] loop5: detected capacity change from 0 to 32768 [ 668.269285][T16145] BTRFS error: failed to parse compression option 'lzo:nobarrier' [ 668.388117][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.418717][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.452982][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 668.505645][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 668.576649][ T6113] udevd[6113]: incorrect btrfs checksum on /dev/loop5 [ 668.596508][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 668.691137][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.699199][ T24] usb 4-1: Product: syz [ 668.758999][ T24] usb 4-1: Manufacturer: syz [ 668.763662][ T24] usb 4-1: SerialNumber: syz [ 668.831725][ T24] usb 4-1: config 0 descriptor?? [ 668.912027][T16189] loop4: detected capacity change from 0 to 128 [ 668.986784][T16191] loop5: detected capacity change from 0 to 512 [ 669.115438][T16191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.272261][ T24] usb 4-1: USB disconnect, device number 117 [ 669.473023][ T6109] udevd[6109]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.509133][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.579124][T16194] loop4: detected capacity change from 0 to 512 [ 669.669186][T16194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.723289][T16182] loop1: detected capacity change from 0 to 32768 [ 669.735355][T16197] loop5: detected capacity change from 0 to 128 [ 669.772535][T16182] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4293 (16182) [ 669.806413][T16182] BTRFS info (device loop1): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 669.853451][T16182] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 670.104656][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.164955][T16182] BTRFS info (device loop1): enabling ssd optimizations [ 670.183197][T16182] BTRFS info (device loop1): enabling free space tree [ 670.550317][T16187] loop0: detected capacity change from 0 to 32768 [ 670.593283][T16187] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4294 (16187) [ 670.594345][ T5835] BTRFS info (device loop1): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 670.661697][T16185] loop2: detected capacity change from 0 to 32768 [ 670.678462][T16187] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 670.711709][T16185] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4296 (16185) [ 670.732097][T16187] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 670.775509][T16185] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 670.800028][T16185] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 671.274375][T16185] BTRFS info (device loop2): enabling ssd optimizations [ 671.300706][T16187] BTRFS info (device loop0): enabling ssd optimizations [ 671.321032][T16185] BTRFS info (device loop2): enabling free space tree [ 671.329844][T16187] BTRFS info (device loop0): enabling free space tree [ 671.621224][ T5830] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 671.726522][ T5827] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 671.770508][T16207] loop5: detected capacity change from 0 to 32768 [ 671.892060][T16207] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 671.989086][T16207] dlm: no local IP address has been set [ 672.022577][T16207] dlm: cannot start dlm midcomms -107 [ 672.070332][T16207] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 672.609782][T16259] loop5: detected capacity change from 0 to 1024 [ 672.818289][T16248] loop1: detected capacity change from 0 to 32768 [ 672.862561][T16248] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4303 (16248) [ 672.963901][T16248] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 673.019119][T16248] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 673.222049][T16270] loop5: detected capacity change from 0 to 1024 [ 673.356977][T16248] BTRFS info (device loop1): enabling ssd optimizations [ 673.395522][T16248] BTRFS info (device loop1): enabling free space tree [ 673.417336][T16257] loop2: detected capacity change from 0 to 32768 [ 673.479537][T16257] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4304 (16257) [ 673.561995][T16257] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 673.619563][T16257] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 673.786544][ T5835] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 673.954506][T16257] BTRFS info (device loop2): enabling ssd optimizations [ 673.977192][T16257] BTRFS info (device loop2): enabling free space tree [ 674.354159][ T5830] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 674.397937][T16301] loop3: detected capacity change from 0 to 1024 [ 675.119658][T16308] loop4: detected capacity change from 0 to 2368 [ 675.928855][ T5925] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 676.115937][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 676.140259][T16304] loop2: detected capacity change from 0 to 32768 [ 676.149964][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 676.188379][ T5925] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 676.199297][T16304] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4311 (16304) [ 676.216682][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.243293][ T5925] usb 5-1: Product: syz [ 676.260684][T16304] BTRFS info (device loop2): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 676.269814][ T5925] usb 5-1: Manufacturer: syz [ 676.292214][T16304] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 676.298500][ T5925] usb 5-1: SerialNumber: syz [ 676.374536][ T5925] usb 5-1: config 0 descriptor?? [ 676.421043][T16302] loop1: detected capacity change from 0 to 32768 [ 676.485615][T16302] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 676.493827][T16302] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 676.512049][T16304] BTRFS info (device loop2): enabling ssd optimizations [ 676.560358][T16304] BTRFS info (device loop2): enabling free space tree [ 676.655011][T16302] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 676.682914][ T5833] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 676.693149][ T5833] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 676.772902][ T5925] usb 5-1: USB disconnect, device number 125 [ 676.910321][ T5830] BTRFS info (device loop2): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 677.094176][T16306] loop3: detected capacity change from 0 to 32768 [ 677.192165][T16306] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 677.239206][T16306] CPU: 0 UID: 0 PID: 16306 Comm: syz.3.4312 Not tainted syzkaller #0 PREEMPT(full) [ 677.239256][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 677.239279][T16306] Call Trace: [ 677.239297][T16306] [ 677.239313][T16306] dump_stack_lvl+0x16c/0x1f0 [ 677.239379][T16306] sysfs_warn_dup+0x7f/0xa0 [ 677.239434][T16306] sysfs_create_dir_ns+0x24b/0x2b0 [ 677.239489][T16306] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 677.239542][T16306] ? find_held_lock+0x2b/0x80 [ 677.239616][T16306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.239661][T16306] ? do_raw_spin_unlock+0x172/0x230 [ 677.239721][T16306] kobject_add_internal+0x2c4/0x9b0 [ 677.239757][T16306] ? kfree_const+0x41/0x60 [ 677.239801][T16306] kobject_init_and_add+0x11b/0x190 [ 677.239843][T16306] ? __pfx_kobject_init_and_add+0x10/0x10 [ 677.239890][T16306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.239935][T16306] ? lockdep_init_map_type+0x5c/0x280 [ 677.239985][T16306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.240030][T16306] ? lockdep_init_map_type+0x5c/0x280 [ 677.240088][T16306] gfs2_sys_fs_add+0x208/0x440 [ 677.240142][T16306] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 677.240220][T16306] ? lockdep_init_map_type+0x139/0x280 [ 677.240272][T16306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.240316][T16306] ? alloc_workqueue_noprof+0x198/0x200 [ 677.240363][T16306] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 677.240421][T16306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.240481][T16306] gfs2_fill_super+0x13f0/0x2d30 [ 677.240542][T16306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.240615][T16306] ? __pfx_gfs2_fill_super+0x10/0x10 [ 677.240686][T16306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.240731][T16306] ? set_blocksize+0x406/0x500 [ 677.240780][T16306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.240824][T16306] ? sb_set_blocksize+0x176/0x1d0 [ 677.240869][T16306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.240922][T16306] get_tree_bdev_flags+0x38c/0x620 [ 677.240963][T16306] ? __pfx_gfs2_fill_super+0x10/0x10 [ 677.241026][T16306] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 677.241067][T16306] ? rcu_is_watching+0x12/0xc0 [ 677.241103][T16306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.241152][T16306] ? aa_get_newest_label+0xd2/0x250 [ 677.241191][T16306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.241236][T16306] ? apparmor_capable+0x114/0x1d0 [ 677.241281][T16306] gfs2_get_tree+0x4e/0x280 [ 677.241343][T16306] vfs_get_tree+0x8e/0x340 [ 677.241403][T16306] path_mount+0x7b9/0x23a0 [ 677.241462][T16306] ? __pfx_path_mount+0x10/0x10 [ 677.241516][T16306] ? putname+0x154/0x1a0 [ 677.241579][T16306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.241624][T16306] ? putname+0x154/0x1a0 [ 677.241680][T16306] ? __x64_sys_mount+0x293/0x310 [ 677.241726][T16306] __x64_sys_mount+0x293/0x310 [ 677.241776][T16306] ? __pfx___x64_sys_mount+0x10/0x10 [ 677.241824][T16306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 677.241884][T16306] do_syscall_64+0xcd/0xfa0 [ 677.241945][T16306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.241983][T16306] RIP: 0033:0x7f0adc79066a [ 677.242012][T16306] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.242049][T16306] RSP: 002b:00007f0add6b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 677.242085][T16306] RAX: ffffffffffffffda RBX: 00007f0add6b6ef0 RCX: 00007f0adc79066a [ 677.242110][T16306] RDX: 0000200000013400 RSI: 0000200000013440 RDI: 00007f0add6b6eb0 [ 677.242135][T16306] RBP: 0000200000013400 R08: 00007f0add6b6ef0 R09: 0000000000000000 [ 677.242159][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000013440 [ 677.242183][T16306] R13: 00007f0add6b6eb0 R14: 00000000000133e0 R15: 0000200000013480 [ 677.242234][T16306] [ 677.638939][ T5833] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 884ms [ 677.648145][ T5833] gfs2: fsid=syz:syz.0: jid=0: Done [ 677.660800][T16302] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 677.677359][T16306] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 677.735370][T16306] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 677.857165][T16329] loop0: detected capacity change from 0 to 32768 [ 677.907145][T16329] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4315 (16329) [ 677.929621][T16329] BTRFS info (device loop0): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 678.001570][T16329] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 678.077610][T16302] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 678.336839][T16329] BTRFS info (device loop0): enabling ssd optimizations [ 678.343857][T16329] BTRFS info (device loop0): enabling free space tree [ 678.512358][T16354] loop3: detected capacity change from 0 to 512 [ 678.561590][T16351] loop4: detected capacity change from 0 to 4096 [ 678.603799][T16354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.676845][T16351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.718646][T16354] ext4 filesystem being mounted at /729/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.869476][ T5827] BTRFS info (device loop0): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 678.885243][T16360] loop5: detected capacity change from 0 to 736 [ 679.035101][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.051434][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.333519][T16362] loop4: detected capacity change from 0 to 760 [ 679.416025][T16365] loop3: detected capacity change from 0 to 160 [ 679.679870][T16368] loop5: detected capacity change from 0 to 2364 [ 679.714521][ T5925] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 679.781784][T16334] loop2: detected capacity change from 0 to 32768 [ 679.819209][T16334] BTRFS: device fsid e5ec6bdf-b4e4-4163-9622-8db3a33753bd devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4316 (16334) [ 679.893717][T16373] loop3: detected capacity change from 0 to 2 [ 679.905609][ T5924] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 679.925217][T16334] BTRFS info (device loop2): first mount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 679.939434][T16373] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 679.947132][ T5925] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 679.978574][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.987265][T16334] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 680.035202][ T5925] usb 1-1: config 0 descriptor?? [ 680.058404][T16376] loop4: detected capacity change from 0 to 2 [ 680.102210][T16376] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 680.108766][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 680.193594][ T5924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 680.235878][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 680.324419][ T5925] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 680.338279][T16334] BTRFS info (device loop2): enabling ssd optimizations [ 680.345806][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 680.356964][ T5925] [drm:udl_init] *ERROR* Selecting channel failed [ 680.398542][T16392] loop5: detected capacity change from 0 to 64 [ 680.401538][ T5925] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 680.418774][T16334] BTRFS info (device loop2): enabling free space tree [ 680.458472][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 680.477573][ T5925] [drm] Initialized udl on minor 2 [ 680.506986][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 680.509205][ T5925] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 680.559130][ T5925] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 680.567307][ T5966] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 680.570903][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 680.633807][ T5966] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 680.642111][ T5925] usb 1-1: USB disconnect, device number 3 [ 680.663369][ T5924] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 680.686178][ T5966] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 680.718120][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 680.727894][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x74, changing to 0x4 [ 680.764549][T16397] loop4: detected capacity change from 0 to 128 [ 680.827818][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 680.884768][ T5924] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 680.904860][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.924476][ T5830] BTRFS info (device loop2): last unmount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 680.948078][ T5924] usb 2-1: Product: syz [ 680.972082][ T5924] usb 2-1: Manufacturer: syz [ 680.994596][ T5924] usb 2-1: SerialNumber: syz [ 681.019119][ T5924] usb 2-1: config 0 descriptor?? [ 681.078723][ T5924] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.432786][ T5924] usb 2-1: USB disconnect, device number 123 [ 681.514417][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.766602][ T5833] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 681.823954][T16407] loop2: detected capacity change from 0 to 512 [ 681.888757][T16407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.936970][T16407] ext4 filesystem being mounted at /714/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.961787][ T5833] usb 1-1: unable to get BOS descriptor or descriptor too short [ 681.972971][ T5833] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 681.990234][ T5833] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 681.999355][ T5833] usb 1-1: config 1 has no interface number 1 [ 682.005662][ T5833] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 682.018681][ T5833] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 682.040382][ T5833] usb 1-1: string descriptor 0 read error: -22 [ 682.055772][ T5833] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 682.076432][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.135076][ T5833] usb 1-1: low speed audio streaming not supported [ 682.186377][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.473754][ T5833] usb 1-1: USB disconnect, device number 4 [ 682.517387][T16410] loop1: detected capacity change from 0 to 2048 [ 682.788998][T16401] loop4: detected capacity change from 0 to 32768 [ 682.858141][T16401] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4333 (16401) [ 682.939876][T16401] BTRFS info (device loop4): first mount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 682.970523][T16401] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 683.021352][T16395] loop3: detected capacity change from 0 to 32768 [ 683.107956][T16395] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 683.147176][T16395] dlm: no local IP address has been set [ 683.223549][T16395] dlm: cannot start dlm midcomms -107 [ 683.253582][T16401] BTRFS info (device loop4): enabling ssd optimizations [ 683.260590][T16401] BTRFS info (device loop4): enabling free space tree [ 683.273707][T16395] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 683.383233][T16434] loop0: detected capacity change from 0 to 128 [ 683.659288][ T5828] BTRFS info (device loop4): last unmount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 683.928216][T16438] loop0: detected capacity change from 0 to 512 [ 684.537089][T16440] loop4: detected capacity change from 0 to 8192 [ 684.579206][T16414] loop1: detected capacity change from 0 to 32768 [ 684.934598][T16444] loop5: detected capacity change from 0 to 128 [ 685.141021][T16448] loop4: detected capacity change from 0 to 128 [ 685.624600][T16450] loop5: detected capacity change from 0 to 4096 [ 685.705834][T16450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.046281][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.100616][T16456] loop2: detected capacity change from 0 to 2048 [ 686.190982][T16459] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 686.701961][T16463] loop2: detected capacity change from 0 to 1024 [ 687.394353][T16452] loop4: detected capacity change from 0 to 32768 [ 687.462362][T16458] loop1: detected capacity change from 0 to 32768 [ 687.484503][T16452] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 687.511523][T16452] dlm: no local IP address has been set [ 687.534352][T16452] dlm: cannot start dlm midcomms -107 [ 687.556305][T16469] loop3: detected capacity change from 0 to 4096 [ 687.564822][T16469] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 687.588579][T16452] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 690.063859][T16479] loop0: detected capacity change from 0 to 32768 [ 690.135456][T16479] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 690.180151][T16479] dlm: no local IP address has been set [ 690.220204][T16479] dlm: cannot start dlm midcomms -107 [ 690.251441][T16479] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 690.545049][T16477] loop3: detected capacity change from 0 to 65536 [ 690.626906][T16483] loop2: detected capacity change from 0 to 256 [ 690.962926][T16486] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 691.312887][ T5833] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 691.540812][ T5833] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 691.558364][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.603030][ T5833] usb 3-1: config 0 descriptor?? [ 691.700703][T16492] loop5: detected capacity change from 0 to 2048 [ 691.884078][ T5833] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 691.900690][ T5833] [drm:udl_init] *ERROR* Selecting channel failed [ 691.972545][ T5833] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 692.018795][ T5833] [drm] Initialized udl on minor 2 [ 692.055246][ T5833] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 692.096184][ T5833] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 692.110214][ T5924] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 692.150994][ T5924] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 692.161359][ T5833] usb 3-1: USB disconnect, device number 124 [ 692.190655][ T5924] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 692.391801][T16496] loop5: detected capacity change from 0 to 4096 [ 692.445775][T16496] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 692.949235][T16490] loop3: detected capacity change from 0 to 32768 [ 692.999392][T16490] (syz.3.4362,16490,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 693.027089][T16490] (syz.3.4362,16490,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 693.065420][T16499] loop2: detected capacity change from 0 to 4096 [ 693.120869][T16500] loop5: detected capacity change from 0 to 4096 [ 693.390738][T16494] loop4: detected capacity change from 0 to 32768 [ 693.416730][T16505] loop3: detected capacity change from 0 to 128 [ 693.459704][T16494] (syz.4.4364,16494,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 693.600535][T16494] (syz.4.4364,16494,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 694.908029][T16516] loop0: detected capacity change from 0 to 22 [ 694.937423][T16516] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 694.979831][T16516] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 695.724582][T16502] loop1: detected capacity change from 0 to 65536 [ 695.798691][T16502] (syz.1.4368,16502,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 695.839270][T16502] (syz.1.4368,16502,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 696.194620][T16521] loop1: detected capacity change from 0 to 8 [ 696.652836][T16523] loop1: detected capacity change from 0 to 1 [ 696.723708][T16523] syz.1.4377: attempt to access beyond end of device [ 696.723708][T16523] loop1: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 696.786572][T16523] SQUASHFS error: Failed to read block 0x0: -5 [ 696.795316][T16523] unable to read squashfs_super_block [ 697.070370][T16518] loop0: detected capacity change from 0 to 32768 [ 697.154525][T16518] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 697.204932][T16527] loop1: detected capacity change from 0 to 128 [ 697.219025][T16518] dlm: no local IP address has been set [ 697.246399][T16518] dlm: cannot start dlm midcomms -107 [ 697.254947][T16527] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 697.266722][T16518] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 697.345026][T16527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 697.559012][T16529] loop2: detected capacity change from 0 to 128 [ 697.610562][T16529] Invalid source name [ 697.614598][T16529] UBIFS error (pid: 16529): cannot open "/dev/loop2", error -22 [ 697.915276][T16531] loop0: detected capacity change from 0 to 256 [ 698.026807][T16531] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 698.081299][T16531] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 698.089235][T16536] loop4: detected capacity change from 0 to 2048 [ 698.142238][T16531] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 698.158061][T16536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 698.167767][T16531] UDF-fs: Scanning with blocksize 512 failed [ 698.195154][T16531] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 698.232757][T16531] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 698.325556][ T5966] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 698.371877][T16537] loop1: detected capacity change from 0 to 8192 [ 698.394598][T16539] loop2: detected capacity change from 0 to 4096 [ 698.514659][T16542] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 698.546970][ T5966] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 698.624589][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.650400][T16544] loop4: detected capacity change from 0 to 128 [ 698.706044][T16544] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 698.717168][ T5966] usb 4-1: config 0 descriptor?? [ 698.814352][T16544] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 699.019583][ T5966] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 699.057593][ T5966] [drm:udl_init] *ERROR* Selecting channel failed [ 699.099207][T16550] loop2: detected capacity change from 0 to 256 [ 699.120755][T16546] loop0: detected capacity change from 0 to 4096 [ 699.122249][ T5966] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 699.164202][T16550] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 699.195712][T16546] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 699.200628][ T5966] [drm] Initialized udl on minor 2 [ 699.228015][ T5966] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 699.248170][T16550] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 699.260570][ T5966] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 699.283236][T16550] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 699.305776][ T5925] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 699.329402][T16550] UDF-fs: Scanning with blocksize 512 failed [ 699.340336][ T5925] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 699.350295][ T5966] usb 4-1: USB disconnect, device number 118 [ 699.361652][T16550] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 699.382437][T16548] loop1: detected capacity change from 0 to 4096 [ 699.447711][T16550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 699.473019][T16552] loop4: detected capacity change from 0 to 512 [ 699.514762][T16552] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 699.560514][T16552] UDF-fs: Scanning with blocksize 512 failed [ 699.570354][T16553] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 699.639739][T16552] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 699.715305][T16552] UDF-fs: Scanning with blocksize 1024 failed [ 699.740223][T16552] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 699.792445][T16552] UDF-fs: Scanning with blocksize 2048 failed [ 699.809512][T16552] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 699.879364][T16552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 699.945963][T16556] loop0: detected capacity change from 0 to 512 [ 699.967861][T16557] loop3: detected capacity change from 0 to 512 [ 700.016096][T16556] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 700.023535][T16556] UDF-fs: Scanning with blocksize 512 failed [ 700.062016][T16557] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 700.110891][T16556] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 700.121538][T16557] UDF-fs: Scanning with blocksize 512 failed [ 700.166237][T16557] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 700.189579][T16556] UDF-fs: Scanning with blocksize 1024 failed [ 700.215260][T16557] UDF-fs: Scanning with blocksize 1024 failed [ 700.235753][T16556] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 700.269607][T16556] UDF-fs: Scanning with blocksize 2048 failed [ 700.280438][T16557] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 700.314168][T16557] UDF-fs: Scanning with blocksize 2048 failed [ 700.326843][T16562] loop1: detected capacity change from 0 to 512 [ 700.334283][T16556] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 700.360316][T16563] loop4: detected capacity change from 0 to 128 [ 700.373035][T16557] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 700.385129][T16562] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 700.396434][T16562] UDF-fs: Scanning with blocksize 512 failed [ 700.402589][T16556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 700.416996][T16557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 700.456392][T16562] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 700.495527][T16562] UDF-fs: Scanning with blocksize 1024 failed [ 700.506787][T16563] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 700.573126][T16562] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 700.580592][T16562] UDF-fs: Scanning with blocksize 2048 failed [ 700.648204][T16563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 700.657592][T16562] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 700.743813][T16562] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 700.933502][T16567] loop3: detected capacity change from 0 to 128 [ 700.942694][T16565] loop0: detected capacity change from 0 to 128 [ 701.030349][T16565] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 701.087966][T16565] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 701.143879][T16569] loop4: detected capacity change from 0 to 256 [ 701.202840][T16569] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 701.295274][T16569] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 701.319127][T16569] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 701.326828][T16569] UDF-fs: Scanning with blocksize 512 failed [ 701.363615][T16571] loop1: detected capacity change from 0 to 128 [ 701.428332][T16573] loop3: detected capacity change from 0 to 256 [ 701.435504][T16569] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 701.505995][T16569] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 701.542173][T16575] loop0: detected capacity change from 0 to 256 [ 701.787975][T16559] loop2: detected capacity change from 0 to 32768 [ 701.916739][T16577] loop1: detected capacity change from 0 to 128 [ 701.964608][T16579] loop3: detected capacity change from 0 to 128 [ 702.055064][T16581] loop0: detected capacity change from 0 to 256 [ 702.112291][T16583] loop4: detected capacity change from 0 to 128 [ 702.133277][T16584] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 702.780362][T16588] loop2: detected capacity change from 0 to 128 [ 702.793683][T16593] loop4: detected capacity change from 0 to 512 [ 702.813511][T16595] loop1: detected capacity change from 0 to 3 [ 702.815948][T16591] loop3: detected capacity change from 0 to 256 [ 702.849179][T16595] syz.1.4407: attempt to access beyond end of device [ 702.849179][T16595] loop1: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 702.891166][T16595] SQUASHFS error: Failed to read block 0x0: -5 [ 702.924794][T16595] unable to read squashfs_super_block [ 703.072237][ T932] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 703.207597][T16598] loop3: detected capacity change from 0 to 2048 [ 703.279401][T16603] loop2: detected capacity change from 0 to 128 [ 703.298941][ T932] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 703.316510][T16604] loop4: detected capacity change from 0 to 128 [ 703.328721][ T932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.381833][ T932] usb 6-1: config 0 descriptor?? [ 703.402896][T16604] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 703.436567][T16604] vxfs: WRONG