last executing test programs: 5m11.408603859s ago: executing program 5 (id=14150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x16}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m11.165524551s ago: executing program 5 (id=14154): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$sock(r0, &(0x7f0000001d00)=[{{&(0x7f0000000000)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, 0x0}}], 0x1, 0x4000004) 5m10.864135779s ago: executing program 5 (id=14158): r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl(r0, 0xa0004522, 0x0) 5m10.673071363s ago: executing program 5 (id=14161): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000dc0)={[{@umask}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {@part={'part', 0x3d, 0x4}}, {@nobarrier}, {@force}, {@gid}, {@gid}, {}]}, 0x44, 0x70f, &(0x7f00000005c0)="$eJzs3U1sHGcZAOB31uuNN5XcbZu0BSHFakQEDSS2l5IgIRGqCvlQQSQuvS6J01heu8F2kRMh4gCFI5xQDj0UIXPoCfWAVMQBUc5ISFxR7pF6jziwaP7Wu/5Zr+u/JH0eaXa+mfl+3nk983k9m2gD+NyaeStG1yKJmfNvrqbbD9ab7QfrzYWyHBEnIqISUc1XkSxGJJ9EXIl8iS+kO4vukp3Gee3hx++fu/9hM9+qFktWvzKo3YbOgBHWiiUmImKkWMfYnjJR3am/a/F63l+Pu3vqOunGnSbsbJk4OG6dLdb20nyI+xZ43N2NGBndZn8j4mTxqzR9HxDF7FA54vAO3J5mOQAAAHg8jexW4dlH8ShWY/xowgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICnQ5J/Z2BSLJWyPBFJ+f3/tWJfqlY75ngH+9oux9+7cUSBAAAAAAAAAMCh+Kj44P7Mo3gUqzFe7u8k2Wf+r2Qbp7LXZ+LdWI7ZWIoLsRqtWImVWIqpiNHxng5rq62VlaWprS1/F2nLTqdzt2g5HRGNLS2ndwi0csAnDgAAAAAAAABPp5/HTIwfdxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAriRjJV9lyqiw3olKNiLGIqKX11iL+WpafZH877gAAAADg8NWL9Xjyv7zQSbK/+V/M/u4fi3djMVZiLlaiHbNxPXsWkP/VX/nXWrP9YL25kC5bO/7up3uKI+sxIkbi3g4jT2Y1TndbzMT34odxPibiaizFXPwkWrESszER9fQkohVJNOr504tGGef28V7p27raLXXysz2zKdaXs0jqcSPmstguxLVa5I9NsnNIx3y5Z7Q/1yI2jXgvzU7yncKQObre8/P6bfFcpoz02SH7OByN7MxHuxmZTHNfZOO5wbkfeJ38eNeRpqLSfQZ1amOUdHPzSGXOf7SXnJ/MV2Ppy6/6c37QBjxKG91m3+ZMTEeluPoiXuzP+a0v33++v/FX//33qzcri/M3byyfP8RT2o+J3Sp0k7I5E82eTLw0+OorMtFOM7E2fCa2/DzGhm15uGpFNrKpaMjZ8o2s1IpXei7Bd+J6zMalmIypuByT8a2Yjmb3CkuX0315rTYX+nOS3WuVrfNbfUDwZ7/SU+nXu1Q+WmlenuvJa+9M18iOFXuu/CYme66+5wdfffc+feMHeWnIGSkd/4tFOR3jF93fOI+DvkwUc3MZ3QuDM/H7Tvq63F6cX7rZujXkeOeKdXrbvtc/N/9h+Kg3/3bfjzKC9HpJZ9xqtpXlpF5eL+mxF7p1+/NVKz5xydtVthw73T3WiPGYi+/veKfWivdwW3vKj73Ue+w/GzNnrXh/Ux7re5cT70Q7exeyya5TNQBH7OSrJ2v1h/V/1j+o/7J+s/7m2OsnLp/4Ui1G/1H9y8ifKn+sfDt5NT6In8X4cUcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPg+Xbd+Zb7fbsUrcQY5v37LdQ23GswYWo7Fpn/ZnhOoxGxOCxkqJQO9hzfxIL9di0p/x+o/32/FFEDKhT23fwyZ6vsT0X0jwcSIedTp7UbE9nZA/Nq2Wr7etUY3ks5ltJdZs77sTGXRCN+Vb7v52+5vXouWWAp9zFlYVbF5dv3/n63ELr7dm3ZxenL1+6fKn5zalvXLwx156dzF+PO0rgMCzfvjOyze7tvnkYAAAAAAAAAAAAeEwU//p/5TP/Z4bqLnVqS8vbj3zmqE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeELNvBWja5HE1OSFyXT7wXqznS5luahW2VglP41IPom4EvkSjZ7ukp3Gee3hx++fu/9hM9+qFktWvzKo3XDWiiUmImKkWO/uxDbdbO3vWk9/a58pvKR7hmnCzpaJg+P2/wAAAP//hd/4FA==") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) 5m10.111993694s ago: executing program 5 (id=14166): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x11e, 0x1, &(0x7f0000000080)=0x5, 0x4) 5m9.46721415s ago: executing program 5 (id=14171): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x9, {0x5, 0xffffff81, 0x9dd, 0x4}, {0x1000, 0x8, 0x9, 0x7}, {0x8, 0x100}}) 5m8.717504762s ago: executing program 32 (id=14171): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x9, {0x5, 0xffffff81, 0x9dd, 0x4}, {0x1000, 0x8, 0x9, 0x7}, {0x8, 0x100}}) 5m8.710757532s ago: executing program 4 (id=14178): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045438, 0xfffffffffffffffd) 5m8.404851571s ago: executing program 4 (id=14182): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 5m8.094938925s ago: executing program 4 (id=14185): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0xb, '\x00', @buffer={"638391fa1b1e124b4d03b18e223b770b6a3cc3b15e16ebb2af56e062fea3cd65", 0x20}, 0x7ff}, {0x25, '\x00', @data=0x7, 0x5}, {0x16, '\x00', @st={0x4, [{0x3, @uvalue=0xb}, {0x2, @uvalue=0xc2b}, {0x1, @uvalue=0x2}, {0x3, @uvalue=0xf2}]}, 0x7}]}) 5m7.682319189s ago: executing program 4 (id=14188): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000040)={[{@force}, {@barrier}, {@nobarrier}, {@nls={'nls', 0x3d, 'macturkish'}}, {@type={'type', 0x3d, "f1aefc87"}}, {}, {@nodecompose}, {@nobarrier}]}, 0x3, 0x6bc, &(0x7f0000001240)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 5m7.278833888s ago: executing program 4 (id=14192): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)={[{@map_normal}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@overriderock}, {@unhide}, {@map_off}, {}, {@block={'block', 0x3d, 0x400}}, {@showassoc}, {@unhide}, {@check_relaxed}]}, 0xfe, 0xa00, &(0x7f00000003c0)="$eJzs3UtsXFf9B/Dv9SNx3SpJ2/z7L1XbTFKSuq1xbIcmRF2UxJ4kLn4g25EasWhK46AQQ6EBqa2QmkqIFRVIIBawq1jBplI3dIO6gx2sWCChrthXrMLK6M6M49eMx3YdO00/n+h67uN3z/nd58mMr+eEz5eF/SumFhZqwxanL/5hBzLmLnZ29JP3P3ivHN69mT3pzPPFn5KeJJWkK8mjSffI6PTURJuCrieXk3ycFEn2pv66IZdT/CIPLE1/nOJ3Zb0t7dloybSzwBfabp9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNypGRgcHh4o9GZu8+HKlLqmsMTI6PVVkYWHtksV16j6q9fpdfNS23qQoh/T0LHb1/ejBpcWPJKkcyeP1qcdrHZKnJ2/f/8iBFx7u6lhcv1U2n8nejRd74623r786Pz/3RuuQhXfq27A9ud1lzlcnx2amxibOnK9WxmamKqdPnhw8fuHcTOXc2Hh15tLMbHWiMjJdPTM7NV3pG3mmMnT69IlKdeDS1MXJ86MD49XFmae+Mjw4eLLy0sA3q2emZ6Ymj780MDNyYWx8fGzyfC2mXFzGnCpPxG+MzVZmq2cmKpWr1+bnTqzKqXP1zi6DhtptSRk03C5oeHB4eGhoeHjo3Ubv2bdnnHz+9POnBge7BlfJmog7dNJyd7mv9WHe5js4bF1Hvf3Pd8czlslczMupNP03ktFMZyoTLZY3LLb/R49X1613efvfaOW7li1+rPxxJE82JntatP8tctm5fzfyVt7O9bya+cxnLm/sekY7++98qpnMWGYylbFM5ExtTqUxp5LTOZmTGcwruZBDmUkl5zKW8VQzk0uZyWyqtTNqJNOp5kxmM5XpVNKXkTyTSoZyOqdzIpVUM5BLmcrFTOZ8RnOmVsrVXKvt9xPr5Hg7aGgjQcPrBK1uzMtzfXPtf/Ve/Z8gG7b9N3HYooVG+7+nfWjfyE4kBAAAAGy7L/01+w4+9Jd/JUWeqH0uf25svPribqcFAAAAbKPa43qPly/d5dgTPbX3/4O7nRYAAACwjYra39gVSXpzqD62+JdQPgQAAACAe0Tt9/9Ppji0NMP7fwAAALjHtP+O/bYRRf/i1/9WrtRfrzQi6lNF77mx8erAyNT4C0M5VvuWgSRPrC2tMym6a39+8GwO16MO99Zfe5dKLOvsKaOGBl4YyrM50tiQvqfKl6f6mkQO1yOfrkc+vTyyMysiT5SRAHCvO7JOe7zR9v/Z9Ncj+h+rNfldjzVpgwe1rABwt7jdx85/G12aNWn/GxFPtmr/v7rO+/8y4qFcPVR/pGAgr+X1zOdK+tN44uBQs1IXeyOoP4bQ3+bTgN7GIwt/P9WR/jWfB/Tc3tblsXMZTn/TTwSWlVss5nCiHtd5Z44BAOy0I+u2wxtr//vbvP/v9UghANxVbvdgv4mRdzYTPPfGjd3eRgBgJa00AAAAAAAAAAAAAAAAAAAAAAAAAAAAbL8NfYH/344l8/NzyRY6C9jySM9mMlx/pCM7lPOuj3Qm2a3aX8ym1yqP8Weo9I/3NVb/9+7v+XtuZJdvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyIIulsNr8j2ZtkMMnxnc/qzrm52wlsl8qeLa1W3MqtvJl9254PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAXXOP7/ztSf72/PitdHcnRJJeTfGu3c9xOt3Y7gTujaB/yvXrg0vf/dyTdWSjSVT/sKbpHRqenJsqiir3l8k/e/+C9cmhf9tpeFcoCyhpWdC7RqGHZnO6Vaz1YW6t3dO7G9R+9/oPK6NnaiXl29tz46MT56a8vBT5SfJhUUh8WLeb7k6N//uWy2Y2OEooPyy1tbnW952r1jq6t9/+brd2i3g24Nj83XNY0W3159sffv/bmskUP5XDyVF/St7Km75RDi5oOr96fKxWfFj8r9uU3uVw7/uXeKBaK8hDtr23/fVevzc8NvPb6/JXbOb2zIqcDOZTkStKz8ZwOtT43a2ddR3dZ62AtqPxxsE1561pW4lCL/fpg7ZTp3dQ2VNpcX232eyOjE00z+tUPH86xTR/pY21qbKr4tPhncSH/yE+X9f/RUR7/o2l6dTYpoha57ExZvmzF5dVRj6xt+fDyBa+sLrPlVckd8PN8O1+7ffw7lt3/G8dqZ+5Hy2psfl0km78ufr9/TYuypNYiHVzVIjXuPq3WaeR5sB7VIs//y3P1MjdxR3muXYt9h67/3xZ9+U9u6v8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4+xVJZ7P5HcnRJAeS7C+nK8nC6pibW6ivo7fYSprbZis5f/4ULTe0uJVbeTP7djojAAAAAAAAAO6Ms6OfvP/Be+VQ+318Z77c0VhSSbqSHCh+3T0yOj010aag7uTy4q/0ezaXw+XyxwNL0x+XU4+2WWl3Hx8AgM+1/wUAAP//p2dujQ==") newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000dc0), 0x2000) 5m6.447312343s ago: executing program 4 (id=14197): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d14, &(0x7f0000000080)={{0x7, 0x404}, {0xd, 0x3a}}) 5m5.638043296s ago: executing program 33 (id=14197): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d14, &(0x7f0000000080)={{0x7, 0x404}, {0xd, 0x3a}}) 2m45.044461813s ago: executing program 1 (id=15798): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 2m44.193069054s ago: executing program 1 (id=15810): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) 2m43.731285379s ago: executing program 1 (id=15817): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m43.430130587s ago: executing program 1 (id=15821): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m42.506430368s ago: executing program 1 (id=15829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) 2m41.603166323s ago: executing program 1 (id=15836): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x11e, 0x1, 0x0, &(0x7f0000000000)) 2m40.809683432s ago: executing program 34 (id=15836): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x11e, 0x1, 0x0, &(0x7f0000000000)) 5.046797376s ago: executing program 7 (id=17885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) 4.960498144s ago: executing program 0 (id=17888): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x14, 0x1, 0x70bd28, 0x25dfdbff, {0x10, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "95d875db896271d922"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) 4.728863773s ago: executing program 7 (id=17891): r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'wg1\x00', &(0x7f0000000540)=@ethtool_per_queue_op={0x4b, 0xe, [0x6, 0xfffffffa, 0x9, 0x9, 0xc, 0x8, 0x0, 0x7, 0x1, 0x2, 0xa, 0x2, 0xe5ff, 0x1800, 0xc37, 0x7fffffff, 0x6, 0x42, 0x5, 0xb8c4, 0x2, 0x0, 0xda, 0x8001, 0x3, 0x8000, 0x9, 0xfffffffb, 0x9, 0x8001, 0x42ef, 0x19c, 0x2, 0x6, 0x4, 0x4, 0xd981, 0x7, 0x3026, 0xd45, 0x7de7, 0x0, 0x8, 0x459, 0x0, 0x543d3885, 0xa10, 0xfff00, 0x9, 0x0, 0xfffffffc, 0x31, 0x6, 0x3, 0xc41, 0x3, 0x1, 0x16c, 0x2, 0x0, 0x7fff, 0x5, 0x8, 0xffff0000, 0x8, 0xffffffff, 0x10, 0xfffff11d, 0x80000001, 0x8e, 0x5c2, 0x4, 0xdbb7, 0xf712, 0x1, 0x1, 0x7fd, 0x4, 0x101, 0x24a7, 0xfffffff7, 0x0, 0x5, 0xfffffffd, 0x401, 0x0, 0x5, 0x1, 0x2, 0x6, 0x2, 0x5, 0x5, 0x80000001, 0x7, 0x5, 0x8001, 0x7fffffff, 0x3ff, 0x4, 0xffffffff, 0x40, 0xfe63, 0x9, 0x5, 0xffffffff, 0x401, 0x4, 0x7, 0x7ff, 0x3, 0x2, 0x46b8a39f, 0x3ff, 0x7ff, 0x5, 0xfffffffd, 0x9, 0x31b, 0x7, 0x9, 0x3, 0x1932, 0x80, 0x8, 0x6, 0x9, 0xffffffff]}}) 4.698470179s ago: executing program 0 (id=17892): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) 4.429103816s ago: executing program 7 (id=17897): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @NHA_OIF={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4040040) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110013e083f10cc04332558fc0102030109022400010509401a0904a807020855fe980905eb020004020205090523ea"], 0x0) 1.799308516s ago: executing program 3 (id=17947): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 1.598973731s ago: executing program 8 (id=17950): capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) fspick(0xffffffffffffffff, 0x0, 0x1) 1.554102315s ago: executing program 3 (id=17951): r0 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000700)) 1.535966966s ago: executing program 2 (id=17952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.441736377s ago: executing program 6 (id=17953): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) 1.414065882s ago: executing program 8 (id=17954): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x49, 0x0, &(0x7f0000000200)="0091e4195c952733915e49003cffe51c53729910a0bce102426235c373cdf0baad35bea7a387b7709ac0f54ba72cf7426109ac56b8e09268eb0721d68a8a542fc7c8010384d8e49cf8", 0x0}, 0x50) 1.371360485s ago: executing program 3 (id=17955): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc008002c00070002fb060019c00364bc24eab556a705251e618218db677642109146a2378c877bddfcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.24961273s ago: executing program 6 (id=17956): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f00000001c0)) 1.241983121s ago: executing program 8 (id=17957): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) write$binfmt_script(r0, 0x0, 0x0) 1.231989446s ago: executing program 2 (id=17958): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) 1.1851255s