last executing test programs: 2.521402842s ago: executing program 1 (id=8176): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4af82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x1f40) 2.313188194s ago: executing program 3 (id=8179): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x100000) 2.238377689s ago: executing program 1 (id=8180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 2.147811995s ago: executing program 3 (id=8182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x58}}, 0x1020) 2.06159177s ago: executing program 1 (id=8184): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc}, 0x10}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 1.947940287s ago: executing program 1 (id=8187): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=euc-jp,iocharset=utf8,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c726f6f746469723d30303030303030303030303030303030303030352c696f636861727365743d69736f383835392d342c6769643d69676e6f72652c696f636861727365743d63703934392c756e686964652c756e686964652c00dcc03e03964feb1b020a30c94c00a67eb2900b8672b3e605d84b4ffc08b05e7e940c8c9e539533cae36cbc1c5cdacb835d7490f0e46998e0b1b1b0d8b1055060cd3cc40344dc87e6b5044acdf40959d408106fb113821b0df637f1aaf033e90806f01d41b2e125d613e2224aa24df89b5c35127792b553944b85beed18b2"], 0x1, 0xc47, &(0x7f0000001d40)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 1.893804799s ago: executing program 3 (id=8189): r0 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="92", 0x1}], 0x1}}], 0x2, 0x2600c054) 1.761712167s ago: executing program 3 (id=8191): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4af82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x1f40) 1.509633562s ago: executing program 3 (id=8205): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, 0x29, 0x9, 0x78bd27, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008090}, 0x200c0884) 1.474264074s ago: executing program 1 (id=8194): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x842, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x1531, &(0x7f0000001f40)="$eJzs3QuYTlXbOPD7XmvtMSQ9TXIY1lr35kkOyyRJDklySJIkSXJKSJrklYTEkFPSkITkMCSHISSHiUnjfD4fEpImTZKE5JSs/6X41Fvv/33f7+3Ld31z/65rX9b97H2vvfZzP8+z195mnvmmy9CajWtVa0hE8B/BX/5JAoBYABgIANcAQAAA5eLKxV1Yn1Ni0n+2E/bneij1So+AXUlc/+yN65+9cf2zN65/9sb1z964/tkb1z974/ozlp1tnl7wWl6y78L3/7MzPv//H5JVeuwXa0tf3xUg5l/Y2gPXP9vj+v8fgZfOv/8l+FfSuP7ZG9c/u4q90gNg/wvw+z87yPEP13D9szeuP2PZ2ZW+/3ylF4hk7+fgSr/+GGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlD6f9ZQoALrWv9LgYY4wxxhhjjDH25/E5fhurKzUQxhhjjDHGGGOM/Q9CECBBQQAxkANiISfkAgEAV0MeuAYicC3EwXWQF66HfJAfCkBBiIdCUBg0GLBAEEIRKApRuAGKwY1QHEpASSgFDkpDAtwEZeBmKAu3QDm4FcrDbVABKkIlqAy3QxW4A6rCnVAN7oLqUANqQi24G2rDPVAH7oW6cB/Ug/uhPjwADeBBaAgPQSN4GBrDI9AEHoWm0AyaQwto+d/KfwF6wIvQE3pBEvSGPvAS9IV+0B8GwEB4GQbBKzAYXoVkGAJD4TUYBq/DcHgDRsBIGAVvwmh4C8bAWBgH4yEFJsBEeBsmwTswGabAVJgGqTAdZsC7MBNmwWx4D+bA+zAX5sF8WABp8AEshEWQDh/CYvgIMmAJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbATvgYdsEnsBv2wF74FPbBZ/9m/qm/y++KgIACBSpUGIMxGIuxmAtzYW7MjXkwD0YwgnEYh3kxL+bDfFgAC2A8xmNhLIwGDRISFsEiGMUoFsNiWByLY0ksiQ4dJmAClsGbsSyWxXJYDstjeayAFbEiVsbKWAWrYFWsitWwGlbH6lgTa+LdeDf2xjpYB+tiXayH9S7dnsKG2BAbYSNsjI2xCTbBptgUm2NzbIktsRW2wtbYGttiW2yH7bA9tsdETMQO2AE7YkfshJ2wM3bGLtgFu2I37Jb1Qg7AF/FF7IXVRW/sg32wLybn6I8DcAC+jIPwFXwFX8VkHIJD8TV8DV/H4XgSR+BIHIWjsIp4C8fgWCQxHlMwBSfiRJyEk3AyTsEpOA1TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4ANMwDRfiIkzHdFyMpzADl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgMu7Dfbgf92MmZuIBPIBZmIUH8SAewkN4GA/jETyCR/EYHsdjeAJP4Ek8hafxNJ7Fs3gOn4v/qtHHJdYkg7hACSViRIyIFbEil8glcovcIo/IIyIiIuJEnMgr8op8Ip8oIAqIeBEvCovCwggjSIQxACCiIiqKiWKiuCguSoqSwgknEkSCKCPKiLKirCgnbhXlxW2igqgo2rjKorKoItq6quJOUU1UE9VFDVFT1BK1RG1RW9QRdURdUVfUE/VEffGAaCB6Y398SFyoTGMxBJuIodhUNBPy4idYKzEcW4s2oq14QozEEdhetHKJ4mnRQYzBjuJvYiw+KzqL8dhFPC+6im6iu3hB9BCtXU/RS0zG3qKPmIZ9RT/RXwwQM7GGeA/n5KwpXhXJYogYKl4TC/B1MVy8IUaIkWKUeFOMFm+JMWKsGCfGixQxQUwUb4tJ4h0xWUwRU8U0kSqmixniXTFTzBKzxXtijnhfzBXzxHyxQKSJD8RCsUikiw/FYvGRyBBLxFKxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU1sFzvETvGx2CU+EbvFHrFXfCr2ic/EfvG5yBRfiAPiS5ElvhIHxdfikPhGHBbfiiPiO3FUHBPHxffihPhBnBSnxGlxRpwVP4pz4idxXngBEqWQUioZyBiZQ8bKnDKXvErmlsHFZ/daGSevk3nl9TKfzC8LyIIyXhaShaWWRlpJMpRFZFEZlTfIYvJGWVyWkCVlKelkaZkgb5Jl5M2yrLxFlpO3yvLyNllBVpSVZGV5u6wi75CQ+cs+qssasqasJe+WSXCPrCPvlXXlfbKevF/Wlw/IBvJB2VA+JBvJh2Vj+YhsIh+VTWUz2Vy2kC3lY7KVfFy2lm1kW/mEbCeflO3lUzJRPi07SH/xJfKs7Cyfk13k87Kr7Ca7y5/keellT9lLQm+QfeRLsq/sJ/vLAXKgfFkOkq/IwfJVmSyHyKHyNTlMvi6HyzfkCDlSjpJvytHyLTlGjpXj5HiZIifIifJtOUm+IyfLKXKqnCZT5XTZ/2JPs6X8p/lv/0H+4J/3vklullvkVrlNbpc75E75sdwld8ndcrfcK/fKfXKf3C/3y0yZKQ/IAzJLZsmD8qA8JA/Jw/KwPCKPyKPymDwjv5cn5A/ypDwlT8kz8qw8K89dfA5AoRJKKqUCFaNyqFiVU+VSV6nc6mqVR12jIupaFaeuU3nV9Sqfyq8KqIIqXhVShZVWRllFKlRFVFEVVTfgxReMKqlKKadKqwR107+Tr4qpG1VxVeI3+ZfGl/QPxtdStVStVCvVWrVWbVVb1U61U+1Ve5WoElUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJakk1Ue9pPqqfqq/GqAGqpfVIDVIDVaDVbJKVkPVUDVMDVPD1XA1Qo1Qo9QoNVqNVmPUGDVOjVMpKkVNVBPVJDVJTVaT1VQ1VaWqVDVDzVAz1Uw1W81Wc9QcNVfNVfPVfJWm0tRCtVClq3S1WC1WGWqJWqKWqWVqhVqhVqlVao1ao9apdWqD2qAy1Ga1WW1VW9V2tV3tVDvVLrVL7Va71V61V+1T+9R+tV9lqkx1QB1QWSpLHVQH1SF1SB1Wh9URdUQdVUfVcXVcnVAn1El1Up1Wp9VZdVadU+fUeXX+wrQvEIEIVKCCmCAmiA1ig1xBriB3kDvIE+QJIkEkiAvigrzB9UG+IH9QICgYxAeFgsKBDkxgA3Gx6NHghqBYcGNQPCgRlAxKBS4oHSQENwVlgpuDssEtQbng1qB8cFtQIagYVAoqB7cHVYI7gqrBnUG14K6gelAjqBnUCu4Oagf3BHWCe4O6wX1BveD+oH7wQNAgeDBoGDwUNAoeDhoHjwRNgkeDpkGzoHnQImj5p/bv/cn8j7ueupdO0r11H/2S7qv76f56gB6oX9aD9Ct6sH5VJ+sheqh+TQ/Tr+vh+g09Qo/Uo/SberR+S4/RY/U4PV6n6Al6on5bT9Lv6Ml6ip6qp+lUPV3P0O/qmXqWnq3f03P0+3qunqfn6wU6TX+gF+pFOl1/qBfrj3SGXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoXfqj/Uu/YnerffovfpTvU9/pvfrz3Wm/kIf0F/qLP2VPqi/1of0N/qw/lYf0d/po/qYPq6/1yf0D/qkPqVP6zP6rP5Rn9M/6fPaX5jcXzi9G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emr8lr8pl8poApYOJNvClsCpsLyJApYoqYqImaYqaYKW6Km5KmpHHGmQSTYMqYMqasKWvKmXKmvClvKpgKppKpZG43t5s7zB3mTnOnucvcZWqYGqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqapqa5aW5ampamlWllWpvWpq1pa9qZdqa9aW8STaLpYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6miSTZPqYPqav6Wv6m/5moBloBplBZrAZbJJNshlqhpphZpgZboabEWakGXVhomreMmPMWDPOjDcpJsVMNBPNJDPJTDaTzVQz1aSaVDPDzDAzzUwz28w2c8wcM9fMNfPNfJNm0sxCs9Ckm3Sz2Cw2GSbDLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8yTaY5YA6YLJNlDpqD5pA5ZA6bw+aIOWKOmqPmuDluTpgT5qQ5aU6b0+asyX/xfOlNrM1pc9mrbG57tc1jr7F/HxewBW28LWQLW23z2fy/iY21trgtYUvaUtbZ0jbB3vS7uIKtaCvZyvZ2W8XeYav+Lq5t77F17L22rr3P1rJ3/yauZ++39e0jtgEigG1mG9kWtrF9xDaxj9qmtpltblvYdvZJ294+ZRPt07aDfeZ38UK7yK62a+xau87utnvsaXvGHrLf2LP2R9vT9rID7ct2kH3FDrav2mQ75HfxKPumHW3fsmPsWDvOjv9dPNVOs6l2up1h37Uz7azfxWn2AzvHptu5dp6dbxf8HF8YU7r90C62H9kMG8BSu8wutyvsSrvqv8a6zG6wG+0mu8t+YrfabXa73WF3XpoI2z12r/3U7rOf2YP2a5tpv7AH7GGbZb/6Ob5wfIftt/aI/c4etcfscfu9PWF/uPRf/j8f+/f2J3veeguEBCRJUUAxlINiKSfloqsoN11NeegaitC1FEfXUV66nvJRfipABSmeClFh0mTIElFIRagoRekGujS8klSKHJWmBLqJytDNVJZuoXJ0K5Wn26gCVaRKVJlupyp0B1WlO6ka3UXVqQbVpFp0N9Wme6gO3Ut16T6qR/dTfXqAGtCD1JAeokb0MDWmR6gJPUpNqRk1pxbUkh6jVvQ4taY21JaeoHb0JLWnpyiRnqYO9Ax1pL9RJ3qWOtNz1IWep67UjbrTC9SDXqSe1IuSqDf1oZeoL/Wj/jSABtLLNIheocH0KiXTEBpKr9Ewep2G0xs0gkbSKHqTRtNbNIbG0jgaTyk0gSbS2zSJ3qHJNIWm0jRKpek0g96lmTSLZtN7NIfep7k0j+bTAkqjD2ghLaJ0+pAW00eUQUtoKS2j5bSCVtIqWk1raC2to/W0gTbSJtpMW2grbaPttIN20se0iz6h3bSH9tKntI8+o/30OWXSF3SAvqQs+ooO0td0iL6hw/St70Xf0VE6RsfpezpBP9BJOkWn6QydpR/pHP1E58kThBiKUIYqDMKYMEcYG+YMc4VXhbnDq8M84TVhJLw2jAuvC/OG14f5wvxhgbBgGB8WCguHOjShDSkMwyJh0TAa3hAWC28Mi4clwpJhqdCFpcOE8KawTHhzWDa8JSwX3hqWD28LK4QVw0fuqxzeHlYJ7wirhneG1cK7wuphjbBmWOvqu8Pa4T1hnfDesG54X1g2vD+sHz4QNggfDBuGD4WNwofDxuEjYZPw0bBp2CxsHrYIW4aPha3Cx8PWYZuwbfhE2C58MmwfPhUmhk+HHcJnfl5//6J/vD4p7B32CV8KXwq9v1fOjy6IpkU/iC6MLoqmRz+MLo5+FM2ILokujS6LLo+uiK6Mroqujq6Jro2ui66PbohujG6Kel8rBzh0wkmnXOBiXA4X63K6XO4ql9td7fK4a1zEXevi3HUur7ve5XP5XQFX0MW7Qq6w084468iFrogr6qLuBlfM3eiKuxKupCvlnCvtElwL19K1dK3c4661a+PauifcE+5J96R7yj3lnnYd3DOuo/ub6+SedZ3dc+4597zr6rq57u4F18NNyPPLezLJ9XF9XF/X1/V3/d1AN9ANcoPcYDfYJbtkN9QNdcPcMDfcDXcj3Ag3yo1yo91oN8aNcePcOJfiUtxEN9FNcpPcZDfZTXVTXapLdTPcDDfTzXRVZv2yl7lurpvv5rs0l+YWugtzxnS32C12GS7DLXVL3XK33K10K91qt9qtdWvderfebXQb3Wa32W11W912t93tdDvdLrfL7fbX/NKp2+f2u/0u02W6A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcSmRCZGHk7MinyTmRyZEpkamRaJDUyPTIj8m5kZmRWZHbkvcicyPuRuZF5kfmRBZG0yAeRhZFFkfTIh5HFkY8iGZElkaWRZZHlkRUR7wttDX0RX9RH/Q2+mL/RF/clfElfyjtf2if4m3wZf7Mv62/x5fytvry/zVfwFX0l/6hv6pv55r6Fb+kf86384761b+Pb+id8O/+kb++f8on+ad/BP+M7+r/5Tv5Z39k/57v4531X38139y/4Hv5F39P38km+t+/jX/J9fT/f3w/wA/3LfpB/xQ/2r/pkP8QP9a/5Yf51P9y/4Uf4kX5UzJt+9KVLZBjvU/wEP9G/7Sf5d/xkP8VP9dN8qp/uZ/h3/Uw/y8/27/k5/n0/18/z8/0Cn+Y/8Av9Ip/uP/SL/Uc+wy+5dFPZr/Sr/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Ha/w+/0H/td/hO/2+/xe/2nfp//zO/3n/tM/4U/4L/0Wf4rf9B/7Q/5b/xh/60/4r/zR/0xf9x/70/4H/xJf8qf9mf8Wf+jP+d/8uf5d9YYY4wxxv4lEy43xW/X/HI7v/cf5IhfbdwHAK7eVjDr1+svzCjX5/ul3U/Et4sAwNO9ujx0aalePSkp6eK2GRKCovMAIHI5PwYux0ugLTwJidAGyvzh+PuJbmfpn/QfvRUg169yYuFyfLn/z0//0Vcf9BOPPTFqYfnwdNz/p/95AMWLXs7JCZfjJdD25/srbaDsPxh//lb/ZPw5v0gBaP2rnNxwOb48/gR4HJ6BxN9syRhjjDHGGGOM/aKfqNTp0vXnpZ/4/KPr8/hffTFADrgc/7Prc8YYY4wxxhhjjF15z3br/tRjiYltOv37jar/rax/udEE/qd65sYfNrwHuPSIAoD/sEOACw35Vx7Flr9kX8kX3zp/v2r5GR/A/45S/hmNK/zBxBhjjDHGGPvTXZ70//Zx/jsAjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYX+ev+DqxK32MjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2JX2/wIAAP//6WoMbA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1.301383664s ago: executing program 3 (id=8198): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005200)='./file0\x00', 0x204409, &(0x7f0000000040)={[{@compress_force}, {@clear_cache}, {@commit={'commit', 0x3d, 0x6}}, {@fatal_errors_bug}, {@notreelog}, {@space_cache_v1}]}, 0x2, 0x51ab, &(0x7f000000a440)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.249578847s ago: executing program 4 (id=8199): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0xf8d9, 0x32315559, 0x0, 0x2, [{}, {0x0, 0x4554}, {}, {}, {0x0, 0xe}, {0x0, 0x1}, {0x1, 0x3}], 0x0, 0x0, 0x3, 0x0, 0x3}}) 1.109490895s ago: executing program 2 (id=8202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000601"], 0x1c}}, 0x0) 1.03816261s ago: executing program 4 (id=8203): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xffffffffffffffa4}, 0x300, 0x0, 0xff, 0x9, 0x7, 0x6}, 0x20) 936.790275ms ago: executing program 4 (id=8206): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}]}, 0x1, 0x787, &(0x7f0000001000)="$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") lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x8, 0x1) 935.783785ms ago: executing program 1 (id=8216): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") open_by_handle_at(r0, &(0x7f0000000180)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x4eb79cf, 0xb767, 0x5, 0x7fffffffffffffff, 0x2, 0xff}}, 0x200400) 862.3763ms ago: executing program 2 (id=8207): r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) 860.5221ms ago: executing program 0 (id=8208): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000540)={0xfffffffffffffffc, 0x208000, 0x800}, 0x20) 712.362118ms ago: executing program 0 (id=8209): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) 712.218509ms ago: executing program 2 (id=8210): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x19, 0x2, 0x1, "bf2000fc0000000000ffe10000000600", 0x41414770}) 653.765802ms ago: executing program 0 (id=8211): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) 588.607786ms ago: executing program 0 (id=8212): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001380)) 503.508141ms ago: executing program 4 (id=8213): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast2, 0xa0c}}, [0x0, 0xa, 0x5, 0x5c2c, 0x8, 0x7, 0xb, 0x37, 0x10, 0xd, 0x9, 0x2, 0x4, 0x3, 0x9]}, &(0x7f0000000100)=0x100) 400.175347ms ago: executing program 2 (id=8214): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x5, @pix={0x5b8c840d, 0x9, 0x494e4f4b, 0x1, 0x2, 