last executing test programs: 2.060053879s ago: executing program 0 (id=1873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) 1.916993366s ago: executing program 0 (id=1875): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, 0x0, 0x0, 0x12) 1.508151136s ago: executing program 0 (id=1883): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in6=@mcast1, 0x4e24, 0xfffb, 0x4e22, 0xfffd, 0xa, 0x80, 0xc0, 0x3c}, {0x34, 0x7fff, 0x1, 0x200000000000009, 0x5, 0xd, 0x0, 0x12000000000}, {0xf, 0xa0f, 0xe, 0x1}, 0x83b, 0x6e6bb7, 0x1, 0x1, 0x1, 0x6f23e161ad6863d4}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@broadcast, 0x3504, 0x4, 0x3, 0x74, 0x3, 0x7fffffff, 0x755f}}, 0xe4) 1.246676289s ago: executing program 0 (id=1887): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000029000000020000002e71961e4f3e55e6276a37a7fb2e49a2b1"], 0x28}}], 0x1, 0x4000000) 1.246359589s ago: executing program 2 (id=1888): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000000c0)) 1.235698659s ago: executing program 3 (id=1889): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e24, 0xc, @mcast2, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x2, 0x1, 0x0, [@private2]}}}], 0x28}, 0x44040) 1.182342912s ago: executing program 1 (id=1890): r0 = socket$inet_sctp(0x2, 0x3, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x50, 0x0, &(0x7f0000000200)) 1.054538409s ago: executing program 0 (id=1892): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) 1.02514172s ago: executing program 2 (id=1893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) 1.004078021s ago: executing program 1 (id=1894): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980dc58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952fd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2acc5014f74e420988486de2ace27ce59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba194fc70973b39525123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49963a195e2fdffe6bdce6fa78ab2ded1ff74f9e54f1b82da2d444f9727be708710b90a872282f4dce55468a681e"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.003352731s ago: executing program 3 (id=1895): r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x44, 0x6, 0xc28, 0x98, 0x168, 0x228, 0x228, 0x228, 0xb90, 0xb90, 0xb90, 0xb90, 0xb90, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x168}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x1}}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'veth0\x00', 'bond0\x00'}, 0x0, 0x878, 0x8a0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[{}, {[], [{0x0, 0xffff}]}, {}, {}, {[], [{}, {}, {}, {}, {}, {}, {0xffffffff}]}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc88) 950.239654ms ago: executing program 4 (id=1896): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 850.467979ms ago: executing program 0 (id=1897): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 845.291249ms ago: executing program 4 (id=1898): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2000) 718.206265ms ago: executing program 2 (id=1899): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x7fffffff, 0x101, 0x534, 0x2}, &(0x7f0000000180)=0x14) 717.937465ms ago: executing program 1 (id=1900): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) 703.833205ms ago: executing program 3 (id=1901): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r0, 0x127e, &(0x7f0000000440)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) 657.728688ms ago: executing program 4 (id=1902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf0}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x46}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x84000) 546.151174ms ago: executing program 2 (id=1903): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d6d6163696e7569742c71756965742c636f6465706167653d6b6f69382d752c6469725f756d61736b3d30303030303030303030303030303030303030323030312c63726561746f723decf3ae122c00f59694ea734b51705be7d8a28b5fea24dca5cb09674f9f810f38904869467e127b02ae233768"], 0x1, 0x313, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) 545.584113ms ago: executing program 4 (id=1904): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x10009, 0x0, 0x4}}) 490.239976ms ago: executing program 1 (id=1905): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) 477.710897ms ago: executing program 3 (id=1906): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0xffffffffffffff71, 0x0}}, 0x10) 367.287292ms ago: executing program 1 (id=1907): r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) sendfile(r0, r0, 0x0, 0xf1) 360.996272ms ago: executing program 4 (id=1908): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030373737372c6469725f756d61736b3d30303030303030303030303030303030303030303030302c696f636861727365743d69736f383835392d362c636f6465706167653d63703835352c63726561746f723d4ddd71752c00eeabc72a9832436950c6116498dda8be60a94746ea68766f63d1d63944fbda2a9337439b37b6f2a694ba98f40070d09c3890bd28a2018f1adfe1e0a630020a9cac1a43800a70a9328ddb2a2f2e207da7cd3caf243b39eaff4966b7aa97cb6cc7d2cfc59e7a976de0a00d23c7ffaaa056cc4f8bc7b4c0f9a21db642b3e832e30a90ba1b9e7933b77c60f6a1b9ca9128f0a2d0e23373c9d15c79865bae97ddd82b98001b6aa9c5390e4deaf5f0ee492c6842b1c08486e479a889491459a257e9d4083634dac6cd58520f72e6c2f11bbd5b03655bb1863b16f3", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$eJzs3U1rE08cB/Dv7KZN+m/pf7UVwYNINWAvovUiXiIlL8KTqE0KxSWitviAYBVPIvbu3aNXX4N4UQTP9eRJPHiqBxmZh2SfN6lmd1P9fsCy2dmZ/e3OzlPALIjon7Xa3n11/ov6JwAXLvDsIuAAaAA1AEdwtLHV29zY9LudvIJcHK+bXAImp0gcs9brpmVtwOawPPWphrnwPiqGlPLS56qDoMrp1i/d6M4Tuieo29apExsVxZfl8f6zfJsBsF1EMBMlv6bEHvZwD/OlhUNERBNJmPHdseP8nJ2/Ow7QtIOJSpu48f937VUdQOFkbmpo/NerLClUvf+vk4L1nl7CqXSnv0pMK+t17PNU7PM0zNMTmV2KYatKHYszs77hd8+s3fQ7Dp6gZYUOW9R/O/bxtCLR1hNFL6WsTXMMSpvJPESkzyhn9TVMqWtYMfHfBRCJfyH3jAUQ78QHcUV4eInOYP5Xk0JVk64pL1ZTJv6z2SXqq/TUUbDdRqvVciKHHNInOWbPYA25ygbcrDNO2zIjXxB4w+LUuQ7HcpmrOzck10JqrhW9vQwnI9diJJe6mvUN/232qUohXojLYglf8Qbt0PzfUfE1kWyZoYc+aDWiaYYCfcdV64zWbEitaXsiPXJsfdp9aPYnm8vgLiYbrPUjv0+jfXiO67iA+Tv3H9xwfb97W21c89XjqjcGe27N2Q2/O/UUCCdNyga2gz11SC1xcH9QKjOw5bEWqPqPlCTVsHrf+3tUKxtW4KM/jUf1A4XeutkRrmJ/G/2uazwFtt+P50HqTxsiST+llCU2oh17Z+JJ1XRLVK6g0kc7PmWqQwebqlJh1n/BeqVmJnvqj5c6Tx/xiwBbolRz7MEKLsgrzYwcwH85K7i0YjNXcMk1V2LNqNdcJ08Dp0Y/o2fj/EuINj7iKr//JyIiIiIiIiIiIiIiIiIiIiIiIiI6aMr4zzBVXyMRERERERERERERERERERERERERERER0UG32oD53Wv03/+L0d7/G38Vi2t+Enws7//d6YHv/yUq3q8AAAD///B/c8c=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 292.562696ms ago: executing program 3 (id=1909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) 286.118066ms ago: executing program 2 (id=1910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0x10d}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) 156.380072ms ago: executing program 1 (id=1911): r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000180)={0x1}) 63.902467ms ago: executing program 3 (id=1912): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7d, &(0x7f0000000000), 0x20000010) 1.01975ms ago: executing program 4 (id=1913): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) 0s ago: executing program 2 (id=1914): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}, {&(0x7f0000006d40)="53000000796631d655a92e064b578623046e932885cc8daa0cddbe9f8851e2e43374152a", 0x24}], 0x2) kernel console output (not intermixed with test programs): ta mode. [ 69.605166][ T4488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.691140][ T4280] Bluetooth: Can't get version to change to load ram patch err [ 69.701241][ T4280] Bluetooth: Loading patch file failed [ 69.701302][ T4315] usb 5-1: USB disconnect, device number 2 [ 69.706750][ T4280] ath3k: probe of 4-1:0.0 failed with error -71 [ 69.724256][ T4315] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 69.744092][ T4469] (syz.0.57,4469,1):ocfs2_reflink_ioctl:4426 ERROR: status = -14 [ 69.761850][ T4280] usb 4-1: USB disconnect, device number 2 [ 69.771708][ T41] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 69.799699][ T41] usb 3-1: config 0 has no interface number 0 [ 69.833561][ T41] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.854000][ T41] usb 3-1: config 0 interface 110 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.867612][ T41] usb 3-1: config 0 interface 110 has no altsetting 0 [ 69.923394][ T41] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 69.934398][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.946488][ T4268] ocfs2: Unmounting device (7,0) on (node local) [ 69.954307][ T41] usb 3-1: Product: syz [ 69.958727][ T41] usb 3-1: Manufacturer: syz [ 69.974758][ T41] usb 3-1: SerialNumber: syz [ 69.993923][ T41] usb 3-1: config 0 descriptor?? [ 70.216126][ T41] cdc_subset: probe of 3-1:0.110 failed with error -22 [ 70.475320][ T4320] usb 3-1: USB disconnect, device number 2 [ 70.628971][ T4511] loop3: detected capacity change from 0 to 256 [ 71.171533][ T4530] xt_bpf: check failed: parse error [ 71.324282][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.340380][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.388129][ T4539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 71.707846][ T26] audit: type=1326 audit(1773920597.485:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3679c799 code=0x7ffc0000 [ 71.751243][ T4552] netlink: 'syz.1.97': attribute type 2 has an invalid length. [ 71.789785][ T4552] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 71.798150][ T4552] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.97'. [ 71.827381][ T26] audit: type=1326 audit(1773920597.535:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f3f3679c799 code=0x7ffc0000 [ 71.926278][ T26] audit: type=1326 audit(1773920597.535:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3679c799 code=0x7ffc0000 [ 72.049015][ T26] audit: type=1326 audit(1773920597.535:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3679c799 code=0x7ffc0000 [ 72.298766][ T4572] Cannot find del_set index 0 as target [ 72.311305][ T4566] loop4: detected capacity change from 0 to 4096 [ 72.430888][ T4566] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 72.510797][ T4566] ntfs3: loop4: Failed to load $Extend. [ 72.563066][ T4548] loop3: detected capacity change from 0 to 32768 [ 72.621101][ T26] audit: type=1800 audit(1773920598.405:7): pid=4566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.104" name=2E02 dev="loop4" ino=33 res=0 errno=0 [ 72.697276][ T4548] XFS (loop3): Mounting V5 Filesystem [ 72.753335][ T4589] capability: warning: `syz.1.115' uses deprecated v2 capabilities in a way that may be insecure [ 73.044003][ T4548] XFS (loop3): Starting recovery (logdev: internal) [ 73.104767][ T4606] tmpfs: Bad value for 'mpol' [ 73.166922][ T4548] XFS (loop3): Ending recovery (logdev: internal) [ 73.216304][ T4610] netlink: 72 bytes leftover after parsing attributes in process `syz.2.121'. [ 73.257905][ T4610] netlink: 72 bytes leftover after parsing attributes in process `syz.2.121'. [ 73.398104][ T4279] XFS (loop3): Unmounting Filesystem [ 73.800467][ T4625] loop0: detected capacity change from 0 to 2048 [ 73.857756][ T4625] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.300740][ T4643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.308477][ T4643] IPv6: NLM_F_CREATE should be set when creating new route [ 74.316156][ T4643] IPv6: NLM_F_CREATE should be set when creating new route [ 74.363004][ T4645] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 74.789209][ T4665] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 74.856318][ T4669] loop3: detected capacity change from 0 to 1024 [ 74.862978][ T4668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 74.883522][ T4669] EXT4-fs: inline encryption not supported [ 75.019918][ T4669] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.151: lblock 2 mapped to illegal pblock 2 (length 1) [ 75.071213][ T4669] EXT4-fs (loop3): Remounting filesystem read-only [ 75.082625][ T4669] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 75.107451][ T4669] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.151: lblock 0 mapped to illegal pblock 48 (length 1) [ 75.175951][ T4669] EXT4-fs (loop3): Remounting filesystem read-only [ 75.208930][ T4669] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 75.285570][ T4669] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.151: Failed to acquire dquot type 0 [ 75.309870][ T4669] EXT4-fs (loop3): Remounting filesystem read-only [ 75.316826][ T4669] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 75.369721][ T4669] EXT4-fs (loop3): Remounting filesystem read-only [ 75.376428][ T4669] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.151: mark_inode_dirty error [ 75.425592][ T4669] EXT4-fs (loop3): Remounting filesystem read-only [ 75.450153][ T4669] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 75.484888][ T4669] EXT4-fs (loop3): 1 orphan inode deleted [ 75.500210][ T46] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.501206][ T4669] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 75.581795][ T46] EXT4-fs (loop3): Remounting filesystem read-only [ 75.615779][ T4700] syz.1.163 uses obsolete (PF_INET,SOCK_PACKET) [ 75.621537][ T46] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 75.658454][ T46] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:3: Failed to release dquot type 0 [ 75.735715][ T4669] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.151: lblock 0 mapped to illegal pblock 48 (length 1) [ 75.779630][ T46] EXT4-fs (loop3): Remounting filesystem read-only [ 75.811917][ T4669] EXT4-fs (loop3): Remounting filesystem read-only [ 75.819404][ T4669] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 75.962529][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 75.969014][ T4279] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 76.029586][ T4279] EXT4-fs (loop3): Remounting filesystem read-only [ 76.036140][ T4279] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 76.081891][ T4711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 76.098873][ T4279] EXT4-fs (loop3): Remounting filesystem read-only [ 76.117105][ T4715] tmpfs: Bad value for 'mpol' [ 76.127179][ T4279] EXT4-fs error (device loop3): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 76.164822][ T4279] EXT4-fs (loop3): Remounting filesystem read-only [ 76.349412][ T4723] loop3: detected capacity change from 0 to 2048 [ 76.444117][ T952] cfg80211: failed to load regulatory.db [ 76.499699][ T41] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.607139][ T4260] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.667162][ T4723] NILFS (loop3): device size too small [ 76.699954][ T41] usb 2-1: Using ep0 maxpacket: 32 [ 76.717085][ T41] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 76.766545][ T41] usb 2-1: config 0 has no interface number 0 [ 76.786820][ T41] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 76.809378][ T41] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 