ago: executing program 3 (id=17959): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0xfffffff8}, 0x2) 1.115881965s ago: executing program 0 (id=17960): r0 = socket(0x1d, 0x2, 0x6) accept4$alg(r0, 0x0, 0x0, 0x0) 1.01585411s ago: executing program 7 (id=17961): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) 1.015051099s ago: executing program 6 (id=17962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 953.214609ms ago: executing program 8 (id=17963): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000640)={0x0, "91e81aac308dc1278892e16ba65216c8f13a52fc530d22a2faa2eaa209f35948", 0x4, 0x800, 0x8001, 0x4, 0x1, 0x4, 0x10000, 0xfffffff7}) 939.537284ms ago: executing program 2 (id=17964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 797.815715ms ago: executing program 0 (id=17965): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x7ffffff7, 0x32435750, 0x2, 0x8, [{0x1000000, 0x40}, {0xc, 0x8}, {0x400000e, 0xa0}, {0x10000, 0xfffffff0}, {0x9, 0x3}, {0x7ffffffb, 0x8}, {0xfb60, 0xe}, {0x7, 0x80000000}], 0x6, 0x78, 0x0, 0x1, 0x6}}) 786.53108ms ago: executing program 3 (id=17966): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 736.178865ms ago: executing program 7 (id=17967): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @uid}, @typed={0x8, 0x14, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 695.593575ms ago: executing program 2 (id=17968): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) 685.495537ms ago: executing program 6 (id=17969): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 597.122282ms ago: executing program 8 (id=17970): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) 533.497405ms ago: executing program 0 (id=17971): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030373737372c6469725f756d61736b3d30303030303030303030303030303030303030303030302c696f636861727365743d69736f383835392d362c636f6465706167653d63703835352c63726561746f723d4ddd71752c00eeabc72a9832436950c6116498dda8be60a94746ea68766f63d1d63944fbda2a9337439b37b6f2a694ba98f40070d09c3890bd28a2018f1adfe1e0a630020a9cac1a43800a70a9328ddb2a2f2e207da7cd3caf243b39eaff4966b7aa97cb6cc7d2cfc59e7a976de0a00d23c7ffaaa056cc4f8bc7b4c0f9a21db642b3e832e30a90ba1b9e7933b77c60f6a1b9ca9128f0a2d0e23373c9d15c79865bae97ddd82b98001b6aa9c5390e4deaf5f0ee492c6842b1c08486e479a889491459a257e9d4083634dac6cd58520f72e6c2f11bbd5b03655bb1863b16f3", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 491.205018ms ago: executing program 3 (id=17972): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xfffffffffffff6ff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 398.037568ms ago: executing program 7 (id=17973): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x4e23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 348.979882ms ago: executing program 2 (id=17974): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 348.777907ms ago: executing program 6 (id=17975): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x800, 0x1005f, 0x3}) 327.557147ms ago: executing program 8 (id=17976): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) 197.092456ms ago: executing program 2 (id=17977): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) 36.195178ms ago: executing program 6 (id=17978): socket(0x10, 0x2, 0x2) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd72iF\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xddffff88804f274000(4096) [ 1695.216698][T25292] cramfs: bad data blocksize 3221485966 [ 1695.223224][T25292] cramfs: Error -3 while decompressing! [ 1695.230577][ T6286] udevd[6286]: incorrect cramfs checksum on /dev/loop0 [ 1695.290637][T25292] cramfs: ffffffff9b2af0c8(1306)->ffff88804f274000(4096) [ 1695.467494][ T6286] udevd[6286]: incorrect cramfs checksum on /dev/loop0 [ 1695.526554][ T6286] udevd[6286]: incorrect cramfs checksum on /dev/loop0 [ 1695.601779][T20543] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1695.783055][T20543] usb 7-1: Using ep0 maxpacket: 16 [ 1695.798405][T20543] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1695.844476][T20543] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1695.876043][T20543] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1695.910328][T25339] loop3: detected capacity change from 0 to 64 [ 1695.956579][T20543] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1695.979465][T20543] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1696.000890][T20543] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.018060][T20543] usb 7-1: Product: syz [ 1696.022256][T20543] usb 7-1: Manufacturer: syz [ 1696.058405][T20543] usb 7-1: SerialNumber: syz [ 1696.087829][T20543] usb 7-1: config 0 descriptor?? [ 1696.326357][T25355] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1696.346661][T20543] appledisplay: Apple Cinema Display connected [ 1696.358323][T25357] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16830'. [ 1696.391812][T25357] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16830'. [ 1696.569777][T14818] usb 7-1: USB disconnect, device number 7 [ 1696.569895][ C0] usb 7-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1696.597738][T14818] appledisplay: Apple Cinema Display disconnected [ 1696.994860][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1696.994888][ T30] audit: type=1326 audit(2000000766.571:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25396 comm="syz.3.16841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02c19c799 code=0x7ffc0000 [ 1697.093260][ T30] audit: type=1326 audit(2000000766.608:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25396 comm="syz.3.16841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fb02c19c799 code=0x7ffc0000 [ 1697.212883][ T30] audit: type=1326 audit(2000000766.608:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25396 comm="syz.3.16841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02c19c799 code=0x7ffc0000 [ 1697.288847][ T30] audit: type=1326 audit(2000000766.608:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25396 comm="syz.3.16841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02c19c799 code=0x7ffc0000 [ 1697.461912][T14858] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1697.670225][T14858] usb 9-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1697.698654][T14858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.820837][T14858] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 1698.107588][T25451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16855'. [ 1698.299463][T14858] gspca_sn9c20x: Write register 1001 failed -71 [ 1698.320845][T14858] gspca_sn9c20x: Device initialization failed [ 1698.344060][T14858] gspca_sn9c20x 9-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 1698.369505][T14858] usb 9-1: USB disconnect, device number 4 [ 1698.414043][T25472] geneve2: entered promiscuous mode [ 1698.450471][T25472] geneve2: entered allmulticast mode [ 1698.481268][T30384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1698.504386][T25485] tmpfs: Bad value for 'mpol' [ 1698.515353][T30384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1698.551242][T30384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1698.592820][T30384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1698.769201][ T30] audit: type=1326 audit(2000000768.208:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25498 comm="syz.0.16868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07039c799 code=0x7ffc0000 [ 1698.831560][T25501] netlink: 'syz.3.16869': attribute type 39 has an invalid length. [ 1698.865634][ T30] audit: type=1326 audit(2000000768.218:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25498 comm="syz.0.16868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07039c799 code=0x7ffc0000 [ 1698.976559][ T30] audit: type=1326 audit(2000000768.218:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25498 comm="syz.0.16868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07039c799 code=0x7ffc0000 [ 1699.054979][T25512] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 1699.096938][ T30] audit: type=1326 audit(2000000768.227:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25498 comm="syz.0.16868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fa07039c799 code=0x7ffc0000 [ 1699.191938][ T30] audit: type=1326 audit(2000000768.227:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25498 comm="syz.0.16868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07039c799 code=0x7ffc0000 [ 1699.305211][ T30] audit: type=1326 audit(2000000768.227:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25498 comm="syz.0.16868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07039c799 code=0x7ffc0000 [ 1699.904588][T25556] set_capacity_and_notify: 1 callbacks suppressed [ 1699.904616][T25556] loop0: detected capacity change from 0 to 256 [ 1700.021247][T25556] exfat: Deprecated parameter 'namecase' [ 1700.065269][T25556] exfat: Deprecated parameter 'namecase' [ 1700.134100][T25556] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1700.670203][T25597] openvswitch: netlink: Message has 4 unknown bytes. [ 1700.676980][T25597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1702.062955][T25673] openvswitch: netlink: Tunnel attr 148 out of range max 16 [ 1702.170108][T25678] loop0: detected capacity change from 0 to 512 [ 1702.198220][T25677] binder: BC_ATTEMPT_ACQUIRE not supported [ 1702.227275][T25677] binder: 25676:25677 ioctl c0306201 200000001a80 returned -22 [ 1702.257575][T25678] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1702.356932][T25683] netlink: 'syz.2.16927': attribute type 12 has an invalid length. [ 1702.397425][T25686] netlink: 72 bytes leftover after parsing attributes in process `syz.3.16928'. [ 1702.712853][T25701] 9p: Unknown Cache mode or invalid value fscach [ 1702.732961][T25646] loop7: detected capacity change from 0 to 32768 [ 1702.796495][T25646] jfs_strtoUCS: char2uni returned -22. [ 1702.804865][T25646] charset = euc-jp, char = 0xd4 [ 1703.706926][T25755] libceph: resolve '400' (ret=-3): failed [ 1703.971008][T25767] loop8: detected capacity change from 0 to 2048 [ 1704.003542][T25767] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1704.698826][T25807] loop6: detected capacity change from 0 to 1024 [ 1704.772061][T25807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1704.883630][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1704.883657][ T30] audit: type=1326 audit(2000000773.954:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25820 comm="syz.0.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07039c799 code=0x7ffc0000 [ 1704.978205][T25824] loop0: detected capacity change from 0 to 256 [ 1705.022354][ T30] audit: type=1326 audit(2000000773.954:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25820 comm="syz.0.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fa07039c799 code=0x7ffc0000 [ 1705.094046][T25830] loop2: detected capacity change from 0 to 256 [ 1705.119203][ T30] audit: type=1326 audit(2000000773.954:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25820 comm="syz.0.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07039c799 code=0x7ffc0000 [ 1705.121828][T12896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1705.184733][T25834] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16972'. [ 1705.202421][T25830] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 1705.221567][T25824] FAT-fs (loop0): Directory bread(block 64) failed [ 1705.228303][T25824] FAT-fs (loop0): Directory bread(block 65) failed [ 1705.229483][ T30] audit: type=1326 audit(2000000773.954:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25820 comm="syz.0.