last executing test programs: 4m17.506828817s ago: executing program 2 (id=11990): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@private0, 0x5}) 4m17.238671574s ago: executing program 2 (id=11983): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) fcntl$lock(r0, 0x11, 0x0) 4m16.958723622s ago: executing program 2 (id=11988): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4b, 0x24, 0xd0, 0x20, 0xa2c, 0x8, 0xc7b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0}}]}}, 0x0) 4m15.222216745s ago: executing program 2 (id=12016): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m14.708984062s ago: executing program 2 (id=12021): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0xc, 0x1000000, 0x1, 0xa1, 0x40000000}}) 4m13.836664121s ago: executing program 2 (id=12029): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @addr={0x1c, 0x3}}, {0x0, 0x0, 0x0, 0x5, @time={0xb, 0x8}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick=0x10000, {0x8}, {0x20, 0x1}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x7ffc, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70) 4m13.132749972s ago: executing program 32 (id=12029): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @addr={0x1c, 0x3}}, {0x0, 0x0, 0x0, 0x5, @time={0xb, 0x8}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick=0x10000, {0x8}, {0x20, 0x1}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x7ffc, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70) 2.488650372s ago: executing program 5 (id=15158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 2.302458702s ago: executing program 0 (id=15160): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="03"], 0x4) 2.301451312s ago: executing program 6 (id=15161): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c00000400c2800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) 2.282230591s ago: executing program 3 (id=15162): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x30}, &(0x7f0000000040)=0xc) 2.211315931s ago: executing program 1 (id=15163): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYBLOB="0989"], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x2405c084) 2.083537943s ago: executing program 5 (id=15164): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x1, 0x4}) 2.022864068s ago: executing program 4 (id=15165): r0 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={'wlan0\x00', {0x2, 0x0, @broadcast}}) 1.988734066s ago: executing program 0 (id=15166): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1f4, &(0x7f0000000380)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x400327c) 1.909501094s ago: executing program 3 (id=15167): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0x1200) 1.807425147s ago: executing program 6 (id=15168): r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0xfffffffffffffffb, {0x2, 0xff, 0x4}, 0xff}, 0x1d) 1.799597463s ago: executing program 1 (id=15169): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) 1.747877032s ago: executing program 5 (id=15170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009080)={&(0x7f00000090c0)=@newtaction={0x14, 0x4e, 0x334239e91bf4481f, 0x24000, 0x0, {0x0, 0x1b}}, 0x14}}, 0x24000080) 1.612194683s ago: executing program 4 (id=15171): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) getrlimit(0x2, &(0x7f0000000040)) 1.498767932s ago: executing program 3 (id=15172): r0 = io_uring_setup(0x77bb, &(0x7f00000000c0)={0x0, 0xab40, 0x2, 0xf7fffffe, 0x209}) io_uring_enter(r0, 0x800000, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) 1.436918862s ago: executing program 0 (id=15173): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}) 1.367536812s ago: executing program 6 (id=15174): mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x7, 0x8, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8002, &(0x7f0000000240)=0x7, 0x4, 0x0) 1.366940684s ago: executing program 5 (id=15175): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x185402) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1000001000104) 1.277829712s ago: executing program 4 (id=15176): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) 1.078712873s ago: executing program 1 (id=15177): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.074306413s ago: executing program 3 (id=15178): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mq_notify(r0, 0x0) 1.012533562s ago: executing program 0 (id=15179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x6, 0x1f7c, 0x8}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.011757837s ago: executing program 5 (id=15180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x32a13, 0x18081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x20004040) 938.725544ms ago: executing program 6 (id=15181): r0 = add_key(&(0x7f0000002240)='dns_resolver\x00', &(0x7f0000002180)={'syz', 0x3}, &(0x7f0000000080)="ae", 0x57, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 934.661013ms ago: executing program 4 (id=15182): r0 = fanotify_init(0x40, 0x8000) fanotify_mark(r0, 0x221, 0x4800003e, 0xffffffffffffffff, 0x0) 763.126934ms ago: executing program 5 (id=15183): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f28"], 0xe0}], 0x1}, 0x40040) 741.807539ms ago: executing program 0 (id=15184): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x28}}, 0x0) 733.250563ms ago: executing program 1 (id=15185): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0xf, 0x1, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x88) 726.070635ms ago: executing program 3 (id=15186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x2000, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 699.681093ms ago: executing program 6 (id=15187): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$eJzs3U1rE08cB/Dv7KZN+m/pf7UVwYNINWAvovUiXiIlL8KTqE0KxSWitviAYBVPIvbu3aNXX4N4UQTP9eRJPHiqBxmZh2SfN6lmd1P9fsCy2dmZ/e3OzlPALIjon7Xa3n11/ov6JwAXLvDsIuAAaAA1AEdwtLHV29zY9LudvIJcHK+bXAImp0gcs9brpmVtwOawPPWphrnwPiqGlPLS56qDoMrp1i/d6M4Tuieo29apExsVxZfl8f6zfJsBsF1EMBMlv6bEHvZwD/OlhUNERBNJmPHdseP8nJ2/Ow7QtIOJSpu48f937VUdQOFkbmpo/NerLClUvf+vk4L1nl7CqXSnv0pMK+t17PNU7PM0zNMTmV2KYatKHYszs77hd8+s3fQ7Dp6gZYUOW9R/O/bxtCLR1hNFL6WsTXMMSpvJPESkzyhn9TVMqWtYMfHfBRCJfyH3jAUQ78QHcUV4eInOYP5Xk0JVk64pL1ZTJv6z2SXqq/TUUbDdRqvVciKHHNInOWbPYA25ygbcrDNO2zIjXxB4w+LUuQ7HcpmrOzck10JqrhW9vQwnI9diJJe6mvUN/232qUohXojLYglf8Qbt0PzfUfE1kWyZoYc+aDWiaYYCfcdV64zWbEitaXsiPXJsfdp9aPYnm8vgLiYbrPUjv0+jfXiO67iA+Tv3H9xwfb97W21c89XjqjcGe27N2Q2/O/UUCCdNyga2gz11SC1xcH9QKjOw5bEWqPqPlCTVsHrf+3tUKxtW4KM/jUf1A4XeutkRrmJ/G/2uazwFtt+P50HqTxsiST+llCU2oh17Z+JJ1XRLVK6g0kc7PmWqQwebqlJh1n/BeqVmJnvqj5c6Tx/xiwBbolRz7MEKLsgrzYwcwH85K7i0YjNXcMk1V2LNqNdcJ08Dp0Y/o2fj/EuINj7iKr//JyIiIiIiIiIiIiIiIiIiIiIiIiI6aMr4zzBVXyMRERERERERERERERERERERERERERER0UG32oD53Wv03/+L0d7/G38Vi2t+Enws7//d6YHv/yUq3q8AAAD///B/c8c=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 582.65893ms ago: executing program 4 (id=15188): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d80)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0xa8, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00', 0x25}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 380.266996ms ago: executing program 1 (id=15189): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x0, 0x6, 0x50}) 373.561281ms ago: executing program 0 (id=15190): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) 274.485866ms ago: executing program 4 (id=15191): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000006c0)={'veth1_virt_wifi\x00', 0x8, 0x8}) 99.589387ms ago: executing program 3 (id=15192): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'dummy0\x00', @broadcast}) 519.134µs ago: executing program 6 (id=15193): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) 0s ago: executing program 1 (id=15194): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a18344b265ba7f20e413597129961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb25d74b2d6ca22909ed50d079f0b070000004d0012"], 0xb4}}, 0x0) kernel console output (not intermixed with test programs): usb 6-1: config 8 interface 177 has no altsetting 0 [ 1509.408530][T28524] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1509.425157][T28524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.470402][ T2393] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1509.605695][ T2408] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.12649'. [ 1509.733714][T28524] usb 6-1: string descriptor 0 read error: -71 [ 1509.779434][ C0] ir_toy 6-1:8.177: out urb status: -71 [ 1509.864986][ T5916] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1510.058707][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 1510.081446][ T5916] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1510.114887][ T5916] usb 2-1: config 0 has no interface number 0 [ 1510.140096][ T5916] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1510.165259][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.191672][ T5916] usb 2-1: Product: syz [ 1510.206778][ T5916] usb 2-1: Manufacturer: syz [ 1510.223215][ T5916] usb 2-1: SerialNumber: syz [ 1510.265445][ T5916] usb 2-1: config 0 descriptor?? [ 1510.324630][T28524] ir_toy 6-1:8.177: could not write reset command: -110 [ 1510.361025][T28524] ir_toy 6-1:8.177: probe with driver ir_toy failed with error -110 [ 1510.428211][T28524] usb 6-1: USB disconnect, device number 76 [ 1510.477219][ T2438] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1510.555773][ T5916] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1510.559530][ T30] audit: type=1326 audit(2000000917.886:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.4.12662" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea7b9ce59 code=0x7ffc0000 [ 1510.585471][ T5916] uvcvideo 2-1:0.31: Failed to initialize entity for entity 32774 [ 1510.609546][ T5916] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 1510.682945][ T30] audit: type=1326 audit(2000000917.886:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.4.12662" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea7b9ce59 code=0x7ffc0000 [ 1510.785055][ T2445] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12664'. [ 1510.834734][ T30] audit: type=1326 audit(2000000917.933:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.4.12662" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7feea7b9ce59 code=0x7ffc0000 [ 1510.877206][ T5778] usb 2-1: USB disconnect, device number 76 [ 1510.973041][ T30] audit: type=1326 audit(2000000917.933:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.4.12662" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea7b9ce59 code=0x7ffc0000 [ 1511.784700][ T2483] netlink: 820 bytes leftover after parsing attributes in process `syz.6.12678'. [ 1511.825857][ T2474] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 1511.845793][ T2483] netlink: 820 bytes leftover after parsing attributes in process `syz.6.12678'. [ 1512.688801][ T2506] bond1: entered allmulticast mode [ 1512.694907][ T2506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1512.962938][ T2520] loop0: detected capacity change from 0 to 512 [ 1513.048922][ T2529] IPv6: NLM_F_CREATE should be specified when creating new route [ 1513.082699][ T2520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1513.163221][ T2520] ext4 filesystem being mounted at /2147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1513.427939][ T5649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1513.501160][ T2541] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1513.683276][ T2547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1514.316951][ T2568] bridge2: entered promiscuous mode [ 1514.682253][ T2584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12718'. [ 1514.731044][ T2584] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1514.776309][ T2584] netlink: 128 bytes leftover after parsing attributes in process `syz.6.12718'. [ 1515.695368][ T29] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1515.716106][ T2625] bridge6: entered promiscuous mode [ 1515.718577][ T2630] netlink: 'syz.6.12737': attribute type 1 has an invalid length. [ 1515.869738][ T2636] loop0: detected capacity change from 0 to 64 [ 1515.886512][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 1515.918087][ T29] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1515.948309][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.017671][ T29] usb 2-1: config 0 descriptor?? [ 1516.062086][ T29] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1516.109637][ T2643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12740'. [ 1516.185731][ T2643] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1516.220048][ T2643] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12740'. [ 1516.537041][ T29] gspca_sonixj: reg_r err -71 [ 1516.570003][ T29] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1516.629309][ T29] usb 2-1: USB disconnect, device number 77 [ 1517.002306][ T2667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12764'. [ 1517.305425][ T2673] loop6: detected capacity change from 0 to 2048 [ 1517.348027][ T2673] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1517.433494][ T30] audit: type=1326 audit(2000000924.309:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2680 comm="syz.1.12757" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1517.599083][ T30] audit: type=1326 audit(2000000924.309:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2680 comm="syz.1.12757" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1517.752760][ T30] audit: type=1326 audit(2000000924.366:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2680 comm="syz.1.12757" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1517.861789][ T30] audit: type=1326 audit(2000000924.366:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2680 comm="syz.1.12757" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1518.000898][ T30] audit: type=1326 audit(2000000924.366:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2680 comm="syz.1.12757" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1518.404093][ T2715] binder: 2714:2715 ioctl c0306201 200000000540 returned -22 [ 1518.439034][ T5778] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1518.616591][ T5778] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1518.631353][ T2724] tipc: Can't bind to reserved service type 1 [ 1518.670263][ T5778] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1518.705735][ T5778] usb 6-1: Product: syz [ 1518.742382][ T5778] usb 6-1: config 0 descriptor?? [ 1518.783641][ T5778] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1518.836805][ T5778] usb 6-1: Detected FT232H [ 1519.033577][ T5778] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1519.075651][ T5778] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1519.113013][ T5778] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1519.134809][ T2742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12781'. [ 1519.151599][ T5778] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1519.188737][ T5778] usb 6-1: USB disconnect, device number 77 [ 1519.228755][ T5778] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1519.314353][ T5778] ftdi_sio 6-1:0.0: device disconnected [ 1519.528767][ T2756] Cannot find add_set index 1 as target [ 1519.824118][ T2764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12791'. [ 1519.909498][ T2770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12793'. [ 1520.194984][ T2779] autofs4:pid:2779:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 1520.285378][ T2786] netlink: 2120 bytes leftover after parsing attributes in process `syz.5.12800'. [ 1520.758371][ T5798] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1520.960064][ T5798] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1521.001140][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.041899][ T5798] usb 1-1: Product: syz [ 1521.062801][ T5798] usb 1-1: Manufacturer: syz [ 1521.087784][ T5798] usb 1-1: SerialNumber: syz [ 1521.129793][ T5798] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1521.167117][ T5778] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1521.386829][ T5916] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1521.583887][ T5916] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1521.611220][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1521.622947][ T5916] usb 2-1: Product: syz [ 1521.638173][ T443] usb 1-1: USB disconnect, device number 61 [ 1521.647136][ T5916] usb 2-1: config 0 descriptor?? [ 1521.683320][ T5916] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1521.727728][ T5916] usb 2-1: Detected FT232H [ 1521.919825][ T5916] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1521.949956][ T5916] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1521.969052][ T5916] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1521.979248][ T5916] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1521.995218][ T5916] usb 2-1: USB disconnect, device number 78 [ 1522.019444][ T5916] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1522.069890][ T5916] ftdi_sio 2-1:0.0: device disconnected [ 1522.236118][ T2828] loop6: detected capacity change from 0 to 32768 [ 1522.515955][ T5778] usb 1-1: Service connection timeout for: 256 [ 1522.548609][ T5778] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1522.587650][ T5778] ath9k_htc: Failed to initialize the device [ 1522.625206][ T443] usb 1-1: ath9k_htc: USB layer deinitialized [ 1522.802602][ T2866] netlink: 'syz.4.12830': attribute type 4 has an invalid length. [ 1523.320678][ T2890] autofs4:pid:2890:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 1523.649894][ T2902] SET target dimension over the limit! [ 1523.697601][ T2904] IPv6: sit2: Disabled Multicast RS [ 1523.735034][ T2904] sit2: entered allmulticast mode [ 1524.212289][ T2920] QAT: Stopping all acceleration devices. [ 1524.600136][ T2933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12857'. [ 1524.771378][ T2941] loop6: detected capacity change from 0 to 128 [ 1524.807397][ T2941] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1524.883402][ T2941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1525.193622][ T5798] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1525.387076][ T5798] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1525.433542][ T5798] usb 1-1: config 8 has no interface number 0 [ 1525.468374][ T5798] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1525.513190][ T5798] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1525.547432][ T5798] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1525.585018][ T5798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.633721][ T2944] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1525.904847][ T5798] usb 1-1: string descriptor 0 read error: -71 [ 1525.943995][ C1] ir_toy 1-1:8.177: out urb status: -71 [ 1526.482752][ T5798] ir_toy 1-1:8.177: could not write reset command: -110 [ 1526.517088][ T5798] ir_toy 1-1:8.177: probe with driver ir_toy failed with error -110 [ 1526.549385][ T5798] usb 1-1: USB disconnect, device number 62 [ 1526.757177][ T3004] netlink: 2120 bytes leftover after parsing attributes in process `syz.4.12891'. [ 1527.398375][ T3021] IPv6: sit1: Disabled Multicast RS [ 1527.417917][ T3021] sit1: entered allmulticast mode [ 1527.451812][ T3022] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1528.105631][ T443] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1528.290401][ T443] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1528.315729][ T3044] netlink: 2120 bytes leftover after parsing attributes in process `syz.6.12910'. [ 1528.320310][ T443] usb 2-1: config 8 has no interface number 0 [ 1528.361329][ T443] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1528.405529][ T443] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1528.437759][ T443] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1528.473208][ T443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.520122][ T3036] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1528.764354][ T443] usb 2-1: string descriptor 0 read error: -71 [ 1528.798298][ C0] ir_toy 2-1:8.177: out urb status: -71 [ 1529.333691][ T443] ir_toy 2-1:8.177: could not write reset command: -110 [ 1529.366041][ T443] ir_toy 2-1:8.177: probe with driver ir_toy failed with error -110 [ 1529.420574][ T443] usb 2-1: USB disconnect, device number 79 [ 1530.044929][ T3083] loop0: detected capacity change from 0 to 4096 [ 1530.089732][ T3083] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1530.172461][ T3089] QAT: Stopping all acceleration devices. [ 1530.206772][ T3083] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 1530.870210][ T3109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12942'. [ 1531.455765][ T3124] program syz.1.12948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1531.793052][ T3129] dlm: no local IP address has been set [ 1531.805142][ T3128] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12952'. [ 1531.903183][ T3129] dlm: cannot start dlm midcomms -107 [ 1533.139215][ T3161] loop0: detected capacity change from 0 to 1024 [ 1533.181968][ T3161] EXT4-fs: inline encryption not supported [ 1533.235552][ T3161] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1533.333678][ T3161] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.12965: lblock 2 mapped to illegal pblock 2 (length 1) [ 1533.454855][ T3161] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1533.455295][ T3161] EXT4-fs (loop0): Remounting filesystem read-only [ 1533.464577][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1533.464614][ C1] EXT4-fs (loop0): initial error at time 2000000939: ext4_map_blocks:791: inode 3: block 2 [ 1533.464687][ C1] EXT4-fs (loop0): last error at time 2000000939: ext4_map_blocks:791: inode 3: block 2 [ 1533.522564][ T3161] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1533.533801][ T3161] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1533.601139][ T3161] EXT4-fs (loop0): 1 orphan inode deleted [ 1533.650041][ T3161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1533.836259][ T3161] Quota error (device loop0): find_next_id: Can't read quota tree block 1 [ 1534.100875][ T5649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.544075][ T3230] xfrm0: entered promiscuous mode [ 1535.611609][ T3230] xfrm0: entered allmulticast mode [ 1535.698549][ T29] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1535.896011][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1535.933270][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1535.972024][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1536.001460][ T29] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1536.021034][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.031668][ T29] usb 5-1: Product: syz [ 1536.046279][ T29] usb 5-1: Manufacturer: syz [ 1536.063909][ T29] usb 5-1: SerialNumber: syz [ 1536.100249][ T29] usb 5-1: config 0 descriptor?? [ 1536.141323][ T3226] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1536.193801][ T3226] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1536.263846][ T29] usb 5-1: ucan: probing device on interface #0 [ 1536.551443][ T3253] loop0: detected capacity change from 0 to 1024 [ 1536.810231][ T29] usb 5-1: ucan: failed to retrieve device info [ 1536.850323][ T29] usb 5-1: ucan: probe failed; try to update the device firmware [ 1536.944126][ T29] usb 5-1: USB disconnect, device number 58 [ 1537.435166][ T3264] loop6: detected capacity change from 0 to 512 [ 1537.600047][ T3264] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1537.705542][ T3264] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1537.715344][ T3264] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1537.731547][ T3264] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1537.761046][ T3264] EXT4-fs warning (device loop6): ext4_enable_quotas:7265: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1537.896728][ T3264] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1537.956846][ T3264] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.13008: bg 0: block 40: padding at end of block bitmap is not set [ 1538.070516][ T3264] loop6: lost filesystem error report for type 5 error -117 [ 1538.075560][ T3264] EXT4-fs (loop6): Remounting filesystem read-only [ 1538.083209][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1538.083258][ C0] EXT4-fs (loop6): initial error at time 2000000943: ext4_validate_block_bitmap:440 [ 1538.083303][ C0] EXT4-fs (loop6): last error at time 2000000943: ext4_validate_block_bitmap:440 [ 1538.207994][ T3264] EXT4-fs (loop6): 1 truncate cleaned up [ 1538.330798][ T3264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1538.420118][ T3287] openvswitch: netlink: Multiple metadata blocks provided [ 1539.087625][ T953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.319162][ T5916] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1539.571207][ T5916] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1539.605486][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.633686][ T3308] bond5: Removing last ns target with arp_interval on [ 1539.670913][ T5916] usb 4-1: config 0 has no interface number 0 [ 1539.709849][ T5916] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1539.754016][ T5916] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1539.812958][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.848035][ T5916] usb 4-1: Product: syz [ 1539.865745][ T5916] usb 4-1: Manufacturer: syz [ 1539.884930][ T5916] usb 4-1: SerialNumber: syz [ 1539.931253][ T5916] usb 4-1: config 0 descriptor?? [ 1540.254378][ T3322] netlink: 'syz.6.13036': attribute type 4 has an invalid length. [ 1540.489609][ T29] usb 4-1: USB disconnect, device number 76 [ 1540.514390][ T29] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1540.664886][ T5916] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1540.730938][ T3333] loop0: detected capacity change from 0 to 16 [ 1540.805610][ T3333] erofs (device loop0): mounted with root inode @ nid 36. [ 1540.920719][ T5916] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1540.974625][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.021489][ T5916] usb 5-1: Product: syz [ 1541.053790][ T3336] loop6: detected capacity change from 0 to 1024 [ 1541.070151][ T5916] usb 5-1: Manufacturer: syz [ 1541.094014][ T5916] usb 5-1: SerialNumber: syz [ 1541.162161][ T5916] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1541.254767][T28524] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1542.094644][ T5798] usb 5-1: USB disconnect, device number 59 [ 1542.683524][ T5778] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1542.700757][ T3359] netlink: 'syz.3.13055': attribute type 4 has an invalid length. [ 1542.855444][T28524] usb 5-1: Service connection timeout for: 256 [ 1542.868751][ T5778] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 1542.887389][ T5778] usb 1-1: config 0 has no interface number 0 [ 1542.889191][T28524] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1542.905864][ T5778] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1542.940961][T28524] ath9k_htc: Failed to initialize the device [ 1542.970523][ T5778] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1542.989123][ T5798] usb 5-1: ath9k_htc: USB layer deinitialized [ 1543.019641][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.054377][ T5778] usb 1-1: Product: syz [ 1543.064828][ T5778] usb 1-1: Manufacturer: syz [ 1543.083024][ T5778] usb 1-1: SerialNumber: syz [ 1543.104675][ T5778] usb 1-1: config 0 descriptor?? [ 1543.181578][ T5778] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 1543.425665][ C1] yurex 1-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1543.643622][ T1658] usb 1-1: USB disconnect, device number 63 [ 1543.687631][ T1658] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 1544.466722][ T3401] loop0: detected capacity change from 0 to 164 [ 1545.134917][ T3419] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1545.636951][ T3434] ip6tnl1: entered promiscuous mode [ 1546.421076][ T3460] loop0: detected capacity change from 0 to 256 [ 1546.865985][ T3431] loop6: detected capacity change from 0 to 32768 [ 1546.973193][ T3431] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1547.032803][ T3470] nvme_fabrics: missing parameter 'transport=%s' [ 1547.044419][ T3470] nvme_fabrics: missing parameter 'nqn=%s' [ 1547.271137][ T3489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13115'. [ 1547.291697][ T3489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13115'. [ 1547.316447][ T3431] XFS (loop6): Ending clean mount [ 1547.323575][ T3489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13115'. [ 1547.349916][ T3431] XFS (loop6): Quotacheck needed: Please wait. [ 1547.829688][ T3431] XFS (loop6): Quotacheck: Done. [ 1548.029460][ T953] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1548.093981][ T3502] bond4: Removing last ns target with arp_interval on [ 1548.423460][ T3516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1548.631584][ T3522] ip6tnl1: entered promiscuous mode [ 1549.372957][ T3545] netlink: 'syz.1.13140': attribute type 1 has an invalid length. [ 1549.570303][ T3553] bond2: Removing last ns target with arp_interval on [ 1549.913032][ T3565] ip6tnl2: entered promiscuous mode [ 1549.980539][ T3569] loop0: detected capacity change from 0 to 2048 [ 1550.061490][ T3569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1550.158089][ T3573] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1550.178668][ T30] audit: type=1800 audit(2000000954.973:227): pid=3569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13150" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 1550.206898][ T3576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13153'. [ 1550.257675][ T3576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13153'. [ 1550.312665][ T3576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13153'. [ 1550.717392][ T3591] netlink: 'syz.6.13163': attribute type 1 has an invalid length. [ 1551.236129][ T3614] loop0: detected capacity change from 0 to 64 [ 1551.986787][ T3644] netlink: 'syz.0.13185': attribute type 1 has an invalid length. [ 1552.217062][ T3652] misc userio: Invalid payload size [ 1552.554150][ T3663] 9p: Unknown access argument o: -22 [ 1552.644227][ T3669] kernel profiling enabled (shift: 5) [ 1552.677136][ T3670] netlink: 'syz.0.13200': attribute type 1 has an invalid length. [ 1552.702077][ T3670] netlink: 'syz.0.13200': attribute type 3 has an invalid length. [ 1552.740148][ T3670] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13200'. [ 1553.045313][ T3680] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1553.239277][ T3686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1553.804396][ T5916] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1553.977507][ T3710] netlink: 'syz.0.13221': attribute type 1 has an invalid length. [ 1553.990918][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13224'. [ 1554.010066][ T5916] usb 6-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1554.019721][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13224'. [ 1554.032087][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.058021][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13224'. [ 1554.076607][ T5916] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 1554.374137][ T3724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1554.547691][ T5916] gspca_sn9c20x: Write register 1001 failed -71 [ 1554.578253][ T5916] gspca_sn9c20x: Device initialization failed [ 1554.608417][ T5916] gspca_sn9c20x 6-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 1554.661259][ T5916] usb 6-1: USB disconnect, device number 78 [ 1554.745517][ T3734] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13232'. [ 1554.798877][ T3734] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13232'. [ 1555.075197][ T3746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13239'. [ 1555.134042][ T3746] bridge_slave_1: left allmulticast mode [ 1555.165467][ T3746] bridge_slave_1: left promiscuous mode [ 1555.207825][ T3746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.228745][ T3750] netlink: 'syz.3.13241': attribute type 11 has an invalid length. [ 1555.317728][ T3746] bridge_slave_0: left allmulticast mode [ 1555.342392][ T3746] bridge_slave_0: left promiscuous mode [ 1555.372078][ T3746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.581565][ T3755] nvme_fabrics: missing parameter 'transport=%s' [ 