76.857574][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.908520][ T41] usb 2-1: Product: syz [ 76.929492][ T41] usb 2-1: Manufacturer: syz [ 76.949534][ T41] usb 2-1: SerialNumber: syz [ 76.968723][ T41] usb 2-1: config 0 descriptor?? [ 76.988076][ T41] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 77.015930][ T41] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 77.196818][ T41] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 77.407257][ T41] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 77.433455][ T41] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 77.443096][ T4748] loop0: detected capacity change from 0 to 16 [ 77.473425][ T41] usb 2-1: USB disconnect, device number 2 [ 77.540680][ T4748] erofs: (device loop0): mounted with root inode @ nid 36. [ 77.556754][ T41] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 77.742176][ T4734] loop4: detected capacity change from 0 to 32768 [ 78.597508][ T4779] netlink: 'syz.1.202': attribute type 1 has an invalid length. [ 78.638130][ T4781] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.825848][ T4785] loop3: detected capacity change from 0 to 512 [ 78.845680][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 78.911692][ T4785] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.979161][ T4785] EXT4-fs (loop3): orphan cleanup on readonly fs [ 78.994266][ T4785] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.207: bg 0: block 255: padding at end of block bitmap is not set [ 79.110909][ T4785] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 79.215869][ T4785] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.207: invalid indirect mapped block 1 (level 1) [ 79.251480][ T4785] EXT4-fs (loop3): 1 truncate cleaned up [ 79.257185][ T4785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.326753][ T4808] loop1: detected capacity change from 0 to 512 [ 79.425417][ T4808] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.215: bg 0: block 248: padding at end of block bitmap is not set [ 79.465546][ T4808] Quota error (device loop1): write_blk: dquota write failed [ 79.481903][ T4816] loop4: detected capacity change from 0 to 2048 [ 79.499729][ T4808] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 79.510978][ T4816] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 79.514677][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 79.529639][ T4808] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.215: Failed to acquire dquot type 1 [ 79.565432][ T4808] EXT4-fs (loop1): 1 truncate cleaned up [ 79.579085][ T4808] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 79.592668][ T4808] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.614159][ T4818] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.721201][ T4816] NILFS (loop4): error -2 truncating bmap (ino=16) [ 79.866816][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 79.888402][ T46] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 79.923588][ T46] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:3: Failed to release dquot type 1 [ 80.382523][ T4844] loop1: detected capacity change from 0 to 64 [ 80.458284][ T4848] syz.3.234 uses old SIOCAX25GETINFO [ 80.895493][ T4863] loop2: detected capacity change from 0 to 1024 [ 81.102415][ T46] hfsplus: b-tree write err: -5, ino 25 [ 81.108184][ T46] hfsplus: b-tree write err: -5, ino 4 [ 81.154132][ T4872] netlink: 'syz.4.246': attribute type 6 has an invalid length. [ 81.166477][ T46] hfsplus: b-tree write err: -5, ino 2 [ 81.811327][ T4897] device syz_tun entered promiscuous mode [ 81.845232][ T4897] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 82.078558][ T4911] netlink: 'syz.2.265': attribute type 1 has an invalid length. [ 82.181232][ T4916] loop4: detected capacity change from 0 to 64 [ 82.248150][ T4916] Trying to free block not in datazone [ 82.266515][ T4916] Trying to free block not in datazone [ 82.282131][ T4916] Trying to free block not in datazone [ 82.465780][ T4924] loop3: detected capacity change from 0 to 1024 [ 82.550964][ T4926] tipc: Trying to set illegal importance in message [ 82.693259][ T4327] hfsplus: b-tree write err: -5, ino 8 [ 82.779479][ T4932] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 82.799086][ T4934] ieee802154 phy0 wpan0: encryption failed: -90 [ 83.295622][ T4957] i2c i2c-0: Invalid block write size 34 [ 83.669783][ T41] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 83.871178][ T41] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 83.882845][ T4950] loop1: detected capacity change from 0 to 40427 [ 83.894886][ T41] usb 5-1: config 0 has no interface number 0 [ 83.912215][ T41] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 83.941131][ T4950] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 83.961493][ T41] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 83.971695][ T4950] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 83.998166][ T41] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 84.012266][ T4982] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 84.040177][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.042387][ T4950] F2FS-fs (loop1): invalid crc value [ 84.056559][ T41] usb 5-1: config 0 descriptor?? [ 84.098637][ T41] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input5 [ 84.171667][ T4950] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 84.248962][ T4991] sock: sock_timestamping_bind_phc: sock not bind to device [ 84.348363][ T41] usb 5-1: USB disconnect, device number 3 [ 84.465004][ T4950] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 84.480660][ T4950] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.139820][ T4382] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.228813][ T5028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.236643][ T5030] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.281747][ T5030] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.351148][ T4382] usb 4-1: Using ep0 maxpacket: 8 [ 85.360811][ T4382] usb 4-1: unable to get BOS descriptor set [ 85.408141][ T4382] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.449205][ T4382] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 85.453266][ T5035] loop0: detected capacity change from 0 to 512 [ 85.481305][ T4382] usb 4-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 85.496723][ T5035] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 85.517689][ T5035] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.542280][ T5035] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 85.553473][ T5042] capability: warning: `syz.4.326' uses 32-bit capabilities (legacy support in use) [ 85.568134][ T4382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.607309][ T5035] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.627798][ T4382] usb 4-1: Product: syz [ 85.657677][ T4382] usb 4-1: Manufacturer: syz [ 85.669547][ T5035] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 85.679282][ T4382] usb 4-1: SerialNumber: syz [ 85.696286][ T5035] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.324: bg 0: block 15: invalid block bitmap [ 85.723403][ T4382] usb 4-1: config 0 descriptor?? [ 85.766245][ T5035] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 85.827035][ T5035] EXT4-fs (loop0): 1 truncate cleaned up [ 85.832875][ T5035] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 85.997326][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 85.998445][ T4320] usb 4-1: USB disconnect, device number 3 [ 86.715579][ T5083] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.765224][ T5087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 86.840299][ T5087] netlink: 48 bytes leftover after parsing attributes in process `syz.1.347'. [ 87.191211][ T5094] loop3: detected capacity change from 0 to 4096 [ 87.226531][ T5094] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 87.306112][ T5094] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 87.402117][ T5082] loop4: detected capacity change from 0 to 32768 [ 87.814211][ T5114] autofs4:pid:5114:autofs_fill_super: called with bogus options [ 88.262151][ T5131] netlink: 'syz.1.369': attribute type 1 has an invalid length. [ 88.300573][ T5131] netlink: 228 bytes leftover after parsing attributes in process `syz.1.369'. [ 88.337661][ T5133] loop2: detected capacity change from 0 to 64 [ 88.926622][ T5155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.379'. [ 88.993064][ T5154] loop4: detected capacity change from 0 to 2048 [ 89.050275][ T5154] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.155833][ T5161] i2c i2c-0: Invalid block write size 252 [ 89.317308][ T5159] loop2: detected capacity change from 0 to 4096 [ 89.318157][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 89.353940][ T5159] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 89.387843][ T5159] ntfs3: loop2: ntfs_evict_inode r=6 failed, -22. [ 89.441196][ T5159] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 89.922941][ T5182] loop0: detected capacity change from 0 to 64 [ 90.010955][ T5182] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 90.048100][ T5182] hfs: filesystem is marked locked, mounting read-only. [ 90.249600][ T4320] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.335287][ T5173] loop1: detected capacity change from 0 to 32768 [ 90.441447][ T4320] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.459501][ T4320] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 90.479840][ T4320] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.482788][ T5180] loop3: detected capacity change from 0 to 32768 [ 90.489000][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.528124][ T5180] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.394 (5180) [ 90.537923][ T5173] XFS (loop1): Mounting V5 Filesystem [ 90.617464][ T5184] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.628947][ T5180] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 90.655405][ T5180] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 90.728640][ T5173] XFS (loop1): Ending clean mount [ 90.738410][ T5180] BTRFS info (device loop3): force zlib compression, level 3 [ 90.766827][ T5180] BTRFS info (device loop3): force clearing of disk cache [ 90.804221][ T5180] BTRFS info (device loop3): setting nodatasum [ 90.824433][ T5180] BTRFS info (device loop3): allowing degraded mounts [ 90.846557][ T5173] XFS (loop1): Quotacheck needed: Please wait. [ 90.904733][ T5180] BTRFS info (device loop3): enabling disk space caching [ 90.943328][ T5180] BTRFS info (device loop3): disk space caching is enabled [ 90.961660][ T5173] XFS (loop1): Quotacheck: Done. [ 91.092770][ T4320] usb 3-1: USB disconnect, device number 3 [ 91.206816][ T4276] XFS (loop1): Unmounting Filesystem [ 91.317058][ T5180] BTRFS info (device loop3): rebuilding free space tree [ 91.461985][ T5180] BTRFS info (device loop3): disabling free space tree [ 91.479424][ T5180] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 91.499755][ T5180] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 91.619094][ T5209] loop0: detected capacity change from 0 to 32768 [ 91.731525][ T5209] XFS (loop0): Mounting V5 Filesystem [ 91.819968][ T4279] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 91.940447][ T4320] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 91.979961][ T4320] XFS (loop0): Unmount and run xfs_repair [ 91.986802][ T4320] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 92.027588][ T4320] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 92.079626][ T4320] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 92.088625][ T4320] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 92.119378][ T4260] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop3 scanned by udevd (4260) [ 92.131505][ T4320] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 92.139623][ T4313] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.148797][ T4320] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 92.169715][ T4320] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 92.178614][ T4320] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.219502][ T4320] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 92.246390][ T5209] XFS (loop0): metadata I/O error in "xfs_read_agf+0x2b6/0x630" at daddr 0x1 len 1 error 74 [ 92.329406][ T5209] XFS (loop0): Error -117 reserving per-AG metadata reserve pool. [ 92.343164][ T4313] usb 2-1: Using ep0 maxpacket: 16 [ 92.352450][ T4313] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 92.382671][ T5233] loop4: detected capacity change from 0 to 32768 [ 92.389322][ T4313] usb 2-1: config 0 has no interface number 0 [ 92.413982][ T4313] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.443315][ T5209] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1c6/0x1f0 (fs/xfs/xfs_fsops.c:587). Shutting down filesystem. [ 92.491408][ T5209] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 92.498554][ T4313] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 92.511423][ T5233] JBD2: Ignoring recovery information on journal [ 92.533692][ T5209] XFS (loop0): Ending clean mount [ 92.539324][ T5209] XFS (loop0): Failed to initialize disk quotas. [ 92.548839][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 92.585714][ T4313] usb 2-1: Product: syz [ 92.607642][ T4313] usb 2-1: SerialNumber: syz [ 92.630339][ T4313] usb 2-1: config 0 descriptor?? [ 92.655988][ T5233] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 92.681735][ T4313] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 92.720253][ T4313] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input6 [ 92.839339][ T4268] XFS (loop0): Unmounting Filesystem [ 92.980580][ T4313] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.020236][ T4272] ocfs2: Unmounting device (7,4) on (node local) [ 93.150866][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 93.151354][ T5254] usb 2-1: USB disconnect, device number 3 [ 93.157989][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -19 [ 93.193457][ T5266] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 93.203736][ T4313] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.217797][ T4313] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.232280][ T5266] overlayfs: missing 'lowerdir' [ 93.250416][ T4313] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.268613][ T5254] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 93.275723][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.288461][ T4313] usb 4-1: Product: syz [ 93.297400][ T4313] usb 4-1: Manufacturer: syz [ 93.305177][ T4313] usb 4-1: SerialNumber: syz [ 93.354689][ T4313] cdc_ncm 4-1:1.0: skipping garbage [ 93.378165][ T4313] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 93.398245][ T4313] cdc_ncm 4-1:1.0: bind() failure [ 93.431360][ T4313] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 93.448542][ T4313] cdc_ncm 4-1:1.1: bind() failure [ 93.643267][ T4313] usb 