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07039c799 code=0x7ffc0000 [ 1705.269198][T25824] FAT-fs (loop0): Directory bread(block 66) failed [ 1705.307918][T25824] FAT-fs (loop0): Directory bread(block 67) failed [ 1705.326007][T25830] exFAT-fs (loop2): error, data valid size is invalid(-9223372036854774758) [ 1705.335559][T25830] exFAT-fs (loop2): Filesystem has been set read-only [ 1705.346665][T25824] FAT-fs (loop0): Directory bread(block 68) failed [ 1705.363984][T25824] FAT-fs (loop0): Directory bread(block 69) failed [ 1705.409843][T25824] FAT-fs (loop0): Directory bread(block 70) failed [ 1705.455485][T25824] FAT-fs (loop0): Directory bread(block 71) failed [ 1705.462236][T25824] FAT-fs (loop0): Directory bread(block 72) failed [ 1705.480129][T25824] FAT-fs (loop0): Directory bread(block 73) failed [ 1705.732532][T25824] syz.0.16971: attempt to access beyond end of device [ 1705.732532][T25824] loop0: rw=8912896, sector=1160, nr_sectors = 4 limit=256 [ 1705.749321][T25858] loop3: detected capacity change from 0 to 512 [ 1705.768513][T25824] syz.0.16971: attempt to access beyond end of device [ 1705.768513][T25824] loop0: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 1705.864359][ T30] audit: type=1800 audit(2000000774.871:749): pid=25824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.16971" name="file0" dev="loop0" ino=1048871 res=0 errno=0 [ 1705.925696][T25858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1706.020748][T25858] ext4 filesystem being mounted at /2819/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1706.127276][T25873] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1706.174966][ T5990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1706.246497][T25876] loop6: detected capacity change from 0 to 2048 [ 1706.368069][T25891] netlink: 'syz.7.16989': attribute type 1 has an invalid length. [ 1706.371547][T25876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1706.485433][T25876] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #12: block 2: comm syz.6.16981: lblock 0 mapped to illegal pblock 2 (length 1) [ 1706.532264][T25898] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1706.793804][T12896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1706.866640][T25913] --map-set only usable from mangle table [ 1706.908770][T25914] openvswitch: netlink: IP tunnel dst address not specified [ 1707.217405][ T7821] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1707.450838][ T7821] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1707.462827][ T7821] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.494845][ T7821] usb 9-1: config 220 has no interface number 2 [ 1707.501232][ T7821] usb 9-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1707.534880][ T7821] usb 9-1: config 220 interface 1 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1707.574471][ T7821] usb 9-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1707.634165][ T7821] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1707.666572][ T7821] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1707.673513][ T7821] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1707.722127][ T7821] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1707.744684][ T7821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.785933][ T7821] usb 9-1: Product: syz [ 1707.790185][ T7821] usb 9-1: Manufacturer: syz [ 1707.805181][ T7821] usb 9-1: SerialNumber: syz [ 1707.830755][T25966] xt_policy: output policy not valid in PREROUTING and INPUT [ 1707.851047][T25970] loop0: detected capacity change from 0 to 64 [ 1707.898750][T25970] syz.0.17012: attempt to access beyond end of device [ 1707.898750][T25970] loop0: rw=8388608, sector=16777216, nr_sectors = 2 limit=64 [ 1707.955109][T25970] Buffer I/O error on dev loop0, logical block 8388608, async page read [ 1707.963880][T25970] syz.0.17012: attempt to access beyond end of device [ 1707.963880][T25970] loop0: rw=8388608, sector=16777216, nr_sectors = 2 limit=64 [ 1708.044479][T25970] Buffer I/O error on dev loop0, logical block 8388608, async page read [ 1708.101509][ T7821] usb 9-1: selecting invalid altsetting 0 [ 1708.139339][ T7821] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1708.174859][ T7821] uvcvideo 9-1:220.0: No valid video chain found. [ 1708.225483][T25996] loop6: detected capacity change from 0 to 64 [ 1708.261528][ T7821] usb 9-1: selecting invalid altsetting 0 [ 1708.279913][ T7821] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1708.348699][ T7821] usb 9-1: USB disconnect, device number 5 [ 1709.529937][T26066] loop2: detected capacity change from 0 to 256 [ 1709.613197][T26066] FAT-fs (loop2): Directory bread(block 64) failed [ 1709.620015][T26066] FAT-fs (loop2): Directory bread(block 65) failed [ 1709.654092][T26066] FAT-fs (loop2): Directory bread(block 66) failed [ 1709.664456][T26054] loop6: detected capacity change from 0 to 4096 [ 1709.674841][T26066] FAT-fs (loop2): Directory bread(block 67) failed [ 1709.692230][T26054] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1709.701537][T26066] FAT-fs (loop2): Directory bread(block 68) failed [ 1709.722868][T26066] FAT-fs (loop2): Directory bread(block 69) failed [ 1709.738981][ T7821] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1709.771222][T26066] FAT-fs (loop2): Directory bread(block 70) failed [ 1709.780735][T26066] FAT-fs (loop2): Directory bread(block 71) failed [ 1709.788241][T26072] netlink: 'syz.0.17037': attribute type 1 has an invalid length. [ 1709.798323][T26066] FAT-fs (loop2): Directory bread(block 72) failed [ 1709.813762][T26066] FAT-fs (loop2): Directory bread(block 73) failed [ 1709.823933][T26075] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17038'. [ 1709.847420][T26072] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.17037'. [ 1709.903143][T26021] loop7: detected capacity change from 0 to 32768 [ 1709.922673][ T7821] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1709.930804][ T7821] usb 4-1: config 0 has no interface number 0 [ 1709.965176][ T7821] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1710.000083][T26021] JBD2: Ignoring recovery information on journal [ 1710.007537][ T7821] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1710.032472][ T7821] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1710.043418][ T7821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.062209][ T7821] usb 4-1: Product: syz [ 1710.066394][ T7821] usb 4-1: Manufacturer: syz [ 1710.071147][ T7821] usb 4-1: SerialNumber: syz [ 1710.080876][ T7821] usb 4-1: config 0 descriptor?? [ 1710.091970][T26057] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1710.101534][ T7821] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1710.141469][T26021] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1710.203742][ T7821] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1710.338144][T26088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1710.411827][T26100] netdevsim netdevsim8: Direct firmware load for / [ 1710.411827][T26100] failed with error -2 [ 1710.438627][T26100] netdevsim netdevsim8: Falling back to sysfs fallback for: / [ 1710.438627][T26100] [ 1710.565223][T26021] OCFS2: ERROR (device loop7): ocfs2_validate_gd_self: Group descriptor #20 has bad signature [ 1710.613383][T14818] usb 4-1: USB disconnect, device number 59 [ 1710.641949][T26021] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1710.656369][T14818] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1710.677821][T26112] loop0: detected capacity change from 0 to 736 [ 1710.685531][T26021] OCFS2: File system is now read-only. [ 1710.700654][T26021] (syz.7.17022,26021,0):ocfs2_search_chain:1888 ERROR: status = -30 [ 1710.719006][T14818] cyberjack 4-1:0.69: device disconnected [ 1710.744657][T26021] (syz.7.17022,26021,0):ocfs2_search_chain:2011 ERROR: status = -30 [ 1710.787516][T26021] (syz.7.17022,26021,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30 [ 1710.807564][T26021] (syz.7.17022,26021,1):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30 [ 1710.831664][T26021] (syz.7.17022,26021,1):ocfs2_claim_metadata:2176 ERROR: status = -30 [ 1710.876626][T26021] (syz.7.17022,26021,1):ocfs2_claim_metadata:2189 ERROR: status = -30 [ 1710.914584][T26021] (syz.7.17022,26021,1):ocfs2_dx_dir_attach_index:2357 ERROR: status = -30 [ 1710.939027][T26112] rock: directory entry would overflow storage [ 1710.956689][T26112] rock: sig=0x3b10, size=4, remaining=3 [ 1710.963004][T26021] (syz.7.17022,26021,1):ocfs2_expand_inline_dir:3049 ERROR: status = -30 [ 1710.982720][T26021] (syz.7.17022,26021,1):ocfs2_extend_dir:3231 ERROR: status = -30 [ 1711.010537][T26021] (syz.7.17022,26021,1):ocfs2_prepare_dir_for_insert:4349 ERROR: status = -30 [ 1711.033119][T26021] (syz.7.17022,26021,1):ocfs2_mknod:302 ERROR: status = -30 [ 1711.040503][T26021] (syz.7.17022,26021,1):ocfs2_mknod:506 ERROR: status = -30 [ 1711.066703][T26021] (syz.7.17022,26021,1):ocfs2_mkdir:662 ERROR: status = -30 [ 1711.316505][T13048] __find_get_block_slow() failed. block=1008806316530991136, b_blocknr=32, b_state=0x00620019, b_size=512, device loop7 blocksize: 512 [ 1711.390221][T13048] grow_buffers: requested out-of-range block 1008806316530991136 for device loop7 [ 1711.425049][T13048] (syz-executor,13048,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 1711.459384][T13048] (syz-executor,13048,0):_ocfs2_free_suballoc_bits:2866 ERROR: status = -12 [ 1711.469012][T13048] (syz-executor,13048,0):_ocfs2_free_clusters:2977 ERROR: status = -12 [ 1711.534744][T13048] (syz-executor,13048,0):ocfs2_sync_local_to_main:994 ERROR: status = -12 [ 1711.543326][T13048] (syz-executor,13048,0):ocfs2_sync_local_to_main:1007 ERROR: status = -12 [ 1711.586395][T13048] (syz-executor,13048,0):ocfs2_shutdown_local_alloc:450 ERROR: status = -12 [ 1711.607690][T26103] loop2: detected capacity change from 0 to 32768 [ 1711.687186][T26103] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 1711.711179][T13048] ocfs2: Unmounting device (7,7) on (node local) [ 1711.771843][T26152] loop3: detected capacity change from 0 to 64 [ 1711.812304][T26103] JBD2: Ignoring recovery information on journal [ 1711.927354][T26152] hfs: filesystem is marked locked, mounting read-only. [ 1711.972731][T26152] hfs: filesystem is marked locked, leaving read-only. [ 1712.013797][T26103] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1712.433765][ T5983] ocfs2: Unmounting device (7,2) on (node local) [ 1712.667740][T26195] netlink: 'syz.3.17065': attribute type 11 has an invalid length. [ 1712.675718][T26195] netlink: 'syz.3.17065': attribute type 11 has an invalid length. [ 1712.741677][T26195] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17065'. [ 1712.762366][T26202] loop0: detected capacity change from 0 to 256 [ 1713.395212][T26235] netlink: 32 bytes leftover after parsing attributes in process `syz.7.17074'. [ 1713.410713][T26233] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1713.524060][T26241] loop0: detected capacity change from 0 to 64 [ 1713.574289][T26241] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1713.640490][T26241] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 1714.058355][T26273] openvswitch: netlink: Flow actions attr not present in new flow. [ 1714.289587][T26288] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17088'. [ 1714.375226][T26284] loop3: detected capacity change from 0 to 2048 [ 1714.423171][T26284] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1714.513257][ T30] audit: type=1800 audit(2000000782.957:750): pid=26284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17087" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 1715.512142][T26341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1716.116750][T26386] loop8: detected capacity change from 0 to 512 [ 1716.217190][T26386] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.17115: inode has both inline data and extents flags [ 1716.309182][T26386] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1716.309592][T26386] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.17115: couldn't read orphan inode 15 (err -117) [ 1716.318919][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1716.318951][ C1] EXT4-fs (loop8): initial error at time 2000000784: ext4_orphan_get:1391: inode 15 [ 1716.319007][ C1] EXT4-fs (loop8): last error at time 2000000784: ext4_orphan_get:1391: inode 15 [ 1716.361705][T26399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17117'. [ 1716.371900][T26386] loop8: lost filesystem error report for type 5 error -117 [ 1716.397493][T26386] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1716.449836][T26399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17117'. [ 1716.471500][T26399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17117'. [ 1716.480799][T26399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17117'. [ 1716.689782][T21179] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.122383][T26424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1717.177878][T26424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1717.219683][T26440] loop3: detected capacity change from 0 to 128 [ 1717.777963][T26460] loop6: detected capacity change from 0 to 64 [ 1717.826660][T26424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1717.960803][T26416] loop2: detected capacity change from 0 to 32768 [ 1718.182555][ T1847] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 1718.185903][T26416] JBD2: Ignoring recovery information on journal [ 1718.314411][T26416] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1718.443237][T26481] loop3: detected capacity change from 0 to 2048 [ 1718.492805][T26481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1718.563698][T26416] OCFS2: ERROR (device loop2): ocfs2_validate_gd_self: Group descriptor #20 has bad signature [ 1718.609144][T26416] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1718.675862][T26416] OCFS2: File system is now read-only. [ 1718.675962][T26416] (syz.2.17122,26416,1):ocfs2_search_chain:1888 ERROR: status = -30 [ 1718.676118][T26416] (syz.2.17122,26416,1):ocfs2_search_chain:2011 ERROR: status = -30 [ 1718.676161][T26416] (syz.2.17122,26416,1):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30 [ 1718.676211][T26416] (syz.2.17122,26416,1):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30 [ 1718.676255][T26416] (syz.2.17122,26416,1):ocfs2_claim_metadata:2176 ERROR: status = -30 [ 1718.676297][T26416] (syz.2.17122,26416,1):ocfs2_claim_metadata:2189 ERROR: status = -30 [ 1718.676341][T26416] (syz.2.17122,26416,1):ocfs2_dx_dir_attach_index:2357 ERROR: status = -30 [ 1718.676386][T26416] (syz.2.17122,26416,1):ocfs2_expand_inline_dir:3049 ERROR: status = -30 [ 1718.676516][T26416] (syz.2.17122,26416,1):ocfs2_extend_dir:3231 ERROR: status = -30 [ 1718.676559][T26416] (syz.2.17122,26416,1):ocfs2_prepare_dir_for_insert:4349 ERROR: status = -30 [ 1718.676602][T26416] (syz.2.17122,26416,1):ocfs2_mknod:302 ERROR: status = -30 [ 1718.676646][T26416] (syz.2.17122,26416,1):ocfs2_mknod:506 ERROR: status = -30 [ 1718.676688][T26416] (syz.2.17122,26416,1):ocfs2_mkdir:662 ERROR: status = -30 [ 1718.901440][ T5983] __find_get_block_slow() failed. block=1008806316530991136, b_blocknr=32, b_state=0x00620019, b_size=512, device loop2 blocksize: 512 [ 1718.901572][ T5983] grow_buffers: requested out-of-range block 1008806316530991136 for device loop2 [ 1718.901605][ T5983] (syz-executor,5983,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 1718.901652][ T5983] (syz-executor,5983,1):_ocfs2_free_suballoc_bits:2866 ERROR: status = -12 [ 1718.901786][ T5983] (syz-executor,5983,1):_ocfs2_free_clusters:2977 ERROR: status = -12 [ 1718.901832][ T5983] (syz-executor,5983,1):ocfs2_sync_local_to_main:994 ERROR: status = -12 [ 1718.901876][ T5983] (syz-executor,5983,1):ocfs2_sync_local_to_main:1007 ERROR: status = -12 [ 1718.901920][ T5983] (syz-executor,5983,1):ocfs2_shutdown_local_alloc:450 ERROR: status = -12 [ 1719.002283][ T5983] ocfs2: Unmounting device (7,2) on (node local) [ 1719.096512][T26514] loop7: detected capacity change from 0 to 1024 [ 1719.097601][T26514] EXT4-fs: Ignoring removed bh option [ 1719.097674][T26514] EXT4-fs: inline encryption not supported [ 1719.543182][T26535] netlink: 'syz.7.17150': attribute type 40 has an invalid length. [ 1719.554369][T26532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1719.720509][T26542] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1719.727252][T26543] netlink: 'syz.6.17152': attribute type 15 has an invalid length. [ 1719.727286][T26543] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17152'. [ 1720.290598][T26573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17159'. [ 1720.427256][T14818] hid (null): report_id 2445601295 is invalid [ 1720.433534][T14818] hid (null): report_id 0 is invalid [ 1720.454007][T14818] hid (null): global environment stack underflow [ 1720.490237][T14818] hid (null): unknown global tag 0xe [ 1720.523135][T14818] hid-generic 2BD5:3849DFF5:F76C68F0.0002: report_id 2445601295 is invalid [ 1720.559178][T14818] hid-generic 2BD5:3849DFF5:F76C68F0.0002: item 0 4 1 8 parsing failed [ 1720.603625][T14818] hid-generic 2BD5:3849DFF5:F76C68F0.0002: probe with driver hid-generic failed with error -22 [ 1721.178610][T26622] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1721.525179][T26639] loop6: detected capacity change from 0 to 64 [ 1721.553649][T26639] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1721.583793][T26639] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 1721.732794][T26647] loop7: detected capacity change from 0 to 1764 [ 1721.846250][T26647] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1721.908389][T26657] loop3: detected capacity change from 0 to 1024 [ 1722.010913][T26664] loop6: detected capacity change from 0 to 64 [ 1722.214192][ T13] hfsplus: b-tree write err: -5, ino 25 [ 1722.220093][ T13] hfsplus: b-tree write err: -5, ino 4 [ 1722.267599][ T13] hfsplus: b-tree write err: -5, ino 2 [ 1722.550250][T26692] netlink: 'syz.3.17192': attribute type 11 has an invalid length. [ 1722.553615][T26607] loop2: detected capacity change from 0 to 32768 [ 1722.685679][T26607] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1722.720570][T26701] netlink: 140 bytes leftover after parsing attributes in process `syz.8.17197'. [ 1722.841107][T26708] loop3: detected capacity change from 0 to 4096 [ 1722.999915][T26607] XFS (loop2): Ending clean mount [ 1723.034896][T26708] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 1723.048977][T26607] XFS (loop2): Quotacheck needed: Please wait. [ 1723.065041][T26721] loop7: detected capacity change from 0 to 512 [ 1723.203569][T26708] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB [ 1723.222662][T26607] XFS (loop2): Quotacheck: Done. [ 1723.576880][ T5983] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1724.699117][ T30] audit: type=1326 audit(2000000792.492:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26798 comm="syz.3.17226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02c19c799 code=0x7ffc0000 [ 1724.730349][T26800] loop2: detected capacity change from 0 to 128 [ 1724.827623][ T30] audit: type=1326 audit(2000000792.492:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26798 comm="syz.3.17226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02c19c799 code=0x7ffc0000 [ 1724.892442][ T30] audit: type=1326 audit(2000000792.521:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26798 comm="syz.3.17226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fb02c19c799 code=0x7ffc0000 [ 1724.915680][ T30] audit: type=1326 audit(2000000792.521:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26798 comm="syz.3.17226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02c19c799 code=0x7ffc0000 [ 1724.940507][ T30] audit: type=1326 audit(2000000792.521:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26798 comm="syz.3.17226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02c19c799 code=0x7ffc0000 [ 1725.279895][T14858] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1725.482133][T14858] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 1725.501025][T14858] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.543595][T14858] usb 9-1: config 0 has no interface number 0 [ 1725.571214][T14858] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1725.603010][T14858] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1725.656291][T26850] loop6: detected capacity change from 0 to 1024 [ 1725.662314][T14858] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1725.679799][T14858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.710115][T14858] usb 9-1: Product: syz [ 1725.714370][T14858] usb 9-1: Manufacturer: syz [ 1725.740681][T14858] usb 9-1: SerialNumber: syz [ 1725.774428][T14858] usb 9-1: config 0 descriptor?? [ 1725.798553][T26850] hfsplus: keylen 65060 too large [ 1725.827528][T26850] hfsplus: xattr searching failed [ 1726.123143][T26873] loop2: detected capacity change from 0 to 1764 [ 1726.196227][T26873] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1726.289159][T14858] usb 9-1: USB disconnect, device number 6 [ 1726.419621][T26889] loop3: detected capacity change from 0 to 1024 [ 1726.457378][T26889] EXT4-fs: Ignoring removed orlov option [ 1726.543585][T26889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1726.585815][T26901] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1726.667612][T26889] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.17248: bit already cleared for inode 15 [ 1726.950139][ T5990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1727.279594][T26935] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1727.432580][T26948] xt_ipcomp: unknown flags 1D [ 1729.507611][T27059] vxcan3: entered promiscuous mode [ 1729.539800][T27059] vxcan3: entered allmulticast mode [ 1730.179395][T27102] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.17312'. [ 1730.681250][T27052] loop7: detected capacity change from 0 to 32768 [ 1732.285744][T27201] bond3: Removing last ns target with arp_interval on [ 1733.203525][T27288] loop8: detected capacity change from 0 to 256 [ 1733.260003][T27288] exfat: Deprecated parameter 'namecase' [ 1733.265807][T27288] exfat: Deprecated parameter 'utf8' [ 1733.322868][T27288] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 1733.338394][T27171] loop2: detected capacity change from 0 to 40427 [ 1733.385866][T27297] netlink: 'syz.7.17361': attribute type 1 has an invalid length. [ 1733.438605][T27171] F2FS-fs (loop2): invalid crc value [ 1733.881588][T27171] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1733.911189][T27171] F2FS-fs (loop2): Start checkpoint disabled! [ 1733.934166][T27171] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 1734.001029][T27171] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1734.165667][T27171] F2FS-fs (loop2): disabling checkpoint not compatible with read-only [ 1734.659102][T27344] loop6: detected capacity change from 0 to 4096 [ 1734.696163][T27344] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1734.777272][T27344] ntfs3(loop6): ino=19, mi_enum_attr [ 1734.799983][T27344] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1734.811962][T27344] ntfs3(loop6): ino=18, mi_enum_attr [ 1736.311137][T27444] __vm_enough_memory: pid: 27444, comm: syz.8.17405, bytes: 21199808479232 not enough memory for the