1555.614554][ T3755] nvme_fabrics: missing parameter 'nqn=%s' [ 1555.660308][ T3763] vti0: entered promiscuous mode [ 1555.683860][ T3763] vti0: entered allmulticast mode [ 1556.559043][ T5778] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1556.741864][ T5778] usb 1-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1556.773889][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.812118][ T5778] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 1557.160178][ T3820] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1557.253212][ T5778] gspca_sn9c20x: Write register 1001 failed -71 [ 1557.282473][ T5778] gspca_sn9c20x: Device initialization failed [ 1557.319492][ T5778] gspca_sn9c20x 1-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 1557.365745][ T5778] usb 1-1: USB disconnect, device number 64 [ 1557.601614][ T3833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1557.703850][ T3835] loop6: detected capacity change from 0 to 2048 [ 1557.753811][ T3840] netlink: 'syz.4.13282': attribute type 1 has an invalid length. [ 1557.776628][ T3835] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1557.784612][ T3840] netlink: 'syz.4.13282': attribute type 3 has an invalid length. [ 1557.824060][ T3840] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13282'. [ 1557.918746][ T30] audit: type=1800 audit(2000000962.220:228): pid=3835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13280" name="file1" dev="loop6" ino=1367 res=0 errno=0 [ 1558.163665][ T30] audit: type=1326 audit(2000000962.454:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz.1.13291" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1558.241089][ T30] audit: type=1326 audit(2000000962.454:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz.1.13291" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1558.275457][ T3856] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1558.347522][ T30] audit: type=1326 audit(2000000962.454:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz.1.13291" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1558.463548][ T30] audit: type=1326 audit(2000000962.454:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz.1.13291" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1558.605583][ T30] audit: type=1326 audit(2000000962.454:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz.1.13291" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1558.656761][ T3863] bridge4: entered promiscuous mode [ 1558.688316][ T30] audit: type=1326 audit(2000000962.454:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz.1.13291" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1558.691957][ T3863] bridge4: entered allmulticast mode [ 1558.881661][ T30] audit: type=1326 audit(2000000962.454:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz.1.13291" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1558.966856][ T30] audit: type=1326 audit(2000000962.454:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz.1.13291" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1559.083207][ T3880] loop6: detected capacity change from 0 to 2048 [ 1559.083331][ T30] audit: type=1326 audit(2000000962.454:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3851 comm="syz.1.13291" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1559.127419][ T3880] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1559.195938][ T3882] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1559.202583][ T3885] dlm: no locking on control device [ 1559.410081][ T3880] NILFS (loop6): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1559.589538][ T3880] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1559.620775][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13311'. [ 1559.663385][ T3897] bridge_slave_1: left allmulticast mode [ 1559.705490][ T3897] bridge_slave_1: left promiscuous mode [ 1559.728469][ T3897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.756127][ T3880] Remounting filesystem read-only [ 1559.765495][ T3880] NILFS (loop6): error -5 truncating bmap (ino=16) [ 1559.765834][ T3897] bridge_slave_0: left allmulticast mode [ 1559.795002][ T3897] bridge_slave_0: left promiscuous mode [ 1559.820050][ T3897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.950464][ T953] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 1560.278041][ T3914] vti0: entered promiscuous mode [ 1560.291765][ T3914] vti0: entered allmulticast mode [ 1560.567338][ T3927] comedi comedi4: bad chanlist[0]=0x04410007 chan=7 range length=2 [ 1560.623239][ T3931] netlink: 'syz.5.13326': attribute type 1 has an invalid length. [ 1560.659761][ T3931] netlink: 'syz.5.13326': attribute type 3 has an invalid length. [ 1560.700511][ T3931] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13326'. [ 1561.000611][ T3943] netlink: 'syz.4.13335': attribute type 1 has an invalid length. [ 1562.037975][ T3981] No such timeout policy "syz0" [ 1562.609730][ T3999] loop0: detected capacity change from 0 to 256 [ 1562.647067][ T3999] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1563.028371][ T4010] dlm: no locking on control device [ 1563.263962][ T4014] loop0: detected capacity change from 0 to 256 [ 1563.316899][ T4020] openvswitch: netlink: IP tunnel dst address not specified [ 1563.338588][ T4023] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1563.681126][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13375'. [ 1563.726133][ T4029] bridge_slave_1: left allmulticast mode [ 1563.763647][ T4029] bridge_slave_1: left promiscuous mode [ 1563.806508][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.908073][ T4029] bridge_slave_0: left allmulticast mode [ 1563.931888][ T4029] bridge_slave_0: left promiscuous mode [ 1563.973719][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.255319][ T4035] bridge4: entered promiscuous mode [ 1564.277262][ T4035] bridge4: entered allmulticast mode [ 1564.857993][ T4067] comedi comedi4: bad chanlist[0]=0x04410007 chan=7 range length=2 [ 1565.272880][ T4084] netlink: 'syz.0.13400': attribute type 1 has an invalid length. [ 1566.466562][ T4126] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1566.491879][ T4128] netlink: 'syz.0.13423': attribute type 1 has an invalid length. [ 1566.722336][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1566.722364][ T30] audit: type=1326 audit(2000000970.460:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4133 comm="syz.6.13425" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c0d9ce59 code=0x7ffc0000 [ 1566.857739][ T30] audit: type=1326 audit(2000000970.507:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4133 comm="syz.6.13425" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f95c0d9ce59 code=0x7ffc0000 [ 1566.911071][ T4142] loop0: detected capacity change from 0 to 128 [ 1566.955419][ T30] audit: type=1326 audit(2000000970.507:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4133 comm="syz.6.13425" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c0d9ce59 code=0x7ffc0000 [ 1567.007296][ T4142] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1567.067297][ T4142] ext4 filesystem being mounted at /2270/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1567.078199][ T30] audit: type=1326 audit(2000000970.507:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4133 comm="syz.6.13425" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c0d9ce59 code=0x7ffc0000 [ 1567.167015][ T4150] No such timeout policy "syz0" [ 1567.245111][ T5649] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1567.531786][ T4161] openvswitch: netlink: IP tunnel dst address not specified [ 1567.904553][ T4168] erspan1: entered promiscuous mode [ 1567.939772][ T4168] erspan1: entered allmulticast mode [ 1568.282833][ T4181] loop0: detected capacity change from 0 to 2048 [ 1568.305251][ T4181] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1568.415932][ T4191] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1568.499874][ T29] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1568.503141][ T4181] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1568.551263][ T4181] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1568.625586][ T4181] Remounting filesystem read-only [ 1568.662255][ T4181] NILFS (loop0): error -5 truncating bmap (ino=16) [ 1568.685232][ T4196] loop6: detected capacity change from 0 to 1024 [ 1568.703971][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 1568.738494][ T29] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1568.795327][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1568.844192][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1568.889189][ T4200] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1568.912856][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1568.962047][ T5649] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1569.006460][ T29] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1569.073493][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.099366][ T29] usb 6-1: Product: syz [ 1569.127266][ T29] usb 6-1: Manufacturer: syz [ 1569.162369][ T29] usb 6-1: SerialNumber: syz [ 1569.218675][ T29] usb 6-1: config 0 descriptor?? [ 1569.265889][ T4184] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1569.661929][ T29] appledisplay 6-1:0.0: Error while getting initial brightness: -71 [ 1569.703958][ T29] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -71 [ 1569.732652][ T29] usb 6-1: USB disconnect, device number 79 [ 1569.823640][ T4217] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1570.084269][ T4229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1570.921421][ T30] audit: type=1326 audit(2000000974.392:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.1.13481" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1571.023644][ T30] audit: type=1326 audit(2000000974.392:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.1.13481" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1571.120067][ T30] audit: type=1326 audit(2000000974.402:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.1.13481" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1571.201450][ T4261] netlink: 'syz.6.13485': attribute type 1 has an invalid length. [ 1571.240446][ T30] audit: type=1326 audit(2000000974.402:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.1.13481" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1571.352512][ T30] audit: type=1326 audit(2000000974.411:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.1.13481" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa641d9ce59 code=0x7ffc0000 [ 1571.379101][ T4267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1571.486672][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13490'. [ 1571.818554][ T4282] erspan1: entered promiscuous mode [ 1571.843944][ T4282] erspan1: entered allmulticast mode [ 1572.464693][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13504'. [ 1572.512163][ T4305] netlink: 'syz.4.13506': attribute type 1 has an invalid length. [ 1572.701993][ T4311] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1573.738705][ T4348] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1574.074650][ T4355] loop0: detected capacity change from 0 to 256 [ 1574.226148][ T4355] FAT-fs (loop0): Directory bread(block 64) failed [ 1574.246151][ T4355] FAT-fs (loop0): Directory bread(block 65) failed [ 1574.271909][ T4355] FAT-fs (loop0): Directory bread(block 66) failed [ 1574.301478][ T4355] FAT-fs (loop0): Directory bread(block 67) failed [ 1574.351465][ T4355] FAT-fs (loop0): Directory bread(block 68) failed [ 1574.390376][ T4355] FAT-fs (loop0): Directory bread(block 69) failed [ 1574.427381][ T4355] FAT-fs (loop0): Directory bread(block 70) failed [ 1574.450481][ T4355] FAT-fs (loop0): Directory bread(block 71) failed [ 1574.482082][ T4355] FAT-fs (loop0): Directory bread(block 72) failed [ 1574.501600][ T4355] FAT-fs (loop0): Directory bread(block 73) failed [ 1574.649655][ T29] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1574.837856][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1574.874828][ T29] usb 2-1: not running at top speed; connect to a high speed hub [ 1574.916411][ T29] usb 2-1: config 197 has an invalid interface number: 211 but max is 0 [ 1574.958534][ T29] usb 2-1: config 197 has no interface number 0 [ 1574.980018][ T29] usb 2-1: config 197 interface 211 has no altsetting 0 [ 1575.004541][ T29] usb 2-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=3f.c6 [ 1575.035879][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.060111][ T29] usb 2-1: Product: syz [ 1575.077734][ T29] usb 2-1: Manufacturer: syz [ 1575.101363][ T29] usb 2-1: SerialNumber: syz [ 1575.364025][ T29] upd78f0730 2-1:197.211: upd78f0730 converter detected [ 1575.408610][ T29] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 1575.454184][ T29] usb 2-1: USB disconnect, device number 80 [ 1575.488428][ T29] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1575.498398][ T29] upd78f0730 2-1:197.211: device disconnected [ 1575.589603][T28524] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1575.792665][T28524] usb 7-1: Using ep0 maxpacket: 16 [ 1575.815584][T28524] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1575.849600][T28524] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1575.881089][T28524] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1575.906716][T28524] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1575.950503][T28524] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1575.977148][T28524] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.012605][T28524] usb 7-1: Product: syz [ 1576.024334][T28524] usb 7-1: Manufacturer: syz [ 1576.052300][T28524] usb 7-1: SerialNumber: syz [ 1576.105652][T28524] usb 7-1: config 0 descriptor?? [ 1576.134582][ T4400] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1576.403537][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13568'. [ 1576.457639][T28524] appledisplay 7-1:0.0: Error while getting initial brightness: -71 [ 1576.506342][ T4435] netlink: 'syz.4.13571': attribute type 10 has an invalid length. [ 1576.513620][ C0] usb 7-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 1576.554438][T28524] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -71 [ 1576.643712][T28524] usb 7-1: USB disconnect, device number 3 [ 1576.762553][ T4435] team0: Port device dummy0 added [ 1577.050953][ T4449] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1577.162815][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13577'. [ 1577.888001][ T4474] loop6: detected capacity change from 0 to 2048 [ 1578.023628][ T4481] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1578.838674][ T29] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1578.858007][ T443] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1579.028537][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 1579.046322][ T443] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.055901][ T29] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1579.094719][ T443] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1579.113568][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1579.119065][ T443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.155607][ T443] usb 6-1: Product: syz [ 1579.164770][ T443] usb 6-1: Manufacturer: syz [ 1579.172349][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1579.201013][ T443] usb 6-1: SerialNumber: syz [ 1579.208757][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1579.248906][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1579.261537][ T443] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1579.291318][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.322835][ T29] usb 5-1: Product: syz [ 1579.344439][ T29] usb 5-1: Manufacturer: syz [ 1579.369160][ T29] usb 5-1: SerialNumber: syz [ 1579.392518][ T29] usb 5-1: config 0 descriptor?? [ 1579.406728][ T4494] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1579.415062][ T5778] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1579.589021][ T5778] usb 1-1: Using ep0 maxpacket: 16 [ 1579.611709][ T5778] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1579.623233][ T5778] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.635063][ T5778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1579.645944][ T5778] usb 1-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 1579.686097][ T443] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1579.710410][ T5778] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1579.723759][ T29] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 1579.754949][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.779419][ T29] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 1579.790464][ T443] usb 6-1: USB disconnect, device number 80 [ 1579.797586][ T5778] usb 1-1: Product: syz [ 1579.806151][ T5778] usb 1-1: Manufacturer: syz [ 1579.829175][ T5778] usb 1-1: SerialNumber: syz [ 1579.886596][ T29] usb 5-1: USB disconnect, device number 60 [ 1580.111100][ T5778] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1580.138249][ T5778] cdc_ncm 1-1:1.0: bind() failure [ 1580.181285][ T5778] usb 1-1: USB disconnect, device number 65 [ 1580.950722][ T4563] netlink: 'syz.0.13633': attribute type 10 has an invalid length. [ 1581.035236][ T4563] team0: Port device dummy0 added [ 1581.088074][ T4567] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1581.315335][ T443] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1581.371003][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13640'. [ 1581.498730][ T443] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1581.523578][ T30] audit: type=1326 audit(2000000984.317:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.13645" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232f9ce59 code=0x7ffc0000 [ 1581.568826][ T443] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1581.597165][ T443] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.630685][ T443] usb 6-1: config 220 has no interface number 2 [ 1581.641736][ T30] audit: type=1326 audit(2000000984.317:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.13645" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232f9ce59 code=0x7ffc0000 [ 1581.680703][ T443] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1581.725275][ T443] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1581.748772][ T30] audit: type=1326 audit(2000000984.354:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.13645" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f9232f9ce59 code=0x7ffc0000 [ 1581.776666][ T443] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1581.797818][ T443] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1581.839770][ T443] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1581.858999][ T30] audit: type=1326 audit(2000000984.354:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.13645" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232f9ce59 code=0x7ffc0000 [ 1581.896036][ T443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.918471][ T443] usb 6-1: Product: syz [ 1581.931397][ T443] usb 6-1: Manufacturer: syz [ 1581.950914][ T443] usb 6-1: SerialNumber: syz [ 1581.971249][ T30] audit: type=1326 audit(2000000984.354:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.13645" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9232f9ce59 code=0x7ffc0000 [ 1582.232005][ T443] usb 6-1: selecting invalid altsetting 0 [ 1582.278592][ T443] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1582.310872][ T443] uvcvideo 6-1:220.0: No valid video chain found. [ 1582.388596][ T443] usb 6-1: selecting invalid altsetting 0 [ 1582.419831][ T443] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1582.509364][ T443] usb 6-1: USB disconnect, device number 81 [ 1582.527326][ T4599] lo speed is unknown, defaulting to 1000 [ 1583.214221][ T4622] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1583.547659][ T1658] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1583.738937][ T1658] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1583.746605][ T4640] loop0: detected capacity change from 0 to 64 [ 1583.765910][ T1658] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.781076][ T1658] usb 7-1: Product: syz [ 1583.790873][ T1658] usb 7-1: Manufacturer: syz [ 1583.814297][ T1658] usb 7-1: SerialNumber: syz [ 1583.837297][ T1658] usb 7-1: config 0 descriptor?? [ 1583.859954][ T1658] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 004 [ 1584.019746][ T4647] netlink: 'syz.5.13673': attribute type 10 has an invalid length. [ 1584.045121][ T4647] team0: Port device dummy0 added [ 1584.131312][ T4649] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1584.350861][ T1658] (null): failure reading functionality [ 1584.403421][ T1658] i2c i2c-1: failure reading functionality [ 1584.598707][ T1658] i2c i2c-1: connected i2c-tiny-usb device [ 1584.638373][ T1658] usb 7-1: USB disconnect, device number 4 [ 1584.983297][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13687'. [ 1585.225030][ T1658] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1585.417202][ T1658] usb 1-1: Using ep0 maxpacket: 16 [ 1585.448356][ T1658] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1585.475129][ T4690] netlink: 'syz.5.13695': attribute type 5 has an invalid length. [ 1585.475322][ T1658] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1585.561152][ T1658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1585.626798][ T1658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1585.669532][ T1658] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1585.706226][ T1658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.732712][ T1658] usb 1-1: Product: syz [ 1585.749703][ T1658] usb 1-1: Manufacturer: syz [ 1585.773032][ T1658] usb 1-1: SerialNumber: syz [ 1585.802947][ T1658] usb 1-1: config 0 descriptor?? [ 1585.834765][ T4672] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1586.072196][ T4703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13702'. [ 1586.132218][ T1658] appledisplay 1-1:0.0: Error while getting initial brightness: -71 [ 1586.218989][ T1658] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -71 [ 1586.294439][ T1658] usb 1-1: USB disconnect, device number 66 [ 1586.674682][ T30] audit: type=1326 audit(2000000989.148:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.6.13708" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c0d9ce59 code=0x7ffc0000 [ 1586.783108][ T30] audit: type=1326 audit(2000000989.148:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.6.13708" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c0d9ce59 code=0x7ffc0000 [ 1586.888477][ T30] audit: type=1326 audit(2000000989.176:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.6.13708" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f95c0d9ce59 code=0x7ffc0000 [ 1587.056803][ T30] audit: type=1326 audit(2000000989.176:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.6.13708" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c0d9ce59 code=0x7ffc0000 [ 1587.293288][ T4734] loop6: detected capacity change from 0 to 1024 [ 1587.616486][ T1658] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1587.781355][ T4748] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1587.822103][ T1658] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1587.842421][ T1658] usb 5-1: not running at top speed; connect to a high speed hub [ 1587.887530][ T1658] usb 5-1: config 197 has an invalid interface number: 211 but max is 0 [ 1587.922839][ T1658] usb 5-1: config 197 has no interface number 0 [ 1587.954914][ T1658] usb 5-1: config 197 interface 211 has no altsetting 0 [ 1587.966095][ T4752] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1588.002449][ T1658] usb 5-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=3f.c6 [ 1588.042837][ T1658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.079315][ T1658] usb 5-1: Product: syz [ 1588.097970][ T1658] usb 5-1: Manufacturer: syz [ 1588.111135][ T1658] usb 5-1: SerialNumber: syz [ 1588.386963][ T5778] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1588.418236][ T1658] upd78f0730 5-1:197.211: upd78f0730 converter detected [ 1588.469283][ T1658] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 1588.511419][ T1658] usb 5-1: USB disconnect, device number 61 [ 1588.590282][ T1658] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1588.599935][ T5778] usb 2-1: Using ep0 maxpacket: 16 [ 1588.622213][ T5778] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1588.636949][ T1658] upd78f0730 5-1:197.211: device disconnected [ 1588.651587][ T5778] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1588.674963][ T5778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1588.691827][ T5778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1588.718466][ T5778] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1588.726812][T28524] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1588.741861][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.766397][ T5778] usb 2-1: Product: syz [ 1588.782243][ T5778] usb 2-1: Manufacturer: syz [ 1588.800021][ T5778] usb 2-1: SerialNumber: syz [ 1588.829260][ T5778] usb 2-1: config 0 descriptor?? [ 1588.851503][ T4756] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1588.931810][T28524] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.961687][T28524] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1588.981205][T28524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.997208][ T4754] loop6: detected capacity change from 0 to 32768 [ 1589.004478][T28524] usb 1-1: Product: syz [ 1589.011901][T28524] usb 1-1: Manufacturer: syz [ 1589.040893][T28524] usb 1-1: SerialNumber: syz [ 1589.103230][T28524] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1589.120340][ T4754] UFO tlock:0xffffc90002892090 [ 1589.163628][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 1589.196231][ T5778] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 1589.244209][ T5778] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 1589.289538][ T443] usb 2-1: USB disconnect, device number 81 [ 1589.599152][T28524] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1589.640279][ T4775] netlink: 'syz.3.13737': attribute type 10 has an invalid length. [ 1589.675151][T28524] usb 1-1: USB disconnect, device number 67 [ 1589.740414][ T4775] team0: Port device dummy0 added [ 1590.070274][ T4785] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1590.868212][ T4814] netlink: 'syz.6.13755': attribute type 10 has an invalid length. [ 1590.977461][ T4814] team0: Port device dummy0 added [ 1591.432853][ T4832] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1591.481995][T28524] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1591.682696][T28524] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.709919][T28524] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1591.731313][T28524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.757513][T28524] usb 5-1: Product: syz [ 1591.777429][T28524] usb 5-1: Manufacturer: syz [ 1591.802201][T28524] usb 5-1: SerialNumber: syz [ 1591.870905][T28524] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1591.953653][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13769'. [ 1592.346657][T28524] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1592.406186][T28524] usb 5-1: USB disconnect, device number 62 [ 1593.502111][ T4886] cgroup: release_agent respecified [ 1593.543527][ T4890] netlink: 'syz.3.13793': attribute type 21 has an invalid length. [ 1593.559221][ T4890] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13793'. [ 1593.577811][ T4890] netlink: 'syz.3.13793': attribute type 4 has an invalid length. [ 1593.609464][ T4890] netlink: 'syz.3.13793': attribute type 5 has an invalid length. [ 1593.647950][ T4890] netlink: 3 bytes leftover after parsing attributes in process `syz.3.13793'. [ 1593.768564][ T4896] loop0: detected capacity change from 0 to 64 [ 1594.320754][ T4910] loop0: detected capacity change from 0 to 1024 [ 1594.406128][ T1658] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 1594.569637][ T5798] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1594.591942][ T1658] usb 7-1: config 154 has an invalid interface number: 128 but max is 0 [ 1594.607062][ T1658] usb 7-1: config 154 has no interface number 0 [ 1594.632726][ T1658] usb 7-1: config 154 interface 128 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 25 [ 1594.683846][ T1658] usb 7-1: config 154 interface 128 has no altsetting 0 [ 1594.731520][ T1658] usb 7-1: string descriptor 0 read error: -22 [ 1594.741605][ T5798] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.760236][ T1658] usb 7-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=58.09 [ 1594.790834][ T5798] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1594.805308][ T1658] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.825013][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.839850][ T5798] usb 4-1: Product: syz [ 1594.845361][ T5798] usb 4-1: Manufacturer: syz [ 1594.850340][ T5798] usb 4-1: SerialNumber: syz [ 1594.858548][ T1658] ums-datafab 7-1:154.128: USB Mass Storage device detected [ 1594.874534][ T1658] ums-datafab 7-1:154.128: This device (07c4,a109,5809 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1594.874534][ T1658] Please send a copy of this message to and [ 1594.943536][ T5798] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1595.094983][ T1658] ums-sddr55 7-1:154.128: USB Mass Storage device detected [ 1595.185528][ T1658] ums-sddr55 7-1:154.128: This device (07c4,a109,5809 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1595.185528][ T1658] Please send a copy of this message to and [ 1595.214073][ T4935] loop0: detected capacity change from 0 to 1764 [ 1595.342915][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13816'. [ 1595.353853][ T4935] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1595.398516][ T5798] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1595.499930][ T5798] usb 4-1: USB disconnect, device number 77 [ 1595.506145][ T1658] usb 7-1: USB disconnect, device number 5 [ 1596.226806][ T4971] cgroup: release_agent respecified [ 1596.297420][ T4975] Sensor A: ================= START STATUS ================= [ 1596.305846][ T4975] Sensor A: Test Pattern: CSC Colorbar [ 1596.313225][ T4975] Sensor A: Show Information: All [ 1596.334066][ T4975] Sensor A: Vertical Flip: true [ 1596.355439][ T4975] Sensor A: Horizontal Flip: true [ 1596.373848][ T4975] Sensor A: Brightness: 128 [ 1596.393091][ T4975] Sensor A: Contrast: 128 [ 1596.405528][ T4975] Sensor A: Hue: 0 [ 1596.457785][ T4975] Sensor A: Saturation: 128 [ 1596.481593][ T4975] Sensor A: Pixel Rate: 160000000 [ 1596.532203][ T4975] Sensor A: Horizontal Blanking: 800 [ 1596.566343][ T4975] Sensor A: Vertical Blanking: 3223 [ 1596.601471][ T4975] Sensor A: ================== END STATUS ================== [ 1596.848038][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13839'. [ 1597.182354][ T5011] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1597.421855][ T5916] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1597.621078][ T5916] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1597.666930][ T5029] Sensor A: ================= START STATUS ================= [ 1597.668746][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.694176][ T5029] Sensor A: Test Pattern: CSC Colorbar [ 1597.710567][ T5916] usb 1-1: Product: syz [ 1597.717920][ T5916] usb 1-1: Manufacturer: syz [ 1597.719640][ T5029] Sensor A: Show Information: [ 1597.728217][ T5916] usb 1-1: SerialNumber: syz [ 1597.731491][ T5029] All [ 1597.743664][ T5916] usb 1-1: config 0 descriptor?? [ 1597.749433][ T5029] [ 1597.763449][ T5029] Sensor A: Vertical Flip: true [ 1597.765881][ T5031] netlink: 'syz.3.13855': attribute type 1 has an invalid length. [ 1597.778219][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13855'. [ 1597.779635][ T5029] Sensor A: Horizontal Flip: [ 1597.791363][ T5916] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 068 [ 1597.805851][ T5029] true [ 1597.813422][ T5029] Sensor A: Brightness: 128 [ 1597.827079][ T5029] Sensor A: Contrast: 128 [ 1597.841582][ T5029] Sensor A: Hue: 0 [ 1597.851851][ T5029] Sensor A: Saturation: 128 [ 1597.868516][ T5029] Sensor A: Pixel Rate: 160000000 [ 1597.885247][ T5029] Sensor A: Horizontal Blanking: 800 [ 1597.901646][ T5029] Sensor A: Vertical Blanking: 3223 [ 1597.920177][ T5029] Sensor A: ================== END