superblock magic 7b318cb5 at 8 [ 703.469526][T16604] vxfs: can't find superblock. [ 703.649543][ T932] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 703.670923][ T932] [drm:udl_init] *ERROR* Selecting channel failed [ 703.748221][ T932] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 703.754980][ T932] [drm] Initialized udl on minor 2 [ 703.852711][ T932] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 703.885737][ T932] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 703.944887][ T5833] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 703.964505][ T932] usb 6-1: USB disconnect, device number 122 [ 703.970867][ T5833] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 704.435980][T16594] loop0: detected capacity change from 0 to 32768 [ 704.512654][T16594] XFS (loop0): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 704.596520][T16594] XFS (loop0): Log size 516 blocks too small, minimum size is 636 blocks [ 704.665808][T16594] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 704.679208][T16602] loop1: detected capacity change from 0 to 32768 [ 704.739761][T16594] XFS (loop0): log mount failed [ 705.045266][T16620] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 706.221383][T16624] loop1: detected capacity change from 0 to 2048 [ 706.296206][T10615] loop1: p2 p3 p7 [ 706.395075][T16624] loop1: p2 p3 p7 [ 706.955428][ T6902] udevd[6902]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 706.964200][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 706.968599][T10615] udevd[10615]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 707.119277][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 707.123308][T10615] udevd[10615]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 707.243134][T10615] udevd[10615]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 707.701066][T16622] loop0: detected capacity change from 0 to 65536 [ 707.761900][T16628] loop3: detected capacity change from 0 to 8192 [ 707.795693][T16622] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 707.832970][ T5845] loop3: p1 p2 p3 [ 707.902316][T16622] XFS (loop0): Ending clean mount [ 707.904505][T16628] loop3: p1 p2 p3 [ 708.103423][ T5827] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 708.158673][T16626] loop1: detected capacity change from 0 to 32768 [ 708.261120][T16626] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 708.476262][T16626] XFS (loop1): Ending clean mount [ 708.754736][ T5835] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 708.771341][ T6113] udevd[6113]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 708.793777][ T6902] udevd[6902]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 708.811125][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 708.873478][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 709.161221][T16630] loop2: detected capacity change from 0 to 32768 [ 709.186258][T16651] loop3: detected capacity change from 0 to 32768 [ 709.295474][ T5845] loop3: p9 p11 p16 [ 709.327843][T16630] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 709.630201][T16630] XFS (loop2): Ending clean mount [ 709.861789][ T5830] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 710.734800][T16666] loop1: detected capacity change from 0 to 32768 [ 710.835881][ T6113] loop1: p1 p3 < p5 p6 > [ 711.032386][T16641] loop4: detected capacity change from 0 to 65536 [ 711.045711][T16668] loop2: detected capacity change from 0 to 512 [ 711.146473][T16641] XFS (loop4): Deprecated V4 format (crc=0) not supported by kernel. [ 711.460982][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 711.467496][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 711.733826][T16681] loop2: detected capacity change from 0 to 24 [ 711.765042][T16681] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 711.810857][T16681] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 711.894650][T16681] VFS: Lookup of 'file0' in romfs loop2 would have caused loop [ 712.339561][T16684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 712.653086][T16696] PM: Enabling pm_trace changes system date and time during resume. [ 712.653086][T16696] PM: Correct system time has to be restored manually after resume. [ 712.758425][T16700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4444'. [ 713.268863][T16694] loop1: detected capacity change from 0 to 32768 [ 713.348992][ T5845] loop1: p1 p9 p11 [ 713.398714][T16694] loop1: p1 p9 p11 [ 713.459120][T16714] loop2: detected capacity change from 0 to 512 [ 713.548984][T16714] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 713.556417][T16714] UDF-fs: Scanning with blocksize 512 failed [ 713.617113][T16714] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 713.642682][T16714] UDF-fs: Scanning with blocksize 1024 failed [ 713.687983][T16714] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 713.724127][T16714] UDF-fs: Scanning with blocksize 2048 failed [ 713.779228][T16714] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 713.854004][T16714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 713.953088][T13483] Bluetooth: hci4: unexpected event for opcode 0x040d [ 714.234447][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4459'. [ 714.453142][T16734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4462'. [ 714.577907][ T6902] udevd[6902]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 714.580545][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 714.593007][T10615] udevd[10615]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 714.645066][T16740] Zero length message leads to an empty skb [ 714.777824][T10615] udevd[10615]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 714.804111][ T6902] udevd[6902]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 714.819096][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 714.881977][T16747] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 714.918070][T16748] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 714.921094][T16747] overlayfs: missing 'lowerdir' [ 715.351519][T16767] netlink: 'syz.1.4473': attribute type 4 has an invalid length. [ 715.889694][T16781] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4483'. [ 716.209375][T16794] netlink: 'syz.3.4489': attribute type 21 has an invalid length. [ 717.195626][T16815] loop2: detected capacity change from 0 to 512 [ 717.215115][T16817] loop0: detected capacity change from 0 to 8 [ 717.248985][T16815] EXT4-fs: Ignoring removed mblk_io_submit option [ 717.258190][T16815] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 717.288805][T16821] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 717.288863][T16817] process 'syz.0.4501' launched './file1' with NULL argv: empty string added [ 717.329088][T16817] SQUASHFS error: lzo decompression failed, data probably corrupt [ 717.345588][T16815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 717.361611][T16817] SQUASHFS error: Failed to read block 0x1c0: -5 [ 717.368585][T16815] System zones: 1-12 [ 717.399043][T16815] EXT4-fs error (device loop2): ext4_iget_extra_inode:5074: inode #15: comm syz.2.4500: corrupted in-inode xattr: e_value size too large [ 717.413495][T16817] SQUASHFS error: Unable to read metadata cache entry [1be] [ 717.494221][T16815] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4500: couldn't read orphan inode 15 (err -117) [ 717.592135][T16815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.689876][T16815] cgroup: name respecified [ 717.731420][T16839] loop3: detected capacity change from 0 to 64 [ 717.796834][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.153153][T16843] loop0: detected capacity change from 0 to 4096 [ 718.494854][T16863] netlink: 'syz.3.4524': attribute type 13 has an invalid length. [ 718.509164][T16857] loop4: detected capacity change from 0 to 4096 [ 718.624548][T16868] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 718.774086][T16871] loop2: detected capacity change from 0 to 8 [ 719.098416][T16863] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.106119][T16863] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.428061][T16881] loop0: detected capacity change from 0 to 16 [ 719.660602][T16881] erofs (device loop0): bogus i_mode (0) @ nid 58320 [ 719.713388][T16863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.757463][T16863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.282024][T13572] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.307104][T13572] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.359462][T13572] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.428667][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4541'. [ 720.440754][T13572] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.893397][T16918] loop3: detected capacity change from 0 to 16 [ 720.923344][T16920] xt_recent: Unsupported userspace flags (000000b1) [ 721.103125][T16918] erofs (device loop3): bogus i_mode (0) @ nid 58320 [ 721.253884][T16933] netlink: 'syz.4.4555': attribute type 1 has an invalid length. [ 721.269046][T16932] netlink: 'syz.2.4557': attribute type 1 has an invalid length. [ 721.278673][T16933] netlink: 'syz.4.4555': attribute type 1 has an invalid length. [ 721.299474][T16932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4557'. [ 721.571714][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'. [ 721.727285][ T30] audit: type=1326 audit(1760860168.066:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.3.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adc78eec9 code=0x7ffc0000 [ 721.797845][ T30] audit: type=1326 audit(1760860168.066:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.3.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adc78eec9 code=0x7ffc0000 [ 721.906677][ T30] audit: type=1326 audit(1760860168.084:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.3.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0adc78eec9 code=0x7ffc0000 [ 721.936678][T16952] loop0: detected capacity change from 0 to 512 [ 721.960881][T16954] netlink: 'syz.2.4567': attribute type 1 has an invalid length. [ 721.969941][ T30] audit: type=1326 audit(1760860168.084:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.3.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adc78eec9 code=0x7ffc0000 [ 721.987389][T16952] EXT4-fs: Ignoring removed mblk_io_submit option [ 722.001965][T16954] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4567'. [ 722.020379][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4567'. [ 722.037312][ T30] audit: type=1326 audit(1760860168.084:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.3.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adc78eec9 code=0x7ffc0000 [ 722.094436][T16952] EXT4-fs error (device loop0): ext4_read_inode_bitmap:138: comm syz.0.4566: Invalid inode bitmap blk 4 in block_group 0 [ 722.108948][T16961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.121466][ T30] audit: type=1326 audit(1760860168.431:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16957 comm="syz.1.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed98eec9 code=0x7ffc0000 [ 722.144391][ T30] audit: type=1326 audit(1760860168.431:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16957 comm="syz.1.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed98eec9 code=0x7ffc0000 [ 722.146737][T16952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.169266][T16961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.187958][ T10] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 722.208344][ T30] audit: type=1326 audit(1760860168.505:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16957 comm="syz.1.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f89ed98eec9 code=0x7ffc0000 [ 722.230630][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.239739][ T30] audit: type=1326 audit(1760860168.505:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16957 comm="syz.1.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed98eec9 code=0x7ffc0000 [ 722.360277][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 722.370912][ T30] audit: type=1326 audit(1760860168.505:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16957 comm="syz.1.4569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ed98eec9 code=0x7ffc0000 [ 722.381408][T16952] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 7993 vs 220 free clusters [ 722.454910][T16952] EXT4-fs error (device loop0): ext4_read_inode_bitmap:138: comm syz.0.4566: Invalid inode bitmap blk 4 in block_group 0 [ 722.494188][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.505491][T16965] loop4: detected capacity change from 0 to 128 [ 722.516940][T16952] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 722.528577][ T10] usb 6-1: config 0 descriptor?? [ 722.786112][ T10] usb 6-1: string descriptor 0 read error: -71 [ 722.792420][ T10] ldusb 6-1:0.0: Interrupt in endpoint not found [ 722.846844][ T10] usb 6-1: USB disconnect, device number 123 [ 722.906541][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.183506][T16984] loop1: detected capacity change from 0 to 16 [ 723.192012][T16986] netlink: 'syz.2.4581': attribute type 13 has an invalid length. [ 723.216869][T16984] erofs (device loop1): mounted with root inode @ nid 36. [ 723.295264][T13483] erofs (device loop1): failed to decompress 6887 in[4096, 0] out[9000] [ 723.326085][T16984] erofs (device loop1): failed to decompress 6887 in[4096, 0] out[8192] [ 723.427255][T16984] erofs (device loop1): read error -117 @ 1 of nid 89 [ 723.601224][T16993] loop0: detected capacity change from 0 to 1024 [ 723.657605][T16993] EXT4-fs: Ignoring removed orlov option [ 723.711478][T17000] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4589'. [ 723.723263][T17000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.761448][T16993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.870898][T16997] loop5: detected capacity change from 0 to 2048 [ 723.921828][T16997] NILFS (loop5): invalid segment: Magic number mismatch [ 723.948542][T16997] NILFS (loop5): trying rollback from an earlier position [ 724.017587][T17011] loop2: detected capacity change from 0 to 256 [ 724.037882][T16997] NILFS (loop5): recovery complete [ 724.075398][T17012] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 724.097291][T17011] FAT-fs (loop2): count of clusters too big (178174) [ 724.132645][T17011] FAT-fs (loop2): Can't find a valid FAT filesystem [ 724.300633][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.443001][ T10] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 724.523563][T17023] netlink: 'syz.1.4601': attribute type 2 has an invalid length. [ 724.581704][T17021] XFS (nullb0): Invalid superblock magic number [ 724.670491][ T10] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 724.680580][ T10] usb 3-1: config 0 has no interface number 1 [ 724.686765][ T10] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 724.708763][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 724.734800][ T10] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 724.770775][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 724.801981][ T10] usb 3-1: SerialNumber: syz [ 724.832897][ T10] usb 3-1: config 0 descriptor?? [ 724.891742][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 724.948307][T17040] loop1: detected capacity change from 0 to 16 [ 724.977538][T17042] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 725.103368][ T24] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 725.106546][ T10] uvcvideo 3-1:0.199: Found