last executing test programs: 8m18.52985788s ago: executing program 1 (id=10593): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000003c0)={0x2, 0x2, 0x4, {0x8, 0x5, 0x2, 0x8810001}}) 8m18.329640058s ago: executing program 1 (id=10594): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x81, 0x2ba, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 8m17.95549134s ago: executing program 1 (id=10598): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000001400)={0x0, 0x2}, &(0x7f0000001500)={0x0}) 8m17.742616677s ago: executing program 1 (id=10602): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$eJzs3N9u29YZAPBDx441FwsGFGvSNEDZNBfZRRxJXhwY3UU0mrLZSqJA0kVyNRSL0wWzu2HZgDV3udlWYMOudj30dk+wJ9jTrM+QgfqT2JZjLU0XZcDvB8Q81Pl4zncY4hyIEBkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBAl281mKwq9bLAXluIXSraLvP/i6nja3j+PbY5Zef73X/+OQojqf6HRCJfG9Zfefh77w/rP1XBxvHcxNOpNIzx+650ffPT28lJ94EoUhTMSei0effn4l58dHOz/ZtGJLMhOOsjKPOt3vhdCKPN4a3OzeXO3W8bdrJeW98oq7cdJkXaqvIivJ3dCCFsbcbp+L98b7Gx3eml8PflR3Nraun2j3Wxuxh+vD9NOUeaDmx+vl8lu1utlg51RTF19o/1+uF1fiJ9kVVylnX4cP3h4sL8xL8k6qPXfBLXnBbWb7Xar1W63Nm9t3brdbDYmV+uzD5abJ4SThywv/qLltTs/uVBGO9M57vx3OY/Dt/E0+euiUwAAAAD+x6LRPfZodF/+0qjUzXpp81jM02hh6QEAAADfgdFX+4uTGwAhXArR7Pd/AAAA4P/bn858xi5EUSiHq9H0UZXh3WvRYacudQ7PjT86d7LFqns5ujBpZLTZXJ7sJemV6N1x0LvT6G8mmwfz8oiKYiV68moJhD+Hy+OYy/fH2/vTmnEva92sl64n+c3lEDqdC0tVerf63RcPfx9CUTw999WgfyEKDx4e7K///FcH90e5PKlbeXI4+YXE2tm5rIYjufz22XOPkxHfOT7ildGNmHrUXw36a+N+m0fHvzQ+fOklxv+H8N445r1JpmvHx9+o+2ytf9SaGf3RLFrDu9dWJ51NRz7zE5Ezs7gyjrly/cN68+H1Sc3KkSza87JoHz3/3+pcnJJF48S52JiXxcYrZgGwKA9OrkIz6//Mujua3q6tzDR1xiw3Z3Wvl/C5q/svXtDL+fB8Rv9gHPPB5eXnK9KJGb05b0ZvnrKun7a6hXD6WP8Rrv79byHshavT4BetsXW/fzm2qkaHX9cHfD3T7/RJ87LXjuqdc6uHvw7vPPry8Y2Hh599vv/5/hft9sZm88fN5q12WBkNY7Kx9gBwirT4Jlqr/hgVRTb8WWtrq9WpdtO4yJNP4iLb3knjbFClRbLbGeyk8bDIqzzJe3Xh02w7LeNybzjMiyru5kU8zMvs7ujNL/Hk1S9l2u8Mqiwph720U6Zxkg+qTlLF21mZxMO9n/aycjctRgeXwzTJulnSqbJ8EJf5XpGk63FcpumRwGw7HVRZN6uLg3hYZP1OcS/+NO/t9dN4Oy2TIhtW+bjBaV/ZoJsX/VGz64s+2QDwhngUJm+we/Yqu5cuhMacmEWPEQA47uQqvbrohAAAAAAAAAAAAAAAgBlHH9f7yeTFZa/8ROBiC3feOq3q/cUndrQQQlh+iaOm/13Hq4aLHsWCz+Fr7KvxZgx5+tats4PrqNOrohDC/L6+X8csaEICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDP8JwAA///H8oyP") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 8m17.222082859s ago: executing program 1 (id=10610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 8m16.600811111s ago: executing program 1 (id=10619): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m16.071304232s ago: executing program 32 (id=10619): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.531699733s ago: executing program 2 (id=17377): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0xe, 0x2, 0x9, 0x10001, '\x00', 0x3}) 1.472703022s ago: executing program 3 (id=17378): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001040), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) 1.453744249s ago: executing program 4 (id=17379): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x3, 0x0, [0x33b, 0x10000, 0x45, 0x6, 0x4000, 0x2], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 1.338240588s ago: executing program 3 (id=17381): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 1.318960564s ago: executing program 4 (id=17382): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0x1}) 1.229762398s ago: executing program 2 (id=17383): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x35, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x100}}, 0x30) 1.19043501s ago: executing program 0 (id=17384): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.0830061s ago: executing program 4 (id=17385): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="14002b80080003"], 0x34}], 0x1}, 0x20000000) 1.02718892s ago: executing program 0 (id=17386): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x2004, 0x4}, 0x20) 1.018378078s ago: executing program 2 (id=17387): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x10000, 0xc10}) 1.001501175s ago: executing program 3 (id=17388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000580)) 857.425709ms ago: executing program 2 (id=17389): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) 802.664758ms ago: executing program 3 (id=17390): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f0000000b80)={{0x5, 0x3, 0x10, 0x0, 'syz1\x00', 0x80}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 759.831801ms ago: executing program 0 (id=17391): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90vywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1818.183497][T11769] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1818.222730][T11769] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1818.240554][T11781] netlink: 148 bytes leftover after parsing attributes in process `syz.3.17042'. [ 1818.303569][T11769] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1818.328425][T11781] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1818.337472][T11769] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1818.516696][ C1] vkms_vblank_simulate: vblank timer overrun [ 1818.538715][T11769] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1818.548145][T11769] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1818.561957][T11769] [U] 22Ʃx?0;3u [ 1818.566248][T11769] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1818.591364][ C1] vkms_vblank_simulate: vblank timer overrun [ 1818.656869][T11769] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1818.678570][T11769] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1818.697590][T11769] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1818.708082][T11769] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1818.763156][T11769] [U] ec [ 1818.766386][T11769] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1818.809971][T11767] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1818.854911][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17050'. [ 1818.892795][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17050'. [ 1818.925061][T11798] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17050'. [ 1819.347908][T17330] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1819.464014][T11819] netlink: 'syz.4.17060': attribute type 1 has an invalid length. [ 1819.478196][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17060'. [ 1819.553427][T17330] usb 4-1: Using ep0 maxpacket: 32 [ 1819.576526][T17330] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1819.598596][T17330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.634367][T17330] usb 4-1: config 0 descriptor?? [ 1819.653928][T17330] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1819.768978][T11827] loop4: detected capacity change from 0 to 4096 [ 1819.957877][T11827] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 1820.114879][T17330] gspca_nw80x: reg_r err -71 [ 1820.122941][T17330] nw80x: probe of 4-1:0.0 failed with error -71 [ 1820.159298][T17330] usb 4-1: USB disconnect, device number 66 [ 1820.366420][ T5957] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1820.580235][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 1820.601015][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1820.624438][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1820.647351][T11853] loop4: detected capacity change from 0 to 64 [ 1820.654991][ T5957] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1820.665463][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1820.677890][ T5957] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1820.688753][ T5957] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1820.698278][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.711845][ T5957] usb 1-1: config 0 descriptor?? [ 1820.730006][T11835] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1820.867448][T11855] netlink: 'syz.2.17078': attribute type 10 has an invalid length. [ 1820.941097][T11855] openvswitch: netlink: Flow key attr not present in new flow. [ 1821.327899][ T5802] usb 1-1: USB disconnect, device number 61 [ 1821.328894][ T4920] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1821.471119][T11873] __nla_validate_parse: 1 callbacks suppressed [ 1821.471138][T11873] netlink: 666 bytes leftover after parsing attributes in process `syz.2.17088'. [ 1822.358461][T11895] loop4: detected capacity change from 0 to 8192 [ 1822.415324][T11895] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1822.432620][T11895] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1822.447864][T11895] REISERFS (device loop4): using ordered data mode [ 1822.454522][T11895] reiserfs: using flush barriers [ 1822.464277][T11895] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1822.565415][T11895] REISERFS (device loop4): checking transaction log (loop4) [ 1822.578754][T11910] loop0: detected capacity change from 0 to 128 [ 1822.587288][T11895] REISERFS (device loop4): Using r5 hash to sort names [ 1822.615978][T11895] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1822.649926][T11910] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1822.664761][T11910] ext4 filesystem being mounted at /4309/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1822.718762][T11910] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.17105: reserved inode found cleared - inode=2 [ 1822.771108][ T5910] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1823.008405][T11921] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1823.299380][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17111'. [ 1823.592607][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17119'. [ 1823.996977][T11951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17124'. [ 1824.679198][T11980] loop0: detected capacity change from 0 to 1024 [ 1824.707783][T11980] EXT4-fs: Ignoring removed bh option [ 1824.733258][T11980] EXT4-fs: inline encryption not supported [ 1824.740439][T11980] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1824.787683][T11980] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.17139: lblock 2 mapped to illegal pblock 2 (length 1) [ 1824.829801][T11980] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1824.884489][T11980] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.17139: lblock 0 mapped to illegal pblock 48 (length 1) [ 1824.957695][T11980] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1824.992310][T11980] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.17139: Failed to acquire dquot type 0 [ 1825.035312][T11980] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1825.063789][T11980] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.17139: mark_inode_dirty error [ 1825.079569][T11980] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 1825.111434][T11980] EXT4-fs (loop0): 1 orphan inode deleted [ 1825.120652][T11980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1825.126764][T11966] loop2: detected capacity change from 0 to 32768 [ 1825.149778][ T12] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1825.170494][T11966] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.17131 (11966) [ 1825.186459][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1825.243124][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6985: comm kworker/u4:1: Failed to release dquot type 0 [ 1825.294540][ T12] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm kworker/u4:1: lblock 2 mapped to illegal pblock 2 (length 1) [ 1825.299633][T11966] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1825.381352][T11995] geneve0: entered promiscuous mode [ 1825.381976][ T12] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1825.386917][T11966] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1825.417127][T11966] BTRFS info (device loop2): enabling auto defrag [ 1825.419571][ T12] EXT4-fs error (device loop0): ext4_write_dquot:6929: comm kworker/u4:1: Failed to commit dquot type 0 [ 1825.423646][T11966] BTRFS info (device loop2): use no compression [ 1825.423664][T11966] BTRFS info (device loop2): force clearing of disk cache [ 1825.423720][T11966] BTRFS info (device loop2): max_inline at 4096 [ 1825.459981][T11995] geneve0: entered allmulticast mode [ 1825.489876][ T12] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 1825.492571][T11966] BTRFS info (device loop2): disabling free space tree [ 1825.518247][ T5910] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1825.532884][ T5910] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1825.553865][ T5910] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1825.564678][ T5910] EXT4-fs error (device loop0): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 1825.802140][T11966] BTRFS info (device loop2): enabling ssd optimizations [ 1825.842885][T11993] loop3: detected capacity change from 0 to 32768 [ 1825.861935][T11966] BTRFS info (device loop2): auto enabling async discard [ 1825.869645][T11993] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.17144 (11993) [ 1825.894379][T11966] BTRFS info (device loop2): rebuilding free space tree [ 1825.918045][T11993] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1825.936211][T11993] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1825.980402][T11966] BTRFS info (device loop2): disabling free space tree [ 1825.987552][T11993] BTRFS info (device loop3): force zlib compression, level 3 [ 1826.012832][T11966] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1826.034483][T11993] BTRFS info (device loop3): turning on flush-on-commit [ 1826.041552][T11993] BTRFS info (device loop3): max_inline at 4096 [ 1826.049962][T11966] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1826.121128][T11993] BTRFS info (device loop3): using free space tree [ 1826.302391][T11993] BTRFS info (device loop3): enabling ssd optimizations [ 1826.309842][T11993] BTRFS info (device loop3): auto enabling async discard [ 1826.413957][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17150'. [ 1826.423079][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17150'. [ 1826.488999][ T5914] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1826.589903][ T5913] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1826.923104][T11173] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop3 scanned by udevd (11173) [ 1827.223787][T12057] netlink: 'syz.2.17159': attribute type 13 has an invalid length. [ 1827.248353][T12057] netlink: 'syz.2.17159': attribute type 12 has an invalid length. [ 1828.151681][T12079] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17170'. [ 1828.172038][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17170'. [ 1828.449585][T12059] loop3: detected capacity change from 0 to 32768 [ 1828.451085][T12085] nfs: Unexpected value for 'lock' [ 1828.490566][T12059] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1828.595462][ T5758] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1828.642367][T12091] No such timeout policy "syz0" [ 1829.545375][T12120] netlink: 'syz.0.17189': attribute type 21 has an invalid length. [ 1829.562638][T12120] netlink: 