last executing test programs: 14m20.172265673s ago: executing program 2 (id=866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, &(0x7f0000000280), 0x0}, 0x20) 14m19.906663366s ago: executing program 2 (id=871): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) recvmsg$can_j1939(r0, 0x0, 0x2000) 14m19.63865391s ago: executing program 2 (id=875): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r0}, 0xc) 14m19.41639459s ago: executing program 2 (id=877): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 14m18.637359509s ago: executing program 2 (id=885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000f00)={0x44, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x180c0) 14m18.008892571s ago: executing program 2 (id=892): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0xa0, 0x0, 0x0, 0x3e000000, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) 14m17.376753872s ago: executing program 32 (id=892): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0xa0, 0x0, 0x0, 0x3e000000, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) 10m29.026199717s ago: executing program 1 (id=3873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000000206010006000006021c0000000000000e0003006269746d61703a697000000005000400ff0e00000900020073797a300000000005000500020000000500010006"], 0x48}}, 0x4000004) 10m28.7608253s ago: executing program 1 (id=3878): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000840)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000008c0)={0x5, 0x2, 0x0, 0x1}) 10m26.711619182s ago: executing program 1 (id=3904): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 10m25.809549287s ago: executing program 1 (id=3911): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 10m24.625146366s ago: executing program 1 (id=3923): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)='\x00\x00\x00\x00', 0x4}], 0x1) 10m22.904551162s ago: executing program 1 (id=3943): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x3c, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xd, 0x1, 0x0, 0x1, [@generic="74cc409b45f2510991"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10m22.279415693s ago: executing program 33 (id=3943): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x3c, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xd, 0x1, 0x0, 0x1, [@generic="74cc409b45f2510991"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 8m42.608121234s ago: executing program 3 (id=5099): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a00090585", @ANYRESDEC], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0) 8m40.748288186s ago: executing program 3 (id=5124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 8m40.535093728s ago: executing program 3 (id=5127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000030000010002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) 8m40.135991437s ago: executing program 3 (id=5131): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 8m39.854214661s ago: executing program 3 (id=5133): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, 0x0) 8m39.348276526s ago: executing program 3 (id=5138): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"8858ed6b", 0xa8d2, 0x6, 0x2, 0x0, 0x1, "f700000000000000000500", '\x00', "0200", "72b59d61", ["50b7fdf0fffffffffdffffb6", '\x00', "0c436d743c97c443084000", "ff81000000008000"]}) 8m38.773164575s ago: executing program 34 (id=5138): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"8858ed6b", 0xa8d2, 0x6, 0x2, 0x0, 0x1, "f700000000000000000500", '\x00', "0200", "72b59d61", ["50b7fdf0fffffffffdffffb6", '\x00', "0c436d743c97c443084000", "ff81000000008000"]}) 4.21030155s ago: executing program 0 (id=13301): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x24, @string={0x24, 0x3, "e7dab2a4d03ae8763e6f88fa84d4266ebd1cb7ebac72893008009b02184c42f84e5a"}}, 0x0, 0x0}, 0x0) 2.826634669s ago: executing program 7 (id=13326): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5P,nr_inodes=m']) 2.673455527s ago: executing program 7 (id=13329): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400003000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40c0804) 2.480347036s ago: executing program 7 (id=13333): syz_usb_connect$cdc_ncm(0x0, 0x14d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12014002020000402505a1a440000102030109023b0102010020040904000001020d0000092406000169fa654e05240008000d240f0100000000040080000606241a010013272413005f236350647771f3033c50872bbad405e72edc6f3a11b400efdd495d8178951629f6c8b42413"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) rseq(0x0, 0x0, 0x0, 0x0) 1.528213683s ago: executing program 4 (id=13352): r0 = memfd_create(&(0x7f00000001c0)='%\x00g\x1e\xde\x03\xed\xe3N\x00\xc1\xe2\x85u\xf6\xd4a\xacl\xbb\xec=\xff`\xdf\x8fb\xd0\xc6\x985\aFA\xff\x16\'(u\x8a@Li:\xfd4_\xd3#\xecR\xca\x1f\xd3\xc4\a\'k\x98\x85\x14\x83\x8a.\x89\x1d\xc2\x9eOs\x91\xc3\x9c5-\xaf\x93\x06\x8e\xd5\xf7\x1aT\xeb<\xeb\xc7\xd0\\\xd2d\xad\xad1Q\x91\xc1\xb8\f\xd0\xa4\x0fK11Fn\x85:\xd5e\x11\x95E\xdd\xf9\xd5\xa1\x94n\x01\xdfx\x1d#\f8\x12\xa6\xa5\xb7\xacM\"n\x80.\x920Z\xb2\xab1\x9fK\x9d\x04W\xc3\xd0D\xf5\xe9vw\xfd\a\x87\xc4\f\xbc\x10\x19\xeb\x9f\xcf\xe9\x0f3\xc3?\xfe/\xd6\xfc\xa7MU\xdf_\xf0\x8a\x05\xd7y\xa0[\x9b\x93\xf9Z\xbe*\xf9\xb0\x8a3N\x9f,@\xef\xb3\x9e\xb6\xdcY\xf5\xd8\xdc\xa5\xef*\xeb\\\xa4\xe5\xfd=+>\xa5\xe8=Gi\xf6JdF\xe0\x15\x17\xbfI6\xec\\\x83\xe8@\xd9\xaa\xec\xab\x84F4h\x8d\xd3\xfa\xa7\xba\x19\x03z\xac\x1d\xf3\xcc\x03\xf8\xa8\xd1\x9b\xbf\x9a\xc4\xa5\x81\xce\b`\xdc\xe1\xc0\aa\xd7\xc5\xd1C_\xb2:4@\xd3\xfaaQ\x14\x00\xcaa\tn\xbc\xf0\xa7\xf0\xb8\x8c\xe1?_\xa2\xad\xf6\x813\xcd\v]\xf0\xd9\x05V\xea)p\x8c\xdeC\xbf\x87\x9f\xdbqX\xe4\r\\\xa4\x9b\xed\xe3<\f\xbbx:\x15Wy\xa6\x05\xaa\x9cC\xb5p\xde\xb8', 0x3) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0xff6c, 0x3) 1.466825927s ago: executing program 4 (id=13354): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 1.268239106s ago: executing program 6 (id=13357): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r0, &(0x7f0000001b40)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/18, 0x12}], 0x2) 1.248791357s ago: executing program 4 (id=13358): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xaf, &(0x7f0000000a80)=""/175, 0x0, 0xa}, 0x94) 1.19967626s ago: executing program 5 (id=13359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x487, 0x0, 0x9}]}) 1.141095243s ago: executing program 6 (id=13360): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)={0x28, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x14, 0x19, 0x0, 0x1, [@nested={0x10, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}, @nested={0x8, 0x31, 0x0, 0x1, [@nested={0x4, 0x140}]}]}]}]}, 0x28}}, 0x0) 1.096093385s ago: executing program 4 (id=13361): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980dc58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952fd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2acc5014f74e420988486de2ace27ce59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba194fc70973b39525123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49963a195e2fdffe6bdce6fa78ab2ded1ff74f9e54f1b82da2d444f9727be708710b90a872282f4dce55468a681e"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.044382828s ago: executing program 0 (id=13362): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000600030001232c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 980.278711ms ago: executing program 5 (id=13363): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xfffffffffffffffa}) 936.600133ms ago: executing program 6 (id=13364): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200480, &(0x7f0000000000), 0xfe, 0x585, &(0x7f0000001500)="$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") listxattr(&(0x7f00000015c0)='./file1\x00', 0x0, 0x0) 872.117006ms ago: executing program 7 (id=13365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 837.484728ms ago: executing program 0 (id=13366): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000280)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '-]#{![#[\\', 0x3a, '', 0x3a, './file0'}, 0x30) 786.654651ms ago: executing program 5 (id=13367): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 786.44594ms ago: executing program 4 (id=13368): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010001000980012e", 0x8) 705.676604ms ago: executing program 6 (id=13369): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="d8000000190081054e81f782db4cb904021d08000b000000000000070a000a000900142603600e1208001e0000050401a8430400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) 636.263838ms ago: executing program 7 (id=13370): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7f, 0x242) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 561.223052ms ago: executing program 5 (id=13371): r0 = creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90) fallocate(r0, 0x10, 0x7fffffffffffffff, 0x5) 554.055562ms ago: executing program 0 (id=13372): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000040)={0x8, 0x68, 0xfa00, {0x0, {0x3, 0x16, "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", 0x80, 0x9, 0xef, 0x6, 0xe9, 0x10, 0x6, 0x1}}}, 0x128) 516.687664ms ago: executing program 4 (id=13373): getpid() syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc453, &(0x7f00000000c0)={[{@nouid32}, {@noload}, {@i_version}, {@noblock_validity}, {@dioread_lock}, {@nomblk_io_submit}, {@user_xattr}, {@auto_da_alloc}]}, 0x4, 0x57e, &(0x7f00000007c0)="$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") 448.295887ms ago: executing program 7 (id=13374): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2100, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000000fe0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) 431.299988ms ago: executing program 6 (id=13375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) 320.298683ms ago: executing program 5 (id=13376): r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000040)) 305.660675ms ago: executing program 0 (id=13377): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 76.595226ms ago: executing program 6 (id=13378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newrule={0x30, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bridge0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x42812}, 0x0) 156.99µs ago: executing program 5 (id=13379): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@alg={0xe0, 0x10, 0x1, 0x70bd26, 0x25dfdbff, {{'drbg_pr_ctr_aes128\x00'}, '\x00', '\x00', 0x2000, 0x4000}}, 0xe0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000080) 0s ago: executing program 0 (id=13380): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000100)="93d90400040300955a", 0x9}], 0x1) kernel console output (not intermixed with test programs): 6d-cd80a5b93e5d [ 883.417678][T30132] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 883.450763][T30173] SET target dimension over the limit! [ 883.455009][T30132] BTRFS info (device loop5): using free space tree [ 883.764372][T30200] loop4: detected capacity change from 0 to 8 [ 883.788396][T30202] netlink: 392 bytes leftover after parsing attributes in process `syz.0.11427'. [ 883.818504][T30132] BTRFS info (device loop5): enabling ssd optimizations [ 883.931568][T30200] SQUASHFS error: Failed to read block 0x2fc: -5 [ 883.959385][T30200] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 883.993765][T30200] SQUASHFS error: Unable to read directory block [247:26] [ 884.035787][T13620] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 884.187775][T13212] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (13212) [ 884.688249][ T26] audit: type=1326 audit(1773977377.844:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30220 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf419c799 code=0x7ffc0000 [ 884.768717][ T26] audit: type=1326 audit(1773977377.844:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30220 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf419c799 code=0x7ffc0000 [ 884.868982][ T26] audit: type=1326 audit(1773977377.864:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30220 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf419c799 code=0x7ffc0000 [ 884.874683][T30193] loop6: detected capacity change from 0 to 40427 [ 884.932676][T30225] netlink: 'syz.7.11436': attribute type 1 has an invalid length. [ 884.971374][ T26] audit: type=1326 audit(1773977377.864:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30220 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fbbf419c799 code=0x7ffc0000 [ 884.983456][T30225] netlink: 224 bytes leftover after parsing attributes in process `syz.7.11436'. [ 885.044309][T30193] F2FS-fs (loop6): invalid crc value [ 885.047708][ T26] audit: type=1326 audit(1773977377.864:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30220 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf419c799 code=0x7ffc0000 [ 885.105521][T30193] F2FS-fs (loop6): Found nat_bits in checkpoint [ 885.117265][T30232] loop4: detected capacity change from 0 to 256 [ 885.142403][T30232] exfat: Deprecated parameter 'utf8' [ 885.163088][ T26] audit: type=1326 audit(1773977377.864:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30220 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf419c799 code=0x7ffc0000 [ 885.186526][T30232] exfat: Deprecated parameter 'namecase' [ 885.192285][T30232] exfat: Deprecated parameter 'namecase' [ 885.233806][T30236] cgroup: name respecified [ 885.243517][T30232] exfat: Deprecated parameter 'utf8' [ 885.278575][ T26] audit: type=1326 audit(1773977377.864:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30220 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbbf419c799 code=0x7ffc0000 [ 885.288854][T30193] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 885.318474][T30232] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 885.383545][ T26] audit: type=1326 audit(1773977377.864:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30220 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbbf419c799 code=0x7ffc0000 [ 885.536455][T30243] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 885.610474][T30248] loop4: detected capacity change from 0 to 8 [ 885.650627][T30248] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 885.669564][T13212] udevd[13212]: incorrect cramfs checksum on /dev/loop4 [ 885.851841][T30250] loop5: detected capacity change from 0 to 4096 [ 885.876389][T30250] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 885.987194][T30250] ntfs: volume version 3.1. [ 886.140764][T30255] loop4: detected capacity change from 0 to 8192 [ 886.209988][T30255] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 886.270364][T30267] loop0: detected capacity change from 0 to 164 [ 886.295177][T30255] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 886.315977][T30255] REISERFS (device loop4): using ordered data mode [ 886.334269][T30255] reiserfs: using flush barriers [ 886.373648][T30255] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 886.455102][T30255] REISERFS (device loop4): checking transaction log (loop4) [ 886.724136][T30255] REISERFS (device loop4): Using tea hash to sort names [ 886.766155][T30255] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 886.795651][T30255] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 887.846292][T30329] loop6: detected capacity change from 0 to 512 [ 887.857053][T30329] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 887.893885][T30329] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 887.922403][T30329] EXT4-fs (loop6): orphan cleanup on readonly fs [ 887.983809][T30329] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.11484: bad orphan inode 267 [ 888.024275][T30329] EXT4-fs (loop6): Remounting filesystem read-only [ 888.041197][T30329] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 888.103623][T30329] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.11484: dx entry: limit 0 != root limit 125 [ 888.152286][T30329] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.11484: Corrupt directory, running e2fsck is recommended [ 888.293040][T13437] EXT4-fs (loop6): unmounting filesystem. [ 888.340447][T30343] loop7: detected capacity change from 0 to 256 [ 888.398853][T30345] loop6: detected capacity change from 0 to 64 [ 888.731564][T30355] netlink: 45 bytes leftover after parsing attributes in process `syz.4.11496'. [ 889.014209][T30366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11501'. [ 889.048927][T30368] loop4: detected capacity change from 0 to 64 [ 889.258762][T30375] netlink: 'syz.4.11505': attribute type 32 has an invalid length. [ 889.270236][T30372] sctp: [Deprecated]: syz.7.11504 (pid 30372) Use of int in maxseg socket option. [ 889.270236][T30372] Use struct sctp_assoc_value instead [ 889.611570][T30389] xt_l2tp: invalid flags combination: 8 [ 889.626798][T30392] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11514'. [ 889.647687][T30392] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11514'. [ 890.389060][T30426] loop6: detected capacity change from 0 to 8 [ 890.454378][T30426] SQUASHFS error: Unable to read inode 0xa7 [ 890.858611][T30446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11541'. [ 890.882745][T30446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11541'. [ 