last executing test programs: 15m44.127475075s ago: executing program 32 (id=145): r0 = socket(0x28, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x28, 0x1, 0x0, 0xfffffffffffffd24) 15m40.779499726s ago: executing program 1 (id=182): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_flash={0x33, 0x5, './file0/file0/..\x00'}}) 15m40.570547257s ago: executing program 1 (id=184): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/cgroup', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/161, 0xa1) 15m40.33768357s ago: executing program 1 (id=187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x5c, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) 15m40.061455239s ago: executing program 1 (id=191): syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e5496ddf42b572a11a00801680", @ANYRESHEX, @ANYRES32=0x0], 0x1, 0x14c, &(0x7f00000001c0)="$eJzszr9LOnEcBvDnvnen30r7QQYWZEJDRyKdJ9XUoJEkdAmFS5NQJwVKkVCORbS1tTpIQpP4L1jWYihE/RMtbkFrfO6OwCb3ntdy3PN+Pm/eG2tdDWFAhmP9uHhyapVK1kF4J2Omdj+azYTIPQD+982d/kMCOBRfBehdAiJ+8sPrriuI/14C0AAkR4D8UcHS4XSHRRYAFLcsMm0eaE2pds/oy+wTrLibzShAcuxnn5nPq1gQ+yacLAbgE0C5EmnUX7Y77XR08X5WxnU6Mjcp9ech68ZITdd8QRlZ6/kOSXv+vtSOvg416m/djrmVMb3duGGsxPWYri/73YOhbPrOgL1f+zwIhpQscCUBt/as9yiJN63qV6Y4ulp1X1+cy2FAKlf2c0G1lguM/4OsQcIg1IFaRERERERERERERERERET0V3wHAAD//1/LWts=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 15m39.888356316s ago: executing program 1 (id=193): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 15m38.37087317s ago: executing program 1 (id=201): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {0x1, 0x1}, 0x8, 0x25, 0x0, 0x3f, 0x90d, 0x7, 0x0, 0x2, 0x3, 0x0}) 15m37.944276694s ago: executing program 33 (id=198): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000006c0)={[{@utf8}, {@utf8}, {@allow_utime={'allow_utime', 0x3d, 0xde0}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@allow_utime}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x3}}]}, 0x1, 0x153c, &(0x7f00000008c0)="$eJzs3AuYjtXaOPD7Xms9Y0h6m+QwrLXuhzc5LJIkhyQ5JEkStuSUkCTZkpAYckoakpAchuQwhOQwMWmcz+dDQpI0SRKSU7L+18T81a797b2/3c73fXP/ruu9rDXruddzP+/9vs/7PGte803XYTUa16zagIjg34KX/kkAgFgAGAQA1wFAAABl48rGZYxnl5jw7+2E/bEaJl/tDNjVxPXP2rj+WRvXP2vj+mdtXP+sjeuftXH9szauP2NZ2ZYZ+a/nR9Z98Pp/Vsaf//+HpJcc98W6kjd2A4j5Z0O4/v/74b8Ry/X/Pyv4Zzbi+mdtXP+sKvZqJ8D+B+D3f1aQ7e+OcP2zNq4/Y1nZL9eCY+FqrkU/fKah+fP3C5H/5O9AfO9Lz/LVX+f/u8fPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Cc76KxQAZLavdl6MMcYYY4wxxhj74/hsVzsDxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyRy/HuLgBsgNN0IeyAv5ID/EQwEoCBoMWCAIoRAUhijcBEXgZigKxaA4lAAHJaEU3AKl4VYoA7dBWbgdysEdUB4qQEWoBHdCZbgLqsDdUBXugWpQHWpATbgXasF9UBvuhzrwANSFB6EePAT14WFoAA2hEfwFGsMj0AQehabQDJpDC2j534p/AXrCi9ALekMC9IG+8BL0g/4wAAbCIHgZBsMrMARehUQYCsPgNRgOr8MIeANGwigYDW/CGHgLxsI4GA8TIAkmwiR4GybDOzAFpsI0mA7JMANmwrswC2bDHHgP5sL7MA/mwwJYCCnwASyCxZAKH8IS+AjSYCksg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yD7bADdsIu+Bh2wyewB/bCPvgU9sNn/2L8mb+J74aAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/FMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgffivdgHa2NtrIN1sC7WzVyewgbYABthI2yMjbEJNsGm2BSbY3NsiS2xFbbC1tga22JbbIftsD22xw7YATtiR+yEnbAzdsYu2AW7Ylfsht2xe/oL2QBfxBexN1YTfbAv9sV+mJhtAA7EgfgyDsZX8BV8FRNxKA7D1/A1fB1H4GkceXEUjsbRWFm8hWNxHJKYgEmYhJNwEk7GyTgFp+JUnI7JOANn4kychbNxNr6Hc/F9fB/n43xciCmYgotwMaZiKi7BM5iGS3EZLscVuBJX4Gpcg6txHa7HdbgRN+Jm3IxbcStux+24E3fix6gA8BPci3sxEffjfjyAB/AgHsRDeAjTMR0P42E8gkfwKB7FY3gMj+MJPIkn8BSewtN4Bs/iWTyP5/ECPhf/VaOPi61NBJFBCSViRIyIFbEih8ghcoqcIpfIJSIiIuJEnMgtcos8Io/IJ/KJeBEvCoqCwggjSIQZZwoRFVFRRBQRRUVRUVwUF044UUqUEqVFaVFGlBFlxe2inLhDlBcVRBtXSVQSlUVbV0XcLaqKqqKaqC5qiJqipqglaonaoraoI+qIuqKuqCceEvVFHxyADUVGZRqLodhEDMOmopmQl89QrcQIbC3aiLbiCTEKR2J70cp1EE+LjmIsdhJ/FePwWdFFTMCu4nnRTXQXPcQLoqdo7XqJ3mIK9hF9xXTsJ/qLAWKgmIXVxXs4N3sN8apIFEPFMPGaWIivixHiDTFSjBKjxZtijHhLjBXjxHgxQSSJiWKSeFtMFu+IKWKqmCami2QxQ8wU74pZYraYI94Tc8X7Yp6YLxaIhSJFfCAWicUiVXwoloiPRJpYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih9gpdomPxW7xidgj9op94lOxX3wmDojPxUHxhTgkvhTp4itxWHwtjohvxFHxrTgmvhPHxQlxUnwvTokfxGlxRpwV58R58aO4IH4SF4UXIFEKKaWSgYyR2WSszC5zyGtkThlknv9lnLxB5pY3yjwyr8wn88t4WUAWlFoaaSXJUBaShWVU3iSLyJtlUVlMFpclpJMlZSl5iywtb5Vl5G2yrLxdlpN3yPKygqwoK8k7ZWV5l4TIpX1Uk9VlDVlT3isT4D5ZW94v68gHZF35oKwnH5L15cOygWwoG8m/yMbyEdlEPiqbymayuWwhW8rHZCv5uGwt28i28gnZTj4p28unZAf5tOwo/eWXyLOyi3xOdpXPy26yu+whf5IXpZe9ZG8JfUD2lS/JfrK/HCAHykHyZTlYviKHyFdlohwqh8nX5HD5uhwh35Aj5Sg5Wr4px8i35Fg5To6XE2SSnCgnybflZPmOnCKnymlyukyWM+SAyzPNkfIfxr/9O/FDft77ZrlFbpXb5Ha5Q+6Uu+THcrfcLffIPXKf3Cf3y/3ygDwgD8qD8pA8JNNlujwsD8sj8og8Ko/KY/KYPC5PyHPye3lK/iBPyzPyjDwnz8vz8sLl5wAUKqGkUipQMSqbilXZVQ51jcqprlW51HUqoq5XceoGlVvdqPKovCqfyq/iVQFVUGlllFWkQlVIFVZRdRNefsGo4qqEcqqkKqVu+VfiVRF1syqqiv0qPjO/hL+TX0vVUrVSrVRr1Vq1VW1VO9VOtVftVQfVQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UgkpQfdVLqp/qrwaogWqQellkHMMQNUQlqkQ1TA1Tw9VwNUKNUCPVSDVajVZj1Bg1Vo1V49V4laSS1CQ1SU1Wk9UUNUVNU9NUskpWM9VMNUvNUnPUHDVXzVXz1Dy1QC1QKSpFLVKLVKpKVUvUEpWmlqqlarlarlaqlWq1Wq3WqrVqvVqvNqqNKk1tUVvUNrVN7VA71C61S+1Wu9UetUftU/vUfrVfHVAH1EF1UB1Sh1S6SleH1WF1RB1RR9VRdUwdU8fVcXVSnVSn1Cl1Wp1WZ9VZdV6dVxfUBXVRXcy47AtEIAIVqCAmiAlig9ggR5AjyBnkDHIFuYJIEAnigrggd3BjkCfIG+QL8gfxQYGgYKADE9hAXC56NLgpKBLcHBQNigXFgxKBC0oGpYJbgtLBrUGZ4LagbHB7UC64IygfVAgqBpWCO4PKwV1BleDuoGpwT1AtqB7UCGoG9wa1gvuC2sH9QZ3ggaBu8GBQL3goqB88HDQIGma8voLGwSNBk+DRoGnQLGgetAha/nHzB40C70/nfdz10r11gu6j++qXdD/dXw/QA/Ug/bIenHE20a/qRD1UD9Ov6eH6dT1Cv6FH6lF6tH5Tj9Fv6bF6nB6vJ+gkPVFP0m/ryfodPUVP1dP0dJ2sZ+iZ+l09S8/Wc/R7eq5+X8/T8/UCvVCn6A/0Ir1Yp+oP9RL9kU7TS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1d79A79S79sd6tP9F79F69T3+q9+vP9AH9uT6ov9CH9Jc6XX+lD+uv9RH9jT6qv9XH9Hf6uD6hy+jv9Sn9gz6tz+iz+pw+r3/UF/RP+qL2GRf3GR/vRhllYkyMiTWxJofJYXKanCaXyWUiJmLiTJzJbXKbPCaPyWfymXgTbwqagiYDGTKFTCETNVFTxBQxRU1RU9wUN844U8qUMqVNaVPGlDFlTVlTzpQz5U15U9FUNHeaO81d5i5zt7nb3GPuMdVNdVPT1DS1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPTyDQyjU1j08Q0MU1NU9PcNDctTUvTyrQyrU1r09a0Ne1MO9PetDcdTAfT0XQ0nUwn09l0Nl1MF9PVdDXdTDfTw/QwPU1P08v0MgkmwfQ1fU0/088MMAPMIDPIDDaDzRAzxCSaRDPMDDPDzXAzwowwI80oMzrjQtW8ZcaacWa8mWCSTJKZZCaZyWaymWKmmGlmmkk2yWammWlmmVlmjplj5pq5Zp6ZZxaYBSbFpJhFZpFJNalmiVli0kyaWWaWmRVmhVllVpk1Zo1ZZ9aZDbDBbDKbzBazxWwz28wOs8PsMrvMbrPb7DF7zD6zz+w3+80Bc8AcNAfNIXPIpJt0c9gcNkfMEXPUHDXHzDFz3Bw3J81Jc8qcMqfNaXPWnDXnTd7Ln5fexNrsNoe9xua019pc9jr7t/18Nr+NtwVsQattHpv3V31jrS1qi9nitoR1tqQtZW/5Tb+8rWAr2kr2TlvZ3mWr/KZfy95na9v7bR37gK1p7/1Vv6590Nazj9j6iAC2mW1kW9jG9hHbxD5qm9pmtrltYdvZJ217+5TtYJ+2He0zv+kvsovtGrvWrrPr7R6715615+wR+409b3+0vWxvO8i+bAfbV+wQ+6pNtEN/0x9t37Rj7Ft2rB1nx9sJv+lPs9Ntsp1hZ9p37Sw7+zf9FPuBnWtT7Tw73y6wC3/uZ+SUaj+0S+xHNs0GsMwutyvsSrvKrv7/uS63G+0mu9nutp/YbXa73WF32l2ZF8J2r91nP7Wxl7sH7Rf2kD1q0+1X9rD9+ufjO2q/tcfsd/a4PWFP2u/tKfuDyozOOPbv7U/2ovUWCAlIkqKAYigbxVJ2ykHXUE66lnLRdRSh6ymObqDcdCPlobyUj/JTPBWggqTJkCWikApRYYrSTZSZXnEqQY5KUim6hUrTrVSGbqOydDuVozuoPFWgilSJ7qTKdBdVobupKt1D1ag61aCadC/VovuoNt1PdegBqksPUj16iOrTw9SAGlIj+gs1pkeoCT1KTakZNacW1JIeo1b0OLWmNtSWnqB29CS1p6eoAz1NHekZ6kR/pc70LHWh56grPU/dqDv1oBeoJ71Ivag3JVAf6ksvUT/qTwNoIA2il2kwvUJD6FVKpKE0jF6j4fQ6jaA3aCSNotH0Jo2ht2gsjaPxNIGSaCJNordpMr1DU2gqTaPplEwzaCa9S7NoNs2h92guvU/zaD4toIWUQh/QIlpMqfQhLaGPKI2W0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO2gn7aKPaTd9QntoL+2jT2k/fUYH6HM6SF/QIfqS0ukrOkxf0xH6ho7St743fUfH6QSdpO/pFP1Ap+kMnaVzdJ5+pAv0E10kTxBiKEIZqjAIY8JsYWyYPcwRXhPmDK8Nc4XXhZHw+jAuvCHMHd4Y5gnzhvnC/GF8WCAsGOrQhDakMAwLhYXDaHhTWCS8OSwaFguLhyVCF5YMS4W3hKXDW8My4W1h2fD2sFx4R1g+rBA+8kCl8M6wcnhXWCW8O6wa3hNWC6uHNcKa4b1hrfC+sHZ4f1gnfCAsEz4Y1gsfCuuHD4cNwoZho/AvYePwkbBJ+GjYNGwWNg9bhC3Dx8JW4eNh67BN2Da8JmwXPhm2D58KO4RPhx3DZ34ef3Bx5vgTvxlPCPuEfcOXwpdC7++XC6ILoynRD6KLooujqdEPo0uiH0XTokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo97XzAYOnXDSKRe4GJfNxbrsLoe7xuV017pc7joXcde7OHeDy+1udHlcXpfP5XfxroAr6LQzzjpyoSvkCruou8kVcTe7oq6YK+5KOOdKulKuhWvpWrpW7nHX2rVxbd0T7gn3pHvSPeWeck+7ju4Z18n91XV2z7ou7jn3nHvedXPdXQ/3guvpJua69J5McH1dX9fP9XMD3AA3yA1yg91gN8QNcYku0Q1zw9xwN9yNcCPcSDfSjXaj3Rg3xo11Y914N94luSQ3yU1yk91kN8VNcdPcNJfskt1MN9PNcrNc5dmX9jLPzXML3AKX4lLcIpdxzZjqlrglLs2luWVumVvhVrhVbpVb49a4dW6d2+A2uE1uk9vitrhtbpvb4Xa4XW6X2+12uz3+ukuTuv3ugDvgDrqD7pD70qW7r9xh97U74r5xR9237pj7zh13J9xJ97075X5wp90Zd9adc+fdj+6C+8lddN4lRSZGJkXejkyOvBOZEpkamRaZHkmOzIjMjLwbmRWZHZkTeS8yN/J+ZF5kfmRBZGEkJfJBZFFkcSQ18mFkSeSjSFpkaWRZZHlkRWRlxPsC20JfyBf2UX+TL+Jv9kV9MV/cl/DOl/Sl/C2+9KW807y/3Zfzd/jyvoKv6B/1TX0z39y38C39Y76Vf9y39m18W/+Eb+ef9O39U76Df9p39M/4Tv6vvrN/1nfxz/mu/nnfzXf3PfwLvqd/0ffyvX2C7+P7+pd8P9/fD/AD/SD/sh/sX/FD/Ks+0Q/1w/xrfrh/3Y/wb/iRfpQfHfOmH5N5iwwTfJKf6Cf5t/1k/46f4qf6aX66T/Yz/Ez/rp/lZ/s5/j0/17/v5/n5foFf6FP8B36RX+xT/Yd+if/Ip/mlmYvGfpVf7df4tX6dX+83+I1+k9/st/itfpvf7nf4nX6X/9jv9p/4PX6v3+c/9fv9Z/6A/9wf9F/4Q/5Ln+6/8of91/6I/8Yf9d/6Y/47f9yf8Cf99/6U/8Gf9mf8WX/On/c/+gv+J3+R/88aY4wxxtg/ZeKVpvj1yKXl/D6/EyN+sXFfALh2e/70X45nXFFuyHOp3V/E/7wc8XTvrg0zH9WqJSQkXN42TUJQeD5A5m+CMvz81YPL/aXQFp6EDtAGSv9u/v1F9/P0D+aP3g6Q4xcxGQll9q/M/zkAJvzO/I89MXpRufBs3H8x/3yAooWvxGSHK/2l0Pbn9ZU2UObv5J+31T/IP/sXSQCtfxGTE670r+RfCh6HZ6DDr7ZkjDHGGGOMMcYu6S8qds68/8z8xufv3Z/Hqysx2eBK/x/dnzPGGGOMMcYYY+zqe7Z7j6ce69ChTed/vVHlvxX1TzeawH9qZm78bsN7gMyfKAD4NycEyGjI/2Ib8UcfxdY/5YlKvPzW+duhFed8AP8zSvlHNK7yiYkxxhhjjDH2h7ty0f/rn6urlRBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYF/Rl/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9BC/Sw") mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 15m37.919360486s ago: executing program 34 (id=201): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {0x1, 0x1}, 0x8, 0x25, 0x0, 0x3f, 0x90d, 0x7, 0x0, 0x2, 0x3, 0x0}) 14m0.418642499s ago: executing program 5 (id=1120): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x8, 0x3, 0x101, 0x8, 'syz1\x00', 0x6}) 14m0.215608699s ago: executing program 5 (id=1123): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 13m59.970186085s ago: executing program 5 (id=1126): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0x1b, 0x4e25, 0x10001, @mcast2, 0xb}}}, 0x30) 13m59.696480662s ago: executing program 5 (id=1131): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'macceltic'}}]}, 0x9, 0x610, &(0x7f0000000c80)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 13m59.273329215s ago: executing program 5 (id=1136): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000480)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 13m57.365360999s ago: executing program 2 (id=1155): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="200000001100810001010000000200000e000a000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x24004880) 13m56.798686047s ago: executing program 5 (id=1158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 13m56.26518317s ago: executing program 35 (id=1158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 13m52.755301547s ago: executing program 2 (id=1174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 13m52.448724048s ago: executing program 2 (id=1176): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1004410, &(0x7f0000000480)={[{@init_itable_val={'init_itable', 0x3d, 0xd4d}}, {@inlinecrypt}]}, 0x11, 0x500, &(0x7f0000000a00)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001e00)) 13m51.599691775s ago: executing program 2 (id=1181): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'macceltic'}}]}, 0x9, 0x610, &(0x7f0000000c80)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 13m50.85558615s ago: executing program 2 (id=1187): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000d00)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) socket$isdn_base(0x22, 0x3, 0x0) 13m47.679160303s ago: executing program 2 (id=1189): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 13m47.036226358s ago: executing program 36 (id=1189): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 4m2.19270174s ago: executing program 9 (id=11002): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b12d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) 4m2.00367587s ago: executing program 9 (id=11008): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x10}}) 4m1.848353366s ago: executing program 9 (id=11013): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000, &(0x7f0000000300)='\x00i\xda&Z\xa8M\xb5\xb1xT\xa1\x8a\v\xeeL\xaa\xd6\xbem\x13\x88=\x9d\xd6\x1b;M\x0fuL\xad$\xba\xda\xdb\xc9\xaf\x03o\xc2+\x82\xf3\xe9\xf2\x14\xda\xf4\x88\x8c\x8e\xe0\xb3\xc6\xf7}\x15\x9d\xa2|\x17\x9eb\x1fE\xe3T[\xa5)\xa1\x82\xaa\xe0\xdd\x87Q\x14R\xc5S!fzw^s\xd1b\x9dB\x03\x00-\xcc\xd7\xbb\x0f\x00\xc1\xf6\xe5^G\x9bc\x18}\x020\xdf\xa9\xd7\x7f\xafM\xca[\xb8@\x17\xb3#\x06O\xaf\x11\xd3\x17_%ly\x9d\xb2&\x8f\x92\xc9\xa4)\xf23\x196B\xf0w\xfb\xb9\xdb0\x03\xe9\x9c\x8f\x9c\x17\xa6\x96{\x03u\x0eB&\a\xab25\xc2\xd3\xd2(\x91\x04\xe1\xcfg\xc4Z\xb4\x98@\xe7\'\xb0v\xad\x18\xefA\xd59\x96gnQ\x9c\xd7q\xc4\xac4\xdd\xf3\x81\x92\xac\x83i4\xeb\xf6\x87\xb7\xe8\xd0\xd1\xc2\xb3\x15\xb8\t||\xdcP\x8fG\xc9\xeb\xb7Ol\x03\xd6?:\x8b\x9a\xf4\xc7\x91\x1d\x05\xca\as\x88)\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8e\f\xa2\x9d\xc3\xa5#*\x17\x01g\xc9\x91\xe86\xdf\x9f\xd1\x8b!\xdc\xa2\xe5.\x193/K%\xf9\x1e\b\xf3\xa7\xbf\x98\xc4\x9d\xd2r\'\xe1\x95\t\xdeI\xdf\xd4\xa0\xf9\xf40\xe9+\x87\"*\xafV\x92\xac=6\xbeh\xfa\x1b\x03s\xa3qx\xf4.+\xc8{\xda5\x8eO\x86\xca&6\x92\xdf\x9e\xbe#\x91\x88\xf7\xc1\'\xce)l\x1am\x02J\xcb\x11\xafgd\x89\x86\x8c\xbfn\xe4\x8d\x1a\xccb\xb3\xbe\xd8\v({\a\xc1&\x13\xfb\x9c\x1e\"\xdd\xb9\xa8\x00L\x05w]\x11\x9aw (\xe5g\x8aa?\xd1`\xb3|\xab\xd1i\x1bUW\xf2,\b\x84Z\xc3\x12\xb1\xc3\a[\xe1\x00\xf7M\xc30\xdc\x1f\xc2K\x15\xcf\xe7\xd4\x8e\xf7\xf5\x15FSu{S\xa1k\xc0=\xc9\x90\x1c\xef\x83\xe9\x868#\xf1\xb1X\xd1\x02\x97\xd3\x984cfp!?\xe2\x15\xe9\xa1\xbcz\x9e=\xcc]\x9cpt\"\x01\x85\xfe\xa7\xfc9N\xa3>\xe2\xbf\xca?}\x80\x8f\xe4\xa1\x9c\xb9c\xd9\x90=%\x1c\a\xc2\x00\x1e\v\xd5u\xdd\xae\xc1\x83\x9b\xf5Q\xc2\x8e0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x37, "4372dcc479e73bdcff27000104000000000000980074b56487b37f5b84e4996b18020a0b5f8387d4361cb3deac0642e7ebb357de214a13"}}) 3m51.680147513s ago: executing program 38 (id=11127): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x37, "4372dcc479e73bdcff27000104000000000000980074b56487b37f5b84e4996b18020a0b5f8387d4361cb3deac0642e7ebb357de214a13"}}) 3.546850109s ago: executing program 3 (id=14640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x65, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.303152784s ago: executing program 3 (id=14647): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xe, 0xc100) 3.070637138s ago: executing program 6 (id=14652): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000340)={[{@compress_force}, {@datasum}, {@flushoncommit}, {@enospc_debug}, {@max_inline={'max_inline', 0x3d, [0x36, 0x6b, 0x0, 0x32, 0x31, 0x34, 0x6d]}}, {@space_cache_v1}, {@commit={'commit', 0x3d, 0x7b}}, {@barrier}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0x8000000000000000}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x64, 0x32, 0x37, 0x64, 0x64, 0x35, 0x33], 0x2d, [0x34, 0x34, 0x39, 0x62], 0x2d, [0x65, 0x30, 0x65, 0x65], 0x2d, [0x38, 0x39, 0x0, 0x37], 0x2d, [0x32, 0x5c, 0x37, 0x32, 0x65, 0x30, 0x65, 0x63]}}}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 2.440675772s ago: executing program 4 (id=14660): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000a000000204e0000", 0x58}], 0x1) 2.185805497s ago: executing program 4 (id=14662): syz_mount_image$exfat(&(0x7f0000000fc0), &(0x7f0000000400)='./file0\x00', 