UVC 0.00 device (0002:0000) [ 725.121741][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.148323][ T24] usb 1-1: Product: syz [ 725.163920][ T10] uvcvideo 3-1:0.199: No valid video chain found. [ 725.164863][ T24] usb 1-1: Manufacturer: syz [ 725.193642][ T10] usb 3-1: USB disconnect, device number 125 [ 725.212595][ T24] usb 1-1: SerialNumber: syz [ 725.227124][T17040] erofs (device loop1): bogus i_mode (0) @ nid 58320 [ 725.248528][ T24] usb 1-1: config 0 descriptor?? [ 725.269200][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 725.431304][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4610'. [ 725.715022][ T24] gspca_sunplus: reg_r err -71 [ 725.720054][ T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 725.741854][ T24] usb 1-1: USB disconnect, device number 5 [ 725.784397][T17058] loop3: detected capacity change from 0 to 1024 [ 726.188110][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4619'. [ 726.649798][T17090] loop0: detected capacity change from 0 to 24 [ 726.694249][T17090] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 726.762017][T17090] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 726.813571][T17092] loop1: detected capacity change from 0 to 16 [ 726.838781][T17085] loop3: detected capacity change from 0 to 8192 [ 726.846142][T17090] romfs: read error for inode 0x70040 [ 726.915175][T17092] erofs (device loop1): mounted with root inode @ nid 36. [ 726.921889][T17098] loop5: detected capacity change from 0 to 2048 [ 727.067859][T17099] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 727.170490][T17098] syz.5.4631: attempt to access beyond end of device [ 727.170490][T17098] loop5: rw=0, sector=19791209300040, nr_sectors = 2 limit=2048 [ 727.226732][T17098] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=1) [ 727.289293][T17101] warning: `syz.2.4634' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 727.441088][T17105] loop4: detected capacity change from 0 to 512 [ 727.600558][T17105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.652489][T17105] ext4 filesystem being mounted at /783/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 727.739138][T17105] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.4633: lblock 23 mapped to illegal pblock 18 (length 1) [ 727.816031][T17105] EXT4-fs (loop4): Remounting filesystem read-only [ 728.087220][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 728.087246][ T30] audit: type=1326 audit(1760860174.015:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17127 comm="syz.2.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc04d8eec9 code=0x7ffc0000 [ 728.122465][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.251969][ T30] audit: type=1326 audit(1760860174.015:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17127 comm="syz.2.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc04d8eec9 code=0x7ffc0000 [ 728.368706][ T30] audit: type=1326 audit(1760860174.080:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17127 comm="syz.2.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fdc04d8eec9 code=0x7ffc0000 [ 728.452717][T17138] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 728.484204][ T30] audit: type=1326 audit(1760860174.080:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17127 comm="syz.2.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc04d8eec9 code=0x7ffc0000 [ 728.569317][ T30] audit: type=1326 audit(1760860174.080:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17127 comm="syz.2.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc04d8eec9 code=0x7ffc0000 [ 728.792260][T17140] bond1: option lp_interval: invalid value (18446744073709551614) [ 728.844691][T17140] bond1: option lp_interval: allowed values 1 - 2147483647 [ 728.904228][T17140] bond1 (unregistering): Released all slaves [ 729.001829][T17153] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4656'. [ 730.107075][T17189] netlink: 'syz.3.4674': attribute type 6 has an invalid length. [ 730.223316][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4676'. [ 730.365386][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4679'. [ 730.369140][T17199] loop0: detected capacity change from 0 to 16 [ 730.441005][T17199] erofs (device loop0): mounted with root inode @ nid 36. [ 730.507104][T13483] erofs (device loop0): failed to decompress 6887 in[4096, 0] out[9000] [ 730.519734][T17199] erofs (device loop0): failed to decompress 6887 in[4096, 0] out[8192] [ 730.568603][T17199] erofs (device loop0): read error -117 @ 1 of nid 89 [ 730.601107][ T30] audit: type=1800 audit(1760860176.372:31): pid=17199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4678" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 730.741878][T17209] loop2: detected capacity change from 0 to 1024 [ 730.757130][T17209] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 730.827238][T17209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.957277][T17209] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.4687: missing EA_INODE flag [ 731.052941][T17209] EXT4-fs (loop2): Remounting filesystem read-only [ 731.103446][T17209] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 731.185874][T17224] loop0: detected capacity change from 0 to 1764 [ 731.225686][T17227] loop4: detected capacity change from 0 to 512 [ 731.284632][T17227] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 731.305656][T17224] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 731.338934][T17227] EXT4-fs (loop4): 1 truncate cleaned up [ 731.385539][T17227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.389613][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.509169][ T10] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 731.564116][T17227] EXT4-fs error (device loop4): ext4_generic_delete_entry:2667: inode #2: block 13: comm syz.4.4691: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 731.659590][T17227] EXT4-fs (loop4): Remounting filesystem read-only [ 731.666253][T17227] EXT4-fs warning (device loop4): ext4_rename_delete:3729: inode #2: comm syz.4.4691: Deleting old file: nlink 4, error=-117 [ 731.724105][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 731.773177][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 731.834002][ T10] usb 2-1: string descriptor 0 read error: -22 [ 731.846428][ T10] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 731.865452][T17242] tmpfs: Unknown parameter 'no' [ 731.892985][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.904817][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.197082][ T10] asix 2-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 732.271966][T17253] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 732.410586][ T10] asix 2-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 732.456772][ T10] asix 2-1:7.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 732.501438][ T10] asix 2-1:7.0: probe with driver asix failed with error -71 [ 732.555684][ T10] usb 2-1: USB disconnect, device number 124 [ 732.564978][T17262] loop3: detected capacity change from 0 to 16 [ 732.605212][T17262] erofs (device loop3): mounted with root inode @ nid 36. [ 732.636837][T17262] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 732.643591][T17266] loop5: detected capacity change from 0 to 512 [ 732.687478][T17262] erofs (device loop3): read error -117 @ 43 of nid 36 [ 732.759279][T17266] EXT4-fs (loop5): orphan cleanup on readonly fs [ 732.808384][T17266] EXT4-fs error (device loop5): ext4_quota_enable:7136: inode #15: comm syz.5.4707: iget: bad i_size value: 360287970189639690 [ 732.905722][T17266] EXT4-fs error (device loop5): ext4_quota_enable:7138: comm syz.5.4707: Bad quota inode: 15, type: 2 [ 732.984519][T17266] EXT4-fs warning (device loop5): ext4_enable_quotas:7176: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 733.061057][T17266] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 733.082917][T17266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 733.219714][T17266] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 733.261752][T17266] EXT4-fs warning (device loop5): read_mmp_block:114: Error -117 while reading MMP block 2 [ 733.341094][ T30] audit: type=1107 audit(1760860178.907:32): pid=17280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 733.596026][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.966057][T17300] openvswitch: netlink: Tunnel attr 286 out of range max 16 [ 734.422403][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4728'. [ 734.748068][T17325] bond0: (slave bond_slave_1): Releasing backup interface [ 734.773764][T17277] loop3: detected capacity change from 0 to 32768 [ 734.851937][T17277] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4712 (17277) [ 734.986309][T17277] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 735.057080][T17277] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 735.223027][T17347] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4737'. [ 735.294734][T17347] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4737'. [ 735.385496][T17277] BTRFS info (device loop3): enabling ssd optimizations [ 735.443295][T17277] BTRFS info (device loop3): enabling free space tree [ 735.807163][ T5836] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 736.032352][T17316] loop4: detected capacity change from 0 to 32768 [ 736.059279][T17316] BTRFS info: device /dev/loop4 (7:4) using temp-fsid eee1557f-afe3-4b25-8500-21dc1505139c [ 736.114960][T17316] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4729 (17316) [ 736.220096][T17316] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 736.285513][T17316] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 736.400637][T17384] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 736.698488][T17316] BTRFS info (device loop4): enabling ssd optimizations [ 736.779839][T17316] BTRFS info (device loop4): enabling free space tree [ 737.239676][ T5828] BTRFS info (device loop4): last unmount of filesystem eee1557f-afe3-4b25-8500-21dc1505139c [ 737.687578][T17423] netlink: 'syz.1.4761': attribute type 5 has an invalid length. [ 737.741905][T17423] netlink: 'syz.1.4761': attribute type 6 has an invalid length. [ 737.751196][T17369] loop0: detected capacity change from 0 to 32768 [ 737.796963][T17423] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4761'. [ 737.827058][T17369] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4744 (17369) [ 737.854249][T17426] QAT: Device 7 not found [ 737.927764][T17369] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 737.989962][T17369] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 738.105771][T17432] Device name not specified. [ 738.105771][T17432] [ 738.356516][T17369] BTRFS info (device loop0): enabling ssd optimizations [ 738.383294][T17369] BTRFS info (device loop0): enabling free space tree [ 738.401743][T17455] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 738.800618][ T5827] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 739.730821][ T30] audit: type=1326 audit(1760860184.894:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17492 comm="syz.5.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd738eec9 code=0x7ffc0000 [ 739.879171][ T30] audit: type=1326 audit(1760860184.894:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17492 comm="syz.5.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd738eec9 code=0x7ffc0000 [ 740.005256][ T30] audit: type=1326 audit(1760860184.903:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17492 comm="syz.5.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f7dd738eec9 code=0x7ffc0000 [ 740.100642][ T30] audit: type=1326 audit(1760860184.903:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17492 comm="syz.5.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd738eec9 code=0x7ffc0000 [ 740.197269][ T30] audit: type=1326 audit(1760860184.903:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17492 comm="syz.5.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd738eec9 code=0x7ffc0000 [ 740.392475][T17506] bond1: option lp_interval: invalid value (18446744073709551614) [ 740.407360][T17514] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.4791' sets config #0 [ 740.449330][T17506] bond1: option lp_interval: allowed values 1 - 2147483647 [ 740.503694][T17506] bond1 (unregistering): Released all slaves [ 740.524887][T17518] netlink: 'syz.4.4794': attribute type 2 has an invalid length. [ 740.599914][T17509] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4790'. [ 741.082820][T17534] loop0: detected capacity change from 0 to 16 [ 741.094244][ T5833] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 741.102931][T17534] erofs (device loop0): mounted with root inode @ nid 36. [ 741.170531][T17529] loop3: detected capacity change from 0 to 8192 [ 741.321404][ T5833] usb 5-1: unable to get BOS descriptor or descriptor too short [ 741.334372][ T5833] usb 5-1: not running at top speed; connect to a high speed hub [ 741.370301][ T5833] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 741.381586][ T5833] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 741.413697][T17539] netlink: 'syz.2.4805': attribute type 13 has an invalid length. [ 741.424394][ T5833] usb 5-1: config 4 has no interface number 0 [ 741.442011][ T5833] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 741.460488][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.473202][ T5833] usb 5-1: Product: syz [ 741.477411][ T5833] usb 5-1: Manufacturer: syz [ 741.482148][ T5833] usb 5-1: SerialNumber: syz [ 741.701655][T17539] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.709203][T17539] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.756393][ T5833] uvcvideo 5-1:4.147: Found multiple Units with ID 6 [ 741.763690][ T5833] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 741.778277][ T5833] uvcvideo 5-1:4.147: No valid video chain found. [ 741.798352][ T5833] usb 5-1: USB disconnect, device number 126 [ 741.935804][T13483] Bluetooth: hci5: unexpected event for opcode 0x0c7b [ 741.983706][T17539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.006725][T17539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.362370][T17554] bond0: (slave bond_slave_1): Releasing backup interface [ 742.394330][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.432232][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.456975][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.513823][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.635607][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4817'. [ 742.672773][T17566] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 742.774257][T17570] loop3: detected capacity change from 0 to 1024 [ 742.948493][T17576] nbd: illegal input index -2146435068 [ 743.624760][T17596] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 743.674033][T17598] netlink: 'syz.1.4831': attribute type 13 has an invalid length. [ 743.740401][T17560] loop0: detected capacity change from 0 to 32768 [ 743.790252][T17560] [ 743.790252][T17560] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 743.790252][T17560] [ 743.839344][T17560] ERROR: (device loop0): diWrite: ixpxd invalid [ 743.839344][T17560] [ 743.903668][T17560] ERROR: (device loop0): txAbort: [ 743.903668][T17560] [ 744.091871][ T5827] [ 744.091871][ T5827] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 744.091871][ T5827] [ 744.143832][ T5827] [ 744.143832][ T5827] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 744.143832][ T5827] [ 