allocation [ 1736.517626][T27454] loop7: detected capacity change from 0 to 64 [ 1736.601172][T27393] loop6: detected capacity change from 0 to 32768 [ 1737.126577][T27477] loop3: detected capacity change from 0 to 4096 [ 1737.176437][T27477] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1737.275107][T27477] ntfs3(loop3): ino=1a, mi_enum_attr [ 1737.294920][T27477] ntfs3(loop3): ino=1a, mi_enum_attr [ 1737.315184][T27477] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 1737.422958][T27477] ntfs3(loop3): ino=5, "/" indx_read_ra [ 1737.502879][T27504] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17422'. [ 1738.136119][T14818] IPVS: starting estimator thread 0... [ 1738.249794][T27535] IPVS: using max 24 ests per chain, 57600 per kthread [ 1738.498962][T27552] loop2: detected capacity change from 0 to 8 [ 1738.633280][T27552] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1738.656193][T27552] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1738.969749][T27516] loop3: detected capacity change from 0 to 40427 [ 1738.980818][T27576] netlink: 'syz.2.17443': attribute type 1 has an invalid length. [ 1739.021416][T27576] netlink: 'syz.2.17443': attribute type 2 has an invalid length. [ 1739.043856][T27516] F2FS-fs (loop3): invalid crc value [ 1739.421545][T27516] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1739.440690][T27516] F2FS-fs (loop3): Start checkpoint disabled! [ 1739.500830][T27516] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1739.510028][T27606] netlink: 'syz.6.17451': attribute type 1 has an invalid length. [ 1739.531945][T27516] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1739.543649][T27606] netlink: 'syz.6.17451': attribute type 3 has an invalid length. [ 1739.582697][T27606] netlink: 224 bytes leftover after parsing attributes in process `syz.6.17451'. [ 1739.592257][T14858] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1739.670860][T27516] F2FS-fs (loop3): disabling checkpoint not compatible with read-only [ 1739.782783][T14858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1739.820542][T14858] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1739.851406][T27624] netlink: 'syz.6.17457': attribute type 10 has an invalid length. [ 1739.851857][T14858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1739.875705][T27624] netlink: 224 bytes leftover after parsing attributes in process `syz.6.17457'. [ 1739.912992][T14858] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1739.941277][T14858] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1740.028727][T14858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.077857][T14858] usb 9-1: config 0 descriptor?? [ 1740.086573][T27632] loop2: detected capacity change from 0 to 164 [ 1740.120030][T27632] rock: directory entry would overflow storage [ 1740.130872][T27632] rock: sig=0x66, size=4, remaining=3 [ 1740.335878][T14858] hdpvr 9-1:0.0: firmware version 0x7e dated M8 9 >S|hnBk矉?qC$F [ 1740.355716][T27648] netlink: 10 bytes leftover after parsing attributes in process `syz.6.17464'. [ 1740.402739][T14858] hdpvr 9-1:0.0: untested firmware, the driver might not work. [ 1740.565784][T14858] hdpvr 9-1:0.0: device init failed [ 1740.573699][T14858] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -12 [ 1740.641741][T14858] usb 9-1: USB disconnect, device number 7 [ 1740.773388][T27665] loop7: detected capacity change from 0 to 1764 [ 1740.796749][T27672] netlink: 'syz.2.17469': attribute type 10 has an invalid length. [ 1740.855387][T27672] team0: Device wg1 is of different type [ 1740.902268][T27665] syz.7.17466: attempt to access beyond end of device [ 1740.902268][T27665] loop7: rw=524288, sector=1888, nr_sectors = 256 limit=1764 [ 1740.919836][T27665] syz.7.17466: attempt to access beyond end of device [ 1740.919836][T27665] loop7: rw=524288, sector=2144, nr_sectors = 256 limit=1764 [ 1740.937750][T27665] syz.7.17466: attempt to access beyond end of device [ 1740.937750][T27665] loop7: rw=8388608, sector=1888, nr_sectors = 8 limit=1764 [ 1741.007639][ T30] audit: type=1800 audit(2000000807.765:756): pid=27665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.17466" name="file0" dev="loop7" ino=1923 res=0 errno=0 [ 1741.049425][T27679] loop3: detected capacity change from 0 to 128 [ 1741.057166][T27679] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1741.156987][T27679] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1741.217014][T27689] : renamed from lo (while UP) [ 1741.342462][T27691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17474'. [ 1741.677962][T27712] loop6: detected capacity change from 0 to 1764 [ 1741.712174][T14858] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1741.917800][T14858] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1741.937901][T14858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.989109][T14858] usb 9-1: config 0 descriptor?? [ 1742.454321][T27684] loop0: detected capacity change from 0 to 32768 [ 1742.493699][T14858] ath6kl: Failed to submit usb control message: -71 [ 1742.513369][T14858] ath6kl: unable to send the bmi data to the device: -71 [ 1742.520436][T14858] ath6kl: Unable to send get target info: -71 [ 1742.531080][T14858] ath6kl: Failed to init ath6kl core: -71 [ 1742.538275][T14858] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1742.552147][T14858] usb 9-1: USB disconnect, device number 8 [ 1742.566817][T27684] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1742.649919][T27766] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17490'. [ 1742.831352][T27684] XFS (loop0): Ending clean mount [ 1742.999580][T27780] netlink: 36 bytes leftover after parsing attributes in process `syz.7.17493'. [ 1743.114058][ T5976] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1744.600917][T27849] loop0: detected capacity change from 0 to 4096 [ 1744.632851][T27869] libceph: secret too big 289 [ 1744.636101][T27867] libceph: resolve '00' (ret=-3): failed [ 1744.680944][T14858] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1744.718453][T27849] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1744.853539][T27849] ntfs3(loop0): ino=1a, mi_enum_attr [ 1744.860109][T27849] ntfs3(loop0): ino=1a, mi_enum_attr [ 1744.875314][T14858] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1744.917429][T14858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1744.921262][T27849] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 1744.958105][T14858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1744.999925][T14858] usb 9-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1745.030993][T14858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.062378][T14858] usb 9-1: Product: syz [ 1745.084342][T14858] usb 9-1: Manufacturer: syz [ 1745.094714][T14858] usb 9-1: SerialNumber: syz [ 1745.139654][T14858] usb 9-1: config 0 descriptor?? [ 1745.264789][T27849] ntfs3(loop0): ino=5, "/" indx_read_ra [ 1745.693665][T27915] cgroup: Name too long [ 1745.819710][T27919] netlink: 'syz.3.17533': attribute type 10 has an invalid length. [ 1745.938325][T27919] team0: Device wg1 is of different type [ 1746.266898][T27886] loop2: detected capacity change from 0 to 32768 [ 1746.374574][T27936] loop6: detected capacity change from 0 to 2048 [ 1746.422075][T27936] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1746.433875][T27944] loop8: detected capacity change from 0 to 64 [ 1747.344241][T27969] loop2: detected capacity change from 0 to 512 [ 1747.357747][T27972] loop7: detected capacity change from 0 to 8 [ 1747.475216][T27969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1747.535692][T27986] netlink: 'syz.3.17551': attribute type 11 has an invalid length. [ 1747.599106][T27986] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17551'. [ 1747.621522][T27969] ext4 filesystem being mounted at /2863/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1747.715072][T27969] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 1747.760394][T27969] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1747.802855][T27969] EXT4-fs error (device loop2): ext4_acquire_dquot:6999: comm syz.2.17547: Failed to acquire dquot type 0 [ 1748.053290][T28007] netlink: 48 bytes leftover after parsing attributes in process `syz.3.17557'. [ 1748.154611][ T5983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1748.895304][T28032] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1748.930926][T28037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17567'. [ 1749.634427][T27999] loop7: detected capacity change from 0 to 32768 [ 1749.645842][T28062] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.17574'. [ 1749.679150][T28064] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17576'. [ 1749.726376][T28064] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17576'. [ 1749.763003][T28064] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17576'. [ 1750.106310][T28080] /dev/nullb0: Can't open blockdev [ 1750.395063][T28094] loop2: detected capacity change from 0 to 16 [ 1750.448758][T28094] erofs (device loop2): mounted with root inode @ nid 36. [ 1751.141834][T28047] loop6: detected capacity change from 0 to 32768 [ 1751.241107][T28126] fuse: blksize only supported for fuseblk [ 1751.682424][ T5981] Bluetooth: hci1: command 0x0406 tx timeout [ 1752.214500][T28167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17606'. [ 1752.271244][T28167] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17606'. [ 1752.789775][T28190] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1753.178533][ T30] audit: type=1326 audit(2000000819.153:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28208 comm="syz.7.17620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250239c799 code=0x7ffc0000 [ 1753.241846][ T30] audit: type=1326 audit(2000000819.163:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28208 comm="syz.7.17620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f250239c799 code=0x7ffc0000 [ 1753.362224][ T30] audit: type=1326 audit(2000000819.163:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28208 comm="syz.7.17620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250239c799 code=0x7ffc0000 [ 1753.465308][ T30] audit: type=1326 audit(2000000819.163:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28208 comm="syz.7.17620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250239c799 code=0x7ffc0000 [ 1754.891080][T28290] loop0: detected capacity change from 0 to 16 [ 1754.943059][T28290] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1755.463472][T28315] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1755.815757][T28325] netlink: 'syz.7.17657': attribute type 32 has an invalid length. [ 1756.192758][T28335] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1756.298631][T14858] iguanair 9-1:0.0: failed to get version [ 1756.330375][T14858] iguanair 9-1:0.0: probe with driver iguanair failed with error -110 [ 1756.438958][T14858] usb 9-1: USB disconnect, device number 9 [ 1756.697787][T28314] loop3: detected capacity change from 0 to 32768 [ 1756.789899][T14858] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1756.830144][T28318] loop2: detected capacity change from 0 to 32768 [ 1756.960890][T14858] usb 9-1: Using ep0 maxpacket: 32 [ 1756.993484][T14858] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 1757.001654][T14858] usb 9-1: config 0 has no interface number 0 [ 1757.017615][T28326] loop0: detected capacity change from 0 to 32768 [ 1757.029833][T14858] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1757.074038][T14858] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1757.113202][T14858] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1757.155127][T14858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.163225][T14858] usb 