0x2000085c, &(0x7f0000001280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000003fc0)="$eJzs3AuYjtX6MPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEiyvku7/2fvr713//3V9/m+Pffvuhbrnue97/d+3nuueZ/nva6Zb3qOqteifu1mRCT+EPjrfylCiBghxDAhxDVCiEAIUSm+Uvyl4wUUpPyxJ2F/rgfTr3QH7Eri+edtPP+8jeeft/H88zaef97G88/beP55G8+fsbxs+5xi1/LKu+sKf/7v4Y89K/tD+P3/P0hu+clfbCx/fa9/I4Xnn7fx/PM2nn/exvPP23j+eRvP/z9frX9xjOeft/H8GcvLrvTnz/8frZhfX7Ir3cefuq7wtx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsTzinL9MCyH+a3+l+2KMMcYYY4wxxtifx+e/0h0wxhhjjDHGGGPs/zwQUiihRSDyifwiRhQQseIqESeuFgXFNSIirhXx4jpRSFwvCosioqgoJhJEcVFCGIHCChKhKClKiai4QZQWN4pEUUaUFeWEE+VFkrhJVBA3i4riFlFJ3Coqi9tEFVFVVBPVxe2ihrhD1BS1RG1xp6gj6op6or64SzQQd4uG4h7RSNwrGov7RBNxv2gqHhDNxIOiuXhItBAPi5biEdFKtBZtRFvR7n8r/wXRV7wo+on+IkUMEAPFS2KQGCyGiKFimHhZDBeviBHiVZEqRopR4jUxWrwuxog3xFgxTowXb4oJYqKYJCaLKWKqSBNviWnibTFdvCNmiJlilpgt0sUcMVe8K+aJ+WKBeE8sFO+LRWKxWCKWigzxgcgUy0SW+FAsFx+JbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxsdghdopdYrfYI/aKfeITsV98Kg6Iz0SO+PzfzD/7v+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcDBWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugrvgbmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDC/ACvAgvQn+oIwfAQBgIg2AQDIGhMBRehuHwCrwCr0IqjIRR8Bq8Bq/DGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwH96DhfD+ufdhMSyGpZABGZAJyyALsmA5nIVsWAErYRWshjWwGtbBelgHG2ETbIQtsAW2wTb4GD6GnbATdsNu2At74RP4BD6FTyEVciAHDsJBOASH4DAchlzIhSNwBI7CUTgGx+A4HIcTcBJOwUk4DafhDJyFc3AOzsN5uADPJXzVfG+ZDalCXqKllvlkPhkjY2SsjJVxMk4WlAVlREZkvIyXhWQhWVgWlkVlUZkgE2QJWUKiREkylCVlSRmVUVlalpaJMlGWlWWlk04mySRZQVaQFWVFWUneKivL22QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUTeb9sKgfAEHhQXppMCzkSWspR0Eq2lm1kW/k6PCrbyzHQQXaUneTjchyMhS6yvUuWT8muchJ0k8/IyfCs7CGnQk/5vOwle8s+8gXZV3Zw/WR/OQMGyIFyNgySg+UQOVTOg7ry0sTqyVdlqhwpR8nX5FJ4XY6Rb8ixcpwcL9+UE+REOUlOllPkVJkm35LT5NtyunxHzpAz5Sw5W6bLOXKufFfOk/PlAvmeXCjfl4vkYrlELpUZ8gOZKZfJLPmhXC4/ktlyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8nt8mO5Q+6Uu+RuuUfulfvkJ3K//FQekJ/JHPm5PCj/Ig/JL+Rh+aXMlV/JI/JreVR+I4/Jb+Vx+Z08IU/KU/J7eVr+IM/Is/Kc/FGelz/JC/JneVF6KRQoqZTSKlD5VH4VowqoWHWVilNXq4LqGhVR16p4dZ0qpK5XhVURVVQVUwmquCqhjEJlFalQlVSlVFTdoEqrG1WiKqPKqnLKqfIqSd2kKqibVUV1i6qkblWV1W2qiqqqqqnq6nZVQ92haqpaqra6U9VRdVU9VV/dpRqou1VDdY9qpO5VjdV9qom6XzVVD6hm6kHVXD2kWqiHVUv1iGqlWqs2qq1qpx5V7dVjqoPqqDqpx1Vn9YTqop5Uyeop1VU9rbqpZ1R39azqoZ5TPdXzqpfqrfqon9VF5VU/1V+lqAFqoHpJDVKD1RA1VA1TL6vh6hU1Qr2qUtVINUq9pkar19UY9YYaq8ap8epNNUFNVJPUZDVFTVVp6i01Tb2tpqt31Aw1U81Ss1W6mqOG/FppwX8j/+1/kD/il2ffprarj9UOtVPtUrvVHrVX7VP71H61Xx1QB1SOylEH1UF1SB1Sh9Vhlaty1RF1RB1VR9UxdUwdV8fVCXVS/ai+V6fVD+qMOqvOqh/VeXVeXfj1NRAatNRKax3ofDq/jtEFdKy+Ssfpq3VBfY2O6Gt1vL5OF9LX68K6iC6qi+kEXVyX0Eajtpp0qEvqUjqqb9Cl9Y06UZfRZXU57XR5naRv+sP5v9dfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52iU/RA/ZIepAfrIXqoHqZf1sP1cD1Cj9CpOlWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+k0PU1P09P1dD1Dz9Cz9CydrtP1XD1Xz9Pz9AK9QC/UC/UivUgv0Ut0hs7QmTpTZ+ksvVwv19l6hV6hV+lVeo1eo9fpdXqD3qA36U16i96is/V2vV3v0Dv0Lr1L79F79D69T+/X+/UBfUDn6Bx9UB/Uh/QhfVgf1rk6Vx/RR/RRfVQf08f0cX1cn9An9Cl9Sp/Wp/UZfUaf0+f0eX1eX9AX9EV98dJlXyADGehAB/mCfEFMEBPEBrFBXBAXFAwKBpEgEsQH8UGh4PqgcFAkKBoUCxKC4kGJwAQY2ICCMCgZlAqiwQ1B6eDGIDEoE5QNygUuKB8kBTcFFYKbg4rBLUGl4NagcnBbUCWoGlQLqge3BzWCO4KaQa2gdnBnUCeoG9QL6gdVJ/71mvSeoFFwb9A4uC9oEtwfNA0eCJoFDwbNg4eCFsHDQcvgkaBV0DpoE7QN2v1b9e8KGgR3Bw2Df1bf+zNFHnP9TH+TYgaYgeYlM8gMNkPMUDPMvGyGm1fMCPOqSTUjzSjzmhltXjdjzBtmrBlnxps3zQQz0Uwyk80UM9WkmbfMNPO2mW7eMTPMTDPLzDbpZo6Za94188x8s8C8Zxaa980is9gsMUtNhvnAZJplJst8aJabj0y2WWFWmlVmtVlj1pp1Zr3ZYDaaTWaz2WK2mm1mu/nY7DA7zS6z2+wxe80+84nZbz41B8xnJsd8bg6av5hD5gtz2Hxpcs1X5oj52hw135hj5ltz3HxnTpiT5pT53pw2P5gz5qw5Z340581P5oL52Vw0/tLF/aW3d9SoMR/mwxiMwViMxTiMw4JYECMYwXiMx0JYCAtjYSyKRTEBE7AElsBLCAlLYkmMYhRLY2lMxEQsi2XRocMkTMIKWAErYkWshJWwMlbGKlgFq2E1vB1vxzvwDqyFtfBOvBPrYl2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbYStsg22wHbbD9tgeO2AH7ISdsDN2xi7YBZMxGbtiV+yG3bA7dsce2AN7Yk/shb2wD/bBvtgX+2E/TMEUHIgDcRAOwiE4BIfhMByOw3EEjsBUTMVROApH42gcg2NwLI7D8fgmTsCJOAkn4xScimmYhtNwGk7H6TgDZ+AsnIXpmI5zcS7Ow3m4ABfgQlyIi3ARLsElmIEZmImZmIVZuByXYzZm40pciatxNa7Ftbge1+NG3IibcTNuxa24HbfjDtyBu3AX7sE9uA/34X7cjwfwAOZgDh7Eg3gID+FhPIy5mItH8AgexaN4DI/hcTyOJ/AEnsJTeBpP4xk8g+fwHJ7Hn/AC/owX0WOMlSLWXmXj7NW2oL3GxtgC9m/joraYTbDFbQlrbGFb5O9itNYm2jK2rC1nnS1vk+xNv4mr2Kq2mq1ub7c17B225m/iBvZu29DeYxvZe219e9ffxY3tfbaJfdg2tY/YZra1bW7b2hb2YdvSPmJb2da2jW1rO9snbBf7pE22T9mu9unfxJl2mV1vN9iNdpPdbz+15+yP9qj9xp63P9l+tr8dZl+2w+0rdoR91abakb+Jx9s37QQ70U6yk+0UO/U38Sw726bbOXaufdfOs/N/E2fYD+xCm2UX2cV2iV36S3yppyz7oV1uP7LZdoVdaVfZ1XaNXWvX/c9eV9ktdqvdZvfZT+wOu9PusrvtHrv3l/jSeRywn9kc+7k9Yr+2h+wX9rA9ZnPtV7/El87vmP3WHrff2RP2pD1lv7en7Q/2jD37y/lfOvfv7c/2ovVWEJAkRZoCykf5KYYKUCxdRXF0NRWkayhC11I8XUeF6HoqTEWoKBWjBCpOJcgQkiWikEpSKYrSDVSabqREKkNlqRw5Kk9JdBNVoJupIt1ClehWqky3URWqStWoOt1ONegOqkm1qDbdSXWoLtWj+nQXNaC7qSHdQ43oXmpM91ETup+a0gPUjB6k5vQQtaCHqSU9Qq2oNbWhttSOHqX29Bh1oI7UiR6nzvQEdaEnKZmeoq70NHWjZ6g7PUs96DnqSc9TL+pNfegF6ksvUj/qTyk0gAbSSzSIBtMQGkrD6GUaTq/QCHqVUmkkjaLXaDS9TmPoDRpL42g8vUkTaCJNosk0haZSGr1F0+htmk7v0AyaSbNoNqXTHJpL79I8mk8L6D1aSO/TIlpMS2gpZdAHlEnLKIs+pOX0EWXTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttPHtIN20i7aTXtoL+2jT2g/fUoH6DPKoc/pIP2FDtEXdJi+pFz6io7Q13SUvqFj9C0dp+/oBJ2kU/Q9naYf6AydpXP0I52nn+gC/UwXyZMIIZShCnUYhPnC/GFMWCCMDa8K48Krw4LhNWEkvDaMD68LC4XXh4XDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCEuHN4aJYZmwbFgudGH5MCm8KawQ3hxWDG8JK4W3hpXD28IqYdXw4Xurh7eHNcI7wpphrbB2eGdYJ6wb1gvrh3eFDcK7w4bhPWGj8N6wYnhf2CS8P2waPhA2Cx8Mm4cPhS3Ch8OW4SNhq7B12CZsG7YLHw3bh4+FHcKOYafw8bBz+ETYJXwyTA6fCruGT//u8ZRwQDgwfCl8KfT+HrUkujSaEf0gmhldFs2KfhhdHv0omh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuqtcnLvaFXTXuIi71sW761whd70r7Iq4oq6YS3DFXQlnHDrryIWupCvlou4GV9rd6BJdGVfWlXPOlXdJrq1r59q59u4x18F1dJ3c4+5x94R7wj3pnnRPua7uadfNPeO6u2ddD/ece84973q53q6Pe8H1dS+6fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3pct1X7oj72h1137hj7lt33H3nTriT7pT73p12P7gz7qw75350591P7oL72V103qVF3opMi7wdmR55JzIjMjMyKzI7kh6ZE5kbeTcyLzI/siDyXmRh5P3IosjiyJLI0khG5INIZmRZJCvyYWR55KNIdmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf4Mv7W/0ib6ML+vLeefL+yR/k6/gb/YV/S2+kr/VV/a3+Sq+qq/mH/GtfGvfxrf17fyjvr1/zHfwHX0n/7jv7J/wXfyTPtk/5bv6p303/4zv7p/1Pfxzvqd/3vfyvX0f/4Lv61/0/Xx/n+IH+IH+JT/ID/ZD/FA/zL/sh/tX/Aj/qk/1I/0o/5of7V/3Y/wbfqwf58f7N/0EP9FP8pP9FD/Vp/m3/DT/tp/u3/Ez/Ew/y8/26X6On+vf9fP8fL/Av+cX+vf9Ir/YL/FLfYb/wGf6ZT7Lf+iX+498tl/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/2O/wO/0uv9vv8Xv9Pv+J3+8/9Qf8Zz7Hf+4P+r/4Q/4Lf9h/6XP9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf5N9ZY4wxxhj7b9la+F8fH/APviZ/XZcMFEJcvbNY7t8eV0KIzb/WHSwTOkeEEE/17/ngf606dVJSUn59bLYSQanFQojI5fx84nK84pd/k0VHUeEf9jdY9j5Pv1M/eqsQsX+TEyMuxytEJ/HEL/Vv/if1H318fGbl8Fz8v6i/WIjEUpdzCojL8eX6Ff9J/SLtf6f/Al+kCdHhb3LixOX4cv0k8Zh4WiT/3SMZY4wxxhhjjLG/Giyrdf+9++dL9+cJ+nJOfnE5vnz/+Y/vzxljjDHGGGOMMXblPdu7z5OPJid37M6bP7wB+H+iDd7w5k/YXOmfTIwxxhhjjLE/2+WL/ivdCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnf93/hzYlf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEr7X8EAAD//7MxObU=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 1.777570129s ago: executing program 4 (id=14664): r0 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x29, 0xc0c00) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x101b}) 1.750251112s ago: executing program 8 (id=14665): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2002) write$sndseq(r0, &(0x7f0000000080)=[{0xff, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0xfe}, @queue}], 0x38) 1.626749354s ago: executing program 4 (id=14666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x804}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) 1.581752069s ago: executing program 4 (id=14668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 1.528556995s ago: executing program 6 (id=14669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.527533595s ago: executing program 3 (id=14670): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x32, 0xa, 0x1, "4a6535d359a9779c16cc07f4e70156e42a022ece000000005000", 0x30383653}) 1.420614195s ago: executing program 4 (id=14671): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x218, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) 1.37487152s ago: executing program 8 (id=14672): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1efa}}, {@i_version}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x1, 0x4d5, &(0x7f0000000a00)="$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") listxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 1.319759476s ago: executing program 3 (id=14673): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000cc0)=0x3, 0x12) 1.097402728s ago: executing program 7 (id=14675): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3a, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x7}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1d}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.045276344s ago: executing program 3 (id=14676): syz_mount_image$ocfs2(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800401, &(0x7f0000000140)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004b80)='memory.events.local\x00', 0x275a, 0x0) 1.010622817s ago: executing program 8 (id=14677): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x68, 0x14, 0x70b, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0xc}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xfc, 0x200, 0xc, 0x1, 0x0, 0x100005}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xc, 0x8, 0xd, 0x2, 0x9, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 857.057263ms ago: executing program 7 (id=14678): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xa00}, {0x65, 0x0, 0x5}}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x4, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 682.776521ms ago: executing program 6 (id=14679): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000680)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c696f636861727365743d69736f383835392d332c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c726f6469722c726f6469722c6e66732c757466383d302c73686f72746e616d653d6c6f7765722c636f6465706167653d3733372c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c00a646960385cbc256fcb0bf78ce2849de"], 0x2, 0x291, &(0x7f0000000180)="$eJzs3c9qK1UYAPBvmsk/BZOFKxHugC5cXW59gha5glgQlCzUhRabgjSh0EKgKsaufAI3bn0eN+IL+ACKO7sQR9KZ/KnOtKS0TeH+fpt+fOd8Od/MHNpSmNPPXx8fHRyfHp5/81t0Okls7cROXCTRj62Y+y4q/fpHdR4AeOQu8jz+zAvtInV2dUazpjLduvfmAIB7sfrzf9O9AAAP46OPP3l/d2/v+YdZ1okYfz8ZJFF8LcZ3D+PLGMUwnkUv/o7IF4r43ff2nkeazfTjzfF0MphVjj/7ufz83d8jLuu3oxf96vrtrLBSP50MmvFSuf7OKIYf/BS9eLW6/u1l/UVe1segFW+9sdL/0+jFL1/EcYziIIrfdeb1325n2Tv5D399/eksO6tPppNBOw5W7lPdX0EAAAAAAAAAAAAAAAAAAAAAAOA2nmYL/avn78wP/s+yVt34NecDTVfO53mWZVmeFPOX9Wm8lka6yWsHAAAAAAAAAAAAAAAAAACAx+L07Kuj/dFoeHKnwfy1/oqh+Odqph0RNZ+T3rzWk3U7jEbZ2iiJWO+6mtG+rLx5cmPNO9ad9TM8SdK4u0eQLDLd1aEnUaw1y3SLYCWz3hI//v/BdeIymO+uo/2k7uHOg07VJrmDIK/Yfo3aqtZ/M93yCiomd69ZvfXyrXrOezVDSUQ0FzezHOpWT27e9o69UrkBHu57EAAAAAAAAAAAAAAAAAAAUFi+9FsxeL6BhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgA5b//3+NYFoW183JG7MgjTKz4UsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgBfBvAAAA///XG2co") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) 676.120181ms ago: executing program 7 (id=14680): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 486.69281ms ago: executing program 6 (id=14681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 486.06779ms ago: executing program 8 (id=14691): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x48}}, 0x0) 434.803636ms ago: executing program 7 (id=14682): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x102, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 323.243077ms ago: executing program 6 (id=14683): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x104, 0x4, 0x438, 0x220, 0x110, 0x110, 0x350, 0x350, 0x110, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @local, @local, 0x2}}}, {{@uncond, 0xc0, 0x110, 0xff030000}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0xe}, 0x4}}}, {{@arp={@loopback, @multicast1, 0xffffff00, 0xff, 0xf, 0x5, {@mac=@remote, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="c76a84629917", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x2, 0x5, 0x10, 0x8, 0x7fff, 0x5, 'veth1_to_batadv\x00', 'geneve0\x00', {}, {0xff}, 0x0, 0x17}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10000, 0x0, 0x401, 0x1, 0x0, "d13686798f1f42bdc6fefb42c466fc7a77b1437c0d3e1284e05ddf6b70848b78cea86feebdd4d1fd96e2a47a020ca33a6fcc26b0f1176efe51a3da79bbc88b46"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 262.919864ms ago: executing program 8 (id=14684): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x800) 262.747424ms ago: executing program 7 (id=14685): r0 = socket(0x25, 0x5, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) 126.880337ms ago: executing program 6 (id=14686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newae={0x48, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfd, {{@in6=@local, 0x4d4, 0x2, 0x32}, @in=@multicast2, 0x2, 0x3500}, [@replay_thresh={0x8, 0xb, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) 85.284762ms ago: executing program 8 (id=14687): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x2}}, 0x10) 10.989989ms ago: executing program 7 (id=14688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=14689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000101010100000000000000000a000000100002800c000280050001003a0000000c001980080002000808"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): valid length. [ 903.965883][ T2010] /dev/loop3: Can't open blockdev [ 904.337069][ T2042] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12645'. [ 904.450849][ T2046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12647'. [ 904.535841][ T2051] loop4: detected capacity change from 0 to 8 [ 904.654604][ T2051] SQUASHFS error: xz decompression failed, data probably corrupt [ 904.661496][ T2058] loop8: detected capacity change from 0 to 256 [ 904.681352][ T2051] SQUASHFS error: Failed to read block 0x108: -5 [ 904.704429][ T2051] SQUASHFS error: Unable to read metadata cache entry [106] [ 904.731920][ T2051] SQUASHFS error: Unable to read inode 0x11f [ 904.742559][ T2057] loop6: detected capacity change from 0 to 4096 [ 904.755356][ T2058] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5a63664b, utbl_chksum : 0xe619d30d) [ 904.855379][ T2062] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 904.859159][ T2058] exFAT-fs (loop8): hint_cluster is invalid (67108876) [ 904.900532][ T2057] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 904.938961][ T2058] exFAT-fs (loop8): error, failed to bmap (inode : ffff8880530348e0 iblock : 24, err : -5) [ 904.948239][ T2057] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=12) [ 904.983331][ T2057] Remounting filesystem read-only [ 905.004361][ T2058] exFAT-fs (loop8): Filesystem has been set read-only [ 905.006626][ T2057] NILFS (loop6): error -5 truncating bmap (ino=12) [ 905.034930][ T2058] exFAT-fs (loop8): error, invalid access to FAT (entry 0x04000009) [ 905.093929][ T2058] exFAT-fs (loop8): error, invalid access to FAT (entry 0x04000009) [ 905.146261][ T2069] loop3: detected capacity change from 0 to 512 [ 905.164306][ T4941] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 905.216348][T12768] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 905.369096][ T2074] loop6: detected capacity change from 0 to 256 [ 905.595491][ T2074] FAT-fs (loop6): codepage cp85 not found [ 905.913438][ T3656] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 906.110108][ T3656] usb 7-1: unable to get BOS descriptor or descriptor too short [ 906.130777][ T3656] usb 7-1: config 9 has an invalid interface number: 116 but max is 0 [ 906.139924][ T2107] loop4: detected capacity change from 0 to 512 [ 906.159625][ T3656] usb 7-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 906.188551][ T3656] usb 7-1: config 9 has no interface number 0 [ 906.204920][ T3656] usb 7-1: config 9 interface 116 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 906.215894][ T2107] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.12668: bad orphan inode 15 [ 906.225154][ T3656] usb 7-1: config 9 interface 116 altsetting 1 has an invalid endpoint with address 0x11, skipping [ 906.247077][ T3656] usb 7-1: config 9 interface 116 altsetting 1 has an invalid endpoint with address 0xD4, skipping [ 906.268095][ T3656] usb 7-1: config 9 interface 116 altsetting 1 endpoint 0xB has an invalid bInterval 248, changing to 11 [ 906.279831][ T2107] ext4_test_bit(bit=14, block=5) = 0 [ 906.288022][ T3656] usb 7-1: config 9 interface 116 altsetting 1 endpoint 0xA has an invalid bInterval 116, changing to 10 [ 906.298097][ T2107] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 906.308019][ T3656] usb 7-1: config 9 interface 116 altsetting 1 endpoint 0xA has invalid maxpacket 25951, setting to 1024 [ 906.319355][ T3656] usb 7-1: config 9 interface 116 has no altsetting 0 [ 906.330001][ T3656] usb 7-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=e7.14 [ 906.348016][ T3656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.366231][ T3656] usb 7-1: Product: syz [ 906.370491][ T3656] usb 7-1: Manufacturer: syz [ 906.375102][ T3656] usb 7-1: SerialNumber: syz [ 906.401200][ T2074] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 906.429133][ T2074] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 906.433186][ T2107] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 906.495362][ T2107] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz.4.12668: bit already cleared for inode 13 [ 906.595106][T30333] EXT4-fs (loop4): unmounting filesystem. [ 906.619606][ T2101] loop8: detected capacity change from 0 to 32768 [ 906.649120][ T3656] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:9.116/input/input52 [ 906.676723][ T3625] bcm5974 7-1:9.116: could not read from device [ 906.685163][ T2101] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.12666 (2101) [ 906.713818][ T3625] bcm5974 7-1:9.116: could not read from device [ 906.732651][ T3656] usb 7-1: USB disconnect, device number 57 [ 906.777282][ T2101] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 906.809172][ T2101] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 906.828099][ T2101] BTRFS info (device loop8): using free space tree [ 907.047139][ T2101] BTRFS info (device loop8): enabling ssd optimizations [ 907.132941][ T7636] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 907.678742][ T2130] loop3: detected capacity change from 0 to 32768 [ 908.012103][ T2175] loop8: detected capacity change from 0 to 2048 [ 908.089753][ T2175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 908.108305][ T2179] nvme_fabrics: testsubsysbä±@(¸¾—çyöëþ c¼Ð*‡ÒûÆ=é4 šc}²É)£«¹j™i„Q`Ç®T5í�eÏ3»¢š’W²vÖÕ€SH/¼íîíÕ{íüdUÃÃëoá' ¦c.