last executing test programs: 1m5.112360785s ago: executing program 1 (id=876): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000000), 0x2) 1m4.486228647s ago: executing program 1 (id=885): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000040)={[{@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@lazytime}]}, 0x0, 0x45d, &(0x7f0000001480)="$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") 1m3.958433988s ago: executing program 1 (id=892): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) 1m2.725818354s ago: executing program 1 (id=904): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 1m0.992699202s ago: executing program 1 (id=924): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000001080)={0x13, &(0x7f0000000200)=[{0xd, '\x00', @data=0x6, 0x4}]}) 58.317219184s ago: executing program 1 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x25, 0x301, 0x670bd24, 0x25dfdbfd, {0x15}, [@typed={0x8, 0x14e, 0x0, 0x0, @u32=0xc25a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) 57.900775845s ago: executing program 32 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x25, 0x301, 0x670bd24, 0x25dfdbfd, {0x15}, [@typed={0x8, 0x14e, 0x0, 0x0, @u32=0xc25a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) 2.764495801s ago: executing program 5 (id=1592): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000080)={0x6, 0x4}) 2.560368967s ago: executing program 5 (id=1594): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79e63}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e1c}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) 2.300037416s ago: executing program 5 (id=1598): r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000780)={'macvtap0\x00', &(0x7f0000000680)=@ethtool_link_settings={0x1, 0x2, 0x0, 0x0, 0xf, 0xeb, 0x38, 0x2, 0x0, 0x4, [0xffffffff, 0xffffe022, 0xfffffe00, 0xfffff000, 0xe3a0, 0x4ac, 0x3c85aa8b, 0x6]}}) 2.249461484s ago: executing program 3 (id=1600): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_proto_private(r0, 0x8922, &(0x7f0000000180)="241ca0377396d43a") 2.111975226s ago: executing program 5 (id=1602): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x400, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}}, 0x24000800) 2.012670462s ago: executing program 2 (id=1603): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x34, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.960312967s ago: executing program 0 (id=1604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000001000ffff24bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b37c0100231a0500400012800e0001006970366772657461700000002c000280140007000000008000000000fffffffffffffffe1400060000000000000000000000ffff"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.916433523s ago: executing program 4 (id=1605): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[], 0x1, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh") truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 1.840743254s ago: executing program 5 (id=1606): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES8=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa8f, &(0x7f0000001400)="$eJzs3UuMHEfdAPCe3Z31M5/H+WxinJDYBJIIyG68a8zDgjiKL1gx4hYp4mI5TrBwDMKRQqJI2D5xI5FlboiHOOUSAUIiF2TlxCUSscQlp8CBA5aRInGABHvQzlbNzvw9k57ZV+/s/H5ST013VXdVz3b39quqCmBsTbQ+663Pq29dOf6Ph/6+beH74+0UjdbnVMfYQupaGp8Ky3t/cjG89cGrp3uFtWKu9ZnHJzvm3VEUxcXiQHGtaBT7r15//Z25p05eOnH54LtvHL2xBqsOAABj51vXjh7e+9c/37v7wzfvP1ZsaU/P5+eNNL4znfcfSyf+C8FULV8/LF0P1DqGTtMh3VQaJkK6yR7pio509Zxua/d8Mf/psNx6n3RbSvKfDNcotVAeGGV5O24UtYmZrvGJiZmZxWvyonVdP12bOX/23HMXKioosOr+9UBRFAcMhnEbmrvaO0HlZalu6PgVACoVnxfe4WK8s7Ay7aVNDZb/zScmes/frb6aZWR8rPf2L/+4/O5yrHf+Zev/60trvP6MlcG3pq1rWo7Vltcr70c703h8jhDfXxr2+JOXNxmWN+gJQL/nCKPyfKFfOSfXuRzL1a/8cbvYrL6Wwvw7fD3Ed+4/8W86Kn9joLd/b7j7/9uWCld5WQyGzT00qzz4ANUquayP7801kxwf3+uL8VtK4reWxG8rid++OLX9Gl+M31EyP4yz3734k+K1WtGzPl6xeP3f2lkGvR+W77PdlcL/G7I88X7ksPfj4nu/w1pp/vF9YtjI/nDq6TNffvaZ64vv/9fa2//ttL0fSOONtG9dSwny/cJ4X7397n+jO5+JPunuDuW5q0f61vc93elqe5aWU3QcZ+4ox77u+Xb1S3dfd7pGSLctDfF0KZ6fbA/z5fOPfFzNv9dUWN96WI/pUI58XNmdwtF6GsNGlbfHfu//5+1zX1GvPXf23JnH0njeTv80Wd+yMP3QOpcbWLlB6//sK7rr/+xsT69PdB4Xdi1Nr3UeFxph+lyf6fNpPP+f+87kttb0mdPfO/fsaq88jLkLL7/y3VPnzp35gS+++OJL+0vVRyZgrc2++ML3Zy+8/MqjZ1849fyZ58+cnz9yZH5u7shX5g/Pts7rZzvP7oHNZOmf/tCzetQFAAAAAAAAAAAAFXnpxPHrf3n7S+8t1v9fqv+X6//nN39z/f8fh/r/sZ58rgef6wHu7hHfShMaWJ0O6epp+P9Q3j0hn71hvk+ksN2PX6r/n7OL7brm8twTpsf2e3O60JzAHe2lTIc2SGJ/gZ9O4eUU/qqACtV+1ntyCsvat87ben4ZWLsUoyn/3XJ7Jrkdk1z/u1+7Tvn4v7v3Yn+02uVkda1HdcKq1xHo7Z8brv3vNRmWGvysvCwdVwyVl8Ww0YZbzWZzPfNrNj+uFw99TQHrp+r+P/N9zxye/+M3ti4MOdnNJ7qPl7H9UliJqvu/rCz/fGNxXNd/wPxXu//Pdv93Ax//Qo95jeXl+5+f33ivI9tif9/8txRd+cf1z+1A7xku/w9T/nltHi765d+9/s1fhvzjA6EBfRTy3z5g/nH9rwybccrwvyn//LM98uCg+S8uoDbRXY543zg//4v3jbNbYf1z257Drv9yO2q8nfKHcTYq/cwOq6v/30vN9e//d4U9DMX3ML6YxvOBML/nEPs7ubW1GKr8+f2K/H9gb1h+reT/m/5/R9tXU1i2P+T+f/P22OgxPtExXu/x227WYw2MqvdX7flfxxtzG+A5ymYYXtpVfRlGYajZ5pY9NJvNSh/yecJYrap//6qvE6rOv+rfv0zs/zeew8f+f2N87P83xsf+f2N8677iR0ud9sbfa3uYP8bH/n9j/D0h39g/8L6S+E+WxO8vib+3JP6+kvhPlcQfLIm/vyT+gZL4u0viHyyJ/0z4i8f4z5bM/1BJ/CMfHz//w5L5N7tcH2Vc1x/GWayfd+f+v8wHvMCGl5//9Nv/95TEA6Prp28eevKZ3367sVj/f7p9PyQ/xzuWxuvp2jleL8X7J5Mp7u00/rcQv9Hvd8A4ie1nxP/vD5fEA6Mrv+dl/4YxVOvdYs+g7Vb1O89ntHwuhZ9P4RdS+GgKZ1I4m8JDKZxbp/KxNp78ze+PvlZbut7fFeIHfR8+1geK7UTND1ieeH9g2PfxYzt+w1pp/susDgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCZidbn4cP7akVx9a0rx58+eXZ2Ycrj7RSN1udUx1i9PV9RPJbCyRT+In259cGrpzvD2ymsFXNFrai1pxffvNnOaUdRFBeLA8W1olHsv3r99Xfmnjp56cTlg+++cfTG2v0CAAAAsPn9LwAA//+1ThxH") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1.803178961s ago: executing program 2 (id=1607): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000000c0)) 1.636731216s ago: executing program 0 (id=1608): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) 1.601856517s ago: executing program 3 (id=1609): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe78, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x3, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x5, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x105}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x7, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x1, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x2003}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0xffffaea1, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x1, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7, 0x0, 0x2}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794, 0x1}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe78}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 1.593260989s ago: executing program 2 (id=1610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc2b81, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0x4018aee2, &(0x7f0000000040)={0x1, 0x0, [{0x345, 0x0, 0x7}]}) 1.526063007s ago: executing program 2 (id=1611): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) 1.52530975s ago: executing program 4 (id=1612): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x100000000, &(0x7f0000006680)) unlink(0x0) 1.469330847s ago: executing program 0 (id=1613): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}}, 0x0) 1.416488721s ago: executing program 3 (id=1614): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x3, &(0x7f0000006380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x9e}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @exit, @alu={0x7, 0x0, 0x8, 0x3, 0x3, 0x6, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0xfffffffffffffe7c, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x4, 0x80c}, 0x10}, 0x94) 1.401121856s ago: executing program 2 (id=1615): r0 = syz_open_dev$video(&(0x7f0000000100), 0x6, 0x8040) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000700)=@multiplanar_overlay={0x5, 0x9, 0x4, 0x10000, 0x5, {}, {0x2, 0x5, 0x3, 0x68, 0x3, 0xf8, "c9a71e6c"}, 0x6, 0x3, {&(0x7f0000000680)=[{0xffffffff, 0x401, {}, 0x1}, {0xf5d, 0x8, {0x7fffffff}}]}, 0x4}) 1.271969597s ago: executing program 0 (id=1616): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") statx(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4000, 0x1f842f947b598ea3, 0x0) 1.256997248s ago: executing program 2 (id=1617): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400000000e1ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d0010"], 0x44}}, 0x0) 1.193135877s ago: executing program 3 (id=1618): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000200)={0x0}) 1.179754456s ago: executing program 4 (id=1619): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r0, 0x0, 0x0) 1.072506872s ago: executing program 3 (id=1620): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 899.101791ms ago: executing program 4 (id=1621): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000001040)=@mmap={0x7, 0x0, 0x4, 0x70000, 0x1, {}, {0x2, 0x1, 0x7, 0x3, 0x9, 0xa, "7c8dbd8e"}, 0xb, 0x1, {}, 0x5e3}) 764.730125ms ago: executing program 4 (id=1622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="009c"], 0x8) 764.504724ms ago: executing program 3 (id=1623): r0 = syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000180)=ANY=[], 0x0, 0x5f2, &(0x7f0000000680)="$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") fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), 0x0, 0x0, 0x1) 699.177664ms ago: executing program 0 (id=1624): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 656.49288ms ago: executing program 4 (id=1625): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x444, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES8, @ANYRES64], 0xfe, 0x66b, &(0x7f0000001100)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x0) 480.818749ms ago: executing program 5 (id=1626): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) 0s ago: executing program 0 (id=1627): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='9.::\x00', 0x0) kernel console output (not intermixed with test programs): .408274][ T6034] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.44 (6034) [ 92.526381][ T6026] loop2: detected capacity change from 0 to 32768 [ 92.671462][ T6026] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.39 (6026) [ 93.226018][ T6026] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.226061][ T6026] BTRFS info (device loop2): using sha256 checksum algorithm [ 93.321256][ T6034] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 93.321288][ T6034] BTRFS info (device loop3): using sha256 checksum algorithm [ 94.470427][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 94.470456][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 94.559789][ T6034] BTRFS error (device loop3): open_ctree failed: -4 [ 94.596288][ T6026] BTRFS error (device loop2): open_ctree failed: -4 [ 94.885922][ T5810] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.963023][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 95.060788][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 95.073708][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.073738][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.073771][ T5810] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.073792][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.160058][ T5810] usb 1-1: config 0 descriptor?? [ 95.306625][ T5810] hub 1-1:0.0: USB hub found [ 95.389939][ T5810] hub 1-1:0.0: 29 ports detected [ 95.391088][ T5810] hub 1-1:0.0: insufficient power available to use all downstream ports [ 95.604255][ T5810] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 95.604282][ T5810] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 95.694315][ T6127] netlink: 'syz.3.73': attribute type 30 has an invalid length. [ 95.831752][ T6129] loop1: detected capacity change from 0 to 1024 [ 95.884407][ T5810] usbhid 1-1:0.0: can't add hid device: -71 [ 95.884479][ T5810] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 95.958600][ T5810] usb 1-1: USB disconnect, device number 3 [ 96.023787][ T6136] capability: warning: `syz.2.78' uses 32-bit capabilities (legacy support in use) [ 96.073731][ T6129] hfsplus: Filesystem is marked locked, mounting read-only. [ 96.095100][ T6129] hfsplus: failed to load catalog file [ 96.515252][ T6151] netlink: 56 bytes leftover after parsing attributes in process `syz.3.85'. [ 96.863469][ T38] audit: type=1400 audit(1776210953.255:7): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=6158 comm="syz.1.89" [ 97.024380][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 97.696748][ T6181] loop0: detected capacity change from 0 to 2048 [ 97.714957][ T6185] loop2: detected capacity change from 0 to 256 [ 98.191906][ T6181] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.314129][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.340744][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.871559][ T38] audit: type=1326 audit(1776210955.275:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97194c819 code=0x7ffc0000 [ 98.873329][ T38] audit: type=1326 audit(1776210955.275:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97194c819 code=0x7ffc0000 [ 98.874257][ T38] audit: type=1326 audit(1776210955.275:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ff97194c819 code=0x7ffc0000 [ 98.874504][ T38] audit: type=1326 audit(1776210955.275:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97194c819 code=0x7ffc0000 [ 98.880710][ T38] audit: type=1326 audit(1776210955.285:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97194c819 code=0x7ffc0000 [ 99.287947][ T6209] loop0: detected capacity change from 0 to 256 [ 99.401572][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.411386][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.156882][ T6225] loop0: detected capacity change from 0 to 32768 [ 100.664744][ T6237] loop2: detected capacity change from 0 to 4096 [ 101.143335][ T6191] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 101.153924][ T164] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.175186][ T164] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.175264][ T164] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.175297][ T164] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.180318][ T6245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.715373][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 101.754779][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.143'. [ 101.907974][ T6276] syz.2.146 uses obsolete (PF_INET,SOCK_PACKET) [ 101.913976][ T822] kernel write not supported for file /input/event2 (pid: 822 comm: kworker/0:2) [ 102.076119][ T6278] openvswitch: netlink: IPv6 tunnel dst address is zero [ 102.270726][ T38] audit: type=1326 audit(1776210958.675:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97194c819 code=0x7ffc0000 [ 102.270771][ T38] audit: type=1326 audit(1776210958.675:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97194c819 code=0x7ffc0000 [ 102.280229][ T38] audit: type=1326 audit(1776210958.685:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7ff97194c819 code=0x7ffc0000 [ 102.282294][ T38] audit: type=1326 audit(1776210958.685:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97194c819 code=0x7ffc0000 [ 102.282336][ T38] audit: type=1326 audit(1776210958.685:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97194c819 code=0x7ffc0000 [ 102.370219][ T6280] loop2: detected capacity change from 0 to 4096 [ 102.396522][ T6280] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 102.538131][ T6280] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 102.538163][ T6280] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 102.926248][ T6295] loop0: detected capacity change from 0 to 4096 [ 102.943070][ T6295] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 103.060657][ T164] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 103.060854][ T5825] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 103.060875][ T5825] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 103.060891][ T5825] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 103.097206][ T6295] ntfs3(loop0): ino=19, mi_enum_attr [ 103.097233][ T6295] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 103.175437][ T13] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 103.288083][ T6272] loop1: detected capacity change from 0 to 32768 [ 103.289123][ T6272] btrfs: Deprecated parameter 'usebackuproot' [ 103.289870][ T6272] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 103.332207][ T6307] warning: `syz.4.162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.335338][ T6272] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.144 (6272) [ 103.431193][ T6272] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 103.431225][ T6272] BTRFS info (device loop1): using blake2b checksum algorithm [ 103.591655][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 103.613234][ T6295] ntfs3(loop0): failed to convert "c46c" to iso8859-3 [ 103.739683][ T6295] ntfs3(loop0): ino=20, mi_enum_attr [ 103.932006][ T6319] loop3: detected capacity change from 0 to 4096 [ 103.955168][ T6319] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 104.053262][ T6272] BTRFS info (device loop1 state EC): disabling log replay at mount time [ 104.053285][ T6272] BTRFS info (device loop1 state EC): turning on async discard [ 104.053305][ T6272] BTRFS info (device loop1 state EC): enabling free space tree [ 104.053320][ T6272] BTRFS info (device loop1 state EC): force clearing of disk cache [ 104.053336][ T6272] BTRFS info (device loop1 state EC): trying to use backup root at mount time [ 104.053355][ T6272] BTRFS info (device loop1 state EC): ignoring data csums [ 104.053377][ T6272] BTRFS info (device loop1 state EC): use zlib compression, level 3 [ 104.270090][ T6319] ntfs3(loop3): Failed to read $AttrDef (-5). [ 104.954837][ T6351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.271517][ T6355] [U] .Ž§hòÛ0FƒwZ,ßúiŒqg«ƒÛÒV2ÆôsO¾½ [ 105.271545][ T6355] [U] …¥` w*ÌÀBØBOLhUÇ [ 105.271555][ T6355] [U] w$·nÓ|ÝÅ#‘±%o.z\ï̧mРûàw [ 105.271570][ T6355] [U] ÁóàR{ê«¢þ S„ðì [ 105.740122][ T6363] netlink: 'syz.3.182': attribute type 61 has an invalid length. [ 105.786393][ T5822] BTRFS info (device loop1 state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 105.998093][ T6368] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 106.163256][ T6376] netlink: 'syz.0.189': attribute type 1 has an invalid length. [ 106.163276][ T6376] netlink: 224 bytes leftover after parsing attributes in process `syz.0.189'. [ 106.572586][ T6384] loop3: detected capacity change from 0 to 2048 [ 107.149216][ T6384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.149371][ T6384] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.270186][ T6380] loop4: detected capacity change from 0 to 32768 [ 107.276803][ T6380] ======================================================= [ 107.276803][ T6380] WARNING: The mand mount option has been deprecated and [ 107.276803][ T6380] and is ignored by this kernel. Remove the mand [ 107.276803][ T6380] option from the mount to silence this warning. [ 107.276803][ T6380] ======================================================= [ 107.354837][ T6384] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.193: bg 0: block 345: padding at end of block bitmap is not set [ 107.457216][ T6384] EXT4-fs (loop3): Remounting filesystem read-only [ 107.705577][ T6380] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 4105: bits per cluster 2048 [ 107.713244][ T6380] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 107.713256][ T6380] OCFS2: File system is now read-only. [ 107.713267][ T6380] (syz.4.191,6380,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 107.715445][ T6380] (syz.4.191,6380,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 107.722629][ T6380] (syz.4.191,6380,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 107.722658][ T6380] (syz.4.191,6380,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 107.722679][ T6380] (syz.4.191,6380,1):ocfs2_mount_volume:1758 ERROR: status = -30 [ 107.743189][ T6380] (syz.4.191,6380,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 107.756099][ T6410] netlink: 'syz.2.204': attribute type 3 has an invalid length. [ 107.822572][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.883220][ T6380] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=02020202) [ 108.278294][ T6422] loop2: detected capacity change from 0 to 512 [ 108.396419][ T6424] sctp: [Deprecated]: syz.3.210 (pid 6424) Use of int in maxseg socket option. [ 108.396419][ T6424] Use struct sctp_assoc_value instead [ 108.544502][ T6412] loop4: detected capacity change from 0 to 32768 [ 108.562564][ T6412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.207 (6412) [ 108.628526][ T6412] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.628559][ T6412] BTRFS info (device loop4): using sha256 checksum algorithm [ 108.693926][ T6422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.694058][ T6422] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.694131][ T6440] loop3: detected capacity change from 0 to 128 [ 108.781915][ T6428] loop0: detected capacity change from 0 to 512 [ 108.869959][ T6428] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.911921][ T6428] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 108.912383][ T6428] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.026746][ T6412] BTRFS info (device loop4): enabling ssd optimizations [ 109.026773][ T6412] BTRFS info (device loop4): turning on async discard [ 109.026789][ T6412] BTRFS info (device loop4): enabling free space tree [ 109.080308][ T6403] loop1: detected capacity change from 0 to 32768 [ 109.179461][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.243514][ T5823] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.633830][ T6403] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 109.633830][ T6403] [ 109.663276][ T6403] ialloc: diAlloc returned -5! [ 109.679443][ T6428] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.211: corrupted inode contents [ 109.679631][ T6428] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 109.687659][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 109.687676][ C1] EXT4-fs (loop0): initial error at time 1776210966: ext4_do_update_inode:5690: inode 16 [ 109.687713][ C1] EXT4-fs (loop0): last error at time 1776210966: ext4_do_update_inode:5690: inode 16 [ 109.736190][ T6428] EXT4-fs (loop0): Remounting filesystem read-only [ 109.836054][ T6428] EXT4-fs (loop0): 1 truncate cleaned up [ 109.940727][ T769] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 109.940754][ T769] Quota error (device loop0): write_blk: dquota write failed [ 109.940767][ T769] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 109.940782][ T769] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 109.940798][ T769] Quota error (device loop0): write_blk: dquota write failed [ 109.940810][ T769] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 109.940908][ T769] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 109.940926][ T769] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 109.941071][ T769] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 110.041285][ T6428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.070874][ T6460] loop3: detected capacity change from 0 to 128 [ 110.293734][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.486740][ T6460] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 110.486891][ T6460] hpfs: filesystem error: improperly stopped [ 110.486906][ T6460] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 110.486920][ T6460] hpfs: You really don't want any checks? You are crazy... [ 110.510593][ T6460] hpfs: hpfs_map_sector(): read error [ 110.510608][ T6460] hpfs: code page support is disabled [ 110.552462][ T6460] hpfs: hpfs_map_4sectors(): unaligned read [ 110.553255][ T6460] hpfs: hpfs_map_4sectors(): unaligned read [ 110.553268][ T6460] hpfs: filesystem error: unable to find root dir [ 111.422341][ T6464] loop2: detected capacity change from 0 to 32768 [ 111.605325][ T6501] loop4: detected capacity change from 0 to 164 [ 111.728023][ T6464] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 111.796127][ T6506] loop3: detected capacity change from 0 to 1024 [ 111.829767][ T6506] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 112.053662][ T6464] XFS (loop2): Ending clean mount [ 112.078207][ T6506] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.236: lblock 2 mapped to illegal pblock 2 (length 1) [ 112.078246][ T6506] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 112.081463][ T6506] EXT4-fs (loop3): Remounting filesystem read-only [ 112.081482][ T6506] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 112.081527][ T6506] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 112.082520][ T6506] EXT4-fs (loop3): 1 orphan inode deleted [ 112.088457][ T6506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.128555][ T6506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.372243][ T5825] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.657797][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'. [ 113.086345][ T821] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.303308][ T821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.303360][ T821] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.303382][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 113.303408][ T821] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 113.357539][ T821] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 113.357567][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.357585][ T821] usb 1-1: Product: syz [ 113.357598][ T821] usb 1-1: Manufacturer: syz [ 113.357610][ T821] usb 1-1: SerialNumber: syz [ 113.437242][ T821] usb 1-1: config 0 descriptor?? [ 113.526049][ T821] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 113.570656][ T6552] loop4: detected capacity change from 0 to 1024 [ 113.599922][ T6559] netlink: 'syz.1.256': attribute type 29 has an invalid length. [ 113.608008][ T6552] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 113.716775][ T821] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 113.717298][ T821] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 113.748555][ T6552] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.255: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.748591][ T6552] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 113.748821][ T6552] EXT4-fs (loop4): Remounting filesystem read-only [ 113.748838][ T6552] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 113.749601][ T6552] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 113.749714][ T6552] EXT4-fs (loop4): 1 orphan inode deleted [ 113.767801][ T6552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.800733][ T6552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.803580][ T821] usb 1-1: USB disconnect, device number 4 [ 113.939406][ T821] garmin_gps 1-1:0.0: device disconnected [ 114.490669][ T6591] capability: warning: `syz.3.271' uses deprecated v2 capabilities in a way that may be insecure [ 115.238118][ T6585] loop1: detected capacity change from 0 to 32768 [ 115.244039][ T6585] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.269 (6585) [ 115.280585][ T6585] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.280624][ T6585] BTRFS info (device loop1): using sha256 checksum algorithm [ 115.710979][ T6585] BTRFS info (device loop1): enabling ssd optimizations [ 115.711003][ T6585] BTRFS info (device loop1): turning on async discard [ 115.711020][ T6585] BTRFS info (device loop1): enabling free space tree [ 115.846571][ T5822] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.008352][ T822] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.174181][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 116.191845][ T822] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 116.191883][ T822] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 116.191901][ T822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.191920][ T822] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 116.191940][ T822] usb 1-1: config 1 has no interface number 0 [ 116.191983][ T822] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 116.192004][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.360698][ T822] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 116.555392][ T6650] loop2: detected capacity change from 0 to 128 [ 116.581435][ T822] snd_usb_pod 1-1:1.1: set_interface failed [ 116.646223][ T822] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 116.655440][ T822] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 116.748646][ T822] usb 1-1: USB disconnect, device number 5 [ 116.860611][ T6644] loop4: detected capacity change from 0 to 32768 [ 116.986415][ T6644] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.079527][ T6664] netlink: 'syz.3.296': attribute type 4 has an invalid length. [ 117.260748][ T6644] XFS (loop4): Ending clean mount [ 117.528111][ T5823] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.482551][ T6702] loop4: detected capacity change from 0 to 512 [ 118.561120][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 118.717466][ T6709] loop0: detected capacity change from 0 to 164 [ 118.812321][ T6680] loop3: detected capacity change from 0 to 32768 [ 119.698534][ T6736] netlink: 'syz.1.331': attribute type 7 has an invalid length. [ 119.710395][ T6739] netlink: 52 bytes leftover after parsing attributes in process `syz.0.333'. [ 119.925778][ T821] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.088417][ T821] usb 4-1: Using ep0 maxpacket: 32 [ 120.091083][ T821] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 120.091108][ T821] usb 4-1: config 0 has no interface number 0 [ 120.091149][ T821] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.091172][ T821] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 120.105000][ T821] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 120.105025][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.105043][ T821] usb 4-1: Product: syz [ 120.105056][ T821] usb 4-1: Manufacturer: syz [ 120.105070][ T821] usb 4-1: SerialNumber: syz [ 120.154769][ T821] usb 4-1: config 0 descriptor?? [ 120.208159][ T821] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 120.256214][ T5831] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.395314][ T821] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 120.395626][ T821] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 120.428417][ T5831] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.429581][ T5831] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.429603][ T5831] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 120.429661][ T5831] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 120.433129][ T5831] usb 2-1: string descriptor 0 read error: -22 [ 120.433259][ T5831] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 120.433282][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.714649][ T821] usb 4-1: USB disconnect, device number 2 [ 120.983165][ T6743] loop2: detected capacity change from 0 to 32768 [ 120.989126][ T5831] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 120.989165][ T5831] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 120.989180][ T5831] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 121.074611][ T6772] loop4: detected capacity change from 0 to 512 [ 121.087815][ T6772] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.091074][ T6743] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.124539][ T6772] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 121.128745][ T6772] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.347: invalid indirect mapped block 33554432 (level 0) [ 121.128779][ T6772] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 121.129951][ T6772] EXT4-fs (loop4): Remounting filesystem read-only [ 121.135790][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 121.135807][ C0] EXT4-fs (loop4): initial error at time 1776210977: ext4_free_branches:1023: inode 13 [ 121.135832][ C0] EXT4-fs (loop4): last error at time 1776210977: ext4_free_branches:1023: inode 13 [ 121.191871][ T6772] EXT4-fs (loop4): 1 truncate cleaned up [ 121.211002][ T6772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.298939][ T6743] XFS (loop2): Ending clean mount [ 121.496263][ T5825] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.552265][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.739336][ T5831] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 121.797288][ T5831] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 121.851207][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.354'. [ 121.851241][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.354'. [ 121.908718][ T6796] bond0: (slave rose0): refused to change device type [ 122.062121][ T5831] usb 2-1: USB disconnect, device number 3 [ 122.679144][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 123.216031][ T6842] Illegal XDP return value 6842 on prog (id 26) dev N/A, expect packet loss! [ 123.704719][ T6853] loop2: detected capacity change from 0 to 2048 [ 123.755399][ T6853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.098220][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 124.250210][ T6875] loop3: detected capacity change from 0 to 256 [ 124.454405][ T6875] FAT-fs (loop3): Directory bread(block 64) failed [ 124.454440][ T6875] FAT-fs (loop3): Directory bread(block 65) failed [ 124.454551][ T6875] FAT-fs (loop3): Directory bread(block 66) failed [ 124.466765][ T6875] FAT-fs (loop3): Directory bread(block 67) failed [ 124.466896][ T6875] FAT-fs (loop3): Directory bread(block 68) failed [ 124.466919][ T6875] FAT-fs (loop3): Directory bread(block 69) failed [ 124.467007][ T6875] FAT-fs (loop3): Directory bread(block 70) failed [ 124.467026][ T6875] FAT-fs (loop3): Directory bread(block 71) failed [ 124.467112][ T6875] FAT-fs (loop3): Directory bread(block 72) failed [ 124.467131][ T6875] FAT-fs (loop3): Directory bread(block 73) failed [ 124.534801][ T6880] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 124.903521][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 125.063820][ T6905] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 125.164830][ T6901] bridge1: entered allmulticast mode [ 125.588252][ T6926] loop3: detected capacity change from 0 to 512 [ 125.631123][ T6926] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.644543][ T6926] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 125.659449][ T6926] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.419: inode #15: comm syz.3.419: iget: illegal inode # [ 125.659670][ T6926] loop3: lost filesystem error report for type 5 error -117 [ 125.667181][ C0] EXT4-fs (loop3): initial error at time 1776210982: ext4_orphan_get:1397 [ 125.667206][ C0] EXT4-fs (loop3): last error at time 1776210982: ext4_orphan_get:1397 [ 125.687371][ T6926] EXT4-fs (loop3): Remounting filesystem read-only [ 125.701786][ T6926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.903496][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.062141][ T6943] loop0: detected capacity change from 0 to 256 [ 126.255963][ T6943] FAT-fs (loop0): Directory bread(block 64) failed [ 126.256006][ T6943] FAT-fs (loop0): Directory bread(block 65) failed [ 126.256110][ T6943] FAT-fs (loop0): Directory bread(block 66) failed [ 126.256132][ T6943] FAT-fs (loop0): Directory bread(block 67) failed [ 126.256291][ T6943] FAT-fs (loop0): Directory bread(block 68) failed [ 126.256312][ T6943] FAT-fs (loop0): Directory bread(block 69) failed [ 126.256403][ T6943] FAT-fs (loop0): Directory bread(block 70) failed [ 126.256422][ T6943] FAT-fs (loop0): Directory bread(block 71) failed [ 126.256509][ T6943] FAT-fs (loop0): Directory bread(block 72) failed [ 126.256530][ T6943] FAT-fs (loop0): Directory bread(block 73) failed [ 126.647858][ T6971] openvswitch: netlink: Actions may not be safe on all matching packets [ 126.849962][ T6981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.445'. [ 128.131986][ T7038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.472'. [ 128.296440][ T7043] netlink: 'syz.1.473': attribute type 10 has an invalid length. [ 128.645260][ T7057] loop3: detected capacity change from 0 to 8 [ 128.715857][ T821] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 128.768108][ T7057] SQUASHFS error: lzo decompression failed, data probably corrupt [ 128.768128][ T7057] SQUASHFS error: Failed to read block 0x91: -5 [ 128.768138][ T7057] SQUASHFS error: Unable to read metadata cache entry [8f] [ 128.768150][ T7057] SQUASHFS error: Unable to read inode 0x11f [ 128.830106][ T7057] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 128.830106][ T7057] SÃȘØÈžZ§6ŸÂ' [ 128.878382][ T821] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 128.878463][ T821] usb 3-1: config 0 has no interface number 0 [ 128.878493][ T821] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 128.878571][ T821] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 128.878597][ T821] usb 3-1: config 0 interface 48 has no altsetting 0 [ 128.882702][ T821] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 128.882726][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.882745][ T821] usb 3-1: Product: syz [ 128.882758][ T821] usb 3-1: Manufacturer: syz [ 128.882771][ T821] usb 3-1: SerialNumber: syz [ 128.989125][ T821] usb 3-1: config 0 descriptor?? [ 129.266380][ T821] ftdi_sio 3-1:0.48: FTDI USB Serial Device converter detected [ 129.354535][ T821] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 129.441778][ T821] usb 3-1: USB disconnect, device number 2 [ 129.480915][ T821] ftdi_sio 3-1:0.48: device disconnected [ 129.999073][ T7076] netlink: 'syz.2.490': attribute type 3 has an invalid length. [ 129.999162][ T7076] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.490'. [ 130.275171][ T38] audit: type=1326 audit(1776210986.675:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c9f9c819 code=0x7ffc0000 [ 130.275213][ T38] audit: type=1326 audit(1776210986.675:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c9f9c819 code=0x7ffc0000 [ 130.280338][ T38] audit: type=1326 audit(1776210986.685:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7ff5c9f9c819 code=0x7ffc0000 [ 130.281783][ T38] audit: type=1326 audit(1776210986.685:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c9f9c819 code=0x7ffc0000 [ 130.291862][ T38] audit: type=1326 audit(1776210986.685:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c9f9c819 code=0x7ffc0000 [ 130.720561][ T7070] loop0: detected capacity change from 0 to 32768 [ 130.767843][ T7070] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.486 (7070) [ 130.918676][ T7070] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.918710][ T7070] BTRFS info (device loop0): using sha256 checksum algorithm [ 130.978103][ T7072] loop3: detected capacity change from 0 to 32768 [ 131.142954][ T7099] bond1: entered allmulticast mode [ 131.156391][ T7099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.165431][ T7070] BTRFS info (device loop0): enabling ssd optimizations [ 131.167737][ T7070] BTRFS info (device loop0): turning on async discard [ 131.167759][ T7070] BTRFS info (device loop0): enabling free space tree [ 131.203576][ T7072] (syz.3.488,7072,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 131.233285][ T7072] (syz.3.488,7072,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 131.366328][ T7123] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.372852][ T5824] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.688903][ T7072] JBD2: Ignoring recovery information on journal [ 132.320474][ T7155] overlayfs: unescaped trailing colons in lowerdir mount option. [ 132.328668][ T7153] loop0: detected capacity change from 0 to 2048 [ 132.360828][ T7153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.366078][ T7072] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 132.773350][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.773415][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.399269][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 134.072670][ T5821] ocfs2: Unmounting device (7,3) on (node local) [ 134.155654][ T7210] netlink: 36 bytes leftover after parsing attributes in process `syz.0.548'. [ 134.206013][ T7211] loop1: detected capacity change from 0 to 2048 [ 134.237196][ T7211] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 134.251379][ T7211] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 134.251398][ T7211] UDF-fs: Scanning with blocksize 512 failed [ 134.453381][ T7211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.652710][ T7221] loop0: detected capacity change from 0 to 256 [ 134.892818][ T7221] FAT-fs (loop0): Directory bread(block 64) failed [ 134.892848][ T7221] FAT-fs (loop0): Directory bread(block 65) failed [ 134.905995][ T7221] FAT-fs (loop0): Directory bread(block 66) failed [ 134.906027][ T7221] FAT-fs (loop0): Directory bread(block 67) failed [ 134.906127][ T7221] FAT-fs (loop0): Directory bread(block 68) failed [ 134.906148][ T7221] FAT-fs (loop0): Directory bread(block 69) failed [ 134.906250][ T7221] FAT-fs (loop0): Directory bread(block 70) failed [ 134.906270][ T7221] FAT-fs (loop0): Directory bread(block 71) failed [ 134.906359][ T7221] FAT-fs (loop0): Directory bread(block 72) failed [ 134.906379][ T7221] FAT-fs (loop0): Directory bread(block 73) failed [ 135.032151][ T7213] loop2: detected capacity change from 0 to 32768 [ 135.511603][ T7241] overlayfs: workdir and upperdir must be separate subtrees [ 135.579827][ T7244] netlink: 'syz.4.565': attribute type 3 has an invalid length. [ 135.773417][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 135.955277][ T7260] loop3: detected capacity change from 0 to 16 [ 135.966495][ T7260] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 136.143142][ T7268] comedi comedi2: das16m1: I/O base address or length out of range [ 136.232628][ T38] audit: type=1326 audit(1776210992.635:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 136.242236][ T38] audit: type=1326 audit(1776210992.635:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 136.280709][ T38] audit: type=1326 audit(1776210992.685:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 136.281954][ T38] audit: type=1326 audit(1776210992.685:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 136.283086][ T38] audit: type=1326 audit(1776210992.685:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 136.283129][ T38] audit: type=1326 audit(1776210992.685:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 136.283166][ T38] audit: type=1326 audit(1776210992.685:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 136.283202][ T38] audit: type=1326 audit(1776210992.685:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 136.289956][ T38] audit: type=1326 audit(1776210992.685:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 136.933713][ T7284] loop0: detected capacity change from 0 to 4096 [ 136.953373][ T7284] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 137.029345][ T7298] loop4: detected capacity change from 0 to 764 [ 137.093342][ T7300] loop1: detected capacity change from 0 to 64 [ 137.173618][ T7298] rock: directory entry would overflow storage [ 137.173632][ T7298] rock: sig=0x4654, size=5, remaining=4 [ 137.639194][ T7300] Bad inode number on dev loop1: 5 is out of range [ 137.928933][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.601'. [ 138.162390][ T7334] random: crng reseeded on system resumption [ 138.289713][ T7332] loop0: detected capacity change from 0 to 4096 [ 138.365106][ T7338] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 138.462865][ T7338] bond1 (unregistering): Released all slaves [ 138.485308][ T7332] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 138.502410][ T7332] ntfs3(loop0): Failed to load $Extend (-22). [ 138.502437][ T7332] ntfs3(loop0): Failed to initialize $Extend. [ 138.699362][ T7346] vivid-002: ================= START STATUS ================= [ 138.699474][ T7346] vivid-002: Radio HW Seek Mode: Bounded [ 138.699510][ T7346] vivid-002: Radio Programmable HW Seek: false [ 138.699528][ T7346] vivid-002: RDS Rx I/O Mode: Block I/O [ 138.699546][ T7346] vivid-002: Generate RBDS Instead of RDS: false [ 138.699564][ T7346] vivid-002: RDS Reception: true [ 138.699581][ T7346] vivid-002: RDS Program Type: 0 inactive [ 138.699602][ T7346] vivid-002: RDS PS Name: inactive [ 138.699623][ T7346] vivid-002: RDS Radio Text: inactive [ 138.699644][ T7346] vivid-002: RDS Traffic Announcement: false inactive [ 138.699666][ T7346] vivid-002: RDS Traffic Program: false inactive [ 138.699687][ T7346] vivid-002: RDS Music: false inactive [ 138.699710][ T7346] vivid-002: ================== END STATUS ================== [ 138.793245][ T7350] netlink: 'syz.4.615': attribute type 10 has an invalid length. [ 138.793267][ T7350] netlink: 40 bytes leftover after parsing attributes in process `syz.4.615'. [ 138.814221][ T7350] bridge0: port 3(ipvlan1) entered blocking state [ 138.814352][ T7350] bridge0: port 3(ipvlan1) entered disabled state [ 138.814518][ T7350] ipvlan1: entered allmulticast mode [ 138.814533][ T7350] veth0_vlan: entered allmulticast mode [ 138.835601][ T7350] ipvlan1: left allmulticast mode [ 138.835620][ T7350] veth0_vlan: left allmulticast mode [ 138.837163][ T7350] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 139.281322][ T7371] loop4: detected capacity change from 0 to 