890.905562][T30446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11541'. [ 891.553828][T30474] netlink: 64985 bytes leftover after parsing attributes in process `syz.5.11555'. [ 891.635210][T30477] netlink: 'syz.4.11556': attribute type 1 has an invalid length. [ 891.814734][T30484] netlink: 'syz.5.11559': attribute type 21 has an invalid length. [ 891.840042][T30484] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11559'. [ 891.842124][T30485] loop4: detected capacity change from 0 to 1024 [ 891.932306][T30485] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 891.946719][T30485] EXT4-fs error (device loop4): ext4_get_journal_inode:5756: inode #32: comm syz.4.11560: iget: special inode unallocated [ 892.034631][T30485] EXT4-fs (loop4): no journal found [ 892.040459][T30485] EXT4-fs (loop4): can't get journal size [ 892.079115][T30485] EXT4-fs (loop4): filesystem is read-only [ 892.111293][T30500] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11567'. [ 892.123291][T30485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 892.368829][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 892.536845][T30514] loop4: detected capacity change from 0 to 8 [ 892.570947][T30514] SQUASHFS error: Failed to read block 0x62: -5 [ 892.595056][T30514] squashfs image failed sanity check [ 892.656724][T30514] Invalid option length (1047337) for dns_resolver key [ 893.254438][T26396] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 893.441855][T30561] netlink: 'syz.5.11596': attribute type 1 has an invalid length. [ 893.450174][T26396] usb 7-1: Using ep0 maxpacket: 32 [ 893.457381][T26396] usb 7-1: config 2 has an invalid interface number: 157 but max is 0 [ 893.490698][T26396] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 893.527785][T26396] usb 7-1: config 2 has no interface number 0 [ 893.545147][T26396] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 893.584377][T26396] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.620882][T26396] usb 7-1: Product: syz [ 893.625470][T26396] usb 7-1: Manufacturer: syz [ 893.630111][T26396] usb 7-1: SerialNumber: syz [ 893.662212][T26396] imon 7-1:2.157: unable to register, err -19 [ 893.884751][T26396] usb 7-1: USB disconnect, device number 25 [ 894.076048][T30577] loop0: detected capacity change from 0 to 2048 [ 894.105078][T30577] EXT4-fs: test_dummy_encryption requires encrypt feature [ 894.324463][T30581] loop7: detected capacity change from 0 to 1024 [ 894.477014][ T8986] hfsplus: b-tree write err: -5, ino 25 [ 894.482886][ T8986] hfsplus: b-tree write err: -5, ino 4 [ 894.506533][ T8986] hfsplus: b-tree write err: -5, ino 2 [ 894.936556][T30577] loop0: detected capacity change from 0 to 40427 [ 894.962493][T30577] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 894.989381][T30577] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 895.013665][T30577] F2FS-fs (loop0): Encoding requested by superblock is unknown [ 895.238752][T30589] loop4: detected capacity change from 0 to 32768 [ 895.308108][T30589] XFS (loop4): Mounting V5 Filesystem [ 895.426449][T30589] XFS (loop4): Ending clean mount [ 895.468372][T30589] XFS (loop4): Quotacheck needed: Please wait. [ 895.605150][T30589] XFS (loop4): Quotacheck: Done. [ 895.740638][T30599] loop6: detected capacity change from 0 to 32768 [ 895.761580][ T4278] XFS (loop4): Unmounting Filesystem [ 895.812009][T30599] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.11615 (30599) [ 895.912648][T30599] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 895.912926][T30601] loop5: detected capacity change from 0 to 32768 [ 895.950567][T30599] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 895.985933][T30599] BTRFS info (device loop6): setting nodatacow, compression disabled [ 896.009969][T30601] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.11617 (30601) [ 896.022757][T30599] BTRFS info (device loop6): force clearing of disk cache [ 896.032681][T30599] BTRFS info (device loop6): enabling ssd optimizations [ 896.065936][T30601] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 896.086100][T30599] BTRFS info (device loop6): using spread ssd allocation scheme [ 896.109397][T30601] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 896.115004][T30599] BTRFS info (device loop6): turning off barriers [ 896.155034][T30601] BTRFS info (device loop5): force zlib compression, level 3 [ 896.166964][T30599] BTRFS info (device loop6): disabling free space tree [ 896.172806][T30601] BTRFS info (device loop5): force clearing of disk cache [ 896.181309][T30601] BTRFS info (device loop5): setting nodatasum [ 896.191476][T30599] BTRFS info (device loop6): not using ssd optimizations [ 896.233467][T30599] BTRFS info (device loop6): not using spread ssd allocation scheme [ 896.236728][T30601] BTRFS info (device loop5): allowing degraded mounts [ 896.294962][T30601] BTRFS info (device loop5): enabling disk space caching [ 896.332572][T30601] BTRFS info (device loop5): disk space caching is enabled [ 896.564694][T30599] BTRFS info (device loop6): rebuilding free space tree [ 896.610022][T30599] BTRFS info (device loop6): disabling free space tree [ 896.645923][T30599] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 896.683504][T30599] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 896.693955][T30665] loop4: detected capacity change from 0 to 256 [ 896.701049][T30665] exfat: Deprecated parameter 'namecase' [ 896.717178][T30665] exfat: Deprecated parameter 'utf8' [ 896.759957][T30665] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 896.806545][T30601] BTRFS info (device loop5): rebuilding free space tree [ 896.852032][T30601] BTRFS info (device loop5): disabling free space tree [ 896.875491][T30601] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 896.903815][T30601] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 897.143195][T13437] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 897.186489][T30601] BTRFS info (device loop5): balance: start -d -m -s [ 897.232494][T30601] BTRFS info (device loop5): relocating block group 6881280 flags data|metadata [ 897.493792][T30685] __nla_validate_parse: 3 callbacks suppressed [ 897.493812][T30685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11637'. [ 897.762525][T30601] BTRFS info (device loop5): relocating block group 5242880 flags data|metadata [ 897.988925][T30601] BTRFS info (device loop5): balance: canceled [ 898.174685][T13620] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 898.990919][T30730] netlink: 'syz.6.11656': attribute type 21 has an invalid length. [ 899.019665][T30730] IPv6: NLM_F_CREATE should be specified when creating new route [ 899.079727][T30730] netlink: 'syz.6.11656': attribute type 1 has an invalid length. [ 899.463850][T30748] loop4: detected capacity change from 0 to 64 [ 899.472392][T30750] loop6: detected capacity change from 0 to 8 [ 899.511835][T30750] SQUASHFS error: Failed to read block 0x62: -5 [ 899.548201][T30750] squashfs image failed sanity check [ 899.634880][T30750] Invalid option length (1047337) for dns_resolver key [ 899.682375][T30720] loop5: detected capacity change from 0 to 32768 [ 899.735950][T30756] netlink: 798 bytes leftover after parsing attributes in process `syz.7.11671'. [ 899.989206][T30764] loop7: detected capacity change from 0 to 764 [ 900.029150][T30764] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 900.073879][T30764] Symlink component flag not implemented [ 900.103901][T30764] Symlink component flag not implemented [ 900.120246][T30764] Symlink component flag not implemented (128) [ 900.129821][T30770] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11679'. [ 900.143798][T30764] Symlink component flag not implemented (122) [ 900.908863][T30801] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11692'. [ 900.943632][T30801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11692'. [ 901.337959][T30823] netlink: 1392 bytes leftover after parsing attributes in process `syz.5.11704'. [ 901.474843][ T8463] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 901.517440][T30828] loop4: detected capacity change from 0 to 512 [ 901.579015][T30828] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 901.627554][T30828] ext4 filesystem being mounted at /2393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 901.685503][ T8463] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.724566][ T8463] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 901.781404][ T8463] usb 8-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 901.819386][T30847] binder: 30846:30847 ioctl c00c6211 0 returned -14 [ 901.830770][ T8463] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.843807][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 901.861733][ T8463] usb 8-1: config 0 descriptor?? [ 902.089899][ T8463] usb 8-1: USB disconnect, device number 28 [ 902.201018][T30860] autofs4:pid:30860:autofs_fill_super: called with bogus options [ 902.211025][T30861] xt_hashlimit: size too large, truncated to 1048576 [ 902.218307][T30861] xt_hashlimit: invalid rate [ 902.264153][T26396] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 902.463794][T26396] usb 6-1: Using ep0 maxpacket: 32 [ 902.471278][T26396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.502229][T26396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.522619][T26396] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 902.543264][T26396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.564072][T26396] usb 6-1: config 0 descriptor?? [ 902.583705][T26396] hub 6-1:0.0: USB hub found [ 902.767881][T30881] netlink: 'syz.0.11730': attribute type 21 has an invalid length. [ 902.783937][T26396] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 902.793532][ T4816] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 902.804413][T30881] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11730'. [ 902.983664][ T4816] usb 5-1: Using ep0 maxpacket: 16 [ 902.991121][ T4816] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 903.006051][T26396] usbhid 6-1:0.0: can't add hid device: -71 [ 903.016214][ T4816] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.021253][T26396] usbhid: probe of 6-1:0.0 failed with error -71 [ 903.054039][ T4816] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 903.085340][T26396] usb 6-1: USB disconnect, device number 46 [ 903.096753][ T4816] usb 5-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 903.123590][ T4816] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 903.155210][ T4816] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 903.169709][ T4816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.189784][ T4816] usb 5-1: Product: syz [ 903.210540][ T4816] usb 5-1: Manufacturer: syz [ 903.215327][ T4816] usb 5-1: SerialNumber: syz [ 903.457719][ T4816] usb 5-1: MIDIStreaming interface descriptor not found [ 903.513665][ T4816] usb 5-1: USB disconnect, device number 43 [ 903.627479][T30912] netlink: 'syz.6.11745': attribute type 1 has an invalid length. [ 903.654698][T30912] netlink: 'syz.6.11745': attribute type 2 has an invalid length. [ 903.835585][T30920] loop6: detected capacity change from 0 to 64 [ 903.875196][T30922] loop5: detected capacity change from 0 to 8 [ 903.936865][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 903.974633][T30922] SQUASHFS error: Failed to read block 0x6e6: -5 [ 903.981161][T30922] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 904.000883][T30922] SQUASHFS error: Unable to read directory block [631:26] [ 904.126569][T30929] loop6: detected capacity change from 0 to 256 [ 904.167741][T30929] exfat: Deprecated parameter 'utf8' [ 904.183856][T30929] exfat: Deprecated parameter 'namecase' [ 904.239855][T30929] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 904.293075][T30929] kAFS: unable to lookup cell 's@z0' [ 904.969563][T30956] loop4: detected capacity change from 0 to 256 [ 904.994591][T30956] exfat: Deprecated parameter 'utf8' [ 904.999949][T30956] exfat: Unexpected value for 'utf8' [ 905.017779][T30924] loop0: detected capacity change from 0 to 32768 [ 905.109907][T30924] XFS (loop0): Mounting V5 Filesystem [ 905.250133][T30924] XFS (loop0): Ending clean mount [ 905.352361][ T4266] XFS (loop0): Unmounting Filesystem [ 905.380225][T30940] loop7: detected capacity change from 0 to 32768 [ 905.529268][T30940] read_mapping_page failed! [ 905.576106][T30940] ERROR: (device loop7): txCommit: [ 905.576106][T30940] [ 905.670364][T30981] delete_channel: no stack [ 906.366357][T31004] misc userio: No port type given on /dev/userio [ 906.505371][T31009] netlink: 'syz.6.11787': attribute type 5 has an invalid length. [ 906.565574][T31009] netlink: 7 bytes leftover after parsing attributes in process `syz.6.11787'. [ 906.769302][T31015] device sit0 entered promiscuous mode [ 906.800607][T31015] netlink: 'syz.5.11790': attribute type 1 has an invalid length. [ 906.805995][T30991] loop0: detected capacity change from 0 to 32768 [ 906.832328][T30991] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.11772 (30991) [ 906.854172][T31015] netlink: 1 bytes leftover after parsing attributes in process `syz.5.11790'. [ 906.897504][T30991] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 906.923783][T30991] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 906.954257][T30991] BTRFS info (device loop0): force zlib compression, level 3 [ 906.985381][T31021] kAFS: unable to lookup cell '' [ 906.991520][T30991] BTRFS info (device loop0): force clearing of disk cache [ 907.008411][T30991] BTRFS info (device loop0): setting nodatasum [ 907.043615][T30991] BTRFS info (device loop0): allowing degraded mounts [ 907.068998][T30991] BTRFS info (device loop0): enabling disk space caching [ 907.103635][T30991] BTRFS info (device loop0): disk space caching is enabled [ 907.254102][T31044] loop4: detected capacity change from 0 to 164 [ 907.374664][T30991] BTRFS info (device loop0): rebuilding free space tree [ 907.375291][T31007] loop7: detected capacity change from 0 to 32768 [ 907.410463][T30991] BTRFS info (device loop0): disabling free space tree [ 907.418261][T31007] XFS (loop7): Mounting V5 Filesystem [ 907.453903][T30991] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 907.498429][T30991] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 907.565067][T31007] XFS (loop7): Ending clean mount [ 907.565204][T30991] BTRFS info (device loop0): balance: start -d -m -s [ 907.579119][T30991] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 907.613294][T30991] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 907.613749][T31007] XFS (loop7): Quotacheck needed: Please wait. [ 907.782711][T31007] XFS (loop7): Quotacheck: Done. [ 907.872197][T31066] loop6: detected capacity change from 0 to 2048 [ 907.918994][T31069] __vm_enough_memory: pid: 31069, comm: syz.4.11804, no enough memory for the allocation [ 907.942892][T30991] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 907.956041][T16328] XFS (loop7): Unmounting Filesystem [ 907.986706][T31066] loop6: p1 p2 < > p3 < p5 > p4 [ 907.991726][T31066] loop6: partition table partially beyond EOD, truncated [ 908.044065][T31066] loop6: p1 size 917504 extends beyond EOD, truncated [ 908.045168][T30991] BTRFS info (device loop0): balance: canceled [ 908.093581][T31066] loop6: p2 start 4278190080 is beyond EOD, truncated [ 908.114553][T31066] loop6: p4 start 150994949 is beyond EOD, truncated [ 908.163197][T31066] loop6: p5 size 917504 extends beyond EOD, truncated [ 908.220750][ T4266] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 908.619107][ T4256] udevd[4256]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 908.620895][T13213] udevd[13213]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 908.637538][T13212] udevd[13212]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 908.716839][T13213] udevd[13213]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 908.730204][ T4256] udevd[4256]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 908.737178][T13212] udevd[13212]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 908.755971][T31081] device netdevsim0 left promiscuous mode [ 908.762907][T31081] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 909.040461][T31089] loop5: detected capacity change from 0 to 256 [ 909.085346][T31089] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 909.105527][T31091] loop4: detected capacity change from 0 to 16 [ 909.129203][T31091] erofs: (device loop4): mounted with root inode @ nid 36. [ 909.203665][T31091] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 909.289869][T31091] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 909.773615][ T4816] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 909.997608][ T4816] usb 8-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 910.014451][ T4816] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 910.060214][ T4816] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 910.080726][ T4816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.091175][ T4816] usb 8-1: Product: syz [ 910.121056][ T4816] usb 8-1: Manufacturer: syz [ 910.130452][ T4816] usb 8-1: SerialNumber: syz [ 910.150791][ T4816] usb 8-1: config 0 descriptor?? [ 910.174590][ T4816] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 910.260320][T31106] loop6: detected