STATUS ================== [ 1598.247414][ T5916] (null): failure reading functionality [ 1598.285041][ T5916] i2c i2c-1: failure reading functionality [ 1598.336608][ T5916] i2c i2c-1: connected i2c-tiny-usb device [ 1598.378690][ T5916] usb 1-1: USB disconnect, device number 68 [ 1598.448257][ T5016] loop6: detected capacity change from 0 to 32768 [ 1598.497483][ T30] audit: type=1800 audit(2000001000.215:265): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13859" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 1598.819611][ T5055] netlink: 'syz.6.13866': attribute type 21 has an invalid length. [ 1598.838694][ T5055] netlink: 128 bytes leftover after parsing attributes in process `syz.6.13866'. [ 1598.876379][ T5055] netlink: 'syz.6.13866': attribute type 4 has an invalid length. [ 1598.924356][ T5055] netlink: 'syz.6.13866': attribute type 5 has an invalid length. [ 1598.962978][ T5055] netlink: 3 bytes leftover after parsing attributes in process `syz.6.13866'. [ 1600.445054][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13890'. [ 1600.847763][ T5115] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13898'. [ 1601.175991][ T5081] loop0: detected capacity change from 0 to 32768 [ 1601.229977][ T5081] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 1601.303600][ T5081] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1601.529485][ T5081] XFS (loop0): Ending clean mount [ 1601.554650][ T5081] XFS (loop0): Quotacheck needed: Please wait. [ 1601.566919][ T5132] bond5 (unregistering): Released all slaves [ 1601.664551][ T5081] XFS (loop0): Quotacheck: Done. [ 1601.951903][ T5649] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1603.805197][ T5208] loop6: detected capacity change from 0 to 1024 [ 1605.237540][ T5256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13963'. [ 1606.486134][ T5309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1606.662961][ T1658] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1606.856907][ T1658] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1606.890039][ T1658] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.911785][ T1658] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1606.953613][ T1658] usb 6-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 1606.969796][ T1658] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.984233][ T1658] usb 6-1: Product: syz [ 1606.988679][ T1658] usb 6-1: Manufacturer: syz [ 1607.003073][ T1658] usb 6-1: SerialNumber: syz [ 1607.267560][ T5295] loop6: detected capacity change from 0 to 32768 [ 1607.315106][ T5295] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.13980 (5295) [ 1607.391545][ T5295] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1607.434071][ T5295] BTRFS info (device loop6): using sha256 checksum algorithm [ 1607.468016][ T1658] snd-usb-hiface 6-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 1607.536288][ T1658] usb 6-1: USB disconnect, device number 82 [ 1607.696420][ T5295] BTRFS info (device loop6): enabling ssd optimizations [ 1607.708363][ T5295] BTRFS info (device loop6): turning on async discard [ 1607.715354][ T5295] BTRFS info (device loop6): enabling free space tree [ 1608.175911][ T5355] bond6 (unregistering): Released all slaves [ 1608.287501][ T5295] BTRFS warning (device loop6): can't clear the compat:1,compat:4,compat:5,compat:8,compat:12,compat:13,compat:15,compat:16,compat:17,compat:19,compat:20,compat:21,compat:24,compat:26,compat:29,compat:35,compat:36,compat:40,compat:42,compat:46,compat:49,compat:50,compat:53,compat:54,compat:57,compat:58,compat:59,compat:60,compat:63 feature bits while mounted [ 1608.550066][ T953] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1608.609484][ T5362] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14006'. [ 1608.651658][ T5362] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14006'. [ 1609.016702][ T5374] netlink: 'syz.6.14007': attribute type 11 has an invalid length. [ 1609.663852][ T5390] lo speed is unknown, defaulting to 1000 [ 1612.320305][ T5434] lo speed is unknown, defaulting to 1000 [ 1612.531112][ T5448] loop0: detected capacity change from 0 to 512 [ 1612.597143][ T5448] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1612.687447][ T5448] EXT4-fs (loop0): 1 truncate cleaned up [ 1612.751403][ T5448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1612.890427][ T5448] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 1613.040605][ T5461] loop6: detected capacity change from 0 to 16 [ 1613.105962][ T5649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.123664][ T5461] erofs (device loop6): mounted with root inode @ nid 36. [ 1613.220765][ T5461] erofs (device loop6): readahead error at folio 0 @ nid 89 [ 1613.252449][ T5461] erofs (device loop6): read error -117 @ 0 of nid 89 [ 1613.293398][ T30] audit: type=1800 audit(2000001014.073:266): pid=5461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.14045" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1613.363519][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14049'. [ 1613.689146][ T5473] loop6: detected capacity change from 0 to 1024 [ 1613.732452][ T5473] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1613.774392][ T5473] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1614.133777][ T5492] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1614.248160][ T5473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1614.450479][ T5495] sit2: entered promiscuous mode [ 1614.726135][ T953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1614.979774][ T5514] loop6: detected capacity change from 0 to 256 [ 1615.131884][ T5514] FAT-fs (loop6): Directory bread(block 64) failed [ 1615.156028][ T5514] FAT-fs (loop6): Directory bread(block 65) failed [ 1615.172490][ T5514] FAT-fs (loop6): Directory bread(block 66) failed [ 1615.193082][ T5514] FAT-fs (loop6): Directory bread(block 67) failed [ 1615.217476][ T1658] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1615.228425][ T5514] FAT-fs (loop6): Directory bread(block 68) failed [ 1615.270110][ T5514] FAT-fs (loop6): Directory bread(block 69) failed [ 1615.313573][ T5514] FAT-fs (loop6): Directory bread(block 70) failed [ 1615.355946][ T5514] FAT-fs (loop6): Directory bread(block 71) failed [ 1615.400898][ T5514] FAT-fs (loop6): Directory bread(block 72) failed [ 1615.428728][ T1658] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1615.449211][ T5514] FAT-fs (loop6): Directory bread(block 73) failed [ 1615.463694][ T1658] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.496144][ T1658] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1615.531347][ T1658] usb 2-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 1615.548873][ T1658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.570677][ T1658] usb 2-1: Product: syz [ 1615.582755][ T1658] usb 2-1: Manufacturer: syz [ 1615.605846][ T1658] usb 2-1: SerialNumber: syz [ 1615.933762][ T1658] snd-usb-hiface 2-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 1616.198267][T28529] usb 2-1: USB disconnect, device number 82 [ 1616.202027][ T5537] loop0: detected capacity change from 0 to 1024 [ 1616.257971][ T5537] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1616.293225][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14084'. [ 1616.305686][ T5537] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1616.495896][ T5537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1616.708979][ T5551] netlink: 260 bytes leftover after parsing attributes in process `syz.4.14088'. [ 1616.788930][ T5649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1617.320934][ T5565] loop6: detected capacity change from 0 to 256 [ 1617.410872][ T30] audit: type=1800 audit(2000001017.921:267): pid=5565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.14095" name="bus" dev="loop6" ino=1048674 res=0 errno=0 [ 1617.604985][ T5572] sit1: entered promiscuous mode [ 1617.899361][ T5580] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1618.062477][ T5589] netlink: 260 bytes leftover after parsing attributes in process `syz.6.14105'. [ 1618.487987][ T5599] netlink: 'syz.1.14110': attribute type 28 has an invalid length. [ 1618.521334][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14109'. [ 1618.805074][ T5610] netlink: 'syz.1.14113': attribute type 11 has an invalid length. [ 1618.842366][ T5610] netlink: 'syz.1.14113': attribute type 5 has an invalid length. [ 1618.889212][ T5610] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.14113'. [ 1619.539303][ T1658] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1619.762136][ T1658] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1619.810092][ T1658] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.841491][ T1658] usb 6-1: Product: syz [ 1619.861436][ T1658] usb 6-1: Manufacturer: syz [ 1619.884516][ T1658] usb 6-1: SerialNumber: syz [ 1619.923415][ T1658] usb 6-1: config 0 descriptor?? [ 1619.981037][ T1658] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1620.430441][ T1658] gspca_m5602: Failed to find a sensor [ 1620.463876][ T1658] ALi m5602 6-1:0.0: ALi m5602 webcam failed [ 1620.512363][ T1658] usb 6-1: USB disconnect, device number 83 [ 1620.753400][ T5682] binder: 5680:5682 ioctl c0306201 0 returned -14 [ 1620.764252][ T5683] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14143'. [ 1621.184567][ T5695] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1621.629069][ T5916] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 1621.814318][ T5798] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1621.816321][ T5916] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.851101][ T5726] loop0: detected capacity change from 0 to 512 [ 1621.858104][ T5916] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1621.874066][ T5726] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1621.883702][ T5916] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1621.907089][ T5726] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e0ad, mo2=0002] [ 1621.921982][ T5916] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 1621.934965][ T5726] System zones: 1-12 [ 1621.939526][ T5916] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1621.951794][ T5726] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1621.966229][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.983213][ T5698] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1621.997135][ T5916] hub 6-1:1.0: bad descriptor, ignoring hub [ 1622.014381][ T5916] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1622.023407][ T5916] cdc_wdm 6-1:1.0: skipping garbage [ 1622.029891][ T5916] cdc_wdm 6-1:1.0: skipping garbage [ 1622.035368][ T5916] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1622.061185][ T5798] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1622.108149][ T5726] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1622.149283][ T5798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.179242][ T5798] usb 7-1: Product: syz [ 1622.202848][ T5798] usb 7-1: Manufacturer: syz [ 1622.219245][ T5798] usb 7-1: SerialNumber: syz [ 1622.270158][ T5798] usb 7-1: config 0 descriptor?? [ 1622.310672][ T5726] EXT4-fs error (device loop0): __ext4_add_entry:2412: inode #2: comm syz.0.14161: Directory hole found for htree leaf block 0 [ 1622.311349][ T5798] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1622.359724][ T5916] usb 6-1: USB disconnect, device number 84 [ 1622.371943][ T5726] EXT4-fs (loop0): Remounting filesystem read-only [ 1622.520931][ T5649] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1622.711606][ T5916] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 1622.772413][ T5798] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1622.796852][ T5798] sq905c 7-1:0.0: Reading version command failed [ 1622.823185][ T5798] sq905c 7-1:0.0: probe with driver sq905c failed with error -71 [ 1622.884011][ T5798] usb 7-1: USB disconnect, device number 6 [ 1622.931774][ T5916] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1622.974941][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.007439][ T5916] usb 2-1: Product: syz [ 1623.021235][ T5916] usb 2-1: Manufacturer: syz [ 1623.038380][ T5916] usb 2-1: SerialNumber: syz [ 1623.065832][ T5916] usb 2-1: config 0 descriptor?? [ 1623.100924][ T5916] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1623.312704][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14175'. [ 1623.551407][ T5916] gspca_m5602: Failed to find a sensor [ 1623.575852][ T5916] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 1623.621345][ T5916] usb 2-1: USB disconnect, device number 83 [ 1624.331498][ T5810] loop6: detected capacity change from 0 to 32768 [ 1624.361829][ T5810] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 1624.382511][ T5810] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1624.439150][ T5810] XFS (loop6): Ending clean mount [ 1624.451620][ T5810] XFS (loop6): Quotacheck needed: Please wait. [ 1624.592709][ T5810] XFS (loop6): Quotacheck: Done. [ 1624.655017][ T953] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1625.744458][ T5916] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1625.926103][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 1625.952693][ T5916] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.954016][ T5859] loop6: detected capacity change from 0 to 512 [ 1626.009121][ T5916] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1626.021728][ T5859] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1626.056638][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.095574][ T5916] usb 5-1: Product: syz [ 1626.099673][ T5862] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14200'. [ 1626.109289][ T5859] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e0ad, mo2=0002] [ 1626.125454][ T5916] usb 5-1: Manufacturer: syz [ 1626.141571][ T5859] System zones: 1-12 [ 1626.173048][ T5916] usb 5-1: SerialNumber: syz [ 1626.231326][ T5859] EXT4-fs (loop6): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1626.301391][ T5916] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1626.335942][ T5916] imon 5-1:155.0: unable to initialize intf0, err -19 [ 1626.352319][ T5916] imon:imon_probe: failed to initialize context! [ 1626.374890][ T5916] imon 5-1:155.0: unable to register, err -19 [ 1626.404047][ T5859] EXT4-fs error (device loop6): __ext4_add_entry:2412: inode #2: comm syz.6.14181: Directory hole found for htree leaf block 0 [ 1626.461384][ T5859] EXT4-fs (loop6): Remounting filesystem read-only [ 1626.518121][ T5778] usb 5-1: USB disconnect, device number 63 [ 1626.582706][ T953] EXT4-fs (loop6): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1626.931848][ T5883] binder: 5882:5883 ioctl c0306201 0 returned -14 [ 1627.065947][ T5885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14210'. [ 1627.117176][ T5885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14210'. [ 1627.874811][ T5914] lo speed is unknown, defaulting to 1000 [ 1627.984727][ T5925] netlink: 'syz.5.14226': attribute type 1 has an invalid length. [ 1628.015538][ T5925] netlink: 2108 bytes leftover after parsing attributes in process `syz.5.14226'. [ 1628.575095][ T5798] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1628.773312][ T5798] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1628.813766][ T5798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.846836][ T5798] usb 7-1: Product: syz [ 1628.881398][ T5798] usb 7-1: Manufacturer: syz [ 1628.910223][ T5798] usb 7-1: SerialNumber: syz [ 1628.960455][ T5798] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1628.982019][ T5778] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1629.289407][ C1] usb 7-1: ath9k_htc: over RX MAX_PKT_NUM [ 1629.596231][ T5798] usb 7-1: USB disconnect, device number 7 [ 1629.730919][ T5980] netlink: 'syz.1.14249': attribute type 1 has an invalid length. [ 1630.169106][ T5778] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1630.199960][ T5778] ath9k_htc: Failed to initialize the device [ 1630.261667][ T5798] usb 7-1: ath9k_htc: USB layer deinitialized [ 1630.801141][ T6010] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14265'. [ 1631.011890][ T6017] netlink: 'syz.4.14266': attribute type 1 has an invalid length. [ 1631.071789][ T6017] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.14266'. [ 1631.088937][ T6021] loop0: detected capacity change from 0 to 1764 [ 1631.803792][ T6049] netlink: 'syz.4.14282': attribute type 1 has an invalid length. [ 1632.086560][ T6050] lo speed is unknown, defaulting to 1000 [ 1633.308209][ T6091] netlink: 'syz.1.14302': attribute type 16 has an invalid length. [ 1633.690053][ T6065] loop6: detected capacity change from 0 to 32768 [ 1633.716093][ T6065] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.14289 (6065) [ 1633.772686][ T6065] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1633.821471][ T6065] BTRFS info (device loop6): using sha256 checksum algorithm [ 1634.035379][ T6065] BTRFS info (device loop6): enabling ssd optimizations [ 1634.079910][ T6065] BTRFS info (device loop6): turning on async discard [ 1634.112778][ T6065] BTRFS info (device loop6): enabling free space tree [ 1634.239403][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.256754][ T5778] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1634.279845][ T953] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1634.348511][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.475147][ T5778] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1634.494068][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.514899][ T5778] usb 4-1: Product: syz [ 1634.529038][ T5778] usb 4-1: Manufacturer: syz [ 1634.539427][ T5778] usb 4-1: SerialNumber: syz [ 1634.577155][ T5778] usb 4-1: config 0 descriptor?? [ 1634.623424][ T5778] hub 4-1:0.0: bad descriptor, ignoring hub [ 1634.648477][ T5778] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1634.670242][ T5778] usbsevseg 4-1:0.0: USB 7 Segment device now attached [ 1634.950546][ T443] usb 4-1: USB disconnect, device number 78 [ 1634.970957][ T443] usbsevseg 4-1:0.0: USB 7 Segment now disconnected [ 1635.325093][ T5778] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1635.407842][ T6136] loop6: detected capacity change from 0 to 256 [ 1635.457337][T19652] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.504636][T19652] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.556354][ T5778] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1635.584915][ T5778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.604516][T30521] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.616532][ T5778] usb 5-1: Product: syz [ 1635.640469][ T5778] usb 5-1: Manufacturer: syz [ 1635.651837][T30521] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.681994][ T5778] usb 5-1: SerialNumber: syz [ 1635.721725][ T5778] usb 5-1: config 0 descriptor?? [ 1635.777850][ T5778] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1636.202357][ T5778] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1636.240642][ T5778] sq905c 5-1:0.0: Reading version command failed [ 1636.285203][ T5778] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 1636.348079][ T5778] usb 5-1: USB disconnect, device number 64 [ 1636.833861][ T5916] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1637.014821][ T5916] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1637.045608][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.091926][ T5916] usb 7-1: config 0 descriptor?? [ 1637.251696][ T6184] netlink: 'syz.5.14336': attribute type 16 has an invalid length. [ 1637.614102][ T5916] ath6kl: Failed to submit usb control message: -71 [ 1637.637562][ T5916] ath6kl: unable to send the bmi data to the device: -71 [ 1637.673560][ T5916] ath6kl: Unable to send get target info: -71 [ 1637.718543][ T5798] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1637.749208][ T5916] ath6kl: Failed to init ath6kl core: -71 [ 1637.764492][ T5916] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1637.796136][ T5916] usb 7-1: USB disconnect, device number 8 [ 1637.803634][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14345'. [ 1637.933615][ T5798] usb 2-1: Using ep0 maxpacket: 8 [ 1637.943892][ T5798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.954529][ T5798] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1637.965165][ T5798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.979985][ T5798] usb 2-1: config 0 descriptor?? [ 1637.999474][ T5798] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1638.313235][ T6202] netlink: 'syz.5.14349': attribute type 6 has an invalid length. [ 1638.432109][ T6206] lo speed is unknown, defaulting to 1000 [ 1638.436369][ T5798] gspca_vc032x: reg_w err -71 [ 1638.469303][ T5798] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1638.525060][ T5798] usb 2-1: USB disconnect, device number 84 [ 1638.674860][ T6214] netlink: 'syz.4.14353': attribute type 16 has an invalid length. [ 1638.713972][ T6216] netlink: 'syz.0.14354': attribute type 1 has an invalid length. [ 1638.741930][ T6216] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14354'. [ 1638.774369][ T6216] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14354'. [ 1638.792398][ T6216] netlink: 658 bytes leftover after parsing attributes in process `syz.0.14354'. [ 1638.922683][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14356'. [ 1638.951920][ T6223] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14356'. [ 1639.796465][ T6239] netlink: 'syz.3.14364': attribute type 6 has an invalid length. [ 1640.309433][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1640.400511][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1640.851325][ T443] lo speed is unknown, defaulting to 1000 [ 1640.851849][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14363'. [ 1640.874382][ T443] sz1: Port: 1 Link DOWN [ 1640.901487][T30523] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.965049][T30523] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.048180][T30523] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.086177][ T5916] lo speed is unknown, defaulting to 1000 [ 1641.440343][ T6281] netlink: 'syz.5.14375': attribute type 10 has an invalid length. [ 1642.087819][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14381'. [ 1642.134805][ T6301] netlink: 31 bytes leftover after parsing attributes in process `syz.3.14381'. [ 1642.196360][ T6301] netlink: 'syz.3.14381': attribute type 3 has an invalid length. [ 1642.243639][ T6301] netlink: 'syz.3.14381': attribute type 2 has an invalid length. [ 1642.283563][ T6301] netlink: 31 bytes leftover after parsing attributes in process `syz.3.14381'. [ 1643.000078][ T6329] xt_ecn: cannot match TCP bits for non-tcp packets [ 1643.627525][ T6349] kAFS: unable to lookup cell '/,' [ 1644.563155][ T443] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1644.767315][ T443] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1644.794627][ T443] usb 4-1: config 0 has no interface number 0 [ 1644.819257][ T443] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1644.870541][ T443] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1644.918597][ T443] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1644.934686][ T443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.953009][ T443] usb 4-1: Product: syz [ 1644.973959][ T443] usb 4-1: Manufacturer: syz [ 1644.990345][ T443] usb 4-1: SerialNumber: syz [ 1645.020781][ T443] usb 4-1: config 0 descriptor?? [ 1645.042131][ T6375] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1645.077434][ T443] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1645.115779][ T443] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1645.694398][ T5763] usb 4-1: USB disconnect, device number 79 [ 1645.755593][ T5763] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1645.791458][ T5763] cyberjack 4-1:0.69: device disconnected [ 1647.475668][ T6483] loop6: detected capacity change from 0 to 512 [ 1647.521256][ T6483] EXT4-fs: Ignoring removed nobh option [ 1647.629695][ T6483] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #11: comm syz.6.14470: invalid indirect mapped block 4294967295 (level 1) [ 1647.654935][ T6483] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1647.660298][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1647.676387][ C0] EXT4-fs (loop6): initial error at time 2000001046: ext4_free_branches:1020: inode 11 [ 1647.686309][ C0] EXT4-fs (loop6): last error at time 2000001046: ext4_free_branches:1020: inode 11 [ 1647.774810][ T6483] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #11: comm syz.6.14470: invalid indirect mapped block 4294967295 (level 1) [ 1647.800181][ T6483] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1647.805834][ T6483] EXT4-fs (loop6): 2 truncates cleaned up [ 1647.960446][ T6483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1648.128324][ T6500] xt_recent: Unsupported userspace flags (000000de) [ 1648.252062][ T953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.693787][ T6520] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1649.198450][ T6535] netlink: 172 bytes leftover after parsing attributes in process `syz.1.14493'. [ 1649.241494][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14493'. [ 1649.283270][ T6535] netlink: 172 bytes leftover after parsing attributes in process `syz.1.14493'. [ 1649.347942][ T6535] netlink: 100 bytes leftover after parsing attributes in process `syz.1.14493'. [ 1649.404011][ T6535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14493'. [ 1649.496256][ T6545] netlink: 88 bytes leftover after parsing attributes in process `syz.3.14498'. [ 1649.526856][ T6546] netlink: 'syz.6.14497': attribute type 1 has an invalid length. [ 1649.566231][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14497'. [ 1650.108486][ T6560] kAFS: unable to lookup cell '({FA' [ 1650.207773][ T6568] autofs4:pid:6568:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 1650.657620][ T6581] xt_policy: neither incoming nor outgoing policy selected [ 1650.805473][ T6585] loop0: detected capacity change from 0 to 64 [ 1651.516433][ T443] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 1651.738311][ T443] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1651.780715][ T443] usb 2-1: config 0 has no interface number 0 [ 1651.813585][ T443] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1651.878184][ T443] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1651.952107][ T443] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1652.014961][ T443] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1652.058764][ T443] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1652.105929][ T443] usb 2-1: Product: syz [ 1652.130008][ T443] usb 2-1: SerialNumber: syz [ 1652.166145][ T443] usb 2-1: config 0 descriptor?? [ 1652.230698][ T443] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1652.280545][ T443] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input98 [ 1652.621928][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1652.633104][ T5916] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1652.841926][ T5916] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 1652.867502][ T6246] usb 2-1: USB disconnect, device number 85 [ 1652.905807][ T5916] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.949021][ T6246] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1652.982108][ T5916] usb 6-1: config 0 has no interface number 0 [ 1653.014532][ T5916] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1653.055203][ T5916] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1653.093465][ T6651] SET target dimension over the limit! [ 1653.105513][ T5916] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1653.186704][ T5916] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1653.243386][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.311587][ T5916] usb 6-1: Product: syz [ 1653.329934][ T5916] usb 6-1: Manufacturer: syz [ 1653.346270][ T5916] usb 6-1: SerialNumber: syz [ 1653.413843][ T5916] usb 6-1: config 0 descriptor?? [ 1653.945874][ T5916] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1654.003356][ T5916] usb 6-1: USB disconnect, device number 85 [ 1654.059953][ T6682] netlink: 'syz.4.14555': attribute type 61 has an invalid length. [ 1654.413366][ T6693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14561'. [ 1654.993114][ T6714] tc_dump_action: action bad kind [ 1655.869468][ T6746] tmpfs: Bad value for 'mpol' [ 1656.558243][ T6762] loop6: detected capacity change from 0 to 8192 [ 1656.661476][ T6762] loop6: p2 p3 [ 1656.684349][ T6762] loop6: p3 start 117440512 is beyond EOD, truncated [ 1656.727698][ T6775] ip6gre2: entered promiscuous mode [ 1656.758671][ T6775] ip6gre2: entered allmulticast mode [ 1656.887434][ T6782] netlink: 'syz.5.14603': attribute type 10 has an invalid length. [ 1656.921097][ T6782] syz_tun: left allmulticast mode [ 1656.950747][ T6782] bridge0: port 3(syz_tun) entered disabled state [ 1657.114550][ T6782] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1657.440754][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1657.575841][ T6799] loop0: detected capacity change from 0 to 1024 [ 1658.588867][ T6836] loop0: detected capacity change from 0 to 512 [ 1658.603442][ T6839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1658.641881][ T6836] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1658.687717][ T6836] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1658.751207][ T6836] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 1658.846038][ T6836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1658.957177][ T6836] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 1659.115576][ T5649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1659.285920][ T6863] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1659.726552][ T6880] netlink: 'syz.0.14648': attribute type 16 has an invalid length. [ 1659.917580][ T6880] veth0_macvtap: left promiscuous mode [ 1660.978314][ T30] audit: type=1400 audit(2000001058.715:268): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=6917 comm="syz.4.14666" [ 1661.536709][ T6930] netlink: 'syz.6.14671': attribute type 16 has an invalid length. [ 1661.588605][ T6936] xt_TCPMSS: Only works on TCP SYN packets [ 1661.853030][ T6943] loop0: detected capacity change from 0 to 512 [ 1661.893268][ T6943] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1661.971519][ T6943] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4221: comm syz.0.14677: Allocating blocks 41-42 which overlap fs metadata [ 1662.000189][ T6943] loop0: lost filesystem error report for type 5 error -117 [ 1662.002240][ T6943] EXT4-fs (loop0): Remounting filesystem read-only [ 1662.009789][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1662.009824][ C0] EXT4-fs (loop0): initial error at time 2000001059: ext4_mb_mark_diskspace_used:4221 [ 1662.009868][ C0] EXT4-fs (loop0): last error at time 2000001059: ext4_mb_mark_diskspace_used:4221 [ 1662.112039][ T6943] Quota error (device loop0): write_blk: dquota write failed [ 1662.130315][ T6943] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1662.170132][ T6943] Quota error (device loop0): write_blk: dquota write failed [ 1662.215619][ T6943] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1662.267304][ T6943] EXT4-fs (loop0): 1 truncate cleaned up [ 1662.307301][ T6943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1662.557243][ T5649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1663.082895][ T5916] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1663.252828][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.260944][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.269147][ T5916] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1663.303730][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.349399][ T5916] usb 1-1: config 0 has no interface number 0 [ 1663.369054][ T5916] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1663.402067][ T5916] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1663.453790][ T5916] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1663.512389][ T5916] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1663.531370][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.548138][ T5916] usb 1-1: Product: syz [ 1663.555579][ T5916] usb 1-1: Manufacturer: syz [ 1663.560258][ T5916] usb 1-1: SerialNumber: syz [ 1663.571304][ T5916] usb 1-1: config 0 descriptor?? [ 1664.040065][ T5916] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1664.072601][ T6981] kAFS: unable to lookup cell '({FA' [ 1664.083418][ T5916] usb 1-1: USB disconnect, device number 69 [ 1665.876494][ T6930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.900660][ T6994] kAFS: unable to lookup cell '/,' [ 1666.174323][ T6930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1666.435423][ T7003] loop0: detected capacity change from 0 to 512 [ 1666.462499][ T7003] EXT4-fs: Ignoring removed nobh option [ 1666.486940][ T7003] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.14707: invalid indirect mapped block 4294967295 (level 1) [ 1666.552254][ T7003] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1666.553846][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1666.569817][ C1] EXT4-fs (loop0): initial error at time 2000001063: ext4_free_branches:1020: inode 11 [ 1666.579773][ C1] EXT4-fs (loop0): last error at time 2000001063: ext4_free_branches:1020: inode 11 [ 1666.598038][ T7003] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.14707: invalid indirect mapped block 4294967295 (level 1) [ 1666.622406][ T7003] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1666.624836][ T7003] EXT4-fs (loop0): 2 truncates cleaned up [ 1666.652709][ T7003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1666.999204][ T5649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.453292][ T6252] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1667.654436][ T6252] usb 1-1: Using ep0 maxpacket: 16 [ 1667.666565][ T6252] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1667.698104][ T6252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.725315][ T6252] usb 1-1: Product: syz [ 1667.736136][ T6252] usb 1-1: Manufacturer: syz [ 1667.746697][ T6252] usb 1-1: SerialNumber: syz [ 1667.783499][ T6252] usb 1-1: config 0 descriptor?? [ 1667.843533][ T6252] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 1667.862371][ T7005] ip6gre1: entered promiscuous mode [ 1667.885566][ T7005] ip6gre1: entered allmulticast mode [ 1667.906063][T30528] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.969357][T30528] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.054317][T30528] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.116313][ T6252] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 1668.129915][T30528] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.168339][ T6252] visor 1-1:0.0: probe with driver visor failed with error -5 [ 1668.503547][ T6257] usb 1-1: USB disconnect, device number 70 [ 1669.618380][ T7064] netlink: 'syz.4.14732': attribute type 9 has an invalid length. [ 1669.802800][ T7071] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1669.838400][ T7071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1669.869548][ T6257] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 1670.005790][ T7079] netlink: 'syz.1.14738': attribute type 12 has an invalid length. [ 1670.048532][ T7079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14738'. [ 1670.074758][ T6257] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1670.123263][ T6257] usb 4-1: config 0 has no interface number 0 [ 1670.159421][ T6257] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1670.203610][ T6257] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1670.246766][ T6257] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1670.338189][ T6257] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1670.389961][ T6257] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1670.468200][ T6257] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1670.526293][ T6257] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1670.584383][ T6257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.632453][ T6257] usb 4-1: config 0 descriptor?? [ 1670.659679][ T7065] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1670.716405][ T7065] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1670.834153][ T6257] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1671.092367][ T7099] bond5 (unregistering): Released all slaves [ 1671.284871][ T6257] usb 4-1: USB disconnect, device number 80 [ 1671.387178][ T6257] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1671.696783][ T7123] loop0: detected capacity change from 0 to 8 [ 1672.139940][ T7134] netlink: 'syz.4.14760': attribute type 10 has an invalid length. [ 1672.140010][ T7134] syz_tun: entered promiscuous mode [ 1672.148589][ T7136] netlink: 'syz.3.14759': attribute type 16 has an invalid length. [ 1672.160273][ T7134] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1673.065404][ T7136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1673.128016][ T7136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1673.205128][ T7158] loop6: detected capacity change from 0 to 4096 [ 1673.751746][ T7168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1673.776402][ T7170] netlink: 'syz.6.14781': attribute type 10 has an invalid length. [ 1673.858580][ T1102] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.884552][ T1102] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.971731][ T7170] team0: Device wg2 is of different type [ 1674.100160][ T1102] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.142168][ T1102] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.384593][ T7211] lo speed is unknown, defaulting to 1000 [ 1676.854653][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14823'. [ 1676.889752][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14823'. [ 1676.933015][ T7257] Cannot find add_set index 0 as target [ 1677.879552][ T7284] netlink: 'syz.6.14835': attribute type 21 has an invalid length. [ 1678.110953][ T6257] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1678.329248][ T6257] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1678.377111][ T6257] usb 5-1: config 0 has no interface number 0 [ 1678.394194][ T6257] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1678.437001][ T6257] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1678.483159][ T6257] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1678.532795][ T6257] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1678.594980][ T6257] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1678.644782][ T6257] usb 5-1: Product: syz [ 1678.660538][ T6257] usb 5-1: SerialNumber: syz [ 1678.723454][ T6257] usb 5-1: config 0 descriptor?? [ 1678.786345][ T6257] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1678.823604][ T6257] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input101 [ 1679.134661][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1679.384865][ T5909] usb 5-1: USB disconnect, device number 65 [ 1679.458017][ T7312] xt_hashlimit: size too large, truncated to 1048576 [ 1679.496985][ T5909] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1679.769323][ T7321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14855'. [ 1679.791166][ T7321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14855'. [ 1680.009414][ T7325] loop0: detected capacity change from 0 to 2048 [ 1680.081554][ T7325] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1680.149606][ T7330] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1680.212196][ T7332] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14860'. [ 1680.352621][ T7338] dlm: no locking on control device [ 1680.949074][ T7345] netlink: 'syz.1.14868': attribute type 10 has an invalid length. [ 1681.145246][ T7345] team0: Device wg2 is of different type [ 1681.463025][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14871'. [ 1681.512651][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14871'. [ 1681.964096][ T7366] fuse: Bad value for 'fd' [ 1682.100785][ T7372] loop0: detected capacity change from 0 to 1024 [ 1682.133006][ T7372] EXT4-fs: Ignoring removed bh option [ 1682.230922][ T7372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1682.423920][ T7383] pim6reg: entered allmulticast mode [ 1682.728565][ T7372] EXT4-fs error (device loop0): ext4_get_first_dir_block:3548: inode #11: comm syz.0.14879: directory missing '.' [ 1682.911941][ T7372] EXT4-fs (loop0): Remounting filesystem read-only [ 1682.920453][ T7399] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1683.083320][ T5649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1683.289968][ T6257] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1683.473562][ T6257] usb 7-1: Using ep0 maxpacket: 16 [ 1683.500772][ T6257] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1683.560273][ T6257] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.611962][ T6257] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1683.644064][ T6257] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1683.654409][ T6257] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.663248][ T6257] usb 7-1: Product: syz [ 1683.667768][ T6257] usb 7-1: Manufacturer: syz [ 1683.672434][ T6257] usb 7-1: SerialNumber: syz [ 1683.717523][ T6257] usb 7-1: 0:2 : does not exist [ 1684.021442][ T7404] loop6: detected capacity change from 0 to 512 [ 1684.058775][ T7404] ext4: Unknown parameter 'noacl' [ 1684.118658][ T7431] ALSA: mixer_oss: invalid OSS volume '' [ 1684.126180][ T6257] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1684.136225][ T6974] udevd[6974]: incorrect ext4 checksum on /dev/loop6 [ 1684.153630][ T7431] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 1684.196026][ T7431] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 1684.238821][ T7431] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 1684.280671][ T7431] ALSA: mixer_oss: invalid OSS volume '"P޸ۜo[8>7|YMepq' [ 1684.311524][ T7431] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 1684.345933][ T7431] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 1684.366681][ T6257] usb 7-1: USB disconnect, device number 9 [ 1684.388012][ T7431] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 1684.443714][ T7431] ALSA: mixer_oss: invalid OSS volume '[' [ 1684.480202][ T7431] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 1684.492486][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1684.537784][ T7431] ALSA: mixer_oss: invalid OSS volume '$inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 1705.248316][T30521] [ 1705.248316][T30521] but task is already holding lock: [ 1705.255971][T30521] ffff8880469460a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1705.265564][T30521] [ 1705.265564][T30521] which lock already depends on the new lock. [ 1705.265564][T30521] [ 1705.276006][T30521] [ 1705.276006][T30521] the existing dependency chain (in reverse order) is: [ 1705.285024][T30521] [ 1705.285024][T30521] -> #1 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 1705.293287][T30521] __mutex_lock+0x1a4/0x1b10 [ 1705.298525][T30521] hfs_find_init+0x273/0x330 [ 1705.303768][T30521] hfs_ext_read_extent+0x19d/0x9d0 [ 1705.309438][T30521] hfs_get_block+0x576/0x830 [ 1705.314579][T30521] block_read_full_folio+0x36c/0x8e0 [ 1705.320648][T30521] filemap_read_folio+0xfc/0x3b0 [ 1705.326555][T30521] do_read_cache_folio+0x2d7/0x6b0 [ 1705.332233][T30521] read_cache_page+0x5b/0x1b0 [ 1705.337486][T30521] __hfs_bnode_create+0x718/0x9a0 [ 1705.343087][T30521] hfs_bnode_find+0x2d5/0xd30 [ 1705.348317][T30521] hfs_brec_find+0x39d/0x620 [ 1705.353703][T30521] hfs_brec_read+0x26/0x120 [ 1705.358751][T30521] hfs_cat_find_brec+0xdc/0x2a0 [ 1705.364385][T30521] hfs_fill_super+0x58d/0x7e0 [ 1705.369605][T30521] get_tree_bdev_flags+0x38c/0x620 [ 1705.375389][T30521] vfs_get_tree+0x92/0x320 [ 1705.380355][T30521] path_mount+0x7d0/0x23d0 [ 1705.385396][T30521] __x64_sys_mount+0x293/0x310 [ 1705.390728][T30521] do_syscall_64+0x115/0x870 [ 1705.396028][T30521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.402464][T30521] [ 1705.402464][T30521] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 1705.411798][T30521] __lock_acquire+0x14b8/0x2630 [ 1705.417281][T30521] lock_acquire+0x1b1/0x370 [ 1705.422442][T30521] __mutex_lock+0x1a4/0x1b10 [ 1705.427887][T30521] hfs_extend_file+0xa6/0xcf0 [ 1705.433144][T30521] hfs_bmap_reserve+0x2ab/0x3a0 [ 1705.438636][T30521] __hfs_ext_write_extent+0x3c4/0x510 [ 1705.444566][T30521] hfs_ext_write_extent+0x1b7/0x200 [ 1705.450424][T30521] hfs_write_inode+0xce/0xab0 [ 1705.455633][T30521] __writeback_single_inode+0xcd4/0x1350 [ 1705.461912][T30521] writeback_sb_inodes+0x766/0x1c60 [ 1705.467671][T30521] wb_writeback+0x1bf/0xb90 [ 1705.472725][T30521] wb_workfn+0x14f/0xc00 [ 1705.477693][T30521] process_one_work+0xa0e/0x1980 [ 1705.483351][T30521] worker_thread+0x5ef/0xe50 [ 1705.488476][T30521] kthread+0x370/0x450 [ 1705.493196][T30521] ret_from_fork+0x72b/0xd50 [ 1705.498461][T30521] ret_from_fork_asm+0x1a/0x30 [ 1705.503867][T30521] [ 1705.503867][T30521] other info that might help us debug this: [ 1705.503867][T30521] [ 1705.514114][T30521] Possible unsafe locking scenario: [ 1705.514114][T30521] [ 1705.521703][T30521] CPU0 CPU1 [ 1705.527112][T30521] ---- ---- [ 1705.532561][T30521] lock(&tree->tree_lock#2/1); [ 1705.537632][T30521] lock(&HFS_I(tree->inode)->extents_lock); [ 1705.546243][T30521] lock(&tree->tree_lock#2/1); [ 1705.553790][T30521] lock(&HFS_I(tree->inode)->extents_lock); [ 1705.559803][T30521] [ 1705.559803][T30521] *** DEADLOCK *** [ 1705.559803][T30521] [ 1705.567942][T30521] 3 locks held by kworker/u8:9/30521: [ 1705.573312][T30521] #0: ffff888020af9140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1705.584078][T30521] #1: ffffc9000dd7fd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1705.595985][T30521] #2: ffff8880469460a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1705.605991][T30521] [ 1705.605991][T30521] stack backtrace: [ 1705.611928][T30521] CPU: 0 UID: 0 PID: 30521 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1705.611978][T30521] Tainted: [L]=SOFTLOCKUP [ 1705.611991][T30521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1705.612016][T30521] Workqueue: writeback wb_workfn (flush-7:6) [ 1705.612081][T30521] Call Trace: [ 1705.612094][T30521] [ 1705.612107][T30521] dump_stack_lvl+0x100/0x190 [ 1705.612143][T30521] print_circular_bug.cold+0x178/0x1c7 [ 1705.612250][T30521] check_noncircular+0x146/0x160 [ 1705.612284][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.612334][T30521] __lock_acquire+0x14b8/0x2630 [ 1705.612376][T30521] ? __pfx_stack_trace_save+0x10/0x10 [ 1705.612500][T30521] lock_acquire+0x1b1/0x370 [ 1705.612535][T30521] ? hfs_extend_file+0xa6/0xcf0 [ 1705.612590][T30521] ? __pfx___might_resched+0x10/0x10 [ 1705.612654][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.612695][T30521] ? add_lock_to_list+0x99/0x110 [ 1705.612751][T30521] __mutex_lock+0x1a4/0x1b10 [ 1705.612804][T30521] ? hfs_extend_file+0xa6/0xcf0 [ 1705.612855][T30521] ? hfs_extend_file+0xa6/0xcf0 [ 1705.612913][T30521] ? hfs_write_inode+0xce/0xab0 [ 1705.612943][T30521] ? __writeback_single_inode+0xcd4/0x1350 [ 1705.612997][T30521] ? __pfx___mutex_lock+0x10/0x10 [ 1705.613049][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.613089][T30521] ? lock_acquire+0x1b1/0x370 [ 1705.613130][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.613171][T30521] ? trace_contention_end+0x122/0x170 [ 1705.613213][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.613258][T30521] ? hfs_extend_file+0xa6/0xcf0 [ 1705.613307][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.613348][T30521] hfs_extend_file+0xa6/0xcf0 [ 1705.613402][T30521] ? __pfx_hfs_extend_file+0x10/0x10 [ 1705.613452][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.613501][T30521] hfs_bmap_reserve+0x2ab/0x3a0 [ 1705.613554][T30521] __hfs_ext_write_extent+0x3c4/0x510 [ 1705.613605][T30521] ? hfs_find_init+0x273/0x330 [ 1705.613642][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.613685][T30521] hfs_ext_write_extent+0x1b7/0x200 [ 1705.613741][T30521] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1705.613799][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.613839][T30521] ? __mpage_writepages+0x1a8/0x210 [ 1705.613879][T30521] ? __pfx___mpage_writepages+0x10/0x10 [ 1705.613913][T30521] hfs_write_inode+0xce/0xab0 [ 1705.613946][T30521] ? __pfx_hfs_write_inode+0x10/0x10 [ 1705.613977][T30521] ? __lock_acquire+0x4a5/0x2630 [ 1705.614026][T30521] ? __writeback_single_inode+0x454/0x1350 [ 