'syz.0.17189': attribute type 6 has an invalid length. [ 1829.580321][T12120] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17189'. [ 1829.737952][T12127] netlink: 'syz.2.17193': attribute type 21 has an invalid length. [ 1829.781280][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17193'. [ 1830.514790][T12155] loop4: detected capacity change from 0 to 16 [ 1830.557352][T12155] erofs: (device loop4): mounted with root inode @ nid 36. [ 1830.601749][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1831.139037][T17330] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 1831.216331][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17221'. [ 1831.225769][T12182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17221'. [ 1831.357881][T17330] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1831.366930][T17330] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1831.381633][T17330] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1831.400228][T17330] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1831.430539][T17330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1831.466953][T17330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1831.488115][T17330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1831.537801][T17330] usb 3-1: string descriptor 0 read error: -22 [ 1831.546117][T17330] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1831.552616][T12193] loop0: detected capacity change from 0 to 64 [ 1831.556548][T17330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.574367][T17330] usb 3-1: config 0 descriptor?? [ 1831.584388][T17330] hub 3-1:0.0: bad descriptor, ignoring hub [ 1831.595153][T17330] hub: probe of 3-1:0.0 failed with error -5 [ 1831.605794][T17330] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input102 [ 1831.642753][T12193] syz.0.17226: attempt to access beyond end of device [ 1831.642753][T12193] loop0: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 1831.684844][T12193] Buffer I/O error on dev loop0, logical block 8388608, async page read [ 1831.725256][T12193] syz.0.17226: attempt to access beyond end of device [ 1831.725256][T12193] loop0: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 1831.759398][T12193] Buffer I/O error on dev loop0, logical block 8388608, async page read [ 1831.896894][ T2224] usb 3-1: USB disconnect, device number 50 [ 1832.182578][T12195] loop3: detected capacity change from 0 to 32768 [ 1832.211916][ T5801] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1832.241746][T12195] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1832.330153][T12195] XFS (loop3): Ending clean mount [ 1832.359728][T12195] XFS (loop3): Quotacheck needed: Please wait. [ 1832.433922][ T5801] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1832.450315][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.469299][ T5801] usb 1-1: Product: syz [ 1832.480350][ T5801] usb 1-1: Manufacturer: syz [ 1832.526116][ T5801] usb 1-1: SerialNumber: syz [ 1832.562811][ T5801] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1832.601199][ T5957] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1832.675494][T12195] XFS (loop3): Quotacheck: Done. [ 1832.836146][ T5913] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1833.220533][ T5801] usb 1-1: USB disconnect, device number 62 [ 1833.350675][T12228] loop2: detected capacity change from 0 to 2048 [ 1833.367569][T12228] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1833.415173][ T2224] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1833.563603][T12232] loop2: detected capacity change from 0 to 256 [ 1833.572310][T12232] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1833.585458][T12232] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1833.598126][T12232] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1833.623302][ T2224] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1833.642633][ T2224] usb 5-1: not running at top speed; connect to a high speed hub [ 1833.665976][ T2224] usb 5-1: config 5 has an invalid interface number: 206 but max is 0 [ 1833.676337][ T2224] usb 5-1: config 5 has no interface number 0 [ 1833.682862][ T2224] usb 5-1: config 5 interface 206 has no altsetting 0 [ 1833.693341][ T2224] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=87.b4 [ 1833.718361][ T2224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.726429][ T2224] usb 5-1: Product: syz [ 1833.735234][ T2224] usb 5-1: Manufacturer: syz [ 1833.736189][ T5957] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1833.745349][ T2224] usb 5-1: SerialNumber: syz [ 1833.753671][ T5957] ath9k_htc: Failed to initialize the device [ 1833.767157][ T5801] usb 1-1: ath9k_htc: USB layer deinitialized [ 1834.015461][ T2224] rtsx_usb: probe of 5-1:5.206 failed with error -22 [ 1834.045420][ T2224] usb 5-1: USB disconnect, device number 26 [ 1834.436082][T12250] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17251'. [ 1834.574658][ T5957] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1834.682164][T12258] netlink: 