744.158220][T17598] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.165642][T17598] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.284634][T17614] ipt_REJECT: TCP_RESET invalid for non-tcp [ 744.501287][T17618] loop3: detected capacity change from 0 to 64 [ 744.774585][T17598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.863192][T17598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.374530][T17638] loop5: detected capacity change from 0 to 4096 [ 745.433255][T17645] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 745.518764][T17638] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 745.574476][T17638] Remounting filesystem read-only [ 745.620975][T17644] loop2: detected capacity change from 0 to 4096 [ 745.648115][T17644] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 745.788157][T17644] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 745.853887][T17644] ntfs3(loop2): ino=19, mi_enum_attr [ 745.895412][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.941659][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.951408][T17644] ntfs3(loop2): failed to convert "c46c" to cp437 [ 746.020110][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.021161][T17644] ntfs3(loop2): ino=20, mi_enum_attr [ 746.080488][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.262363][T13483] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 746.272669][T13483] Bluetooth: hci5: Injecting HCI hardware error event [ 746.284381][T13482] Bluetooth: hci5: hardware error 0x00 [ 746.747025][T17682] netlink: 'syz.5.4873': attribute type 4 has an invalid length. [ 746.787040][ T932] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 746.954347][T17688] netlink: 'syz.4.4876': attribute type 13 has an invalid length. [ 746.986652][ T932] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 747.028458][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.082203][ T932] usb 2-1: Product: syz [ 747.101143][ T932] usb 2-1: Manufacturer: syz [ 747.114937][ T932] usb 2-1: SerialNumber: syz [ 747.154274][ T932] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 747.247642][ T5833] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 747.258995][T17688] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.266406][T17688] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.310516][ T24] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 747.370111][T17694] loop0: detected capacity change from 0 to 8192 [ 747.396708][T17694] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 747.485097][ T24] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 747.507590][ T24] usb 6-1: config 0 has no interface number 0 [ 747.530660][ T24] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 747.572528][ T24] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.625438][ T24] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 747.646895][T17688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.652021][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.674879][ T24] usb 6-1: Product: syz [ 747.689068][ T24] usb 6-1: Manufacturer: syz [ 747.705943][ T24] usb 6-1: SerialNumber: syz [ 747.709762][T17688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.730563][ T24] usb 6-1: config 0 descriptor?? [ 747.747041][T17692] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 747.771742][ T5966] usb 2-1: USB disconnect, device number 125 [ 747.789893][ T24] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 747.819445][ T24] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 747.943689][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 748.138358][ T10] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 748.172256][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 748.176811][ T4533] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.194431][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 748.217474][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 748.241374][ T4533] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.251015][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.272268][ T4533] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.274198][T17696] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 748.295588][ T4533] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.306290][ T932] usb 6-1: USB disconnect, device number 124 [ 748.334504][T17698] loop2: detected capacity change from 0 to 2048 [ 748.362842][ T932] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 748.399864][T17698] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 748.425436][ T932] cyberjack 6-1:0.69: device disconnected [ 748.485878][T13482] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 748.658198][ T5833] usb 2-1: Service connection timeout for: 256 [ 748.692872][ T5833] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 748.730750][ T5833] ath9k_htc: Failed to initialize the device [ 748.784335][ T10] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 748.806700][ T5966] usb 2-1: ath9k_htc: USB layer deinitialized [ 748.851197][ T10] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input53 [ 748.967074][ T10] usb 1-1: USB disconnect, device number 6 [ 748.967151][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 749.028780][T17712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4888'. [ 749.141782][T17712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4888'. [ 749.274961][T17720] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4892'. [ 749.512298][ T5925] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 749.569940][ T30] audit: type=1326 audit(1760860194.117:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.5.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd738eec9 code=0x7ffc0000 [ 749.646918][ T30] audit: type=1326 audit(1760860194.117:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.5.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd738eec9 code=0x7ffc0000 [ 749.697687][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.726034][ T5925] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 749.745845][T17727] loop4: detected capacity change from 0 to 8192 [ 749.756823][T17733] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 749.779487][ T30] audit: type=1326 audit(1760860194.173:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.5.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f7dd738eec9 code=0x7ffc0000 [ 749.817319][ T5925] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 749.826966][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.863430][ T5925] usb 3-1: config 0 descriptor?? [ 749.963667][ T30] audit: type=1326 audit(1760860194.463:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.5.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dd738eec9 code=0x7ffc0000 [ 750.239211][T17746] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4905'. [ 750.291932][T17747] netlink: 'syz.4.4903': attribute type 1 has an invalid length. [ 750.324721][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4903'. [ 750.371934][ T5925] Bluetooth: Can't get state to change to load configuration err [ 750.410518][ T5925] Bluetooth: Loading sysconfig file failed [ 750.416723][ T5925] ath3k 3-1:0.0: probe with driver ath3k failed with error -16 [ 750.456709][ T5925] usb 3-1: USB disconnect, device number 126 [ 752.100655][T17811] loop3: detected capacity change from 0 to 16 [ 752.122005][T17811] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 752.169332][T17811] cramfs: Error -3 while decompressing! [ 752.184890][T17811] cramfs: ffffffff9ac0d7a8(27)->ffff88808d54f000(4096) [ 752.206251][T17811] cramfs: Error -3 while decompressing! [ 752.211851][T17811] cramfs: ffffffff9ac0d7c3(16)->ffff88804f962000(4096) [ 752.249100][T17811] cramfs: Error -3 while decompressing! [ 752.263159][T17811] cramfs: ffffffff9ac0d7a8(27)->ffff88808d54f000(4096) [ 752.277893][T17769] loop4: detected capacity change from 0 to 32768 [ 752.306368][T17769] (syz.4.4916,17769,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 752.333736][ T30] audit: type=1800 audit(1760860196.680:42): pid=17811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4937" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 752.334589][ T24] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 752.382061][T17769] (syz.4.4916,17769,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 752.403467][T17815] loop2: detected capacity change from 0 to 64 [ 752.453591][T17817] netlink: 'syz.0.4939': attribute type 13 has an invalid length. [ 752.488600][T17769] (syz.4.4916,17769,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0x9310c58c. Applying ECC. [ 752.536103][T17820] loop5: detected capacity change from 0 to 512 [ 752.545750][T17769] (syz.4.4916,17769,1):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0xcfdff595, computed 0x391b0aa9 [ 752.584742][T17769] (syz.4.4916,17769,0):ocfs2_validate_inode_block:1457 ERROR: Checksum failed for dinode 27 [ 752.623122][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 752.638845][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 752.643292][T17769] (syz.4.4916,17769,0):ocfs2_read_locked_inode:597 ERROR: status = -5 [ 752.665939][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.684943][T17769] (syz.4.4916,17769,0):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 752.702254][ T24] usb 2-1: Product: syz [ 752.706452][ T24] usb 2-1: Manufacturer: syz [ 752.724606][T17769] (syz.4.4916,17769,0):ocfs2_init_local_system_inodes:495 ERROR: status=-22, sysfile=8, slot=0 [ 752.762495][ T24] usb 2-1: SerialNumber: syz [ 752.768037][T17820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.781069][T17769] (syz.4.4916,17769,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22 [ 752.833176][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 752.846362][T17820] ext4 filesystem being mounted at /822/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.862711][T17769] (syz.4.4916,17769,0):ocfs2_mount_volume:1758 ERROR: status = -22 [ 752.882512][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 752.892722][T17817] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.900118][T17817] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.919091][T17769] (syz.4.4916,17769,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 752.947114][T17820] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 753.009245][T17820] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 753.059344][T17820] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.4941: Failed to acquire dquot type 0 [ 753.245034][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.392686][ T43] r8152-cfgselector 2-1: USB disconnect, device number 126 [ 753.421137][T17817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.488008][T17817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.499409][T17835] loop3: detected capacity change from 0 to 1024 [ 753.716892][ T50] hfsplus: b-tree write err: -5, ino 4 [ 754.229630][T17829] netlink: 'syz.2.4944': attribute type 4 has an invalid length. [ 754.269997][ T4533] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.285716][T17855] loop3: detected capacity change from 0 to 2048 [ 754.292147][ T4533] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.292216][ T4533] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.369632][ T4533] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.470492][T17855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.492245][T17860] loop5: detected capacity change from 0 to 512 [ 754.499867][T17860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 754.559329][T17860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.633341][T17855] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.4956: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 754.717925][T17860] ext4 filesystem being mounted at /828/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 754.868174][ T5924] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 754.934561][T17860] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 754.954016][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.970743][T17860] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 755.000493][T17860] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.4958: Failed to acquire dquot type 1 [ 755.063418][ T5924] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 755.103500][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.117783][ T5924] usb 3-1: config 0 has no interface number 0 [ 755.123923][ T5924] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 755.198639][ T5924] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 755.231654][ T5924] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 755.266325][ T5924] usb 3-1: config 0 interface 52 has no altsetting 0 [ 755.287554][ T5924] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 755.303197][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.327841][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 755.336117][ T5924] usb 3-1: Product: syz [ 755.360049][ T5924] usb 3-1: SerialNumber: syz [ 755.393584][ T5924] usb 3-1: config 0 descriptor?? [ 755.601397][T17892] program syz.5.4967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 755.635102][ T5924] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 755.669129][ T5924] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -5 [ 755.756988][T17897] binder: 17896:17897 ioctl c0046209 0 returned -22 [ 755.785089][T17852] loop4: detected capacity change from 0 to 32768 [ 755.852336][T17852] jfs_strtoUCS: char2uni returned -22. [ 755.862490][T17852] charset = iso8859-3, char = 0xbe [ 755.925606][ T5924] usb 3-1: USB disconnect, device number 127 [ 756.254717][T17914] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4976'. [ 756.320826][T17907] loop1: detected capacity change from 0 to 4096 [ 756.361702][T17907] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 756.623873][T17907] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 756.643922][T17907] ntfs3(loop1): ino=19, mi_enum_attr [ 756.782068][T17907] ntfs3(loop1): failed to convert "c46c" to cp437 [ 756.845115][T17907] ntfs3(loop1): ino=20, mi_enum_attr [ 756.880898][T17917] loop0: detected capacity change from 0 to 4096 [ 756.999353][T17926] loop2: detected capacity change from 0 to 2048 [ 757.096192][T17926] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 757.132634][T17917] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 757.415616][T17935] loop5: detected capacity change from 0 to 128 [ 757.432152][ T5827] ntfs3(loop0): ino=9, ntfs_sync_fs failed, -22. [ 757.468740][T17905] loop3: detected capacity change from 0 to 32768 [ 757.509650][T17935] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 757.568008][T17935] EXT4-fs (loop5): Encoding requested by superblock is unknown [ 757.657693][T17935] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 758.205969][T17953] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4996'. [ 758.395731][T17957] loop0: detected capacity change from 0 to 256 [ 758.399160][T17956] loop4: detected capacity change from 0 to 512 [ 758.429222][T17957] exfat: Deprecated parameter 'namecase' [ 758.478195][T17956] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 3: comm syz.4.4998: lblock 0 mapped to illegal pblock 3 (length 1) [ 758.524205][T17957] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 758.553730][T17956] EXT4-fs (loop4): Remounting filesystem read-only [ 758.620617][T17956] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.4998: error -117 