capacity change from 0 to 32768 [ 910.324511][T31134] netlink: 80 bytes leftover after parsing attributes in process `syz.5.11836'. [ 910.614641][T26396] usb 8-1: USB disconnect, device number 29 [ 910.670687][T31145] loop5: detected capacity change from 0 to 16 [ 910.674793][T31145] erofs: (device loop5): mounted with root inode @ nid 36. [ 910.743559][T31147] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 912.152357][T31208] loop5: detected capacity change from 0 to 2048 [ 912.211773][T31208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 912.383658][ T4816] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 912.577705][ T4816] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 912.596638][ T4816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.621991][ T4816] usb 8-1: Product: syz [ 912.636780][ T4816] usb 8-1: Manufacturer: syz [ 912.643852][ T4816] usb 8-1: SerialNumber: syz [ 912.664061][ T4816] r8152-cfgselector 8-1: config 0 descriptor?? [ 912.707625][T31201] loop6: detected capacity change from 0 to 32768 [ 912.792710][T31201] XFS (loop6): Mounting V5 Filesystem [ 912.885587][T31201] XFS (loop6): Ending clean mount [ 912.893107][T31201] XFS (loop6): Quotacheck needed: Please wait. [ 912.983178][T31201] XFS (loop6): Quotacheck: Done. [ 913.058178][T13437] XFS (loop6): Unmounting Filesystem [ 913.112781][ T4816] r8152-cfgselector 8-1: Unknown version 0x0000 [ 913.122316][ T4816] r8152-cfgselector 8-1: USB disconnect, device number 30 [ 913.193557][ T4819] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 913.373488][ T4819] usb 5-1: Using ep0 maxpacket: 8 [ 913.380535][ T4819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.402011][ T4819] usb 5-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 913.421571][ T4819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.484406][ T4819] usb 5-1: config 0 descriptor?? [ 913.514289][ T4819] usb 5-1: Found UVC 0.00 device (2801:0201) [ 913.521221][ T4819] usb 5-1: No valid video chain found. [ 913.697948][T31260] loop0: detected capacity change from 0 to 4096 [ 913.729595][ T4819] usb 5-1: USB disconnect, device number 44 [ 913.734666][T31260] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 913.820468][T31260] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 913.827046][T26396] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 913.888933][T31260] ntfs3: loop0: no free space to extend mft [ 913.960897][T31254] loop6: detected capacity change from 0 to 32768 [ 913.974786][ T8986] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 913.981511][ T26] audit: type=1326 audit(913.955:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31263 comm="syz.7.11895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 913.994485][T31254] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.11886 (31254) [ 914.023181][ T4266] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 914.042860][ T4266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 914.056364][T26396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 914.069141][ T4266] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 914.079017][ T26] audit: type=1326 audit(913.955:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31263 comm="syz.7.11895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 914.101443][ T9001] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 914.108567][T26396] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 914.127042][ T4266] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 914.133198][T26396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.144537][T31254] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 914.156288][T26396] usb 6-1: config 0 descriptor?? [ 914.161556][ T26] audit: type=1326 audit(913.955:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31263 comm="syz.7.11895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 914.187444][T31254] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 914.197476][T31254] BTRFS info (device loop6): force zlib compression, level 3 [ 914.205320][ T26] audit: type=1326 audit(913.955:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31263 comm="syz.7.11895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 914.227446][T31254] BTRFS info (device loop6): force clearing of disk cache [ 914.255339][T31254] BTRFS info (device loop6): setting nodatasum [ 914.261664][T31254] BTRFS info (device loop6): allowing degraded mounts [ 914.314458][T31254] BTRFS info (device loop6): enabling disk space caching [ 914.347534][T31254] BTRFS info (device loop6): disk space caching is enabled [ 914.398722][T26396] ath6kl: Failed to submit usb control message: -71 [ 914.413129][T26396] ath6kl: unable to send the bmi data to the device: -71 [ 914.443563][T26396] ath6kl: Unable to send get target info: -71 [ 914.484266][T26396] ath6kl: Failed to init ath6kl core: -71 [ 914.554635][T31254] BTRFS info (device loop6): rebuilding free space tree [ 914.610185][T31254] BTRFS info (device loop6): disabling free space tree [ 914.635315][T31254] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 914.661514][T31254] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 914.682639][T26396] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 914.718690][T26396] usb 6-1: USB disconnect, device number 47 [ 914.723843][T31295] loop7: detected capacity change from 0 to 256 [ 914.819454][T31295] FAT-fs (loop7): Directory bread(block 64) failed [ 914.863964][T31254] BTRFS info (device loop6): balance: start -d -m -s [ 914.873646][T31295] FAT-fs (loop7): Directory bread(block 65) failed [ 914.880357][T31295] FAT-fs (loop7): Directory bread(block 66) failed [ 914.920104][T31254] BTRFS info (device loop6): relocating block group 6881280 flags data|metadata [ 914.929370][T31295] FAT-fs (loop7): Directory bread(block 67) failed [ 914.951884][T31295] FAT-fs (loop7): Directory bread(block 68) failed [ 914.963136][T31295] FAT-fs (loop7): Directory bread(block 69) failed [ 914.980450][T31295] FAT-fs (loop7): Directory bread(block 70) failed [ 914.996267][T31295] FAT-fs (loop7): Directory bread(block 71) failed [ 915.032392][T31295] FAT-fs (loop7): Directory bread(block 72) failed [ 915.042624][T31254] BTRFS info (device loop6): relocating block group 5242880 flags data|metadata [ 915.075379][T31295] FAT-fs (loop7): Directory bread(block 73) failed [ 915.159342][T31254] BTRFS info (device loop6): balance: canceled [ 915.302749][T13437] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 915.617414][T31316] SET target dimension over the limit! [ 916.104641][T31333] loop6: detected capacity change from 0 to 2048 [ 916.155461][T31333] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.283926][T31340] qrtr: Invalid version 0 [ 916.558500][T31348] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11926'. [ 916.568080][T31350] nfs: Deprecated parameter 'nointr' [ 916.613711][T31348] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11926'. [ 916.635230][T31354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11929'. [ 916.654604][T31354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11929'. [ 916.861059][T31328] loop0: detected capacity change from 0 to 32768 [ 916.885120][T31328] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.11917 (31328) [ 916.929474][T31362] program syz.7.11934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 916.960667][T31328] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 916.994769][T31328] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 916.998666][T31364] loop4: detected capacity change from 0 to 2048 [ 917.029165][T31328] BTRFS info (device loop0): force zlib compression, level 3 [ 917.044905][T31364] NILFS (loop4): invalid segment: Inconsistency found [ 917.067121][T31328] BTRFS info (device loop0): force clearing of disk cache [ 917.081563][T31364] NILFS (loop4): trying rollback from an earlier position [ 917.099279][T31328] BTRFS info (device loop0): setting nodatasum [ 917.114552][T31328] BTRFS info (device loop0): allowing degraded mounts [ 917.137701][T31364] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 917.147733][T31328] BTRFS info (device loop0): enabling disk space caching [ 917.177285][T31328] BTRFS info (device loop0): disk space caching is enabled [ 917.271854][ T26] audit: type=1326 audit(917.236:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31378 comm="syz.5.11938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6ab9c799 code=0x7ffc0000 [ 917.425138][ T26] audit: type=1326 audit(917.286:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31378 comm="syz.5.11938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6ab9c799 code=0x7ffc0000 [ 917.468490][ T26] audit: type=1326 audit(917.286:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31378 comm="syz.5.11938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6ab9c799 code=0x7ffc0000 [ 917.496491][ T26] audit: type=1326 audit(917.316:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31378 comm="syz.5.11938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f0f6ab9c799 code=0x7ffc0000 [ 917.579318][ T26] audit: type=1326 audit(917.316:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31378 comm="syz.5.11938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6ab9c799 code=0x7ffc0000 [ 917.642747][T31328] BTRFS info (device loop0): rebuilding free space tree [ 917.672560][T31328] BTRFS info (device loop0): disabling free space tree [ 917.708411][T31328] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 917.736862][T31328] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 917.744173][ T26] audit: type=1326 audit(917.316:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31378 comm="syz.5.11938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6ab9c799 code=0x7ffc0000 [ 917.950081][T31328] BTRFS info (device loop0): balance: start -susage=8589934849,limit=1 [ 917.958600][T31412] netlink: 'syz.6.11948': attribute type 2 has an invalid length. [ 918.063187][T31328] BTRFS info (device loop0): relocating block group 1048576 flags system [ 918.179758][T31328] BTRFS info (device loop0): balance: ended with status: 0 [ 918.259022][ T4266] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 918.331762][T31426] loop6: detected capacity change from 0 to 2048 [ 918.393690][T31427] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 918.907313][T31431] device netdevsim0 entered promiscuous mode [ 918.930926][T31431] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 918.950396][T31431] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 918.963841][T31431] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 919.020025][T31424] loop7: detected capacity change from 0 to 32768 [ 919.029650][T31418] loop4: detected capacity change from 0 to 32768 [ 919.061239][T31424] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 scanned by syz.7.11953 (31424) [ 919.069261][T31418] jfs_strtoUCS: char2uni returned -22. [ 919.100293][T31418] charset = cp950, char = 0xd4 [ 919.148869][T31424] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 919.190489][T31424] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 919.225005][T31424] BTRFS info (device loop7): force zlib compression, level 3 [ 919.284120][T31424] BTRFS info (device loop7): force clearing of disk cache [ 919.291327][T31424] BTRFS info (device loop7): setting nodatasum [ 919.333549][T31424] BTRFS info (device loop7): allowing degraded mounts [ 919.340509][T31424] BTRFS info (device loop7): enabling disk space caching [ 919.394021][T31424] BTRFS info (device loop7): disk space caching is enabled [ 919.615968][T31424] BTRFS info (device loop7): rebuilding free space tree [ 919.638405][T31424] BTRFS info (device loop7): disabling free space tree [ 919.645805][T31424] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 919.655810][T31424] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 919.774097][T16328] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 919.933108][T31476] loop4: detected capacity change from 0 to 2048 [ 919.991528][T31476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 920.314455][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 920.705952][T31502] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11982'. [ 920.946162][T31512] device batadv0 entered promiscuous mode [ 921.139112][T31522] loop4: detected capacity change from 0 to 2048 [ 921.190242][T31523] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 921.725388][T31547] overlayfs: empty lowerdir [ 921.863607][T31554] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12007'. [ 921.881671][T31554] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12007'. [ 922.123707][ T4824] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 922.315380][ T4824] usb 6-1: Using ep0 maxpacket: 8 [ 922.329153][ T4824] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.366366][ T4824] usb 6-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 922.398502][ T4824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.416759][ T4824] usb 6-1: config 0 descriptor?? [ 922.653123][ T4824] usb 6-1: USB disconnect, device number 48 [ 922.843604][ T14] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 922.890814][T31600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12029'. [ 922.900426][T31600] netlink: 4260 bytes leftover after parsing attributes in process `syz.0.12029'. [ 923.035301][ T14] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 923.047936][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.080697][ T14] usb 7-1: config 0 descriptor?? [ 923.089359][ T14] cp210x 7-1:0.0: cp210x converter detected [ 923.126513][T31610] loop7: detected capacity change from 0 to 128 [ 923.149274][T31610] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 923.184738][T31612] nvme_fabrics: unknown parameter or missing value '5y' in ctrl creation request [ 923.197368][T31610] hpfs: filesystem error: improperly stopped [ 923.223618][T31610] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 923.256767][T31610] hpfs: You really don't want any checks? You are crazy... [ 923.269369][T31610] hpfs: hpfs_map_sector(): read error [ 923.279372][T31610] hpfs: code page support is disabled [ 923.323884][T31610] hpfs: hpfs_map_4sectors(): unaligned read [ 923.330065][T31610] hpfs: hpfs_map_4sectors(): unaligned read [ 923.353580][T31610] hpfs: filesystem error: unable to find root dir [ 923.381752][T31615] netlink: 'syz.5.12038': attribute type 1 has an invalid length. [ 923.385299][T31616] loop0: detected capacity change from 0 to 1024 [ 923.438803][T31616] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 923.507950][T31616] hfsplus: filesystem is marked journaled, leaving read-only. [ 923.514799][ T14] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 923.545529][ T14] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 923.563823][ T14] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 923.582112][ T14] usb 7-1: cp210x converter now attached to ttyUSB0 [ 923.618629][ T14] usb 7-1: USB disconnect, device number 26 [ 923.628718][ T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 923.654646][ T14] cp210x 7-1:0.0: device disconnected [ 923.684888][T31620] loop5: detected capacity change from 0 to 2048 [ 923.760077][T31620] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 923.878354][T13620] EXT4-fs (loop5): unmounting filesystem. [ 924.016736][T31639] IPv6: Can't replace route, no match found [ 924.171172][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 924.171188][ T26] audit: type=1326 audit(924.136:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.7.12050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 924.268313][ T26] audit: type=1326 audit(924.176:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.7.12050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 924.301067][T31650] loop4: detected capacity change from 0 to 512 [ 924.307223][T31652] xt_bpf: check failed: parse error [ 924.323295][ T26] audit: type=1326 audit(924.176:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.7.12050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 924.345279][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.379795][ T26] audit: type=1326 audit(924.176:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.7.12050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 924.429555][T31650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 924.543600][T31650] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:337: inode #15: comm syz.4.12051: verity file corrupted; can't find descriptor [ 924.569985][T31650] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 924.652184][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 925.844252][T31718] IPv6: NLM_F_CREATE should be specified when creating new route [ 925.853612][T31718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 925.861187][T31718] IPv6: NLM_F_CREATE should be set when creating new route [ 925.933229][T31723] loop0: detected capacity change from 0 to 128 [ 925.993816][T31723] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 926.034474][T31728] loop5: detected capacity change from 0 to 64 [ 926.073568][T31723] hpfs: filesystem error: improperly stopped [ 926.079711][T31723] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 926.123492][T31723] hpfs: You really don't want any checks? You are crazy... [ 926.130766][T31723] hpfs: Code page index out of array [ 926.165298][ T26] audit: type=1326 audit(926.136:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31731 comm="syz.7.