0x8001, 0x1, 0x55, 0x0, 0x1, 0x0, 0x1}}) 324.006962ms ago: executing program 0 (id=8215): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002740)={'wlan1\x00', &(0x7f0000000140)=@ethtool_cmd={0x1e, 0x8, 0x8, 0x2, 0x2, 0x4, 0x7, 0xfd, 0x2, 0x2, 0x0, 0x100, 0x200, 0x6, 0x5, 0x1, [0x100000, 0xff]}}) 224.516688ms ago: executing program 4 (id=8217): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 203.026649ms ago: executing program 2 (id=8218): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) 63.544687ms ago: executing program 0 (id=8219): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="01bb", 0x2}, {&(0x7f0000000000)="900b", 0x2}], 0x2) 11.8045ms ago: executing program 4 (id=8220): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4aa81) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="0985af3e07b46c5dd3fe0854fb38f66eb163340fbb7acbe9befd019b", 0x1c}], 0x1) 0s ago: executing program 2 (id=8221): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f000000c6c0)=[{{&(0x7f0000005180)={0xa, 0x4e23, 0xfffffff7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, 0x1c, 0x0, 0x0, &(0x7f0000005240)=[@hopopts={{0x18, 0x29, 0x36, {0x2c}}}, @hopopts={{0x18}}], 0x30}}], 0x1, 0x0) kernel console output (not intermixed with test programs): h_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 816.447450][T19328] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 817.094484][T19358] loop2: detected capacity change from 0 to 32768 [ 817.171313][T19358] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 817.193393][T13191] (kworker/u4:8,13191,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 817.234278][T16568] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 817.260373][T19363] loop0: detected capacity change from 0 to 32768 [ 817.285705][T19363] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 817.296899][T19363] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 817.305828][ T4280] (syz-executor,4280,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 817.327402][ T4280] (syz-executor,4280,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 817.340397][T19363] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 817.394745][T19363] (syz.0.6392,19363,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 817.416995][ T4280] ocfs2: Unmounting device (7,2) on (node local) [ 817.446201][T16568] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 817.465653][T19363] (syz.0.6392,19363,1):ocfs2_xattr_block_find:2835 ERROR: status = -12 [ 817.484528][T16568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.511673][T16568] usb 2-1: config 0 descriptor?? [ 817.664679][ T4278] ocfs2: Unmounting device (7,0) on (node local) [ 817.730594][T16568] snd-usb-hiface: probe of 2-1:0.0 failed with error -22 [ 817.941725][T18930] usb 2-1: USB disconnect, device number 31 [ 818.087800][T19405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6410'. [ 818.149089][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6410'. [ 818.212016][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6410'. [ 818.291704][T15058] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 818.392887][T19391] loop3: detected capacity change from 0 to 32768 [ 818.475099][T15058] usb 3-1: config 0 has an invalid interface number: 36 but max is 0 [ 818.494933][T15058] usb 3-1: config 0 has no interface number 0 [ 818.519391][T15058] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72 [ 818.550472][T15058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.569684][T15058] usb 3-1: Product: syz [ 818.616209][T15058] usb 3-1: Manufacturer: syz [ 818.625538][T15058] usb 3-1: SerialNumber: syz [ 818.654587][T15058] usb 3-1: config 0 descriptor?? [ 818.679561][T15058] gspca_main: spca505-2.14.0 probing 0733:0430 [ 818.948967][T15977] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 819.055099][T15058] gspca_spca505: reg write: error -71 [ 819.060585][T15058] spca505: probe of 3-1:0.36 failed with error -5 [ 819.105797][T15058] usb 3-1: USB disconnect, device number 38 [ 819.142209][T19425] loop1: detected capacity change from 0 to 256 [ 819.161223][T15977] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 819.172321][T19425] exfat: Deprecated parameter 'namecase' [ 819.182890][T15977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.189983][T19409] loop0: detected capacity change from 0 to 32768 [ 819.197301][T19425] exfat: Deprecated parameter 'utf8' [ 819.197343][T19425] exfat: Deprecated parameter 'utf8' [ 819.197365][T19425] exfat: Deprecated parameter 'namecase' [ 819.216925][T15977] usb 4-1: config 0 descriptor?? [ 819.255949][T19425] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 819.290093][T19409] ialloc: diAlloc returned -5! [ 819.612370][T15977] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 819.630899][T15977] hackrf 4-1:0.0: Could not detect board [ 819.637057][T15977] hackrf: probe of 4-1:0.0 failed with error -71 [ 819.706988][T15977] usb 4-1: USB disconnect, device number 32 [ 819.798710][T19441] loop1: detected capacity change from 0 to 1024 [ 819.871846][T19441] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 819.945370][T19441] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.1.6428: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 820.120722][T19441] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 820.159166][T19441] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.6428: Deleting old file: nlink 1, error=-117 [ 820.261658][T19452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 820.374543][T19438] loop0: detected capacity change from 0 to 32768 [ 820.409179][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 820.517436][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6436'. [ 820.565528][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6436'. [ 820.593866][T19438] XFS (loop0): Mounting V5 Filesystem [ 820.616283][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6436'. [ 820.804263][T19480] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 820.829718][T19480] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 820.860857][T19438] XFS (loop0): Ending clean mount [ 820.883034][T19438] XFS (loop0): Quotacheck needed: Please wait. [ 820.902730][T19480] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 820.993064][T19438] XFS (loop0): Quotacheck: Done. [ 821.044756][T19486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6445'. [ 821.053769][T19486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6445'. [ 821.082883][T19486] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6445'. [ 821.193442][ T4278] XFS (loop0): Unmounting Filesystem [ 821.530422][T19503] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 821.691876][T19510] loop0: detected capacity change from 0 to 256 [ 821.719629][T19493] Process accounting paused [ 821.774907][T19510] FAT-fs (loop0): Directory bread(block 64) failed [ 821.796657][T19510] FAT-fs (loop0): Directory bread(block 65) failed [ 821.829990][T19510] FAT-fs (loop0): Directory bread(block 66) failed [ 821.847842][T19492] loop2: detected capacity change from 0 to 32768 [ 821.857220][T19510] FAT-fs (loop0): Directory bread(block 67) failed [ 821.870075][T19514] xt_limit: Overflow, try lower: 1207959552/384 [ 821.876724][T19510] FAT-fs (loop0): Directory bread(block 68) failed [ 821.887276][T19510] FAT-fs (loop0): Directory bread(block 69) failed [ 821.913284][T19510] FAT-fs (loop0): Directory bread(block 70) failed [ 821.942067][T19510] FAT-fs (loop0): Directory bread(block 71) failed [ 821.969708][T19510] FAT-fs (loop0): Directory bread(block 72) failed [ 821.998128][T19510] FAT-fs (loop0): Directory bread(block 73) failed [ 822.289575][T19520] loop3: detected capacity change from 0 to 2048 [ 822.438053][T19528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6463'. [ 822.454782][T19528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6463'. [ 822.633125][T19531] loop2: detected capacity change from 0 to 64 [ 822.886005][T19542] dlm: no local IP address has been set [ 822.892238][T19542] dlm: cannot start dlm midcomms -107 [ 823.350356][T19558] libceph: resolve '4.' (ret=-3): failed [ 823.669285][T19544] loop0: detected capacity change from 0 to 32768 [ 823.770744][T19541] loop1: detected capacity change from 0 to 32768 [ 823.816820][T19541] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.6470 (19541) [ 823.858781][T19541] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 823.879444][T19541] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 823.936442][T19541] BTRFS info (device loop1): using free space tree [ 824.274361][T19541] BTRFS info (device loop1): enabling ssd optimizations [ 824.333978][T19609] netlink: 2072 bytes leftover after parsing attributes in process `syz.4.6494'. [ 824.344924][T19609] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6494'. [ 824.389140][T19609] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6494'. [ 824.405758][T19539] Process accounting paused [ 824.422785][T19609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6494'. [ 824.482136][ T4267] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 824.673585][T19615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6498'. [ 824.736230][T19617] loop4: detected capacity change from 0 to 1024 [ 824.853834][T19617] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 64 [ 825.025126][T19619] loop2: detected capacity change from 0 to 2048 [ 825.087508][T19619] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 825.303761][T19621] loop1: detected capacity change from 0 to 8192 [ 825.335411][T19632] loop3: detected capacity change from 0 to 128 [ 825.342679][T19632] /dev/loop3: Can't open blockdev [ 825.347980][T19621] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 825.361533][T19621] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 825.371654][T19621] REISERFS (device loop1): using ordered data mode [ 825.378214][T19621] reiserfs: using flush barriers [ 825.388206][T19621] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 825.408161][T19621] REISERFS (device loop1): checking transaction log (loop1) [ 825.478536][T19634] loop4: detected capacity change from 0 to 22 [ 825.485829][T19621] REISERFS (device loop1): Using tea hash to sort names [ 825.493650][T19634] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 825.502272][T19621] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 825.515650][T19634] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 825.785373][T19640] netlink: 'syz.3.6509': attribute type 1 has an invalid length. [ 826.384275][T19660] IPv6: Can't replace route, no match found [ 826.464744][T15977] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 826.651783][T15977] usb 2-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 826.671212][T15977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.692254][T15977] usb 2-1: config 0 descriptor?? [ 826.730119][T15977] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 826.784614][T19668] loop2: detected capacity change from 0 to 2048 [ 826.849397][T19668] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 826.896876][T19655] loop3: detected capacity change from 0 to 32768 [ 826.909050][T19668] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry where CRC length (0) does not match entry length (32) [ 826.983224][T19655] XFS (loop3): Mounting V5 Filesystem [ 827.122591][T15977] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 827.134052][T15977] pac7311: probe of 2-1:0.0 failed with error -71 [ 827.143497][T15977] usb 2-1: USB disconnect, device number 32 [ 827.149877][T19655] XFS (loop3): Ending clean mount [ 827.253634][ T4271] XFS (loop3): Unmounting Filesystem [ 827.375638][T19692] Illegal XDP return value 4294967274 on prog (id 392) dev N/A, expect packet loss! [ 827.738412][T19701] loop1: detected capacity change from 0 to 8 [ 827.896988][T19701] SQUASHFS error: Failed to read block 0x2fc: -5 [ 827.932125][T19701] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 827.949580][T19701] SQUASHFS error: Unable to read directory block [247:26] [ 828.472155][T19725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6547'. [ 828.519336][T19725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6547'. [ 828.580477][T19730] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 828.592626][T19695] loop4: detected capacity change from 0 to 32768 [ 828.707895][T19695] XFS (loop4): Mounting V5 Filesystem [ 828.895544][T19695] XFS (loop4): Ending clean mount [ 828.922179][T19695] XFS (loop4): Quotacheck needed: Please wait. [ 829.008751][T19695] XFS (loop4): Quotacheck: Done. [ 829.178368][ T4275] XFS (loop4): Unmounting Filesystem [ 829.586271][T19772] trusted_key: encrypted_key: insufficient parameters specified [ 829.653235][T19775] binder: 19774:19775 ioctl c018620c 200000000380 returned -22 [ 829.984050][T19788] loop3: detected capacity change from 0 to 64 [ 830.085104][ T4427] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 830.621488][T19784] loop0: detected capacity change from 0 to 32768 [ 830.694623][T19784] (syz.0.6573,19784,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 830.751289][T19784] (syz.0.6573,19784,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 830.821402][T19784] (syz.0.6573,19784,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 830.898310][T19784] (syz.0.6573,19784,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 831.005534][T19784] JBD2: Ignoring recovery information on journal [ 831.064250][T19815] loop2: detected capacity change from 0 to 4096 [ 831.100836][T19815] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 831.147777][T19784] (syz.0.6573,19784,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 831.204125][T19784] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 831.234579][T19784] (syz.0.6573,19784,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 831.304976][T19784] (syz.0.6573,19784,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 831.523141][T19784] (syz.0.6573,19784,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 831.651947][T19784] (syz.0.6573,19784,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 831.705128][T19784] (syz.0.6573,19784,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 831.759591][T19784] (syz.0.6573,19784,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 831.797095][T19784] (syz.0.6573,19784,0):ocfs2_quota_read:201 ERROR: status = -5 [ 831.821701][T19784] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 5 [ 831.846060][T19784] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 831.880348][T19784] (syz.0.6573,19784,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 831.900349][T19784] (syz.0.6573,19784,0):ocfs2_mknod:314 ERROR: status = -5 [ 831.923354][T19784] (syz.0.6573,19784,0):ocfs2_mknod:502 ERROR: status = -5 [ 831.951666][T19784] (syz.0.6573,19784,0):ocfs2_mkdir:659 ERROR: status = -5 [ 832.113728][ T4278] ocfs2: Unmounting device (7,0) on (node local) [ 832.244335][T19855] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.6607'. [ 832.338156][T18930] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 832.446728][T19859] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 832.553455][T18930] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 832.576323][T18930] usb 3-1: config 0 has no interface number 0 [ 832.582159][T19843] loop3: detected capacity change from 0 to 32768 [ 832.598078][T18930] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 832.617023][T18930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.715636][T18930] usb 3-1: Product: syz [ 832.719865][T18930] usb 3-1: Manufacturer: syz [ 832.729191][T18930] usb 3-1: SerialNumber: syz [ 832.735865][T18930] usb 3-1: config 0 descriptor?? [ 832.742912][T18930] hub 3-1:0.132: bad descriptor, ignoring hub [ 832.749049][T18930] hub: probe of 3-1:0.132 failed with error -5 [ 832.753666][T19843] XFS (loop3): Mounting V5 Filesystem [ 832.761754][T18930] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input55 [ 832.921212][T19843] XFS (loop3): Ending clean mount [ 833.148790][ T4271] XFS (loop3): Unmounting Filesystem [ 833.408879][T19896] netlink: 'syz.0.6623': attribute type 12 has an invalid length. [ 833.421063][T19900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6625'. [ 833.435681][T19900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6625'. [ 833.646700][T19908] netlink: 'syz.1.6628': attribute type 21 has an invalid length. [ 833.869655][T16568] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 834.070549][T16568] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 834.105094][T16568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.135525][T16568] usb 5-1: Product: syz [ 834.139782][T16568] usb 5-1: Manufacturer: syz [ 834.153210][T16568] usb 5-1: SerialNumber: syz [ 834.179351][T16568] r8152-cfgselector 5-1: config 0 descriptor?? [ 834.593923][T16568] r8152-cfgselector 5-1: Unknown version 0x0000 [ 834.619466][T16568] r8152-cfgselector 5-1: USB disconnect, device number 25 [ 834.764142][T19946] loop0: detected capacity change from 0 to 22 [ 834.787757][T19946] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 834.823755][T19946] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 834.993167][T19930] loop2: detected capacity change from 0 to 32768 [ 835.017506][T19950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6649'. [ 835.111507][T19930] XFS (loop2): Mounting V5 Filesystem [ 835.263539][T19930] XFS (loop2): Ending clean mount [ 835.282606][T19930] XFS (loop2): Quotacheck needed: Please wait. [ 835.304937][T19966] xt_l2tp: v2 doesn't support IP mode [ 835.406825][T19930] XFS (loop2): Quotacheck: Done. [ 835.540457][ T4280] XFS (loop2): Unmounting Filesystem [ 835.546205][T16568] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 835.665472][ T26] audit: type=1326 audit(46764954.571:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.4.6658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 835.682593][T19944] loop3: detected capacity change from 0 to 32768 [ 835.752557][ T26] audit: type=1326 audit(46764954.571:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.4.6658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 835.776793][T16568] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 835.831526][T16568] usb 2-1: config 0 has no interface number 0 [ 835.836889][ T26] audit: type=1326 audit(46764954.634:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.4.6658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 835.860198][ T26] audit: type=1326 audit(46764954.634:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.4.6658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 835.883156][ T26] audit: type=1326 audit(46764954.634:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.4.6658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 835.929036][T16568] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 835.957570][T19984] netlink: 'syz.0.6661': attribute type 30 has an invalid length. [ 835.979172][T16568] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 835.979795][T19944] XFS (loop3): Mounting V5 Filesystem [ 835.988387][T16568] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 836.002813][T16568] usb 2-1: Manufacturer: syz [ 836.007584][T16568] usb 2-1: SerialNumber: syz [ 836.014692][T16568] usb 2-1: config 0 descriptor?? [ 836.209885][T19944] XFS (loop3): Ending clean mount [ 836.410218][ T4271] XFS (loop3): Unmounting Filesystem [ 836.416091][T16568] usbtouchscreen: probe of 2-1:0.214 failed with error -71 [ 836.440876][T16568] usb 2-1: USB disconnect, device number 33 [ 836.858830][T20002] loop3: detected capacity change from 0 to 32768 [ 836.913248][ T4427] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 837.068810][T20010] device bridge1 entered promiscuous mode [ 837.253416][T20013] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6670'. [ 837.313674][T18930] usb 3-1: USB disconnect, device number 39 [ 837.344621][T20013] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6670'. [ 837.477670][T20013] Process accounting paused [ 837.819159][T20005] loop1: detected capacity change from 0 to 32768 [ 837.960893][ T26] audit: type=1326 audit(46764956.975:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20038 comm="syz.0.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66df59bf79 code=0x7ffc0000 [ 837.988320][ T26] audit: type=1326 audit(46764956.975:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20038 comm="syz.0.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66df59bf79 code=0x7ffc0000 [ 838.062261][ T26] audit: type=1326 audit(46764957.048:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20038 comm="syz.0.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f66df59bf79 code=0x7ffc0000 [ 838.090370][T20005] XFS (loop1): Mounting V5 Filesystem [ 838.295330][ T26] audit: type=1326 audit(46764957.059:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20038 comm="syz.0.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66df59bf79 code=0x7ffc0000 [ 838.400268][ T26] audit: type=1326 audit(46764957.059:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20038 comm="syz.0.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66df59bf79 code=0x7ffc0000 [ 838.406855][T20005] XFS (loop1): Ending clean mount [ 838.478037][T20005] XFS (loop1): Quotacheck needed: Please wait. [ 838.542600][T20031] loop3: detected capacity change from 0 to 32768 [ 838.569643][T20005] XFS (loop1): Quotacheck: Done. [ 838.582560][T20031] /dev/loop3: Can't open blockdev [ 838.837146][ T4267] XFS (loop1): Unmounting Filesystem [ 838.912990][T20069] loop0: detected capacity change from 0 to 512 [ 839.031225][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6696'. [ 839.076947][T20069] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.6694: bg 0: block 248: padding at end of block bitmap is not set [ 839.088427][T20074] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6696'. [ 839.153100][T20069] Quota error (device loop0): write_blk: dquota write failed [ 839.171543][T20069] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 839.229318][T20069] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.6694: Failed to acquire dquot type 1 [ 839.304064][T20069] EXT4-fs (loop0): 1 truncate cleaned up [ 839.314867][T20069] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 839.389353][T20069] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 839.457732][T20069] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 839.502444][T20069] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.6694: Failed to acquire dquot type 1 [ 839.756417][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 839.767990][ T9] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 839.787722][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 1 [ 840.005116][T20103] program syz.2.6710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 840.106227][T20109] Cannot find del_set index 43 as target [ 840.332346][T20118] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 840.343861][T20119] Error parsing options; rc = [-22] [ 840.398108][T20118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 840.776766][T20142] xt_hashlimit: max too large, truncated to 1048576 [ 841.030044][T18930] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 841.146622][T20156] loop3: detected capacity change from 0 to 512 [ 841.169795][T20156] /dev/loop3: Can't open blockdev [ 841.233517][T18930] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 841.267542][T18930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.296365][T18930] usb 1-1: Product: syz [ 841.300605][T18930] usb 1-1: Manufacturer: syz [ 841.305237][T18930] usb 1-1: SerialNumber: syz [ 841.354679][T18930] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 841.431038][T18930] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 841.575195][T20173] loop1: detected capacity change from 0 to 256 [ 841.612743][T20173] exfat: Deprecated parameter 'utf8' [ 841.618133][T20173] exfat: Deprecated parameter 'namecase' [ 841.663540][ C1] usb 1-1: ath9k_htc: invalid pkt_len (fd10) [ 841.700687][T20173] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 841.753459][T20173] kAFS: unable to lookup cell 's@z0' [ 841.908076][T16568] usb 1-1: USB disconnect, device number 36 [ 841.976358][T20183] loop4: detected capacity change from 0 to 1024 [ 842.120139][T20187] xt_CT: No such helper "syz0" [ 842.221427][T16442] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 842.247886][T20193] loop4: detected capacity change from 0 to 4096 [ 842.279803][T20195] netlink: 'syz.1.6755': attribute type 30 has an invalid length. [ 842.287456][T20193] ntfs3: loop4: ino=3, Correct links count -> 2. [ 842.439605][T16442] usb 4-1: Using ep0 maxpacket: 16 [ 842.448968][T16442] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 842.458255][T16442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.466269][T16442] usb 4-1: Product: syz [ 842.477353][T18930] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 842.484403][T18930] ath9k_htc: Failed to initialize the device [ 842.506143][T16442] usb 4-1: Manufacturer: syz [ 842.510788][T16442] usb 4-1: SerialNumber: syz [ 842.534467][T16568] usb 1-1: ath9k_htc: USB layer deinitialized [ 842.548717][T16442] usb 4-1: config 0 descriptor?? [ 842.582849][T16442] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 842.877895][T16623] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 842.973093][T16442] gspca_sn9c2028: read1 error -71 [ 842.979148][T16442] gspca_sn9c2028: read1 error -71 [ 842.992833][T16442] sn9c2028: probe of 4-1:0.0 failed with error -71 [ 843.013423][T16442] usb 4-1: USB disconnect, device number 33 [ 843.068147][T16623] usb 3-1: Using ep0 maxpacket: 8 [ 843.075428][T16623] usb 3-1: unable to get BOS descriptor or descriptor too short [ 843.107897][T16623] usb 3-1: config 8 has an invalid interface number: 255 but max is 0 [ 843.144234][T16623] usb 3-1: config 8 has no interface number 0 [ 843.150940][T16623] usb 3-1: config 8 interface 255 has no altsetting 0 [ 843.170004][T16623] usb 3-1: string descriptor 0 read error: -22 [ 843.178614][T20225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6770'. [ 843.188411][T16623] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 843.201189][T16623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.641393][T16623] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.2-1, 00:00:00:00:00:00. [ 843.700758][T16623] usb 3-1: USB disconnect, device number 40 [ 843.779239][T20220] loop4: detected capacity change from 0 to 32768 [ 843.792056][T20243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6778'. [ 843.834406][T20220] (syz.4.6767,20220,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 843.883245][T20220] (syz.4.6767,20220,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 843.955907][T20220] JBD2: Ignoring recovery information on journal [ 844.041531][T20220] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 844.372750][ T4275] ocfs2: Unmounting device (7,4) on (node local) [ 844.769580][T15977] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 844.799159][T20283] netlink: 'syz.4.6794': attribute type 30 has an invalid length. [ 844.966526][T15977] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 844.995871][T15977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 845.037122][T15977] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 845.092802][T15977] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 845.129790][T15977] usb 4-1: Product: syz [ 845.151567][T15977] usb 4-1: Manufacturer: syz [ 845.162512][T15977] usb 4-1: SerialNumber: syz [ 845.187838][T15977] usb 4-1: config 0 descriptor?? [ 845.217415][T15977] usb 4-1: selecting invalid altsetting 0 [ 845.297252][T20302] loop0: detected capacity change from 0 to 736 [ 845.511681][T15977] usb 4-1: USB disconnect, device number 34 [ 846.288084][T20340] netlink: 'syz.2.6816': attribute type 24 has an invalid length. [ 846.713436][T20358] netlink: 'syz.3.6825': attribute type 3 has an invalid length. [ 846.935081][T15977] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 847.120599][T15977] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 847.150291][T15977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.212667][T15977] usb 5-1: Product: syz [ 847.217109][T15977] usb 5-1: Manufacturer: syz [ 847.223785][T20385] usb usb7: usbfs: process 20385 (syz.2.6835) did not claim interface 0 before use [ 847.240962][T15977] usb 5-1: SerialNumber: syz [ 847.258333][T15977] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 847.276221][T20387] syz.0.6836 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 847.323167][T15977] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 847.564525][T20394] netlink: 'syz.2.6839': attribute type 5 has an invalid length. [ 847.631774][ T26] audit: type=1326 audit(46764967.137:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20398 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 847.717900][ T26] audit: type=1326 audit(46764967.168:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20398 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 847.759273][ T4330] usb 5-1: USB disconnect, device number 26 [ 847.824830][ T26] audit: type=1326 audit(46764967.168:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20398 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 847.898779][ T26] audit: type=1326 audit(46764967.168:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20398 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 847.946743][ T26] audit: type=1326 audit(46764967.168:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20398 comm="syz.3.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 848.099557][T20404] loop2: detected capacity change from 0 to 8192 [ 848.122779][T20404] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 848.137392][T20404] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 848.148117][T20404] REISERFS (device loop2): using ordered data mode [ 848.155034][T20404] reiserfs: using flush barriers [ 848.173759][T20404] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 848.197818][T20404] REISERFS (device loop2): checking transaction log (loop2) [ 848.228303][T20404] REISERFS (device loop2): Using r5 hash to sort names [ 848.294633][T20404] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 848.307410][T20404] REISERFS warning (device loop2): vs-2180 finish_unfinished: iget failed for [1 0 0x0 SD] [ 848.356834][T20404] REISERFS error (device loop2): vs-15011 reiserfs_release_objectid: tried to free free object id (0) [ 848.411704][T15977] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 848.418743][T15977] ath9k_htc: Failed to initialize the device [ 848.451039][T20404] REISERFS (device loop2): Remounting filesystem read-only [ 848.460907][ T4330] usb 5-1: ath9k_htc: USB layer deinitialized [ 848.538496][ T26] audit: type=1326 audit(46764968.082:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20429 comm="syz.4.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 848.566559][T20428] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 848.629537][ T26] audit: type=1326 audit(46764968.124:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20429 comm="syz.4.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 848.743139][ T26] audit: type=1326 audit(46764968.124:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20429 comm="syz.4.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 848.850237][ T26] audit: type=1326 audit(46764968.124:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20429 comm="syz.4.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 849.253303][T20454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6867'. [ 849.357833][T20456] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 849.947866][T20486] loop4: detected capacity change from 0 to 512 [ 849.973585][T20486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 850.080480][T20486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 850.361228][T20486] Process accounting resumed [ 850.399070][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 850.471450][T20508] loop2: detected capacity change from 0 to 2048 [ 850.534582][T20508] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27485, location=27485 [ 850.639360][T20508] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 850.849204][T20527] loop4: detected capacity change from 0 to 256 [ 850.929102][T20527] FAT-fs (loop4): Directory bread(block 64) failed [ 850.955301][T20527] FAT-fs (loop4): Directory bread(block 65) failed [ 851.003041][T20527] FAT-fs (loop4): Directory bread(block 66) failed [ 851.009613][T20527] FAT-fs (loop4): Directory bread(block 67) failed [ 851.054932][T20527] FAT-fs (loop4): Directory bread(block 68) failed [ 851.115058][T20527] FAT-fs (loop4): Directory bread(block 69) failed [ 851.136514][T20527] FAT-fs (loop4): Directory bread(block 70) failed [ 851.155545][T20527] FAT-fs (loop4): Directory bread(block 71) failed [ 851.162211][T20527] FAT-fs (loop4): Directory bread(block 72) failed [ 851.202766][T20527] FAT-fs (loop4): Directory bread(block 73) failed [ 851.887550][T20571] comedi comedi1: driver 'ni_daq_700' does not support attach using comedi_config [ 851.915894][T20563] loop4: detected capacity change from 0 to 4096 [ 852.297465][T20584] netlink: 'syz.1.6929': attribute type 5 has an invalid length. [ 852.324633][T20585] loop2: detected capacity change from 0 to 256 [ 852.326770][T20584] device ip6erspan1 entered promiscuous mode [ 852.629555][ T26] audit: type=1326 audit(46764972.375:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20598 comm="syz.1.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 852.643487][T20597] 9pnet_fd: p9_fd_create_tcp (20597): problem connecting socket to 127.0.0.1 [ 852.718696][ T26] audit: type=1326 audit(46764972.375:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20598 comm="syz.1.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 852.820214][ T26] audit: type=1326 audit(46764972.375:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20598 comm="syz.1.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 852.908471][ T26] audit: type=1326 audit(46764972.417:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20598 comm="syz.1.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 852.970387][ T26] audit: type=1326 audit(46764972.417:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20598 comm="syz.1.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 853.117740][ T26] audit: type=1326 audit(46764972.417:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20598 comm="syz.1.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 853.229495][T20615] Process accounting resumed [ 853.248661][ T26] audit: type=1326 audit(46764972.417:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20598 comm="syz.1.