reading directory block [ 758.712310][T17956] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 758.783329][T17956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.885087][T17965] Cannot find set identified by id 0 to match [ 759.001687][T17939] loop1: detected capacity change from 0 to 32768 [ 759.010696][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.111392][T17939] [ 759.111392][T17939] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 759.111392][T17939] [ 759.181320][T17939] ERROR: (device loop1): diWrite: ixpxd invalid [ 759.181320][T17939] [ 759.226361][T17939] ERROR: (device loop1): txAbort: [ 759.226361][T17939] [ 759.458460][ T5835] [ 759.458460][ T5835] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 759.458460][ T5835] [ 759.478982][ T5835] [ 759.478982][ T5835] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 759.478982][ T5835] [ 760.054313][T17996] loop5: detected capacity change from 0 to 512 [ 760.110239][T17996] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.5.5014: corrupted xattr block 95: invalid header [ 760.277060][T17996] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.5014: bg 0: block 7: invalid block bitmap [ 760.316460][T17996] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 760.370959][T17996] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #11: comm syz.5.5014: corrupted xattr block 95: invalid header [ 760.427955][T17996] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 760.437240][T17996] EXT4-fs (loop5): 1 orphan inode deleted [ 760.489758][T18006] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 760.521605][T17996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.591964][T18006] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 760.654145][T17990] loop2: detected capacity change from 0 to 32768 [ 760.676259][T17990] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5012 (17990) [ 760.777691][T17990] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 760.857419][T17990] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 760.879828][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.182690][T17990] BTRFS info (device loop2): enabling ssd optimizations [ 761.263803][T17990] BTRFS info (device loop2): enabling free space tree [ 761.609229][T18053] loop4: detected capacity change from 0 to 47 [ 761.705438][T18047] bond1: option lp_interval: invalid value (18446744073709551614) [ 761.718726][T18047] bond1: option lp_interval: allowed values 1 - 2147483647 [ 761.736037][ T5830] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 761.765611][T18047] bond1 (unregistering): Released all slaves [ 762.593906][T18076] loop4: detected capacity change from 0 to 1024 [ 762.704742][T18079] bond0: entered promiscuous mode [ 762.766760][T18079] bond_slave_0: entered promiscuous mode [ 762.810324][ T2904] hfsplus: b-tree write err: -5, ino 4 [ 762.833037][T18079] bond_slave_1: entered promiscuous mode [ 762.838924][T18079] bond0: entered allmulticast mode [ 762.860485][T18079] bond_slave_0: entered allmulticast mode [ 762.907641][T18079] bond_slave_1: entered allmulticast mode [ 762.962741][T18079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.906328][T18108] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 763.966705][T18111] loop0: detected capacity change from 0 to 512 [ 763.970295][ T30] audit: type=1326 audit(1760860207.586:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18110 comm="syz.2.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc04d8eec9 code=0x7ffc0000 [ 764.063305][ T30] audit: type=1326 audit(1760860207.614:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18110 comm="syz.2.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc04d8eec9 code=0x7ffc0000 [ 764.089306][ T30] audit: type=1326 audit(1760860207.624:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18110 comm="syz.2.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fdc04d8eec9 code=0x7ffc0000 [ 764.112690][ T30] audit: type=1326 audit(1760860207.624:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18110 comm="syz.2.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc04d8eec9 code=0x7ffc0000 [ 764.116795][T18066] loop1: detected capacity change from 0 to 32768 [ 764.135553][ T30] audit: type=1326 audit(1760860207.624:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18110 comm="syz.2.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc04d8eec9 code=0x7ffc0000 [ 764.174598][T18111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.200692][T18066] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 764.222636][T18111] ext4 filesystem being mounted at /858/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.307096][T18066] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 764.371811][T18066] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 764.389859][T18111] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 764.422255][T18111] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 764.497813][T18111] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.5059: Failed to acquire dquot type 0 [ 764.682763][T18066] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 764.722178][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.757984][T18133] netlink: 'syz.4.5070': attribute type 1 has an invalid length. [ 764.800362][T18133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5070'. [ 765.441806][T18147] loop2: detected capacity change from 0 to 4096 [ 765.924928][T18159] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 766.390593][T18178] siw: device registration error -23 [ 766.617424][ T5925] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 766.670339][T18188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5098'. [ 766.696836][T18186] IPv6: NLM_F_CREATE should be specified when creating new route [ 766.711607][T18188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5098'. [ 766.781973][T18192] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5095'. [ 766.798051][T18193] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.5099'. [ 766.826946][ T5925] usb 6-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 766.857081][T18193] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 766.863316][ T5925] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 766.904926][ T5925] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 766.933059][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0 [ 766.959567][ T5925] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 766.973362][T18197] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 766.979567][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.991383][ T5925] usb 6-1: Product: syz [ 766.995575][ T5925] usb 6-1: Manufacturer: syz [ 767.032429][ T5925] usb 6-1: SerialNumber: syz [ 767.057748][ T5925] usb 6-1: config 0 descriptor?? [ 767.169967][T18198] loop4: detected capacity change from 0 to 4096 [ 767.291562][T18198] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 767.316185][ T5925] usbtest 6-1:0.0: Linux user mode ISO test driver [ 767.333675][ T5925] usbtest 6-1:0.0: high-speed {control iso-in} tests (+alt) [ 767.502433][ T5828] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22. [ 767.568774][ T5924] usb 6-1: USB disconnect, device number 125 [ 767.581740][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5120'. [ 767.600824][T18213] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.5107'. [ 767.673966][T18213] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 767.792893][T18219] siw: device registration error -23 [ 768.239385][T18231] loop2: detected capacity change from 0 to 736 [ 768.391803][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 768.467256][T18231] Symlink component flag not implemented [ 768.473197][T18231] Symlink component flag not implemented (122) [ 768.557623][T18239] loop1: detected capacity change from 0 to 1024 [ 768.594891][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 768.628347][T18239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.646155][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 768.670092][ T24] usb 1-1: config 8 has an invalid interface number: 61 but max is 2 [ 768.678948][ T24] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 768.692978][ T24] usb 1-1: config 8 has no interface number 0 [ 768.699101][ T24] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 768.710803][ T24] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.721894][T18243] loop5: detected capacity change from 0 to 2048 [ 768.741027][ T24] usb 1-1: config 8 interface 61 has no altsetting 0 [ 768.756381][ T24] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 768.765503][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.787319][ T24] usb 1-1: Product: syz [ 768.791543][ T24] usb 1-1: Manufacturer: syz [ 768.796163][ T24] usb 1-1: SerialNumber: syz [ 768.877555][T18243] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 768.905120][T18243] UDF-fs: Scanning with blocksize 512 failed [ 768.974526][T18243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 768.998393][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.064414][ T24] bfusb 1-1:8.61: probe with driver bfusb failed with error -5 [ 769.174983][ T24] usb 1-1: USB disconnect, device number 7 [ 769.269875][T18256] loop1: detected capacity change from 0 to 16 [ 769.333694][T18256] erofs (device loop1): mounted with root inode @ nid 36. [ 769.920670][ T43] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 770.079172][T18252] loop4: detected capacity change from 0 to 32768 [ 770.091605][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 770.111852][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 770.129847][T18252] (syz.4.5128,18252,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 770.154232][ T43] usb 6-1: config 7 has an invalid interface number: 128 but max is 0 [ 770.176360][T18252] (syz.4.5128,18252,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 770.180008][ T43] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 770.259136][T18252] JBD2: Ignoring recovery information on journal [ 770.278463][ T43] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 770.343079][ T43] usb 6-1: config 7 has no interface number 0 [ 770.369872][ T43] usb 6-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 770.405284][T18252] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 770.412352][ T43] usb 6-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 770.433733][ T43] usb 6-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 770.487146][ T43] usb 6-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 770.528675][ T43] usb 6-1: config 7 interface 128 has no altsetting 0 [ 770.587800][ T43] usb 6-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 770.610729][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.638591][ T43] usb 6-1: Product: syz [ 770.642811][ T43] usb 6-1: Manufacturer: syz [ 770.664584][ T43] usb 6-1: SerialNumber: syz [ 770.703613][T18260] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 770.809044][ T5828] ocfs2: Unmounting device (7,4) on (node local) [ 771.002398][ T43] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 771.046575][ T43] usb 6-1: MIDIStreaming interface descriptor not found [ 771.126631][T18264] loop1: detected capacity change from 0 to 32768 [ 771.162732][T18264] jfs_strtoUCS: char2uni returned -22. [ 771.185753][T18264] charset = cp932, char = 0xfc [ 771.203753][ T43] usb 6-1: USB disconnect, device number 126 [ 771.857739][T18306] loop2: detected capacity change from 0 to 2048 [ 771.973047][T18306] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 772.948746][T18341] loop0: detected capacity change from 0 to 64 [ 773.085045][T18312] loop5: detected capacity change from 0 to 32768 [ 773.116923][T18312] JBD2: Ignoring recovery information on journal [ 773.117282][T18343] loop3: detected capacity change from 0 to 2048 [ 773.204476][T18343] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 773.331258][T18312] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 773.351782][T18354] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 773.396567][T18357] loop4: detected capacity change from 0 to 64 [ 773.520824][T18357] Trying to free block not in datazone [ 773.776904][T18367] netlink: 1372 bytes leftover after parsing attributes in process `syz.1.5184'. [ 773.912901][ T5831] ocfs2: Unmounting device (7,5) on (node local) [ 774.107698][T18380] loop3: detected capacity change from 0 to 128 [ 774.244490][T18380] FAT-fs (loop3): Directory bread(block 162) failed [ 774.304823][T18380] FAT-fs (loop3): Directory bread(block 163) failed [ 774.352711][T18380] FAT-fs (loop3): Directory bread(block 164) failed [ 774.432168][T18380] FAT-fs (loop3): Directory bread(block 165) failed [ 774.462605][T18388] loop5: detected capacity change from 0 to 16 [ 774.474899][T18380] FAT-fs (loop3): Directory bread(block 166) failed [ 774.514061][T18380] FAT-fs (loop3): Directory bread(block 167) failed [ 774.560666][T18380] FAT-fs (loop3): Directory bread(block 168) failed [ 774.569382][T18380] FAT-fs (loop3): Directory bread(block 169) failed [ 774.578209][T18388] erofs (device loop5): mounted with root inode @ nid 36. [ 774.675552][T18380] FAT-fs (loop3): Directory bread(block 162) failed [ 774.707756][T18380] FAT-fs (loop3): Directory bread(block 163) failed [ 774.719773][T18380] syz.3.5188: attempt to access beyond end of device [ 774.719773][T18380] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 774.789168][T18380] syz.3.5188: attempt to access beyond end of device [ 774.789168][T18380] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 774.898052][T18399] geneve2: entered allmulticast mode [ 774.955965][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.964754][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.028355][T18401] loop4: detected capacity change from 0 to 736 [ 775.033778][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.076020][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.395369][ T5925] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 775.450497][T18401] Symlink component flag not implemented [ 775.483639][T18401] Symlink component flag not implemented (122) [ 775.601708][T18416] netlink: 'syz.3.5205': attribute type 11 has an invalid length. [ 775.609953][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 775.623276][ T5925] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 775.651960][ T5925] usb 3-1: config 0 has no interface number 0 [ 775.684734][ T5925] usb 3-1: too many endpoints for config 0 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 775.736318][ T5925] usb 3-1: config 0 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 775.750436][T18419] netlink: 'syz.5.5206': attribute type 1 has an invalid length. [ 775.800407][ T5925] usb 3-1: config 0 interface 1 has no altsetting 0 [ 775.823533][ T5925] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 775.885887][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.916596][ T5925] usb 3-1: config 0 descriptor?? [ 775.922804][T18423] netlink: 'syz.0.5208': attribute type 10 has an invalid length. [ 775.949377][T18423] macvlan0: entered promiscuous mode [ 775.967145][T18423] macvlan0: entered allmulticast mode [ 775.974178][T18423] veth1_vlan: entered allmulticast mode [ 776.015463][T18423] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 776.081300][T18429] openvswitch: netlink: Missing key (keys=40, expected=100) [ 776.166289][ T5925] usb 3-1: Could not set interface, error -71 [ 776.239799][ T5925] usb 3-1: string descriptor 0 read error: -71 [ 776.264677][ T5925] usb 3-1: selecting invalid altsetting 0 [ 776.283128][T18433] netlink: 'syz.4.5213': attribute type 19 has an invalid length. [ 776.294438][T18404] loop1: detected capacity change from 0 to 32768 [ 776.302747][ T5925] usb 3-1: Could not set interface, error -22 [ 776.303559][ T24] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 776.322916][ T5925] usb 3-1: USB disconnect, device number 2 [ 776.337313][T18404] (syz.1.5198,18404,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 776.363018][T18404] (syz.1.5198,18404,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 776.511175][ T24] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 776.520796][T18404] JBD2: Ignoring recovery information on journal [ 776.531505][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.544281][ T24] usb 6-1: Product: syz [ 776.548479][ T24] usb 6-1: Manufacturer: syz [ 776.553525][ T24] usb 6-1: SerialNumber: syz [ 776.565548][ T24] usb 6-1: config 0 descriptor?? [ 776.670344][T18404] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 776.816971][ T24] int51x1 6-1:0.0: probe with driver int51x1 failed with error -22 [ 776.895381][T18445] loop0: detected capacity change from 0 to 64 [ 777.008827][T18449] netlink: 45 bytes leftover after parsing attributes in process `syz.3.5220'. [ 777.040975][ T5835] ocfs2: Unmounting device (7,1) on (node local) [ 777.100234][ T24] usb 6-1: USB disconnect, device number 127 [ 777.144151][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.154999][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.217881][T18453] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5225'. [ 777.461314][T18462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.932924][T18476] loop2: detected capacity change from 0 to 128 [ 777.942068][T18476] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 777.955142][T18476] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 777.974796][T18476] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 777.987629][T18476] UDF-fs: error (device loop2): udf_count_free_bitmap: udf_count_free failed [ 778.236816][T18484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5236'. [ 778.499346][T18494] dlm: plock device version mismatch: kernel (1.2.0), user (1.45.0) [ 778.738905][T18502] loop1: detected capacity change from 0 to 256 [ 778.829197][T18502] FAT-fs (loop1): Directory bread(block 64) failed [ 778.835842][T18502] FAT-fs (loop1): Directory bread(block 65) failed [ 778.868695][T18502] FAT-fs (loop1): Directory bread(block 66) failed [ 778.875274][T18502] FAT-fs (loop1): Directory bread(block 67) failed [ 778.955012][T18502] FAT-fs (loop1): Directory bread(block 68) failed [ 778.976049][T18502] FAT-fs (loop1): Directory bread(block 69) failed [ 778.982745][T18502] FAT-fs (loop1): Directory bread(block 70) failed [ 778.997466][T18510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 779.051968][T18502] FAT-fs (loop1): Directory bread(block 71) failed [ 779.058666][T18502] FAT-fs (loop1): Directory bread(block 72) failed [ 779.114735][T18502] FAT-fs (loop1): Directory bread(block 73) failed [ 779.353172][ T30] audit: type=1800 audit(1760860221.964:48): pid=18502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5245" name="file1" dev="loop1" ino=1048632 res=0 errno=0 [ 779.579617][T18526] loop3: detected capacity change from 0 to 512 [ 779.685675][T18526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.731873][T18534] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5259'. [ 779.743951][T18526] ext4 filesystem being mounted at /892/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.820096][T18534] openvswitch: netlink: Message has 512 unknown bytes. [ 780.052696][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.293621][T18514] loop5: detected capacity change from 0 to 32768 [ 780.382693][T18514] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 780.413363][T18560] delete_channel: no stack [ 780.442608][T18564] loop4: detected capacity change from 0 to 22 [ 780.460992][T18564] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 780.483125][T18564] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 780.532182][T18514] XFS (loop5): Ending clean mount [ 780.597551][T18514] XFS (loop5): Quotacheck needed: Please wait. [ 780.732452][T18514] XFS (loop5): Quotacheck: Done. [ 781.115146][ T43] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 781.138302][ T5831] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 781.315780][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 781.365906][ T43] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 781.410126][T18588] loop5: detected capacity change from 0 to 512 [ 781.423653][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.504693][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 781.535567][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.590476][T18588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.603269][ T43] usb 5-1: Product: syz [ 781.614049][ T43] usb 5-1: Manufacturer: syz [ 781.630028][ T43] usb 5-1: SerialNumber: syz [ 781.677972][T18588] ext4 filesystem being mounted at /866/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.684473][T18597] loop1: detected capacity change from 0 to 2048 [ 781.709654][T18588] EXT4-fs error (device loop5): ext4_xattr_block_list:766: inode #15: comm syz.5.5281: corrupted xattr block 19: overlapping e_value [ 781.726243][T18575] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 781.842332][T18602] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 781.876931][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.007298][ T43] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 782.103026][ T43] usb 5-1: USB disconnect, device number 127 [ 782.395711][T18614] loop2: detected capacity change from 0 to 64 [ 782.766755][T18622] ipt_REJECT: ECHOREPLY no longer supported. [ 783.247219][T18601] loop3: detected capacity change from 0 to 32768 [ 783.296476][T18601] (syz.3.5286,18601,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 783.365081][T18601] (syz.3.5286,18601,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 783.406712][T18641] loop2: detected capacity change from 0 to 16 [ 783.457643][T18641] erofs (device loop2): mounted with root inode @ nid 36. [ 783.458389][T18601] JBD2: Ignoring recovery information on journal [ 783.582531][T18649] Cannot find del_set index 16384 as target [ 783.590715][T18641] erofs (device loop2): bogus lookback distance 0 @ lcn 1 of nid 89 [ 783.637846][T18641] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 783.690155][T18641] erofs (device loop2): bogus lookback distance 0 @ lcn 1 of nid 89 [ 783.690570][T18601] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 783.715333][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 783.736429][T18641] erofs (device loop2): readahead error at folio 1 @ nid 89 [ 783.791735][T18641] erofs (device loop2): bogus lookback distance 0 @ lcn 1 of nid 89 [ 783.842287][T18641] erofs (device loop2): bogus lookback distance 0 @ lcn 1 of nid 89 [ 783.897125][T18641] erofs (device loop2): read error -117 @ 1 of nid 89 [ 783.916969][ T30] audit: type=1800 audit(1760860226.248:49): pid=18641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5306" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 783.952039][ T10] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 783.981261][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.000408][ T10] usb 6-1: Product: syz [ 784.004619][ T10] usb 6-1: Manufacturer: syz [ 784.009230][ T10] usb 6-1: SerialNumber: syz [ 784.057657][ T10] usb 6-1: config 0 descriptor?? [ 784.065227][ T5836] ocfs2: Unmounting device (7,3) on (node local) [ 784.139306][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 784.464156][T18672] netlink: 'syz.1.5320': attribute type 33 has an invalid length. [ 784.497502][T18672] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5320'. [ 784.516389][ T10] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 784.546145][ T10] sq905c 6-1:0.0: Reading version command failed [ 784.566729][ T10] sq905c 6-1:0.0: probe with driver sq905c failed with error -71 [ 784.604168][ T10] usb 6-1: USB disconnect, device number 2 [ 784.845420][ T5966] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 784.858873][T18684] openvswitch: netlink: IP tunnel dst address not specified [ 784.883393][T18683] loop1: detected capacity change from 0 to 512 [ 784.901510][T18683] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 784.946167][T18688] loop4: detected capacity change from 0 to 64 [ 784.968333][T18683] EXT4-fs (loop1): 1 truncate cleaned up [ 784.991215][T18683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.038067][ T5966] usb 3-1: Using ep0 maxpacket: 16 [ 785.045468][ T5966] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 785.058492][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.070402][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.083256][ T5966] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 785.085161][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.099938][ T5966] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 785.115072][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.126570][ T5966] usb 3-1: config 0 descriptor?? [ 785.138733][ T5966] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input56 [ 785.208406][ T5176] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 785.272667][ T5176] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 785.294529][T13572] [ 785.296908][T13572] ====================================================== [ 785.304336][T13572] WARNING: possible circular locking dependency detected [ 785.311362][T13572] syzkaller #0 Not tainted [ 785.315781][T13572] ------------------------------------------------------ [ 785.322799][T13572] kworker/u8:8/13572 is trying to acquire lock: [ 785.329038][T13572] ffff888056924ef8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa5/0xcd0 [ 785.339877][T13572] [ 785.339877][T13572] but task is already holding lock: [ 785.347248][T13572] ffff888029e560b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x19c/0x310 [ 785.356630][T13572] [ 785.356630][T13572] which lock already depends on the new lock. [ 785.356630][T13572] [ 785.367030][T13572] [ 785.367030][T13572] the existing dependency chain (in reverse order) is: [ 785.376139][T13572] [ 785.376139][T13572] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 785.384094][T13572] __mutex_lock+0x193/0x1060 [ 785.389228][T13572] hfs_find_init+0x19c/0x310 [ 785.394360][T13572] hfs_ext_read_extent+0x19b/0x9e0 [ 785.400011][T13572] hfs_get_block+0x568/0x830 [ 785.405138][T13572] block_read_full_folio+0x457/0x850 [ 785.410965][T13572] filemap_read_folio+0xc8/0x2a0 [ 785.416447][T13572] do_read_cache_folio+0x263/0x5c0 [ 785.422084][T13572] read_cache_page+0x5b/0x160 [ 785.427286][T13572] __hfs_bnode_create+0x70b/0x9b0 [ 785.432849][T13572] hfs_bnode_find+0x2cc/0xd40 [ 785.438056][T13572] hfs_brec_find+0x3a2/0x650 [ 785.443166][T13572] hfs_brec_read+0x26/0x120 [ 785.448279][T13572] hfs_cat_find_brec+0xd8/0x2c0 [ 785.453667][T13572] hfs_fill_super+0x524/0x800 [ 785.458864][T13572] get_tree_bdev_flags+0x38c/0x620 [ 785.464499][T13572] vfs_get_tree+0x8e/0x340 [ 785.469454][T13572] path_mount+0x7b9/0x23a0 [ 785.474402][T13572] __x64_sys_mount+0x293/0x310 [ 785.479697][T13572] do_syscall_64+0xcd/0xfa0 [ 785.484753][T13572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.491180][T13572] [ 785.491180][T13572] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 785.500408][T13572] __lock_acquire+0x126f/0x1c90 [ 785.505788][T13572] lock_acquire+0x179/0x350 [ 785.510821][T13572] __mutex_lock+0x193/0x1060 [ 785.515930][T13572] hfs_extend_file+0xa5/0xcd0 [ 785.521318][T13572] hfs_bmap_reserve+0x2ab/0x3a0 [ 785.526732][T13572] __hfs_ext_write_extent+0x3cf/0x520 [ 785.532650][T13572] hfs_ext_write_extent+0x1b5/0x1f0 [ 785.538388][T13572] hfs_write_inode+0xcc/0xab0 [ 785.543621][T13572] __writeback_single_inode+0xb3e/0xfb0 [ 785.549707][T13572] writeback_sb_inodes+0x60d/0xfa0 [ 785.555361][T13572] wb_writeback+0x419/0xb70 [ 785.560403][T13572] wb_workfn+0x14d/0xbe0 [ 785.565160][T13572] process_one_work+0x9cf/0x1b70 [ 785.570633][T13572] worker_thread+0x6c8/0xf10 [ 785.575759][T13572] kthread+0x3c5/0x780 [ 785.580359][T13572] ret_from_fork+0x675/0x7d0 [ 785.585475][T13572] ret_from_fork_asm+0x1a/0x30 [ 785.590759][T13572] [ 785.590759][T13572] other info that might help us debug this: [ 785.590759][T13572] [ 785.600973][T13572] Possible unsafe locking scenario: [ 785.600973][T13572] [ 785.608582][T13572] CPU0 CPU1 [ 785.613934][T13572] ---- ---- [ 785.619283][T13572] lock(&tree->tree_lock/1); [ 785.623978][T13572] lock(&HFS_I(tree->inode)->extents_lock); [ 785.632565][T13572] lock(&tree->tree_lock/1); [ 785.639775][T13572] lock(&HFS_I(tree->inode)->extents_lock); [ 785.645770][T13572] [ 785.645770][T13572] *** DEADLOCK *** [ 785.645770][T13572] [ 785.653909][T13572] 3 locks held by kworker/u8:8/13572: [ 785.659358][T13572] #0: ffff88801cefc948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 785.670115][T13572] #1: ffffc9001e0b7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 785.681997][T13572] #2: ffff888029e560b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x19c/0x310 [ 785.691796][T13572] [ 785.691796][T13572] stack backtrace: [ 785.697679][T13572] CPU: 1 UID: 0 PID: 13572 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 785.697718][T13572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 785.697742][T13572] Workqueue: writeback wb_workfn (flush-7:4) [ 785.697780][T13572] Call Trace: [ 785.697792][T13572] [ 785.697805][T13572] dump_stack_lvl+0x116/0x1f0 [ 785.697855][T13572] print_circular_bug+0x275/0x350 [ 785.697897][T13572] check_noncircular+0x14c/0x170 [ 785.697941][T13572] __lock_acquire+0x126f/0x1c90 [ 785.697984][T13572] ? stack_trace_save+0x8e/0xc0 [ 785.698021][T13572] lock_acquire+0x179/0x350 [ 785.698063][T13572] ? hfs_extend_file+0xa5/0xcd0 [ 785.698118][T13572] ? __pfx___might_resched+0x10/0x10 [ 785.698172][T13572] ? save_trace+0x4e/0x380 [ 785.698214][T13572] ? hfs_extend_file+0xa5/0xcd0 [ 785.698259][T13572] __mutex_lock+0x193/0x1060 [ 785.698289][T13572] ? hfs_extend_file+0xa5/0xcd0 [ 785.698347][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.698386][T13572] ? __lock_acquire+0x1053/0x1c90 [ 785.698430][T13572] ? __pfx___mutex_lock+0x10/0x10 [ 785.698465][T13572] ? __pfx___might_resched+0x10/0x10 [ 785.698518][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.698557][T13572] ? rcu_is_watching+0x12/0xc0 [ 785.698590][T13572] ? hfs_extend_file+0xa5/0xcd0 [ 785.698634][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.698673][T13572] hfs_extend_file+0xa5/0xcd0 [ 785.698721][T13572] ? __pfx_hfs_extend_file+0x10/0x10 [ 785.698765][T13572] ? hfs_brec_find+0x4dc/0x650 [ 785.698804][T13572] hfs_bmap_reserve+0x2ab/0x3a0 [ 785.698845][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.698889][T13572] __hfs_ext_write_extent+0x3cf/0x520 [ 785.698935][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.698976][T13572] hfs_ext_write_extent+0x1b5/0x1f0 [ 785.699024][T13572] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 785.699074][T13572] ? blk_finish_plug+0x16/0xa0 [ 785.699114][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.699153][T13572] ? mpage_writepages+0x159/0x1c0 [ 785.699187][T13572] ? __pfx_mpage_writepages+0x10/0x10 [ 