64 [ 139.310439][ T7369] loop3: detected capacity change from 0 to 2048 [ 139.353271][ T7369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.405605][ T7375] netlink: 'syz.2.627': attribute type 1 has an invalid length. [ 139.406002][ T7375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.446296][ T821] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 139.604526][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.604555][ T821] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 139.604594][ T821] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 139.604616][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.654828][ T821] usb 2-1: config 0 descriptor?? [ 139.888349][ T821] usb 2-1: string descriptor 0 read error: -71 [ 139.912969][ T821] usbhid 2-1:0.0: can't add hid device: -71 [ 139.913080][ T821] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 139.936809][ T821] usb 2-1: USB disconnect, device number 4 [ 140.372409][ T7398] loop0: detected capacity change from 0 to 128 [ 140.479422][ T7398] FAT-fs (loop0): Directory bread(block 32) failed [ 140.479451][ T7398] FAT-fs (loop0): Directory bread(block 33) failed [ 140.479552][ T7398] FAT-fs (loop0): Directory bread(block 34) failed [ 140.479572][ T7398] FAT-fs (loop0): Directory bread(block 35) failed [ 140.479658][ T7398] FAT-fs (loop0): Directory bread(block 36) failed [ 140.479678][ T7398] FAT-fs (loop0): Directory bread(block 37) failed [ 140.479770][ T7398] FAT-fs (loop0): Directory bread(block 38) failed [ 140.479790][ T7398] FAT-fs (loop0): Directory bread(block 39) failed [ 140.479878][ T7398] FAT-fs (loop0): Directory bread(block 40) failed [ 140.479899][ T7398] FAT-fs (loop0): Directory bread(block 41) failed [ 140.989321][ T5827] Bluetooth: hci4: unknown advertising packet type: 0xf4 [ 141.056258][ T7398] FAT-fs (loop0): Filesystem has been set read-only [ 141.610552][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 141.610578][ T7437] netlink: 2 bytes leftover after parsing attributes in process `syz.1.657'. [ 141.632819][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 141.635385][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 141.635499][ T7437] netlink: 2 bytes leftover after parsing attributes in process `syz.1.657'. [ 141.655498][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 141.656629][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 141.656651][ T7437] netlink: 2 bytes leftover after parsing attributes in process `syz.1.657'. [ 141.658548][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 141.659331][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 141.895789][ T5831] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 142.045790][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 142.048213][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.048242][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.048277][ T5831] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.048303][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.137629][ T5831] usb 4-1: config 0 descriptor?? [ 142.217324][ T5831] hub 4-1:0.0: USB hub found [ 142.400268][ T5831] hub 4-1:0.0: 5 ports detected [ 142.400805][ T5831] hub 4-1:0.0: insufficient power available to use all downstream ports [ 142.600352][ T5831] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 142.600378][ T5831] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 142.644543][ T5831] usbhid 4-1:0.0: can't add hid device: -71 [ 142.644657][ T5831] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 142.687264][ T5831] usb 4-1: USB disconnect, device number 3 [ 142.925219][ T7463] loop0: detected capacity change from 0 to 736 [ 143.386711][ T38] audit: type=1400 audit(1776210999.785:32): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7472 comm="syz.3.676" [ 143.623465][ T7441] loop2: detected capacity change from 0 to 32768 [ 143.630173][ T821] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 143.727485][ T7441] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.784711][ T821] usb 1-1: config 6 has an invalid interface number: 27 but max is 0 [ 143.784738][ T821] usb 1-1: config 6 has no interface number 0 [ 143.784780][ T821] usb 1-1: config 6 interface 27 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 143.784807][ T821] usb 1-1: config 6 interface 27 has no altsetting 0 [ 143.796161][ T821] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=59.e1 [ 143.796188][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.796206][ T821] usb 1-1: Product: syz [ 143.796219][ T821] usb 1-1: Manufacturer: syz [ 143.796232][ T821] usb 1-1: SerialNumber: syz [ 144.011738][ T7441] XFS (loop2): Ending clean mount [ 144.129727][ T5825] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.184629][ T821] cdc_ether 1-1:6.27: invalid descriptor buffer length [ 144.184651][ T821] usb 1-1: No union descriptors [ 144.193050][ T821] usb 1-1: unsupported MDLM descriptors [ 144.223467][ T821] cdc_acm 1-1:6.27: invalid descriptor buffer length [ 144.295061][ T821] usb 1-1: USB disconnect, device number 6 [ 145.590761][ T7544] loop2: detected capacity change from 0 to 64 [ 145.875875][ T7525] loop3: detected capacity change from 0 to 32768 [ 145.908960][ T7525] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.698 (7525) [ 146.050429][ T7525] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.050465][ T7525] BTRFS info (device loop3): using sha256 checksum algorithm [ 146.186490][ T7538] loop0: detected capacity change from 0 to 32768 [ 146.207729][ T7538] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.703 (7538) [ 146.369087][ T7538] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.369118][ T7538] BTRFS info (device loop0): using crc32c checksum algorithm [ 146.471918][ T7525] BTRFS info (device loop3): enabling ssd optimizations [ 146.471943][ T7525] BTRFS info (device loop3): turning on async discard [ 146.471958][ T7525] BTRFS info (device loop3): enabling free space tree [ 146.721135][ T5821] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.721645][ T7592] loop2: detected capacity change from 0 to 16 [ 146.790006][ T7538] BTRFS info (device loop0): turning off barriers [ 146.790032][ T7538] BTRFS info (device loop0): enabling free space tree [ 146.790050][ T7538] BTRFS info (device loop0): use zstd compression, level 3 [ 146.974073][ T7599] __nla_validate_parse: 21 callbacks suppressed [ 146.974091][ T7599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.718'. [ 147.006861][ T7592] erofs (device loop2): mounted with root inode @ nid 36. [ 147.038029][ T7599] unsupported nlmsg_type 40 [ 147.194755][ T5824] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.815371][ T7623] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.394415][ T7644] loop3: detected capacity change from 0 to 256 [ 148.407324][ T7644] exfat: Deprecated parameter 'namecase' [ 148.407365][ T7644] exfat: Deprecated parameter 'namecase' [ 148.687547][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.743'. [ 148.884206][ T7644] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 149.761093][ T7649] loop2: detected capacity change from 0 to 32768 [ 149.813058][ T7669] ip6erspan0: entered allmulticast mode [ 149.866923][ T7665] netlink: 'syz.4.748': attribute type 2 has an invalid length. [ 149.866942][ T7665] netlink: 'syz.4.748': attribute type 1 has an invalid length. [ 149.867133][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 149.977336][ T7649] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.314915][ T7649] XFS (loop2): Ending clean mount [ 150.414028][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.759'. [ 150.850423][ T5825] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.169352][ T7756] netlink: 'syz.3.790': attribute type 1 has an invalid length. [ 152.169372][ T7756] netlink: 'syz.3.790': attribute type 2 has an invalid length. [ 152.504305][ T7770] netlink: 'syz.2.796': attribute type 2 has an invalid length. [ 152.504327][ T7770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.796'. [ 152.521223][ T7768] loop1: detected capacity change from 0 to 512 [ 152.599351][ T7777] netlink: 88 bytes leftover after parsing attributes in process `syz.2.798'. [ 152.683400][ T7768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.683533][ T7768] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.969900][ T7785] netlink: 'syz.3.802': attribute type 28 has an invalid length. [ 152.969920][ T7785] netlink: 'syz.3.802': attribute type 3 has an invalid length. [ 152.969933][ T7785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.802'. [ 153.079377][ T7745] loop0: detected capacity change from 0 to 32768 [ 153.206828][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.241116][ T7745] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 153.418174][ T7745] XFS (loop0): Ending clean mount [ 153.534356][ T7809] loop4: detected capacity change from 0 to 64 [ 153.589268][ T5824] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 153.998780][ T7818] QAT: Invalid ioctl 21531 [ 154.645895][ T5915] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 154.705966][ T5899] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.726527][ T7843] loop0: detected capacity change from 0 to 1024 [ 154.806086][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 154.818850][ T5915] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 154.827875][ T5915] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 154.827902][ T5915] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 154.827921][ T5915] usb 5-1: Product: syz [ 154.827934][ T5915] usb 5-1: Manufacturer: syz [ 154.827948][ T5915] usb 5-1: SerialNumber: syz [ 154.885966][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 154.953800][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.953854][ T5899] usb 4-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 154.954315][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.170717][ T5915] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 155.170743][ T5915] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 155.170762][ T5915] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 155.219755][ T5899] usb 4-1: config 0 descriptor?? [ 155.400808][ T5915] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 155.400886][ T5915] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 155.423743][ T5899] uvcvideo 4-1:0.0: Found UVC 0.00 device (031b:0201) [ 155.423785][ T5899] uvcvideo 4-1:0.0: No valid video chain found. [ 155.510721][ T7829] loop1: detected capacity change from 0 to 32768 [ 155.513877][ T7829] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.821 (7829) [ 155.542474][ T7847] loop0: detected capacity change from 0 to 32768 [ 155.568456][ T5899] usb 4-1: USB disconnect, device number 4 [ 155.632527][ T7849] loop2: detected capacity change from 0 to 4096 [ 155.644763][ T7849] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 155.746551][ T7847] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.785376][ T7849] ntfs3(loop2): ino=19, mi_enum_attr [ 155.828967][ T7847] XFS (loop0): Ending clean mount [ 155.834594][ T7849] ntfs3(loop2): failed to convert "c46c" to cp861 [ 155.853067][ T7849] ntfs3(loop2): ino=20, mi_enum_attr [ 155.950137][ T5915] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 156.009225][ T5915] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 156.063208][ T5915] usb 5-1: USB disconnect, device number 3 [ 156.100523][ T7829] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.100555][ T7829] BTRFS info (device loop1): using sha256 checksum algorithm [ 156.144378][ T5824] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.504520][ T5915] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 156.607240][ T5831] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.824262][ T5831] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 156.824288][ T5831] usb 3-1: config 0 has no interface number 0 [ 156.824326][ T5831] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.827439][ T5831] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 156.827466][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.827484][ T5831] usb 3-1: Product: syz [ 156.827498][ T5831] usb 3-1: Manufacturer: syz [ 156.827511][ T5831] usb 3-1: SerialNumber: syz [ 156.848175][ T5915] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 156.872164][ T7880] bridge2: entered promiscuous mode [ 156.879270][ T7883] loop3: detected capacity change from 0 to 1024 [ 156.884774][ T7829] BTRFS info (device loop1): enabling ssd optimizations [ 156.884794][ T7829] BTRFS info (device loop1): turning on async discard [ 156.884810][ T7829] BTRFS info (device loop1): enabling free space tree [ 156.914569][ T5915] visor 5-1:1.0: device disconnected [ 157.053661][ T5831] usb 3-1: config 0 descriptor?? [ 157.297284][ C0] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 157.326835][ T5822] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.361651][ T7883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.392026][ T5831] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 157.524256][ T5831] usb 3-1: USB disconnect, device number 3 [ 157.627568][ T5831] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 157.825363][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.535457][ T5915] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 158.666102][ T7917] usb usb8: usbfs: process 7917 (syz.2.849) did not claim interface 0 before use [ 158.715801][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 158.721379][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.727953][ T5915] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 158.727979][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.727997][ T5915] usb 4-1: Product: syz [ 158.728011][ T5915] usb 4-1: Manufacturer: syz [ 158.728024][ T5915] usb 4-1: SerialNumber: syz [ 158.764952][ T5915] usb 4-1: config 0 descriptor?? [ 158.775363][ T5915] usb 4-1: No union descriptors [ 158.802187][ T5915] usb 4-1: unsupported MDLM descriptors [ 159.031422][ T5915] usb 4-1: USB disconnect, device number 5 [ 159.341440][ T7932] loop2: detected capacity change from 0 to 4096 [ 159.401378][ T7932] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 159.525230][ T7932] ntfs3(loop2): ino=19, mi_enum_attr [ 160.091114][ T7959] loop0: detected capacity change from 0 to 512 [ 160.221724][ T7959] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 160.221754][ T7959] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 160.221770][ T7959] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.870: Corrupt directory, running e2fsck is recommended [ 160.318236][ T7937] loop1: detected capacity change from 0 to 32768 [ 160.365229][ T7937] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 160.401701][ T7959] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 160.401853][ T7959] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.870: corrupted in-inode xattr: e_name out of bounds [ 160.401879][ T7959] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 160.406480][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 160.406500][ C1] EXT4-fs (loop0): initial