€ |S¯Ž01 ¯ÁŽjt nÃü€€jÛ‰‰v£ÖÔ[âAl mÚõv•BünUBsý»Ñ«È2�h¤—PaJš|•˜‚­¤¸2³K©¼îhH@|òqÝ@M3Õë…ú)/¯(Ñ/äI×`Œ˜²ÖuWz‚= needs to be < 223 bytes [ 908.156052][ T2178] EXT4-fs: Ignoring removed oldalloc option [ 908.202155][ T2178] EXT4-fs: Ignoring removed orlov option [ 908.309969][ T2178] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 908.325980][ T2178] ext4 filesystem being mounted at /2322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.494760][ T4940] EXT4-fs (loop7): unmounting filesystem. [ 908.519790][ T2187] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 908.562614][ T2187] ext4 filesystem being mounted at /2363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.797090][ T7636] EXT4-fs (loop8): unmounting filesystem. [ 909.040112][ T2169] set_capacity_and_notify: 3 callbacks suppressed [ 909.040128][ T2169] loop4: detected capacity change from 0 to 32768 [ 909.146216][ T2169] read_mapping_page failed! [ 909.165317][ T2169] ERROR: (device loop4): txCommit: [ 909.165317][ T2169] [ 909.190733][ T2215] loop3: detected capacity change from 0 to 1024 [ 909.501853][ T2229] netlink: 'syz.7.12706': attribute type 2 has an invalid length. [ 909.528130][ T2229] netlink: 'syz.7.12706': attribute type 8 has an invalid length. [ 909.568443][ T2229] netlink: 132 bytes leftover after parsing attributes in process `syz.7.12706'. [ 909.971560][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 909.971576][ T26] audit: type=1326 audit(2000000211.791:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2243 comm="syz.4.12712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 910.077449][ T26] audit: type=1326 audit(2000000211.791:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2243 comm="syz.4.12712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 910.173845][ T26] audit: type=1326 audit(2000000211.791:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2243 comm="syz.4.12712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 910.244965][ T2221] loop8: detected capacity change from 0 to 32768 [ 910.257512][ T26] audit: type=1326 audit(2000000211.801:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2243 comm="syz.4.12712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 910.301366][ T2221] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.12703 (2221) [ 910.341209][ T2259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12718'. [ 910.356972][ T26] audit: type=1326 audit(2000000211.801:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2243 comm="syz.4.12712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 910.407501][ T2221] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 910.438502][ T2221] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 910.473233][ T26] audit: type=1326 audit(2000000211.801:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2243 comm="syz.4.12712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 910.500698][ T2221] BTRFS info (device loop8): using free space tree [ 910.611061][ T26] audit: type=1326 audit(2000000211.801:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2243 comm="syz.4.12712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 910.636679][ T26] audit: type=1326 audit(2000000211.801:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2243 comm="syz.4.12712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 910.660809][ C1] vkms_vblank_simulate: vblank timer overrun [ 910.788914][ T2221] BTRFS info (device loop8): enabling ssd optimizations [ 910.968365][ T7636] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 911.211051][ T26] audit: type=1326 audit(2000000213.031:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2308 comm="syz.3.12731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cc19f559 code=0x7ffc0000 [ 911.328088][ T26] audit: type=1326 audit(2000000213.031:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2308 comm="syz.3.12731" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f42cc19f559 code=0x7ffc0000 [ 912.136409][ T2356] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 912.325623][ T2360] loop4: detected capacity change from 0 to 1024 [ 912.469512][ T2360] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 912.511918][ T2360] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 912.597789][ T2360] EXT4-fs (loop4): Remounting filesystem read-only [ 912.672522][ T2388] loop6: detected capacity change from 0 to 2048 [ 912.757618][ T2388] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 912.801371][T30333] EXT4-fs (loop4): unmounting filesystem. [ 912.808585][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 913.015215][ T2403] loop8: detected capacity change from 0 to 256 [ 913.025713][ T2405] netlink: 'syz.6.12760': attribute type 21 has an invalid length. [ 913.044831][ T2405] netlink: 128 bytes leftover after parsing attributes in process `syz.6.12760'. [ 913.074617][ T2405] netlink: 3 bytes leftover after parsing attributes in process `syz.6.12760'. [ 913.209099][ T2409] netlink: 5 bytes leftover after parsing attributes in process `syz.3.12763'. [ 913.291702][ T2419] netlink: 'syz.8.12766': attribute type 21 has an invalid length. [ 913.965964][ T2457] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12777'. [ 914.205412][ T2432] loop4: detected capacity change from 0 to 32768 [ 914.284921][ T2432] add_index: next_index = 0. Resetting! [ 914.324964][ T2475] netlink: 212 bytes leftover after parsing attributes in process `syz.3.12783'. [ 914.652323][ T2495] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12789'. [ 914.949540][ T2505] netlink: 'syz.4.12793': attribute type 5 has an invalid length. [ 915.344962][ T2533] loop3: detected capacity change from 0 to 1024 [ 915.346222][ T2535] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12800'. [ 915.368165][ T2535] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12800'. [ 915.379674][ T2535] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12800'. [ 915.439433][T12768] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 916.313771][ T2544] loop6: detected capacity change from 0 to 32768 [ 916.365846][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 916.365861][ T26] audit: type=1800 audit(2000000218.181:464): pid=2544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.12805" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 916.383048][ T2587] netlink: 'syz.8.12820': attribute type 2 has an invalid length. [ 916.392517][ C1] vkms_vblank_simulate: vblank timer overrun [ 916.458193][ T2587] netlink: 'syz.8.12820': attribute type 8 has an invalid length. [ 916.489049][ T2587] netlink: 132 bytes leftover after parsing attributes in process `syz.8.12820'. [ 916.558742][ T2592] netlink: 'syz.3.12821': attribute type 10 has an invalid length. [ 916.600907][ T2592] team0: Port device virt_wifi0 added [ 916.612154][ T2596] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12822'. [ 916.797778][ T2602] loop4: detected capacity change from 0 to 16 [ 916.862365][ T2602] erofs: (device loop4): mounted with root inode @ nid 36. [ 917.095132][ T2616] loop7: detected capacity change from 0 to 512 [ 917.156559][ T2616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 917.196381][ T2616] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 917.200352][ T2625] xt_cgroup: no path or classid specified [ 917.315347][ T2616] EXT4-fs (loop7): orphan cleanup on readonly fs [ 917.381724][ T2616] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 917.418382][ T2632] netlink: 'syz.6.12837': attribute type 2 has an invalid length. [ 917.426271][ T2632] netlink: 'syz.6.12837': attribute type 8 has an invalid length. [ 917.442196][ T2616] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 917.502109][ T2632] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12837'. [ 917.519089][ T2616] EXT4-fs (loop7): 1 truncate cleaned up [ 917.534432][ T2616] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 917.565758][ T2616] EXT4-fs (loop7): unmounting filesystem. [ 917.751480][ T2630] loop3: detected capacity change from 0 to 32768 [ 917.771596][ T2649] netlink: 'syz.4.12840': attribute type 21 has an invalid length. [ 917.791579][ T2649] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12840'. [ 917.808379][ T2649] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12840'. [ 917.847819][T12768] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 918.521044][ T2688] netlink: 'syz.3.12852': attribute type 2 has an invalid length. [ 918.541503][ T2688] netlink: 'syz.3.12852': attribute type 8 has an invalid length. [ 918.568348][ T2688] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12852'. [ 919.040286][ T2712] loop3: detected capacity change from 0 to 256 [ 919.044311][ T2674] loop4: detected capacity change from 0 to 32768 [ 919.079347][ T2674] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.12848 (2674) [ 919.145146][ T2674] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 919.239438][ T2674] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 919.296749][ T2674] BTRFS info (device loop4): enabling ssd optimizations [ 919.328129][ T2674] BTRFS info (device loop4): not using ssd optimizations [ 919.335246][ T2674] BTRFS info (device loop4): turning off barriers [ 919.378068][ T2674] BTRFS info (device loop4): use no compression [ 919.384462][ T2674] BTRFS info (device loop4): using free space tree [ 919.723991][ T2706] loop8: detected capacity change from 0 to 32768 [ 920.030936][T30333] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 920.540175][T12768] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop4 scanned by udevd (12768) [ 920.556233][ T2723] loop3: detected capacity change from 0 to 32768 [ 920.995047][ T9069] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by udevd (9069) [ 920.998206][ T4351] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 921.214308][ T2803] __nla_validate_parse: 1 callbacks suppressed [ 921.214325][ T2803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12881'. [ 921.418321][ T4353] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 921.627550][ T2824] loop6: detected capacity change from 0 to 512 [ 921.985848][ T2839] netlink: 1192 bytes leftover after parsing attributes in process `syz.3.12888'. [ 922.021438][ T4351] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 922.839070][ T2848] loop6: detected capacity change from 0 to 32768 [ 922.880382][ T2848] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.12890 (2848) [ 922.920311][ T2848] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 922.947195][ T2848] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 922.976547][ T2848] BTRFS info (device loop6): using free space tree [ 923.048148][T30149] Bluetooth: hci3: command 0x0406 tx timeout [ 923.058386][ T4351] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 923.067292][ T4351] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 923.263698][ T2848] BTRFS info (device loop6): enabling ssd optimizations [ 923.633334][ T4941] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 924.118241][ T2931] netlink: 'syz.3.12915': attribute type 2 has an invalid length. [ 924.269220][ T4476] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 924.522442][ T2947] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12922'. [ 924.622721][ T2955] loop6: detected capacity change from 0 to 512 [ 924.697160][ T2955] EXT4-fs: Ignoring removed nomblk_io_submit option [ 924.721642][ T2955] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 924.755317][ T2955] EXT4-fs (loop6): orphan cleanup on readonly fs [ 924.775546][ T2955] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 924.808773][ T2955] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 924.858199][ T2964] vivid-007: ================= START STATUS ================= [ 924.865951][ T2964] vivid-007: Generate PTS: true [ 924.898411][ T2955] EXT4-fs (loop6): 1 truncate cleaned up [ 924.904133][ T2955] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 924.958171][ T2964] vivid-007: Generate SCR: true [ 924.969896][ T2955] EXT4-fs (loop6): unmounting filesystem. [ 925.008090][ T2964] tpg source WxH: 640x360 (Y'CbCr) [ 925.048361][ T2964] tpg field: 1 [ 925.051781][ T2964] tpg crop: 640x360@0x0 [ 925.055958][ T2964] tpg compose: 640x360@0x0 [ 925.178059][ T2964] tpg colorspace: 8 [ 925.181929][ T2964] tpg transfer function: 0/0 [ 925.186539][ T2964] tpg Y'CbCr encoding: 0/0 [ 925.236714][ T2964] tpg quantization: 0/0 [ 925.258154][ T2964] tpg RGB range: 0/2 [ 925.262094][ T2964] vivid-007: ================== END STATUS ================== [ 925.264541][ T2984] loop6: detected capacity change from 0 to 8 [ 925.755575][ T2998] nvme nvme0: rdma_resolve_addr failed (-19). [ 925.958961][ T3015] loop8: detected capacity change from 0 to 512 [ 925.965988][ T3015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 926.040633][ T3015] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 926.151452][ T3015] EXT4-fs (loop8): orphan cleanup on readonly fs [ 926.169297][ T3015] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 926.181390][ T3015] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 926.258299][ T3015] EXT4-fs (loop8): 1 truncate cleaned up [ 926.299402][ T3015] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 926.345885][ T3015] EXT4-fs (loop8): unmounting filesystem. [ 926.447249][ T3040] xt_TPROXY: Can be used only with -p tcp or -p udp [ 926.482691][ T3042] netdevsim netdevsim6: Direct firmware load for þ failed with error -2 [ 926.511828][ T3042] netdevsim netdevsim6: Falling back to sysfs fallback for: þ [ 926.569421][ T3045] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 926.925643][ T3065] loop8: detected capacity change from 0 to 1764 [ 926.958190][ T5434] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 927.044213][ T4351] nvmet: connect request for invalid subsystem testsubsys! [ 927.058294][ T3062] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 927.150170][ T5434] usb 5-1: unable to get BOS descriptor or descriptor too short [ 927.165064][ T5434] usb 5-1: not running at top speed; connect to a high speed hub [ 927.197409][ T5434] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.231035][ T5434] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 927.264579][ T5434] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 927.291123][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 927.339418][ T5434] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 927.358166][ T3080] netlink: 'syz.3.12970': attribute type 8 has an invalid length. [ 927.381070][ T5434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 927.409522][ T5434] usb 5-1: Product: syz [ 927.417079][ T3078] loop7: detected capacity change from 0 to 4096 [ 927.433851][ T5434] usb 5-1: Manufacturer: syz [ 927.470614][ T5434] usb 5-1: Found UVC 1.00 device syz (8086:0ad2) [ 927.486953][ T3078] EXT4-fs: inline encryption not supported [ 927.544365][ T3078] EXT4-fs (loop7): Test dummy encryption mode enabled [ 927.610211][ T3078] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 927.635538][ T3078] System zones: 0-5 [ 927.671014][ T3078] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 927.871796][ T5434] usb 5-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 927.898418][ T5434] usb 5-1: Failed to query (GET_INFO) UVC control 7 on unit 1: -71 (exp. 1). [ 927.927941][ T5434] usb 5-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 927.967074][ T5434] usb 5-1: Failed to query (GET_INFO) UVC control 10 on unit 1: -71 (exp. 1). [ 927.999155][ T4940] EXT4-fs (loop7): unmounting filesystem. [ 928.007502][ T5434] usb 5-1: Failed to query (GET_INFO) UVC control 11 on unit 1: -71 (exp. 1). [ 928.066474][ T5434] usb 5-1: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 928.091551][ T3105] loop6: detected capacity change from 0 to 1024 [ 928.116144][ T5434] usb 5-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 928.150959][ T5434] usb 5-1: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1). [ 928.170895][ T5434] usb 5-1: Failed to query (GET_INFO) UVC control 8 on unit 1: -71 (exp. 1). [ 928.172669][ T5434] usb 5-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 928.172732][ T5434] usb 5-1: No streaming interface found for terminal 2. [ 928.215357][ T3105] EXT4-fs (loop6): orphan cleanup on readonly fs [ 928.215915][ T3105] EXT4-fs error (device loop6): ext4_quota_enable:7049: comm syz.6.12980: inode #17152: comm syz.6.12980: iget: illegal inode # [ 928.216125][ T3105] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.12980: Bad quota inode: 17152, type: 2 [ 928.216265][ T3105] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=17152). Please run e2fsck to fix. [ 928.216398][ T3105] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 928.216427][ T3105] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 928.225430][ T5434] usb 5-1: USB disconnect, device number 9 [ 928.310429][ T3107] nvme nvme0: rdma_resolve_addr failed (-19). [ 928.342809][ T4941] EXT4-fs (loop6): unmounting filesystem. [ 929.046329][ T3144] loop6: detected capacity change from 0 to 4096 [ 929.069562][ T3144] EXT4-fs: inline encryption not supported [ 929.101325][ T3144] EXT4-fs (loop6): Test dummy encryption mode enabled [ 929.145975][ T3144] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 929.188879][ T3144] System zones: 0-5 [ 929.227751][ T3144] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 929.257062][ T3162] loop7: detected capacity change from 0 to 64 [ 929.378342][ T3162] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 929.452640][ T4941] EXT4-fs (loop6): unmounting filesystem. [ 929.642135][ T3175] loop6: detected capacity change from 0 to 2048 [ 929.704681][ T3175] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 929.783423][ T3175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 930.017889][ T3186] loop7: detected capacity change from 0 to 2048 [ 930.056860][ T3186] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 930.520249][ T3205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13018'. [ 930.572423][ T3205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13018'. [ 930.766634][ T3218] autofs4:pid:3218:autofs_fill_super: called with bogus options [ 931.216179][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.223158][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.532133][ T3263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13041'. [ 931.655676][ T3265] 8021q: adding VLAN 0 to HW filter on device bond8 [ 931.661872][ T3268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13044'. [ 931.953865][ T3283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13049'. [ 931.988165][ T3283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13049'. [ 932.063065][ T3289] loop6: detected capacity change from 0 to 16 [ 932.089340][ T3289] erofs: (device loop6): mounted with root inode @ nid 36. [ 933.029203][ T3296] loop6: detected capacity change from 0 to 32768 [ 933.116735][ T3296] JBD2: Ignoring recovery information on journal [ 933.186367][ T3296] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75 [ 933.208167][ T3296] JBD2: bad block at offset 32 [ 933.253364][ T3296] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 933.434938][ T4941] ocfs2: Unmounting device (7,6) on (node local) [ 934.419920][ T3390] loop8: detected capacity change from 0 to 8 [ 935.217388][ T3413] loop8: detected capacity change from 0 to 4096 [ 935.226131][ T3656] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 935.260204][ T3413] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512) [ 935.338612][ T3399] loop6: detected capacity change from 0 to 32768 [ 935.429595][ T3399] XFS (loop6): Mounting V5 Filesystem [ 935.449756][ T3656] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 935.483268][ T3656] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 935.510450][ T3656] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.523523][ T3656] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 935.532831][ T3656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.550546][ T3399] XFS (loop6): Ending clean mount [ 935.560470][ T3656] usb 4-1: invalid MIDI out EP 0 [ 935.598011][ T3656] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 935.621723][ T9042] udevd[9042]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 935.688099][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 935.749911][ T4941] XFS (loop6): Unmounting Filesystem [ 935.833665][T24789] usb 4-1: USB disconnect, device number 11 [ 936.829654][ T3465] netlink: 'syz.7.13115': attribute type 10 has an invalid length. [ 936.848104][ T3465] netlink: 2 bytes leftover after parsing attributes in process `syz.7.13115'. [ 936.887772][ T3465] device bond0 entered promiscuous mode [ 936.918566][ T3465] bridge0: port 1(bond0) entered blocking state [ 936.925000][ T3465] bridge0: port 1(bond0) entered disabled state [ 936.997148][ T3469] loop3: detected capacity change from 0 to 256 [ 937.066142][ T3469] exfat: Deprecated parameter 'namecase' [ 937.103651][ T3469] /dev/loop3: Can't open blockdev [ 937.431449][ T3478] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13118'. [ 937.488208][ T3478] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13118'. [ 937.845119][ T3491] netlink: 'syz.7.13125': attribute type 1 has an invalid length. [ 937.904588][ T3491] netlink: 116376 bytes leftover after parsing attributes in process `syz.7.13125'. [ 937.970360][ T3497] loop6: detected capacity change from 0 to 64 [ 938.000372][ T3497] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 938.531553][ T3518] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13138'. [ 938.542481][ T3519] loop3: detected capacity change from 0 to 256 [ 938.548127][ T3518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13138'. [ 938.585556][ T3519] exfat: Deprecated parameter 'utf8' [ 938.617715][ T3519] exfat: Deprecated parameter 'utf8' [ 938.654229][ T3519] /dev/loop3: Can't open blockdev [ 938.914895][ T3533] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13145'. [ 939.121809][ T3546] loop6: detected capacity change from 0 to 128 [ 939.252830][ T3546] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 939.289426][ T3546] ext4 filesystem being mounted at /2552/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 939.505132][ T4941] EXT4-fs (loop6): unmounting filesystem. [ 940.034624][ T3590] loop3: detected capacity change from 0 to 16 [ 940.070682][ T3590] /dev/loop3: Can't open blockdev [ 940.159114][ T3595] xt_hl: Unknown TTL match mode: 255 [ 940.734814][ T3627] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 940.749868][ T3627] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 940.761067][ T3627] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 940.772680][ T3627] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 940.790721][ T3627] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 940.802208][ T3627] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 940.819771][ T3627] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 940.830675][ T3627] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 940.853215][ T3627] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 940.862871][ T3627] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 940.888185][T24789] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 940.968182][ T5439] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 941.090423][T24789] usb 7-1: Using ep0 maxpacket: 8 [ 941.101759][T24789] usb 7-1: unable to get BOS descriptor or descriptor too short [ 941.126949][T24789] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.141719][T24789] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 941.156567][T24789] usb 7-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 941.159792][ T5439] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 941.172787][T24789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.188078][ T5439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.192647][T24789] usb 7-1: Product: syz [ 941.202826][T24789] usb 7-1: Manufacturer: syz [ 941.207442][T24789] usb 7-1: SerialNumber: syz [ 941.211135][ T5439] usb 4-1: config 0 descriptor?? [ 941.230619][ T5439] cp210x 4-1:0.0: cp210x converter detected [ 941.636383][ T5439] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 941.639471][T24789] usb 7-1: cannot find UAC_HEADER [ 941.657714][ T5439] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 941.677072][ T5439] usb 4-1: cp210x converter now attached to ttyUSB0 [ 941.713878][ T5439] usb 4-1: USB disconnect, device number 12 [ 941.714969][T24789] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 941.732558][ T5439] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 941.754808][T24789] usb 7-1: USB disconnect, device number 58 [ 941.774166][ T5439] cp210x 4-1:0.0: device disconnected [ 941.796466][T12767] udevd[12767]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 941.859682][ T3651] syz.4.13183 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 942.338457][ T3666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13191'. [ 942.347742][ T3664] netlink: 'syz.3.13189': attribute type 1 has an invalid length. [ 942.506104][ T3672] netlink: 'syz.6.13193': attribute type 1 has an invalid length. [ 942.762323][ T3684] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_key_bytes=-6] [ 942.802657][ T3684] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 942.825443][ T3684] Error parsing options; rc = [-22] [ 943.357725][ T3686] loop3: detected capacity change from 0 to 32768 [ 943.612943][ T3699] xt_NFQUEUE: number of total queues is 0 [ 944.718620][ T3710] loop3: detected capacity change from 0 to 32768 [ 944.860042][ T3730] netlink: 'syz.6.13216': attribute type 1 has an invalid length. [ 944.867907][ T3730] netlink: 116376 bytes leftover after parsing attributes in process `syz.6.13216'. [ 945.149327][ T3733] loop4: detected capacity change from 0 to 8192 [ 945.178926][ T3733] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 945.209353][ T3733] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 945.228520][ T3733] REISERFS (device loop4): using ordered data mode [ 945.235732][ T3733] reiserfs: using flush barriers [ 945.329077][ T3733] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 945.398481][ T3733] REISERFS (device loop4): checking transaction log (loop4) [ 945.672583][ T26] audit: type=1400 audit(2000000247.491:465): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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device loop4): Using tea hash to sort names [ 945.988425][ T3768] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13229'. [ 946.068359][ T3733] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 946.153394][T24789] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 946.393160][T24789] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 946.413726][T24789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.443516][T24789] usb 7-1: Product: syz [ 946.447721][T24789] usb 7-1: Manufacturer: syz [ 946.465228][T24789] usb 7-1: SerialNumber: syz [ 946.553265][T24789] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 946.898859][ T3796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13240'. [ 946.963260][ T5434] usb 7-1: USB disconnect, device number 59 [ 947.156925][ T3807] netlink: 'syz.3.13243': attribute type 1 has an invalid length. [ 947.608296][T24789] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 947.635690][T24789] ath9k_htc: Failed to initialize the device [ 947.663868][ T5434] usb 7-1: ath9k_htc: USB layer deinitialized [ 948.128895][ T3845] loop6: detected capacity change from 0 to 764 [ 948.216954][ T3845] Symlink component flag not implemented [ 948.248075][ T3845] Symlink component flag not implemented [ 948.253900][ T3845] Symlink component flag not implemented (129) [ 948.288274][ T3845] Symlink component flag not implemented (6) [ 948.315242][ T3851] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 948.605118][ T3832] loop3: detected capacity change from 0 to 32768 [ 948.734211][ T3863] loop7: detected capacity change from 0 to 512 [ 948.798935][ T3863] EXT4-fs: Ignoring removed mblk_io_submit option [ 948.830392][ T3863] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 948.937707][ T3863] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 949.060715][ T3863] ext4 filesystem being mounted at /2433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.084377][ T3863] EXT4-fs error (device loop7): ext4_xattr_block_list:713: inode #15: comm syz.7.13265: corrupted xattr block 33 [ 949.106655][T12768] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (12768) [ 949.240067][ T3886] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13272'. [ 949.267471][ T3876] loop6: detected capacity change from 0 to 4096 [ 949.297451][ T4940] EXT4-fs (loop7): unmounting filesystem. [ 949.338452][ T3876] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 949.436637][ T3876] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 949.472922][ T3876] ntfs3: loop6: Failed to load $Extend. [ 949.692050][ T3898] loop4: detected capacity change from 0 to 2048 [ 949.771085][ T3898] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 949.894117][ T3908] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 949.894376][ T3898] syz.4.13277: attempt to access beyond end of device [ 949.894376][ T3898] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 950.079336][ T3898] syz.4.13277: attempt to access beyond end of device [ 950.079336][ T3898] loop4: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 950.157111][ T3918] loop6: detected capacity change from 0 to 1024 [ 950.178995][ T3898] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3) [ 950.217649][ T3918] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 950.246704][ T3898] NILFS (loop4): error -5 reading inode: ino=12 [ 950.297265][ T3918] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 950.348020][ T3918] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 950.522388][ T4941] EXT4-fs (loop6): unmounting filesystem. [ 950.838192][ T5439] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 951.028047][ T5439] usb 9-1: Using ep0 maxpacket: 32 [ 951.034798][ T5439] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 951.065614][ T5439] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 951.098120][ T5439] usb 9-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 951.140471][ T5439] usb 9-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 951.164289][ T5439] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 951.174897][ T5439] usb 9-1: config 1 interface 1 has no altsetting 0 [ 951.200247][ T5439] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 951.227188][ T5439] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.250909][ T5439] usb 9-1: Product: syz [ 951.250990][ T3961] netlink: 'syz.4.13296': attribute type 26 has an invalid length. [ 951.255092][ T5439] usb 9-1: Manufacturer: syz [ 951.255112][ T5439] usb 9-1: SerialNumber: syz [ 951.498959][ T5439] usb 9-1: selecting invalid altsetting 0 [ 951.518308][ T5439] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 951.535263][ T5439] usb 9-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 951.633877][ T5439] usb 9-1: USB disconnect, device number 39 [ 952.123036][ T3987] program syz.4.13305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.328227][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 952.490909][ T4005] loop6: detected capacity change from 0 to 64 [ 952.545124][ T4003] 8021q: adding VLAN 0 to HW filter on device bond9 [ 953.844616][ T4064] loop7: detected capacity change from 0 to 64 [ 954.053434][ T4073] Flash size not aligned to erasesize, reducing to 124KiB [ 954.088244][ T4073] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x8588 instead [ 954.131564][ T4073] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x9e5a instead [ 954.188419][ T4073] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x6564 instead [ 954.227273][ T4073] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x746d instead [ 954.274985][ T4073] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x0020 instead [ 954.318854][ T4073] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001988: 0x0200 instead [ 954.392805][ T4073] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 954.428054][ T4073] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 31 [ 954.601635][ T4096] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 954.758869][ T26] audit: type=1326 audit(2000000256.581:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4101 comm="syz.4.13345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 954.855324][ T26] audit: type=1326 audit(2000000256.611:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4101 comm="syz.4.13345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 954.911280][ T4108] netlink: 666 bytes leftover after parsing attributes in process `syz.7.13348'. [ 954.944059][ T26] audit: type=1326 audit(2000000256.611:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4101 comm="syz.4.13345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 955.020511][ T26] audit: type=1326 audit(2000000256.611:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4101 comm="syz.4.13345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 955.044089][ T4114] futex_wake_op: syz.8.13350 tries to shift op by 144; fix this program [ 955.122376][ T26] audit: type=1326 audit(2000000256.611:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4101 comm="syz.4.13345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 955.202092][ T26] audit: type=1326 audit(2000000256.611:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4101 comm="syz.4.13345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 955.278073][ T26] audit: type=1326 audit(2000000256.611:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4101 comm="syz.4.13345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 955.358045][ T26] audit: type=1326 audit(2000000256.611:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4101 comm="syz.4.13345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 955.803458][ T4118] loop7: detected capacity change from 0 to 32768 [ 955.892394][ T4118] XFS (loop7): Mounting V5 Filesystem [ 956.058528][ T4118] XFS (loop7): Ending clean mount [ 956.078235][ T4118] XFS (loop7): Quotacheck needed: Please wait. [ 956.161383][ T4118] XFS (loop7): Quotacheck: Done. [ 956.261639][ T4940] XFS (loop7): Unmounting Filesystem [ 956.444993][ T4131] loop6: detected capacity change from 0 to 32768 [ 956.519404][ T4131] JBD2: Ignoring recovery information on journal [ 956.591451][ T4131] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 956.877768][ T4941] ocfs2: Unmounting device (7,6) on (node local) [ 957.308167][ T4480] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 957.508349][ T4480] usb 7-1: Using ep0 maxpacket: 16 [ 957.515424][ T4480] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 957.538209][ T4480] usb 7-1: config 0 has no interface number 0 [ 957.554576][ T4480] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 957.587074][ T4480] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 957.600304][ T4480] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 957.609118][ T4480] usb 7-1: Product: syz [ 957.613404][ T4480] usb 7-1: SerialNumber: syz [ 957.621196][ T4480] usb 7-1: config 0 descriptor?? [ 957.652766][ T4480] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input53 [ 957.785994][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 957.844956][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 957.877258][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 957.885761][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 957.896053][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 957.904848][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 957.913745][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 957.922087][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 957.929748][ T4480] usb 7-1: USB disconnect, device number 60 [ 957.944651][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 957.953710][ T4480] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 958.007928][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.084090][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.147277][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.185431][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.390005][ T4190] loop7: detected capacity change from 0 to 32768 [ 958.458772][ T4190] JBD2: Ignoring recovery information on journal [ 958.623178][ T4201] netlink: 'syz.8.13387': attribute type 1 has an invalid length. [ 958.646358][ T4205] loop4: detected capacity