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 853.256479][T20619] SET target dimension over the limit! [ 853.352946][ T26] audit: type=1326 audit(46764972.417:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20598 comm="syz.1.6938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 853.389484][T20627] QAT: failed to copy from user cfg_data. [ 853.652135][T20635] loop4: detected capacity change from 0 to 2048 [ 853.688653][T20635] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=27485, location=27485 [ 853.803256][T20635] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 853.913747][T16442] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 854.093879][T20651] loop1: detected capacity change from 0 to 4096 [ 854.138305][T16442] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 854.165798][T20651] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 854.178892][T16442] usb 1-1: config 0 interface 0 has no altsetting 0 [ 854.205515][T20657] loop3: detected capacity change from 0 to 2048 [ 854.218437][T16442] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 854.226039][T20651] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 854.258535][T16442] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 854.308500][T16442] usb 1-1: Product: syz [ 854.312721][T16442] usb 1-1: Manufacturer: syz [ 854.317375][T16442] usb 1-1: SerialNumber: syz [ 854.333994][T20651] ntfs: volume version 3.1. [ 854.366525][ T4380] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 854.377636][T16442] usb 1-1: config 0 descriptor?? [ 854.420437][T16442] usb 1-1: selecting invalid altsetting 0 [ 854.444892][T20664] loop4: detected capacity change from 0 to 128 [ 854.494841][T20664] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 854.533223][T20664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 854.666232][T16623] usb 1-1: USB disconnect, device number 37 [ 854.758181][T20669] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6972'. [ 855.153260][T20689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'. [ 855.286713][T20693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6984'. [ 855.399541][T20692] loop4: detected capacity change from 0 to 4096 [ 855.440162][T20692] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 855.514342][T20701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 855.528129][T20692] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 855.662856][ T9] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 855.670669][ T4275] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 855.676973][ T4275] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 855.742275][ T4275] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 855.769812][T13191] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 855.784932][ T4275] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 855.976539][T20719] loop1: detected capacity change from 0 to 256 [ 855.987457][T20717] VFS: could not find a valid V7 on nullb0. [ 856.050890][T20719] FAT-fs (loop1): Directory bread(block 64) failed [ 856.065780][T20719] FAT-fs (loop1): Directory bread(block 65) failed [ 856.073504][T20719] FAT-fs (loop1): Directory bread(block 66) failed [ 856.084209][T20719] FAT-fs (loop1): Directory bread(block 67) failed [ 856.092098][T20719] FAT-fs (loop1): Directory bread(block 68) failed [ 856.103180][T20719] FAT-fs (loop1): Directory bread(block 69) failed [ 856.111791][T20719] FAT-fs (loop1): Directory bread(block 70) failed [ 856.160748][T20719] FAT-fs (loop1): Directory bread(block 71) failed [ 856.204706][T20719] FAT-fs (loop1): Directory bread(block 72) failed [ 856.211386][T20719] FAT-fs (loop1): Directory bread(block 73) failed [ 856.377518][T20727] loop0: detected capacity change from 0 to 4096 [ 856.570305][T20735] loop3: detected capacity change from 0 to 4096 [ 856.603285][T20735] /dev/loop3: Can't open blockdev [ 857.110080][T20753] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7013'. [ 857.383688][T20769] loop1: detected capacity change from 0 to 256 [ 857.468252][T20769] FAT-fs (loop1): Directory bread(block 64) failed [ 857.500173][T20769] FAT-fs (loop1): Directory bread(block 65) failed [ 857.506832][T20769] FAT-fs (loop1): Directory bread(block 66) failed [ 857.562727][T20769] FAT-fs (loop1): Directory bread(block 67) failed [ 857.595091][T20769] FAT-fs (loop1): Directory bread(block 68) failed [ 857.601847][T20769] FAT-fs (loop1): Directory bread(block 69) failed [ 857.656534][T20769] FAT-fs (loop1): Directory bread(block 70) failed [ 857.684225][T20769] FAT-fs (loop1): Directory bread(block 71) failed [ 857.721081][T20769] FAT-fs (loop1): Directory bread(block 72) failed [ 857.756332][T20769] FAT-fs (loop1): Directory bread(block 73) failed [ 858.093158][T20795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7032'. [ 858.437283][T20809] SET target dimension over the limit! [ 858.656049][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7045'. [ 859.333174][T20851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7062'. [ 859.545974][T20855] loop1: detected capacity change from 0 to 1024 [ 859.606176][T20855] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.7064: lblock 2 mapped to illegal pblock 2 (length 1) [ 859.693278][T20833] loop2: detected capacity change from 0 to 32768 [ 859.709374][T20855] __quota_error: 4 callbacks suppressed [ 859.709389][T20855] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 859.723926][T20855] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.7064: lblock 0 mapped to illegal pblock 48 (length 1) [ 859.739634][T20855] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 859.750803][T20855] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.7064: Failed to acquire dquot type 0 [ 859.762579][T20855] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 859.773384][T20855] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.7064: mark_inode_dirty error [ 859.785787][T20833] XFS (loop2): Mounting V5 Filesystem [ 859.792079][T20855] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 859.803022][T20855] EXT4-fs (loop1): 1 orphan inode deleted [ 859.809025][T20855] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 859.818898][T13191] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 859.913875][T20833] XFS (loop2): Ending clean mount [ 859.978286][T13191] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 860.097089][T13191] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 0 [ 860.130834][ T4280] XFS (loop2): Unmounting Filesystem [ 860.171983][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 860.206575][ T11] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 860.287753][ T11] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 860.340784][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 0 [ 860.370858][ T4267] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 860.392815][T20883] loop3: detected capacity change from 0 to 256 [ 860.416373][ T4267] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 860.456251][ T4267] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 860.795443][T20894] netlink: 760 bytes leftover after parsing attributes in process `syz.4.7079'. [ 860.834448][T20897] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.7080'. [ 860.853019][T20898] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 860.925358][T20902] loop3: detected capacity change from 0 to 8 [ 860.993985][T20902] /dev/loop3: Can't open blockdev [ 861.368140][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 861.374526][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 861.633707][T16623] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 861.835699][T16623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 861.852360][T20940] netlink: 'syz.1.7097': attribute type 11 has an invalid length. [ 861.871845][T16623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 861.927463][T16623] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 861.975681][T16623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.024151][T16623] usb 1-1: Product: syz [ 862.047653][T16623] usb 1-1: Manufacturer: syz [ 862.091670][T16623] usb 1-1: SerialNumber: syz [ 862.121328][T16623] usb 1-1: config 0 descriptor?? [ 862.183037][T20951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:00) already exists on: batadv_slave_0 [ 862.295768][T20951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.326481][T16623] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input59 [ 862.546767][T18930] usb 1-1: USB disconnect, device number 38 [ 863.298780][T20991] loop2: detected capacity change from 0 to 256 [ 863.466188][T20991] FAT-fs (loop2): Directory bread(block 64) failed [ 863.500624][T20991] FAT-fs (loop2): Directory bread(block 65) failed [ 863.507301][T20991] FAT-fs (loop2): Directory bread(block 66) failed [ 863.557884][T20991] FAT-fs (loop2): Directory bread(block 67) failed [ 863.564555][T20991] FAT-fs (loop2): Directory bread(block 68) failed [ 863.615642][T20991] FAT-fs (loop2): Directory bread(block 69) failed [ 863.622420][T20991] FAT-fs (loop2): Directory bread(block 70) failed [ 863.661699][T20991] FAT-fs (loop2): Directory bread(block 71) failed [ 863.697539][T20991] FAT-fs (loop2): Directory bread(block 72) failed [ 863.731279][T21006] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7124'. [ 863.731273][T20991] FAT-fs (loop2): Directory bread(block 73) failed [ 863.829915][T21008] loop1: detected capacity change from 0 to 256 [ 863.913813][ T26] audit: type=1326 audit(46764984.227:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21013 comm="syz.3.7127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 864.022115][ T26] audit: type=1326 audit(46764984.280:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21013 comm="syz.3.7127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 864.110435][ T26] audit: type=1326 audit(46764984.280:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21013 comm="syz.3.7127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 864.240717][ T26] audit: type=1326 audit(2000000000.000:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21013 comm="syz.3.7127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 864.366947][ T26] audit: type=1326 audit(2000000000.000:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21013 comm="syz.3.7127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 864.937088][T21049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 865.786440][ T4270] Bluetooth: hci4: command 0x0405 tx timeout [ 866.060180][T21101] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.7165'. [ 866.156578][T21101] Process accounting resumed [ 866.393388][T21113] device wlan0 entered promiscuous mode [ 866.438836][T21113] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 866.851496][T21136] loop1: detected capacity change from 0 to 256 [ 866.980729][T21136] FAT-fs (loop1): Directory bread(block 64) failed [ 867.034731][T21136] FAT-fs (loop1): Directory bread(block 65) failed [ 867.041431][T21136] FAT-fs (loop1): Directory bread(block 66) failed [ 867.086791][T21136] FAT-fs (loop1): Directory bread(block 67) failed [ 867.122653][T21136] FAT-fs (loop1): Directory bread(block 68) failed [ 867.129230][T21136] FAT-fs (loop1): Directory bread(block 69) failed [ 867.163460][T21136] FAT-fs (loop1): Directory bread(block 70) failed [ 867.170434][T21148] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 867.190290][T21136] FAT-fs (loop1): Directory bread(block 71) failed [ 867.218690][T21136] FAT-fs (loop1): Directory bread(block 72) failed [ 867.248182][T21144] loop3: detected capacity change from 0 to 4096 [ 867.257515][T21136] FAT-fs (loop1): Directory bread(block 73) failed [ 867.288876][T21144] /dev/loop3: Can't open blockdev [ 867.347256][T21136] syz.1.7182: attempt to access beyond end of device [ 867.347256][T21136] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 867.458387][T21136] syz.1.7182: attempt to access beyond end of device [ 867.458387][T21136] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 867.485820][ T26] audit: type=1800 audit(2000000003.695:95): pid=21136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7182" name="freezer.state" dev="loop1" ino=1048620 res=0 errno=0 [ 867.657045][T21158] cgroup: Name too long [ 