'syz.3.17261': attribute type 8 has an invalid length. [ 1834.780406][ T5957] usb 3-1: Using ep0 maxpacket: 8 [ 1834.819336][ T5957] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1834.837213][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.877895][ T5957] usb 3-1: Product: syz [ 1834.882243][ T5957] usb 3-1: Manufacturer: syz [ 1834.893181][ T5957] usb 3-1: SerialNumber: syz [ 1834.922422][ T5957] usb 3-1: config 0 descriptor?? [ 1834.931524][ T5957] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1835.067259][T12268] openvswitch: netlink: Actions may not be safe on all matching packets [ 1835.374422][T12275] loop3: detected capacity change from 0 to 4096 [ 1835.387481][T12275] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1835.397240][ T5957] gspca_sonixj: reg_r err -71 [ 1835.408713][ T5957] sonixj: probe of 3-1:0.0 failed with error -71 [ 1835.429810][ T5957] usb 3-1: USB disconnect, device number 51 [ 1835.550923][T12275] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 1835.557536][T12275] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1835.630522][T12260] loop0: detected capacity change from 0 to 32768 [ 1835.659875][T12260] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1835.877874][ T5758] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1835.891559][T12282] delete_channel: no stack [ 1835.903854][ T59] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 1835.919328][ T5913] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 1835.925918][ T5913] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1835.951524][ T5913] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 1835.965942][ T7808] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 1836.407102][T12290] loop0: detected capacity change from 0 to 4096 [ 1836.552905][T12290] ntfs: volume version 3.1. [ 1836.621941][T12290] ntfs: (device loop0): ntfs_truncate(): Truncate would cause the inode 0x43 to exceed the maximum size for its attribute type (0x80). Aborting truncate. [ 1836.742727][T12304] xt_CT: No such helper "pptp" [ 1836.938742][T12312] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1837.437586][T12332] netlink: 'syz.4.17288': attribute type 5 has an invalid length. [ 1837.896014][T12347] netlink: 'syz.4.17292': attribute type 1 has an invalid length. [ 1837.929845][T12347] netlink: 232 bytes leftover after parsing attributes in process `syz.4.17292'. [ 1837.961951][T12349] ieee802154 phy1 wpan1: encryption failed: -22 [ 1838.137214][T12353] loop4: detected capacity change from 0 to 256 [ 1838.184614][T12353] exfat: Deprecated parameter 'utf8' [ 1838.190000][T12353] exfat: Deprecated parameter 'utf8' [ 1838.264290][T12353] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1838.278256][T12322] loop3: detected capacity change from 0 to 32768 [ 1838.373474][T12322] jfs_lookup: iget failed on inum 4 [ 1838.381144][T12353] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1838.563250][ T5801] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1838.790575][ T5801] usb 1-1: Using ep0 maxpacket: 8 [ 1838.803667][ T5801] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1838.815111][T12373] netlink: 'syz.4.17305': attribute type 5 has an invalid length. [ 1838.827546][ T5801] usb 1-1: config 179 has no interface number 0 [ 1838.861484][ T5801] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1838.873409][ T5801] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1838.891755][ T5801] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1838.928446][ T5801] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1838.943791][ T5801] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1838.960703][ T5801] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1838.968453][ T5801] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1838.977994][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.025131][ T5801] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input103 [ 1839.465729][ T5801] usb 1-1: USB disconnect, device number 63 [ 1839.471769][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1839.490005][ T5801] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1839.608395][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17313'. [ 1839.667010][T12391] netlink: 7 bytes leftover after parsing attributes in process `syz.3.17313'. [ 1839.669781][T12393] loop4: detected capacity change from 0 to 128 [ 1839.686278][T12393] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1839.700834][T12393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1839.727936][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17315'. [ 1839.779006][T12395] batadv2: entered promiscuous mode [ 1839.785506][T12395] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1839.998743][T12399] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.17318'. [ 1840.011012][T12399] openvswitch: netlink: Key type 2832 is out of range max 32 [ 1840.492013][ T5802] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1840.661265][T12426] QAT: Device 3 not found [ 1840.665958][ T5801] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1840.688099][ T5802] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1840.699243][ T5802] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1840.719221][ T5802] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1840.731196][ T5802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1840.739429][ T5802] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1840.749096][ T5802] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1840.782129][ T5802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1840.794397][ T5802] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1840.805139][ T5802] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1840.828480][ T5802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1840.836655][ T5802] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1840.846846][ T5802] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1840.868773][ T5802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1840.875672][ T5801] usb 1-1: Using ep0 maxpacket: 16 [ 1840.885853][ T5801] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1840.902682][ T5802] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1840.912968][ T5801] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 7 [ 1840.925528][ T5802] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1840.948479][ T5802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1840.960853][ T5801] usb 1-1: string descriptor 0 read error: -22 [ 1840.967719][ T5801] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1840.977840][ T5802] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1840.987127][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.995602][ T5802] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1841.011726][ T5802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1841.030797][ T5801] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1841.042340][ T5802] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1841.077978][ T5802] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1841.102288][ T5802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1841.111814][ T5802] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1841.141533][ T5802] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1841.153520][ T5802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1841.168487][ T5802] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1841.186252][ T5802] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1841.217580][ T5802] usb 5-1: Product: syz [ 1841.250646][ T5802] usb 5-1: Manufacturer: syz [ 1841.255406][ T5802] usb 5-1: SerialNumber: syz [ 1841.267484][ T5801] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1841.278496][ T5802] usb 5-1: config 0 descriptor?? [ 1841.332775][ T5802] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1841.454686][ T5758] udevd[5758]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1841.514778][ T5801] usb 1-1: USB disconnect, device number 64 [ 1841.663044][ T5802] usb 5-1: USB disconnect, device number 27 [ 1841.681212][ T5802] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1841.867516][T12447] loop2: detected capacity change from 0 to 4096 [ 1841.913096][T12447] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1841.946323][T12447] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 1841.953048][T12447] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 1842.186716][ T49] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 1842.201259][ T5914] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 1842.224831][ T5914] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1842.257297][ T5914] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 1842.302220][ T7808] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 1842.423295][T12459] netlink: 'syz.3.17347': attribute type 1 has an invalid length. [ 1842.433694][T12459] netlink: 'syz.3.17347': attribute type 3 has an invalid length. [ 1842.441565][T12459] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17347'. [ 1842.779787][T12470] xfrm0: entered promiscuous mode [ 1842.800341][T12470] xfrm0: entered allmulticast mode [ 1842.942062][T12474] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1842.982528][T12474] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1843.068986][T12476] loop0: detected capacity change from 0 to 128 [ 1843.458524][T12485] bond0: Error: Cannot enslave bond to itself. [ 1843.977475][T12503] wg1: left promiscuous mode [ 1844.016818][T12503] batadv_slave_0: left promiscuous mode [ 1844.041629][T12503] vlan0: left promiscuous mode [ 1844.049730][T12503] veth0_vlan: left promiscuous mode [ 1844.091945][T12503] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 1844.121857][T12503] geneve2: left promiscuous mode [ 1844.146583][T12503] bridge1: left promiscuous mode [ 1844.187133][T12503] bond5: left promiscuous mode [ 1844.210599][T12503] batadv2: left