error at time 1776211016: ext4_iget_extra_inode:5128: inode 15 [ 160.406526][ C1] EXT4-fs (loop0): last error at time 1776211016: ext4_iget_extra_inode:5128: inode 15 [ 160.448846][ T7959] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.870: couldn't read orphan inode 15 (err -117) [ 160.448878][ T7959] loop0: lost filesystem error report for type 5 error -117 [ 160.556129][ T7959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.608047][ T7959] EXT4-fs error (device loop0): ext4_xattr_set_entry:1672: inode #2: comm syz.0.870: corrupted xattr entries [ 160.646820][ T7937] XFS (loop1): Ending clean mount [ 160.837056][ T5822] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 160.932935][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.999462][ T7954] loop4: detected capacity change from 0 to 32768 [ 161.048052][ T7954] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.868 (7954) [ 161.234447][ T7954] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.234477][ T7954] BTRFS info (device loop4): using sha256 checksum algorithm [ 161.602454][ T8017] loop1: detected capacity change from 0 to 512 [ 161.602714][ T7954] BTRFS info (device loop4): enabling ssd optimizations [ 161.602738][ T7954] BTRFS info (device loop4): turning on async discard [ 161.602754][ T7954] BTRFS info (device loop4): enabling free space tree [ 161.715975][ T8017] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.885: bg 0: block 16: invalid block bitmap [ 161.716009][ T8017] loop1: lost filesystem error report for type 5 error -117 [ 161.716444][ T8017] EXT4-fs (loop1): Remounting filesystem read-only [ 161.716572][ T8017] EXT4-fs (loop1): 1 truncate cleaned up [ 161.816110][ T8017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.842025][ T5823] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.906468][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.631516][ T8065] loop0: detected capacity change from 0 to 128 [ 163.709982][ T8065] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 163.763991][ T8065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.873370][ T8071] loop2: detected capacity change from 0 to 512 [ 163.874993][ T8071] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.208881][ T8071] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.911: invalid indirect mapped block 32768 (level 2) [ 164.208918][ T8071] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 164.217548][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 164.217569][ C1] EXT4-fs (loop2): initial error at time 1776211020: ext4_free_branches:1023: inode 16 [ 164.217595][ C1] EXT4-fs (loop2): last error at time 1776211020: ext4_free_branches:1023: inode 16 [ 164.276588][ T8071] EXT4-fs (loop2): Remounting filesystem read-only [ 164.345767][ T8071] EXT4-fs (loop2): 1 orphan inode deleted [ 164.345789][ T8071] EXT4-fs (loop2): 1 truncate cleaned up [ 164.407611][ T8082] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 164.407628][ T8082] overlayfs: missing 'lowerdir' [ 164.530607][ T8071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.634088][ T8055] loop1: detected capacity change from 0 to 32768 [ 164.688468][ T8090] ubi8: attaching mtd0 [ 164.789231][ T8090] ubi8: scanning is finished [ 164.789250][ T8090] ubi8: empty MTD device detected [ 164.789353][ T8090] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 164.819353][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.166266][ T5822] read_mapping_page failed! [ 165.166363][ T5822] ERROR: (device loop1): txCommit: [ 165.166363][ T5822] [ 165.233561][ T5822] read_mapping_page failed! [ 165.233649][ T5822] ERROR: (device loop1): txCommit: [ 165.233649][ T5822] [ 165.275174][ T8100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.926'. [ 165.281499][ T8104] loop3: detected capacity change from 0 to 256 [ 165.358394][ T8090] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 166.001391][ T8123] netlink: 'syz.4.938': attribute type 10 has an invalid length. [ 166.001410][ T8123] netlink: 40 bytes leftover after parsing attributes in process `syz.4.938'. [ 166.317898][ T8123] batadv0: entered promiscuous mode [ 166.317923][ T8123] batadv0: entered allmulticast mode [ 166.318267][ T8123] bridge0: port 3(batadv0) entered blocking state [ 166.318393][ T8123] bridge0: port 3(batadv0) entered disabled state [ 166.497358][ T164] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 166.497375][ T164] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 166.686951][ T8139] kAFS: unable to lookup cell '@mTsyz0' [ 166.866561][ T5822] ERROR: (device loop1): diFree: numfree > numinos [ 166.866561][ T5822] [ 166.921435][ T126] ERROR: (device loop1): diFree: numfree > numinos [ 166.921435][ T126] [ 167.232795][ T8131] loop2: detected capacity change from 0 to 32768 [ 167.310264][ T8131] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 167.544600][ T8131] XFS (loop2): Ending clean mount [ 167.634831][ T782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.651222][ T8131] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x10 [ 167.651274][ T8131] XFS (loop2): Unmount and run xfs_repair [ 167.651286][ T8131] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 167.651303][ T8131] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 167.651318][ T8131] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 167.651333][ T8131] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 167.651361][ T8131] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 167.651376][ T8131] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 167.651390][ T8131] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 167.651403][ T8131] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 167.651417][ T8131] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 167.651644][ T8131] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x10 len 4 error 74 [ 167.652028][ T8131] loop2: lost filesystem error report for type 5 error -117 [ 167.652245][ T8131] XFS (loop2): Failed to initialize disk quotas, err -117. [ 167.913720][ T5825] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 167.932278][ T5825] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 168.595207][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.643925][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.678944][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.701771][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.715132][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.037838][ T8195] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 169.037851][ T8195] netlink: 'syz.2.969': attribute type 3 has an invalid length. [ 169.037858][ T8195] netlink: 224 bytes leftover after parsing attributes in process `syz.2.969'. [ 169.132208][ T782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.145826][ T822] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 169.313973][ T822] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 169.314010][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.314029][ T822] usb 1-1: Product: syz [ 169.314043][ T822] usb 1-1: Manufacturer: syz [ 169.314057][ T822] usb 1-1: SerialNumber: syz [ 169.378471][ T822] usb 1-1: config 0 descriptor?? [ 169.411263][ T822] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 169.602318][ T8193] : entered promiscuous mode [ 169.801968][ T822] gspca_sunplus: reg_w_riv err -71 [ 169.802087][ T822] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 169.884987][ T822] usb 1-1: USB disconnect, device number 7 [ 170.093735][ T8221] nvme_fabrics: unknown parameter or missing value ']' in ctrl creation request [ 170.276768][ T8223] loop3: detected capacity change from 0 to 64 [ 170.280699][ T782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.615161][ T8227] loop0: detected capacity change from 0 to 512 [ 170.836481][ T5827] Bluetooth: hci2: command tx timeout [ 170.868921][ T8227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.869069][ T8227] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.071783][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.084607][ T8213] loop4: detected capacity change from 0 to 32768 [ 171.499162][ T8245] netlink: 'syz.3.992': attribute type 10 has an invalid length. [ 171.620623][ T782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.945077][ T8245] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 172.055425][ T8264] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 172.077114][ T8266] loop4: detected capacity change from 0 to 64 [ 172.087145][ T5810] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 172.259737][ T5810] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 172.259769][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.340622][ T5810] usb 1-1: config 0 descriptor?? [ 172.349795][ T5810] cp210x 1-1:0.0: cp210x converter detected [ 172.587167][ T5899] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.749895][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 172.761526][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.761554][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 172.772956][ T5810] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 172.773137][ T5899] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 172.773159][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.773178][ T5899] usb 4-1: Product: syz [ 172.773191][ T5899] usb 4-1: Manufacturer: syz [ 172.773205][ T5899] usb 4-1: SerialNumber: syz [ 172.773429][ T5810] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 172.773452][ T5810] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 172.886454][ T5899] usb 4-1: config 0 descriptor?? [ 172.918310][ T5827] Bluetooth: hci2: command tx timeout [ 172.919198][ T5810] usb 1-1: cp210x converter now attached to ttyUSB0 [ 172.924399][ T5899] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 173.005959][ T5810] usb 1-1: USB disconnect, device number 8 [ 173.179074][ T5810] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 173.186380][ T5810] cp210x 1-1:0.0: device disconnected [ 173.257112][ T5899] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 173.257505][ T5899] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 173.263477][ T5899] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 173.483867][ T8292] dummy0: mtu less than device minimum [ 173.521161][ T5810] usb 4-1: USB disconnect, device number 6 [ 173.648413][ T8290] loop4: detected capacity change from 0 to 4096 [ 173.705150][ T8290] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 173.779964][ T782] bridge_slave_1: left allmulticast mode [ 173.780122][ T782] bridge_slave_1: left promiscuous mode [ 173.806624][ T782] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.901578][ T8290] ntfs3(loop4): ino=19, mi_enum_attr [ 173.925299][ T8290] ntfs3(loop4): failed to convert "c46c" to cp861 [ 173.937875][ T8290] ntfs3(loop4): ino=20, mi_enum_attr [ 174.000040][ T782] bridge_slave_0: left allmulticast mode [ 174.000066][ T782] bridge_slave_0: left promiscuous mode [ 174.000301][ T782] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.065872][ T822] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.239562][ T822] usb 1-1: Using ep0 maxpacket: 16 [ 174.252616][ T822] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 174.252643][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.252661][ T822] usb 1-1: Product: syz [ 174.252675][ T822] usb 1-1: Manufacturer: syz [ 174.252689][ T822] usb 1-1: SerialNumber: syz [ 174.289158][ T822] usb 1-1: config 0 descriptor?? [ 174.351799][ T822] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 174.544458][ T822] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 174.544618][ T822] visor 1-1:0.0: probe with driver visor failed with error -5 [ 174.562074][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1022'. [ 174.578446][ T8300] loop2: detected capacity change from 0 to 32768 [ 174.694985][ T8300] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.778179][ T821] usb 1-1: USB disconnect, device number 9 [ 174.835961][ T8300] XFS (loop2): Ending clean mount [ 174.997365][ T5827] Bluetooth: hci2: command tx timeout [ 175.357650][ T8335] loop4: detected capacity change from 0 to 4096 [ 175.366251][ T8335] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 175.396667][ T5825] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.600456][ T8335] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 175.707676][ T8335] ntfs3(loop4): Inode r=b is not in use! [ 175.709405][ T8335] ntfs3(loop4): Failed to load $Extend (-116). [ 175.709425][ T8335] ntfs3(loop4): Failed to initialize $Extend. [ 175.991031][ T8313] loop3: detected capacity change from 0 to 32768 [ 176.075996][ T8313] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.340910][ T8340] loop0: detected capacity change from 0 to 32768 [ 176.416663][ T8340] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1028 (8340) [ 176.492185][ T8313] XFS (loop3): Ending clean mount [ 176.954133][ T5821] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.976203][ T8340] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.976235][ T8340] BTRFS info (device loop0): using sha256 checksum algorithm [ 177.075839][ T5827] Bluetooth: hci2: command tx timeout [ 177.330808][ T8340] BTRFS info (device loop0): enabling ssd optimizations [ 177.330833][ T8340] BTRFS info (device loop0): turning on async discard [ 177.330849][ T8340] BTRFS info (device loop0): enabling free space tree [ 177.481302][ T8384] loop2: detected capacity change from 0 to 2048 [ 177.520991][ T8384] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 177.521013][ T8384] UDF-fs: Scanning with blocksize 512 failed [ 177.547181][ T8384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.613869][ T5824] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.655909][ T5915] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 177.835507][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 177.838132][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.838163][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.841469][ T5915] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 177.841495][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.841515][ T5915] usb 5-1: Product: syz [ 177.841529][ T5915] usb 5-1: Manufacturer: syz [ 177.841543][ T5915] usb 5-1: SerialNumber: syz [ 177.943000][ T5915] usb 5-1: config 0 descriptor?? [ 178.209179][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 178.493005][ T5915] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 178.559339][ T8401] netlink: 'syz.0.1040': attribute type 1 has an invalid length. [ 178.576278][ T5831] kernel write not supported for file /input/mice (pid: 5831 comm: kworker/0:4) [ 178.865426][ T5915] imon:send_packet: packet tx failed (-71) [ 178.876005][ T5915] imon 5-1:0.0: panel buttons/knobs setup failed [ 179.089756][ T782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.095525][ T5915] rc_core: IR keymap rc-imon-pad not found [ 179.095543][ T5915] Registered IR keymap rc-empty [ 179.095645][ T5915] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 179.113295][ T5915] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 