9-1: Product: syz [ 1757.210156][T14858] usb 9-1: Manufacturer: syz [ 1757.238347][T14858] usb 9-1: SerialNumber: syz [ 1757.259462][T14858] usb 9-1: config 0 descriptor?? [ 1757.758512][T28386] loop6: detected capacity change from 0 to 512 [ 1757.827424][T28386] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.17672: bad orphan inode 13 [ 1757.849660][T28386] loop6: lost filesystem error report for type 5 error -117 [ 1757.850131][T28386] ext4_test_bit(bit=12, block=4) = 1 [ 1757.863797][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1757.863833][ C1] EXT4-fs (loop6): initial error at time 2000000823: ext4_orphan_get:1417 [ 1757.863877][ C1] EXT4-fs (loop6): last error at time 2000000823: ext4_orphan_get:1417 [ 1757.915995][T14858] radio-si470x 9-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 1757.953826][T14858] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 1757.975967][T28386] is_bad_inode(inode)=0 [ 1757.980242][T28386] NEXT_ORPHAN(inode)=0 [ 1757.984330][T28386] max_ino=32 [ 1757.988161][T28386] i_nlink=1 [ 1757.993568][T28386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1758.016139][T14858] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 1758.090879][T14858] usb 9-1: USB disconnect, device number 10 [ 1758.126949][T28386] EXT4-fs warning (device loop6): dx_probe:812: inode #2: comm syz.6.17672: Hash code is SIPHASH, but hash not in dirent [ 1758.187668][T28386] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.17672: Corrupt directory, running e2fsck is recommended [ 1758.210269][T28386] EXT4-fs warning (device loop6): dx_probe:812: inode #2: comm syz.6.17672: Hash code is SIPHASH, but hash not in dirent [ 1758.223939][T28386] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.17672: Corrupt directory, running e2fsck is recommended [ 1758.237591][T28386] EXT4-fs error (device loop6): ext4_find_dest_de:2049: inode #2: block 13: comm syz.6.17672: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 1758.318388][T12896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1758.573166][T28423] loop3: detected capacity change from 0 to 512 [ 1758.577136][T28419] loop6: detected capacity change from 0 to 1764 [ 1758.593873][T28423] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1758.733210][T28423] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1759.581856][T28481] ptrace attach of "./syz-executor exec"[5983] was attempted by "./syz-executor exec"[28481] [ 1759.663354][T28485] loop6: detected capacity change from 0 to 512 [ 1759.798940][ T30] audit: type=1800 audit(2000000825.339:761): pid=28485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.17697" name="file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1760.439333][T28528] loop2: detected capacity change from 0 to 512 [ 1760.613242][T28528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1760.690516][T28528] ext4 filesystem being mounted at /2889/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1761.051412][ T5983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1761.083157][T28556] loop8: detected capacity change from 0 to 512 [ 1761.185338][T28512] loop6: detected capacity change from 0 to 32768 [ 1761.193633][T28556] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1761.224802][T28564] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1761.255890][T28556] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1761.307036][T28556] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 1761.322594][T28556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1761.337628][T28512] jfs_lookup: iget failed on inum 32 [ 1761.396602][T28512] jfs_lookup: iget failed on inum 32 [ 1761.459414][T28556] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1761.707419][T21179] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.645530][T14858] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1762.827234][T14858] usb 3-1: Using ep0 maxpacket: 32 [ 1762.829443][T14858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1762.829506][T14858] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1762.829553][T14858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1762.829602][T14858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1762.832398][T14858] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1762.832446][T14858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.832489][T14858] usb 3-1: Product: syz [ 1762.832518][T14858] usb 3-1: Manufacturer: syz [ 1762.832547][T14858] usb 3-1: SerialNumber: syz [ 1762.851162][T14858] usb 3-1: config 0 descriptor?? [ 1762.897104][T14858] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input109 [ 1763.031912][T28688] netlink: 'syz.0.17747': attribute type 12 has an invalid length. [ 1763.208425][ T6126] usb 3-1: USB disconnect, device number 48 [ 1763.232992][T28709] x_tables: duplicate entry at hook 2 [ 1763.773142][T28739] openvswitch: netlink: nsh attr 247 is out of range max 3 [ 1763.960356][T28746] set_capacity_and_notify: 1 callbacks suppressed [ 1763.960385][T28746] loop7: detected capacity change from 0 to 256 [ 1764.125828][T28760] dlm: no locking on control device [ 1764.191847][T28753] loop3: detected capacity change from 0 to 4096 [ 1764.252657][T28753] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1764.366033][T20539] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1764.381921][T28776] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1764.408750][T28753] ntfs3(loop3): ino=19, mi_enum_attr [ 1764.469668][T28753] ntfs3(loop3): failed to convert "c46c" to maccroatian [ 1764.510605][T28753] ntfs3(loop3): ino=20, mi_enum_attr [ 1764.569924][T20539] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 1764.587715][T20539] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 1764.654958][T20539] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1764.672448][T20539] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.720290][T20539] usb 7-1: Product: syz [ 1764.724528][T20539] usb 7-1: Manufacturer: syz [ 1764.750674][T20539] usb 7-1: SerialNumber: syz [ 1764.794549][T20539] usb 7-1: config 0 descriptor?? [ 1764.816911][T20539] hub 7-1:0.0: bad descriptor, ignoring hub [ 1764.822887][T20539] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1764.955549][T20539] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input110 [ 1764.973981][T28803] loop3: detected capacity change from 0 to 512 [ 1765.064521][T28803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1765.110421][T28803] ext4 filesystem being mounted at /2952/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1765.168917][T14858] usb 7-1: USB disconnect, device number 8 [ 1765.231638][T28824] netlink: 88 bytes leftover after parsing attributes in process `syz.2.17778'. [ 1765.355342][ T5990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1765.474650][T28844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17780'. [ 1765.764224][T28861] loop7: detected capacity change from 0 to 256 [ 1765.976367][T28873] loop8: detected capacity change from 0 to 2048 [ 1766.070240][T28882] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1766.215005][T28888] QAT: failed to copy from user cfg_data. [ 1766.374615][T28892] loop6: detected capacity change from 0 to 8 [ 1766.425147][T28892] SQUASHFS error: Unable to read inode 0xa7 [ 1767.023184][T28932] xt_nat: multiple ranges no longer supported [ 1767.530444][T14818] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1767.733242][T14818] usb 7-1: Using ep0 maxpacket: 32 [ 1767.755248][T14818] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.781528][T14818] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 1767.802439][T14818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.827319][T14818] usb 7-1: Product: syz [ 1767.845552][T14818] usb 7-1: Manufacturer: syz [ 1767.865333][T14818] usb 7-1: SerialNumber: syz [ 1767.892131][T14818] usb 7-1: config 0 descriptor?? [ 1768.030096][T28989] loop8: detected capacity change from 0 to 2048 [ 1768.089777][T28992] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1768.160687][T14818] ljca 7-1:0.0: bulk endpoints not found [ 1768.208954][T14818] usb 7-1: USB disconnect, device number 9 [ 1768.223339][T28989] NILFS (loop8): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1768.275015][T28989] NILFS error (device loop8): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1768.310787][T28989] Remounting filesystem read-only [ 1768.319766][T28989] NILFS (loop8): error -5 truncating bmap (ino=16) [ 1768.485466][T29015] netlink: 'syz.3.17819': attribute type 7 has an invalid length. [ 1768.493696][T21179] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 1768.503909][T29016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17820'. [ 1768.759388][T29032] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17825'. [ 1769.072385][T29045] netlink: 52 bytes leftover after parsing attributes in process `syz.6.17829'. [ 1769.509140][T29077] loop3: detected capacity change from 0 to 8 [ 1769.575518][T29077] SQUASHFS error: Failed to read block 0x260685: -5 [ 1769.596643][T29077] SQUASHFS error: Unable to read metadata cache entry [260685] [ 1769.691575][T29077] SQUASHFS error: Unable to read directory block [260685:0] [ 1770.062579][T29106] netlink: 'syz.3.17845': attribute type 1 has an invalid length. [ 1770.071195][T29106] netlink: 244 bytes leftover after parsing attributes in process `syz.3.17845'. [ 1770.350625][T29118] netlink: 'syz.0.17850': attribute type 7 has an invalid length. [ 1770.582287][T29131] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1771.105077][T29165] Cannot find del_set index 4 as target [ 1771.134209][T29170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17868'. [ 1771.226499][T14818] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1771.419790][T14818] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.434406][T14818] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1771.486707][T14818] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1771.514924][T14818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.547182][T14818] usb 7-1: Product: syz [ 1771.551422][T14818] usb 7-1: Manufacturer: syz [ 1771.594066][T14818] usb 7-1: SerialNumber: syz [ 1771.889230][T14818] usb 7-1: 0:2 : does not exist [ 1771.910448][T14818] usb 7-1: unit 3 not found! [ 1771.915109][T14818] usb 7-1: unit 64 not found! [ 1771.958351][T29212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1771.972479][T14818] usb 7-1: 1:2 : does not exist [ 1771.974532][T29213] usb usb1: usbfs: process 29213 (syz.0.17877) did not claim interface 0 before use [ 1771.988331][T29214] loop2: detected capacity change from 0 to 8 [ 1772.030022][T14818] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 1772.071851][T29214] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1772.081481][T14818] usb 7-1: USB disconnect, device number 10 [ 1773.504038][T29299] netlink: 68 bytes leftover after parsing attributes in process `syz.3.17900'. [ 1773.516982][T29299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17900'. [ 1773.692481][T29306] usb usb8: usbfs: process 29306 (syz.2.17904) did not claim interface 0 before use [ 1774.157382][T29335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17913'. [ 1774.836388][T29370] netlink: 'syz.3.17926': attribute type 12 has an invalid length. [ 1775.519462][T29408] loop8: detected capacity change from 0 to 1024 [ 1775.583715][T29408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1775.719431][T21179] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1776.758073][ T30] audit: type=1326 