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 926.190197][T31723] hpfs: code page support is disabled [ 926.212114][T31723] hpfs: hpfs_map_4sectors(): unaligned read [ 926.243808][T31723] hpfs: hpfs_map_4sectors(): unaligned read [ 926.250210][T31723] hpfs: filesystem error: unable to find root dir [ 926.256299][ T26] audit: type=1326 audit(926.136:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31731 comm="syz.7.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 926.278465][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.393596][ T26] audit: type=1326 audit(926.136:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31731 comm="syz.7.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 926.397676][T31738] sctp: [Deprecated]: syz.4.12096 (pid 31738) Use of int in maxseg socket option. [ 926.397676][T31738] Use struct sctp_assoc_value instead [ 926.450023][ T26] audit: type=1326 audit(926.136:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31731 comm="syz.7.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 926.498408][ T26] audit: type=1326 audit(926.136:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31731 comm="syz.7.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 926.551028][ T26] audit: type=1326 audit(926.136:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31731 comm="syz.7.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 926.752629][T31741] loop6: detected capacity change from 0 to 4096 [ 926.807156][T31741] ntfs: volume version 3.1. [ 926.993563][T31756] netlink: 'syz.0.12105': attribute type 6 has an invalid length. [ 927.044588][T31760] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 927.274216][T31768] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12111'. [ 927.828730][T31791] netlink: 3648 bytes leftover after parsing attributes in process `syz.7.12122'. [ 927.843954][T31791] netlink: 3648 bytes leftover after parsing attributes in process `syz.7.12122'. [ 927.982922][T31764] loop5: detected capacity change from 0 to 32768 [ 928.103618][T31806] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 928.127271][T31764] XFS (loop5): Mounting V5 Filesystem [ 928.212850][T31764] XFS (loop5): Ending clean mount [ 928.277526][T31764] XFS (loop5): Quotacheck needed: Please wait. [ 928.384615][T31764] XFS (loop5): Quotacheck: Done. [ 928.519387][T13620] XFS (loop5): Unmounting Filesystem [ 928.892316][T31839] netlink: 'syz.6.12142': attribute type 21 has an invalid length. [ 928.934979][T31839] netlink: 128 bytes leftover after parsing attributes in process `syz.6.12142'. [ 928.954797][T31839] netlink: 3 bytes leftover after parsing attributes in process `syz.6.12142'. [ 929.217046][T31851] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 929.443740][ T8442] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 929.623570][ T8442] usb 7-1: Using ep0 maxpacket: 8 [ 929.630563][ T8442] usb 7-1: config 1 has an invalid interface number: 128 but max is 1 [ 929.653500][ T8442] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.695649][ T8442] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 929.716537][T31873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12159'. [ 929.725864][ T8442] usb 7-1: config 1 has no interface number 0 [ 929.742298][ T8442] usb 7-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 929.785840][ T8442] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 929.816018][ T8442] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.838748][ T8442] usb 7-1: Product: syz [ 929.842978][ T8442] usb 7-1: Manufacturer: syz [ 929.868437][ T8442] usb 7-1: SerialNumber: syz [ 929.882477][T31880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12162'. [ 929.897005][ T8442] cdc_wdm 7-1:1.128: skipping garbage [ 929.907485][ T8442] cdc_wdm 7-1:1.128: invalid descriptor buffer length [ 929.921543][ T8442] cdc_wdm: probe of 7-1:1.128 failed with error -22 [ 929.921758][T31882] ip6t_rpfilter: unknown options [ 929.958153][T31883] netlink: 'syz.0.12164': attribute type 1 has an invalid length. [ 929.981455][T31883] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12164'. [ 930.141723][ T4816] usb 7-1: USB disconnect, device number 27 [ 930.184852][T31891] netlink: 14 bytes leftover after parsing attributes in process `syz.5.12169'. [ 930.864408][T31919] device team0 entered promiscuous mode [ 930.890867][T31919] device team_slave_1 entered promiscuous mode [ 930.911744][T31919] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 930.989594][T31929] loop7: detected capacity change from 0 to 256 [ 931.097463][T31929] FAT-fs (loop7): Directory bread(block 64) failed [ 931.113914][T31929] FAT-fs (loop7): Directory bread(block 65) failed [ 931.124034][T31929] FAT-fs (loop7): Directory bread(block 66) failed [ 931.147621][T31929] FAT-fs (loop7): Directory bread(block 67) failed [ 931.175890][T31929] FAT-fs (loop7): Directory bread(block 68) failed [ 931.199343][T31929] FAT-fs (loop7): Directory bread(block 69) failed [ 931.226729][T31929] FAT-fs (loop7): Directory bread(block 70) failed [ 931.254707][T31929] FAT-fs (loop7): Directory bread(block 71) failed [ 931.277160][T31929] FAT-fs (loop7): Directory bread(block 72) failed [ 931.308888][T31929] FAT-fs (loop7): Directory bread(block 73) failed [ 931.616070][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.126403][T31967] openvswitch: netlink: Message has 1 unknown bytes. [ 932.325610][T31977] loop5: detected capacity change from 0 to 16 [ 932.375138][T31977] erofs: (device loop5): mounted with root inode @ nid 36. [ 932.573314][T31985] CIFS mount error: No usable UNC path provided in device string! [ 932.573314][T31985] [ 932.612038][T31987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12216'. [ 932.623710][T31985] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 932.643725][T31987] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 932.923775][T32000] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 933.573162][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 933.573181][ T26] audit: type=1326 audit(933.536:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32029 comm="syz.7.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 933.650868][ T26] audit: type=1326 audit(933.576:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32029 comm="syz.7.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 933.692806][ T26] audit: type=1326 audit(933.576:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32029 comm="syz.7.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 933.813814][ T26] audit: type=1326 audit(933.576:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32029 comm="syz.7.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 933.853473][ T4816] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 933.862787][ T26] audit: type=1326 audit(933.576:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32029 comm="syz.7.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 933.888872][T32046] netlink: 'syz.4.12243': attribute type 1 has an invalid length. [ 933.907642][ T26] audit: type=1326 audit(933.576:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32029 comm="syz.7.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 933.970474][ T26] audit: type=1326 audit(933.576:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32029 comm="syz.7.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 934.034735][ T26] audit: type=1326 audit(933.576:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32029 comm="syz.7.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 934.053601][ T4816] usb 6-1: Using ep0 maxpacket: 32 [ 934.096162][ T4816] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 934.105003][ T26] audit: type=1326 audit(933.576:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32029 comm="syz.7.12238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f015b59c799 code=0x7ffc0000 [ 934.133634][ T4816] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 934.138087][T32052] device wlan0 entered promiscuous mode [ 934.171815][ T4816] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 934.215911][ T4816] usb 6-1: config 1 has no interface number 0 [ 934.222090][ T4816] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 934.242248][ T4816] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 934.265032][T32056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12248'. [ 934.293689][ T4816] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 934.313782][ T4816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.347497][T32060] netlink: 92 bytes leftover after parsing attributes in process `syz.4.12250'. [ 934.356427][ T4816] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 934.381678][T32060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12250'. [ 934.401584][T32060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12250'. [ 934.427901][T32060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12250'. [ 934.441486][T32064] netlink: 'syz.0.12253': attribute type 10 has an invalid length. [ 934.473564][T32064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12253'. [ 934.493111][T32064] bridge0: port 1(ipvlan1) entered blocking state [ 934.510234][T32064] bridge0: port 1(ipvlan1) entered disabled state [ 934.536074][T32064] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 934.559271][ T4816] snd_usb_pod 6-1:1.1: invalid control EP [ 934.567855][ T4816] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 934.581389][ T4816] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 934.599818][ T4816] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 934.772962][ T4824] usb 6-1: USB disconnect, device number 49 [ 934.928262][T32082] loop7: detected capacity change from 0 to 2048 [ 934.960922][T32085] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 935.049501][T32085] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 935.049650][T32085] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 935.050307][T32085] Remounting filesystem read-only [ 935.051072][T16328] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 935.311828][T32095] loop7: detected capacity change from 0 to 1024 [ 935.359400][T32095] EXT4-fs: Ignoring removed oldalloc option [ 935.464647][T32095] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 935.527441][T32108] loop0: detected capacity change from 0 to 64 [ 935.547596][T32095] EXT4-fs error (device loop7): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.7.12267: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 935.636616][T32112] loop4: detected capacity change from 0 to 512 [ 935.637900][T32095] EXT4-fs error (device loop7) in ext4_delete_entry:2800: Corrupt filesystem [ 935.688395][T32095] EXT4-fs warning (device loop7): ext4_rename_delete:3778: inode #2: comm syz.7.12267: Deleting old file: nlink 4, error=-117 [ 935.852475][T32118] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 935.873891][T16328] EXT4-fs (loop7): unmounting filesystem. [ 935.895415][ T26] audit: type=1326 audit(935.866:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32120 comm="syz.0.12278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf419c799 code=0x7ffc0000 [ 936.250259][T32131] device team0 entered promiscuous mode [ 936.265308][T32131] device team_slave_0 entered promiscuous mode [ 936.282847][T32131] device team_slave_1 entered promiscuous mode [ 936.301008][T32131] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 936.834775][T32161] netlink: 'syz.0.12296': attribute type 1 has an invalid length. [ 936.842718][T32161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12296'. [ 937.104586][T32168] device team0 entered promiscuous mode [ 937.110242][T32168] device team_slave_1 entered promiscuous mode [ 937.155504][T32168] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.164127][T32168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 937.189069][T32168] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 937.269220][T32155] loop4: detected capacity change from 0 to 32768 [ 937.319253][T32155] [ 937.319253][T32155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 937.319253][T32155] [ 937.401367][T32155] JFS: metapage_get_blocks failed [ 937.427612][T32155] ERROR: (device loop4): release_metapage: write_one_page() failed [ 937.427612][T32155] [ 937.476679][T32155] ERROR: (device loop4): remounting filesystem as read-only [ 937.490843][T32155] ERROR: (device loop4): diWrite: ixpxd invalid [ 937.490843][T32155] [ 937.535686][T32155] ERROR: (device loop4): txCommit: [ 937.535686][T32155] [ 938.571093][T32226] netlink: 'syz.5.12327': attribute type 7 has an invalid length. [ 938.783307][T32230] loop6: detected capacity change from 0 to 8192 [ 938.843297][T32230] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 938.844304][T32236] loop5: detected capacity change from 0 to 4096 [ 938.859670][T32230] FAT-fs (loop6): Filesystem has been set read-only [ 938.877545][T32236] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 938.911577][T32230] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 938.952665][T32230] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 939.024215][T32230] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 939.063851][T32230] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 939.114018][T32230] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 939.153331][T32230] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 939.163053][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 939.163069][ T26] audit: type=1800 audit(939.126:629): pid=32230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.12329" name="file2" dev="loop6" ino=1048728 res=0 errno=0 [ 939.190551][T32245] loop4: detected capacity change from 0 to 512 [ 939.228341][T32230] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 939.311670][T32245] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 939.426531][T32230] syz.6.12329 (32230) used greatest stack depth: 19664 bytes left [ 939.502136][T32259] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12343'. [ 939.515141][T32245] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.12337: Directory block failed checksum [ 939.649905][T32261] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 939.665479][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 939.669735][T32265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12345'. [ 939.835581][T32271] loop7: detected capacity change from 0 to 128 [ 939.895201][T32271] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 939.919891][T32271] FAT-fs (loop7): Filesystem has been set read-only [ 940.066689][T32279] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.12352'. [ 940.117479][T32279] bridge_slave_1: default FDB implementation only supports local addresses [ 940.143777][T32281] netlink: 'syz.5.12353': attribute type 10 has an invalid length. [ 940.186335][T32281] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 940.282194][T32287] cgroup: none used incorrectly [ 940.352057][T32291] loop7: detected capacity change from 0 to 1024 [ 940.564643][ T9008] hfsplus: b-tree write err: -5, ino 25 [ 940.570455][ T9008] hfsplus: b-tree write err: -5, ino 4 [ 940.600732][ T9008] hfsplus: b-tree write err: -5, ino 2 [ 940.700356][T32307] openvswitch: netlink: Tunnel attr 6 has unexpected len 4 expected 0 [ 940.863457][ T4819] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 941.053509][ T4819] usb 7-1: Using ep0 maxpacket: 8 [ 941.065173][ T4819] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 941.074418][T32323] netlink: 1096 bytes leftover after parsing attributes in process `syz.7.12374'. [ 941.100655][ T4819] usb 7-1: config 0 has no interface number 0 [ 941.110370][ T4819] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 941.129770][ T4819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.150030][ T4819] usb 7-1: Product: syz [ 941.155340][ T4819] usb 7-1: Manufacturer: syz [ 941.168289][ T4819] usb 7-1: SerialNumber: syz [ 941.196079][ T4819] usb 7-1: config 0 descriptor?? [ 941.420988][ T4819] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 941.433492][ T4819] usb 7-1: Failed to initialize entity for entity 6 [ 941.450510][ T4819] usb 7-1: Failed to register entities (-22). [ 941.557028][T32313] loop0: detected capacity change from 0 to 32768 [ 941.662342][ T8442] usb 7-1: USB disconnect, device number 28 [ 942.126021][T32327] loop5: detected capacity change from 0 to 40427 [ 942.159081][T32327] F2FS-fs (loop5): Invalid segment count (0) [ 942.166143][T32350] loop7: detected capacity change from 0 to 2048 [ 942.185889][T32327] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 942.229392][T32327] F2FS-fs (loop5): invalid crc value [ 942.250369][T32350] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 942.280533][T32327] F2FS-fs (loop5): Found nat_bits in checkpoint [ 942.298822][T32350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 942.384115][T32355] ip6t_REJECT: ECHOREPLY is not supported [ 