179.138690][ T5915] imon:send_packet: packet tx failed (-71) [ 179.155979][ T5915] imon 5-1:0.0: remote input dev register failed [ 179.156235][ T5915] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 179.282431][ T782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.320657][ T782] bond0 (unregistering): Released all slaves [ 179.536560][ T5487] 8021q: adding VLAN 0 to HW filter on device eth1 [ 179.537583][ T8415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.538453][ T8425] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1057'. [ 179.538471][ T8425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.908969][ T5915] imon 5-1:0.0: unable to initialize intf0, err 0 [ 179.908988][ T5915] imon:imon_probe: failed to initialize context! [ 179.909000][ T5915] imon 5-1:0.0: unable to register, err -19 [ 179.980804][ T5915] usb 5-1: USB disconnect, device number 4 [ 180.300243][ T8456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.385233][ T8449] netdevsim netdevsim3: Direct firmware load for / [ 180.385233][ T8449] failed with error -2 [ 180.385260][ T8449] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 180.385260][ T8449] [ 180.501383][ T8460] netlink: 'syz.0.1070': attribute type 1 has an invalid length. [ 180.990377][ T8476] program syz.4.1076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.926876][ T8182] chnl_net:caif_netlink_parms(): no params data found [ 182.669086][ T5487] 8021q: adding VLAN 0 to HW filter on device eth2 [ 182.753978][ T8503] loop2: detected capacity change from 0 to 32768 [ 182.798343][ T8503] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1087 (8503) [ 182.874736][ T8537] loop3: detected capacity change from 0 to 512 [ 182.902534][ T8537] EXT4-fs (loop3): orphan cleanup on readonly fs [ 182.919959][ T8503] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.919987][ T8503] BTRFS info (device loop2): using sha256 checksum algorithm [ 182.920039][ T8503] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 183.054801][ T8537] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.1101: ea_inode file size=4 entry size=6 [ 183.079415][ T8537] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 183.080224][ T8537] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.1101: corrupted inode contents [ 183.080251][ T8537] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 183.127507][ C1] EXT4-fs (loop3): initial error at time 1776211039: ext4_do_update_inode:5690: inode 15 [ 183.127540][ C1] EXT4-fs (loop3): last error at time 1776211039: ext4_do_update_inode:5690: inode 15 [ 183.196900][ T8503] BTRFS info (device loop2): enabling ssd optimizations [ 183.196926][ T8503] BTRFS info (device loop2): turning on async discard [ 183.196942][ T8503] BTRFS info (device loop2): enabling disk space caching [ 183.196958][ T8503] BTRFS info (device loop2): force clearing of disk cache [ 183.196972][ T8503] BTRFS info (device loop2): enabling auto defrag [ 183.196988][ T8503] BTRFS info (device loop2): force zlib compression, level 3 [ 183.197028][ T8503] BTRFS info (device loop2): max_inline set to 0 [ 183.251851][ T8537] EXT4-fs (loop3): Remounting filesystem read-only [ 183.251876][ T8537] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -30) [ 183.252036][ T8537] EXT4-fs (loop3): 1 orphan inode deleted [ 183.280922][ T8537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 183.281897][ T8560] loop4: detected capacity change from 0 to 1024 [ 183.294412][ T8560] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 183.294519][ T8560] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.306405][ T8560] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 183.308738][ T8560] EXT4-fs (loop4): orphan cleanup on readonly fs [ 183.311183][ T8560] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.1105: Inode bitmap for bg 0 marked uninitialized [ 183.311208][ T8560] loop4: lost filesystem error report for type 5 error -117 [ 183.311519][ T8560] EXT4-fs (loop4): Remounting filesystem read-only [ 183.324091][ T8560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.513204][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.554230][ T5825] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.587271][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.609842][ T8592] netlink: 'syz.3.1119': attribute type 309 has an invalid length. [ 184.716906][ T782] hsr_slave_0: left promiscuous mode [ 184.724247][ T38] audit: type=1326 audit(1776211041.125:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8594 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c9f9c819 code=0x7ffc0000 [ 184.724294][ T38] audit: type=1326 audit(1776211041.125:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8594 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c9f9c819 code=0x7ffc0000 [ 184.735414][ T38] audit: type=1326 audit(1776211041.135:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8594 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ff5c9f9c819 code=0x7ffc0000 [ 184.740147][ T38] audit: type=1326 audit(1776211041.145:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8594 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c9f9c819 code=0x7ffc0000 [ 184.740189][ T38] audit: type=1326 audit(1776211041.145:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8594 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c9f9c819 code=0x7ffc0000 [ 184.752675][ T782] hsr_slave_1: left promiscuous mode [ 184.753937][ T782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.754031][ T782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.880870][ T782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.880894][ T782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.078221][ T782] veth1_vlan: left promiscuous mode [ 185.101720][ T782] veth0_vlan: left promiscuous mode [ 185.866553][ T782] team0 (unregistering): Port device team_slave_1 removed [ 185.926447][ T782] team0 (unregistering): Port device team_slave_0 removed [ 186.116857][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.116979][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.117169][ T8182] bridge_slave_0: entered allmulticast mode [ 186.118932][ T8182] bridge_slave_0: entered promiscuous mode [ 186.151048][ T8611] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 186.161972][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.162097][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.162404][ T8182] bridge_slave_1: entered allmulticast mode [ 186.180406][ T8182] bridge_slave_1: entered promiscuous mode [ 186.340969][ T8629] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1134'. [ 186.384838][ T8629] netlink: 'syz.4.1134': attribute type 3 has an invalid length. [ 186.588705][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.675946][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.837739][ T8647] loop4: detected capacity change from 0 to 64 [ 186.864122][ T8182] team0: Port device team_slave_0 added [ 186.887737][ T8182] team0: Port device team_slave_1 added [ 187.190860][ T8647] syz.4.1145: attempt to access beyond end of device [ 187.190860][ T8647] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 187.191090][ T8647] Buffer I/O error on dev loop4, logical block 8388608, async page read [ 187.217740][ T822] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 187.281817][ T8647] syz.4.1145: attempt to access beyond end of device [ 187.281817][ T8647] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 187.281852][ T8647] Buffer I/O error on dev loop4, logical block 8388608, async page read [ 187.325102][ T8655] loop2: detected capacity change from 0 to 2048 [ 187.344505][ T8655] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 187.369144][ T8655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.370735][ T822] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 187.370764][ T822] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 187.370786][ T822] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 187.427719][ T822] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 187.427747][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 187.427765][ T822] usb 4-1: SerialNumber: syz [ 187.481265][ T8655] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 144 with incorrect tag 100 [ 187.562965][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.562989][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.563064][ T8182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.642245][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.642260][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.642284][ T8182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.721667][ T822] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 187.721754][ T822] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 187.871753][ T822] usb 4-1: USB disconnect, device number 7 [ 188.004607][ T8642] loop0: detected capacity change from 0 to 32768 [ 188.018223][ T8642] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1143 (8642) [ 188.091286][ T8642] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.091319][ T8642] BTRFS info (device loop0): using sha256 checksum algorithm [ 188.169618][ T8182] hsr_slave_0: entered promiscuous mode [ 188.184733][ T8182] hsr_slave_1: entered promiscuous mode [ 188.185606][ T8182] debugfs: 'hsr0' already exists in 'hsr' [ 188.185628][ T8182] Cannot create hsr debugfs directory [ 188.267904][ T8642] BTRFS info (device loop0): enabling ssd optimizations [ 188.267927][ T8642] BTRFS info (device loop0): using spread ssd allocation scheme [ 188.267951][ T8642] BTRFS info (device loop0): turning on async discard [ 188.267966][ T8642] BTRFS info (device loop0): enabling free space tree [ 188.267981][ T8642] BTRFS info (device loop0): enabling auto defrag [ 188.526796][ T8691] netlink: 'syz.4.1154': attribute type 1 has an invalid length. [ 188.526816][ T8691] netlink: 'syz.4.1154': attribute type 2 has an invalid length. [ 188.575489][ T5824] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 189.097490][ T5487] 8021q: adding VLAN 0 to HW filter on device eth3 [ 189.539592][ T8716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1165'. [ 189.893757][ T8730] loop3: detected capacity change from 0 to 16 [ 189.925572][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 190.080361][ T8730] erofs (device loop3): mounted with root inode @ nid 36. [ 190.304919][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 190.309503][ T8730] syz.3.1170: attempt to access beyond end of device [ 190.309503][ T8730] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 190.653371][ T8730] erofs (device loop3): bogus lookback distance 1792 @ lcn 4 of nid 89 [ 190.653399][ T8730] erofs (device loop3): readahead error at folio 5 @ nid 89 [ 190.653416][ T8730] erofs (device loop3): bogus lookback distance 1792 @ lcn 4 of nid 89 [ 190.653435][ T8730] erofs (device loop3): readahead error at folio 4 @ nid 89 [ 190.653576][ T8730] syz.3.1170: attempt to access beyond end of device [ 190.653576][ T8730] loop3: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 190.944193][ T8730] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 190.944243][ T8730] erofs (device loop3): read error -117 @ 1 of nid 89 [ 191.056910][ T38] audit: type=1800 audit(1776211047.385:38): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1170" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 191.252922][ T8730] syz.3.1170 (8730) used greatest stack depth: 18496 bytes left [ 191.423727][ T8775] loop0: detected capacity change from 0 to 764 [ 191.465799][ T8775] rock: directory entry would overflow storage [ 191.465813][ T8775] rock: sig=0x5245, size=8, remaining=5 [ 191.623278][ T8778] sg_write: data in/out 294879/60 bytes for SCSI command 0x0-- guessing data in; [ 191.623278][ T8778] program syz.2.1191 not setting count and/or reply_len properly [ 191.989641][ T5487] 8021q: adding VLAN 0 to HW filter on device eth4 [ 192.309178][ T8799] loop2: detected capacity change from 0 to 164 [ 192.445613][ T8182] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 192.493030][ T8799] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 192.571820][ T8182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.600635][ T8182] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 192.768494][ T8182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.772469][ T8807] netlink: 'syz.3.1203': attribute type 33 has an invalid length. [ 192.774380][ T8182] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 192.854954][ T8182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.865836][ T8182] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 192.964147][ T8182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.223146][ T8821] loop2: detected capacity change from 0 to 2048 [ 193.533109][ T8821] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 193.614435][ T8839] loop3: detected capacity change from 0 to 64 [ 193.632692][ T8839] syz.3.1213: attempt to access beyond end of device [ 193.632692][ T8839] loop3: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 193.632722][ T8839] Buffer I/O error on dev loop3, logical block 8388608, async page read [ 193.700152][ T8839] syz.3.1213: attempt to access beyond end of device [ 193.700152][ T8839] loop3: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 193.700185][ T8839] Buffer I/O error on dev loop3, logical block 8388608, async page read [ 193.934617][ T8182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.011118][ T8182] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.107854][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.107928][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.233838][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.233894][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.374492][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.374617][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.411448][ T8850] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 194.411635][ T8850] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 194.622981][ T8857] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.809770][ T8841] loop0: detected capacity change from 0 to 32768 [ 194.812839][ T8821] syz.2.1208: attempt to access beyond end of device [ 194.812839][ T8821] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 194.814746][ T8841] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1214 (8841) [ 194.851340][ T8841] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.851371][ T8841] BTRFS info (device loop0): using crc32c checksum algorithm [ 194.930308][ T8874] netlink: 'syz.4.1224': attribute type 21 has an invalid length. [ 195.175902][ T5911] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 195.211220][ T8841] BTRFS info (device loop0): allowing degraded mounts [ 195.211254][ T8841] BTRFS info (device loop0): enabling ssd optimizations [ 195.211272][ T8841] BTRFS info (device loop0): turning on async discard [ 195.211288][ T8841] BTRFS info (device loop0): enabling free space tree [ 195.211304][ T8841] BTRFS info (device loop0): enabling auto defrag [ 195.313129][ T8821] syz.2.1208: attempt to access beyond end of device [ 195.313129][ T8821] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 195.313234][ T8821] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 195.342294][ T5911] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 195.342319][ T5911] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 195.371444][ T5911] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 195.371482][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.371501][ T5911] usb 4-1: Product: syz [ 195.371515][ T5911] usb 4-1: Manufacturer: syz [ 195.371529][ T5911] usb 4-1: SerialNumber: syz [ 195.437920][ T5911] usb 4-1: config 0 descriptor?? [ 195.611975][ T5824] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.687661][ T5911] mos7840 4-1:0.0: required endpoints missing [ 195.934921][ T5831] usb 4-1: USB disconnect, device number 8 [ 195.966047][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.293263][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 196.293399][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 196.293500][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 196.401868][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 196.852904][ T8913] loop3: detected capacity change from 0 to 256 [ 196.950645][ T8913] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 197.250697][ T8925] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1241'. [ 197.279270][ T8923] loop2: detected capacity change from 0 to 1024 [ 197.281891][ T8923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.336495][ T8923] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 197.575762][ T8930] loop4: detected capacity change from 0 to 256 [ 197.618794][ T8932] loop2: detected capacity change from 0 to 256 [ 197.770630][ T8182] veth0_vlan: entered promiscuous mode [ 197.818793][ T8932] FAT-fs (loop2): Directory bread(block 64) failed [ 197.818823][ T8932] FAT-fs (loop2): Directory bread(block 65) failed [ 197.818914][ T8932] FAT-fs (loop2): Directory bread(block 66) failed [ 197.818936][ T8932] FAT-fs (loop2): Directory bread(block 67) failed [ 197.819026][ T8932] FAT-fs (loop2): Directory bread(block 68) failed [ 197.819048][ T8932] FAT-fs (loop2): Directory bread(block 69) failed [ 197.819150][ T8932] FAT-fs (loop2): Directory bread(block 70) failed [ 197.819173][ T8932] FAT-fs (loop2): Directory bread(block 71) failed [ 197.819271][ T8932] FAT-fs (loop2): Directory bread(block 72) failed [ 197.819291][ T8932] FAT-fs (loop2): Directory bread(block 73) failed [ 197.920767][ T8939] vti0: entered promiscuous mode [ 197.920794][ T8939] vti0: entered allmulticast mode [ 198.002689][ T8182] veth1_vlan: entered promiscuous mode [ 198.223921][ T8944] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1250'. [ 198.354444][ T8182] veth0_macvtap: entered promiscuous mode [ 198.399409][ T8182] veth1_macvtap: entered promiscuous mode [ 198.671575][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.694461][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.735330][ T164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.746383][ T164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.746429][ T164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.746463][ T164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.788664][ T8957] loop2: detected capacity change from 0 to 64 [ 198.881708][ T8942] loop4: detected capacity change from 0 to 32768 [ 199.037284][ T8942] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 199.202540][ T8942] XFS (loop4): Ending clean mount [ 199.536036][ T8979] sctp: [Deprecated]: syz.0.1263 (pid 8979) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.536036][ T8979] Use struct sctp_sack_info instead [ 199.627767][ T5823] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 200.231316][ T8986] netlink: 'syz.0.1266': attribute type 1 has an invalid length. [ 200.369404][ T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.369424][ T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.394998][ T8992] netlink: 'syz.2.1268': attribute type 1 has an invalid length. [ 200.753216][ T9004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1273'. [ 200.753252][ T9004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1273'. [ 201.045852][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.045871][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.264913][ T9019] loop0: detected capacity change from 0 to 736 [ 201.563015][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1284'. [ 201.692404][ T9032] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1288'. [ 202.427949][ T9061] comedi comedi1: adq12b: I/O base address or length out of range [ 202.507480][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 202.680256][ T9071] loop5: detected capacity change from 0 to 64 [ 202.718723][ T9073] netlink: 'syz.4.1306': attribute type 1 has an invalid length. [ 202.718758][ T9073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.027820][ T9071] hfs: cannot create new inode: file count exceeds limit [ 203.430846][ T9094] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1317'. [ 203.445612][ T9051] loop3: detected capacity change from 0 to 32768 [ 203.519393][ T9051] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1295 (9051) [ 203.590848][ T9051] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.590879][ T9051] BTRFS info (device loop3): using sha256 checksum algorithm [ 203.871067][ T9117] loop2: detected capacity change from 0 to 128 [ 203.917183][ T9120] loop4: detected capacity change from 0 to 1024 [ 203.942197][ T9117] FAT-fs (loop2): Directory bread(block 162) failed [ 203.942228][ T9117] FAT-fs (loop2): Directory bread(block 163) failed [ 203.942250][ T9117] FAT-fs (loop2): Directory bread(block 164) failed [ 203.942271][ T9117] FAT-fs (loop2): Directory bread(block 165) failed [ 203.942292][ T9117] FAT-fs (loop2): Directory bread(block 166) failed [ 203.942313][ T9117] FAT-fs (loop2): Directory bread(block 167) failed [ 203.942335][ T9117] FAT-fs (loop2): Directory bread(block 168) failed [ 203.942356][ T9117] FAT-fs (loop2): Directory bread(block 169) failed [ 203.942439][ T9117] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.944637][ T9120] hfsplus: catalog record size mismatch (type 1, got 62, expected 88) [ 204.002354][ T9117] FAT-fs (loop2): Directory bread(block 162) failed [ 204.002383][ T9117] FAT-fs (loop2): Directory bread(block 163) failed [ 204.090757][ T9051] BTRFS info (device loop3): enabling ssd optimizations [ 204.090776][ T9051] BTRFS info (device loop3): turning on async discard [ 204.090784][ T9051] BTRFS info (device loop3): enabling free space tree [ 204.293259][ T9126] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 204.364227][ T9117] syz.2.1319: attempt to access beyond end of device [ 204.364227][ T9117] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 204.384736][ T9117] syz.2.1319: attempt to access beyond end of device [ 204.384736][ T9117] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 204.587363][ T5821] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.050693][ T5901] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 205.099739][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1325'. [ 205.235532][ T9149] loop2: detected capacity change from 0 to 16 [ 205.241109][ T9149] erofs (device loop2): mounted with root inode @ nid 36. [ 205.245753][ T5901] usb 6-1: Using ep0 maxpacket: 32 [ 205.259233][ T5901] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.259261][ T5901] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.263991][ T5901] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 205.264017][ T5901] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 205.264038][ T5901] usb 6-1: Product: syz [ 205.264053][ T5901] usb 6-1: Manufacturer: syz [ 205.297321][ T9149] syz.2.1330: attempt to access beyond end of device [ 205.297321][ T9149] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 205.353122][ T9149] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 205.353161][ T9149] erofs (device loop2): read error -117 @ 0 of nid 89 [ 205.353438][ T38] audit: type=1800 audit(1776211061.755:39): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1330" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 205.403837][ T5901] hub 6-1:4.0: USB hub found [ 205.564188][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 205.694569][ T5901] hub 6-1:4.0: 6 ports detected [ 205.695053][ T5901] hub 6-1:4.0: insufficient power available to use all downstream ports [ 205.905111][ T5901] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 205.905137][ T5901] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 205.942953][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1338'. [ 206.029457][ T5901] usb 6-1: USB disconnect, device number 2 [ 206.299245][ T9175] netlink: 'syz.2.1341': attribute type 15 has an invalid length. [ 206.390124][ T9165] bond1: entered promiscuous mode [ 206.425652][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 206.427880][ T9181] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1343'. [ 206.942166][ T9201] netlink: 'syz.4.1351': attribute type 8 has an invalid length. [ 207.308270][ T9213] loop5: detected capacity change from 0 to 64 [ 207.323717][ T164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 207.323983][ T164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 207.324020][ T164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 207.324053][ T164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 207.981314][ T5831] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 208.023075][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1370'. [ 208.101263][ T9244] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 208.145774][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 208.148137][ T5831] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 208.148162][ T5831] usb 3-1: config 2 has no interface number 0 [ 208.148207][ T5831] usb 3-1: config 2 interface 31 has no altsetting 0 [ 208.153163][ T5831] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 208.153190][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.153210][ T5831] usb 3-1: Product: syz [ 208.153224][ T5831] usb 3-1: Manufacturer: syz [ 208.153238][ T5831] usb 3-1: SerialNumber: syz [ 208.686200][ T5831] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 208.735038][ T5831] usb 3-1: USB disconnect, device number 4 [ 209.071987][ T9277] loop0: detected capacity change from 0 to 64 [ 209.157599][ T9284] loop5: detected capacity change from 0 to 64 [ 209.322456][ T9279] libceph: resolve '40.' (ret=-3): failed [ 209.507361][ T9295] loop4: detected capacity change from 0 to 8 [ 209.521978][ T9295] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 209.617283][ T5953] udevd[5953]: incorrect cramfs checksum on /dev/loop4 [ 209.742769][ T5873] udevd[5873]: incorrect cramfs checksum on /dev/loop4 [ 209.861015][ T9295] cramfs: Error -5 while decompressing! [ 209.861030][ T9295] cramfs: ffffffff999a1208(26)->ffff88804230a000(4096) [ 209.861106][ T9295] cramfs: Error -3 while decompressing! [ 209.861115][ T9295] cramfs: ffffffff999a1222(26)->ffff88804cc35000(4096) [ 209.861141][ T9295] cramfs: Error -3 while decompressing! [ 209.861150][ T9295] cramfs: ffffffff999a123c(16)->ffff888043569000(4096) [ 209.861236][ T9295] cramfs: Error -5 while decompressing! [ 209.861244][ T9295] cramfs: ffffffff999a1208(26)->ffff88804230a000(4096) [ 209.861519][ T38] audit: type=1800 audit(1776211066.265:40): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1390" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 209.904433][ T9302] loop2: detected capacity change from 0 to 1024 [ 209.906786][ T9302] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 209.942935][ T9302] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 209.963889][ T9302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.108489][ T9302] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 210.258845][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1397'. [ 210.337787][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.612119][ T9372] loop5: detected capacity change from 0 to 512 [ 211.660133][ T9378] loop4: detected capacity change from 0 to 512 [ 211.669602][ T9372] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1422: iget: bad extra_isize 90 (inode size 256) [ 211.669635][ T9372] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 211.674429][ T9372] EXT4-fs (loop5): Remounting filesystem read-only [ 211.674585][ T9372] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 211.674609][ T9372] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 211.674769][ T9372] EXT4-fs (loop5): 1 orphan inode deleted [ 211.677693][ T9372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.681001][ T9372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.816542][ T9378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.924976][ T9378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.925131][ T9378] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.983041][ T9389] loop3: detected capacity change from 0 to 512 [ 211.990815][ T9389] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 211.990834][ T9389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 211.991119][ T9389] EXT4-fs (loop3): orphan cleanup on readonly fs [ 211.994467][ T9389] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.1427: iget: bad i_size value: 12154761577498 [ 211.994497][ T9389] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 211.995797][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 211.995816][ C1] EXT4-fs (loop3): initial error at time 1776211068: ext4_orphan_get:1397: inode 13 [ 211.995842][ C1] EXT4-fs (loop3): last error at time 1776211068: ext4_orphan_get:1397: inode 13 [ 211.999198][ T9389] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1427: couldn't read orphan inode 13 (err -117) [ 211.999226][ T9389] loop3: lost filesystem error report for type 5 error -117 [ 212.008145][ T9389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 212.165312][ T9389] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1427: dx entry: limit 65535 != root limit 120 [ 212.165344][ T9389] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1427: Corrupt directory, running e2fsck is recommended [ 212.466660][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.589996][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.621908][ T9408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.984191][ T9424] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 213.144502][ T9432] usb usb9: usbfs: process 9432 (syz.2.1442) did not claim interface 3 before use [ 213.181755][ T9435] netlink: 'syz.3.1445': attribute type 1 has an invalid length. [ 213.181778][ T9435] netlink: 'syz.3.1445': attribute type 1 has an invalid length. [ 213.389992][ T9442] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 213.615209][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 213.811199][ T9459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1457'. [ 213.811227][ T9459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1457'. [ 213.821097][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1456'. [ 213.945563][ T9461] netlink: 'syz.2.1458': attribute type 61 has an invalid length. [ 213.945584][ T9461] netlink: 'syz.2.1458': attribute type 62 has an invalid length. [ 214.497512][ T9481] loop2: detected capacity change from 0 to 64 [ 214.541747][ T9484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1470'. [ 214.541772][ T9484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1470'. [ 214.541797][ T9484] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1470'. [ 214.917591][ T38] audit: type=1326 audit(1776211071.315:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9497 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 214.917630][ T38] audit: type=1326 audit(1776211071.325:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9497 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 214.944979][ T38] audit: type=1326 audit(1776211071.345:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9497 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 214.945025][ T38] audit: type=1326 audit(1776211071.345:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9497 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 214.945067][ T38] audit: type=1326 audit(1776211071.345:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9497 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 214.945102][ T38] audit: type=1326 audit(1776211071.345:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9497 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 214.945138][ T38] audit: type=1326 audit(1776211071.345:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9497 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 214.955774][ T38] audit: type=1326 audit(1776211071.355:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9497 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 214.956181][ T38] audit: type=1326 audit(1776211071.365:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9497 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff18e4fc819 code=0x7ffc0000 [ 215.029149][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1480'. [ 215.373798][ T9509] loop3: detected capacity change from 0 to 4096 [ 215.390756][ T9515] loop4: detected capacity change from 0 to 764 [ 215.392836][ T9509] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 215.415641][ T9515] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 215.434980][ T9515] Symlink component flag not implemented [ 215.435073][ T9515] Symlink component flag not implemented (7) [ 215.503408][ T9509] ntfs3(loop3): ino=3, mi_enum_attr [ 215.814998][ T5831] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 215.969074][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 215.971412][ T5831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 215.983685][ T5831] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 215.983713][ T5831] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 215.983743][ T5831] usb 3-1: Product: syz [ 215.983758][ T5831] usb 3-1: Manufacturer: syz [ 215.983771][ T5831] usb 3-1: SerialNumber: syz [ 216.278275][ T5831] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 216.278299][ T5831] usb 3-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 216.278318][ T5831] usb 3-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 216.278337][ T5831] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 216.498393][ T5831] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 216.498470][ T5831] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 216.556779][ T5831] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 216.611253][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 216.629988][ T5831] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 216.831299][ T5831] usb 3-1: USB disconnect, device number 5 [ 216.890272][ T5831] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 216.961753][ T5831] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 217.003292][ T5831] visor 3-1:1.0: device disconnected [ 217.821327][ T9578] netlink: 'syz.4.1516': attribute type 1 has an invalid length. [ 217.821347][ T9578] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1516'. [ 217.983855][ T9548] loop3: detected capacity change from 0 to 32768 [ 218.073442][ T9581] loop0: detected capacity change from 0 to 4096 [ 218.105993][ T9581] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 218.213899][ T9597] netlink: 'syz.5.1523': attribute type 7 has an invalid length. [ 218.333277][ T9548] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.362689][ T9581] ntfs3(loop0): ino=1a, mi_enum_attr [ 218.362717][ T9581] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 218.424702][ T9548] XFS (loop3): Ending clean mount [ 218.612729][ T5821] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.839287][ T9610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.347452][ T822] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 219.596139][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 219.597985][ T822] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.598008][ T822] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.600142][ T822] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.600167][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.600186][ T822] usb 5-1: Product: syz [ 219.600200][ T822] usb 5-1: Manufacturer: syz [ 219.600214][ T822] usb 5-1: SerialNumber: syz [ 219.711319][ T822] usb 5-1: 0:2 : does not exist [ 219.711423][ T822] usb 5-1: unit 9 not found! [ 219.916022][ T822] usb 5-1: 4:0: cannot get min/max values for control 3 (id 4) [ 219.941375][ T822] usb 5-1: 4:0: cannot get min/max values for control 9 (id 4) [ 219.960092][ T822] usb 5-1: 4:0: cannot get min/max values for control 10 (id 4) [ 220.108776][ T9649] netlink: 'syz.5.1545': attribute type 10 has an invalid length. [ 220.108796][ T9649] __nla_validate_parse: 1 callbacks suppressed [ 220.108807][ T9649] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1545'. [ 220.109432][ T9649] virt_wifi0: entered promiscuous mode [ 220.109455][ T9649] virt_wifi0: entered allmulticast mode [ 220.122031][ T9649] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 220.422900][ T9663] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 220.433064][ T822] usb 5-1: USB disconnect, device number 5 [ 220.521885][ T9666] openvswitch: netlink: Missing key (keys=20440, expected=200000) [ 221.109748][ T6106] udevd[6106]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.113573][ T9692] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1568'. [ 221.140761][ T821] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 221.310006][ T821] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 221.310037][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.310056][ T821] usb 1-1: Product: syz [ 221.310070][ T821] usb 1-1: Manufacturer: syz [ 221.310083][ T821] usb 1-1: SerialNumber: syz [ 221.372411][ T821] usb 1-1: config 0 descriptor?? [ 221.392109][ T821] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 010 [ 221.658883][ T9673] loop4: detected capacity change from 0 to 32768 [ 221.779487][ T9711] mmap: syz.5.1577 (9711) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 221.806610][ T821] (null): failure reading functionality [ 221.839427][ T821] i2c i2c-1: failure reading functionality [ 221.872328][ T821] i2c i2c-1: connected i2c-tiny-usb device [ 221.918303][ T821] usb 1-1: USB disconnect, device number 10 [ 221.974706][ T9673] JBD2: Ignoring recovery information on journal [ 222.190581][ T9673] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 222.720653][ T9731] loop5: detected capacity change from 0 to 256 [ 222.782036][ T9731] exfat: Deprecated parameter 'utf8' [ 222.782129][ T9731] exfat: Deprecated parameter 'namecase' [ 222.817574][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 222.817624][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 222.817665][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 222.817706][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 222.817747][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 222.817791][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 222.817834][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 222.817889][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 222.872970][ T9731] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 222.930493][ T9714] loop2: detected capacity change from 0 to 32768 [ 222.950697][ T9714] (syz.2.1578,9714,1):ocfs2_verify_volume:2314 ERROR: bad root_blkno: 0 [ 222.950723][ T9714] (syz.2.1578,9714,1):ocfs2_verify_volume:2331 ERROR: status = -22 [ 222.950757][ T9714] (syz.2.1578,9714,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 222.950775][ T9714] (syz.2.1578,9714,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 223.044387][ T5823] ocfs2: Unmounting device (7,4) on (node local) [ 223.250354][ T98] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 223.595546][ T9752] geneve2: entered promiscuous mode [ 223.786139][ T9760] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 224.152680][ T9775] loop4: detected capacity change from 0 to 256 [ 224.241449][ T9775] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 224.267518][ T9775] exFAT-fs (loop4): start_clu is invalid cluster(0x0) [ 224.390394][ T9780] loop5: detected capacity change from 0 to 2048 [ 224.402559][ T9780] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 224.635614][ T9796] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.778923][ T9799] loop0: detected capacity change from 0 to 512 [ 224.779792][ T9799] EXT4-fs: Ignoring removed orlov option [ 224.795793][ T9799] EXT4-fs (loop0): Test dummy encryption mode enabled [ 224.795812][ T9799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 225.049990][ T9799] EXT4-fs (loop0): 1 truncate cleaned up [ 225.078408][ T9799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.139016][ T9803] bond2: option fail_over_mac: invalid value (16) [ 225.183331][ T9803] bond2 (unregistering): Released all slaves [ 225.267321][ T9814] loop3: detected capacity change from 0 to 1024 [ 225.513122][ T9818] loop4: detected capacity change from 0 to 164 [ 225.527339][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.656496][ T9818] Unable to read rock-ridge attributes [ 225.666744][ T9818] Unable to read rock-ridge attributes [ 225.944528][ T9814] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 00[ 225.944528][ T9814] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 225.944553][ T9814] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 225.944580][ T9814] CPU: 0 UID: 0 PID: 9814 Comm: syz.3.1623 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 225.944604][ T9814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 225.944619][ T9814] RIP: 0010:__hfsplus_setxattr+0x1c86/0x2890 [ 225.944653][ T9814] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 d8 9a 86 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 bb 9a 86 ff 4d 8b 36 49 8d be 50 [ 225.944671][ T9814] RSP: 0018:ffffc90003eef4e0 EFLAGS: 00010202 [ 225.944690][ T9814] RAX: 0000000000000001 RBX: fffff520007ddebc RCX: 0000000000080000 [ 225.944705][ T9814] RDX: ffffc90006df9000 RSI: 0000000000001b32 RDI: 0000000000001b33 [ 225.944719][ T9814] RBP: ffffc90003eef9b8 R08: 0000000000000000 R09: 0000000000000000 [ 225.944733][ T9814] R10: dffffc0000000000 R11: fffff9400028237f R12: dffffc0000000000 [ 225.944750][ T9814] R13: ffff888061354560 R14: 0000000000000008 R15: ffff888061353d30 [ 225.944764][ T9814] FS: 00007fdbc89d66c0(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 225.944780][ T9814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.944792][ T9814] CR2: 00007ff9726f56b8 CR3: 00000000311b0000 CR4: 00000000003526f0 [ 225.944809][ T9814] Call Trace: [ 225.944821][ T9814] [ 225.944839][ T9814] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 225.944869][ T9814] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 225.944899][ T9814] ? stack_depot_save_flags+0x3f3/0x810 [ 225.944949][ T9814] ? rcu_is_watching+0x15/0xb0 [ 225.944977][ T9814] ? __kasan_kmalloc+0x93/0xb0 [ 225.945004][ T9814] ? hfsplus_setxattr+0x10b/0x340 [ 225.945030][ T9814] hfsplus_setxattr+0x124/0x340 [ 225.945059][ T9814] hfsplus_trusted_setxattr+0x40/0x60 [ 225.945086][ T9814] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 225.945114][ T9814] __vfs_setxattr+0x43c/0x480 [ 225.945140][ T9814] __vfs_setxattr_noperm+0x12d/0x660 [ 225.945165][ T9814] vfs_setxattr+0x163/0x370 [ 225.945187][ T9814] ? mnt_get_write_access+0x66/0x2d0 [ 225.945214][ T9814] ? __pfx_vfs_setxattr+0x10/0x10 [ 225.945236][ T9814] ? mnt_want_write_file+0x17e/0x210 [ 225.945272][ T9814] file_setxattr+0x1d9/0x2b0 [ 225.945296][ T9814] path_setxattrat+0x3b0/0x440 [ 225.945327][ T9814] ? __pfx_path_setxattrat+0x10/0x10 [ 225.945354][ T9814] ? do_futex+0x333/0x420 [ 225.945392][ T9814] ? rcu_is_watching+0x15/0xb0 [ 225.945422][ T9814] __x64_sys_fsetxattr+0xbc/0xe0 [ 225.945447][ T9814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.945468][ T9814] do_syscall_64+0x15f/0xf80 [ 225.945496][ T9814] ? trace_irq_disable+0x3b/0x140 [ 225.945521][ T9814] ? clear_bhb_loop+0x40/0x90 [ 225.945544][ T9814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.945563][ T9814] RIP: 0033:0x7fdbca77c819 [ 225.945588][ T9814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.945607][ T9814] RSP: 002b:00007fdbc89d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 225.945628][ T9814] RAX: ffffffffffffffda RBX: 00007fdbca9f5fa0 RCX: 00007fdbca77c819 [ 225.945644][ T9814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 225.945658][ T9814] RBP: 00007fdbca812c91 R08: 0000000000000001 R09: 0000000000000000 [ 225.945674][ T9814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.945686][ T9814] R13: 00007fdbca9f6038 R14: 00007fdbca9f5fa0 R15: 00007ffd8316d288 [ 225.945706][ T9814] [ 225.945714][ T9814] Modules linked in: [ 225.945776][ T9814] ---[ end trace 0000000000000000 ]--- [ 225.952988][ T9814] RIP: 0010:__hfsplus_setxattr+0x1c86/0x2890 [ 225.953026][ T9814] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 d8 9a 86 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 bb 9a 86 ff 4d 8b 36 49 8d be 50 [ 225.954540][ T9814] RSP: 0018:ffffc90003eef4e0 EFLAGS: 00010202 [ 225.954562][ T9814] RAX: 0000000000000001 RBX: fffff520007ddebc RCX: 0000000000080000 [ 225.954577][ T9814] RDX: ffffc90006df9000 RSI: 0000000000001b32 RDI: 0000000000001b33 [ 225.954591][ T9814] RBP: ffffc90003eef9b8 R08: 0000000000000000 R09: 0000000000000000 [ 225.954605][ T9814] R10: dffffc0000000000 R11: fffff9400028237f R12: dffffc0000000000 [ 225.954620][ T9814] R13: ffff888061354560 R14: 0000000000000008 R15: ffff888061353d30 [ 225.954635][ T9814] FS: 00007fdbc89d66c0(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 225.954652][ T9814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.954666][ T9814] CR2: 00007ff9726f56b8 CR3: 00000000311b0000 CR4: 00000000003526f0 [ 225.954686][ T9814] Kernel panic - not syncing: Fatal exception [ 225.955025][ T9814] Kernel Offset: disabled