change from 0 to 256 [ 958.704482][ T4190] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 958.904150][ T4940] ocfs2: Unmounting device (7,7) on (node local) [ 959.280506][ T4228] loop4: detected capacity change from 0 to 64 [ 959.340412][ T4228] syz.4.13399: attempt to access beyond end of device [ 959.340412][ T4228] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 959.382829][ T4228] Buffer I/O error on dev loop4, logical block 512, async page read [ 959.417910][ T4228] syz.4.13399: attempt to access beyond end of device [ 959.417910][ T4228] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 959.455751][ T4228] Buffer I/O error on dev loop4, logical block 56576, async page read [ 960.191355][ T4227] loop8: detected capacity change from 0 to 40427 [ 960.246303][ T4227] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 960.271708][ T4227] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 960.318611][ T4227] F2FS-fs (loop8): invalid crc value [ 960.367777][ T4227] F2FS-fs (loop8): Found nat_bits in checkpoint [ 960.513377][ T4265] device wlan0 entered promiscuous mode [ 960.545543][ T4265] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 960.551596][ T4269] loop7: detected capacity change from 0 to 256 [ 960.594719][ T4227] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 960.653308][ T4227] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 960.785599][ T4247] loop6: detected capacity change from 0 to 32768 [ 960.858200][ T4247] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.13410 (4247) [ 960.939460][ T4247] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 960.985381][ T4247] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 961.013850][ T4247] BTRFS info (device loop6): setting nodatasum [ 961.042814][ T4247] BTRFS info (device loop6): enabling auto defrag [ 961.073427][ T4283] loop7: detected capacity change from 0 to 256 [ 961.092373][ T4247] BTRFS info (device loop6): disabling tree log [ 961.108228][ T4247] BTRFS info (device loop6): using free space tree [ 961.128285][ T4283] exfat: Deprecated parameter 'utf8' [ 961.145608][ T4283] exfat: Deprecated parameter 'namecase' [ 961.191906][ T4283] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 961.493440][ T4247] BTRFS info (device loop6): enabling ssd optimizations [ 961.722702][ T4941] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 961.858136][ T4320] Timeout policy `syz1' can only be used by L3 protocol number 35064 [ 962.133160][ T4328] loop3: detected capacity change from 0 to 2048 [ 962.659227][ T4347] loop8: detected capacity change from 0 to 1024 [ 962.749694][ T4347] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 2: comm syz.8.13445: lblock 2 mapped to illegal pblock 2 (length 1) [ 962.791938][ T4360] loop3: detected capacity change from 0 to 256 [ 962.858007][ T4347] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 962.866156][ T4347] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 48: comm syz.8.13445: lblock 0 mapped to illegal pblock 48 (length 1) [ 962.876660][ T4365] loop6: detected capacity change from 0 to 1024 [ 962.921178][T12768] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 962.940096][ T4365] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 963.039614][ T4347] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 963.054926][ T4365] EXT4-fs error (device loop6): ext4_get_first_dir_block:3607: inode #11: comm syz.6.13449: directory missing '..' [ 963.058176][ T4347] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.13445: Failed to acquire dquot type 0 [ 963.126714][ T4347] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 963.175503][ T4347] EXT4-fs error (device loop8): ext4_evict_inode:281: inode #11: comm syz.8.13445: mark_inode_dirty error [ 963.234098][ T4347] EXT4-fs warning (device loop8): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 963.261254][ T4347] EXT4-fs (loop8): 1 orphan inode deleted [ 963.281345][ T11] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 963.304434][ T4347] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 963.330869][ T11] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 963.356266][ T11] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0 [ 963.387160][ T9] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 2: comm kworker/u4:0: lblock 2 mapped to illegal pblock 2 (length 1) [ 963.430045][ T9] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 963.466071][ T9] EXT4-fs error (device loop8): ext4_write_dquot:6821: comm kworker/u4:0: Failed to commit dquot type 0 [ 963.506873][ T9] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 963.531439][ T9] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 963.578233][ T9] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 963.596904][ T9] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 963.617681][ T4941] EXT4-fs (loop6): unmounting filesystem. [ 963.624804][ T7636] EXT4-fs (loop8): unmounting filesystem. [ 963.648086][ T7636] EXT4-fs error (device loop8): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 963.723093][ T7636] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 963.735997][ T7636] EXT4-fs error (device loop8): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 964.023597][ T4398] overlayfs: conflicting options: userxattr,redirect_dir=off [ 964.162253][ T4406] MTD: Couldn't look up './bus': -15 [ 964.495158][ T4420] loop6: detected capacity change from 0 to 256 [ 964.578342][ T4420] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 964.718114][ T4420] exFAT-fs (loop6): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 964.741679][ T4420] exFAT-fs (loop6): Filesystem has been set read-only [ 964.945653][ T26] audit: type=1107 audit(2000000266.761:474): pid=4436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 965.139274][ T4448] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 965.436752][ T4448] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 965.470343][ T4448] overlayfs: missing 'lowerdir' [ 965.646583][ T4468] netlink: 'syz.3.13496': attribute type 10 has an invalid length. [ 965.769318][ T4471] netlink: 'syz.8.13498': attribute type 10 has an invalid length. [ 965.777569][ T4471] device veth1_vlan left promiscuous mode [ 965.818942][ T4471] team0: Device veth1_vlan failed to register rx_handler [ 965.820911][ T4486] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13501'. [ 966.176921][ T4503] xt_ipcomp: unknown flags 1D [ 966.324835][ T4511] netlink: 'syz.3.13512': attribute type 10 has an invalid length. [ 966.348127][ T4511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13512'. [ 966.378789][ T4511] device team0 entered promiscuous mode [ 966.398038][ T4511] device team_slave_0 entered promiscuous mode [ 966.416186][ T4513] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 966.428394][ T4511] device team_slave_1 entered promiscuous mode [ 966.434680][ T4511] device virt_wifi0 entered promiscuous mode [ 966.479275][ T4511] bridge0: port 3(team0) entered blocking state [ 966.489187][ T4511] bridge0: port 3(team0) entered disabled state [ 966.497501][ T4511] bridge0: port 3(team0) entered blocking state [ 966.503903][ T4511] bridge0: port 3(team0) entered forwarding state [ 966.576074][ T4521] ipt_CLUSTERIP: bad num_local_nodes 32 [ 966.592296][ T4516] netlink: 'syz.8.13514': attribute type 2 has an invalid length. [ 967.558803][ T4561] cgroup: Unexpected value for 'nofavordynmods' [ 967.765684][ T4567] netlink: 'syz.3.13541': attribute type 1 has an invalid length. [ 967.777573][ T4567] netlink: 220 bytes leftover after parsing attributes in process `syz.3.13541'. [ 967.802833][ T4567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13541'. [ 968.594485][ T4605] loop3: detected capacity change from 0 to 512 [ 968.628999][ T4605] /dev/loop3: Can't open blockdev [ 968.694904][ T4607] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 968.766036][ T4611] Lens A: ================= START STATUS ================= [ 968.808535][ T4611] Lens A: Focus, Absolute: 1023 [ 968.814406][ T4611] Lens A: ================== END STATUS ================== [ 969.373090][ T4638] loop7: detected capacity change from 0 to 256 [ 969.419863][ T4638] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 969.493473][ T4638] exFAT-fs (loop7): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 969.522922][ T4638] exFAT-fs (loop7): Filesystem has been set read-only [ 969.862287][ T4650] loop8: detected capacity change from 0 to 4096 [ 969.961607][ T4650] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 970.346559][ T4646] loop6: detected capacity change from 0 to 32768 [ 970.447173][ T4646] XFS (loop6): Mounting V5 Filesystem [ 970.479239][ T4669] loop4: detected capacity change from 0 to 4096 [ 970.527209][ T4669] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1f, max_cluster = 0x0 [ 970.550262][ T4677] loop7: detected capacity change from 0 to 64 [ 970.553366][ T4679] netlink: 'syz.3.13590': attribute type 10 has an invalid length. [ 970.597339][ T4669] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 970.628704][ T4669] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 970.641401][ T4679] team0: Device veth1_vlan failed to register rx_handler [ 970.694968][ T4675] loop8: detected capacity change from 0 to 4096 [ 970.707736][ T4646] XFS (loop6): Ending clean mount [ 970.721264][ T4669] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 970.776714][ T4675] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 970.816934][ T4669] ntfs: volume version 3.1. [ 970.991367][ T4675] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 971.004095][ T4941] XFS (loop6): Unmounting Filesystem [ 971.019211][ T4675] ntfs3: loop8: Inode r=b is not in use! [ 971.058468][ T4675] ntfs3: loop8: Failed to load $Extend. [ 971.628097][ T4702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13602'. [ 972.026771][ T4726] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 972.260653][ T4740] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 972.424678][ T4748] loop4: detected capacity change from 0 to 1024 [ 972.539861][ T4748] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 972.673091][ T4748] EXT4-fs error (device loop4): ext4_get_first_dir_block:3585: inode #11: comm syz.4.13623: Directory hole found for htree leaf block 0 [ 972.761900][ T4748] EXT4-fs (loop4): Remounting filesystem read-only [ 972.790925][ T4771] netlink: 'syz.6.13633': attribute type 10 has an invalid length. [ 972.935108][T30333] EXT4-fs (loop4): unmounting filesystem. [ 973.482617][ T4809] netlink: 'syz.6.13651': attribute type 2 has an invalid length. [ 973.510896][ T4809] netlink: 'syz.6.13651': attribute type 1 has an invalid length. [ 973.528405][ T4809] netlink: 'syz.6.13651': attribute type 1 has an invalid length. [ 973.546496][ T4809] netlink: 'syz.6.13651': attribute type 2 has an invalid length. [ 973.578301][ T4809] netlink: 'syz.6.13651': attribute type 1 has an invalid length. [ 973.598142][ T4809] netlink: 'syz.6.13651': attribute type 2 has an invalid length. [ 973.621598][ T4809] netlink: 'syz.6.13651': attribute type 2 has an invalid length. [ 973.648145][ T4809] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13651'. [ 973.913335][ T4829] tmpfs: Bad value for 'mpol' [ 974.083534][ T4799] loop8: detected capacity change from 0 to 32768 [ 974.169198][ T4799] [ 974.169198][ T4799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 974.169198][ T4799] [ 974.186726][ T4842] netlink: 'syz.7.13667': attribute type 21 has an invalid length. [ 974.242418][ T4799] ERROR: (device loop8): diWrite: ixpxd invalid [ 974.242418][ T4799] [ 974.298070][ T4799] ERROR: (device loop8): txCommit: [ 974.298070][ T4799] [ 974.421589][ T7636] [ 974.421589][ T7636] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 974.421589][ T7636] [ 974.438508][ T7636] [ 974.438508][ T7636] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 974.438508][ T7636] [ 974.509448][ T4854] netlink: 'syz.4.13672': attribute type 21 has an invalid length. [ 974.546951][ T4857] loop6: detected capacity change from 0 to 22 [ 974.581887][ T4857] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 974.611729][ T4857] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 974.651028][ T4861] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 974.704973][ T4863] loop3: detected capacity change from 0 to 16 [ 974.789766][ T4863] /dev/loop3: Can't open blockdev [ 975.100744][ T26] audit: type=1326 audit(2000000276.921:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4875 comm="syz.4.13684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 975.196004][ T26] audit: type=1326 audit(2000000276.961:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4875 comm="syz.4.13684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 975.220115][ C1] vkms_vblank_simulate: vblank timer overrun [ 975.268040][ T26] audit: type=1326 audit(2000000276.961:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4875 comm="syz.4.13684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 975.357643][ T26] audit: type=1326 audit(2000000276.961:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4875 comm="syz.4.13684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 975.381786][ C1] vkms_vblank_simulate: vblank timer overrun [ 975.469268][ T26] audit: type=1326 audit(2000000276.961:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4875 comm="syz.4.13684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 975.530800][ T4898] loop7: detected capacity change from 0 to 512 [ 975.537155][ T26] audit: type=1326 audit(2000000276.961:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4875 comm="syz.4.13684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 975.587877][ T4898] EXT4-fs: Ignoring removed mblk_io_submit option [ 975.618134][ T4898] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 975.648154][ T26] audit: type=1326 audit(2000000276.961:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4875 comm="syz.4.13684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 975.729408][ T4898] EXT4-fs error (device loop7): ext4_orphan_get:1435: comm syz.7.13693: bad orphan inode 2048 [ 975.760489][ T26] audit: type=1326 audit(2000000276.961:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4875 comm="syz.4.13684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 975.774750][ T4898] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 975.784649][ C1] vkms_vblank_simulate: vblank timer overrun [ 975.866493][ T4898] EXT4-fs warning (device loop7): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 975.957053][ T4918] binder: 4914:4918 ioctl c018620c 200000000000 returned -22 [ 976.009949][ T4940] EXT4-fs (loop7): unmounting filesystem. [ 976.215136][ T4930] hsr0: mtu greater than device maximum [ 976.550256][ T4952] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13717'. [ 976.921000][ T4975] Cannot find add_set index 1536 as target [ 976.927545][ T4974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13728'. [ 976.950856][ T4974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13728'. [ 977.013980][ T4979] loop6: detected capacity change from 0 to 1024 [ 977.131588][ T4979] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 977.266084][ T4979] EXT4-fs error (device loop6): ext4_get_first_dir_block:3585: inode #11: comm syz.6.13730: Directory hole found for htree leaf block 0 [ 977.314847][ T4979] EXT4-fs (loop6): Remounting filesystem read-only [ 977.413856][ T4941] EXT4-fs (loop6): unmounting filesystem. [ 977.910929][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13754'. [ 978.061062][ T5042] netlink: 'syz.3.13758': attribute type 1 has an invalid length. [ 978.180608][ T26] audit: type=1326 audit(2000000280.000:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.8.13759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7379f559 code=0x7ffc0000 [ 978.245704][ T5050] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13760'. [ 978.247073][ T26] audit: type=1326 audit(2000000280.030:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.8.13759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7379f559 code=0x7ffc0000 [ 978.291259][ T5050] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13760'. [ 978.351939][ T26] audit: type=1326 audit(2000000280.030:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.8.13759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7379f559 code=0x7ffc0000 [ 978.443752][ T26] audit: type=1326 audit(2000000280.040:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.8.13759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fda7379f559 code=0x7ffc0000 [ 978.526873][ T26] audit: type=1326 audit(2000000280.040:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.8.13759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7379f559 code=0x7ffc0000 [ 978.618042][ T26] audit: type=1326 audit(2000000280.040:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.8.13759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fda7379f559 code=0x7ffc0000 [ 978.683517][ T26] audit: type=1326 audit(2000000280.040:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5044 comm="syz.8.13759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fda7379f559 code=0x7ffc0000 [ 978.732354][ T5070] loop6: detected capacity change from 0 to 512 [ 978.757720][ T5066] loop3: detected capacity change from 0 to 4096 [ 978.791252][ T5070] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 978.808308][ T5070] ext4 filesystem being mounted at /2689/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 978.809148][ T5066] /dev/loop3: Can't open blockdev [ 978.986708][ T4941] EXT4-fs (loop6): unmounting filesystem. [ 