4-1: USB disconnect, device number 4 [ 93.938933][ T26] audit: type=1326 audit(1773920619.715:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5284 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3679c799 code=0x7ffc0000 [ 93.981316][ T26] audit: type=1326 audit(1773920619.725:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5284 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f3f3679c799 code=0x7ffc0000 [ 94.050391][ T26] audit: type=1326 audit(1773920619.725:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5284 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3679c799 code=0x7ffc0000 [ 94.149631][ T26] audit: type=1326 audit(1773920619.725:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5284 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3679c799 code=0x7ffc0000 [ 94.164350][ T5293] loop0: detected capacity change from 0 to 256 [ 94.312769][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 94.454893][ T5293] FAT-fs (loop0): Directory bread(block 64) failed [ 94.474221][ T5293] FAT-fs (loop0): Directory bread(block 65) failed [ 94.494550][ T5293] FAT-fs (loop0): Directory bread(block 66) failed [ 94.514751][ T5293] FAT-fs (loop0): Directory bread(block 67) failed [ 94.544855][ T5293] FAT-fs (loop0): Directory bread(block 68) failed [ 94.589611][ T5293] FAT-fs (loop0): Directory bread(block 69) failed [ 94.596297][ T5293] FAT-fs (loop0): Directory bread(block 70) failed [ 94.658344][ T5314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.429'. [ 94.676348][ T5293] FAT-fs (loop0): Directory bread(block 71) failed [ 94.685345][ T5293] FAT-fs (loop0): Directory bread(block 72) failed [ 94.697287][ T5314] unsupported nlmsg_type 40 [ 94.707183][ T5293] FAT-fs (loop0): Directory bread(block 73) failed [ 95.190438][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 95.328555][ T5333] loop2: detected capacity change from 0 to 128 [ 95.417842][ T5333] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 95.457096][ T5333] FAT-fs (loop2): Filesystem has been set read-only [ 95.805865][ T5353] loop4: detected capacity change from 0 to 2048 [ 95.886618][ T5353] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.907126][ T5358] x_tables: duplicate entry at hook 3 [ 95.915527][ T5359] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.338350][ T5373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.381948][ T5373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.406541][ T5373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.437817][ T5373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.469051][ T5373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.508055][ T5373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.554287][ T5373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.579588][ T5373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.653383][ T5375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 96.668823][ T5375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.459'. [ 96.750855][ T5363] loop1: detected capacity change from 0 to 32768 [ 96.897449][ T5363] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 96.955808][ T5392] loop3: detected capacity change from 0 to 4096 [ 96.983954][ T5392] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.060522][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 97.093479][ T5392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 97.115367][ T5401] program syz.2.470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.231314][ T5404] loop0: detected capacity change from 0 to 8 [ 97.540938][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 97.618026][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 97.651241][ T5415] netlink: 'syz.4.476': attribute type 2 has an invalid length. [ 97.839865][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 97.870563][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 97.924218][ T5425] loop0: detected capacity change from 0 to 512 [ 97.967833][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 98.068739][ T5425] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.108565][ T5425] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.224354][ T5425] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 98.266372][ T5425] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 98.339836][ T5425] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.481: Failed to acquire dquot type 0 [ 98.502827][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 98.735352][ T5460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 98.818410][ T5464] loop2: detected capacity change from 0 to 64 [ 99.006608][ T5469] loop0: detected capacity change from 0 to 64 [ 99.280927][ T5480] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.379849][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 99.433574][ T5489] xt_l2tp: v2 doesn't support IP mode [ 99.645041][ T5503] loop1: detected capacity change from 0 to 256 [ 99.645816][ T5503] exfat: Deprecated parameter 'utf8' [ 99.645888][ T5503] exfat: Deprecated parameter 'namecase' [ 99.645926][ T5503] exfat: Deprecated parameter 'namecase' [ 99.647805][ T5500] device sit0 entered promiscuous mode [ 99.677719][ T5500] netlink: 'syz.0.514': attribute type 1 has an invalid length. [ 99.677741][ T5500] netlink: 1 bytes leftover after parsing attributes in process `syz.0.514'. [ 99.768618][ T5503] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 99.813545][ T5503] fuse: Bad value for 'fd' [ 100.175020][ T5519] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 100.187898][ T5521] loop0: detected capacity change from 0 to 164 [ 100.295355][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 101.247337][ T5559] cgroup: Name too long [ 101.281224][ T5558] netlink: 'syz.3.544': attribute type 3 has an invalid length. [ 101.625882][ T5569] netlink: 'syz.4.548': attribute type 30 has an invalid length. [ 101.630924][ T5549] loop0: detected capacity change from 0 to 32768 [ 101.753941][ T5543] loop2: detected capacity change from 0 to 40427 [ 101.786507][ T5543] F2FS-fs (loop2): Invalid segment count (0) [ 101.799663][ T5543] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 101.801747][ T5549] XFS (loop0): Mounting V5 Filesystem [ 101.829318][ T5543] F2FS-fs (loop2): invalid crc value [ 101.860864][ T5543] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.940927][ T5549] XFS (loop0): Ending clean mount [ 101.953466][ T5543] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 101.962999][ T5543] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 102.028378][ T5549] XFS (loop0): Quotacheck needed: Please wait. [ 102.159966][ T5549] XFS (loop0): Quotacheck: Done. [ 102.286838][ T5565] loop1: detected capacity change from 0 to 40427 [ 102.346797][ T5565] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1) [ 102.394827][ T5565] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 102.420100][ T4268] XFS (loop0): Unmounting Filesystem [ 102.431631][ T5565] F2FS-fs (loop1): invalid crc value [ 102.477304][ T5565] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 102.620484][ T5565] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.787679][ T5565] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 102.842772][ T5565] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 102.893576][ T5565] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 102.909894][ T5565] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.247173][ T5611] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 103.335787][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.364309][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.428764][ T5615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.757674][ T5674] tmpfs: Bad value for 'mpol' [ 105.048729][ T5686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.056102][ T5688] loop2: detected capacity change from 0 to 64 [ 105.147885][ T5690] netlink: 6 bytes leftover after parsing attributes in process `syz.1.600'. [ 105.194532][ T26] audit: type=1107 audit(1773920630.975:12): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 105.195969][ T5688] Trying to free block not in datazone [ 105.218702][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 105.283478][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.316865][ T5688] Trying to free block not in datazone [ 105.334718][ T5688] Trying to free block not in datazone [ 105.345797][ T5688] Trying to free block not in datazone [ 105.359889][ T5688] minix_free_block (loop2:6): bit already cleared [ 105.367157][ T5688] Trying to free block not in datazone [ 105.380491][ T5690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.399150][ T5688] Trying to free block not in datazone [ 105.614301][ T5700] loop0: detected capacity change from 0 to 4096 [ 105.695294][ T5700] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 105.748518][ T5700] ntfs3: loop0: Failed to load $Extend. [ 105.998378][ T4327] ntfs3: loop0: ntfs3_write_inode r=9 failed, -22. [ 106.028891][ T4268] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 106.037388][ T4268] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 106.158640][ T5724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 106.271596][ T26] audit: type=1326 audit(1773920632.055:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2cb9c799 code=0x7ffc0000 [ 106.360929][ T26] audit: type=1326 audit(1773920632.085:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c2cb9c799 code=0x7ffc0000 [ 106.476854][ T26] audit: type=1326 audit(1773920632.085:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2cb9c799 code=0x7ffc0000 [ 106.578420][ T5740] loop3: detected capacity change from 0 to 2048 [ 106.680931][ T5740] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 106.813498][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 107.032433][ T5760] befs: (nbd4): No write support. Marking filesystem read-only [ 107.094010][ T52] block nbd4: Attempted send on invalid socket [ 107.100892][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.129744][ T5760] befs: (nbd4): unable to read superblock [ 107.561022][ T5783] ip6gretap0: refused to change device tx_queue_len [ 107.654819][ T5789] usb usb8: usbfs: process 5789 (syz.0.647) did not claim interface 8 before use [ 107.767764][ T5793] loop1: detected capacity change from 0 to 512 [ 107.898238][ T5793] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 107.917847][ T5793] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.954286][ T5793] Quota error (device loop1): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 108.053168][ T5793] EXT4-fs warning (device loop1): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 108.114595][ T5793] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 108.160071][ T5793] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.648: bg 0: block 15: invalid block bitmap [ 108.240207][ T5793] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 108.275925][ T5793] EXT4-fs (loop1): 1 truncate cleaned up [ 108.296662][ T5793] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.456752][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 108.482386][ T5822] netlink: 48 bytes leftover after parsing attributes in process `syz.2.663'. [ 108.496962][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 108.834636][ T5839] loop0: detected capacity change from 0 to 512 [ 108.903699][ T5843] loop1: detected capacity change from 0 to 128 [ 108.946063][ T5839] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 108.960225][ T5839] EXT4-fs (loop0): orphan cleanup on readonly fs [ 108.971546][ T5839] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 109.039346][ T5839] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 109.079905][ T5839] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.671: Failed to acquire dquot type 1 [ 109.110977][ T5839] EXT4-fs (loop0): Remounting filesystem read-only [ 109.145837][ T5839] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.671: bg 0: block 40: padding at end of block bitmap is not set [ 109.203219][ T5839] EXT4-fs (loop0): Remounting filesystem read-only [ 109.229640][ T5839] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 109.256161][ T5839] EXT4-fs (loop0): Remounting filesystem read-only [ 109.286513][ T5839] EXT4-fs (loop0): 1 truncate cleaned up [ 109.327789][ T5839] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.340872][ T5855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 109.381793][ T5855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 109.456869][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 109.937980][ T5866] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 110.185150][ T5886] loop2: detected capacity change from 0 to 64 [ 110.247610][ T5890] loop3: detected capacity change from 0 to 128 [ 110.296428][ T5890] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 110.328873][ T5890] FAT-fs (loop3): Filesystem has been set read-only [ 110.429779][ T4280] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.473352][ T4279] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 110.598038][ T5899] overlayfs: missing 'lowerdir' [ 110.604085][ T5902] xt_l2tp: v2 doesn't support IP mode [ 110.639614][ T4280] usb 2-1: Using ep0 maxpacket: 16 [ 110.647630][ T4280] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.671656][ T4280] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 110.732216][ T4280] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.768504][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.808794][ T4280] usb 2-1: Product: syz [ 110.830749][ T4280] usb 2-1: Manufacturer: syz [ 110.839989][ T4280] usb 2-1: SerialNumber: syz [ 111.074136][ T4280] usb 2-1: 0:2 : does not exist [ 111.089249][ T5918] loop0: detected capacity change from 0 to 64 [ 111.102824][ T4280] usb 2-1: MIDIStreaming interface descriptor not found [ 111.158791][ T5918] Trying to free block not in datazone [ 111.180785][ T5918] Trying to free block not in datazone [ 111.218761][ T5918] Trying to free block not in datazone [ 111.240307][ T4280] usb 2-1: USB disconnect, device number 4 [ 111.553632][ T5932] xt_CONNSECMARK: invalid mode: 0 [ 111.943281][ T5949] loop4: detected capacity change from 0 to 512 [ 112.021808][ T5949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.051779][ T5949] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 112.075283][ T5949] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 112.083561][ T5949] System zones: 0-1, 15-15, 18-18, 34-34 [ 112.090534][ T5949] EXT4-fs (loop4): orphan cleanup on readonly fs [ 112.097170][ T5949] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 112.106721][ T5949] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 112.122240][ T5949] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 112.143968][ T5949] EXT4-fs (loop4): 1 truncate cleaned up [ 112.150134][ T5949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.190114][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 112.237040][ T5961] xt_ecn: cannot match TCP bits for non-tcp packets [ 112.371296][ T5965] sctp: [Deprecated]: syz.2.734 (pid 5965) Use of int in maxseg socket option. [ 112.371296][ T5965] Use struct sctp_assoc_value instead [ 112.601862][ T5975] loop4: detected capacity change from 0 to 64 [ 112.690553][ T26] audit: type=1400 audit(1773920638.465:16): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=5978 comm="syz.1.741" [ 113.125072][ T5995] IPv6: Can't replace route, no match found [ 113.437064][ T6009] loop4: detected capacity change from 0 to 64 [ 113.567883][ C1] sd 0:0:1:0: [sda] tag#6099 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 113.578418][ C1] sd 0:0:1:0: [sda] tag#6099 CDB: Read(6) 08 00 00 00 03 44 [ 113.631443][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 113.902169][ T5993] loop0: detected capacity change from 0 to 32768 [ 113.935566][ T6025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.763'. [ 113.972764][ T6025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.763'. [ 113.978736][ T5993] ea_get: invalid extended attribute [ 114.065420][ T6021] loop2: detected capacity change from 0 to 4096 [ 114.164696][ T6021] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 114.259988][ T6021] ntfs3: loop2: Failed to load $Extend. [ 115.005681][ T6058] loop4: detected capacity change from 0 to 1024 [ 115.160789][ T6058] hfsplus: request for non-existent node 33423360 in B*Tree [ 115.189491][ T6058] hfsplus: request for non-existent node 33423360 in B*Tree [ 115.654776][ T6086] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 115.708585][ T6086] netlink: 228 bytes leftover after parsing attributes in process `syz.0.793'. [ 115.792042][ T6093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.796'. [ 115.866578][ T6094] loop3: detected capacity change from 0 to 512 [ 115.985998][ T6094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.015542][ T6094] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 116.020537][ T6103] loop1: detected capacity change from 0 to 256 [ 116.075091][ T6094] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 116.093777][ T6094] System zones: 0-1, 15-15, 18-18, 34-34 [ 116.100865][ T6094] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.107556][ T6094] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 116.117003][ T6094] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 116.135007][ T6094] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 116.142961][ T6094] EXT4-fs (loop3): 1 truncate cleaned up [ 116.148905][ T6094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.338693][ T6111] loop4: detected capacity change from 0 to 64 [ 116.437630][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 116.444375][ T6111] syz.4.805: attempt to access beyond end of device [ 116.444375][ T6111] loop4: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 116.518300][ T6111] Buffer I/O error on dev loop4, logical block 117440531, async page read [ 116.557164][ T6111] syz.4.805: attempt to access beyond end of device [ 116.557164][ T6111] loop4: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 116.613482][ T6111] Buffer I/O error on dev loop4, logical block 117440531, async page read [ 116.635925][ T26] audit: type=1800 audit(1773920642.415:17): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.805" name="file2" dev="loop4" ino=6 res=0 errno=0 [ 116.932886][ T6134] ipt_REJECT: TCP_RESET invalid for non-tcp [ 117.361873][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.824'. [ 117.417548][ T6156] loop1: detected capacity change from 0 to 512 [ 117.490490][ T6156] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.073691][ T6180] loop1: detected capacity change from 0 to 256 [ 118.141527][ T6180] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x76dfe516, utbl_chksum : 0xe619d30d) [ 118.998867][ T6221] netlink: 'syz.1.858': attribute type 3 has an invalid length. [ 119.052867][ T6221] netlink: 46 bytes leftover after parsing attributes in process `syz.1.858'. [ 119.339977][ T6237] SET target dimension over the limit! [ 119.621959][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.872'. [ 119.870133][ T6257] loop2: detected capacity change from 0 to 2048 [ 119.905125][ T6257] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.044003][ T6267] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.450266][ T6277] device sit0 left promiscuous mode [ 120.522290][ T6281] loop2: detected capacity change from 0 to 1024 [ 120.587605][ T6281] hfsplus: invalid file type 0174377 for inode 21 [ 120.630217][ T6277] device syz_tun left promiscuous mode [ 120.714024][ T6277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.737021][ T6277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.748580][ T6253] loop3: detected capacity change from 0 to 40427 [ 120.772028][ T6277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.800488][ T6253] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 120.828981][ T6253] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 120.885350][ T6253] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.014803][ T6253] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 121.029737][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.065409][ T6253] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.261363][ T7] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 121.283571][ T7] usb 2-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 121.298882][ T6304] loop2: detected capacity change from 0 to 128 [ 121.310382][ T7] usb 2-1: Product: syz [ 121.326839][ T7] usb 2-1: Manufacturer: syz [ 121.348402][ T7] usb 2-1: SerialNumber: syz [ 121.388350][ T7] r8152-cfgselector 2-1: config 0 descriptor?? [ 121.851203][ T7] r8152-cfgselector 2-1: Unknown version 0x0000 [ 121.879313][ T7] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 122.199943][ T6332] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 122.647414][ T6353] cgroup: Unknown subsys name 'pcr' [ 122.992754][ T6365] loop4: detected capacity change from 0 to 128 [ 123.007849][ T6359] loop0: detected capacity change from 0 to 8192 [ 123.076112][ T6359] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.104029][ T6365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 123.120969][ T6370] netlink: 'syz.2.931': attribute type 6 has an invalid length. [ 123.156655][ T6365] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.216697][ T6370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.931'. [ 123.266344][ T6365] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.928: bg 0: bad block bitmap checksum [ 123.297758][ T6370] netlink: 'syz.2.931': attribute type 6 has an invalid length. [ 123.436714][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 123.548992][ T6387] sctp: [Deprecated]: syz.2.939 (pid 6387) Use of int in maxseg socket option. [ 123.548992][ T6387] Use struct sctp_assoc_value instead [ 123.780800][ T6397] netlink: 'syz.4.942': attribute type 11 has an invalid length. [ 123.788696][ T6397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.942'. [ 123.805953][ T6396] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 124.266350][ T6417] nftables ruleset with unbound chain [ 124.850039][ T6443] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.966'. [ 124.887030][ T6448] netlink: 44 bytes leftover after parsing attributes in process `syz.1.968'. [ 124.906603][ T6443] openvswitch: netlink: Flow actions attr not present in new flow. [ 125.709547][ T5254] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.901289][ T5254] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 125.920925][ T5254] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 125.974946][ T5254] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 126.009143][ T5254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.033274][ T5254] usb 1-1: Product: syz [ 126.037609][ T5254] usb 1-1: Manufacturer: syz [ 126.069945][ T5254] usb 1-1: SerialNumber: syz [ 126.090509][ T5254] usb 1-1: config 0 descriptor?? [ 126.106693][ T6470] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.116225][ T6470] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.376177][ T6470] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.404136][ T6470] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.450957][ T6508] overlayfs: conflicting options: nfs_export=on,index=off [ 126.544774][ T127] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.628993][ T5254] Error reading MAC address [ 126.640110][ T5254] usb 1-1: USB disconnect, device number 2 [ 126.746030][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 126.753225][ T127] usb 4-1: config index 0 descriptor too short (expected 2075, got 27) [ 126.769610][ T127] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 126.782685][ T127] usb 4-1: config 0 has no interface number 0 [ 126.789054][ T127] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 126.816085][ T127] usb 4-1: config 0 interface 200 has no altsetting 0 [ 126.841442][ T127] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 126.851188][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.859219][ T127] usb 4-1: Product: syz [ 126.863739][ T127] usb 4-1: Manufacturer: syz [ 126.868368][ T127] usb 4-1: SerialNumber: syz [ 126.883383][ T4312] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 126.893434][ T127] usb 4-1: config 0 descriptor?? [ 127.090655][ T4312] usb 2-1: Using ep0 maxpacket: 16 [ 127.099799][ T4312] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 127.122830][ T4312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.124730][ T127] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input8 [ 127.165700][ T4312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.186326][ T127] usb 4-1: USB disconnect, device number 5 [ 127.207405][ T4312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.245427][ T4312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.267851][ T4312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.299645][ T4312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.330886][ T4312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.356613][ T6520] loop2: detected capacity change from 0 to 32768 [ 127.358402][ T4312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.380048][ T4312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.397106][ T4312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.407688][ T4312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.432051][ T6520] (syz.2.1004,6520,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.457425][ T4312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.478383][ T4312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.498769][ T6520] (syz.2.1004,6520,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.510362][ T4312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.548042][ T4312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.577460][ T4312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.582281][ T6520] JBD2: Ignoring recovery information on journal [ 127.595198][ T4312] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 127.606042][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.614249][ T4312] usb 2-1: Product: syz [ 127.618608][ T4312] usb 2-1: Manufacturer: syz [ 127.623434][ T4312] usb 2-1: SerialNumber: syz [ 127.630283][ T4312] r8152-cfgselector 2-1: config 0 descriptor?? [ 127.738456][ T6520] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 127.841520][ T6520] (syz.2.1004,6520,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9. Applying ECC. [ 127.846476][ T4312] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 127.899534][ T6520] (syz.2.1004,6520,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9 [ 127.990232][ T6520] (syz.2.1004,6520,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 127.999219][ T6520] (syz.2.1004,6520,1):ocfs2_quota_read:201 ERROR: status = -5 [ 128.028416][ T6520] Quota error (device loop2): find_next_id: Can't read quota tree block 2 [ 128.063579][ T6520] (syz.2.1004,6520,1):ocfs2_get_next_id:909 ERROR: status = -5 [ 128.177345][ T127] usb 2-1: USB disconnect, device number 6 [ 128.200630][ T6551] loop4: detected capacity change from 0 to 512 [ 128.232547][ T6551] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.295890][ T6551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.305375][ T6551] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.330453][ T6551] EXT4-fs error (device loop4): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.4.1018: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 128.335479][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 128.364399][ T6551] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #12: comm syz.4.1018: directory missing '.' [ 128.464301][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 129.135665][ T6589] vivid-000: disconnect [ 129.148596][ T6587] vivid-000: reconnect [ 129.352879][ T6597] CIFS: VFS: Malformed UNC in devname [ 130.632375][ T6653] program syz.2.1066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.698521][ T6653] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 130.939412][ T6667] netlink: 'syz.2.1072': attribute type 12 has an invalid length. [ 131.108231][ T6637] loop4: detected capacity change from 0 to 32768 [ 131.144187][ T6673] loop1: detected capacity change from 0 to 2048 [ 131.182379][ T6673] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 131.297228][ T6677] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.297468][ T6673] syz.1.1076: attempt to access beyond end of device [ 131.297468][ T6673] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 131.514155][ T6673] syz.1.1076: attempt to access beyond end of device [ 131.514155][ T6673] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 131.564884][ T6673] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 131.589625][ T41] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.799837][ T127] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.820590][ T41] usb 1-1: Using ep0 maxpacket: 8 [ 131.835156][ T41] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 131.855703][ T41] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 131.867700][ T6698] loop1: detected capacity change from 0 to 512 [ 131.907601][ T41] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 131.937132][ T6698] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 131.941565][ T41] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.946333][ T6698] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.009556][ T127] usb 3-1: Using ep0 maxpacket: 32 [ 132.016770][ T127] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 132.040182][ T127] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.059718][ T127] usb 3-1: config 0 has no interface