942.506105][T32327] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 942.513321][T32327] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 942.755314][T32327] F2FS-fs (loop5): Can't flush 65535 in 0 for segs_per_sec 1 != 1 [ 943.235865][ T26] audit: type=1326 audit(943.206:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32381 comm="syz.6.12399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 943.338977][ T26] audit: type=1326 audit(943.206:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32381 comm="syz.6.12399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 943.458860][ T26] audit: type=1326 audit(943.206:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32381 comm="syz.6.12399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 943.584974][ T26] audit: type=1326 audit(943.206:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32381 comm="syz.6.12399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 943.628891][T32397] netlink: set zone limit has 4 unknown bytes [ 943.878698][T32408] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12411'. [ 943.952332][T32408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12411'. [ 944.014201][T32408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12411'. [ 944.044083][T32408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12411'. [ 944.169305][T32409] loop5: detected capacity change from 0 to 8192 [ 944.176080][T32419] Unsupported ieee802154 address type: 0 [ 944.295330][T32423] loop4: detected capacity change from 0 to 16 [ 944.348078][T32423] erofs: (device loop4): mounted with root inode @ nid 36. [ 944.698285][T32435] loop4: detected capacity change from 0 to 256 [ 944.801105][T32435] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 945.022513][T32447] netlink: 'syz.0.12431': attribute type 8 has an invalid length. [ 945.073586][T32447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 945.397275][T32464] device xfrm0 entered promiscuous mode [ 945.513620][T32471] x_tables: duplicate entry at hook 1 [ 945.752994][T32483] netlink: 'syz.5.12449': attribute type 1 has an invalid length. [ 945.843521][T32485] netlink: 'syz.4.12450': attribute type 1 has an invalid length. [ 945.851840][T32485] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12450'. [ 945.967121][ T26] audit: type=1400 audit(945.936:634): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=32492 comm="syz.5.12454" [ 947.258038][ T26] audit: type=1326 audit(947.226:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32551 comm="syz.6.12482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 947.320744][ T26] audit: type=1326 audit(947.256:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32551 comm="syz.6.12482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 947.384133][ T26] audit: type=1326 audit(947.256:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32551 comm="syz.6.12482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 947.474613][ T26] audit: type=1326 audit(947.256:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32551 comm="syz.6.12482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 947.543812][ T26] audit: type=1326 audit(947.256:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32551 comm="syz.6.12482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 947.893329][T32576] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12495'. [ 948.022336][T32534] loop4: detected capacity change from 0 to 40427 [ 948.054959][T32534] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 948.061390][T32534] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 948.116882][T32534] F2FS-fs (loop4): invalid crc value [ 948.124089][T32582] loop5: detected capacity change from 0 to 2048 [ 948.150750][T32534] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 948.176308][T32582] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 948.364428][T32534] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 948.371542][T32534] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 948.376130][T32591] netlink: 'syz.7.12500': attribute type 10 has an invalid length. [ 948.634569][T32572] loop6: detected capacity change from 0 to 32768 [ 948.672227][T32572] (syz.6.12493,32572,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 948.725181][T32572] (syz.6.12493,32572,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 948.832769][T32572] JBD2: Ignoring recovery information on journal [ 948.905612][T32572] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 949.041108][T13437] ocfs2: Unmounting device (7,6) on (node local) [ 949.473774][ T4819] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 949.566531][T32621] loop7: detected capacity change from 0 to 256 [ 949.674264][ T4819] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 949.686346][ T4819] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 949.745413][ T4819] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 949.794859][ T4819] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 949.820092][ T4819] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 949.850301][ T4819] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 949.882444][ T4819] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 949.914739][ T4819] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 949.955160][ T4819] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 949.990064][ T4819] usb 7-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 950.019180][ T4819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.054463][ T4819] pwc: Logitech QuickCam detected (reserved ID). [ 950.060873][ T4819] pwc: Warning: more than 1 configuration available. [ 950.454383][ T4819] pwc: send_video_command error -71 [ 950.459669][ T4819] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 950.473588][ T4819] Philips webcam: probe of 7-1:250.0 failed with error -71 [ 950.493128][ T4819] usb 7-1: USB disconnect, device number 29 [ 950.878789][T32672] IPv6: sit3: Disabled Multicast RS [ 951.721366][T32707] loop5: detected capacity change from 0 to 512 [ 951.850226][T32707] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 951.911718][T32707] EXT4-fs (loop5): unmounting filesystem. [ 951.972786][T32724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 952.067276][T32726] netlink: 64 bytes leftover after parsing attributes in process `syz.7.12562'. [ 952.116991][T32730] loop4: detected capacity change from 0 to 128 [ 952.187491][T32730] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 952.264735][T32730] FAT-fs (loop4): Filesystem has been set read-only [ 952.270187][T32735] netlink: 188 bytes leftover after parsing attributes in process `syz.5.12567'. [ 952.361843][T32740] loop7: detected capacity change from 0 to 164 [ 952.385992][T32740] rock: directory entry would overflow storage [ 952.392302][T32740] rock: sig=0x4543, size=28, remaining=18 [ 953.428551][ T314] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.12590'. [ 953.470085][ T314] netlink: 43 bytes leftover after parsing attributes in process `syz.4.12590'. [ 953.646604][ T321] loop5: detected capacity change from 0 to 64 [ 953.682528][ T324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12594'. [ 953.722159][ T325] netlink: 'syz.6.12595': attribute type 21 has an invalid length. [ 954.449216][ T14] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 954.466476][ T354] loop7: detected capacity change from 0 to 512 [ 954.467278][ T356] netlink: 'syz.5.12611': attribute type 2 has an invalid length. [ 954.491582][ T354] EXT4-fs: Ignoring removed nobh option [ 954.522347][ T354] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 954.583552][ T354] EXT4-fs (loop7): 1 truncate cleaned up [ 954.594776][ T354] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 954.658518][T16328] EXT4-fs (loop7): unmounting filesystem. [ 954.666782][ T14] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 954.683206][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.713502][ T4819] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 954.754144][ T14] usb 7-1: config 0 descriptor?? [ 954.773548][ T14] cp210x 7-1:0.0: cp210x converter detected [ 954.903487][ T4819] usb 5-1: Using ep0 maxpacket: 32 [ 954.913898][ T4819] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.943261][ T4819] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.975380][ T4819] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 954.995069][ T4819] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 955.023529][ T4819] usb 5-1: Product: syz [ 955.027911][ T4819] usb 5-1: Manufacturer: syz [ 955.054517][ T4819] hub 5-1:4.0: USB hub found [ 955.164775][ T26] audit: type=1326 audit(955.136:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=372 comm="syz.5.12619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6ab9c799 code=0x7ffc0000 [ 955.192008][ T14] usb 7-1: cp210x converter now attached to ttyUSB0 [ 955.211100][ T14] usb 7-1: USB disconnect, device number 30 [ 955.230741][ T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 955.238919][ T26] audit: type=1326 audit(955.176:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=372 comm="syz.5.12619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0f6ab9c799 code=0x7ffc0000 [ 955.255718][ T4819] hub 5-1:4.0: 5 ports detected [ 955.267564][ T14] cp210x 7-1:0.0: device disconnected [ 955.276859][ T4819] hub 5-1:4.0: insufficient power available to use all downstream ports [ 955.303944][ T26] audit: type=1326 audit(955.176:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=372 comm="syz.5.12619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6ab9c799 code=0x7ffc0000 [ 955.468140][ T4819] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 955.476836][ T4819] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 955.544222][ T4819] usb 5-1: USB disconnect, device number 45 [ 955.729092][ T392] IPv6: sit4: Disabled Multicast RS [ 956.148372][ T410] xt_bpf: check failed: parse error [ 956.326125][ T422] loop4: detected capacity change from 0 to 128 [ 956.411363][ T422] syz.4.12643: attempt to access beyond end of device [ 956.411363][ T422] loop4: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 956.474464][ T422] Buffer I/O error on dev loop4, logical block 3245768, async page read [ 956.561327][ T430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12647'. [ 956.604264][ T428] loop6: detected capacity change from 0 to 4096 [ 956.614043][ T4278] sysv_free_block: flc_count > flc_size [ 956.619772][ T4278] sysv_free_block: flc_count > flc_size [ 956.629856][ T428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 956.647220][ T432] netlink: 'syz.7.12648': attribute type 7 has an invalid length. [ 956.648224][ T4278] sysv_free_block: flc_count > flc_size [ 956.675766][ T4278] sysv_free_block: flc_count > flc_size [ 956.682714][ T4278] sysv_free_block: flc_count > flc_size [ 956.682732][ T428] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 956.773288][ T4278] sysv_free_block: flc_count > flc_size [ 956.781759][ T436] loop0: detected capacity change from 0 to 1024 [ 956.789818][T13437] EXT4-fs (loop6): unmounting filesystem. [ 956.804192][ T4278] sysv_free_block: flc_count > flc_size [ 956.854607][ T9008] hfsplus: b-tree write err: -5, ino 25 [ 956.856820][ T4278] sysv_free_block: flc_count > flc_size [ 956.860445][ T9008] hfsplus: b-tree write err: -5, ino 4 [ 956.886674][ T4278] sysv_free_block: flc_count > flc_size [ 956.892298][ T4278] sysv_free_block: flc_count > flc_size [ 956.906444][ T9008] hfsplus: b-tree write err: -5, ino 2 [ 956.936012][ T4278] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 956.939151][ T9008] hfsplus: b-tree write err: -5, ino 17 [ 957.264299][ T453] loop6: detected capacity change from 0 to 8 [ 957.332949][ T458] netlink: 92 bytes leftover after parsing attributes in process `syz.4.12659'. [ 957.351027][ T453] SQUASHFS error: Failed to read block 0x2d7: -5 [ 957.388961][ T453] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 957.423764][ T453] SQUASHFS error: Failed to read block 0x85: -5 [ 957.430164][ T453] SQUASHFS error: Failed to read block 0x85: -5 [ 957.464339][ T26] audit: type=1800 audit(957.436:643): pid=453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.12657" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 957.707953][ T469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12667'. [ 957.741289][ T469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12667'. [ 957.778202][ T473] loop4: detected capacity change from 0 to 2048 [ 957.902887][ T473] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 958.096460][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 958.366572][ T502] ieee802154 phy1 wpan1: encryption failed: -22 [ 958.677748][ T26] audit: type=1326 audit(958.646:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=516 comm="syz.6.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 958.785806][ T26] audit: type=1326 audit(958.646:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=516 comm="syz.6.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 958.856426][ T26] audit: type=1326 audit(958.646:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=516 comm="syz.6.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 958.953195][ T26] audit: type=1326 audit(958.686:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=516 comm="syz.6.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 959.006933][ T533] netlink: 'syz.0.12696': attribute type 11 has an invalid length. [ 959.052442][ T26] audit: type=1326 audit(958.686:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=516 comm="syz.6.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 959.124221][ T536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12699'. [ 959.126717][ T26] audit: type=1326 audit(958.686:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=516 comm="syz.6.12688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 959.271970][ T539] loop4: detected capacity change from 0 to 4096 [ 960.017320][ T561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12710'. [ 960.068791][ T565] netlink: 'syz.6.12711': attribute type 2 has an invalid length. [ 960.110512][ T565] device .*! entered promiscuous mode [ 960.168593][ T532] syz.7.12695 (532): drop_caches: 2 [ 961.033859][ T596] xt_CT: You must specify a L4 protocol and not use inversions on it [ 961.100368][ T567] loop5: detected capacity change from 0 to 32768 [ 961.109708][ T571] loop0: detected capacity change from 0 to 32768 [ 961.139185][ T571] (syz.0.12715,571,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 961.178317][ T571] (syz.0.12715,571,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 961.240287][ T567] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 961.255259][ T567] XFS (loop5): Mounting V5 Filesystem [ 961.276310][ T571] JBD2: Ignoring recovery information on journal [ 961.430344][ T571] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 961.518233][ T567] XFS (loop5): Ending clean mount [ 961.555824][ T567] XFS (loop5): Quotacheck needed: Please wait. [ 961.691667][ T567] XFS (loop5): Quotacheck: Done. [ 961.748551][ T4266] ocfs2: Unmounting device (7,0) on (node local) [ 961.937785][T13620] XFS (loop5): Unmounting Filesystem [ 962.061093][ T633] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12742'. [ 963.243498][ T4824] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 963.288941][ T652] loop4: detected capacity change from 0 to 32768 [ 963.324240][ T652] JBD2: Ignoring recovery information on journal [ 963.385783][ T652] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 963.435328][ T4824] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 963.445436][ T4824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.466425][ T4824] usb 7-1: config 0 descriptor?? [ 963.625175][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 963.647450][ T684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12764'. [ 963.679910][ T4824] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 963.691701][ T4824] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 963.890243][ T4824] [drm:udl_init] *ERROR* Selecting channel failed [ 963.950364][ T4824] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2 [ 963.978445][ T4824] [drm] Initialized udl on minor 2 [ 964.010410][ T4824] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 964.069320][ T4824] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 964.119673][ T700] loop7: detected capacity change from 0 to 512 [ 964.122944][ T4824] usb 7-1: USB disconnect, device number 31 [ 964.159671][ T4819] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 964.215882][ T700] EXT4-fs: Ignoring removed bh option [ 964.235522][ T4819] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 964.238845][ T700] EXT4-fs: Ignoring removed oldalloc option [ 964.269378][ T4819] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 964.309461][ T700] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 964.388159][ T700] EXT4-fs (loop7): 1 truncate cleaned up [ 964.399581][ T700] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 964.446546][T16328] EXT4-fs (loop7): unmounting filesystem. [ 964.728102][ T726] loop0: detected capacity change from 0 to 512 [ 964.777628][ T726] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.12784: inode has both inline data and extents flags [ 964.795043][ T726] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.12784: couldn't read orphan inode 15 (err -117) [ 964.815573][ T726] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 965.054657][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 965.222587][ T749] x_tables: unsorted entry at hook 3 [ 965.325020][ T751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12795'. [ 965.353584][ T751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12795'. [ 965.477365][ T52] block nbd4: Attempted send on invalid socket [ 965.483796][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 966.044201][ T783] netlink: 'syz.5.12809': attribute type 2 has an invalid length. [ 966.052094][ T783] netlink: 'syz.5.12809': attribute type 1 has an invalid length. [ 966.136845][ T789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12812'. [ 966.203470][ T789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12812'. [ 966.859741][ T823] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12828'. [ 967.035343][ T829] loop7: detected capacity change from 0 to 128 [ 967.041461][ T826] loop5: detected capacity change from 0 to 1764 [ 967.094330][ T829] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 54) [ 967.111508][ T827] loop4: detected capacity change from 0 to 4096 [ 967.125110][ T829] FAT-fs (loop7): Filesystem has been set read-only [ 967.154958][ T827] EXT4-fs: Ignoring removed mblk_io_submit option [ 967.195998][ T827] EXT4-fs (loop4): Test dummy encryption mode enabled [ 967.233579][ T827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 967.261581][T16328] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 54) [ 967.508252][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 967.547870][ T805] loop0: detected capacity change from 0 to 32768 [ 967.654069][ T805] [ 967.654069][ T805] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 967.654069][ T805] [ 967.739157][ T805] [ 967.739157][ T805] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 967.739157][ T805] [ 967.785295][ T805] [ 967.785295][ T805] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 967.785295][ T805] [ 967.843853][ T805] [ 967.843853][ T805] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 967.843853][ T805] [ 967.893575][ T805] [ 967.893575][ T805] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 967.893575][ T805] [ 967.939034][ T805] [ 967.939034][ T805] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 967.939034][ T805] [ 967.988720][ T805] [ 967.988720][ T805] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 967.988720][ T805] [ 967.990990][ T854] loop4: detected capacity change from 0 to 2048 [ 968.046962][ T106] [ 968.046962][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 968.046962][ T106] [ 968.164034][ T4266] [ 968.164034][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 968.164034][ T4266] [ 968.184238][ T4266] [ 968.184238][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 968.184238][ T4266] [ 968.229196][ T854] loop4: unable to read partition table [ 968.248329][ T854] loop4: partition table beyond EOD, truncated [ 968.278708][ T854] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 968.466228][ T3637] loop4: unable to read partition table [ 968.483781][ T3637] loop4: partition table beyond EOD, truncated [ 968.573628][T13212] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 968.862157][ T888] loop7: detected capacity change from 0 to 164 [ 968.920575][ T888] Unsupported NM flag settings (240) [ 969.547024][ T920] xt_CT: No such helper "netbios-ns" [ 969.707671][ T936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 970.134863][ T959] netlink: 6 bytes leftover after parsing attributes in process `syz.4.12884'. [ 970.152614][ T961] x_tables: ip_tables: osf match: only valid for protocol 6 [ 970.167749][ T959] netlink: 6 bytes leftover after parsing attributes in process `syz.4.12884'. [ 970.643593][ T4824] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 970.833502][ T4824] usb 7-1: Using ep0 maxpacket: 16 [ 970.840906][ T4824] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 970.876541][ T4824] usb 7-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf [ 970.904833][ T4824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.949433][ T4824] usb 7-1: Product: syz [ 970.969524][ T4824] usb 7-1: Manufacturer: syz [ 970.975573][ T4824] usb 7-1: SerialNumber: syz [ 970.990593][ T4824] usb 7-1: config 0 descriptor?? [ 971.202978][ T4824] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 971.220049][ T1009] loop4: detected capacity change from 0 to 2048 [ 971.234213][ T1009] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 971.263505][ T4819] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 971.304782][ T1014] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 971.453739][ T4819] usb 6-1: Using ep0 maxpacket: 32 [ 971.454980][ T8442] usb 7-1: USB disconnect, device number 32 [ 971.460775][ T4819] usb 6-1: config 3 has an invalid interface number: 160 but max is 0 [ 971.510202][ T4819] usb 6-1: config 3 has no interface number 0 [ 971.529589][ T4819] usb 6-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 971.566380][ T4819] usb 6-1: config 3 interface 160 has no altsetting 0 [ 971.598773][ T4819] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 971.618272][ T4819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.639268][ T4819] usb 6-1: Product: syz [ 971.643778][ T4819] usb 6-1: Manufacturer: syz [ 971.648421][ T4819] usb 6-1: SerialNumber: syz [ 971.670209][ T996] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 971.908351][ T4819] usbhid 6-1:3.160: couldn't find an input interrupt endpoint [ 971.946600][ T4819] usb 6-1: USB disconnect, device number 50 [ 971.956153][ T1045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12921'. [ 972.519526][ T1067] ax25_connect(): syz.4.12931 uses autobind, please contact jreuter@yaina.de [ 972.768084][ T1051] loop6: detected capacity change from 0 to 32768 [ 972.891787][ T9004] read_mapping_page failed! [ 972.899166][ T9004] ERROR: (device loop6): txCommit: [ 972.899166][ T9004] [ 972.923087][ T9004] ERROR: (device loop6): remounting filesystem as read-only [ 972.938189][ T9004] jfs_write_inode: jfs_commit_inode failed! [ 973.003844][ T1085] device geneve3 entered promiscuous mode [ 973.126409][ T1082] loop4: detected capacity change from 0 to 4096 [ 973.169910][ T1082] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 973.303977][ T1082] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 973.430542][ T4278] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 973.443854][ T4278] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 973.538461][ T1095] loop7: detected capacity change from 0 to 2048 [ 973.595474][ T1095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 973.715567][ T1101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12948'. [ 973.977866][ T1087] loop5: detected capacity change from 0 to 32768 [ 974.078702][ T1087] XFS (loop5): Mounting V5 Filesystem [ 974.121728][ T1119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12954'. [ 974.139051][ T1119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12954'. [ 974.201526][ T1087] XFS (loop5): Ending clean mount [ 974.203807][ T1119] bridge0: port 3(dummy0) entered disabled state [ 974.221473][ T1119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12954'. [ 974.287986][T13620] XFS (loop5): Unmounting Filesystem [ 974.357415][ T1125] loop7: detected capacity change from 0 to 4096 [ 974.383504][ T1125] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 974.614405][T16328] ntfs3: loop7: ntfs_sync_fs r=1a failed, -22. [ 974.662124][T16328] ntfs3: loop7: ntfs_evict_inode r=1a failed, -22. [ 974.693667][T16328] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 974.968624][ T1143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 975.286648][ T1156] netlink: 136 bytes leftover after parsing attributes in process `syz.4.12971'. [ 975.539093][ T1171] netlink: 'syz.0.12978': attribute type 12 has an invalid length. [ 975.647495][ T1175] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 975.758464][ T1177] loop5: detected capacity change from 0 to 4096 [ 975.775818][ T1177] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 975.823710][ T8442] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 975.881086][ T1177] ntfs3: loop5: failed to convert "c46c" to iso8859-6 [ 975.899512][ T1177] ntfs3: loop5: failed to convert "0030" to iso8859-6 [ 975.919379][ T1177] ntfs3: loop5: failed to convert "0031" to iso8859-6 [ 976.016044][ T8442] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 976.044411][ T8442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.071857][ T8442] usb 5-1: config 0 descriptor?? [ 976.203794][ T1194] netlink: 'syz.7.12990': attribute type 1 has an invalid length. [ 976.211517][ T1197] loop6: detected capacity change from 0 to 512 [ 976.221956][ T1194] netlink: 'syz.7.12990': attribute type 3 has an invalid length. [ 976.230805][ T1197] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 976.258363][ T1197] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 976.273588][ T1194] netlink: 224 bytes leftover after parsing attributes in process `syz.7.12990'. [ 976.291114][ T8442] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 976.313510][ T8442] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 976.349957][ T1197] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.12991: invalid indirect mapped block 4294967295 (level 1) [ 976.382209][ T1197] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.12991: invalid indirect mapped block 4294967295 (level 1) [ 976.415083][ T1197] EXT4-fs (loop6): 2 truncates cleaned up [ 976.443727][ T1197] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 976.502080][ T8442] [drm:udl_init] *ERROR* Selecting channel failed [ 976.537824][ T8442] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 976.583544][ T8442] [drm] Initialized udl on minor 2 [ 976.598144][ T8442] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 976.618602][ T8442] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 976.663189][T13437] EXT4-fs (loop6): unmounting filesystem. [ 976.680001][ T8442] usb 5-1: USB disconnect, device number 46 [ 976.699247][T13542] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 976.747900][T13542] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 976.754234][ T1214] loop7: detected capacity change from 0 to 256 [ 976.782207][ T1214] exfat: Deprecated parameter 'utf8' [ 976.793557][T13542] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 976.793578][ T1214] exfat: Deprecated parameter 'utf8' [ 976.849901][ T1214] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 977.428462][ T1236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13009'. [ 977.772185][ T1244] loop0: detected capacity change from 0 to 4096 [ 977.813753][ T1244] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 978.137531][ T1226] loop7: detected capacity change from 0 to 32768 [ 978.264643][ T1226] XFS (loop7): Mounting V5 Filesystem [ 978.351313][ T1234] loop6: detected capacity change from 0 to 32768 [ 978.452922][ T1234] ea_get: invalid extended attribute [ 978.468358][ T1226] XFS (loop7): Ending clean mount [ 978.592707][ T1226] XFS (loop7): syz.7.13002 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 978.668150][ T1279] comedi comedi4: bad chanlist[0]=0x00006c7f chan=27775 range length=2 [ 978.741522][T16328] XFS (loop7): Unmounting Filesystem [ 979.087858][ T1291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13032'. [ 979.106542][ T1291] device netdevsim0 entered promiscuous mode [ 979.317147][ T1295] netlink: 'syz.4.13033': attribute type 11 has an invalid length. [ 979.519704][ T1305] netlink: 'syz.7.13027': attribute type 2 has an invalid length. [ 979.612382][ T1309] loop6: detected capacity change from 0 to 256 [ 979.863606][ T14] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 980.048972][ T1329] tmpfs: Bad value for 'nr_inodes' [ 980.065371][ T14] usb 6-1: unable to get BOS descriptor or descriptor too short [ 980.089817][ T14] usb 6-1: string descriptor 0 read error: -22 [ 980.107740][ T14] usb 6-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 980.127901][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.153155][ T14] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 980.214542][ T14] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 980.374946][ T14] snd-usb-hiface: probe of 6-1:1.0 failed with error -22 [ 980.560387][ T14] usb 6-1: can't set first interface for hiFace device. [ 980.576736][ T1351] vivid-007: disconnect [ 980.581384][ T14] snd-usb-hiface: probe of 6-1:1.1 failed with error -5 [ 980.595949][ T1350] vivid-007: reconnect [ 980.615191][ T14] usb 6-1: can't set first interface for hiFace device. [ 980.642119][ T14] snd-usb-hiface: probe of 6-1:1.2 failed with error -5 [ 980.683664][ T14] usb 6-1: USB disconnect, device number 51 [ 980.801846][ T1359] netlink: 'syz.4.13064': attribute type 2 has an invalid length. [ 980.820145][ T1359] netlink: 'syz.4.13064': attribute type 2 has an invalid length. [ 980.843241][ T1361] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13063'. [ 980.925763][T13212] udevd[13212]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 981.061413][ T1371] netlink: 'syz.7.13069': attribute type 6 has an invalid length. [ 981.800324][ T1404] netlink: 'syz.5.13086': attribute type 2 has an invalid length. [ 981.819751][ T1404] netlink: 'syz.5.13086': attribute type 1 has an invalid length. [ 982.115878][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 982.115896][ T26] audit: type=1326 audit(982.086:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1414 comm="syz.6.13091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 982.132818][ T1417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13092'. [ 982.144092][ C1] vkms_vblank_simulate: vblank timer overrun [ 982.199920][ T26] audit: type=1326 audit(982.116:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1414 comm="syz.6.13091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 982.273307][ T26] audit: type=1326 audit(982.136:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1414 comm="syz.6.13091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 982.295882][ C1] vkms_vblank_simulate: vblank timer overrun [ 982.364501][ T26] audit: type=1326 audit(982.136:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1414 comm="syz.6.13091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 982.412412][ T26] audit: type=1326 audit(982.136:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1414 comm="syz.6.13091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 982.493630][ T26] audit: type=1326 audit(982.136:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1414 comm="syz.6.13091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 982.532266][ T26] audit: type=1326 audit(982.136:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1414 comm="syz.6.13091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 982.571705][ T26] audit: type=1326 audit(982.136:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1414 comm="syz.6.13091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 982.593597][ C1] vkms_vblank_simulate: vblank timer overrun [ 982.632729][ T26] audit: type=1326 audit(982.136:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1414 comm="syz.6.13091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 982.861361][ T1443] loop5: detected capacity change from 0 to 1024 [ 982.889476][ T1447] openvswitch: netlink: Missing key (keys=40, expected=80) [ 982.933600][ T1443] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 983.164462][ T1459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13111'. [ 983.223328][T13620] EXT4-fs (loop5): unmounting filesystem. [ 983.386248][ T1468] loop6: detected capacity change from 0 to 512 [ 983.475359][ T1468] EXT4-fs (loop6): orphan cleanup on readonly fs [ 983.513510][ T1468] EXT4-fs error (device loop6): ext4_quota_enable:7039: comm syz.6.13115: Bad quota inum: 11, type: 1 [ 983.570402][ T1468] EXT4-fs warning (device loop6): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 983.573682][ T1472] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 983.586233][ T1468] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 983.610438][ T1468] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 983.754381][T13437] EXT4-fs (loop6): unmounting filesystem. [ 984.231811][ T1505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13132'. [ 984.242716][ T1500] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 984.265325][ T1504] loop6: detected capacity change from 0 to 1024 [ 984.322977][ T1504] hfsplus: invalid file type 0174377 for inode 21 [ 984.328541][ T1507] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.13134'. [ 984.707112][ T1517] loop7: detected capacity change from 0 to 2048 [ 984.754726][ T1517] EXT4-fs: Ignoring removed bh option [ 984.779780][ T1521] dlm: non-version read from control device 36 [ 984.787411][ T1517] EXT4-fs: Ignoring removed nobh option [ 984.841039][ T1517] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 984.926706][ T1517] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.13139: corrupted xattr block 128 [ 984.946527][ T1517] EXT4-fs (loop7): Remounting filesystem read-only [ 984.954050][ T26] audit: type=1326 audit(984.926:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1528 comm="syz.6.13144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664dd9c799 code=0x7ffc0000 [ 984.975886][ C1] vkms_vblank_simulate: vblank timer overrun [ 985.119827][T16328] EXT4-fs (loop7): unmounting filesystem. [ 985.208827][ T1533] block nbd0: NBD_DISCONNECT [ 985.964182][ T1531] loop5: detected capacity change from 0 to 32768 [ 986.037737][ T1531] JBD2: Ignoring recovery information on journal [ 986.156566][ T1573] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 986.176471][ T1573] bond0: (slave lo): Enslaving as an active interface with an up link [ 986.275509][ T1531] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 986.520351][T13620] ocfs2: Unmounting device (7,5) on (node local) [ 986.831425][ T1563] loop6: detected capacity change from 0 to 32768 [ 986.874657][ T1563] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.13161 (1563) [ 986.954544][ T1563] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 986.967974][ T1563] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 986.979014][ T1598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13177'. [ 987.000616][ T1563] BTRFS info (device loop6): force zlib compression, level 3 [ 987.008911][ T1600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13178'. [ 987.010253][ T1598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13177'. [ 987.028931][ T1563] BTRFS info (device loop6): force clearing of disk cache [ 987.051361][ T1563] BTRFS info (device loop6): setting nodatasum [ 987.064404][ T1563] BTRFS info (device loop6): use zlib compression, level 3 [ 987.073821][ T1563] BTRFS info (device loop6): allowing degraded mounts [ 987.080652][ T1563] BTRFS info (device loop6): enabling disk space caching [ 987.089572][ T1563] BTRFS info (device loop6): disk space caching is enabled [ 987.292637][ T1614] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13183'. [ 987.313255][ T1615] loop0: detected capacity change from 0 to 512 [ 987.344865][ T1615] EXT4-fs: Ignoring removed oldalloc option [ 987.483210][ T1615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 987.492391][ T1563] BTRFS info (device loop6): enabling ssd optimizations [ 987.515147][ T1563] BTRFS info (device loop6): rebuilding free space tree [ 987.603549][ T1563] BTRFS info (device loop6): disabling free space tree [ 987.643806][ T1563] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 987.671455][ T1563] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 987.690171][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 987.796653][ T1563] BTRFS info (device loop6): balance: start -sprofiles=data|system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=2147483649..16393,drange=9223372036854776315..7,limit=7..1,stripes=1..73 [ 987.887635][ T1645] overlayfs: missing 'lowerdir' [ 987.900845][ T1563] BTRFS info (device loop6): balance: ended with status: 0 [ 988.058132][T13437] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 988.422217][ T1665] device team_slave_0 left promiscuous mode [ 988.536661][ T1665] team0: Port device team_slave_0 removed [ 988.542979][ T1665] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 989.273793][ T1689] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13212'. [ 989.370722][ T1667] loop7: detected capacity change from 0 to 32768 [ 989.665820][ T1677] loop0: detected capacity change from 0 to 32768 [ 989.811045][ T1677] XFS (loop0): Mounting V5 Filesystem [ 989.866996][ T1681] loop6: detected capacity change from 0 to 40427 [ 989.907702][ T1681] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x3ffff [ 989.923461][ T4819] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 989.957055][ T1681] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0xe4 [ 989.974309][ T1681] F2FS-fs (loop6): invalid crc value [ 990.024878][ T1677] XFS (loop0): Ending clean mount [ 990.038511][ T1681] F2FS-fs (loop6): Found nat_bits in checkpoint [ 990.092441][ T1681] F2FS-fs (loop6) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20 [ 990.112873][ T1681] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 990.133555][ T4819] usb 5-1: Using ep0 maxpacket: 8 [ 990.145804][ T4819] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 990.154608][ T4824] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 990.198405][ T4819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.215737][ T1691] loop5: detected capacity change from 0 to 32768 [ 990.242605][ T4819] usb 5-1: config 0 has no interface number 0 [ 990.251174][ T4819] usb 5-1: config 0 interface 52 has no altsetting 0 [ 990.258700][ T1691] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.13213 (1691) [ 990.286969][ T4819] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 990.287702][ T1681] F2FS-fs (loop6) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10 [ 990.308934][ T4819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.319563][ T4819] usb 5-1: config 0 descriptor?? [ 990.330532][ T4266] XFS (loop0): Unmounting Filesystem [ 990.340616][ T1691] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 990.353628][ T4824] usb 8-1: Using ep0 maxpacket: 8 [ 990.362272][ T4824] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 990.373260][ T1691] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 990.423812][ T1691] BTRFS info (device loop5): using free space tree [ 990.431907][ T4824] usb 8-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 990.441275][ T4824] usb 8-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 990.450459][ T4824] usb 8-1: Product: syz [ 990.455537][ T4824] usb 8-1: Manufacturer: syz [ 990.460717][ T4824] usb 8-1: SerialNumber: syz [ 990.679997][ T1691] BTRFS info (device loop5): enabling ssd optimizations [ 990.710994][ T4824] usb 8-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 990.723722][ T4824] usb 8-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 990.733003][ T4824] usb 8-1: Handspring Visor / Palm OS: Number of ports: 2 [ 990.781099][ T4816] usb 5-1: USB disconnect, device number 47 [ 990.911604][ T4824] usb 8-1: palm_os_3_probe - error -71 getting bytes available request [ 990.943589][ T4824] visor 8-1:1.0: Handspring Visor / Palm OS converter detected [ 990.953201][ T4824] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 990.974191][T13620] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 990.996202][ T4824] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 991.058614][ T4824] usb 8-1: USB disconnect, device number 31 [ 991.085642][ T4824] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 991.118340][ T4824] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 991.129904][ T4824] visor 8-1:1.0: device disconnected [ 991.654762][ T8463] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 991.669508][ T8463] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 991.709127][ T4819] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 992.107425][ T1763] netlink: 'syz.5.13233': attribute type 13 has an invalid length. [ 992.173576][ T8463] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 992.287071][ T1771] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 992.333737][ T8463] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 992.744484][ T8463] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 992.809557][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 992.903257][ T1798] device syz_tun left promiscuous mode [ 992.946682][ T8463] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 992.951890][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 992.967862][ T8463] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.986937][ T8463] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 992.992705][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 993.002868][ T8463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.014718][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 993.022236][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 993.046657][ T1798] device team0 left promiscuous mode [ 993.052091][ T1798] device team_slave_1 left promiscuous mode [ 993.059119][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.070972][ T8463] hub 5-1:4.0: USB hub found [ 993.076765][ T1798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 993.271409][ T8463] hub 5-1:4.0: 2 ports detected [ 993.276693][ T8463] usb 5-1: selecting invalid altsetting 1 [ 993.292734][ T8463] hub 5-1:4.0: Using single TT (err -22) [ 993.302838][ T1813] loop0: detected capacity change from 0 to 512 [ 993.374279][ T1813] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 993.397376][ T1813] EXT4-fs (loop0): orphan cleanup on readonly fs [ 993.424563][ T1813] __quota_error: 12 callbacks suppressed [ 993.424583][ T1813] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 993.444791][ T1813] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 993.474494][ T1813] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.13257: Failed to acquire dquot type 1 [ 993.484138][ T8463] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 993.495724][ T8463] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 993.544114][ T1813] EXT4-fs (loop0): Remounting filesystem read-only [ 993.544184][ T8463] usb 5-1: USB disconnect, device number 48 [ 993.572946][ T1813] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.13257: bg 0: block 40: padding at end of block bitmap is not set [ 993.609621][ T1813] EXT4-fs (loop0): Remounting filesystem read-only [ 993.619898][ T1813] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 993.640498][ T1813] EXT4-fs (loop0): Remounting filesystem read-only [ 993.658194][ T1813] EXT4-fs (loop0): 1 truncate cleaned up [ 993.668186][ T1813] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 993.723812][ T1824] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.742295][ T1824] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 993.820430][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 994.228218][ T1843] ip6t_srh: unknown srh match flags 4000 [ 994.513715][ T1853] netlink: 412 bytes leftover after parsing attributes in process `syz.0.13275'. [ 994.793856][ T1837] loop7: detected capacity change from 0 to 32768 [ 994.842786][ T1837] JBD2: Ignoring recovery information on journal [ 994.915268][ T1835] loop6: detected capacity change from 0 to 32768 [ 994.923480][ T41] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 994.932530][ T1837] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 995.008166][ T1835] XFS (loop6): Mounting V5 Filesystem [ 995.021801][T16328] ocfs2: Unmounting device (7,7) on (node local) [ 995.088444][ T1869] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 995.115838][ T41] usb 5-1: unable to get BOS descriptor or descriptor too short [ 995.161107][ T41] usb 5-1: not running at top speed; connect to a high speed hub [ 995.181743][ T41] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 995.183562][ T1835] XFS (loop6): Ending clean mount [ 995.214940][ T41] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 995.258291][ T41] usb 5-1: string descriptor 0 read error: -22 [ 995.273533][ T41] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 995.312711][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.401061][T13437] XFS (loop6): Unmounting Filesystem [ 995.427991][ T1875] loop0: detected capacity change from 0 to 1024 [ 995.437865][ T1849] loop5: detected capacity change from 0 to 32768 [ 995.560699][ T1875] hfsplus: b-tree write err: -5, ino 2 [ 995.585438][ T41] snd-usb-6fire 5-1:2.0: unknown device firmware state received from device: [ 995.594514][ T41] eb 2e 87 4b 9a 05 e6 5e [ 995.599163][ T41] snd-usb-6fire: probe of 5-1:2.0 failed with error -5 [ 995.696074][ T1849] XFS (loop5): Mounting V5 Filesystem [ 995.711059][ T9016] hfsplus: b-tree write err: -5, ino 25 [ 995.723605][ T9016] hfsplus: b-tree write err: -5, ino 4 [ 995.739558][ T9016] hfsplus: b-tree write err: -5, ino 2 [ 995.773958][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 995.815478][ T1849] XFS (loop5): Ending clean mount [ 995.825615][ T41] usb 5-1: USB disconnect, device number 49 [ 995.887355][ T1890] loop7: detected capacity change from 0 to 164 [ 995.945548][ T1890] Unable to read rock-ridge attributes [ 995.969017][ T1890] Unable to read rock-ridge attributes [ 995.983316][T13620] XFS (loop5): Unmounting Filesystem [ 996.153253][ T1895] loop0: detected capacity change from 0 to 164 [ 996.768893][ T1913] netlink: 'syz.6.13296': attribute type 2 has an invalid length. [ 997.011191][ T1928] loop5: detected capacity change from 0 to 256 [ 997.049946][ T1928] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 997.123594][ T1932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13305'. [ 997.304625][ T1938] ubi6: attaching mtd0 [ 997.324340][ T1938] ubi6 error: ubi_attach_mtd_dev: bad VID header (16385) or data offsets (16449) [ 997.543994][ T1950] netlink: 308 bytes leftover after parsing attributes in process `syz.5.13314'. [ 997.555609][ T1949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13312'. [ 997.602249][ T1949] netlink: 332 bytes leftover after parsing attributes in process `syz.6.13312'. [ 997.904875][ T1970] netlink: 'syz.5.13322': attribute type 5 has an invalid length. [ 997.920392][ T1967] loop4: detected capacity change from 0 to 128 [ 997.946751][ T1967] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 997.968745][ T1967] sysv_free_block: flc_count > flc_size [ 997.985871][ T1967] sysv_free_block: flc_count > flc_size [ 998.002866][ T1967] sysv_free_block: flc_count > flc_size [ 998.017043][ T1967] sysv_free_block: flc_count > flc_size [ 998.033457][ T1967] sysv_free_block: flc_count > flc_size [ 998.049358][ T1967] sysv_free_block: flc_count > flc_size [ 998.069689][ T1967] sysv_free_block: flc_count > flc_size [ 998.093546][ T1967] sysv_free_block: flc_count > flc_size [ 998.134147][ T1967] sysv_free_block: flc_count > flc_size [ 998.160051][ T1967] sysv_free_block: flc_count > flc_size [ 998.183109][ T1967] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 998.649439][ T1988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13332'. [ 998.941783][ T2003] netlink: 92 bytes leftover after parsing attributes in process `syz.4.13338'. [ 998.951368][T10193] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 998.983704][ T2003] netlink: 'syz.4.13338': attribute type 1 has an invalid length. [ 999.097924][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13342'. [ 999.113152][ T2009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13342'. [ 999.155733][T10193] usb 8-1: unable to get BOS descriptor or descriptor too short [ 999.171429][T10193] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.224214][T10193] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 999.233255][T10193] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 999.281187][T10193] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 999.301754][T10193] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.314573][T10193] usb 8-1: Product: syz [ 999.318909][T10193] usb 8-1: Manufacturer: syz [ 999.325964][T10193] usb 8-1: SerialNumber: syz [ 999.350445][T10193] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 999.363569][T10193] cdc_ncm 8-1:1.0: bind() failure [ 999.501484][ T2025] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13350'. [ 999.529851][ T2025] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13350'. [ 999.556391][T10193] usb 8-1: USB disconnect, device number 32 [ 999.714937][ T2033] loop5: detected capacity change from 0 to 512 [ 999.758574][ T2033] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 999.894474][T13620] EXT4-fs (loop5): unmounting filesystem. [ 1000.266219][ T2059] loop6: detected capacity change from 0 to 1024 [ 1000.326999][ T2059] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1000.385787][T13437] EXT4-fs (loop6): unmounting filesystem. [ 1000.549773][ T2071] netlink: 168 bytes leftover after parsing attributes in process `syz.6.13369'. [ 1000.688143][ T2077] loop4: detected capacity change from 0 to 512 [ 1000.705153][ T2077] EXT4-fs: Ignoring removed i_version option [ 1000.711485][ T2079] netlink: 'syz.7.13374': attribute type 10 has an invalid length. [ 1000.735527][ T2077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1000.750426][ T2081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13375'. [ 1000.762616][ T2077] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1000.783925][ T2081] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13375'. [ 1000.803476][ T2077] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1000.824694][ T2079] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1000.856860][ T2077] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1000.869770][ T2084] loop0: detected capacity change from 0 to 64 [ 1000.878039][ T2079] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1000.892200][ T2077] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1000.901182][ T2079] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1000.913836][ T2084] hfs: unable to