868.333341][T21182] SET target dimension over the limit! [ 868.349151][T21185] netlink: 'syz.3.7206': attribute type 5 has an invalid length. [ 868.521779][T21189] xt_ecn: cannot match TCP bits for non-tcp packets [ 868.542525][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7210'. [ 868.784595][T21142] loop4: detected capacity change from 0 to 32768 [ 868.891416][T21174] loop2: detected capacity change from 0 to 32768 [ 868.929567][T21174] XFS (loop2): Mounting V5 Filesystem [ 868.980563][T21142] XFS (loop4): Mounting V5 Filesystem [ 869.071529][T21174] XFS (loop2): Ending clean mount [ 869.150143][T21142] XFS (loop4): Ending clean mount [ 869.199470][T21142] XFS (loop4): Quotacheck needed: Please wait. [ 869.304491][T21142] XFS (loop4): Quotacheck: Done. [ 869.385937][ T4280] XFS (loop2): Unmounting Filesystem [ 869.416329][ T4275] XFS (loop4): Unmounting Filesystem [ 869.761908][T21242] netlink: 'syz.0.7229': attribute type 8 has an invalid length. [ 870.127681][T21258] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.168748][T21258] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.197152][T21258] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.216149][T21258] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.467239][T21272] netlink: 'syz.3.7243': attribute type 10 has an invalid length. [ 870.554973][T21272] wlan1: mtu less than device minimum [ 870.589849][T21272] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 871.261380][T21306] loop3: detected capacity change from 0 to 1024 [ 871.281319][T21306] EXT4-fs: inline encryption not supported [ 871.299291][T21306] /dev/loop3: Can't open blockdev [ 872.173192][T21349] ip6t_rpfilter: unknown options [ 872.678797][T21364] loop4: detected capacity change from 0 to 4096 [ 872.730902][T21364] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 872.818963][T21338] loop1: detected capacity change from 0 to 32768 [ 872.841388][T21364] ntfs3: loop4: failed to convert "c46c" to iso8859-6 [ 872.861241][T21338] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 872.920192][T21364] ntfs3: loop4: failed to convert "0030" to iso8859-6 [ 872.965530][T21364] ntfs3: loop4: failed to convert "0031" to iso8859-6 [ 873.231483][ T4739] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 873.607363][T18930] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 873.797508][T18930] usb 5-1: Using ep0 maxpacket: 16 [ 873.804273][T18930] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 873.834070][T18930] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 873.892333][T18930] usb 5-1: config 0 interface 0 has no altsetting 0 [ 873.921312][T18930] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 873.948610][T18930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.981454][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7317'. [ 873.996675][T18930] usb 5-1: config 0 descriptor?? [ 874.389749][T21435] loop0: detected capacity change from 0 to 16 [ 874.402453][ T4330] usb 5-1: USB disconnect, device number 27 [ 874.436200][T21435] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 874.618258][T21421] loop2: detected capacity change from 0 to 32768 [ 874.650576][T21445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.677220][T21421] (syz.2.7316,21421,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 874.728201][T21421] (syz.2.7316,21421,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 874.806812][T21421] JBD2: Ignoring recovery information on journal [ 874.893268][T21452] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.7331'. [ 875.001239][ T26] audit: type=1326 audit(2000000011.579:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21454 comm="syz.1.7329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f430219bf79 code=0x0 [ 875.034954][T21421] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 875.241387][ T4280] ocfs2: Unmounting device (7,2) on (node local) [ 875.541208][T16623] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 875.578938][T21482] ksmbd: Unknown IPC event: 4, ignore. [ 875.752222][T16623] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 875.769355][T16623] usb 1-1: config 0 has no interface number 0 [ 875.783349][T16623] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 875.803497][T16623] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 875.827316][T16623] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 875.893404][T16623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.901612][T16623] usb 1-1: Product: syz [ 875.922984][T16623] usb 1-1: Manufacturer: syz [ 875.927743][T16623] usb 1-1: SerialNumber: syz [ 875.938727][T21490] loop2: detected capacity change from 0 to 4096 [ 875.956995][T16623] usb 1-1: config 0 descriptor?? [ 875.965708][T21469] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 875.980237][T16623] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 876.001561][T21490] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 876.030167][T16623] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 876.218306][T21490] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 876.224614][T21490] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 876.387613][T15977] usb 1-1: USB disconnect, device number 39 [ 876.396497][ T4280] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 876.423098][T15977] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 876.436645][ T4280] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 876.465915][T15977] cyberjack 1-1:0.69: device disconnected [ 876.595299][T21508] tipc: Trying to set illegal importance in message [ 876.626382][T21510] IPv6: sit1: Disabled Multicast RS [ 876.663678][T21486] loop1: detected capacity change from 0 to 32768 [ 876.697247][T21486] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.7346 (21486) [ 876.784257][T21486] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 876.829162][T21486] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 876.860833][T21486] BTRFS info (device loop1): force zlib compression, level 3 [ 876.929881][T21486] BTRFS info (device loop1): force clearing of disk cache [ 876.969910][T21486] BTRFS info (device loop1): disabling tree log [ 876.988589][T21486] BTRFS info (device loop1): enabling disk space caching [ 877.026960][T21486] BTRFS info (device loop1): disk space caching is enabled [ 877.114989][T21524] loop0: detected capacity change from 0 to 16 [ 877.203578][T21524] erofs: (device loop0): mounted with root inode @ nid 36. [ 877.245379][T21524] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 877.484771][T21486] BTRFS info (device loop1): enabling ssd optimizations [ 877.640851][ T4267] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 878.160585][T16623] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 878.384258][T16623] usb 5-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 878.411403][T16623] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 878.434336][T16623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 878.500592][T16623] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 878.521184][T16623] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 878.534548][T16623] usb 5-1: Product: syz [ 878.538750][T16623] usb 5-1: Manufacturer: syz [ 878.545154][T16623] usb 5-1: SerialNumber: syz [ 878.569471][T16623] usb 5-1: config 0 descriptor?? [ 878.980186][T16623] usb 5-1: USB disconnect, device number 28 [ 879.025242][T21614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7397'. [ 879.155850][T21620] loop1: detected capacity change from 0 to 164 [ 879.230688][T21620] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 879.523785][T21562] Process accounting paused [ 879.528501][T21634] netlink: 'syz.3.7408': attribute type 4 has an invalid length. [ 879.963484][T21656] xt_TCPMSS: Only works on TCP SYN packets [ 880.192059][T16568] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 880.408656][T16568] usb 4-1: Using ep0 maxpacket: 8 [ 880.422356][T16568] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 880.447615][T16568] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.475345][T16568] usb 4-1: Product: syz [ 880.491116][T16568] usb 4-1: Manufacturer: syz [ 880.508913][T16568] usb 4-1: SerialNumber: syz [ 880.517419][T16568] usb 4-1: config 0 descriptor?? [ 880.535123][T16568] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 880.550181][T21684] loop2: detected capacity change from 0 to 2048 [ 880.579371][T21684] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 880.597535][T21684] syz.2.7433: attempt to access beyond end of device [ 880.597535][T21684] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 880.612254][T21685] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 880.635650][T21684] syz.2.7433: attempt to access beyond end of device [ 880.635650][T21684] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 880.739322][T21684] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 880.751784][T21684] NILFS (loop2): error -5 reading inode: ino=12 [ 880.922800][T16568] gspca_vc032x: reg_w err -71 [ 880.927607][T16568] vc032x: probe of 4-1:0.0 failed with error -71 [ 880.941908][T16568] usb 4-1: USB disconnect, device number 35 [ 881.283032][T21711] xt_socket: unknown flags 0x4c [ 881.451197][T15057] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 881.656180][T15057] usb 1-1: Using ep0 maxpacket: 32 [ 881.670683][T15057] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 881.692462][T15057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.725925][T15057] usb 1-1: Product: syz [ 881.730123][T15057] usb 1-1: Manufacturer: syz [ 881.769224][T15057] usb 1-1: SerialNumber: syz [ 881.936693][T21739] Process accounting paused [ 881.979855][T15057] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 881.994852][T15057] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 882.018844][T15057] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 882.186284][T15057] usb 1-1: USB disconnect, device number 40 [ 882.204536][T15057] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 882.242233][T15057] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 882.287740][T15057] visor 1-1:1.0: device disconnected [ 882.356210][T21758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7469'. [ 882.367965][T21758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7469'. [ 882.540431][T21769] MTD: Couldn't look up './bus': -15 [ 882.617484][ T26] audit: type=1326 audit(2000000019.568:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21770 comm="syz.3.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 882.679586][ T26] audit: type=1326 audit(2000000019.568:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21770 comm="syz.3.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 882.819745][ T26] audit: type=1326 audit(2000000019.788:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21770 comm="syz.3.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 882.904264][ T26] audit: type=1326 audit(2000000019.788:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21770 comm="syz.3.