number 0 [ 132.065875][ T127] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 642 [ 132.078595][ T41] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 132.079031][ T127] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.101397][ T127] usb 3-1: config 0 interface 196 has no altsetting 0 [ 132.126767][ T127] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 132.138778][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.147216][ T127] usb 3-1: Product: syz [ 132.152225][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.159650][ T127] usb 3-1: Manufacturer: syz [ 132.172257][ T127] usb 3-1: SerialNumber: syz [ 132.180965][ T41] usb 1-1: Product: syz [ 132.189614][ T41] usb 1-1: Manufacturer: syz [ 132.193996][ T127] usb 3-1: config 0 descriptor?? [ 132.200008][ T6688] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 132.200070][ T41] usb 1-1: SerialNumber: syz [ 132.241241][ T6680] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.257508][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 132.280108][ T41] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 132.297410][ T41] usbtest 1-1:1.0: Linux user mode ISO test driver [ 132.304775][ T41] usbtest 1-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 132.430444][ T127] ipheth 3-1:0.196: Unable to find endpoints [ 132.454303][ T6711] xt_hashlimit: size too large, truncated to 1048576 [ 132.489690][ T127] usb 3-1: USB disconnect, device number 4 [ 132.576861][ T7] usb 1-1: USB disconnect, device number 3 [ 132.761584][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768274][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.179821][ T6733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1101'. [ 133.513573][ T6722] loop4: detected capacity change from 0 to 40427 [ 133.557551][ T6722] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 133.605670][ T6722] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 133.657746][ T6722] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.739272][ T6753] loop0: detected capacity change from 0 to 2048 [ 133.741088][ T6722] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 133.777038][ T6722] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.838818][ T6753] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.358080][ T6775] tmpfs: Bad value for 'mpol' [ 134.601109][ T26] audit: type=1326 audit(1773920660.385:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 134.707932][ T26] audit: type=1326 audit(1773920660.385:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 134.809587][ T26] audit: type=1326 audit(1773920660.415:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 134.909689][ T26] audit: type=1326 audit(1773920660.425:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 135.013761][ T26] audit: type=1326 audit(1773920660.425:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.2.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 135.036210][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.897265][ T6840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1152'. [ 136.828117][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1172'. [ 137.076586][ T6894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1176'. [ 137.093171][ T6893] Cannot find del_set index 4 as target [ 137.162031][ T6896] netlink: 'syz.0.1178': attribute type 21 has an invalid length. [ 137.184130][ T6862] loop1: detected capacity change from 0 to 32768 [ 137.191011][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 137.263196][ T6862] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 137.330198][ T6901] [U] [ 137.333435][ T6901] [U] [ 137.336153][ T6901] [U] [ 137.338863][ T6901] [U] [ 137.354747][ T6901] [U] [ 137.357515][ T6901] [U] [ 137.360226][ T6901] [U] [ 137.362929][ T6901] [U] [ 137.367792][ T6862] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 137.382906][ T6901] [U] [ 137.385616][ T6901] [U] [ 137.388304][ T6901] [U] [ 137.435621][ T6900] [U] [ 137.450073][ T6862] (syz.1.1161,6862,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=281474976710721, rec_len=32768, name_len=1 [ 137.522111][ T6862] (syz.1.1161,6862,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 137.546658][ T6862] (syz.1.1161,6862,0):ocfs2_mknod:298 ERROR: status = -2 [ 137.579724][ T6862] (syz.1.1161,6862,0):ocfs2_mknod:502 ERROR: status = -2 [ 137.586974][ T6862] (syz.1.1161,6862,0):ocfs2_create:676 ERROR: status = -2 [ 137.661221][ T26] audit: type=1326 audit(1773920663.445:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2cb9c799 code=0x7ffc0000 [ 137.710736][ T6916] loop3: detected capacity change from 0 to 16 [ 137.723781][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 137.788801][ T26] audit: type=1326 audit(1773920663.445:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f8c2cb9c799 code=0x7ffc0000 [ 137.812632][ T6916] erofs: (device loop3): mounted with root inode @ nid 36. [ 137.813162][ T6920] loop4: detected capacity change from 0 to 8 [ 137.881036][ T6916] syz.3.1187: attempt to access beyond end of device [ 137.881036][ T6916] loop3: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 137.919540][ T26] audit: type=1326 audit(1773920663.445:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2cb9c799 code=0x7ffc0000 [ 137.962161][ T6916] syz.3.1187: attempt to access beyond end of device [ 137.962161][ T6916] loop3: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 138.035613][ T26] audit: type=1326 audit(1773920663.445:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2cb9c799 code=0x7ffc0000 [ 138.469580][ T4382] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.519615][ T6942] loop0: detected capacity change from 0 to 128 [ 138.679119][ T4382] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 138.701843][ T4382] usb 5-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 138.724393][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1203'. [ 138.733321][ T4382] usb 5-1: Product: syz [ 138.742053][ T4382] usb 5-1: Manufacturer: syz [ 138.756937][ T4382] usb 5-1: SerialNumber: syz [ 138.780604][ T4382] usb 5-1: config 0 descriptor?? [ 138.816616][ T4382] ch341 5-1:0.0: ch341-uart converter detected [ 139.047409][ T6958] loop0: detected capacity change from 0 to 256 [ 139.098334][ T6958] exfat: Deprecated parameter 'utf8' [ 139.123221][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 139.132498][ T6958] exfat: Deprecated parameter 'namecase' [ 139.138225][ T6958] exfat: Deprecated parameter 'namecase' [ 139.165519][ T6960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.197503][ T4382] usb 5-1: failed to send control message: -71 [ 139.205590][ T4382] ch341-uart: probe of ttyUSB0 failed with error -71 [ 139.220501][ T4382] usb 5-1: USB disconnect, device number 4 [ 139.230668][ T4382] ch341 5-1:0.0: device disconnected [ 139.238613][ T6958] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 139.324267][ T6963] device wlan0 entered promiscuous mode [ 139.893460][ T6987] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1222'. [ 140.087743][ T6996] loop2: detected capacity change from 0 to 128 [ 140.162608][ T6996] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.209371][ T7004] loop4: detected capacity change from 0 to 512 [ 140.230146][ T6996] ext4 filesystem being mounted at /246/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.307119][ T6996] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.1227: bg 0: bad block bitmap checksum [ 140.445416][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 140.451606][ T5254] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.662873][ T5254] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.689254][ T5254] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.730364][ T5254] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.759753][ T5254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.786215][ T5254] usb 4-1: Product: syz [ 140.801168][ T5254] usb 4-1: Manufacturer: syz [ 140.805856][ T5254] usb 4-1: SerialNumber: syz [ 140.835693][ T7006] loop0: detected capacity change from 0 to 32768 [ 140.844063][ T5254] cdc_ncm 4-1:1.0: skipping garbage [ 140.849311][ T5254] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 140.879597][ T5254] cdc_ncm 4-1:1.0: bind() failure [ 140.896574][ T5254] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 140.913991][ T5254] cdc_ncm 4-1:1.1: bind() failure [ 140.943384][ T7006] XFS (loop0): Mounting V5 Filesystem [ 141.038165][ T5254] usb 4-1: USB disconnect, device number 6 [ 141.176990][ T7006] XFS (loop0): Ending clean mount [ 141.327089][ T4268] XFS (loop0): Unmounting Filesystem [ 141.775192][ T7059] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 141.953736][ T7065] loop2: detected capacity change from 0 to 16 [ 141.971895][ T7067] netlink: 'syz.1.1256': attribute type 5 has an invalid length. [ 141.991596][ T7065] erofs: (device loop2): mounted with root inode @ nid 36. [ 142.039117][ T7065] syz.2.1255: attempt to access beyond end of device [ 142.039117][ T7065] loop2: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 142.100241][ T7065] syz.2.1255: attempt to access beyond end of device [ 142.100241][ T7065] loop2: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 142.625886][ T7094] loop4: detected capacity change from 0 to 256 [ 142.638062][ T7094] exfat: Deprecated parameter 'utf8' [ 142.669650][ T7094] exfat: Deprecated parameter 'utf8' [ 142.675441][ T7094] exfat: Deprecated parameter 'namecase' [ 142.712813][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 142.747909][ T7094] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 142.803277][ T7101] binfmt_misc: register: failed to install interpreter file ./file2 [ 143.039351][ T7107] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1276'. [ 143.104261][ T7112] loop2: detected capacity change from 0 to 512 [ 143.142087][ T7112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.187312][ T7112] EXT4-fs (loop2): orphan cleanup on readonly fs [ 143.211021][ T7112] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 143.285526][ T7112] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 143.316078][ T7112] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.1278: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 143.420786][ T7112] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1278: couldn't read orphan inode 13 (err -117) [ 143.454875][ T7112] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.511417][ T7112] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.1278: inode #15: comm syz.2.1278: iget: illegal inode # [ 143.718428][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 143.986119][ T7143] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1292'. [ 144.036843][ T7143] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1292'. [ 144.077757][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 144.202555][ T7151] netlink: 'syz.1.1297': attribute type 1 has an invalid length. [ 144.321866][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.364737][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.410707][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.921255][ T26] audit: type=1326 audit(1773920670.705:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3679c799 code=0x7ffc0000 [ 144.923572][ T7182] syz.0.1312 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 144.999624][ T26] audit: type=1326 audit(1773920670.705:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f3f3679c799 code=0x7ffc0000 [ 145.115338][ T26] audit: type=1326 audit(1773920670.845:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3679c799 code=0x7ffc0000 [ 145.142554][ T7190] loop3: detected capacity change from 0 to 256 [ 145.202359][ T26] audit: type=1326 audit(1773920670.845:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3679c799 code=0x7ffc0000 [ 145.283572][ T7190] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 145.599963][ T7164] loop1: detected capacity change from 0 to 40427 [ 145.664389][ T7164] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 145.683140][ T7164] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x724 [ 145.704407][ T7164] F2FS-fs (loop1): invalid crc value [ 145.744995][ T7207] device veth3 entered promiscuous mode [ 145.788727][ T7164] F2FS-fs (loop1): Found nat_bits in checkpoint [ 145.872637][ T7164] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20 [ 145.937798][ T7164] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 146.012216][ T7164] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x12a/0x910 [ 146.036753][ T7219] netlink: 'syz.0.1327': attribute type 4 has an invalid length. [ 146.056335][ T7219] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1327'. [ 146.495001][ T7237] loop3: detected capacity change from 0 to 1024 [ 146.539621][ T7237] EXT4-fs: inline encryption not supported [ 146.679029][ T7237] EXT4-fs error (device loop3): ext4_free_blocks:6219: comm syz.3.1337: Freeing blocks not in datazone - block = 0, count = 4096 [ 146.785520][ T7237] EXT4-fs (loop3): Remounting filesystem read-only [ 146.802352][ T7237] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1337: Invalid inode bitmap blk 0 in block_group 0 [ 146.848220][ T7237] EXT4-fs (loop3): Remounting filesystem read-only [ 146.871549][ T7247] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1340'. [ 146.882606][ T7237] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 146.899992][ T7237] EXT4-fs (loop3): Remounting filesystem read-only [ 146.906603][ T7237] EXT4-fs (loop3): 1 orphan inode deleted [ 146.965292][ T7237] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.057980][ T7237] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.1337: Invalid inode table block 0 in block_group 0 [ 147.087298][ T7237] EXT4-fs (loop3): Remounting filesystem read-only [ 147.170456][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 147.498613][ T7243] loop2: detected capacity change from 0 to 32768 [ 147.537274][ T7239] loop0: detected capacity change from 0 to 32768 [ 147.563196][ T7243] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1339 (7243) [ 147.594544][ T7239] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1338 (7239) [ 147.620728][ T7243] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.675313][ T7243] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 147.710470][ T7243] BTRFS info (device loop2): force clearing of disk cache [ 147.739949][ T7243] BTRFS info (device loop2): force zlib compression, level 3 [ 147.747653][ T7243] BTRFS info (device loop2): enabling auto defrag [ 147.779547][ T7243] BTRFS info (device loop2): enabling disk space caching [ 147.820180][ T7243] BTRFS info (device loop2): disk space caching is enabled [ 147.829152][ T7264] loop3: detected capacity change from 0 to 1024 [ 147.860299][ T7264] EXT4-fs: Ignoring removed bh option [ 147.942455][ T7274] loop4: detected capacity