locate alternate MDB [ 1000.919245][ T2084] hfs: continuing without an alternate MDB [ 1000.927414][ T2077] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=c000e11c, mo2=0000] [ 1000.935947][ T2077] EXT4-fs (loop4): too many log groups per flexible block group [ 1000.944188][ T2077] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 1000.945387][ T2079] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1000.951136][ T2077] EXT4-fs (loop4): mount failed [ 1000.981069][ T26] audit: type=1800 audit(1000.936:674): pid=2084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13377" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 1001.082625][ T9006] [ 1001.085023][ T9006] ====================================================== [ 1001.092241][ T9006] WARNING: possible circular locking dependency detected [ 1001.099288][ T9006] syzkaller #0 Not tainted [ 1001.103729][ T9006] ------------------------------------------------------ [ 1001.110772][ T9006] kworker/u4:21/9006 is trying to acquire lock: [ 1001.117207][ T9006] ffff888055f7d578 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 1001.128229][ T9006] [ 1001.128229][ T9006] but task is already holding lock: [ 1001.135708][ T9006] ffff888028a8e0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 1001.145264][ T9006] [ 1001.145264][ T9006] which lock already depends on the new lock. [ 1001.145264][ T9006] [ 1001.155701][ T9006] [ 1001.155701][ T9006] the existing dependency chain (in reverse order) is: [ 1001.164744][ T9006] [ 1001.164744][ T9006] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 1001.173403][ T9006] __mutex_lock+0x12d/0xaf0 [ 1001.178479][ T9006] hfs_find_init+0x15b/0x1d0 [ 1001.183630][ T9006] hfs_extend_file+0x35d/0x13f0 [ 1001.189151][ T9006] hfs_bmap_reserve+0x103/0x420 [ 1001.194622][ T9006] hfs_cat_create+0x204/0x8e0 [ 1001.199860][ T9006] hfs_create+0x62/0xd0 [ 1001.204573][ T9006] path_openat+0x1181/0x2ee0 [ 1001.209717][ T9006] do_filp_open+0x1f1/0x430 [ 1001.214773][ T9006] do_sys_openat2+0x150/0x4b0 [ 1001.220013][ T9006] __x64_sys_openat+0x135/0x160 [ 1001.225401][ T2094] netlink: 'syz.7.13383': attribute type 12 has an invalid length. [ 1001.225423][ T9006] do_syscall_64+0x4c/0xa0 [ 1001.238302][ T9006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.244927][ T9006] [ 1001.244927][ T9006] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 1001.254179][ T9006] __lock_acquire+0x2d07/0x7d10 [ 1001.259677][ T9006] lock_acquire+0x1bb/0x4a0 [ 1001.264734][ T9006] __mutex_lock+0x12d/0xaf0 [ 1001.269794][ T9006] hfs_extend_file+0xfb/0x13f0 [ 1001.275128][ T9006] hfs_bmap_reserve+0x103/0x420 [ 1001.280536][ T9006] __hfs_ext_write_extent+0x1fa/0x470 [ 1001.286561][ T9006] hfs_ext_write_extent+0x17b/0x200 [ 1001.292313][ T9006] hfs_write_inode+0xd8/0xa20 [ 1001.297556][ T9006] __writeback_single_inode+0x75b/0x1160 [ 1001.303753][ T9006] writeback_sb_inodes+0xb30/0x1850 [ 1001.309513][ T9006] wb_writeback+0x482/0xd50 [ 1001.314574][ T9006] wb_workfn+0x423/0xee0 [ 1001.319369][ T9006] process_one_work+0x8a2/0x1160 [ 1001.324866][ T9006] worker_thread+0xaa2/0x1270 [ 1001.328612][ T2100] xt_cgroup: path and classid specified [ 1001.330079][ T9006] kthread+0x29d/0x330 [ 1001.330109][ T9006] ret_from_fork+0x1f/0x30 [ 1001.345278][ T9006] [ 1001.345278][ T9006] other info that might help us debug this: [ 1001.345278][ T9006] [ 1001.355526][ T9006] Possible unsafe locking scenario: [ 1001.355526][ T9006] [ 1001.363000][ T9006] CPU0 CPU1 [ 1001.368535][ T9006] ---- ---- [ 1001.374005][ T9006] lock(&tree->tree_lock#2/1); [ 1001.378913][ T9006] lock(&HFS_I(tree->inode)->extents_lock); [ 1001.387460][ T9006] lock(&tree->tree_lock#2/1); [ 1001.394974][ T9006] lock(&HFS_I(tree->inode)->extents_lock); [ 1001.401026][ T9006] [ 1001.401026][ T9006] *** DEADLOCK *** [ 1001.401026][ T9006] [ 1001.409204][ T9006] 3 locks held by kworker/u4:21/9006: [ 1001.414608][ T9006] #0: ffff88801be5f138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1001.425500][ T9006] #1: ffffc90004117d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1001.437556][ T9006] #2: ffff888028a8e0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 1001.447632][ T9006] [ 1001.447632][ T9006] stack backtrace: [ 1001.453543][ T9006] CPU: 1 PID: 9006 Comm: kworker/u4:21 Not tainted syzkaller #0 [ 1001.461294][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1001.471386][ T9006] Workqueue: writeback wb_workfn (flush-7:0) [ 1001.477422][ T9006] Call Trace: [ 1001.480728][ T9006] [ 1001.483683][ T9006] dump_stack_lvl+0x188/0x24e [ 1001.488468][ T9006] ? load_image+0x400/0x400 [ 1001.493000][ T9006] ? show_regs_print_info+0x12/0x12 [ 1001.498384][ T9006] ? print_circular_bug+0x12b/0x1a0 [ 1001.503626][ T9006] check_noncircular+0x296/0x330 [ 1001.508604][ T9006] ? look_up_lock_class+0x75/0x140 [ 1001.513752][ T9006] ? add_chain_block+0x940/0x940 [ 1001.518732][ T9006] ? lockdep_lock+0xf1/0x1f0 [ 1001.523369][ T9006] ? unwind_next_frame+0x1880/0x20b0 [ 1001.528691][ T9006] ? _find_first_zero_bit+0xcf/0x100 [ 1001.534010][ T9006] __lock_acquire+0x2d07/0x7d10 [ 1001.538901][ T9006] ? ret_from_fork+0x1f/0x30 [ 1001.543535][ T9006] ? ret_from_fork+0x1f/0x30 [ 1001.548161][ T9006] ? verify_lock_unused+0x140/0x140 [ 1001.553487][ T9006] ? stack_trace_save+0xa6/0xf0 [ 1001.558556][ T9006] ? stack_trace_snprint+0xf0/0xf0 [ 1001.563688][ T9006] ? check_noncircular+0x189/0x330 [ 1001.568935][ T9006] ? add_chain_block+0x940/0x940 [ 1001.574351][ T9006] lock_acquire+0x1bb/0x4a0 [ 1001.578982][ T9006] ? hfs_extend_file+0xfb/0x13f0 [ 1001.583962][ T9006] ? __might_sleep+0xd0/0xd0 [ 1001.588582][ T9006] ? read_lock_is_recursive+0x10/0x10 [ 1001.593998][ T9006] __mutex_lock+0x12d/0xaf0 [ 1001.598544][ T9006] ? hfs_extend_file+0xfb/0x13f0 [ 1001.603519][ T9006] ? verify_lock_unused+0x140/0x140 [ 1001.608751][ T9006] ? hfs_extend_file+0xfb/0x13f0 [ 1001.613812][ T9006] ? mutex_lock_nested+0x10/0x10 [ 1001.618804][ T9006] ? __stack_depot_save+0x421/0x460 [ 1001.624079][ T9006] hfs_extend_file+0xfb/0x13f0 [ 1001.628914][ T9006] ? hfs_ext_write_extent+0x14e/0x200 [ 1001.634413][ T9006] ? hfs_write_inode+0xd8/0xa20 [ 1001.639301][ T9006] ? hfs_get_block+0xc50/0xc50 [ 1001.644098][ T9006] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1001.650288][ T9006] ? rcu_is_watching+0x11/0xa0 [ 1001.655241][ T9006] ? trace_contention_end+0x5f/0x170 [ 1001.660533][ T9006] ? memset+0x1e/0x40 [ 1001.664514][ T9006] ? hfs_brec_find+0x197/0x500 [ 1001.669283][ T9006] hfs_bmap_reserve+0x103/0x420 [ 1001.674139][ T9006] __hfs_ext_write_extent+0x1fa/0x470 [ 1001.679512][ T9006] hfs_ext_write_extent+0x17b/0x200 [ 1001.684712][ T9006] ? verify_lock_unused+0x140/0x140 [ 1001.689908][ T9006] ? hfs_ext_keycmp+0x310/0x310 [ 1001.694772][ T9006] ? writeback_sb_inodes+0x46b/0x1850 [ 1001.700154][ T9006] hfs_write_inode+0xd8/0xa20 [ 1001.704940][ T9006] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1001.710317][ T9006] ? __writeback_single_inode+0x4ae/0x1160 [ 1001.716149][ T9006] ? __lock_acquire+0x7d10/0x7d10 [ 1001.721196][ T9006] ? do_raw_spin_lock+0x128/0x2f0 [ 1001.726330][ T9006] ? __rwlock_init+0x140/0x140 [ 1001.731122][ T9006] __writeback_single_inode+0x75b/0x1160 [ 1001.736771][ T9006] writeback_sb_inodes+0xb30/0x1850 [ 1001.741969][ T9006] ? queue_io+0x5a0/0x5a0 [ 1001.746298][ T9006] ? rcu_is_watching+0x11/0xa0 [ 1001.751058][ T9006] wb_writeback+0x482/0xd50 [ 1001.755559][ T9006] ? percpu_ref_tryget+0x250/0x250 [ 1001.760665][ T9006] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1001.766644][ T9006] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1001.771833][ T9006] wb_workfn+0x423/0xee0 [ 1001.776075][ T9006] ? inode_wait_for_writeback+0x220/0x220 [ 1001.781798][ T9006] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1001.787776][ T9006] ? read_lock_is_recursive+0x10/0x10 [ 1001.793223][ T9006] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1001.799166][ T9006] ? _raw_spin_unlock+0x40/0x40 [ 1001.804010][ T9006] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1001.809222][ T9006] ? process_one_work+0x7b0/0x1160 [ 1001.814346][ T9006] process_one_work+0x8a2/0x1160 [ 1001.819283][ T9006] ? worker_detach_from_pool+0x240/0x240 [ 1001.825004][ T9006] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1001.830029][ T9006] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1001.835587][ T9006] ? kthread_data+0x4b/0xc0 [ 1001.840100][ T9006] worker_thread+0xaa2/0x1270 [ 1001.844787][ T9006] kthread+0x29d/0x330 [ 1001.848855][ T9006] ? worker_clr_flags+0x1a0/0x1a0 [ 1001.853873][ T9006] ? kthread_blkcg+0xd0/0xd0 [ 1001.858463][ T9006] ret_from_fork+0x1f/0x30 [ 1001.862875][ T9006] [ 1001.871504][ T9006] hfs: new node 0 already hashed? [ 1001.876842][ T9006] ------------[ cut here ]------------ [ 1001.882320][ T9006] WARNING: CPU: 1 PID: 9006 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 1001.891440][ T9006] Modules linked in: [ 1001.895498][ T9006] CPU: 1 PID: 9006 Comm: kworker/u4:21 Not tainted syzkaller #0 [ 1001.903243][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1001.913377][ T9006] Workqueue: writeback wb_workfn (flush-7:0) [ 1001.919401][ T9006] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 1001.925153][ T9006] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 1001.944834][ T9006] RSP: 0018:ffffc90004116e80 EFLAGS: 00010246 [ 1001.950986][ T9006] RAX: 000000000000001f RBX: ffff888028a8e0e0 RCX: 304eb709d0a96400 [ 1001.959002][ T9006] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1001.967119][ T9006] RBP: 0000000000000000 R08: ffffc90004116b07 R09: 1ffff92000822d60 [ 1001.975284][ T9006] R10: dffffc0000000000 R11: fffff52000822d61 R12: 0000000000000000 [ 1001.983320][ T9006] R13: ffff888028a8e000 R14: ffff88802e1b5900 R15: dffffc0000000000 [ 1001.991454][ T9006] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1002.000434][ T9006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1002.007068][ T9006] CR2: 0000001b2ea19ff8 CR3: 000000001dab6000 CR4: 00000000003506e0 [ 1002.015483][ T9006] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1002.023636][ T9006] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1002.031626][ T9006] Call Trace: [ 1002.034946][ T9006] [ 1002.037887][ T9006] hfs_bmap_alloc+0x53d/0x5d0 [ 1002.042680][ T9006] ? hfs_bmap_reserve+0x420/0x420 [ 1002.047766][ T9006] ? rcu_is_watching+0x11/0xa0 [ 1002.052554][ T9006] hfs_btree_inc_height+0xfd/0xac0 [ 1002.057815][ T9006] ? hfs_brec_insert+0x6f6/0xbd0 [ 1002.062776][ T9006] ? hfs_brec_insert+0xbd0/0xbd0 [ 1002.067776][ T9006] ? do_raw_spin_unlock+0x11d/0x230 [ 1002.073008][ T9006] hfs_brec_insert+0x744/0xbd0 [ 1002.078447][ T9006] ? hfs_brec_keylen+0x350/0x350 [ 1002.083477][ T9006] __hfs_ext_write_extent+0x2a1/0x470 [ 1002.088890][ T9006] hfs_ext_write_extent+0x17b/0x200 [ 1002.094200][ T9006] ? verify_lock_unused+0x140/0x140 [ 1002.099517][ T9006] ? hfs_ext_keycmp+0x310/0x310 [ 1002.104542][ T9006] ? writeback_sb_inodes+0x46b/0x1850 [ 1002.109952][ T9006] hfs_write_inode+0xd8/0xa20 [ 1002.114690][ T9006] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1002.120111][ T9006] ? __writeback_single_inode+0x4ae/0x1160 [ 1002.126269][ T9006] ? __lock_acquire+0x7d10/0x7d10 [ 1002.131341][ T9006] ? do_raw_spin_lock+0x128/0x2f0 [ 1002.136534][ T9006] ? __rwlock_init+0x140/0x140 [ 1002.141359][ T9006] __writeback_single_inode+0x75b/0x1160 [ 1002.147067][ T9006] writeback_sb_inodes+0xb30/0x1850 [ 1002.152312][ T9006] ? queue_io+0x5a0/0x5a0 [ 1002.156707][ T9006] ? rcu_is_watching+0x11/0xa0 [ 1002.161527][ T9006] wb_writeback+0x482/0xd50 [ 1002.166140][ T9006] ? percpu_ref_tryget+0x250/0x250 [ 1002.171297][ T9006] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1002.177440][ T9006] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1002.182745][ T9006] wb_workfn+0x423/0xee0 [ 1002.187030][ T9006] ? inode_wait_for_writeback+0x220/0x220 [ 1002.192775][ T9006] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1002.198824][ T9006] ? read_lock_is_recursive+0x10/0x10 [ 1002.204278][ T9006] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1002.210180][ T9006] ? _raw_spin_unlock+0x40/0x40 [ 1002.215183][ T9006] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1002.220411][ T9006] ? process_one_work+0x7b0/0x1160 [ 1002.225606][ T9006] process_one_work+0x8a2/0x1160 [ 1002.230754][ T9006] ? worker_detach_from_pool+0x240/0x240 [ 1002.236569][ T9006] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1002.241636][ T9006] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1002.247273][ T9006] ? kthread_data+0x4b/0xc0 [ 1002.251822][ T9006] worker_thread+0xaa2/0x1270 [ 1002.256591][ T9006] kthread+0x29d/0x330 [ 1002.260790][ T9006] ? worker_clr_flags+0x1a0/0x1a0 [ 1002.265869][ T9006] ? kthread_blkcg+0xd0/0xd0 [ 1002.270564][ T9006] ret_from_fork+0x1f/0x30 [ 1002.275129][ T9006] [ 1002.278180][ T9006] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1002.285451][ T9006] CPU: 1 PID: 9006 Comm: kworker/u4:21 Not tainted syzkaller #0 [ 1002.293080][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1002.303160][ T9006] Workqueue: writeback wb_workfn (flush-7:0) [ 1002.309155][ T9006] Call Trace: [ 1002.312441][ T9006] [ 1002.315372][ T9006] dump_stack_lvl+0x188/0x24e [ 1002.320099][ T9006] ? memcpy+0x3c/0x60 [ 1002.324161][ T9006] ? show_regs_print_info+0x12/0x12 [ 1002.329367][ T9006] ? load_image+0x400/0x400 [ 1002.333985][ T9006] panic+0x2e5/0x730 [ 1002.337997][ T9006] ? bpf_jit_dump+0xd0/0xd0 [ 1002.342594][ T9006] ? ret_from_fork+0x1f/0x30 [ 1002.347206][ T9006] __warn+0x2f8/0x4f0 [ 1002.351272][ T9006] ? hfs_bnode_create+0x37a/0x400 [ 1002.356299][ T9006] ? hfs_bnode_create+0x37a/0x400 [ 1002.361416][ T9006] report_bug+0x2ba/0x4f0 [ 1002.365748][ T9006] ? hfs_bnode_create+0x37a/0x400 [ 1002.370772][ T9006] handle_bug+0x3a/0x70 [ 1002.375032][ T9006] exc_invalid_op+0x16/0x40 [ 1002.379548][ T9006] asm_exc_invalid_op+0x16/0x20 [ 1002.384404][ T9006] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 1002.390332][ T9006] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 1002.410127][ T9006] RSP: 0018:ffffc90004116e80 EFLAGS: 00010246 [ 1002.416203][ T9006] RAX: 000000000000001f RBX: ffff888028a8e0e0 RCX: 304eb709d0a96400 [ 1002.424179][ T9006] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1002.432297][ T9006] RBP: 0000000000000000 R08: ffffc90004116b07 R09: 1ffff92000822d60 [ 1002.440274][ T9006] R10: dffffc0000000000 R11: fffff52000822d61 R12: 0000000000000000 [ 1002.448319][ T9006] R13: ffff888028a8e000 R14: ffff88802e1b5900 R15: dffffc0000000000 [ 1002.456301][ T9006] hfs_bmap_alloc+0x53d/0x5d0 [ 1002.460993][ T9006] ? hfs_bmap_reserve+0x420/0x420 [ 1002.466125][ T9006] ? rcu_is_watching+0x11/0xa0 [ 1002.470901][ T9006] hfs_btree_inc_height+0xfd/0xac0 [ 1002.476019][ T9006] ? hfs_brec_insert+0x6f6/0xbd0 [ 1002.480963][ T9006] ? hfs_brec_insert+0xbd0/0xbd0 [ 1002.485914][ T9006] ? do_raw_spin_unlock+0x11d/0x230 [ 1002.491123][ T9006] hfs_brec_insert+0x744/0xbd0 [ 1002.495990][ T9006] ? hfs_brec_keylen+0x350/0x350 [ 1002.501030][ T9006] __hfs_ext_write_extent+0x2a1/0x470 [ 1002.506417][ T9006] hfs_ext_write_extent+0x17b/0x200 [ 1002.511717][ T9006] ? verify_lock_unused+0x140/0x140 [ 1002.516924][ T9006] ? hfs_ext_keycmp+0x310/0x310 [ 1002.521784][ T9006] ? writeback_sb_inodes+0x46b/0x1850 [ 1002.527173][ T9006] hfs_write_inode+0xd8/0xa20 [ 1002.531864][ T9006] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1002.537286][ T9006] ? __writeback_single_inode+0x4ae/0x1160 [ 1002.543189][ T9006] ? __lock_acquire+0x7d10/0x7d10 [ 1002.548227][ T9006] ? do_raw_spin_lock+0x128/0x2f0 [ 1002.553259][ T9006] ? __rwlock_init+0x140/0x140 [ 1002.558028][ T9006] __writeback_single_inode+0x75b/0x1160 [ 1002.563670][ T9006] writeback_sb_inodes+0xb30/0x1850 [ 1002.568885][ T9006] ? queue_io+0x5a0/0x5a0 [ 1002.573228][ T9006] ? rcu_is_watching+0x11/0xa0 [ 1002.578136][ T9006] wb_writeback+0x482/0xd50 [ 1002.582684][ T9006] ? percpu_ref_tryget+0x250/0x250 [ 1002.587906][ T9006] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1002.593910][ T9006] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1002.599122][ T9006] wb_workfn+0x423/0xee0 [ 1002.603386][ T9006] ? inode_wait_for_writeback+0x220/0x220 [ 1002.609117][ T9006] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1002.615106][ T9006] ? read_lock_is_recursive+0x10/0x10 [ 1002.620583][ T9006] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1002.626480][ T9006] ? _raw_spin_unlock+0x40/0x40 [ 1002.631338][ T9006] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1002.636552][ T9006] ? process_one_work+0x7b0/0x1160 [ 1002.641669][ T9006] process_one_work+0x8a2/0x1160 [ 1002.646621][ T9006] ? worker_detach_from_pool+0x240/0x240 [ 1002.652261][ T9006] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1002.657298][ T9006] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1002.662855][ T9006] ? kthread_data+0x4b/0xc0 [ 1002.667369][ T9006] worker_thread+0xaa2/0x1270 [ 1002.672146][ T9006] kthread+0x29d/0x330 [ 1002.676217][ T9006] ? worker_clr_flags+0x1a0/0x1a0 [ 1002.681598][ T9006] ? kthread_blkcg+0xd0/0xd0 [ 1002.686291][ T9006] ret_from_fork+0x1f/0x30 [ 1002.690735][ T9006] [ 1002.694236][ T9006] Kernel Offset: disabled [ 1002.698818][ T9006] Rebooting in 86400 seconds..