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774ed9bf79 code=0x7ffc0000 [ 883.248774][T21798] loop3: detected capacity change from 0 to 256 [ 883.268054][T21799] loop0: detected capacity change from 0 to 164 [ 883.307068][T21799] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 883.335317][ T4427] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 883.553574][T21807] loop0: detected capacity change from 0 to 128 [ 883.996640][T21830] loop2: detected capacity change from 0 to 512 [ 884.089985][T21836] loop0: detected capacity change from 0 to 512 [ 884.105490][T21830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 884.123360][T21838] loop3: detected capacity change from 0 to 164 [ 884.131497][T21830] ext4 filesystem being mounted at /1473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 884.151743][T21838] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 884.172338][T21836] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.7515: inode has both inline data and extents flags [ 884.314585][T21836] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.7515: couldn't read orphan inode 15 (err -117) [ 884.349128][T21830] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 884.352887][T21836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 884.409542][T21830] Quota error (device loop2): write_blk: dquota write failed [ 884.482130][T21830] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 884.511322][T21841] loop1: detected capacity change from 0 to 4096 [ 884.526308][T21830] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.7503: Failed to acquire dquot type 1 [ 884.574667][T21841] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 884.595692][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 884.637277][T21829] loop4: detected capacity change from 0 to 32768 [ 884.710127][T21829] (syz.4.7501,21829,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 884.768513][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 884.804823][T21829] (syz.4.7501,21829,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 884.918004][T21848] xt_policy: neither incoming nor outgoing policy selected [ 884.949747][T21829] JBD2: Ignoring recovery information on journal [ 885.098917][T21829] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 885.136588][T21855] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 885.432636][ T4275] ocfs2: Unmounting device (7,4) on (node local) [ 885.641037][T21875] xt_socket: unknown flags 0x4c [ 885.934784][T21881] loop0: detected capacity change from 0 to 4096 [ 885.996153][T21881] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 886.209712][T15057] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 886.405958][T15057] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 886.428437][T15057] usb 3-1: config 0 has no interface number 0 [ 886.434759][T15057] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 886.487217][T15057] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 886.526148][T15057] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 886.553723][T15057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.575952][T15057] usb 3-1: Product: syz [ 886.580170][T15057] usb 3-1: Manufacturer: syz [ 886.613879][T15057] usb 3-1: SerialNumber: syz [ 886.638977][T15057] usb 3-1: config 0 descriptor?? [ 886.644634][T21888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 886.679287][T15057] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 886.710234][T15057] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 886.787244][T21893] loop3: detected capacity change from 0 to 32768 [ 887.059169][T21918] loop4: detected capacity change from 0 to 4096 [ 887.093779][T15057] usb 3-1: USB disconnect, device number 41 [ 887.103048][T21918] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 887.136080][T15057] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 887.160032][T21925] netlink: 'syz.0.7547': attribute type 8 has an invalid length. [ 887.170651][T15057] cyberjack 3-1:0.69: device disconnected [ 887.184779][T21924] loop1: detected capacity change from 0 to 512 [ 887.193117][T21925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 887.250000][T21924] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 887.256553][T21924] EXT4-fs (loop1): mount failed [ 887.384630][ T4380] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 887.981572][T18930] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 888.172047][T18930] usb 5-1: Using ep0 maxpacket: 8 [ 888.178859][T18930] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 888.202833][T21958] loop3: detected capacity change from 0 to 4096 [ 888.211896][T18930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.232523][T18930] usb 5-1: config 0 has no interface number 0 [ 888.240686][T21958] /dev/loop3: Can't open blockdev [ 888.276401][T18930] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 888.308348][T18930] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 888.343252][T18930] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 888.371503][T18930] usb 5-1: config 0 interface 52 has no altsetting 0 [ 888.430070][T18930] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 888.457632][T18930] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 888.496045][T18930] usb 5-1: Product: syz [ 888.500260][T18930] usb 5-1: SerialNumber: syz [ 888.535287][T18930] usb 5-1: config 0 descriptor?? [ 888.570944][T21970] FAT-fs (loop1): Directory bread(block 64) failed [ 888.586251][T21970] FAT-fs (loop1): Directory bread(block 65) failed [ 888.625379][T21970] FAT-fs (loop1): Directory bread(block 66) failed [ 888.644575][T21970] FAT-fs (loop1): Directory bread(block 67) failed [ 888.673582][T21970] FAT-fs (loop1): Directory bread(block 68) failed [ 888.698715][T21970] FAT-fs (loop1): Directory bread(block 69) failed [ 888.724318][T21970] FAT-fs (loop1): Directory bread(block 70) failed [ 888.738624][T18930] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input60 [ 888.762674][T21970] FAT-fs (loop1): Directory bread(block 71) failed [ 888.772065][ T3623] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 888.805885][T21970] FAT-fs (loop1): Directory bread(block 72) failed [ 888.813566][ T3623] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 888.838690][T21970] FAT-fs (loop1): Directory bread(block 73) failed [ 888.865153][T21952] set_capacity_and_notify: 1 callbacks suppressed [ 888.865168][T21952] loop0: detected capacity change from 0 to 32768 [ 888.884141][ T4380] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 888.942840][T18930] usb 5-1: USB disconnect, device number 29 [ 888.959042][ T3623] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 889.055431][T21952] XFS (loop0): Mounting V5 Filesystem [ 889.189502][T21966] loop3: detected capacity change from 0 to 32768 [ 889.202323][T21966] /dev/loop3: Can't open blockdev [ 889.219108][T21952] XFS (loop0): Ending clean mount [ 889.278513][ T4427] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 889.336852][ T4278] XFS (loop0): Unmounting Filesystem [ 889.620287][T21993] netlink: 'syz.2.7579': attribute type 1 has an invalid length. [ 889.922711][T21998] loop2: detected capacity change from 0 to 4096 [ 889.991873][T21998] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 890.022086][T22008] netlink: 296 bytes leftover after parsing attributes in process `syz.4.7586'. [ 890.026769][T22009] loop0: detected capacity change from 0 to 128 [ 890.046589][T22009] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 890.323162][T22016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7589'. [ 890.908529][T22043] netlink: 'syz.1.7599': attribute type 1 has an invalid length. [ 890.984289][T22043] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7599'. [ 891.203607][T22057] loop3: detected capacity change from 0 to 64 [ 891.289543][ T4427] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 891.489272][T22067] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 891.585935][T22072] netlink: 'syz.1.7616': attribute type 4 has an invalid length. [ 891.651128][T22074] nvme_fabrics: unknown parameter or missing value '5y' in ctrl creation request [ 891.749970][T22078] IPv6: sit2: Disabled Multicast RS [ 892.044766][T22093] loop0: detected capacity change from 0 to 1024 [ 892.086110][T22093] EXT4-fs: inline encryption not supported [ 892.174867][T22093] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.7626: lblock 2 mapped to illegal pblock 2 (length 1) [ 892.219575][T22093] EXT4-fs (loop0): Remounting filesystem read-only [ 892.226473][T22093] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 892.235001][T22093] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.7626: lblock 0 mapped to illegal pblock 48 (length 1) [ 892.265579][T22093] EXT4-fs (loop0): Remounting filesystem read-only [ 892.273588][T22093] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 892.285845][T22093] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.7626: Failed to acquire dquot type 0 [ 892.306011][T22093] EXT4-fs (loop0): Remounting filesystem read-only [ 892.322725][T22093] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 892.339797][T22093] EXT4-fs (loop0): Remounting filesystem read-only [ 892.353560][T22093] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.7626: mark_inode_dirty error [ 892.414573][T22093] EXT4-fs (loop0): Remounting filesystem read-only [ 892.439302][T22093] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 892.482692][T22106] loop1: detected capacity change from 0 to 2048 [ 892.491347][T22093] EXT4-fs (loop0): 1 orphan inode deleted [ 892.497486][ T46] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 892.525989][T22093] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 892.562173][ T46] EXT4-fs (loop0): Remounting filesystem read-only [ 892.576928][T22106] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 892.608673][ T46] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 892.661756][T22106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 892.672062][T22093] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm syz.0.7626: lblock 1 mapped to illegal pblock 1 (length 1) [ 892.686739][ T46] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:3: Failed to release dquot type 0 [ 892.761890][ T46] EXT4-fs (loop0): Remounting filesystem read-only [ 892.772826][T22093] EXT4-fs (loop0): Remounting filesystem read-only [ 892.790855][T22114] netlink: 'syz.2.7634': attribute type 2 has an invalid length. [ 892.822365][T22117] loop3: detected capacity change from 0 to 256 [ 892.832013][T22093] Quota error (device loop0): find_next_id: Can't read quota tree block 1 [ 892.840777][T22114] netlink: 'syz.2.7634': attribute type 2 has an invalid length. [ 892.848521][T22114] netlink: 'syz.2.7634': attribute type 1 has an invalid length. [ 892.872643][T22117] /dev/loop3: Can't open blockdev [ 892.952911][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 892.953920][T22114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7634'. [ 892.983182][ T4278] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 893.016590][ T4278] EXT4-fs (loop0): Remounting filesystem read-only [ 893.033035][T22120] loop4: detected capacity change from 0 to 256 [ 893.049439][ T4278] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 893.073218][T22122] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7647'. [ 893.086430][ T4278] EXT4-fs (loop0): Remounting filesystem read-only [ 893.096575][T22122] tc_dump_action: action bad kind [ 893.127668][ T4278] EXT4-fs error (device loop0): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 893.141190][ T4278] EXT4-fs (loop0): Remounting filesystem read-only [ 893.181506][T22120] FAT-fs (loop4): Directory bread(block 64) failed [ 893.208379][T22120] FAT-fs (loop4): Directory bread(block 65) failed [ 893.256455][T22120] FAT-fs (loop4): Directory bread(block 66) failed [ 893.297339][T22120] FAT-fs (loop4): Directory bread(block 67) failed [ 893.325355][T22120] FAT-fs (loop4): Directory bread(block 68) failed [ 893.341986][T22120] FAT-fs (loop4): Directory bread(block 69) failed [ 893.351190][T22128] ceph: No source [ 893.355858][T22120] FAT-fs (loop4): Directory bread(block 70) failed [ 893.362609][T22120] FAT-fs (loop4): Directory bread(block 71) failed [ 893.401621][T22120] FAT-fs (loop4): Directory bread(block 72) failed [ 893.408196][T22120] FAT-fs (loop4): Directory bread(block 73) failed [ 893.562382][T22120] syz.4.7637: attempt to access beyond end of device [ 