785.699223][T13572] hfs_write_inode+0xcc/0xab0 [ 785.699273][T13572] ? __pfx_hfs_write_inode+0x10/0x10 [ 785.699327][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.699365][T13572] ? __lock_acquire+0xb8a/0x1c90 [ 785.699408][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.699446][T13572] ? __lock_acquire+0xb8a/0x1c90 [ 785.699493][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.699537][T13572] __writeback_single_inode+0xb3e/0xfb0 [ 785.699595][T13572] ? __pfx___writeback_single_inode+0x10/0x10 [ 785.699645][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.699684][T13572] ? do_raw_spin_unlock+0x172/0x230 [ 785.699732][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.699774][T13572] writeback_sb_inodes+0x60d/0xfa0 [ 785.699837][T13572] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 785.699887][T13572] ? __lock_acquire+0xb8a/0x1c90 [ 785.699926][T13572] ? ip_route_output_key_hash_rcu+0xfb2/0x28e0 [ 785.700007][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.700046][T13572] ? rcu_is_watching+0x12/0xc0 [ 785.700075][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.700114][T13572] ? queue_io+0x3f6/0x520 [ 785.700160][T13572] wb_writeback+0x419/0xb70 [ 785.700242][T13572] ? __pfx_wb_writeback+0x10/0x10 [ 785.700290][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.700338][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.700377][T13572] ? mark_held_locks+0x49/0x80 [ 785.700418][T13572] wb_workfn+0x14d/0xbe0 [ 785.700450][T13572] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 785.700499][T13572] ? __pfx_wb_workfn+0x10/0x10 [ 785.700530][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.700570][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.700612][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.700650][T13572] ? rcu_is_watching+0x12/0xc0 [ 785.700683][T13572] process_one_work+0x9cf/0x1b70 [ 785.700739][T13572] ? __pfx_process_one_work+0x10/0x10 [ 785.700785][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.700829][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.700868][T13572] ? assign_work+0x1a0/0x250 [ 785.700911][T13572] worker_thread+0x6c8/0xf10 [ 785.700961][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.701000][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.701039][T13572] ? __kthread_parkme+0x19e/0x250 [ 785.701073][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.701113][T13572] ? __pfx_worker_thread+0x10/0x10 [ 785.701160][T13572] kthread+0x3c5/0x780 [ 785.701202][T13572] ? __pfx_kthread+0x10/0x10 [ 785.701244][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.701283][T13572] ? rcu_is_watching+0x12/0xc0 [ 785.701312][T13572] ? __pfx_kthread+0x10/0x10 [ 785.701360][T13572] ret_from_fork+0x675/0x7d0 [ 785.701399][T13572] ? __pfx_kthread+0x10/0x10 [ 785.701441][T13572] ret_from_fork_asm+0x1a/0x30 [ 785.701486][T13572] [ 786.166707][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.181999][T13572] hfs: new node 0 already hashed? [ 786.196363][T13572] ------------[ cut here ]------------ [ 786.201837][T13572] WARNING: CPU: 0 PID: 13572 at fs/hfs/bnode.c:520 hfs_bnode_create+0x14c/0x5e0 [ 786.210958][T13572] Modules linked in: [ 786.214909][T13572] CPU: 0 UID: 0 PID: 13572 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 786.224514][T13572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 786.234696][T13572] Workqueue: writeback wb_workfn (flush-7:4) [ 786.240713][T13572] RIP: 0010:hfs_bnode_create+0x14c/0x5e0 [ 786.246534][T13572] Code: d5 18 ff 45 39 fc 75 9e e8 71 db 18 ff 4c 89 f7 e8 79 9c c2 08 e8 64 db 18 ff 44 89 e6 48 c7 c7 60 ea aa 8b e8 a5 2f f7 fe 90 <0f> 0b 90 e8 4c db 18 ff 48 89 d8 48 83 c4 28 5b 5d 41 5c 41 5d 41 [ 786.266214][T13572] RSP: 0018:ffffc9001e0b7070 EFLAGS: 00010286 [ 786.272369][T13572] RAX: 000000000000001f RBX: ffff88802f194e00 RCX: ffffffff819b8f09 [ 786.280463][T13572] RDX: 0000000000000000 RSI: ffffffff819c0a36 RDI: 0000000000000005 [ 786.289578][T13572] RBP: ffff888029e56000 R08: 0000000000000005 R09: 0000000000000000 [ 786.292976][T18675] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 786.297561][T13572] R10: 0000000080000000 R11: 77656e203a736668 R12: 0000000000000000 [ 786.297594][T13572] R13: dffffc0000000000 R14: ffff888029e560e0 R15: 0000000000000000 [ 786.322459][T13572] FS: 0000000000000000(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 [ 786.331671][T13572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.338275][T13572] CR2: 0000559451dbca10 CR3: 0000000024e08000 CR4: 0000000000350ef0 [ 786.346311][T13572] Call Trace: [ 786.349603][T13572] [ 786.352567][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.358240][T13572] ? hfs_bnode_put+0x20c/0x460 [ 786.363091][T13572] hfs_bmap_alloc+0x7d7/0x960 [ 786.368365][T13572] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 786.373636][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.379373][T13572] ? hfs_bnode_read.part.0+0x16b/0x5d0 [ 786.384883][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.390546][T13572] ? const_folio_flags+0x5b/0x100 [ 786.395636][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.401322][T13572] ? folio_mark_accessed+0xc1/0xc00 [ 786.406640][T13572] hfs_btree_inc_height.isra.0+0xff/0x820 [ 786.412679][T13572] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 786.419856][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.425623][T13572] ? _raw_spin_unlock+0x28/0x50 [ 786.430594][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.436277][T13572] ? hfs_bnode_put+0x20c/0x460 [ 786.441220][T13572] hfs_brec_insert+0x8b1/0xc40 [ 786.446063][T13572] ? __pfx_hfs_brec_insert+0x10/0x10 [ 786.451442][T13572] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 786.456567][T13572] __hfs_ext_write_extent+0x3fa/0x520 [ 786.462097][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.468222][T13572] hfs_ext_write_extent+0x1b5/0x1f0 [ 786.473563][T13572] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 786.479357][T13572] ? blk_finish_plug+0x16/0xa0 [ 786.484215][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.489956][T13572] ? mpage_writepages+0x159/0x1c0 [ 786.495082][T13572] ? __pfx_mpage_writepages+0x10/0x10 [ 786.500513][T13572] hfs_write_inode+0xcc/0xab0 [ 786.505352][T13572] ? __pfx_hfs_write_inode+0x10/0x10 [ 786.510698][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.516456][T13572] ? __lock_acquire+0xb8a/0x1c90 [ 786.521657][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.527696][T13572] ? __lock_acquire+0xb8a/0x1c90 [ 786.532696][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.538387][T13572] __writeback_single_inode+0xb3e/0xfb0 [ 786.543991][T13572] ? __pfx___writeback_single_inode+0x10/0x10 [ 786.550142][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.555881][T13572] ? do_raw_spin_unlock+0x172/0x230 [ 786.561132][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.566838][T13572] writeback_sb_inodes+0x60d/0xfa0 [ 786.572020][T13572] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 786.577721][T13572] ? __lock_acquire+0xb8a/0x1c90 [ 786.582698][T13572] ? ip_route_output_key_hash_rcu+0xfb2/0x28e0 [ 786.588985][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.594651][T13572] ? rcu_is_watching+0x12/0xc0 [ 786.599504][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.605168][T13572] ? queue_io+0x3f6/0x520 [ 786.609578][T13572] wb_writeback+0x419/0xb70 [ 786.614161][T13572] ? __pfx_wb_writeback+0x10/0x10 [ 786.619254][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.624959][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.630998][T13572] ? mark_held_locks+0x49/0x80 [ 786.636113][T13572] wb_workfn+0x14d/0xbe0 [ 786.640435][T13572] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 786.646338][T13572] ? __pfx_wb_workfn+0x10/0x10 [ 786.651139][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.656899][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.662612][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.668261][T13572] ? rcu_is_watching+0x12/0xc0 [ 786.673149][T13572] process_one_work+0x9cf/0x1b70 [ 786.678164][T13572] ? __pfx_process_one_work+0x10/0x10 [ 786.683612][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.689290][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.694988][T13572] ? assign_work+0x1a0/0x250 [ 786.699627][T13572] worker_thread+0x6c8/0xf10 [ 786.704267][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.709999][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.715701][T13572] ? __kthread_parkme+0x19e/0x250 [ 786.720812][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.726556][T13572] ? __pfx_worker_thread+0x10/0x10 [ 786.731717][T13572] kthread+0x3c5/0x780 [ 786.735831][T13572] ? __pfx_kthread+0x10/0x10 [ 786.740822][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.746496][T13572] ? rcu_is_watching+0x12/0xc0 [ 786.751701][T13572] ? __pfx_kthread+0x10/0x10 [ 786.756351][T13572] ret_from_fork+0x675/0x7d0 [ 786.761009][T13572] ? __pfx_kthread+0x10/0x10 [ 786.765636][T13572] ret_from_fork_asm+0x1a/0x30 [ 786.770485][T13572] [ 786.773510][T13572] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 786.780787][T13572] CPU: 0 UID: 0 PID: 13572 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 786.790345][T13572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 786.800420][T13572] Workqueue: writeback wb_workfn (flush-7:4) [ 786.806433][T13572] Call Trace: [ 786.809706][T13572] [ 786.812631][T13572] dump_stack_lvl+0x3d/0x1f0 [ 786.817242][T13572] vpanic+0x640/0x6f0 [ 786.821241][T13572] ? hfs_bnode_create+0x14c/0x5e0 [ 786.826284][T13572] panic+0xca/0xd0 [ 786.830030][T13572] ? __pfx_panic+0x10/0x10 [ 786.834467][T13572] ? check_panic_on_warn+0x1f/0xb0 [ 786.839595][T13572] check_panic_on_warn+0xab/0xb0 [ 786.844571][T13572] __warn+0xf6/0x3c0 [ 786.848485][T13572] ? hfs_bnode_create+0x14c/0x5e0 [ 786.853530][T13572] report_bug+0x3c3/0x580 [ 786.857938][T13572] ? hfs_bnode_create+0x14c/0x5e0 [ 786.863019][T13572] handle_bug+0x184/0x210 [ 786.867365][T13572] exc_invalid_op+0x17/0x50 [ 786.871888][T13572] asm_exc_invalid_op+0x1a/0x20 [ 786.876761][T13572] RIP: 0010:hfs_bnode_create+0x14c/0x5e0 [ 786.882421][T13572] Code: d5 18 ff 45 39 fc 75 9e e8 71 db 18 ff 4c 89 f7 e8 79 9c c2 08 e8 64 db 18 ff 44 89 e6 48 c7 c7 60 ea aa 8b e8 a5 2f f7 fe 90 <0f> 0b 90 e8 4c db 18 ff 48 89 d8 48 83 c4 28 5b 5d 41 5c 41 5d 41 [ 786.902572][T13572] RSP: 0018:ffffc9001e0b7070 EFLAGS: 00010286 [ 786.908656][T13572] RAX: 000000000000001f RBX: ffff88802f194e00 RCX: ffffffff819b8f09 [ 786.916725][T13572] RDX: 0000000000000000 RSI: ffffffff819c0a36 RDI: 0000000000000005 [ 786.924792][T13572] RBP: ffff888029e56000 R08: 0000000000000005 R09: 0000000000000000 [ 786.932778][T13572] R10: 0000000080000000 R11: 77656e203a736668 R12: 0000000000000000 [ 786.940844][T13572] R13: dffffc0000000000 R14: ffff888029e560e0 R15: 0000000000000000 [ 786.948827][T13572] ? __wake_up_klogd.part.0+0x99/0xf0 [ 786.954231][T13572] ? vprintk_emit+0x1e6/0x680 [ 786.958923][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.964593][T13572] ? hfs_bnode_put+0x20c/0x460 [ 786.969404][T13572] hfs_bmap_alloc+0x7d7/0x960 [ 786.974112][T13572] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 786.979337][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.984988][T13572] ? hfs_bnode_read.part.0+0x16b/0x5d0 [ 786.990464][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.996113][T13572] ? const_folio_flags+0x5b/0x100 [ 787.001147][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.006796][T13572] ? folio_mark_accessed+0xc1/0xc00 [ 787.012017][T13572] hfs_btree_inc_height.isra.0+0xff/0x820 [ 787.017759][T13572] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 787.024110][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.029765][T13572] ? _raw_spin_unlock+0x28/0x50 [ 787.034638][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.040309][T13572] ? hfs_bnode_put+0x20c/0x460 [ 787.045106][T13572] hfs_brec_insert+0x8b1/0xc40 [ 787.049903][T13572] ? __pfx_hfs_brec_insert+0x10/0x10 [ 787.055212][T13572] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 787.060267][T13572] __hfs_ext_write_extent+0x3fa/0x520 [ 787.065676][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.071343][T13572] hfs_ext_write_extent+0x1b5/0x1f0 [ 787.076582][T13572] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 787.082341][T13572] ? blk_finish_plug+0x16/0xa0 [ 787.087209][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.092858][T13572] ? mpage_writepages+0x159/0x1c0 [ 787.097897][T13572] ? __pfx_mpage_writepages+0x10/0x10 [ 787.103288][T13572] hfs_write_inode+0xcc/0xab0 [ 787.108003][T13572] ? __pfx_hfs_write_inode+0x10/0x10 [ 787.113322][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.118977][T13572] ? __lock_acquire+0xb8a/0x1c90 [ 787.124009][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.129668][T13572] ? __lock_acquire+0xb8a/0x1c90 [ 787.134642][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.140400][T13572] __writeback_single_inode+0xb3e/0xfb0 [ 787.146017][T13572] ? __pfx___writeback_single_inode+0x10/0x10 [ 787.152120][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.157772][T13572] ? do_raw_spin_unlock+0x172/0x230 [ 787.163003][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.168657][T13572] writeback_sb_inodes+0x60d/0xfa0 [ 787.173814][T13572] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 787.179474][T13572] ? __lock_acquire+0xb8a/0x1c90 [ 787.184436][T13572] ? ip_route_output_key_hash_rcu+0xfb2/0x28e0 [ 787.190646][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.196295][T13572] ? rcu_is_watching+0x12/0xc0 [ 787.201072][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.206809][T13572] ? queue_io+0x3f6/0x520 [ 787.211166][T13572] wb_writeback+0x419/0xb70 [ 787.215703][T13572] ? __pfx_wb_writeback+0x10/0x10 [ 787.220821][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.226488][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.232135][T13572] ? mark_held_locks+0x49/0x80 [ 787.236926][T13572] wb_workfn+0x14d/0xbe0 [ 787.241180][T13572] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 787.247100][T13572] ? __pfx_wb_workfn+0x10/0x10 [ 787.251875][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.257527][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.263174][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.268827][T13572] ? rcu_is_watching+0x12/0xc0 [ 787.273609][T13572] process_one_work+0x9cf/0x1b70 [ 787.278586][T13572] ? __pfx_process_one_work+0x10/0x10 [ 787.283980][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.289738][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.295559][T13572] ? assign_work+0x1a0/0x250 [ 787.300272][T13572] worker_thread+0x6c8/0xf10 [ 787.304899][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.310574][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.316329][T13572] ? __kthread_parkme+0x19e/0x250 [ 787.321482][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.327233][T13572] ? __pfx_worker_thread+0x10/0x10 [ 787.332408][T13572] kthread+0x3c5/0x780 [ 787.336497][T13572] ? __pfx_kthread+0x10/0x10 [ 787.341107][T13572] ? srso_alias_return_thunk+0x5/0xfbef5 [ 787.346757][T13572] ? rcu_is_watching+0x12/0xc0 [ 787.351534][T13572] ? __pfx_kthread+0x10/0x10 [ 787.356147][T13572] ret_from_fork+0x675/0x7d0 [ 787.360759][T13572] ? __pfx_kthread+0x10/0x10 [ 787.365370][T13572] ret_from_fork_asm+0x1a/0x30 [ 787.370155][T13572] [ 787.373475][T13572] Kernel Offset: disabled [ 787.377797][T13572] Rebooting in 86400 seconds..