979.065821][ T5082] loop7: detected capacity change from 0 to 256 [ 979.142029][ T5082] exfat: Deprecated parameter 'namecase' [ 979.176404][ T5082] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 979.414505][ T5092] loop4: detected capacity change from 0 to 256 [ 979.442805][ T5091] loop6: detected capacity change from 0 to 1024 [ 979.487003][ T5094] 9p: Unknown access argument 18446744073709551615: -34 [ 979.514847][ T5091] hfsplus: unknown catalog record type 5377 [ 979.598185][ T5447] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 979.780101][ T5447] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.808027][ T5447] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 979.821278][ T5447] usb 4-1: string descriptor 0 read error: -22 [ 979.827552][ T5447] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 979.853558][ T5074] loop8: detected capacity change from 0 to 32768 [ 979.868795][ T5447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.902922][ T5447] usb 4-1: 0:1 : does not exist [ 979.934978][ T5074] XFS (loop8): Mounting V5 Filesystem [ 979.939064][ T5447] usb 4-1: 0:2 : does not exist [ 979.999963][ T5074] XFS (loop8): Ending clean mount [ 980.005304][ T5114] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13788'. [ 980.074677][ T5118] 9p: Unknown access argument z: -22 [ 980.163194][ T7636] XFS (loop8): Unmounting Filesystem [ 980.218180][ T3656] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 980.316083][ T5447] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 980.332629][ T5447] usb 4-1: USB disconnect, device number 13 [ 980.422303][ T3656] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 528 [ 980.465349][ T3656] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 980.505705][ T3656] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 980.541595][ T3656] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 980.562205][ T3656] usb 5-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 980.584770][ T3656] usb 5-1: Product: syz [ 980.590190][ T4680] udevd[4680]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 980.603115][ T3656] usb 5-1: Manufacturer: syz [ 980.614064][ T3656] usb 5-1: SerialNumber: syz [ 980.633042][ T5109] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 980.652894][ T3656] ums_eneub6250 5-1:1.0: USB Mass Storage device detected [ 980.693632][ T3656] scsi host1: usb-storage 5-1:1.0 [ 980.817690][ T3656] ums_eneub6250: probe of 5-1:1.0 failed with error 3 [ 980.872271][ T5447] usb 5-1: USB disconnect, device number 10 [ 981.188941][ T5165] loop6: detected capacity change from 0 to 256 [ 981.242862][ T5167] netlink: 392 bytes leftover after parsing attributes in process `syz.8.13813'. [ 981.577910][ T5181] loop3: detected capacity change from 0 to 1024 [ 981.634105][ T26] audit: type=1326 audit(2000000283.450:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.4.13822" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 981.758129][ T26] audit: type=1326 audit(2000000283.450:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.4.13822" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 981.816277][ T26] audit: type=1326 audit(2000000283.490:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.4.13822" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 981.878071][ T26] audit: type=1326 audit(2000000283.490:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.4.13822" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 981.878145][ T26] audit: type=1326 audit(2000000283.490:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.4.13822" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 981.878176][ T26] audit: type=1326 audit(2000000283.490:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.4.13822" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 981.878205][ T26] audit: type=1326 audit(2000000283.490:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.4.13822" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 981.878233][ T26] audit: type=1326 audit(2000000283.490:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.4.13822" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 981.878261][ T26] audit: type=1326 audit(2000000283.490:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.4.13822" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 982.043458][ T5203] Cannot find del_set index 4 as target [ 982.073834][ T5205] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13832'. [ 982.189445][ T5205] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13832'. [ 982.473572][ T5223] MTD: Attempt to mount non-MTD device "/dev/nbd6" [ 982.503120][ T5223] syz.6.13841: attempt to access beyond end of device [ 982.503120][ T5223] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 982.617285][ T5229] loop3: detected capacity change from 0 to 512 [ 982.644216][ T5229] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 982.667875][ T5229] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 982.717853][ T5229] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 982.740259][ T5229] System zones: 0-2, 18-18, 34-35 [ 982.748806][ T5229] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 982.762301][ T5234] loop6: detected capacity change from 0 to 256 [ 982.801030][ T5234] FAT-fs (loop6): Directory bread(block 64) failed [ 982.807604][ T5234] FAT-fs (loop6): Directory bread(block 65) failed [ 982.888914][ T5234] FAT-fs (loop6): Directory bread(block 66) failed [ 982.899507][T30144] EXT4-fs (loop3): unmounting filesystem. [ 982.917654][ T5234] FAT-fs (loop6): Directory bread(block 67) failed [ 982.924945][ T5234] FAT-fs (loop6): Directory bread(block 68) failed [ 982.953415][ T5234] FAT-fs (loop6): Directory bread(block 69) failed [ 982.968227][ T5234] FAT-fs (loop6): Directory bread(block 70) failed [ 983.005448][ T5234] FAT-fs (loop6): Directory bread(block 71) failed [ 983.015893][ T5234] FAT-fs (loop6): Directory bread(block 72) failed [ 983.040686][ T5234] FAT-fs (loop6): Directory bread(block 73) failed [ 983.108191][ T5217] loop8: detected capacity change from 0 to 32768 [ 983.187089][ T5217] XFS (loop8): Mounting V5 Filesystem [ 983.243772][ T5217] XFS (loop8): Ending clean mount [ 983.335295][ T7636] XFS (loop8): Unmounting Filesystem [ 983.568164][T24789] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 983.590413][ T5259] loop4: detected capacity change from 0 to 1024 [ 983.620749][ T5259] hfsplus: unknown catalog record type 5377 [ 983.808522][T24789] usb 4-1: not running at top speed; connect to a high speed hub [ 983.829038][T24789] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 983.837774][T24789] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.923821][T24789] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 983.961394][T24789] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 984.001486][T24789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.044383][T24789] gspca_main: spca501-2.14.0 probing 0000:0000 [ 984.241673][T24789] gspca_spca501: reg write: error -71 [ 984.250999][T24789] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 984.263685][T24789] spca501: probe of 4-1:1.0 failed with error -22 [ 984.279199][T24789] uvcvideo 4-1:1.0: Found multiple Units with ID 1 [ 984.292705][T24789] usb 4-1: Found UVC 71.01 device (0000:0000) [ 984.306694][T24789] usb 4-1: No streaming interface found for terminal 2. [ 984.338150][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 984.349998][ T5286] lo speed is unknown, defaulting to 1000 [ 984.364303][T24789] usb 4-1: USB disconnect, device number 14 [ 984.399731][ T5286] lo speed is unknown, defaulting to 1000 [ 984.416318][ T5286] lo speed is unknown, defaulting to 1000 [ 984.645280][ T5293] loop8: detected capacity change from 0 to 1024 [ 984.655720][ T5286] infiniband syz0: set down [ 984.660949][T24789] lo speed is unknown, defaulting to 1000 [ 984.699933][ T5286] infiniband syz0: added lo [ 984.704707][ T5293] hfsplus: unknown catalog record type 5377 [ 984.868354][ T5286] RDS/IB: syz0: added [ 984.872446][ T5286] smc: adding ib device syz0 with port count 1 [ 984.877065][ T5300] loop4: detected capacity change from 0 to 512 [ 984.897605][ T5300] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 984.958317][ T5286] smc: ib device syz0 port 1 has pnetid [ 984.964552][ T5447] lo speed is unknown, defaulting to 1000 [ 984.981938][ T5304] loop3: detected capacity change from 0 to 256 [ 984.990216][ T5300] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 985.006837][ T5304] exfat: Deprecated parameter 'utf8' [ 985.011632][ T5300] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.13871: bg 0: block 248: padding at end of block bitmap is not set [ 985.012965][ T5304] /dev/loop3: Can't open blockdev [ 985.049024][ T5286] lo speed is unknown, defaulting to 1000 [ 985.111020][ T5300] Quota error (device loop4): write_blk: dquota write failed [ 985.127099][ T5300] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.13871: Failed to acquire dquot type 1 [ 985.224060][ T5308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13874'. [ 985.235529][ T5300] EXT4-fs (loop4): 1 truncate cleaned up [ 985.244098][ T5300] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 985.307211][ T5300] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.13871: Failed to acquire dquot type 1 [ 985.366036][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13876'. [ 985.454082][ T5286] lo speed is unknown, defaulting to 1000 [ 985.477010][T30333] EXT4-fs (loop4): unmounting filesystem. [ 985.491622][ T32] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 1 [ 985.605895][ T5319] netlink: 'syz.8.13881': attribute type 3 has an invalid length. [ 985.628307][ T5319] netlink: 766 bytes leftover after parsing attributes in process `syz.8.13881'. [ 985.652756][ T5322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13882'. [ 985.686670][ T5322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13882'. [ 985.711491][ T5322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13882'. [ 985.748490][ T5322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13882'. [ 985.757577][ T5322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13882'. [ 985.812356][ T5286] lo speed is unknown, defaulting to 1000 [ 985.822244][ T5329] loop3: detected capacity change from 0 to 1024 [ 986.174520][ T5286] lo speed is unknown, defaulting to 1000 [ 986.237164][ T5342] sctp: [Deprecated]: syz.3.13891 (pid 5342) Use of int in max_burst socket option deprecated. [ 986.237164][ T5342] Use struct sctp_assoc_value instead [ 986.464137][ T5347] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 986.464685][ T5286] lo speed is unknown, defaulting to 1000 [ 987.146721][ T5373] loop4: detected capacity change from 0 to 22 [ 987.187458][ T5373] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 987.204091][ T5377] loop6: detected capacity change from 0 to 512 [ 987.229451][ T5373] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 987.298267][ T5377] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 987.328194][ T5377] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 987.383816][ T5377] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 987.425052][ T5377] System zones: 0-2, 18-18, 34-35 [ 987.464902][ T5377] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 987.613532][ T5394] loop4: detected capacity change from 0 to 1024 [ 987.629777][ T4941] EXT4-fs (loop6): unmounting filesystem. [ 987.709388][ T5394] hfsplus: xattr searching failed [ 987.740678][ T5398] device veth5 entered promiscuous mode [ 987.866687][ T5400] delete_channel: no stack [ 987.922029][ T5404] __nla_validate_parse: 40 callbacks suppressed [ 987.922048][ T5404] netlink: 7 bytes leftover after parsing attributes in process `syz.3.13918'. [ 987.975375][ T5404] netlink: 7 bytes leftover after parsing attributes in process `syz.3.13918'. [ 988.253826][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13926'. [ 988.388146][ T5447] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 988.578121][ T5447] usb 7-1: Using ep0 maxpacket: 16 [ 988.587159][ T5447] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 988.628537][ T5447] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.636577][ T5447] usb 7-1: Product: syz [ 988.658064][ T5447] usb 7-1: Manufacturer: syz [ 988.662710][ T5447] usb 7-1: SerialNumber: syz [ 988.696796][ T5447] r8152-cfgselector 7-1: config 0 descriptor?? [ 988.710605][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 988.710619][ T26] audit: type=1326 audit(2000000290.530:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.4.13936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 988.789308][ T5459] libceph: resolve '0.0.0.0.[' (ret=-3): failed [ 988.848363][ T26] audit: type=1326 audit(2000000290.530:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.4.13936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 988.913638][ T26] audit: type=1326 audit(2000000290.530:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.4.13936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 988.972006][ T26] audit: type=1326 audit(2000000290.530:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.4.13936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 988.999244][ T5467] loop8: detected capacity change from 0 to 64 [ 989.049256][ T26] audit: type=1326 audit(2000000290.530:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.4.13936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 989.084381][ T26] audit: type=1326 audit(2000000290.530:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.4.13936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 989.084416][ T26] audit: type=1326 audit(2000000290.530:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.4.13936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 989.084447][ T26] audit: type=1326 audit(2000000290.530:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.4.13936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efe3059f559 code=0x7ffc0000 [ 989.098120][ T26] audit: type=1800 audit(2000000290.910:507): pid=5467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.13941" name="file0" dev="loop8" ino=21 res=0 errno=0 [ 989.148338][ T5439] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 989.251233][ T5447] r8152-cfgselector 7-1: Unknown version 0x0000 [ 989.254562][ T5447] r8152-cfgselector 7-1: USB disconnect, device number 61 [ 989.322638][ T26] audit: type=1326 audit(2000000291.140:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.13945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cc19f559 code=0x7ffc0000 [ 989.552093][ T5439] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 989.566034][ T5439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.576226][ T5439] usb 5-1: Product: syz [ 989.590511][ T5439] usb 5-1: Manufacturer: syz [ 989.595144][ T5439] usb 5-1: SerialNumber: syz [ 989.625324][ T5439] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 989.718072][ T4477] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 989.911774][ T4477] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.948355][ T4477] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 989.965426][ T4477] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 989.983275][ T4477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.994853][ T4477] usb 4-1: Product: syz [ 990.001669][ T4477] usb 4-1: Manufacturer: syz [ 990.006297][ T4477] usb 4-1: SerialNumber: syz [ 990.094415][ T4480] usb 5-1: USB disconnect, device number 11 [ 990.231294][ T5518] netlink: 316 bytes leftover after parsing attributes in process `syz.8.13965'. [ 990.275935][ T4477] usb 4-1: USB disconnect, device number 15 [ 990.315415][ T4680] udevd[4680]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 990.533844][ T5534] tmpfs: Bad value for 'mpol' [ 990.728335][ T5439] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 990.743570][ T5439] ath9k_htc: Failed to initialize the device [ 990.765867][ T4480] usb 5-1: ath9k_htc: USB layer deinitialized [ 990.778153][ T5447] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 990.904888][ T5553] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13983'. [ 990.919983][ T5554] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13982'. [ 990.980054][ T5447] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 528 [ 990.996180][ T5447] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 991.018938][ T5447] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 991.044938][ T5447] usb 9-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 991.073494][ T5447] usb 9-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 991.090628][ T5447] usb 9-1: Product: syz [ 991.100519][ T5447] usb 9-1: Manufacturer: syz [ 991.108336][ T4477] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 991.109765][ T5447] usb 9-1: SerialNumber: syz [ 991.135618][ T5531] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 991.147901][ T5447] ums_eneub6250 9-1:1.0: USB Mass Storage device detected [ 991.163727][ T5447] scsi host1: usb-storage 9-1:1.0 [ 991.228169][ T5447] ums_eneub6250: probe of 9-1:1.0 failed with error 3 [ 991.311939][ T4477] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 991.343156][ T4477] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 991.363666][ T4477] usb 7-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 991.382810][ T4477] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.393132][ T4477] usb 7-1: Product: syz [ 991.397363][ T4477] usb 7-1: Manufacturer: syz [ 991.414565][ T4477] usb 7-1: SerialNumber: syz [ 991.420270][ T5439] usb 9-1: USB disconnect, device number 40 [ 991.435126][ T4477] whiteheat 7-1:1.0: Connect Tech - WhiteHEAT converter detected [ 991.639161][ T4477] usb 7-1: Connect Tech - WhiteHEAT: Couldn't get results [-90] [ 991.664410][ T4477] usb 7-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 991.695762][ T4477] usb 7-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 991.713152][ T4477] usb 7-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 991.756735][ T5592] netlink: 'syz.3.13998': attribute type 1 has an invalid length. [ 991.843807][ T5439] usb 7-1: USB disconnect, device number 62 [ 991.953895][ T5601] libceph: resolve '0.0.0.0.