promiscuous mode [ 1844.736221][T12532] netlink: 'syz.3.17381': attribute type 21 has an invalid length. [ 1845.022178][T12540] gre0: left promiscuous mode [ 1845.134857][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17385'. [ 1845.244689][T12549] 9pnet: Found fid 0 not clunked [ 1845.463685][T12555] netlink: 'syz.0.17392': attribute type 9 has an invalid length. [ 1845.492078][T12555] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.17392'. [ 1845.571627][T12557] loop2: detected capacity change from 0 to 2048 [ 1845.611529][T12557] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1845.661859][T12562] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1845.712391][T12564] loop4: detected capacity change from 0 to 64 [ 1845.734677][T12564] hfs: unable to locate alternate MDB [ 1845.745196][T12564] hfs: continuing without an alternate MDB [ 1845.806110][ T28] audit: type=1800 audit(2000007603.591:338): pid=12564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17396" name="bus" dev="loop4" ino=21 res=0 errno=0 [ 1845.936774][T22057] hfs: new node 0 already hashed? [ 1845.942778][T22057] ------------[ cut here ]------------ [ 1845.949313][T22057] WARNING: CPU: 1 PID: 22057 at fs/hfs/bnode.c:520 hfs_bnode_create+0x3b9/0x440 [ 1845.958558][T22057] Modules linked in: [ 1845.962498][T22057] CPU: 1 PID: 22057 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1845.970277][T22057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1845.980599][T22057] Workqueue: writeback wb_workfn (flush-7:4) [ 1845.986769][T22057] RIP: 0010:hfs_bnode_create+0x3b9/0x440 [ 1845.992456][T22057] Code: d4 e0 8a 89 ee e8 47 8c 1f 08 e9 73 fd ff ff e8 1d 1c 2d ff 4c 89 ef e8 45 bc 34 08 48 c7 c7 c0 d4 e0 8a 89 ee e8 27 8c 1f 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c [ 1846.012338][T22057] RSP: 0018:ffffc90004b6ee18 EFLAGS: 00010246 [ 1846.018567][T22057] RAX: 000000000000001f RBX: ffff88802647e000 RCX: 04c57a30ccc0d100 [ 1846.026793][T22057] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1846.035040][T22057] RBP: 0000000000000000 R08: ffffc90004b6eb27 R09: 1ffff9200096dd64 [ 1846.043184][T22057] R10: dffffc0000000000 R11: fffff5200096dd65 R12: 0000000000000000 [ 1846.051238][T22057] R13: ffff88802647e0e0 R14: ffff88807a39cd00 R15: dffffc0000000000 [ 1846.059436][T22057] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1846.068497][T22057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1846.075277][T22057] CR2: 0000555574befa28 CR3: 000000006529d000 CR4: 00000000003506e0 [ 1846.083313][T22057] Call Trace: [ 1846.086728][T22057] [ 1846.089711][T22057] hfs_bmap_alloc+0x541/0x5d0 [ 1846.094470][T22057] ? hfs_bmap_reserve+0x430/0x430 [ 1846.099656][T22057] hfs_btree_inc_height+0x101/0xac0 [ 1846.104917][T22057] ? hfs_brec_insert+0x6fa/0xbd0 [ 1846.109971][T22057] ? hfs_brec_insert+0xbd0/0xbd0 [ 1846.114960][T22057] ? do_raw_spin_unlock+0x121/0x230 [ 1846.120567][T22057] hfs_brec_insert+0x748/0xbd0 [ 1846.125414][T22057] ? hfs_brec_keylen+0x360/0x360 [ 1846.130539][T22057] __hfs_ext_write_extent+0x2a1/0x470 [ 1846.136076][T22057] hfs_ext_write_extent+0x17f/0x210 [ 1846.141447][T22057] ? verify_lock_unused+0x140/0x140 [ 1846.146705][T22057] ? hfs_ext_find_block+0x190/0x190 [ 1846.152051][T22057] ? blk_start_plug+0x51/0x1a0 [ 1846.156959][T22057] hfs_write_inode+0xdc/0x880 [ 1846.161840][T22057] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1846.167373][T22057] ? __writeback_single_inode+0x48d/0xec0 [ 1846.173265][T22057] ? __lock_acquire+0x7d40/0x7d40 [ 1846.178340][T22057] ? do_raw_spin_lock+0x11f/0x2c0 [ 1846.183522][T22057] ? __rwlock_init+0x150/0x150 [ 1846.188436][T22057] __writeback_single_inode+0x705/0xec0 [ 1846.194270][T22057] writeback_sb_inodes+0x7cd/0xf50 [ 1846.199477][T22057] ? queue_io+0x550/0x550 [ 1846.204146][T22057] ? rcu_is_watching+0x15/0xb0 [ 1846.209093][T22057] wb_writeback+0x46a/0xbf0 [ 1846.213662][T22057] ? queue_io+0x3b1/0x550 [ 1846.218126][T22057] ? percpu_ref_tryget+0x250/0x250 [ 1846.223293][T22057] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1846.229472][T22057] ? _raw_spin_unlock_irq+0x23/0x50 [ 1846.234734][T22057] wb_workfn+0x400/0xe60 [ 1846.239123][T22057] ? inode_wait_for_writeback+0x230/0x230 [ 1846.244997][T22057] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1846.251135][T22057] ? read_lock_is_recursive+0x20/0x20 [ 1846.256617][T22057] ? _raw_spin_unlock_irq+0x23/0x50 [ 1846.261920][T22057] ? process_scheduled_works+0x96f/0x15d0 [ 1846.267669][T22057] ? process_scheduled_works+0x96f/0x15d0 [ 1846.273478][T22057] process_scheduled_works+0xa5d/0x15d0 [ 1846.279203][T22057] ? worker_attach_to_pool+0x380/0x380 [ 1846.284723][T22057] ? assign_work+0x3d2/0x5d0 [ 1846.289360][T22057] worker_thread+0xa55/0xfc0 [ 1846.294091][T22057] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1846.300011][T22057] ? _raw_spin_unlock+0x40/0x40 [ 1846.305010][T22057] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1846.310966][T22057] kthread+0x2fa/0x390 [ 