change from 0 to 1024 [ 147.967883][ T7264] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #3: block 1: comm syz.3.1348: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.026149][ T5205] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (5205) [ 148.057040][ T7264] Quota error (device loop3): write_blk: dquota write failed [ 148.070752][ T7264] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 148.084293][ T7264] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.1348: Failed to acquire dquot type 0 [ 148.102659][ T7264] EXT4-fs error (device loop3): ext4_free_blocks:6219: comm syz.3.1348: Freeing blocks not in datazone - block = 0, count = 4096 [ 148.133395][ T7243] BTRFS info (device loop2): enabling ssd optimizations [ 148.137765][ T7264] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1348: Invalid inode bitmap blk 0 in block_group 0 [ 148.153598][ T41] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 148.154270][ T29] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.178492][ T7264] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 148.192110][ T7264] EXT4-fs (loop3): 1 orphan inode deleted [ 148.197906][ T7264] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.208512][ T7243] BTRFS info (device loop2): rebuilding free space tree [ 148.250320][ T7243] BTRFS info (device loop2): disabling free space tree [ 148.272013][ T7243] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.286731][ T29] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 148.292306][ T7243] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.342163][ T41] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.365079][ T7264] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm syz.3.1348: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.379361][ T41] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.398203][ T29] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:2: Failed to release dquot type 0 [ 148.405471][ T41] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 148.423705][ T63] hfsplus: b-tree write err: -5, ino 25 [ 148.435204][ T7264] Quota error (device loop3): find_next_id: Can't read quota tree block 1 [ 148.444588][ T63] hfsplus: b-tree write err: -5, ino 4 [ 148.459902][ T63] hfsplus: b-tree write err: -5, ino 2 [ 148.475861][ T63] hfsplus: b-tree write err: -5, ino 26 [ 148.481815][ T41] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 148.515857][ T41] usb 2-1: Product: syz [ 148.549731][ T41] usb 2-1: Manufacturer: syz [ 148.580503][ T41] hub 2-1:4.0: USB hub found [ 148.592879][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 148.661600][ T7296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1353'. [ 148.775714][ T41] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 148.867001][ T7301] loop0: detected capacity change from 0 to 256 [ 148.890482][ T7301] exfat: Deprecated parameter 'utf8' [ 148.895677][ T4277] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.929095][ T7301] exfat: Deprecated parameter 'utf8' [ 148.999641][ T7301] exfat: Deprecated parameter 'namecase' [ 149.106319][ T7301] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 149.313169][ T26] audit: type=1400 audit(1773920675.095:31): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=7311 comm="syz.3.1361" [ 149.319767][ T4320] usb 2-1: USB disconnect, device number 7 [ 149.679255][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1367'. [ 150.208448][ T7347] device geneve2 entered promiscuous mode [ 150.346586][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.377483][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.390589][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.840653][ T7373] ptrace attach of "./syz-executor exec"[4276] was attempted by ""[7373] [ 151.647345][ T7410] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1410'. [ 151.754817][ T7414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.765535][ T4382] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 151.815192][ T7416] loop3: detected capacity change from 0 to 4096 [ 151.822677][ T7418] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 151.932854][ T5253] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.971035][ T4382] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 4 [ 151.993159][ T4382] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 152.018628][ T4382] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 152.056383][ T4382] usb 2-1: string descriptor 0 read error: -22 [ 152.066368][ T4382] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 152.093268][ T4382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.128621][ T4382] usb 2-1: low speed audio streaming not supported [ 152.145010][ T5253] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.145511][ T4382] usb 2-1: low speed audio streaming not supported [ 152.175502][ T5253] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.213473][ T5253] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.236043][ T5253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.245849][ T5253] usb 5-1: Product: syz [ 152.250164][ T5253] usb 5-1: Manufacturer: syz [ 152.254937][ T5253] usb 5-1: SerialNumber: syz [ 152.271764][ T5253] cdc_ncm 5-1:1.0: skipping garbage [ 152.286446][ T5253] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 152.308891][ T5253] cdc_ncm 5-1:1.0: bind() failure [ 152.317550][ T5253] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 152.335002][ T5253] cdc_ncm 5-1:1.1: bind() failure [ 152.466498][ T7438] netlink: 'syz.2.1423': attribute type 10 has an invalid length. [ 152.475493][ T7438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1423'. [ 152.493750][ T7438] bridge0: port 3(veth0_vlan) entered blocking state [ 152.496519][ T5253] usb 5-1: USB disconnect, device number 5 [ 152.510044][ T7438] bridge0: port 3(veth0_vlan) entered disabled state [ 152.540157][ T4382] us122l: couldn't allocate write buffer [ 152.547342][ T4382] snd-usb-us122l: probe of 2-1:1.1 failed with error -22 [ 152.570059][ T7438] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 152.601584][ T4382] usb 2-1: USB disconnect, device number 8 [ 152.748584][ T7443] loop2: detected capacity change from 0 to 1024 [ 152.886768][ T4327] hfsplus: b-tree write err: -5, ino 25 [ 152.895693][ T4327] hfsplus: b-tree write err: -5, ino 4 [ 152.904544][ T4327] hfsplus: b-tree write err: -5, ino 2 [ 152.926177][ T4327] hfsplus: b-tree write err: -5, ino 26 [ 154.056984][ T7497] loop3: detected capacity change from 0 to 1024 [ 154.095780][ T7501] process 'syz.1.1453' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 154.216070][ T7497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 154.294927][ T7512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1458'. [ 154.368280][ T7497] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 623: comm syz.3.1452: Attempting to read directory block (623) that is past i_size (638464) [ 154.370042][ T7514] netlink: 'syz.1.1459': attribute type 1 has an invalid length. [ 154.443934][ T7497] EXT4-fs (loop3): Remounting filesystem read-only [ 154.500455][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 154.904968][ T7534] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 155.124624][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 155.161382][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 155.208673][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 155.229274][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 155.259645][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 155.304684][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 155.326206][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 155.357184][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 155.379943][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 155.399655][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 155.713088][ T7542] loop3: detected capacity change from 0 to 32768 [ 155.760870][ T7542] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1474 (7542) [ 155.835884][ T7566] xt_policy: neither incoming nor outgoing policy selected [ 155.873063][ T7542] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.892540][ T7542] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 155.920483][ T7542] BTRFS info (device loop3): force clearing of disk cache [ 155.931547][ T7542] BTRFS info (device loop3): force zlib compression, level 3 [ 155.939981][ T7542] BTRFS info (device loop3): enabling auto defrag [ 155.946573][ T7542] BTRFS info (device loop3): enabling disk space caching [ 156.004953][ T7542] BTRFS info (device loop3): disk space caching is enabled [ 156.349761][ T7542] BTRFS info (device loop3): enabling ssd optimizations [ 156.369118][ T7542] BTRFS info (device loop3): rebuilding free space tree [ 156.436183][ T26] audit: type=1326 audit(1773920682.215:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 156.462124][ T7542] BTRFS info (device loop3): disabling free space tree [ 156.469161][ T7542] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.506689][ T26] audit: type=1326 audit(1773920682.255:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 156.540325][ T7542] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.568803][ T26] audit: type=1326 audit(1773920682.255:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 156.767385][ T4279] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.953372][ T26] audit: type=1326 audit(1773920682.735:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 157.007188][ T7569] loop1: detected capacity change from 0 to 32768 [ 157.027263][ T7569] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1487 (7569) [ 157.052383][ T26] audit: type=1326 audit(1773920682.765:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 157.123389][ T7569] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.146637][ T26] audit: type=1326 audit(1773920682.765:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 157.171240][ T7569] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 157.200549][ T7569] BTRFS info (device loop1): force clearing of disk cache [ 157.207760][ T7569] BTRFS info (device loop1): metadata ratio 0 [ 157.269749][ T26] audit: type=1326 audit(1773920682.765:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 157.299730][ T7569] BTRFS info (device loop1): enabling ssd optimizations [ 157.306726][ T7569] BTRFS info (device loop1): using spread ssd allocation scheme [ 157.349739][ T7569] BTRFS info (device loop1): using free space tree [ 157.500095][ T7643] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 157.548705][ T7569] BTRFS info (device loop1): rebuilding free space tree [ 157.778184][ T7664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.816337][ T4276] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.340208][ T7679] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 158.749950][ T7700] netlink: 'syz.0.1532': attribute type 2 has an invalid length. [ 158.789535][ T4382] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.997437][ T4382] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.032521][ T4382] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 159.054820][ T4382] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 159.067400][ T4382] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.085204][ T4382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.108748][ T7687] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.318476][ T7721] netlink: 'syz.0.1543': attribute type 4 has an invalid length. [ 159.349864][ T7] usb 5-1: USB disconnect, device number 6 [ 159.527452][ T7729] netlink: 'syz.0.1547': attribute type 13 has an invalid length. [ 159.626948][ T7732] openvswitch: netlink: EtherType 0 is less than min 600 [ 159.735812][ T7737] Cannot find set identified by id 0 to match [ 159.890577][ T4382] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 160.031804][ T7751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.054459][ T7753] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 160.075360][ T7753] netlink: 'syz.0.1558': attribute type 1 has an invalid length. [ 160.076735][ T7751] device batadv_slave_0 entered promiscuous mode [ 160.095625][ T7753] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 160.100115][ T4382] usb 4-1: Using ep0 maxpacket: 16 [ 160.126040][ T4382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 160.144119][ T7751] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 160.190187][ T4382] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 160.206309][ T4382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.214671][ T4382] usb 4-1: Product: syz [ 160.218872][ T4382] usb 4-1: Manufacturer: syz [ 160.229890][ T4382] usb 4-1: SerialNumber: syz [ 160.237230][ T4382] usb 4-1: config 0 descriptor?? [ 160.464152][ T7] usb 4-1: USB disconnect, device number 7 [ 160.486875][ T7767] __nla_validate_parse: 48 callbacks suppressed [ 160.486896][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1566'. [ 160.522762][ T7768] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 160.696662][ T26] audit: type=1326 audit(1773920686.475:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 160.764943][ T26] audit: type=1326 audit(1773920686.475:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 160.817106][ T7772] loop0: detected capacity change from 0 to 4096 [ 160.833998][ T26] audit: type=1326 audit(1773920686.525:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 160.890078][ T7762] loop4: detected capacity change from 0 to 32768 [ 160.906495][ T7762] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1564 (7762) [ 160.983631][ T7762] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.003429][ T7762] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 161.090883][ T7762] BTRFS info (device loop4): force clearing of disk cache [ 161.118579][ T7762] BTRFS info (device loop4): metadata ratio 0 [ 161.138736][ T7762] BTRFS info (device loop4): enabling ssd optimizations [ 161.174808][ T7762] BTRFS info (device loop4): using spread ssd allocation scheme [ 161.243483][ T7762] BTRFS info (device loop4): using free space tree [ 161.549494][ T4314] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.677049][ T7762] BTRFS info (device loop4): rebuilding free space tree [ 161.739596][ T4314] usb 1-1: Using ep0 maxpacket: 16 [ 161.752601][ T4314] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 161.777687][ T7820] loop1: detected capacity change from 0 to 128 [ 161.799881][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.807929][ T4314] usb 1-1: Product: syz [ 161.831192][ T4314] usb 1-1: Manufacturer: syz [ 161.835849][ T4314] usb 1-1: SerialNumber: syz [ 161.866358][ T7820] Bad inode number on dev loop1: 32769 is out of range [ 161.883344][ T4314] r8152-cfgselector 1-1: config 0 descriptor?? [ 161.936338][ T4272] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.239570][ T4260] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4260) [ 162.338854][ T4314] r8152-cfgselector 1-1: Unknown version 0x0000 [ 162.359631][ T4314] r8152-cfgselector 1-1: bad CDC descriptors [ 162.372386][ T7842] loop1: detected capacity change from 0 to 8 [ 162.399550][ T4314] r8152-cfgselector 1-1: Unknown version 0x0000 [ 162.435972][ T4314] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 162.481902][ T7842] SQUASHFS error: Unable to read inode 0xa7 [ 163.229591][ T7832] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.353841][ T7870] mmap: syz.4.1599 (7870) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.419534][ T7832] usb 2-1: Using ep0 maxpacket: 8 [ 163.430105][ T7832] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 163.457936][ T7832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.487212][ T7875] netlink: 'syz.0.1601': attribute type 12 has an invalid length. [ 163.509797][ T7832] usb 2-1: Product: syz [ 163.514110][ T7832] usb 2-1: Manufacturer: syz [ 163.531597][ T7832] usb 2-1: SerialNumber: syz [ 163.543553][ T7851] loop3: detected capacity change from 0 to 40427 [ 163.553653][ T7832] usb 2-1: config 0 descriptor?? [ 163.598859][ T7832] gspca_main: sq930x-2.14.0 probing 2770:930c [ 163.636696][ T7851] F2FS-fs (loop3): invalid crc value [ 163.722087][ T7851] F2FS-fs (loop3): Found nat_bits in checkpoint [ 163.822698][ T7887] loop0: detected capacity change from 0 to 64 [ 163.950514][ T7851] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.976208][ T7832] gspca_sq930x: ucbus_write failed -71 [ 163.984151][ T7832] sq930x: probe of 2-1:0.0 failed with error -71 [ 164.035668][ T7895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.048260][ T7832] usb 2-1: USB disconnect, device number 9 [ 164.122070][ T7895] device batadv_slave_0 entered promiscuous mode [ 164.188055][ T7895] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 164.928999][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 164.929015][ T26] audit: type=1326 audit(1773920690.705:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 164.995486][ T7925] loop1: detected capacity change from 0 to 2048 [ 165.039810][ T26] audit: type=1326 audit(1773920690.715:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 165.119281][ T26] audit: type=1326 audit(1773920690.715:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 165.153640][ T7925] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.218160][ T26] audit: type=1326 audit(1773920690.715:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 165.263118][ T7935] netlink: 'syz.2.1628': attribute type 21 has an invalid length. [ 165.298566][ T7935] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1628'. [ 165.319700][ T26] audit: type=1326 audit(1773920690.735:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 165.325299][ T7935] netlink: 'syz.2.1628': attribute type 4 has an invalid length. [ 165.353875][ T7938] program syz.3.1629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.369572][ T7935] netlink: 'syz.2.1628': attribute type 5 has an invalid length. [ 165.384043][ T26] audit: type=1326 audit(1773920690.735:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 165.407357][ T26] audit: type=1326 audit(1773920690.735:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 165.417995][ T7935] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1628'. [ 165.431656][ T26] audit: type=1326 audit(1773920690.735:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe14099c799 code=0x7ffc0000 [ 166.359185][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'. [ 166.389703][ T7980] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1649'. [ 166.438133][ T7980] netlink: 'syz.0.1649': attribute type 3 has an invalid length. [ 166.490842][ T7980] netlink: 'syz.0.1649': attribute type 2 has an invalid length. [ 166.529596][ T7980] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1649'. [ 166.941508][ T8002] loop2: detected capacity change from 0 to 512 [ 167.069847][ T8002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 167.101164][ T8002] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.114389][ T8002] EXT4-fs (loop2): unmounting filesystem. [ 167.233428][ T4260] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.478222][ T8026] loop4: detected capacity change from 0 to 1024 [ 167.835858][ T8040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1677'. [ 167.880356][ T8040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1677'. [ 167.946281][ T8026] EXT4-fs (loop4): Test dummy encryption mode enabled [ 167.983011][ T8026] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 168.049679][ T8026] EXT4-fs error (device loop4): __ext4_remount:6644: comm syz.4.1671: Abort forced by user [ 168.110523][ T8026] EXT4-fs (loop4): Remounting filesystem read-only [ 168.117098][ T8026] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 168.235375][ T8057] loop0: detected capacity change from 0 to 1024 [ 168.265688][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 168.350938][ T8057] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 168.429719][ T8057] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 168.439159][ T8057] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.1682: Failed to acquire dquot type 0 [ 168.466150][ T8057] EXT4-fs error (device loop0): mb_free_blocks:1824: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 168.566226][ T8057] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #13: comm syz.0.1682: corrupted inode contents [ 168.592690][ T8057] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #13: comm syz.0.1682: mark_inode_dirty error [ 168.597724][ T8075] loop2: detected capacity change from 0 to 736 [ 168.612214][ T8057] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #13: comm syz.0.1682: corrupted inode contents [ 168.634486][ T8057] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.1682: mark_inode_dirty error [ 168.657729][ T8078] device netdevsim0 entered promiscuous mode [ 168.664013][ T8057] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #13: comm syz.0.1682: corrupted inode contents [ 168.697428][ T8057] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 168.707024][ T8057] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #13: comm syz.0.1682: corrupted inode contents [ 168.721610][ T8057] EXT4-fs error (device loop0): ext4_truncate:4318: inode #13: comm syz.0.1682: mark_inode_dirty error [ 168.725243][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1694'. [ 168.744491][ T8057] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 168.769587][ T5252] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 168.779719][ T8057] EXT4-fs (loop0): 1 truncate cleaned up [ 168.788462][ T8057] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.887799][ T8057] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.1682: Failed to acquire dquot type 0 [ 168.982228][ T5252] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 169.002134][ T5252] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 169.029596][ T5252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.088627][ T5252] usb 4-1: Product: syz [ 169.098748][ T5252] usb 4-1: Manufacturer: syz [ 169.112373][ T5252] usb 4-1: SerialNumber: syz [ 169.130841][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 169.131450][ T5252] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 169.179672][ T8088] netlink: 'syz.2.1700': attribute type 27 has an invalid length. [ 169.188060][ T8088] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 169.540332][ T5252] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 169.596169][ T5252] usb 4-1: USB disconnect, device number 8 [ 169.667966][ T8080] loop4: detected capacity change from 0 to 32768 [ 169.738278][ T8080] (syz.4.1695,8080,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.794435][ T8080] (syz.4.1695,8080,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.868913][ T8080] JBD2: Ignoring recovery information on journal [ 169.946930][ T8080] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 170.196484][ T4272] ocfs2: Unmounting device (7,4) on (node local) [ 170.355346][ T8126] netlink: 'syz.4.1716': attribute type 46 has an invalid length. [ 170.392739][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1716'. [ 170.569522][ T127] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.793602][ T127] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 170.801975][ T8143] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1725'. [ 170.812318][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.855443][ T127] usb 4-1: Product: syz [ 170.871945][ T127] usb 4-1: Manufacturer: syz [ 170.876879][ T127] usb 4-1: SerialNumber: syz [ 170.910216][ T127] usb 4-1: config 0 descriptor?? [ 170.947439][ T127] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 170.984851][ T127] usb 4-1: Detected FT232HP [ 170.985814][ T8148] loop0: detected capacity change from 0 to 16 [ 171.006285][ T8148] erofs: (device loop0): mounted with root inode @ nid 36. [ 171.187097][ T8152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1730'. [ 171.241776][ T5252] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 171.326254][ T127] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 171.347256][ T8160] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1732'. [ 171.367472][ T127] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 171.405495][ T127] usb 4-1: USB disconnect, device number 9 [ 171.449549][ T5252] usb 2-1: Using ep0 maxpacket: 16 [ 171.456341][ T127] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 171.460507][ T5252] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 171.488020][ T127] ftdi_sio 4-1:0.0: device disconnected [ 171.489514][ T8164] loop0: detected capacity change from 0 to 128 [ 171.509548][ T5252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.519718][ T5252] usb 2-1: Product: syz [ 171.523928][ T5252] usb 2-1: Manufacturer: syz [ 171.551048][ T5252] usb 2-1: SerialNumber: syz [ 171.581207][ T5252] usb 2-1: config 0 descriptor?? [ 171.595355][ T5252] gspca_main: spca508-2.14.0 probing 041e:4018 [ 171.992563][ T5252] gspca_spca508: reg_read err -71 [ 171.999752][ T5252] gspca_spca508: reg_read err -71 [ 172.017021][ T5252] gspca_spca508: reg_read err -71 [ 172.033255][ T5252] gspca_spca508: reg_read err -71 [ 172.035179][ T8176] xt_TCPMSS: Only works on TCP SYN packets [ 172.042746][ T5252] gspca_spca508: reg write: error -71 [ 172.059496][ T5252] spca508: probe of 2-1:0.0 failed with error -71 [ 172.091492][ T5252] usb 2-1: USB disconnect, device number 10 [ 172.124690][ T8158] loop2: detected capacity change from 0 to 32768 [ 172.166036][ T8158] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 172.334113][ T8186] MTD: Couldn't look up './bus': -15 [ 172.538803][ T5205] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 173.029710][ T4314] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.229508][ T4314] usb 3-1: Using ep0 maxpacket: 32 [ 173.236638][ T4314] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.276565][ T4314] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.309009][ T4314] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 173.344824][ T4314] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 173.367815][ T4314] usb 3-1: Product: syz [ 173.382155][ T4314] usb 3-1: Manufacturer: syz [ 173.427616][ T4314] hub 3-1:4.0: USB hub found [ 173.485394][ T8208] loop0: detected capacity change from 0 to 32768 [ 173.575191][ T8208] JBD2: Ignoring recovery information on journal [ 173.623463][ T4314] hub 3-1:4.0: 5 ports detected [ 173.629743][ T4314] hub 3-1:4.0: insufficient power available to use all downstream ports [ 173.670692][ T8208] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 173.790350][ T8238] loop3: detected capacity change from 0 to 256 [ 173.847170][ T4314] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 173.856048][ T8238] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 173.882655][ T4314] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 173.930494][ T4314] usb 3-1: USB disconnect, device number 5 [ 174.037589][ T4268] ocfs2: Unmounting device (7,0) on (node local) [ 175.180018][ T8289] loop1: detected capacity change from 0 to 2048 [ 175.283957][ T8289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.334271][ T8289] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.476319][ T8289] fscrypt (loop1, inode 14): Error -61 getting encryption context [ 175.648074][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 175.766297][ T8302] loop0: detected capacity change from 0 to 2048 [ 175.807960][ T8302] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.215005][ T8314] loop2: detected capacity change from 0 to 2048 [ 176.246101][ T8288] loop4: detected capacity change from 0 to 40427 [ 176.292551][ T8288] F2FS-fs (loop4): Invalid segment count (0) [ 176.298612][ T8288] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 176.336805][ T8314] EXT4-fs: test_dummy_encryption requires encrypt feature [ 176.356199][ T8288] F2FS-fs (loop4): invalid crc value [ 176.417662][ T8288] F2FS-fs (loop4): Found nat_bits in checkpoint [ 176.442577][ T4275] Bluetooth: hci0: command 0x0401 tx timeout [ 176.617118][ T8288] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 176.635104][ T8288] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 176.976036][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 176.976552][ T8344] usb usb8: check_ctrlrecip: process 8344 (syz.3.1819) requesting ep 01 but needs 81 [ 177.046532][ T8344] usb usb8: usbfs: process 8344 (syz.3.1819) did not claim interface 0 before use [ 177.377266][ T8354] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1826'. [ 177.404967][ T8356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1821'. [ 177.414733][ T8356] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1821'. [ 177.423943][ T8354] netlink: 'syz.1.1826': attribute type 1 has an invalid length. [ 177.432430][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 177.520514][ T8314] loop2: detected capacity change from 0 to 40427 [ 177.552802][ T8314] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 177.579525][ T8314] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 177.587854][ T8314] F2FS-fs (loop2): Encoding requested by superblock is unknown [ 177.693369][ T8364] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1829'. [ 177.967320][ T8375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1835'. [ 178.009554][ T8375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1835'. [ 178.184976][ T8382] loop1: detected capacity change from 0 to 2048 [ 178.240393][ T8382] EXT4-fs: Ignoring removed bh option [ 178.245860][ T8382] EXT4-fs: Ignoring removed nobh option [ 178.337337][ T8382] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 178.376416][ T8382] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.525679][ T8382] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.1839: corrupted xattr block 128 [ 178.555766][ T8396] loop4: detected capacity change from 0 to 2048 [ 178.587519][ T8382] EXT4-fs (loop1): Remounting filesystem read-only [ 178.657611][ T8396] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.721995][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 179.264124][ T8428] loop4: detected capacity change from 0 to 1024 [ 179.277386][ T8428] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.300369][ T8428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.334970][ T4346] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.355444][ T8428] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz.4.1861: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 179.409584][ T127] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 179.427752][ T8428] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1861: couldn't read orphan inode 11 (err -117) [ 179.476812][ T8428] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 179.541059][ T8428] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.1861: Invalid block bitmap block 0 in block_group 0 [ 179.571013][ T8426] loop2: detected capacity change from 0 to 32768 [ 179.599675][ T127] usb 4-1: Using ep0 maxpacket: 32 [ 179.607567][ T8428] __quota_error: 7 callbacks suppressed [ 179.607585][ T8428] Quota error (device loop4): write_blk: dquota write failed [ 179.607633][ T127] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 179.621741][ T4346] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 179.631520][ T127] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 179.648539][ T127] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 179.658958][ T127] usb 4-1: config 1 has no interface number 0 [ 179.666481][ T8428] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 179.679139][ T4346] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.686301][ T8426] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 179.699170][ T127] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.714394][ T4346] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 179.715836][ T127] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 179.729612][ T8428] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.1861: Failed to acquire dquot type 0 [ 179.757105][ T127] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 179.769171][ T4346] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.769591][ T8426] (syz.2.1860,8426,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 179.786715][ T4346] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.815328][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.838037][ T8426] (syz.2.1860,8426,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 179.851523][ T127] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 179.860744][ T4346] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 179.870380][ T8426] (syz.2.1860,8426,0):ocfs2_mknod:298 ERROR: status = -2 [ 179.878435][ T8426] (syz.2.1860,8426,0):ocfs2_mknod:502 ERROR: status = -2 [ 179.895735][ T8426] (syz.2.1860,8426,0):ocfs2_mkdir:659 ERROR: status = -2 [ 179.902067][ T4346] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.942030][ T4346] usb 2-1: Product: syz [ 179.946365][ T4346] usb 2-1: Manufacturer: syz [ 179.965506][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 179.973274][ T4346] cdc_wdm 2-1:1.0: skipping garbage [ 179.978533][ T4346] cdc_wdm 2-1:1.0: skipping garbage [ 180.032123][ T4346] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 180.038193][ T4346] cdc_wdm 2-1:1.0: Unknown control protocol [ 180.067687][ T127] snd_usb_pod 4-1:1.1: invalid control EP [ 180.086344][ T127] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 180.111481][ T127] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 180.130881][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 180.131536][ T8444] kAFS: unable to lookup cell '' [ 180.149717][ T127] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 180.190690][ T8416] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 180.268125][ T4315] usb 2-1: USB disconnect, device number 11 [ 180.392067][ T127] usb 4-1: USB disconnect, device number 10 [ 180.406540][ T8448] loop4: detected capacity change from 0 to 2048 [ 180.417441][ T8448] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.672029][ T8455] loop4: detected capacity change from 0 to 512 [ 180.697568][ T8455] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 180.763897][ T8455] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 180.808693][ T8455] EXT4-fs (loop4): orphan cleanup on readonly fs [ 180.839923][ T8455] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.1872: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 180.871351][ T8455] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1872: couldn't read orphan inode 13 (err -117) [ 180.880242][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1878'. [ 180.919613][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 180.925732][ T4271] Bluetooth: hci4: command 0x0406 tx timeout [ 180.932233][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 180.938252][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 180.945575][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 180.992444][ T8455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 181.100087][ T8455] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (24564!=0) [ 181.221222][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 182.155043][ T8519] loop2: detected capacity change from 0 to 64 [ 182.244411][ T4315] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 182.411390][ T8528] loop4: detected capacity change from 0 to 64 [ 182.431527][ T4315] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 182.448529][ T8528] hfs: unable to locate alternate MDB [ 182.459581][ T4315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.472627][ T8528] hfs: continuing without an alternate MDB [ 182.490239][ T4315] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 182.524368][ T26] audit: type=1800 audit(1773920708.305:57): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1908" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 182.561989][ T4315] usb 1-1: config 1 has no interface number 0 [ 182.568171][ T4315] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 182.610469][ T4315] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 182.633936][ T127] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 182.649907][ T63] hfs: new node 0 already hashed? [ 182.668140][ T4315] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.688884][ T63] ------------[ cut here ]------------ [ 182.694781][ T63] WARNING: CPU: 1 PID: 63 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 182.698566][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.703633][ T63] Modules linked in: [ 182.703717][ T63] CPU: 1 PID: 63 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 182.703741][ T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.703753][ T63] Workqueue: writeback wb_workfn (flush-7:4) [ 182.703791][ T63] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 182.703818][ T63] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 182.736484][ T4315] usb 1-1: Product: syz [ 182.739504][ T63] RSP: 0018:ffffc900015c6e80 EFLAGS: 00010246 [ 182.739534][ T63] RAX: 000000000000001f RBX: ffff8880551e60e0 RCX: cf8938ba40e7af00 [ 182.739546][ T63] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 182.739557][ T63] RBP: 0000000000000000 R08: ffffc900015c6b87 R09: 1ffff920002b8d70 [ 182.739568][ T63] R10: dffffc0000000000 R11: fffff520002b8d71 R12: 0000000000000000 [ 182.739579][ T63] R13: ffff8880551e6000 R14: ffff88802e705e00 R15: dffffc0000000000 [ 182.739592][ T63] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 182.739608][ T63] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.739621][ T63] CR2: 00007fe1417456b8 CR3: 000000005a890000 CR4: 00000000003506e0 [ 182.739637][ T63] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.739648][ T63] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.739659][ T63] Call Trace: [ 182.739678][ T63] [ 182.739691][ T63] hfs_bmap_alloc+0x53d/0x5d0 [ 182.797895][ T4315] usb 1-1: Manufacturer: syz [ 182.799732][ T63] ? hfs_bmap_reserve+0x420/0x420 [ 182.847742][ T4315] usb 1-1: SerialNumber: syz [ 182.855694][ T63] hfs_btree_inc_height+0xfd/0xac0 [ 182.855739][ T63] ? hfs_brec_insert+0x6f6/0xbd0 [ 182.855765][ T63] ? hfs_brec_insert+0xbd0/0xbd0 [ 182.855794][ T63] ? do_raw_spin_unlock+0x11d/0x230 [ 182.855817][ T63] hfs_brec_insert+0x744/0xbd0 [ 182.855856][ T63] ? hfs_brec_keylen+0x350/0x350 [ 182.855883][ T63] __hfs_ext_write_extent+0x2a1/0x470 [ 182.855909][ T63] hfs_ext_write_extent+0x17b/0x200 [ 182.855930][ T63] ? verify_lock_unused+0x140/0x140 [ 182.927687][ T63] ? hfs_ext_keycmp+0x310/0x310 [ 182.932642][ T63] ? writeback_sb_inodes+0x46b/0x1850 [ 182.938079][ T63] hfs_write_inode+0xd8/0xa20 [ 182.942875][ T63] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 182.948292][ T63] ? __writeback_single_inode+0x4ae/0x1160 [ 182.954190][ T63] ? __lock_acquire+0x7d10/0x7d10 [ 182.959260][ T63] ? do_raw_spin_lock+0x128/0x2f0 [ 182.964359][ T63] ? __rwlock_init+0x140/0x140 [ 182.969151][ T63] __writeback_single_inode+0x75b/0x1160 [ 182.974952][ T63] writeback_sb_inodes+0xb30/0x1850 [ 182.980289][ T63] ? queue_io+0x5a0/0x5a0 [ 182.984686][ T63] ? rcu_is_watching+0x11/0xa0 [ 182.989543][ T63] wb_writeback+0x482/0xd50 [ 182.994378][ T63] ? percpu_ref_tryget+0x250/0x250 [ 182.999948][ T63] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 183.006088][ T63] ? _raw_spin_unlock_irq+0x1f/0x40 [ 183.011387][ T63] wb_workfn+0x423/0xee0 [ 183.015687][ T63] ? inode_wait_for_writeback+0x220/0x220 [ 183.021538][ T63] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 183.027675][ T63] ? read_lock_is_recursive+0x10/0x10 [ 183.033159][ T63] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 183.039099][ T63] ? _raw_spin_unlock+0x40/0x40 [ 183.044231][ T63] ? _raw_spin_unlock_irq+0x1f/0x40 [ 183.049594][ T63] ? process_one_work+0x7b0/0x1160 [ 183.054738][ T63] process_one_work+0x8a2/0x1160 [ 183.059779][ T63] ? worker_detach_from_pool+0x240/0x240 [ 183.065455][ T63] ? _raw_spin_lock_irq+0xb7/0xf0 [ 183.070574][ T63] ? _raw_spin_lock_irqsave+0x100/0x100 [ 183.076326][ T63] ? kthread_data+0x4b/0xc0 [ 183.081455][ T63] worker_thread+0xaa2/0x1270 [ 183.086363][ T63] ? __kthread_parkme+0x162/0x1c0 [ 183.091671][ T63] kthread+0x29d/0x330 [ 183.095785][ T63] ? worker_clr_flags+0x1a0/0x1a0 [ 183.100880][ T63] ? kthread_blkcg+0xd0/0xd0 [ 183.105508][ T63] ret_from_fork+0x1f/0x30 [ 183.110015][ T63] [ 183.113076][ T63] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 183.120371][ T63] CPU: 1 PID: 63 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 183.127855][ T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.138120][ T63] Workqueue: writeback wb_workfn (flush-7:4) [ 183.144156][ T63] Call Trace: [ 183.147446][ T63] [ 183.150460][ T63] dump_stack_lvl+0x188/0x24e [ 183.155168][ T63] ? memcpy+0x3c/0x60 [ 183.159183][ T63] ? show_regs_print_info+0x12/0x12 [ 183.164671][ T63] ? load_image+0x400/0x400 [ 183.169390][ T63] panic+0x2e5/0x730 [ 183.173329][ T63] ? bpf_jit_dump+0xd0/0xd0 [ 183.177955][ T63] ? ret_from_fork+0x1f/0x30 [ 183.182678][ T63] __warn+0x2f8/0x4f0 [ 183.186681][ T63] ? hfs_bnode_create+0x37a/0x400 [ 183.192130][ T63] ? hfs_bnode_create+0x37a/0x400 [ 183.197383][ T63] report_bug+0x2ba/0x4f0 [ 183.201787][ T63] ? hfs_bnode_create+0x37a/0x400 [ 183.206870][ T63] handle_bug+0x3a/0x70 [ 183.211058][ T63] exc_invalid_op+0x16/0x40 [ 183.215592][ T63] asm_exc_invalid_op+0x16/0x20 [ 183.220467][ T63] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 183.226169][ T63] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 183.245792][ T63] RSP: 0018:ffffc900015c6e80 EFLAGS: 00010246 [ 183.251909][ T63] RAX: 000000000000001f RBX: ffff8880551e60e0 RCX: cf8938ba40e7af00 [ 183.259879][ T63] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 183.268451][ T63] RBP: 0000000000000000 R08: ffffc900015c6b87 R09: 1ffff920002b8d70 [ 183.276861][ T63] R10: dffffc0000000000 R11: fffff520002b8d71 R12: 0000000000000000 [ 183.284846][ T63] R13: ffff8880551e6000 R14: ffff88802e705e00 R15: dffffc0000000000 [ 183.292916][ T63] hfs_bmap_alloc+0x53d/0x5d0 [ 183.297599][ T63] ? hfs_bmap_reserve+0x420/0x420 [ 183.302621][ T63] hfs_btree_inc_height+0xfd/0xac0 [ 183.307821][ T63] ? hfs_brec_insert+0x6f6/0xbd0 [ 183.313285][ T63] ? hfs_brec_insert+0xbd0/0xbd0 [ 183.318301][ T63] ? do_raw_spin_unlock+0x11d/0x230 [ 183.323486][ T63] hfs_brec_insert+0x744/0xbd0 [ 183.328252][ T63] ? hfs_brec_keylen+0x350/0x350 [ 183.333219][ T63] __hfs_ext_write_extent+0x2a1/0x470 [ 183.338631][ T63] hfs_ext_write_extent+0x17b/0x200 [ 183.343934][ T63] ? verify_lock_unused+0x140/0x140 [ 183.349139][ T63] ? hfs_ext_keycmp+0x310/0x310 [ 183.353997][ T63] ? writeback_sb_inodes+0x46b/0x1850 [ 183.359374][ T63] hfs_write_inode+0xd8/0xa20 [ 183.364059][ T63] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 183.369437][ T63] ? __writeback_single_inode+0x4ae/0x1160 [ 183.375250][ T63] ? __lock_acquire+0x7d10/0x7d10 [ 183.380268][ T63] ? do_raw_spin_lock+0x128/0x2f0 [ 183.385289][ T63] ? __rwlock_init+0x140/0x140 [ 183.390076][ T63] __writeback_single_inode+0x75b/0x1160 [ 183.395854][ T63] writeback_sb_inodes+0xb30/0x1850 [ 183.401177][ T63] ? queue_io+0x5a0/0x5a0 [ 183.405624][ T63] ? rcu_is_watching+0x11/0xa0 [ 183.410422][ T63] wb_writeback+0x482/0xd50 [ 183.414960][ T63] ? percpu_ref_tryget+0x250/0x250 [ 183.420074][ T63] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 183.426058][ T63] ? _raw_spin_unlock_irq+0x1f/0x40 [ 183.431391][ T63] wb_workfn+0x423/0xee0 [ 183.435639][ T63] ? inode_wait_for_writeback+0x220/0x220 [ 183.441365][ T63] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 183.447346][ T63] ? read_lock_is_recursive+0x10/0x10 [ 183.452829][ T63] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 183.458710][ T63] ? _raw_spin_unlock+0x40/0x40 [ 183.463548][ T63] ? _raw_spin_unlock_irq+0x1f/0x40 [ 183.468745][ T63] ? process_one_work+0x7b0/0x1160 [ 183.473870][ T63] process_one_work+0x8a2/0x1160 [ 183.478810][ T63] ? worker_detach_from_pool+0x240/0x240 [ 183.484606][ T63] ? _raw_spin_lock_irq+0xb7/0xf0 [ 183.489618][ T63] ? _raw_spin_lock_irqsave+0x100/0x100 [ 183.495156][ T63] ? kthread_data+0x4b/0xc0 [ 183.499665][ T63] worker_thread+0xaa2/0x1270 [ 183.504347][ T63] ? __kthread_parkme+0x162/0x1c0 [ 183.509367][ T63] kthread+0x29d/0x330 [ 183.513509][ T63] ? worker_clr_flags+0x1a0/0x1a0 [ 183.518520][ T63] ? kthread_blkcg+0xd0/0xd0 [ 183.523096][ T63] ret_from_fork+0x1f/0x30 [ 183.527512][ T63] [ 183.530982][ T63] Kernel Offset: disabled [ 183.535518][ T63] Rebooting in 86400 seconds..