[' (ret=-3): failed [ 992.114784][ T5610] autofs4:pid:5610:autofs_fill_super: called with bogus options [ 992.478620][ T5630] netlink: 316 bytes leftover after parsing attributes in process `syz.6.14017'. [ 992.651728][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.658226][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.683512][ T4477] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 992.900115][ T4477] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 528 [ 992.919777][ T4477] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 992.940021][ T4477] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 992.960368][ T4477] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 992.970372][ T4477] usb 4-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 992.979743][ T4477] usb 4-1: Product: syz [ 992.984717][ T4477] usb 4-1: Manufacturer: syz [ 992.994805][ T4477] usb 4-1: SerialNumber: syz [ 993.007668][ T5626] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 993.019829][ T4477] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 993.068630][ T4477] scsi host1: usb-storage 4-1:1.0 [ 993.138219][ T4477] ums_eneub6250: probe of 4-1:1.0 failed with error 3 [ 993.254021][ T4480] usb 4-1: USB disconnect, device number 16 [ 993.322437][ T5433] nvmet: connect request for invalid subsystem testsubsys! [ 993.334257][ T5671] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 993.504175][ T5684] loop4: detected capacity change from 0 to 256 [ 993.525761][ T5684] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 994.431003][ T5720] netlink: 'syz.8.14061': attribute type 1 has an invalid length. [ 994.444658][ T5694] loop6: detected capacity change from 0 to 32768 [ 994.487617][ T5694] XFS: ikeep mount option is deprecated. [ 994.593242][ T5694] XFS (loop6): Mounting V5 Filesystem [ 994.723491][ T5694] XFS (loop6): Ending clean mount [ 994.730388][ T5742] netlink: 'syz.3.14067': attribute type 1 has an invalid length. [ 994.840078][ T5735] loop4: detected capacity change from 0 to 8192 [ 994.875126][ T4941] XFS (loop6): Unmounting Filesystem [ 994.892343][ T5735] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 995.268235][ T5759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14075'. [ 995.306535][ T5759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14075'. [ 995.621110][ T5774] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_a fnek_sig=syz] [ 995.661025][ T5774] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 995.698100][ T5774] Error parsing options; rc = [-22] [ 995.754201][ T5782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14086'. [ 995.932732][ T5787] loop8: detected capacity change from 0 to 4096 [ 995.934175][ T5792] loop3: detected capacity change from 0 to 1024 [ 995.999750][ T4680] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 996.009570][ T5787] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 996.015611][ T5787] ntfs3: loop8: Failed to load $Extend. [ 996.437714][ T5802] loop3: detected capacity change from 0 to 256 [ 996.496757][ T5802] exfat: Deprecated parameter 'utf8' [ 996.518035][ T5802] exfat: Deprecated parameter 'utf8' [ 996.529105][ T5802] exfat: Deprecated parameter 'utf8' [ 996.553395][ T5802] /dev/loop3: Can't open blockdev [ 996.935365][ T5810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14100'. [ 996.996282][ T5810] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 997.021094][ T5800] loop6: detected capacity change from 0 to 32768 [ 997.336688][ T5806] loop8: detected capacity change from 0 to 32768 [ 997.366912][ T5806] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop8 scanned by syz.8.14098 (5806) [ 997.425616][ T5806] BTRFS info (device loop8): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 997.455540][ T5806] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 997.517531][ T5806] BTRFS info (device loop8): using free space tree [ 997.908082][ T5806] BTRFS info (device loop8): enabling ssd optimizations [ 997.935355][ T5860] netlink: 136 bytes leftover after parsing attributes in process `syz.6.14116'. [ 997.998277][ T5860] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14116'. [ 998.038166][ T5860] netlink: 'syz.6.14116': attribute type 3 has an invalid length. [ 998.059002][ T7636] BTRFS info (device loop8): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 998.075296][ T5860] netlink: 1 bytes leftover after parsing attributes in process `syz.6.14116'. [ 998.506652][ T4680] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 9 /dev/loop8 scanned by udevd (4680) [ 998.859208][ T5898] loop3: detected capacity change from 0 to 128 [ 999.294686][ T5434] nvmet: connect request for invalid subsystem testsubsys! [ 999.321525][ T5903] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 999.698341][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14141'. [ 999.718351][ T5917] netlink: 'syz.4.14141': attribute type 2 has an invalid length. [ 999.738044][ T5917] netlink: 'syz.4.14141': attribute type 1 has an invalid length. [ 999.756474][ T5917] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14141'. [ 999.776267][ T5919] loop6: detected capacity change from 0 to 256 [ 999.806581][ T5919] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 999.829800][ T5919] FAT-fs (loop6): Filesystem has been set read-only [ 999.837034][ T5919] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 999.846509][ T5919] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 999.855982][ T5919] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 999.876150][ T5919] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 999.888048][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 999.888061][ T26] audit: type=1800 audit(2000000301.710:551): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.14142" name="file1" dev="loop6" ino=1048872 res=0 errno=0 [ 999.898594][ T5919] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1000.149955][ T5925] loop6: detected capacity change from 0 to 24 [ 1000.160480][ T5925] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1000.196361][ T5925] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1000.256744][ T5925] romfs: read error for inode 0x70040 [ 1000.471800][ T5937] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1000.520451][ T5941] netlink: 60 bytes leftover after parsing attributes in process `syz.8.14153'. [ 1000.615399][ T5947] libceph: resolve '0' (ret=-3): failed [ 1000.947123][ T5965] ieee802154 phy0 wpan0: encryption failed: -90 [ 1001.144505][ T5977] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14171'. [ 1001.170986][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14172'. [ 1001.198087][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14172'. [ 1001.605031][ T5996] loop6: detected capacity change from 0 to 4096 [ 1001.664652][ T5996] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1001.725739][ T5996] ntfs3: loop6: Failed to load $Extend. [ 1002.133790][ T6025] CIFS: VFS: Unable to allocate memory for devname [ 1002.482244][ T6044] netlink: 'syz.4.14203': attribute type 10 has an invalid length. [ 1002.512179][ T6044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14203'. [ 1002.538270][ T6044] device ipvlan1 entered promiscuous mode [ 1002.566008][ T6044] bridge0: port 3(ipvlan1) entered blocking state [ 1002.587198][ T6044] bridge0: port 3(ipvlan1) entered disabled state [ 1002.605208][ T6044] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1003.278291][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14222'. [ 1003.423142][ T6099] netlink: 3604 bytes leftover after parsing attributes in process `syz.7.14226'. [ 1003.625833][ T6111] netlink: 60 bytes leftover after parsing attributes in process `syz.7.14230'. [ 1003.695696][ T4480] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1003.896985][ T6126] netlink: 'syz.3.14237': attribute type 1 has an invalid length. [ 1003.907388][ T4480] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.947374][ T4480] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1003.996206][ T4480] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1004.025573][ T4480] usb 9-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1004.071613][ T4480] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.108880][ T4480] usb 9-1: config 0 descriptor?? [ 1004.172656][ T6141] netlink: 72 bytes leftover after parsing attributes in process `syz.3.14243'. [ 1004.356075][ T6146] loop6: detected capacity change from 0 to 128 [ 1004.434698][ T6146] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1004.476768][ T6146] ext4 filesystem being mounted at /2778/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1004.549298][ T4480] usb 9-1: USB disconnect, device number 41 [ 1004.633166][ T6158] netlink: 'syz.3.14249': attribute type 10 has an invalid length. [ 1004.670039][ T4941] EXT4-fs (loop6): unmounting filesystem. [ 1004.688918][ T6158] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14249'. [ 1004.724218][ T6158] openvswitch: netlink: Flow key attr not present in new flow. [ 1005.508304][ T6205] loop6: detected capacity change from 0 to 128 [ 1005.549939][ T6205] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1005.569690][ T6210] __vm_enough_memory: pid: 6210, comm: syz.8.14270, no enough memory for the allocation [ 1005.601865][ T6205] ext4 filesystem being mounted at /2783/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.729719][ T4941] EXT4-fs (loop6): unmounting filesystem. [ 1005.973401][ T6228] loop8: detected capacity change from 0 to 256 [ 1006.052059][ T6228] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 1) [ 1006.095539][ T6228] exFAT-fs (loop8): failed to load alloc-bitmap [ 1006.125766][ T6228] exFAT-fs (loop8): failed to recognize exfat type [ 1006.879491][ T6235] delete_channel: no stack [ 1007.103841][ T6283] __nla_validate_parse: 1 callbacks suppressed [ 1007.103857][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14301'. [ 1007.346731][ T6290] loop8: detected capacity change from 0 to 512 [ 1007.452649][ T6290] EXT4-fs error (device loop8): __ext4_iget:5102: inode #11: block 1: comm syz.8.14304: invalid block [ 1007.548493][ T6290] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.14304: couldn't read orphan inode 11 (err -117) [ 1007.647711][ T6298] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1007.656807][ T6290] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1007.830099][ T7636] EXT4-fs (loop8): unmounting filesystem. [ 1008.428677][ T6348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge8: link becomes ready [ 1008.807927][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14333'. [ 1008.997555][ T6381] loop4: detected capacity change from 0 to 256 [ 1009.007385][ T6380] overlayfs: unrecognized mount option "\" or missing value [ 1009.076910][ T6381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1009.106690][ T6381] FAT-fs (loop4): Filesystem has been set read-only [ 1009.125861][ T6381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1009.140790][ T6381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1009.150455][ T6381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1009.168812][ T6381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1009.180256][ T6381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1009.189831][ T6381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1009.198992][ T6381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1009.208713][ T6381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1009.217765][ T6381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1009.249204][T24789] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1009.277899][ T26] audit: type=1800 audit(2000000311.080:552): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.14336" name="file1" dev="loop4" ino=1048873 res=0 errno=0 [ 1009.317752][ T6381] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1009.441501][T24789] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.482408][T24789] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1009.512792][T24789] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1009.543129][T24789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.584455][T24789] usb 7-1: Found UVC 1.00 device (046d:0825) [ 1009.603886][T24789] usb 7-1: No streaming interface found for terminal 2. [ 1009.621106][ T6401] overlayfs: './file0' not a directory [ 1009.813041][T24789] usb 7-1: USB disconnect, device number 63 [ 1009.926374][ T6413] loop3: detected capacity change from 0 to 4096 [ 1009.953588][ T6413] /dev/loop3: Can't open blockdev [ 1010.473232][ T6439] vivid-002: ================= START STATUS ================= [ 1010.497240][ T6439] vivid-002: FM Deviation: 75000 [ 1010.528943][ T6439] vivid-002: ================== END STATUS ================== [ 1010.816955][ T6431] loop3: detected capacity change from 0 to 32768 [ 1010.886213][ T6457] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1010.918165][ T4680] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1011.306821][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14384'. [ 1011.344340][ T6474] netlink: 332 bytes leftover after parsing attributes in process `syz.8.14384'. [ 1011.369601][ T6478] netlink: 'syz.3.14385': attribute type 5 has an invalid length. [ 1011.386885][ T5434] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1011.580679][ T6487] tmpfs: Bad value for 'mpol' [ 1011.588156][ T5434] usb 5-1: Using ep0 maxpacket: 16 [ 1011.602926][ T5434] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.632507][ T5434] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.658901][ T5434] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1011.705813][ T5434] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1011.752740][ T5434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.778363][ T5434] usb 5-1: config 0 descriptor?? [ 1011.782922][ T6497] netlink: 1030 bytes leftover after parsing attributes in process `syz.6.14395'. [ 1011.801332][ T5434] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input54 [ 1011.825997][ T3625] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1011.870327][ T3625] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1011.898479][ T3625] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1011.907548][ T3625] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1011.942482][ T4607] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1011.984606][ T3625] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1012.015890][ T6501] loop6: detected capacity change from 0 to 512 [ 1012.025093][ T6465] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1012.041521][ T3625] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1012.056810][T24789] usb 5-1: USB disconnect, device number 12 [ 1012.074754][ T6501] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1012.088563][ T3625] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1012.178932][ T6501] syz.6.14397: attempt to access beyond end of device [ 1012.178932][ T6501] loop6: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 1012.214159][ T6501] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 1012.254853][ T6501] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 1012.473566][ T6495] loop7: detected capacity change from 0 to 32768 [ 1012.549114][ T6494] loop3: detected capacity change from 0 to 32768 [ 1012.575741][ T6495] XFS (loop7): Mounting V5 Filesystem [ 1012.588968][ T4607] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1012.738155][ T6495] XFS (loop7): Ending clean mount [ 1012.807665][ T6524] netlink: 'syz.8.14404': attribute type 2 has an invalid length. [ 1012.898426][ T6527] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™�…EŸ8-ö¤ ™�ŠÇÅ–èEeÕ¬' [ 1012.962073][ T4940] XFS (loop7): Unmounting Filesystem [ 1013.610374][ T6551] loop6: detected capacity change from 0 to 4096 [ 1013.634691][ T6551] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1013.732350][ T6551] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1013.934528][ T6562] loop8: detected capacity change from 0 to 4096 [ 1013.999129][ T6562] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 1014.136920][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14427'. [ 1014.178617][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14427'. [ 1014.514837][ T6585] loop7: detected capacity change from 0 to 8192 [ 1014.550797][ T6585] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1014.614609][ T6585] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 1014.654910][ T6585] REISERFS (device loop7): using ordered data mode [ 1014.694066][ T6585] reiserfs: using flush barriers [ 1014.722470][ T6585] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1014.798906][ T6585] REISERFS (device loop7): checking transaction log (loop7) [ 1015.020778][ T6609] IPv6: sit1: Disabled Multicast RS [ 1015.077279][ T6585] REISERFS (device loop7): Using tea hash to sort names [ 1015.105180][ T6585] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1015.152385][ T6585] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 1015.436795][ T6626] xt_policy: neither