audit(2000000841.210:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.7.17961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250239c799 code=0x7ffc0000 [ 1776.845211][ T30] audit: type=1326 audit(2000000841.220:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.7.17961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f250239c799 code=0x7ffc0000 [ 1776.943610][ T30] audit: type=1326 audit(2000000841.220:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.7.17961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250239c799 code=0x7ffc0000 [ 1777.040455][T29497] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1777.055781][ T30] audit: type=1326 audit(2000000841.220:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.7.17961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250239c799 code=0x7ffc0000 [ 1777.269914][T29511] loop0: detected capacity change from 0 to 64 [ 1777.318420][T29511] hfs: unable to locate alternate MDB [ 1777.323832][T29511] hfs: continuing without an alternate MDB [ 1777.448460][ T30] audit: type=1800 audit(2000000841.865:766): pid=29511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17971" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 1777.484279][T29510] bond4: entered allmulticast mode [ 1777.528247][T29510] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1777.633316][ T1106] [ 1777.635691][ T1106] ====================================================== [ 1777.642707][ T1106] WARNING: possible circular locking dependency detected [ 1777.649730][ T1106] syzkaller #0 Tainted: G L [ 1777.655710][ T1106] ------------------------------------------------------ [ 1777.662723][ T1106] kworker/u8:9/1106 is trying to acquire lock: [ 1777.668875][ T1106] ffff888057aa3b78 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 1777.679723][ T1106] [ 1777.679723][ T1106] but task is already holding lock: [ 1777.687087][ T1106] ffff888031cc60b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1777.696487][ T1106] [ 1777.696487][ T1106] which lock already depends on the new lock. [ 1777.696487][ T1106] [ 1777.706903][ T1106] [ 1777.706903][ T1106] the existing dependency chain (in reverse order) is: [ 1777.715944][ T1106] [ 1777.715944][ T1106] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 1777.723906][ T1106] __mutex_lock+0x1a2/0x1b90 [ 1777.729048][ T1106] hfs_find_init+0x273/0x330 [ 1777.734199][ T1106] hfs_ext_read_extent+0x19d/0x9d0 [ 1777.739862][ T1106] hfs_get_block+0x576/0x830 [ 1777.744992][ T1106] block_read_full_folio+0x36c/0x8e0 [ 1777.751263][ T1106] filemap_read_folio+0xfc/0x3b0 [ 1777.756736][ T1106] do_read_cache_folio+0x2d7/0x6b0 [ 1777.762384][ T1106] read_cache_page+0x5b/0x1b0 [ 1777.767592][ T1106] __hfs_bnode_create+0x718/0x9a0 [ 1777.773160][ T1106] hfs_bnode_find+0x2d5/0xd30 [ 1777.778357][ T1106] hfs_brec_find+0x39d/0x620 [ 1777.783489][ T1106] hfs_brec_read+0x26/0x120 [ 1777.788531][ T1106] hfs_cat_find_brec+0xdc/0x2a0 [ 1777.793909][ T1106] hfs_fill_super+0x58d/0x7e0 [ 1777.799214][ T1106] get_tree_bdev_flags+0x38c/0x620 [ 1777.804865][ T1106] vfs_get_tree+0x92/0x320 [ 1777.809807][ T1106] path_mount+0x7d0/0x23d0 [ 1777.814746][ T1106] __x64_sys_mount+0x293/0x310 [ 1777.820033][ T1106] do_syscall_64+0x106/0xf80 [ 1777.825146][ T1106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.831566][ T1106] [ 1777.831566][ T1106] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 1777.840796][ T1106] __lock_acquire+0x14b8/0x2630 [ 1777.846198][ T1106] lock_acquire+0x1cf/0x380 [ 1777.851263][ T1106] __mutex_lock+0x1a2/0x1b90 [ 1777.856393][ T1106] hfs_extend_file+0xa6/0xcf0 [ 1777.861599][ T1106] hfs_bmap_reserve+0x2ab/0x3a0 [ 1777.866973][ T1106] __hfs_ext_write_extent+0x3c4/0x510 [ 1777.872876][ T1106] hfs_ext_write_extent+0x1b7/0x200 [ 1777.878609][ T1106] hfs_write_inode+0xce/0xab0 [ 1777.883821][ T1106] __writeback_single_inode+0xd00/0x13c0 [ 1777.890076][ T1106] writeback_sb_inodes+0x766/0x1c70 [ 1777.895810][ T1106] wb_writeback+0x1c0/0xbe0 [ 1777.900847][ T1106] wb_workfn+0x142/0xc00 [ 1777.905624][ T1106] process_one_work+0xa23/0x19a0 [ 1777.911085][ T1106] worker_thread+0x5ef/0xe50 [ 1777.916195][ T1106] kthread+0x370/0x450 [ 1777.920787][ T1106] ret_from_fork+0x754/0xd80 [ 1777.925899][ T1106] ret_from_fork_asm+0x1a/0x30 [ 1777.931627][ T1106] [ 1777.931627][ T1106] other info that might help us debug this: [ 1777.931627][ T1106] [ 1777.941849][ T1106] Possible unsafe locking scenario: [ 1777.941849][ T1106] [ 1777.949288][ T1106] CPU0 CPU1 [ 1777.954644][ T1106] ---- ---- [ 1777.960004][ T1106] lock(&tree->tree_lock/1); [ 1777.964698][ T1106] lock(&HFS_I(tree->inode)->extents_lock); [ 1777.973203][ T1106] lock(&tree->tree_lock/1); [ 1777.980433][ T1106] lock(&HFS_I(tree->inode)->extents_lock); [ 1777.986420][ T1106] [ 1777.986420][ T1106] *** DEADLOCK *** [ 1777.986420][ T1106] [ 1777.994556][ T1106] 3 locks held by kworker/u8:9/1106: [ 1777.999835][ T1106] #0: ffff8880202bf148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1778.010582][ T1106] #1: ffffc90004d0fd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1778.022461][ T1106] #2: ffff888031cc60b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1778.032280][ T1106] [ 1778.032280][ T1106] stack backtrace: [ 1778.038165][ T1106] CPU: 1 UID: 0 PID: 1106 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1778.038213][ T1106] Tainted: [L]=SOFTLOCKUP [ 1778.038230][ T1106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1778.038256][ T1106] Workqueue: writeback wb_workfn (flush-7:0) [ 1778.038308][ T1106] Call Trace: [ 1778.038322][ T1106] [ 1778.038336][ T1106] dump_stack_lvl+0x100/0x190 [ 1778.038387][ T1106] print_circular_bug.cold+0x178/0x1c7 [ 1778.038444][ T1106] check_noncircular+0x146/0x160 [ 1778.038492][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.038541][ T1106] __lock_acquire+0x14b8/0x2630 [ 1778.038598][ T1106] ? __pfx_stack_trace_save+0x10/0x10 [ 1778.038645][ T1106] lock_acquire+0x1cf/0x380 [ 1778.038695][ T1106] ? hfs_extend_file+0xa6/0xcf0 [ 1778.038735][ T1106] ? __pfx___might_resched+0x10/0x10 [ 1778.038770][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.038811][ T1106] ? add_lock_to_list+0x99/0x110 [ 1778.038856][ T1106] __mutex_lock+0x1a2/0x1b90 [ 1778.038891][ T1106] ? hfs_extend_file+0xa6/0xcf0 [ 1778.038930][ T1106] ? hfs_extend_file+0xa6/0xcf0 [ 1778.038968][ T1106] ? hfs_find_init+0xb3/0x330 [ 1778.039016][ T1106] ? hfs_ext_write_extent+0x192/0x200 [ 1778.039056][ T1106] ? __pfx___mutex_lock+0x10/0x10 [ 1778.039089][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.039130][ T1106] ? lock_acquire+0x1cf/0x380 [ 1778.039180][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.039230][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.039270][ T1106] ? trace_contention_end+0x140/0x180 [ 1778.039302][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.039342][ T1106] ? __mutex_lock+0x26a/0x1b90 [ 1778.039380][ T1106] ? hfs_extend_file+0xa6/0xcf0 [ 1778.039416][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.039457][ T1106] hfs_extend_file+0xa6/0xcf0 [ 1778.039497][ T1106] ? __pfx_hfs_extend_file+0x10/0x10 [ 1778.039534][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.039582][ T1106] hfs_bmap_reserve+0x2ab/0x3a0 [ 1778.039621][ T1106] __hfs_ext_write_extent+0x3c4/0x510 [ 1778.039658][ T1106] ? hfs_find_init+0x273/0x330 [ 1778.039705][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.039749][ T1106] hfs_ext_write_extent+0x1b7/0x200 [ 1778.039788][ T1106] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1778.039831][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.039871][ T1106] ? mpage_writepages+0x177/0x1e0 [ 1778.039919][ T1106] ? __pfx_mpage_writepages+0x10/0x10 [ 1778.039968][ T1106] hfs_write_inode+0xce/0xab0 [ 1778.040010][ T1106] ? __pfx_hfs_write_inode+0x10/0x10 [ 1778.040051][ T1106] ? __lock_acquire+0x4a5/0x2630 [ 1778.040115][ T1106] ? __writeback_single_inode+0x454/0x13c0 [ 1778.040160][ T1106] ? __writeback_single_inode+0x454/0x13c0 [ 1778.040203][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.040254][ T1106] __writeback_single_inode+0xd00/0x13c0 [ 1778.040302][ T1106] ? __pfx___writeback_single_inode+0x10/0x10 [ 1778.040346][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.040386][ T1106] ? do_raw_spin_unlock+0x145/0x1e0 [ 1778.040422][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.040465][ T1106] writeback_sb_inodes+0x766/0x1c70 [ 1778.040520][ T1106] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1778.040594][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.040636][ T1106] ? rcu_is_watching+0x12/0xc0 [ 1778.040673][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.040714][ T1106] ? queue_io+0x287/0x550 [ 1778.040750][ T1106] wb_writeback+0x1c0/0xbe0 [ 1778.040792][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.040839][ T1106] ? __pfx_wb_writeback+0x10/0x10 [ 1778.040889][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.040937][ T1106] ? mark_held_locks+0x40/0x70 [ 1778.040998][ T1106] ? _raw_spin_unlock_irq+0x23/0x50 [ 1778.041060][ T1106] wb_workfn+0x142/0xc00 [ 1778.041120][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.041168][ T1106] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1778.041238][ T1106] ? __pfx_wb_workfn+0x10/0x10 [ 1778.041290][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.041341][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.041391][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.041439][ T1106] ? rcu_is_watching+0x12/0xc0 [ 1778.041487][ T1106] process_one_work+0xa23/0x19a0 [ 1778.041538][ T1106] ? __pfx_process_one_work+0x10/0x10 [ 1778.041575][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.041633][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.041684][ T1106] worker_thread+0x5ef/0xe50 [ 1778.041733][ T1106] ? kthread+0x13a/0x450 [ 1778.041764][ T1106] ? __pfx_worker_thread+0x10/0x10 [ 1778.041802][ T1106] kthread+0x370/0x450 [ 1778.041834][ T1106] ? __pfx_kthread+0x10/0x10 [ 1778.041870][ T1106] ret_from_fork+0x754/0xd80 [ 1778.041906][ T1106] ? __pfx_ret_from_fork+0x10/0x10 [ 1778.041944][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.041991][ T1106] ? __switch_to+0x7b4/0x1120 [ 1778.042037][ T1106] ? __pfx_kthread+0x10/0x10 [ 1778.042073][ T1106] ret_from_fork_asm+0x1a/0x30 [ 1778.042131][ T1106] [ 1778.562970][ T1106] hfs: new node 0 already hashed? [ 1778.568692][ T1106] ------------[ cut here ]------------ [ 1778.574176][ T1106] 1 [ 1778.574191][ T1106] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#1: kworker/u8:9/1106 [ 1778.586994][ T1106] Modules linked in: [ 1778.592090][ T1106] CPU: 1 UID: 0 PID: 1106 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1778.603644][ T1106] Tainted: [L]=SOFTLOCKUP [ 1778.607973][ T1106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1778.618591][ T1106] Workqueue: writeback wb_workfn (flush-7:0) [ 1778.625188][ T1106] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1778.631288][ T1106] Code: 1d f8 6a 0a e9 5f 9c d0 01 e8 23 6e e1 00 4c 89 f7 e8 0b f8 6a 0a e8 16 6e e1 00 89 ee 48 c7 c7 80 7d d1 8b e8 f8 e2 fa ff 90 <0f> 0b 90 e9 61 9f d0 01 e8 fa 6d e1 00 e8 65 fb 4d 00 e9 bd a1 d0 [ 1778.651221][ T1106] RSP: 0018:ffffc90004d0f030 EFLAGS: 00010282 [ 1778.657359][ T1106] RAX: 000000000000001f RBX: ffff88802a6d8800 RCX: 0000000000000000 [ 1778.665412][ T1106] RDX: 000000000000001f RSI: ffffffff81e7ab29 RDI: fffff520009a1df7 [ 1778.673400][ T1106] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1778.681431][ T1106] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1778.689453][ T1106] R13: ffff888031cc6000 R14: ffff888031cc60e0 R15: 0000000000000000 [ 1778.697518][ T1106] FS: 0000000000000000(0000) GS:ffff88812443c000(0000) knlGS:0000000000000000 [ 1778.706473][ T1106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1778.713104][ T1106] CR2: 0000001b32f0aff8 CR3: 000000008c580000 CR4: 0000000000350ef0 [ 1778.721312][ T1106] Call Trace: [ 1778.724605][ T1106] [ 1778.727640][ T1106] ? _raw_spin_unlock+0x28/0x50 [ 1778.732594][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.738262][ T1106] ? hfs_bnode_put+0x208/0x480 [ 1778.743065][ T1106] hfs_bmap_alloc+0x5a7/0x6b0 [ 1778.747754][ T1106] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1778.752999][ T1106] ? __asan_memcpy+0x3c/0x60 [ 1778.757648][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.763325][ T1106] ? hfs_bnode_read.part.0+0x298/0x330 [ 1778.768855][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.774549][ T1106] ? folio_mark_accessed+0xf3/0x1040 [ 1778.779875][ T1106] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1778.785665][ T1106] ? rcu_is_watching+0x12/0xc0 [ 1778.790476][ T1106] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1778.796926][ T1106] ? do_raw_spin_unlock+0x145/0x1e0 [ 1778.802169][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.807847][ T1106] ? _raw_spin_unlock+0x28/0x50 [ 1778.812744][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.818433][ T1106] ? hfs_bnode_put+0x208/0x480 [ 1778.823242][ T1106] hfs_brec_insert+0x8ba/0xc20 [ 1778.828124][ T1106] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1778.833620][ T1106] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1778.838876][ T1106] __hfs_ext_write_extent+0x3ef/0x510 [ 1778.844304][ T1106] ? hfs_find_init+0x273/0x330 [ 1778.849143][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.854843][ T1106] hfs_ext_write_extent+0x1b7/0x200 [ 1778.860129][ T1106] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1778.865925][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.871604][ T1106] ? mpage_writepages+0x177/0x1e0 [ 1778.876684][ T1106] ? __pfx_mpage_writepages+0x10/0x10 [ 1778.882157][ T1106] hfs_write_inode+0xce/0xab0 [ 1778.886871][ T1106] ? __pfx_hfs_write_inode+0x10/0x10 [ 1778.892211][ T1106] ? __lock_acquire+0x4a5/0x2630 [ 1778.897217][ T1106] ? __writeback_single_inode+0x454/0x13c0 [ 1778.903070][ T1106] ? __writeback_single_inode+0x454/0x13c0 [ 1778.908931][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.914612][ T1106] __writeback_single_inode+0xd00/0x13c0 [ 1778.920326][ T1106] ? __pfx___writeback_single_inode+0x10/0x10 [ 1778.926443][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.932153][ T1106] ? do_raw_spin_unlock+0x145/0x1e0 [ 1778.937401][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.943297][ T1106] writeback_sb_inodes+0x766/0x1c70 [ 1778.948552][ T1106] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1778.954722][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.960416][ T1106] ? rcu_is_watching+0x12/0xc0 [ 1778.965438][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.971127][ T1106] ? queue_io+0x287/0x550 [ 1778.975560][ T1106] wb_writeback+0x1c0/0xbe0 [ 1778.980111][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.985837][ T1106] ? __pfx_wb_writeback+0x10/0x10 [ 1778.990917][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1778.996617][ T1106] ? mark_held_locks+0x40/0x70 [ 1779.001453][ T1106] ? _raw_spin_unlock_irq+0x23/0x50 [ 1779.006740][ T1106] wb_workfn+0x142/0xc00 [ 1779.011042][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.016714][ T1106] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1779.022593][ T1106] ? __pfx_wb_workfn+0x10/0x10 [ 1779.027435][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.033124][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.038864][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.044547][ T1106] ? rcu_is_watching+0x12/0xc0 [ 1779.049561][ T1106] process_one_work+0xa23/0x19a0 [ 1779.054554][ T1106] ? __pfx_process_one_work+0x10/0x10 [ 1779.060120][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.065824][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.071543][ T1106] worker_thread+0x5ef/0xe50 [ 1779.076174][ T1106] ? kthread+0x13a/0x450 [ 1779.080437][ T1106] ? __pfx_worker_thread+0x10/0x10 [ 1779.085610][ T1106] kthread+0x370/0x450 [ 1779.089704][ T1106] ? __pfx_kthread+0x10/0x10 [ 1779.094393][ T1106] ret_from_fork+0x754/0xd80 [ 1779.099018][ T1106] ? __pfx_ret_from_fork+0x10/0x10 [ 1779.104187][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.109864][ T1106] ? __switch_to+0x7b4/0x1120 [ 1779.114623][ T1106] ? __pfx_kthread+0x10/0x10 [ 1779.119251][ T1106] ret_from_fork_asm+0x1a/0x30 [ 1779.124112][ T1106] [ 1779.127152][ T1106] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1779.134447][ T1106] CPU: 1 UID: 0 PID: 1106 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1779.145486][ T1106] Tainted: [L]=SOFTLOCKUP [ 1779.149800][ T1106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1779.159874][ T1106] Workqueue: writeback wb_workfn (flush-7:0) [ 1779.165912][ T1106] Call Trace: [ 1779.169192][ T1106] [ 1779.172124][ T1106] dump_stack_lvl+0x100/0x190 [ 1779.176828][ T1106] vpanic+0x552/0x970 [ 1779.180821][ T1106] ? __pfx_vpanic+0x10/0x10 [ 1779.185341][ T1106] panic+0xd1/0xe0 [ 1779.189069][ T1106] ? __pfx_panic+0x10/0x10 [ 1779.193502][ T1106] ? check_panic_on_warn+0x1f/0x90 [ 1779.198643][ T1106] check_panic_on_warn.cold+0x19/0x34 [ 1779.204032][ T1106] ? hfs_bnode_create.cold+0x41/0x49 [ 1779.209325][ T1106] __warn.cold+0x191/0x348 [ 1779.213754][ T1106] __report_bug+0x296/0x3d0 [ 1779.218284][ T1106] ? hfs_bnode_create.cold+0x41/0x49 [ 1779.223582][ T1106] ? __pfx___report_bug+0x10/0x10 [ 1779.228630][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.234274][ T1106] ? preempt_schedule_thunk+0x16/0x30 [ 1779.239672][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.245317][ T1106] ? preempt_count_add+0x76/0x150 [ 1779.250353][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.255998][ T1106] ? __wake_up_klogd+0xe2/0x140 [ 1779.260853][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.266496][ T1106] ? vprintk_emit+0x1c9/0x6b0 [ 1779.271194][ T1106] ? __pfx_vprintk_emit+0x10/0x10 [ 1779.276244][ T1106] ? hfs_bnode_create.cold+0x41/0x49 [ 1779.281542][ T1106] report_bug+0xb2/0x220 [ 1779.285815][ T1106] ? hfs_bnode_create.cold+0x41/0x49 [ 1779.291111][ T1106] handle_bug+0x16a/0x2a0 [ 1779.295453][ T1106] exc_invalid_op+0x17/0x50 [ 1779.299973][ T1106] asm_exc_invalid_op+0x1a/0x20 [ 1779.304828][ T1106] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1779.310733][ T1106] Code: 1d f8 6a 0a e9 5f 9c d0 01 e8 23 6e e1 00 4c 89 f7 e8 0b f8 6a 0a e8 16 6e e1 00 89 ee 48 c7 c7 80 7d d1 8b e8 f8 e2 fa ff 90 <0f> 0b 90 e9 61 9f d0 01 e8 fa 6d e1 00 e8 65 fb 4d 00 e9 bd a1 d0 [ 1779.330347][ T1106] RSP: 0018:ffffc90004d0f030 EFLAGS: 00010282 [ 1779.336424][ T1106] RAX: 000000000000001f RBX: ffff88802a6d8800 RCX: 0000000000000000 [ 1779.344392][ T1106] RDX: 000000000000001f RSI: ffffffff81e7ab29 RDI: fffff520009a1df7 [ 1779.352364][ T1106] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1779.360335][ T1106] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1779.368304][ T1106] R13: ffff888031cc6000 R14: ffff888031cc60e0 R15: 0000000000000000 [ 1779.376287][ T1106] ? vprintk_emit+0x1c9/0x6b0 [ 1779.380989][ T1106] ? _raw_spin_unlock+0x28/0x50 [ 1779.385868][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.391518][ T1106] ? hfs_bnode_put+0x208/0x480 [ 1779.396295][ T1106] hfs_bmap_alloc+0x5a7/0x6b0 [ 1779.400985][ T1106] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1779.406189][ T1106] ? __asan_memcpy+0x3c/0x60 [ 1779.410796][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.416441][ T1106] ? hfs_bnode_read.part.0+0x298/0x330 [ 1779.421929][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.427575][ T1106] ? folio_mark_accessed+0xf3/0x1040 [ 1779.432886][ T1106] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1779.438620][ T1106] ? rcu_is_watching+0x12/0xc0 [ 1779.443400][ T1106] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1779.449911][ T1106] ? do_raw_spin_unlock+0x145/0x1e0 [ 1779.455123][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.460770][ T1106] ? _raw_spin_unlock+0x28/0x50 [ 1779.465641][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.471285][ T1106] ? hfs_bnode_put+0x208/0x480 [ 1779.476058][ T1106] hfs_brec_insert+0x8ba/0xc20 [ 1779.480837][ T1106] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1779.486126][ T1106] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1779.491165][ T1106] __hfs_ext_write_extent+0x3ef/0x510 [ 1779.496559][ T1106] ? hfs_find_init+0x273/0x330 [ 1779.501351][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.507005][ T1106] hfs_ext_write_extent+0x1b7/0x200 [ 1779.512219][ T1106] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1779.518049][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.523696][ T1106] ? mpage_writepages+0x177/0x1e0 [ 1779.528745][ T1106] ? __pfx_mpage_writepages+0x10/0x10 [ 1779.534140][ T1106] hfs_write_inode+0xce/0xab0 [ 1779.538834][ T1106] ? __pfx_hfs_write_inode+0x10/0x10 [ 1779.544136][ T1106] ? __lock_acquire+0x4a5/0x2630 [ 1779.549144][ T1106] ? __writeback_single_inode+0x454/0x13c0 [ 1779.554969][ T1106] ? __writeback_single_inode+0x454/0x13c0 [ 1779.560805][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.566460][ T1106] __writeback_single_inode+0xd00/0x13c0 [ 1779.572121][ T1106] ? __pfx___writeback_single_inode+0x10/0x10 [ 1779.578204][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.583853][ T1106] ? do_raw_spin_unlock+0x145/0x1e0 [ 1779.589065][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.594713][ T1106] writeback_sb_inodes+0x766/0x1c70 [ 1779.599946][ T1106] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1779.605632][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.611281][ T1106] ? rcu_is_watching+0x12/0xc0 [ 1779.616055][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.621701][ T1106] ? queue_io+0x287/0x550 [ 1779.626044][ T1106] wb_writeback+0x1c0/0xbe0 [ 1779.630569][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.636224][ T1106] ? __pfx_wb_writeback+0x10/0x10 [ 1779.641277][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.646920][ T1106] ? mark_held_locks+0x40/0x70 [ 1779.651708][ T1106] ? _raw_spin_unlock_irq+0x23/0x50 [ 1779.656932][ T1106] wb_workfn+0x142/0xc00 [ 1779.661195][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.666844][ T1106] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1779.672677][ T1106] ? __pfx_wb_workfn+0x10/0x10 [ 1779.677460][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.683126][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.688773][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.694423][ T1106] ? rcu_is_watching+0x12/0xc0 [ 1779.699203][ T1106] process_one_work+0xa23/0x19a0 [ 1779.704165][ T1106] ? __pfx_process_one_work+0x10/0x10 [ 1779.709543][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.715200][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.720855][ T1106] worker_thread+0x5ef/0xe50 [ 1779.725464][ T1106] ? kthread+0x13a/0x450 [ 1779.729709][ T1106] ? __pfx_worker_thread+0x10/0x10 [ 1779.734823][ T1106] kthread+0x370/0x450 [ 1779.738893][ T1106] ? __pfx_kthread+0x10/0x10 [ 1779.743489][ T1106] ret_from_fork+0x754/0xd80 [ 1779.748092][ T1106] ? __pfx_ret_from_fork+0x10/0x10 [ 1779.753214][ T1106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1779.758870][ T1106] ? __switch_to+0x7b4/0x1120 [ 1779.763561][ T1106] ? __pfx_kthread+0x10/0x10 [ 1779.768154][ T1106] ret_from_fork_asm+0x1a/0x30 [ 1779.772944][ T1106] [ 1779.776056][ T1106] Kernel Offset: disabled [ 1779.780371][ T1106] Rebooting in 86400 seconds..