1705.614079][T30521] ? __writeback_single_inode+0x454/0x1350 [ 1705.614130][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.614177][T30521] __writeback_single_inode+0xcd4/0x1350 [ 1705.614234][T30521] ? __pfx___writeback_single_inode+0x10/0x10 [ 1705.614286][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.614327][T30521] ? do_raw_spin_unlock+0x145/0x1e0 [ 1705.614372][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.614416][T30521] writeback_sb_inodes+0x766/0x1c60 [ 1705.614478][T30521] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1705.614551][T30521] ? chacha_permute+0x61e/0x6e0 [ 1705.614689][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.614730][T30521] ? rcu_is_watching+0x12/0xc0 [ 1705.614779][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.614820][T30521] ? queue_io+0x287/0x540 [ 1705.614872][T30521] wb_writeback+0x1bf/0xb90 [ 1705.614929][T30521] ? __pfx_wb_writeback+0x10/0x10 [ 1705.614986][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.615027][T30521] ? mark_held_locks+0x40/0x70 [ 1705.615062][T30521] ? _raw_spin_unlock_irq+0x23/0x50 [ 1705.615139][T30521] wb_workfn+0x14f/0xc00 [ 1705.615192][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.615233][T30521] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1705.615280][T30521] ? __pfx_wb_workfn+0x10/0x10 [ 1705.615333][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.615376][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.615419][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.615459][T30521] ? rcu_is_watching+0x12/0xc0 [ 1705.615505][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.615549][T30521] process_one_work+0xa0e/0x1980 [ 1705.615600][T30521] ? __pfx_process_one_work+0x10/0x10 [ 1705.615638][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.615685][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.615730][T30521] worker_thread+0x5ef/0xe50 [ 1705.615776][T30521] ? kthread+0x13a/0x450 [ 1705.615809][T30521] ? __pfx_worker_thread+0x10/0x10 [ 1705.615846][T30521] kthread+0x370/0x450 [ 1705.615884][T30521] ? __pfx_kthread+0x10/0x10 [ 1705.615919][T30521] ret_from_fork+0x72b/0xd50 [ 1705.615959][T30521] ? __pfx_ret_from_fork+0x10/0x10 [ 1705.615995][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.616036][T30521] ? rcu_is_watching+0x12/0xc0 [ 1705.616081][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1705.616121][T30521] ? __switch_to+0x800/0x1100 [ 1705.616214][T30521] ? __switch_to_asm+0x39/0x70 [ 1705.616258][T30521] ? __pfx_kthread+0x10/0x10 [ 1705.616294][T30521] ret_from_fork_asm+0x1a/0x30 [ 1705.616350][T30521] [ 1706.221972][T30521] hfs: new node 0 already hashed? [ 1706.227983][T30521] ------------[ cut here ]------------ [ 1706.233698][T30521] 1 [ 1706.233715][T30521] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#0: kworker/u8:9/30521 [ 1706.246521][T30521] Modules linked in: [ 1706.250470][T30521] CPU: 0 UID: 0 PID: 30521 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1706.261709][T30521] Tainted: [L]=SOFTLOCKUP [ 1706.266122][T30521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1706.269359][ T8035] dummy0: entered promiscuous mode [ 1706.276378][T30521] Workqueue: writeback wb_workfn (flush-7:6) [ 1706.287622][T30521] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1706.293573][T30521] Code: a5 c4 63 0a e9 37 5a d1 01 e8 7b 23 e1 00 4c 89 f7 e8 93 c4 63 0a e8 6e 23 e1 00 89 ee 48 c7 c7 40 ea d1 8b e8 20 e1 fa ff 90 <0f> 0b 90 e9 39 5d d1 01 e8 52 23 e1 00 e8 2d 4e 4d 00 e9 95 5f d1 [ 1706.313421][T30521] RSP: 0018:ffffc9000dd7f020 EFLAGS: 00010282 [ 1706.318737][ T8035] dummy0: entered allmulticast mode [ 1706.319571][T30521] RAX: 000000000000001f RBX: ffff88802b068400 RCX: 0000000000000000 [ 1706.333107][T30521] RDX: 000000000000001f RSI: ffffffff81e72ba9 RDI: fffff52001bafdf5 [ 1706.341298][T30521] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1706.349342][T30521] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1706.357372][T30521] R13: ffff888046946000 R14: ffff8880469460d8 R15: 0000000000000000 [ 1706.365737][T30521] FS: 0000000000000000(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 1706.374764][T30521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1706.381492][T30521] CR2: 00007f7cbaf4da08 CR3: 000000005d1fa000 CR4: 0000000000350ef0 [ 1706.389494][T30521] Call Trace: [ 1706.392914][T30521] [ 1706.395855][T30521] ? _raw_spin_unlock+0x28/0x50 [ 1706.400746][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.406466][T30521] ? hfs_bnode_put+0x208/0x480 [ 1706.411322][T30521] hfs_bmap_alloc+0x5a7/0x6b0 [ 1706.416188][T30521] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1706.421562][T30521] ? __asan_memcpy+0x3c/0x60 [ 1706.426506][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.432273][T30521] ? hfs_bnode_read.part.0+0x298/0x330 [ 1706.437832][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.443518][T30521] ? folio_mark_accessed+0xf3/0x1040 [ 1706.449041][T30521] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1706.454813][T30521] ? rcu_is_watching+0x12/0xc0 [ 1706.459640][T30521] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1706.466026][T30521] ? do_raw_spin_unlock+0x145/0x1e0 [ 1706.471385][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.477195][T30521] ? _raw_spin_unlock+0x28/0x50 [ 1706.482091][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.487802][T30521] ? hfs_bnode_put+0x208/0x480 [ 1706.492872][T30521] hfs_brec_insert+0x8ba/0xc20 [ 1706.497875][T30521] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1706.503288][T30521] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1706.508371][T30521] __hfs_ext_write_extent+0x3ef/0x510 [ 1706.513893][T30521] ? hfs_find_init+0x273/0x330 [ 1706.518707][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.524532][T30521] hfs_ext_write_extent+0x1b7/0x200 [ 1706.529791][T30521] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1706.535648][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.541371][T30521] ? __mpage_writepages+0x1a8/0x210 [ 1706.546612][T30521] ? __pfx___mpage_writepages+0x10/0x10 [ 1706.552300][T30521] hfs_write_inode+0xce/0xab0 [ 1706.557022][T30521] ? __pfx_hfs_write_inode+0x10/0x10 [ 1706.562383][T30521] ? __lock_acquire+0x4a5/0x2630 [ 1706.567364][T30521] ? __writeback_single_inode+0x454/0x1350 [ 1706.573247][T30521] ? __writeback_single_inode+0x454/0x1350 [ 1706.579100][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.584835][T30521] __writeback_single_inode+0xcd4/0x1350 [ 1706.590529][T30521] ? __pfx___writeback_single_inode+0x10/0x10 [ 1706.596754][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.602514][T30521] ? do_raw_spin_unlock+0x145/0x1e0 [ 1706.607817][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.613587][T30521] writeback_sb_inodes+0x766/0x1c60 [ 1706.618993][T30521] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1706.624679][T30521] ? chacha_permute+0x61e/0x6e0 [ 1706.629712][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.635398][T30521] ? rcu_is_watching+0x12/0xc0 [ 1706.640332][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.646033][T30521] ? queue_io+0x287/0x540 [ 1706.650474][T30521] wb_writeback+0x1bf/0xb90 [ 1706.655130][T30521] ? __pfx_wb_writeback+0x10/0x10 [ 1706.660539][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.666269][T30521] ? mark_held_locks+0x40/0x70 [ 1706.671145][T30521] ? _raw_spin_unlock_irq+0x23/0x50 [ 1706.676736][T30521] wb_workfn+0x14f/0xc00 [ 1706.681076][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.686802][T30521] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1706.692832][T30521] ? __pfx_wb_workfn+0x10/0x10 [ 1706.697652][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.703372][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.709060][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.714762][T30521] ? rcu_is_watching+0x12/0xc0 [ 1706.719656][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.725369][T30521] process_one_work+0xa0e/0x1980 [ 1706.730432][T30521] ? __pfx_process_one_work+0x10/0x10 [ 1706.735912][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.741600][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.747585][T30521] worker_thread+0x5ef/0xe50 [ 1706.752315][T30521] ? kthread+0x13a/0x450 [ 1706.756800][T30521] ? __pfx_worker_thread+0x10/0x10 [ 1706.761955][T30521] kthread+0x370/0x450 [ 1706.766075][T30521] ? __pfx_kthread+0x10/0x10 [ 1706.770688][T30521] ret_from_fork+0x72b/0xd50 [ 1706.775317][T30521] ? __pfx_ret_from_fork+0x10/0x10 [ 1706.780499][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.786190][T30521] ? rcu_is_watching+0x12/0xc0 [ 1706.790999][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.796658][T30521] ? __switch_to+0x800/0x1100 [ 1706.801433][T30521] ? __switch_to_asm+0x39/0x70 [ 1706.806331][T30521] ? __pfx_kthread+0x10/0x10 [ 1706.811314][T30521] ret_from_fork_asm+0x1a/0x30 [ 1706.816224][T30521] [ 1706.819335][T30521] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1706.826630][T30521] CPU: 0 UID: 0 PID: 30521 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1706.837760][T30521] Tainted: [L]=SOFTLOCKUP [ 1706.842170][T30521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1706.852236][T30521] Workqueue: writeback wb_workfn (flush-7:6) [ 1706.858358][T30521] Call Trace: [ 1706.861649][T30521] [ 1706.864580][T30521] dump_stack_lvl+0x100/0x190 [ 1706.869273][T30521] vpanic+0x552/0x970 [ 1706.873279][T30521] ? __pfx_vpanic+0x10/0x10 [ 1706.877793][T30521] ? lock_release+0x245/0x310 [ 1706.882529][T30521] panic+0xd1/0xe0 [ 1706.886285][T30521] ? __pfx_panic+0x10/0x10 [ 1706.890894][T30521] ? check_panic_on_warn+0x1f/0x90 [ 1706.896131][T30521] check_panic_on_warn.cold+0x19/0x34 [ 1706.901517][T30521] ? hfs_bnode_create.cold+0x41/0x49 [ 1706.906819][T30521] __warn.cold+0x191/0x328 [ 1706.911315][T30521] __report_bug+0x296/0x3d0 [ 1706.915984][T30521] ? hfs_bnode_create.cold+0x41/0x49 [ 1706.921415][T30521] ? __pfx___report_bug+0x10/0x10 [ 1706.926489][T30521] ? rcu_is_watching+0x12/0xc0 [ 1706.931282][T30521] ? _printk+0xcf/0x110 [ 1706.935457][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.941229][T30521] ? preempt_count_add+0x76/0x150 [ 1706.946301][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.952043][T30521] ? __wake_up_klogd+0xe2/0x140 [ 1706.957270][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1706.963036][T30521] ? vprintk_emit+0x1c9/0x6b0 [ 1706.967833][T30521] ? __pfx_vprintk_emit+0x10/0x10 [ 1706.972925][T30521] ? hfs_bnode_create.cold+0x41/0x49 [ 1706.978362][T30521] report_bug+0xb2/0x220 [ 1706.982828][T30521] ? hfs_bnode_create.cold+0x41/0x49 [ 1706.988152][T30521] handle_bug+0x16a/0x2a0 [ 1706.992499][T30521] exc_invalid_op+0x17/0x50 [ 1706.997018][T30521] asm_exc_invalid_op+0x1a/0x20 [ 1707.001887][T30521] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1707.007814][T30521] Code: a5 c4 63 0a e9 37 5a d1 01 e8 7b 23 e1 00 4c 89 f7 e8 93 c4 63 0a e8 6e 23 e1 00 89 ee 48 c7 c7 40 ea d1 8b e8 20 e1 fa ff 90 <0f> 0b 90 e9 39 5d d1 01 e8 52 23 e1 00 e8 2d 4e 4d 00 e9 95 5f d1 [ 1707.027731][T30521] RSP: 0018:ffffc9000dd7f020 EFLAGS: 00010282 [ 1707.033819][T30521] RAX: 000000000000001f RBX: ffff88802b068400 RCX: 0000000000000000 [ 1707.041835][T30521] RDX: 000000000000001f RSI: ffffffff81e72ba9 RDI: fffff52001bafdf5 [ 1707.049862][T30521] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1707.057984][T30521] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1707.066064][T30521] R13: ffff888046946000 R14: ffff8880469460d8 R15: 0000000000000000 [ 1707.074235][T30521] ? vprintk_emit+0x1c9/0x6b0 [ 1707.079081][T30521] ? _raw_spin_unlock+0x28/0x50 [ 1707.083971][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.089630][T30521] ? hfs_bnode_put+0x208/0x480 [ 1707.094687][T30521] hfs_bmap_alloc+0x5a7/0x6b0 [ 1707.099408][T30521] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1707.104640][T30521] ? __asan_memcpy+0x3c/0x60 [ 1707.109252][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.114917][T30521] ? hfs_bnode_read.part.0+0x298/0x330 [ 1707.120410][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.126065][T30521] ? folio_mark_accessed+0xf3/0x1040 [ 1707.131385][T30521] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1707.137148][T30521] ? rcu_is_watching+0x12/0xc0 [ 1707.142194][T30521] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1707.148674][T30521] ? do_raw_spin_unlock+0x145/0x1e0 [ 1707.154012][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.159670][T30521] ? _raw_spin_unlock+0x28/0x50 [ 1707.164637][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.170335][T30521] ? hfs_bnode_put+0x208/0x480 [ 1707.175221][T30521] hfs_brec_insert+0x8ba/0xc20 [ 1707.180030][T30521] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1707.185372][T30521] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1707.190437][T30521] __hfs_ext_write_extent+0x3ef/0x510 [ 1707.195843][T30521] ? hfs_find_init+0x273/0x330 [ 1707.200637][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.206302][T30521] hfs_ext_write_extent+0x1b7/0x200 [ 1707.211570][T30521] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1707.217334][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.223017][T30521] ? __mpage_writepages+0x1a8/0x210 [ 1707.228517][T30521] ? __pfx___mpage_writepages+0x10/0x10 [ 1707.234099][T30521] hfs_write_inode+0xce/0xab0 [ 1707.238891][T30521] ? __pfx_hfs_write_inode+0x10/0x10 [ 1707.244209][T30521] ? __lock_acquire+0x4a5/0x2630 [ 1707.249184][T30521] ? __writeback_single_inode+0x454/0x1350 [ 1707.255112][T30521] ? __writeback_single_inode+0x454/0x1350 [ 1707.261476][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.267163][T30521] __writeback_single_inode+0xcd4/0x1350 [ 1707.272870][T30521] ? __pfx___writeback_single_inode+0x10/0x10 [ 1707.278984][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.284639][T30521] ? do_raw_spin_unlock+0x145/0x1e0 [ 1707.289960][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.295766][T30521] writeback_sb_inodes+0x766/0x1c60 [ 1707.301019][T30521] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1707.307123][T30521] ? chacha_permute+0x61e/0x6e0 [ 1707.312037][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.317788][T30521] ? rcu_is_watching+0x12/0xc0 [ 1707.322583][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.328239][T30521] ? queue_io+0x287/0x540 [ 1707.332599][T30521] wb_writeback+0x1bf/0xb90 [ 1707.337139][T30521] ? __pfx_wb_writeback+0x10/0x10 [ 1707.342296][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.347951][T30521] ? mark_held_locks+0x40/0x70 [ 1707.352741][T30521] ? _raw_spin_unlock_irq+0x23/0x50 [ 1707.357997][T30521] wb_workfn+0x14f/0xc00 [ 1707.362291][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.367974][T30521] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1707.373819][T30521] ? __pfx_wb_workfn+0x10/0x10 [ 1707.378652][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.384427][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.390087][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.395740][T30521] ? rcu_is_watching+0x12/0xc0 [ 1707.400629][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.406396][T30521] process_one_work+0xa0e/0x1980 [ 1707.411482][T30521] ? __pfx_process_one_work+0x10/0x10 [ 1707.416875][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.422655][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.428359][T30521] worker_thread+0x5ef/0xe50 [ 1707.432989][T30521] ? kthread+0x13a/0x450 [ 1707.437265][T30521] ? __pfx_worker_thread+0x10/0x10 [ 1707.442392][T30521] kthread+0x370/0x450 [ 1707.446487][T30521] ? __pfx_kthread+0x10/0x10 [ 1707.451103][T30521] ret_from_fork+0x72b/0xd50 [ 1707.455721][T30521] ? __pfx_ret_from_fork+0x10/0x10 [ 1707.460855][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.466702][T30521] ? rcu_is_watching+0x12/0xc0 [ 1707.471626][T30521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.477285][T30521] ? __switch_to+0x800/0x1100 [ 1707.481993][T30521] ? __switch_to_asm+0x39/0x70 [ 1707.486785][T30521] ? __pfx_kthread+0x10/0x10 [ 1707.491479][T30521] ret_from_fork_asm+0x1a/0x30 [ 1707.496283][T30521] [ 1707.499696][T30521] Kernel Offset: disabled [ 1707.504101][T30521] Rebooting in 86400 seconds..