incoming nor outgoing policy selected [ 1015.885926][ T6649] fuse: blksize only supported for fuseblk [ 1016.063893][ T6659] netlink: 45 bytes leftover after parsing attributes in process `syz.6.14467'. [ 1016.142773][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1016.184434][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1016.210082][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1016.240403][ T6667] device bridge_slave_0 left promiscuous mode [ 1016.275226][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.288445][ T6672] netlink: 'syz.6.14473': attribute type 3 has an invalid length. [ 1016.303418][ T6667] device bridge_slave_1 left promiscuous mode [ 1016.338512][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.360053][ T6667] bond0: (slave bond_slave_0): Releasing backup interface [ 1016.397872][ T6667] bond0: (slave bond_slave_1): Releasing backup interface [ 1016.426081][ T6678] loop8: detected capacity change from 0 to 512 [ 1016.449727][ T6678] EXT4-fs: Ignoring removed nobh option [ 1016.460462][ T6681] loop6: detected capacity change from 0 to 256 [ 1016.489919][ T6667] team0: Port device team_slave_0 removed [ 1016.516024][ T6667] team0: Port device team_slave_1 removed [ 1016.522978][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.530647][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.540536][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.548477][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.548534][ T6678] EXT4-fs (loop8): 1 truncate cleaned up [ 1016.568266][ T34] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 1016.595981][ T6681] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1016.635624][ T6678] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1016.769727][ T34] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1016.798304][ T34] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1016.804280][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14481'. [ 1016.843437][ T34] usb 4-1: config 0 has no interface number 0 [ 1016.855949][ T34] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1016.860795][ T7636] EXT4-fs (loop8): unmounting filesystem. [ 1016.887363][ T34] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1016.916265][ T34] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1016.941849][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.959685][ T34] usb 4-1: config 0 descriptor?? [ 1017.393629][ T34] usb 4-1: USB disconnect, device number 17 [ 1018.308525][ T6768] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1018.486562][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14524'. [ 1018.540584][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1018.599429][ T6783] bridge0: port 1(bond0) entered disabled state [ 1018.701761][ T6783] team0: Port device nlmon0 removed [ 1018.707859][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1018.738949][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1019.188132][T24789] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1019.388127][T24789] usb 4-1: Using ep0 maxpacket: 16 [ 1019.399999][ T6823] loop7: detected capacity change from 0 to 2048 [ 1019.413013][T24789] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1019.431102][ T6798] loop6: detected capacity change from 0 to 32768 [ 1019.440064][T24789] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1019.466575][ T6798] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.14531 (6798) [ 1019.474163][ T6823] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1019.485137][T24789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.529228][T24789] usb 4-1: Product: syz [ 1019.533463][T24789] usb 4-1: Manufacturer: syz [ 1019.568061][T24789] usb 4-1: SerialNumber: syz [ 1019.582984][ T6798] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1019.595798][T24789] r8152-cfgselector 4-1: config 0 descriptor?? [ 1019.614050][ T6798] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 1019.648317][ T6798] BTRFS info (device loop6): enabling auto defrag [ 1019.660682][ T6798] BTRFS info (device loop6): force clearing of disk cache [ 1019.677772][ T6798] BTRFS info (device loop6): ignoring data csums [ 1019.686608][ T6798] BTRFS info (device loop6): turning on async discard [ 1019.694799][ T6798] BTRFS info (device loop6): setting nodatacow, compression disabled [ 1019.711532][ T6798] BTRFS info (device loop6): turning off async discard [ 1019.719048][ T6798] BTRFS info (device loop6): disabling free space tree [ 1019.814269][ T4941] BTRFS info (device loop6: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1019.955348][ T6851] loop7: detected capacity change from 0 to 2048 [ 1020.011149][ T6851] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1020.040044][T24789] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1020.056685][T24789] r8152-cfgselector 4-1: USB disconnect, device number 18 [ 1020.474854][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1020.495914][ T6850] loop8: detected capacity change from 0 to 32768 [ 1020.600726][ T6850] XFS (loop8): Mounting V5 Filesystem [ 1020.752398][ T6850] XFS (loop8): Ending clean mount [ 1020.890472][ T7636] XFS (loop8): Unmounting Filesystem [ 1021.556275][ T6908] netlink: 340 bytes leftover after parsing attributes in process `syz.6.14573'. [ 1021.594262][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14573'. [ 1021.736424][ T6916] loop3: detected capacity change from 0 to 1024 [ 1022.041689][ T6934] loop3: detected capacity change from 0 to 64 [ 1022.120871][ T6936] loop6: detected capacity change from 0 to 1024 [ 1022.205899][ T6936] hfsplus: xattr searching failed [ 1022.226709][ T6936] syz.6.14587: attempt to access beyond end of device [ 1022.226709][ T6936] loop6: rw=0, sector=65540, nr_sectors = 2 limit=1024 [ 1022.270458][ T6936] Buffer I/O error on dev loop6, logical block 32770, async page read [ 1022.298489][ T6936] syz.6.14587: attempt to access beyond end of device [ 1022.298489][ T6936] loop6: rw=0, sector=65540, nr_sectors = 2 limit=1024 [ 1022.323188][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14591'. [ 1022.332342][ T6936] Buffer I/O error on dev loop6, logical block 32770, async page read [ 1022.340884][ T6944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1022.561657][ T6946] loop4: detected capacity change from 0 to 4096 [ 1022.584016][ T6946] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1022.747593][ T6960] loop3: detected capacity change from 0 to 764 [ 1022.801330][ T6960] rock: directory entry would overflow storage [ 1022.812209][ T6960] rock: sig=0x4654, size=5, remaining=4 [ 1022.845341][ T6960] isofs: Unable to find the ".." directory for NFS. [ 1023.091507][ T6972] comedi comedi0: comedi_config --init_data is deprecated [ 1023.244433][ T6983] netlink: 'syz.8.14611': attribute type 5 has an invalid length. [ 1023.278129][ T6983] netlink: 7 bytes leftover after parsing attributes in process `syz.8.14611'. [ 1023.364275][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14615'. [ 1023.799892][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14628'. [ 1023.836451][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14628'. [ 1023.858185][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14628'. [ 1023.909924][ T7024] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 1024.088108][ T7032] loop3: detected capacity change from 0 to 512 [ 1024.135269][ T7032] /dev/loop3: Can't open blockdev [ 1024.239902][ T7041] loop8: detected capacity change from 0 to 256 [ 1024.586241][ T7053] netlink: 'syz.6.14645': attribute type 9 has an invalid length. [ 1024.595588][ T7053] netlink: 'syz.6.14645': attribute type 7 has an invalid length. [ 1024.618864][ T7053] netlink: 'syz.6.14645': attribute type 8 has an invalid length. [ 1024.886759][ T34] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1025.088146][ T34] usb 4-1: Using ep0 maxpacket: 16 [ 1025.095160][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.147416][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.177198][ T34] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1025.201440][ T34] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1025.227303][ T7057] loop7: detected capacity change from 0 to 32768 [ 1025.233861][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.266308][ T34] usb 4-1: config 0 descriptor?? [ 1025.286789][ T34] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input56 [ 1025.300988][ T3625] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1025.310865][ T7057] JBD2: Ignoring recovery information on journal [ 1025.350190][ T7057] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1025.378649][ T3625] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1025.384575][ T7082] loop8: detected capacity change from 0 to 1024 [ 1025.435351][ T3625] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1025.463659][ T3625] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1025.495825][ T7082] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:477: comm syz.8.14659: Invalid block bitmap block 0 in block_group 0 [ 1025.515590][ T4673] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1025.529741][ T7067] loop6: detected capacity change from 0 to 32768 [ 1025.549222][ T7082] Quota error (device loop8): write_blk: dquota write failed [ 1025.557112][ T7082] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1025.577709][ T7056] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1025.586723][ T7067] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.14652 (7067) [ 1025.617493][ T4940] ocfs2: Unmounting device (7,7) on (node local) [ 1025.629552][ T7082] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.14659: Failed to acquire dquot type 0 [ 1025.674105][ T7082] EXT4-fs error (device loop8): ext4_free_blocks:6220: comm syz.8.14659: Freeing blocks not in datazone - block = 0, count = 4096 [ 1025.699098][ T3625] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1025.707102][ T7082] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.14659: Invalid inode bitmap blk 0 in block_group 0 [ 1025.720229][ T737] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-7 [ 1025.730252][ T737] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0 [ 1025.730507][ T7067] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1025.757175][ T34] usb 4-1: USB disconnect, device number 19 [ 1025.771702][ T7067] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 1025.781644][ T7082] EXT4-fs error (device loop8) in ext4_free_inode:362: Corrupt filesystem [ 1025.792580][ T7067] BTRFS info (device loop6): force zlib compression, level 3 [ 1025.811662][ T7091] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1025.827501][ T7082] EXT4-fs (loop8): 1 orphan inode deleted [ 1025.836955][ T7067] BTRFS info (device loop6): turning on flush-on-commit [ 1025.863892][ T7082] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1025.865252][ T7090] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1025.892938][ T7067] BTRFS info (device loop6): max_inline at 4096 [ 1025.912484][ T7067] BTRFS info (device loop6): using free space tree [ 1025.932073][ T7082] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 1026.093314][ T7067] BTRFS info (device loop6): enabling ssd optimizations [ 1026.136551][ T7636] EXT4-fs (loop8): unmounting filesystem. [ 1026.306868][ T4941] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1026.575678][ T7126] EXT4-fs: Ignoring removed i_version option [ 1026.675878][ T7126] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1026.721553][ T7126] ext4 filesystem being mounted at /2774/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.771192][ T7126] EXT4-fs error (device loop8): ext4_xattr_block_list:713: inode #15: comm syz.8.14672: corrupted xattr block 32 [ 1026.797077][ T7126] EXT4-fs (loop8): Remounting filesystem read-only [ 1026.808161][ T4485] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1026.852044][ T7135] openvswitch: netlink: Key type 29 is not supported [ 1026.946590][ T7636] EXT4-fs (loop8): unmounting filesystem. [ 1027.028988][ T4485] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 1027.057246][ T4485] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1027.086393][ T4485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.108072][ T4485] usb 5-1: Product: syz [ 1027.112272][ T4485] usb 5-1: Manufacturer: syz [ 1027.140929][ T4485] usb 5-1: SerialNumber: syz [ 1027.178816][ T4485] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1027.244747][ T7147] set_capacity_and_notify: 2 callbacks suppressed [ 1027.244763][ T7147] loop6: detected capacity change from 0 to 256 [ 1027.387049][ C0] usb 5-1: ath: unknown panic pattern! [ 1027.444112][ T7150] IPv6: sit6: Disabled Multicast RS [ 1027.463807][ T7154] netlink: 'syz.7.14682': attribute type 2 has an invalid length. [ 1027.484113][ T7154] netlink: 224 bytes leftover after parsing attributes in process `syz.7.14682'. [ 1027.551270][ T7137] loop3: detected capacity change from 0 to 32768 [ 1027.649527][ T4353] usb 5-1: USB disconnect, device number 13 [ 1027.664120][ T7137] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 1027.710677][ T7137] ocfs2: Mounting device (7,3) on (node local, slot 65535) with writeback data mode. [ 1027.854149][T30144] INFO: trying to register non-static key. [ 1027.859986][T30144] The code is fine but needs lockdep annotation, or maybe [ 1027.867094][T30144] you didn't initialize this object before use? [ 1027.873324][T30144] turning off the locking correctness validator. [ 1027.879637][T30144] CPU: 1 PID: 30144 Comm: syz-executor Not tainted syzkaller #0 [ 1027.887265][T30144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1027.897304][T30144] Call Trace: [ 1027.900579][T30144] [ 1027.903517][T30144] dump_stack_lvl+0x188/0x24e [ 1027.908222][T30144] ? show_regs_print_info+0x12/0x12 [ 1027.913444][T30144] ? load_image+0x410/0x410 [ 1027.917966][T30144] ? _find_next_bit+0x11e/0x130 [ 1027.922819][T30144] ? __is_module_percpu_address+0x279/0x3b0 [ 1027.928782][T30144] ? is_kernel_percpu_address+0x18f/0x1b0 [ 1027.934567][T30144] assign_lock_key+0x201/0x230 [ 1027.939338][T30144] ? SOFTIRQ_verbose+0x10/0x10 [ 1027.944107][T30144] ? __lock_acquire+0x7ea0/0x7ea0 [ 1027.949125][T30144] ? mark_lock+0x94/0x320 [ 1027.953448][T30144] register_lock_class+0x21d/0x870 [ 1027.958555][T30144] ? mark_lock+0x94/0x320 [ 1027.962880][T30144] ? is_dynamic_key+0x260/0x260 [ 1027.967725][T30144] ? __lock_acquire+0x142d/0x7ea0 [ 1027.972741][T30144] __lock_acquire+0x277/0x7ea0 [ 1027.977512][T30144] ? kernel_text_address+0x9c/0xd0 [ 1027.982711][T30144] ? __kernel_text_address+0x9/0x30 [ 1027.987912][T30144] ? verify_lock_unused+0x140/0x140 [ 1027.993119][T30144] ? stack_trace_save+0xa6/0xf0 [ 1027.997965][T30144] ? __stack_depot_save+0x35/0x480 [ 1028.003146][T30144] lock_acquire+0x1bc/0x4a0 [ 1028.007760][T30144] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1028.013694][T30144] ? read_lock_is_recursive+0x10/0x10 [ 1028.019056][T30144] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1028.025296][T30144] ? lockdep_hardirqs_on+0x94/0x140 [ 1028.030495][T30144] _raw_spin_lock_irqsave+0xb0/0x100 [ 1028.035773][T30144] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1028.041694][T30144] ? _raw_spin_lock+0x40/0x40 [ 1028.046383][T30144] ? ktime_get+0x247/0x270 [ 1028.050800][T30144] ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 1028.056526][T30144] ? ocfs2_dlm_shutdown+0x230/0x230 [ 1028.061724][T30144] ? slab_free_freelist_hook+0x133/0x1b0 [ 1028.067380][T30144] ? ocfs2_journal_shutdown+0x68e/0xc40 [ 1028.072980][T30144] ? ocfs2_journal_init+0xd40/0xd40 [ 1028.078171][T30144] ocfs2_dlm_shutdown+0x33/0x230 [ 1028.083103][T30144] ocfs2_dismount_volume+0x479/0x940 [ 1028.088464][T30144] ? ocfs2_enable_quotas+0x4a0/0x4a0 [ 1028.093827][T30144] ? clear_inode+0x150/0x150 [ 1028.098428][T30144] ? dput+0x37/0x1d0 [ 1028.102315][T30144] ? ocfs2_free_inode+0x20/0x20 [ 1028.107175][T30144] generic_shutdown_super+0x130/0x340 [ 1028.112607][T30144] kill_block_super+0x7c/0xe0 [ 1028.117281][T30144] deactivate_locked_super+0x93/0xf0 [ 1028.122582][T30144] cleanup_mnt+0x471/0x4f0 [ 1028.127060][T30144] task_work_run+0x1d0/0x260 [ 1028.131651][T30144] ? task_work_cancel+0x220/0x220 [ 1028.136668][T30144] ? exit_to_user_mode_loop+0x3b/0x110 [ 1028.142120][T30144] exit_to_user_mode_loop+0xe6/0x110 [ 1028.147398][T30144] exit_to_user_mode_prepare+0xee/0x180 [ 1028.152955][T30144] syscall_exit_to_user_mode+0x16/0x40 [ 1028.158468][T30144] do_syscall_64+0x58/0xa0 [ 1028.162931][T30144] ? clear_bhb_loop+0x60/0xb0 [ 1028.167612][T30144] ? clear_bhb_loop+0x60/0xb0 [ 1028.172289][T30144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1028.178199][T30144] RIP: 0033:0x7f42cc1a0797 [ 1028.182617][T30144] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1028.202217][T30144] RSP: 002b:00007ffd92518108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1028.210624][T30144] RAX: 0000000000000000 RBX: 00007f42cc235f63 RCX: 00007f42cc1a0797 [ 1028.218587][T30144] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd925181c0 [ 1028.226546][T30144] RBP: 00007ffd925181c0 R08: 00007ffd925191c0 R09: 00000000ffffffff [ 1028.234504][T30144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd92519250 [ 1028.242463][T30144] R13: 00007f42cc235f63 R14: 00000000000faf95 R15: 00007ffd92519290 [ 1028.250429][T30144] [ 1028.254416][ T4485] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1028.264301][T30144] ocfs2: Unmounting device (7,3) on (node local) [ 1028.274381][ T4485] ath9k_htc: Failed to initialize the device [ 1028.293375][ T4353] usb 5-1: ath9k_htc: USB layer deinitialized