1846.315203][T22057] ? pr_cont_work+0x560/0x560 [ 1846.320017][T22057] ? kthread_blkcg+0xd0/0xd0 [ 1846.324740][T22057] ret_from_fork+0x48/0x80 [ 1846.329299][T22057] ? kthread_blkcg+0xd0/0xd0 [ 1846.334051][T22057] ret_from_fork_asm+0x11/0x20 [ 1846.338866][T22057] [ 1846.341977][T22057] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1846.349277][T22057] CPU: 1 PID: 22057 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1846.356935][T22057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1846.367118][T22057] Workqueue: writeback wb_workfn (flush-7:4) [ 1846.373117][T22057] Call Trace: [ 1846.376396][T22057] [ 1846.379341][T22057] dump_stack_lvl+0x18c/0x250 [ 1846.384047][T22057] ? show_regs_print_info+0x20/0x20 [ 1846.389267][T22057] ? load_image+0x400/0x400 [ 1846.393789][T22057] panic+0x2dc/0x730 [ 1846.397686][T22057] ? bpf_jit_dump+0xd0/0xd0 [ 1846.402207][T22057] ? ret_from_fork_asm+0x11/0x20 [ 1846.407175][T22057] __warn+0x2e0/0x470 [ 1846.411168][T22057] ? hfs_bnode_create+0x3b9/0x440 [ 1846.416306][T22057] ? hfs_bnode_create+0x3b9/0x440 [ 1846.421367][T22057] report_bug+0x2be/0x4f0 [ 1846.425705][T22057] ? hfs_bnode_create+0x3b9/0x440 [ 1846.430742][T22057] ? hfs_bnode_create+0x3b9/0x440 [ 1846.435787][T22057] ? hfs_bnode_create+0x3bb/0x440 [ 1846.441337][T22057] handle_bug+0xcf/0x120 [ 1846.445596][T22057] exc_invalid_op+0x1a/0x50 [ 1846.450121][T22057] asm_exc_invalid_op+0x1a/0x20 [ 1846.454999][T22057] RIP: 0010:hfs_bnode_create+0x3b9/0x440 [ 1846.460732][T22057] Code: d4 e0 8a 89 ee e8 47 8c 1f 08 e9 73 fd ff ff e8 1d 1c 2d ff 4c 89 ef e8 45 bc 34 08 48 c7 c7 c0 d4 e0 8a 89 ee e8 27 8c 1f 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c [ 1846.480438][T22057] RSP: 0018:ffffc90004b6ee18 EFLAGS: 00010246 [ 1846.486518][T22057] RAX: 000000000000001f RBX: ffff88802647e000 RCX: 04c57a30ccc0d100 [ 1846.494677][T22057] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1846.502655][T22057] RBP: 0000000000000000 R08: ffffc90004b6eb27 R09: 1ffff9200096dd64 [ 1846.510644][T22057] R10: dffffc0000000000 R11: fffff5200096dd65 R12: 0000000000000000 [ 1846.518713][T22057] R13: ffff88802647e0e0 R14: ffff88807a39cd00 R15: dffffc0000000000 [ 1846.526723][T22057] ? hfs_bnode_create+0x3b9/0x440 [ 1846.532021][T22057] hfs_bmap_alloc+0x541/0x5d0 [ 1846.536714][T22057] ? hfs_bmap_reserve+0x430/0x430 [ 1846.541751][T22057] hfs_btree_inc_height+0x101/0xac0 [ 1846.546959][T22057] ? hfs_brec_insert+0x6fa/0xbd0 [ 1846.551914][T22057] ? hfs_brec_insert+0xbd0/0xbd0 [ 1846.556876][T22057] ? do_raw_spin_unlock+0x121/0x230 [ 1846.562264][T22057] hfs_brec_insert+0x748/0xbd0 [ 1846.567058][T22057] ? hfs_brec_keylen+0x360/0x360 [ 1846.572022][T22057] __hfs_ext_write_extent+0x2a1/0x470 [ 1846.577409][T22057] hfs_ext_write_extent+0x17f/0x210 [ 1846.582704][T22057] ? verify_lock_unused+0x140/0x140 [ 1846.588002][T22057] ? hfs_ext_find_block+0x190/0x190 [ 1846.593228][T22057] ? blk_start_plug+0x51/0x1a0 [ 1846.598005][T22057] hfs_write_inode+0xdc/0x880 [ 1846.602958][T22057] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1846.608522][T22057] ? __writeback_single_inode+0x48d/0xec0 [ 1846.614255][T22057] ? __lock_acquire+0x7d40/0x7d40 [ 1846.619289][T22057] ? do_raw_spin_lock+0x11f/0x2c0 [ 1846.624326][T22057] ? __rwlock_init+0x150/0x150 [ 1846.629111][T22057] __writeback_single_inode+0x705/0xec0 [ 1846.634677][T22057] writeback_sb_inodes+0x7cd/0xf50 [ 1846.639822][T22057] ? queue_io+0x550/0x550 [ 1846.644195][T22057] ? rcu_is_watching+0x15/0xb0 [ 1846.649000][T22057] wb_writeback+0x46a/0xbf0 [ 1846.653524][T22057] ? queue_io+0x3b1/0x550 [ 1846.657877][T22057] ? percpu_ref_tryget+0x250/0x250 [ 1846.663001][T22057] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1846.669065][T22057] ? _raw_spin_unlock_irq+0x23/0x50 [ 1846.674280][T22057] wb_workfn+0x400/0xe60 [ 1846.678552][T22057] ? inode_wait_for_writeback+0x230/0x230 [ 1846.684310][T22057] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1846.690588][T22057] ? read_lock_is_recursive+0x20/0x20 [ 1846.695993][T22057] ? _raw_spin_unlock_irq+0x23/0x50 [ 1846.701302][T22057] ? process_scheduled_works+0x96f/0x15d0 [ 1846.707038][T22057] ? process_scheduled_works+0x96f/0x15d0 [ 1846.712853][T22057] process_scheduled_works+0xa5d/0x15d0 [ 1846.718446][T22057] ? worker_attach_to_pool+0x380/0x380 [ 1846.723922][T22057] ? assign_work+0x3d2/0x5d0 [ 1846.728619][T22057] worker_thread+0xa55/0xfc0 [ 1846.733220][T22057] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1846.739126][T22057] ? _raw_spin_unlock+0x40/0x40 [ 1846.744037][T22057] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1846.749955][T22057] kthread+0x2fa/0x390 [ 1846.754034][T22057] ? pr_cont_work+0x560/0x560 [ 1846.758809][T22057] ? kthread_blkcg+0xd0/0xd0 [ 1846.763496][T22057] ret_from_fork+0x48/0x80 [ 1846.767926][T22057] ? kthread_blkcg+0xd0/0xd0 [ 1846.772525][T22057] ret_from_fork_asm+0x11/0x20 [ 1846.777317][T22057] [ 1846.780821][T22057] Kernel Offset: disabled [ 1846.785285][T22057] Rebooting in 86400 seconds..