893.562382][T22120] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 893.594034][T22130] loop1: detected capacity change from 0 to 4096 [ 893.657099][T22120] syz.4.7637: attempt to access beyond end of device [ 893.657099][T22120] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 893.690991][T22130] ntfs: volume version 3.1. [ 893.710726][T22130] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 893.724588][T22140] netlink: 'syz.3.7645': attribute type 27 has an invalid length. [ 893.737413][ T26] audit: type=1800 audit(2000000031.252:101): pid=22120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7637" name="freezer.state" dev="loop4" ino=1048623 res=0 errno=0 [ 893.738593][T22130] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 893.868405][T22130] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 893.917221][T22130] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 893.985804][T22130] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 894.139955][T22148] loop4: detected capacity change from 0 to 1024 [ 894.169507][T22148] EXT4-fs: inline encryption not supported [ 894.208569][T22148] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.7650: lblock 2 mapped to illegal pblock 2 (length 1) [ 894.296982][T22148] EXT4-fs (loop4): Remounting filesystem read-only [ 894.303900][T22148] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.7650: lblock 0 mapped to illegal pblock 48 (length 1) [ 894.399255][T22148] EXT4-fs (loop4): Remounting filesystem read-only [ 894.418049][T22148] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.7650: Failed to acquire dquot type 0 [ 894.444846][T22148] EXT4-fs (loop4): Remounting filesystem read-only [ 894.457188][T22148] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 894.483203][T22148] EXT4-fs (loop4): Remounting filesystem read-only [ 894.492573][T22148] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.7650: mark_inode_dirty error [ 894.518159][T22148] EXT4-fs (loop4): Remounting filesystem read-only [ 894.524757][T22148] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 894.538846][T22148] EXT4-fs (loop4): 1 orphan inode deleted [ 894.545050][T22148] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 894.554326][ T30] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 894.583496][ T30] EXT4-fs (loop4): Remounting filesystem read-only [ 894.590300][ T30] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:2: Failed to release dquot type 0 [ 894.590324][T22148] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm syz.4.7650: lblock 1 mapped to illegal pblock 1 (length 1) [ 894.616561][ T30] EXT4-fs (loop4): Remounting filesystem read-only [ 894.623612][T22148] EXT4-fs (loop4): Remounting filesystem read-only [ 894.678669][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 894.688086][ T4275] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 894.724948][ T4275] EXT4-fs (loop4): Remounting filesystem read-only [ 894.741938][ T4275] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 894.747435][T22168] netlink: 'syz.2.7661': attribute type 3 has an invalid length. [ 894.761927][ T4275] EXT4-fs (loop4): Remounting filesystem read-only [ 894.770249][T22169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7660'. [ 894.782565][ T4275] EXT4-fs error (device loop4): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 894.784882][T22168] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7661'. [ 894.828564][ T4275] EXT4-fs (loop4): Remounting filesystem read-only [ 894.956132][T22168] Process accounting paused [ 894.996948][T22171] loop0: detected capacity change from 0 to 4096 [ 895.052743][T22171] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 895.177568][T22171] ntfs3: loop0: failed to convert "c46c" to iso8859-6 [ 895.226781][T22171] ntfs3: loop0: failed to convert "0030" to iso8859-6 [ 895.269850][T22171] ntfs3: loop0: failed to convert "0031" to iso8859-6 [ 895.482869][T22190] loop1: detected capacity change from 0 to 1024 [ 895.545016][T22190] EXT4-fs: inline encryption not supported [ 895.577485][T22190] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.7672: lblock 2 mapped to illegal pblock 2 (length 1) [ 895.727224][T22190] EXT4-fs (loop1): Remounting filesystem read-only [ 895.733912][T22190] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.7672: lblock 0 mapped to illegal pblock 48 (length 1) [ 895.807606][T22190] EXT4-fs (loop1): Remounting filesystem read-only [ 895.854001][T22190] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.7672: Failed to acquire dquot type 0 [ 895.877479][T22206] loop3: detected capacity change from 0 to 4096 [ 895.919796][T22206] /dev/loop3: Can't open blockdev [ 895.945051][T22190] EXT4-fs (loop1): Remounting filesystem read-only [ 895.973261][T22190] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 896.002163][T22190] EXT4-fs (loop1): Remounting filesystem read-only [ 896.039945][T22190] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.7672: mark_inode_dirty error [ 896.077574][T22190] EXT4-fs (loop1): Remounting filesystem read-only [ 896.104460][T22190] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 896.142610][T22190] EXT4-fs (loop1): 1 orphan inode deleted [ 896.154870][T22190] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 896.164793][ T46] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 896.231566][ T46] EXT4-fs (loop1): Remounting filesystem read-only [ 896.238160][ T46] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:3: Failed to release dquot type 0 [ 896.314444][T22190] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm syz.1.7672: lblock 1 mapped to illegal pblock 1 (length 1) [ 896.334502][ T46] EXT4-fs (loop1): Remounting filesystem read-only [ 896.404519][T22190] EXT4-fs (loop1): Remounting filesystem read-only [ 896.412982][T22224] loop4: detected capacity change from 0 to 1024 [ 896.481334][T22224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 896.551870][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 896.563088][T22224] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 896.576422][ T4267] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 896.612803][ T4267] EXT4-fs (loop1): Remounting filesystem read-only [ 896.653535][ T4267] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 896.666991][T22232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7692'. [ 896.676340][T22232] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7692'. [ 896.699915][ T4267] EXT4-fs (loop1): Remounting filesystem read-only [ 896.707104][ T4267] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 896.750849][ T4267] EXT4-fs (loop1): Remounting filesystem read-only [ 896.847956][T22224] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 896.881167][T22236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.925391][T22237] ALSA: mixer_oss: invalid OSS volume '~¢)–„VÄ]Qå' [ 897.029395][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 897.110076][T22245] netlink: 'syz.1.7699': attribute type 10 has an invalid length. [ 897.208423][T22245] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 897.352765][T22255] autofs4:pid:22255:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 897.411105][T22257] loop2: detected capacity change from 0 to 1024 [ 897.447843][T22257] EXT4-fs: inline encryption not supported [ 897.500669][T22257] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.7702: lblock 2 mapped to illegal pblock 2 (length 1) [ 897.517234][T22257] EXT4-fs (loop2): Remounting filesystem read-only [ 897.524025][T22257] __quota_error: 14 callbacks suppressed [ 897.524035][T22257] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 897.609756][T22257] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.7702: lblock 0 mapped to illegal pblock 48 (length 1) [ 897.650515][T22257] EXT4-fs (loop2): Remounting filesystem read-only [ 897.657080][T22257] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 897.706710][T22257] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.7702: Failed to acquire dquot type 0 [ 897.747787][T22257] EXT4-fs (loop2): Remounting filesystem read-only [ 897.773200][T22257] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 897.804554][T22257] EXT4-fs (loop2): Remounting filesystem read-only [ 897.814651][T22277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 897.834030][T22257] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.7702: mark_inode_dirty error [ 897.907235][T22257] EXT4-fs (loop2): Remounting filesystem read-only [ 897.916789][T22279] netlink: 'syz.1.7713': attribute type 1 has an invalid length. [ 897.924709][T22257] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 897.955372][T22257] EXT4-fs (loop2): 1 orphan inode deleted [ 897.966781][T22257] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 897.989466][ T46] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 898.030792][T22284] loop4: detected capacity change from 0 to 512 [ 898.041489][ T46] EXT4-fs (loop2): Remounting filesystem read-only [ 898.071125][T22284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 898.076219][ T46] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 898.122303][T22257] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm syz.2.7702: lblock 1 mapped to illegal pblock 1 (length 1) [ 898.136544][ T46] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:3: Failed to release dquot type 0 [ 898.141054][T22284] EXT4-fs (loop4): 1 truncate cleaned up [ 898.178867][ T46] EXT4-fs (loop2): Remounting filesystem read-only [ 898.202477][T22257] EXT4-fs (loop2): Remounting filesystem read-only [ 898.209071][T22257] Quota error (device loop2): find_next_id: Can't read quota tree block 1 [ 898.227290][T22287] netlink: 'syz.0.7716': attribute type 10 has an invalid length. [ 898.297263][T22284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 898.314728][T22287] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 898.375733][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 898.403711][ T4280] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 898.459707][ T4280] EXT4-fs (loop2): Remounting filesystem read-only [ 898.475026][ T4280] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 898.509223][ T4280] EXT4-fs (loop2): Remounting filesystem read-only [ 898.534224][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 898.544090][ T4280] EXT4-fs error (device loop2): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 898.588408][ T4280] EXT4-fs (loop2): Remounting filesystem read-only [ 898.803885][T22309] ipt_CLUSTERIP: bad local_nodes[0] 0 [ 898.820812][T22308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.969045][T22313] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7728'. [ 899.304799][T22332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.352270][T22332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.385625][T22332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.649721][T22343] loop2: detected capacity change from 0 to 4096 [ 899.669695][T22343] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 899.684910][T22345] binder: 22344:22345 ioctl c018620c 200000000080 returned -22 [ 899.788049][T22349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.801207][T22343] ntfs3: loop2: failed to convert "c46c" to iso8859-6 [ 899.842524][T22343] ntfs3: loop2: failed to convert "0030" to iso8859-6 [ 899.852959][T22343] ntfs3: loop2: failed to convert "0031" to iso8859-6 [ 900.114412][T22360] netlink: 'syz.3.7751': attribute type 4 has an invalid length. [ 900.515384][T22379] netlink: 'syz.4.7761': attribute type 6 has an invalid length. [ 900.637984][T22387] loop0: detected capacity change from 0 to 256 [ 900.681745][T22387] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 900.724023][T22390] sctp: [Deprecated]: syz.4.7767 (pid 22390) Use of int in maxseg socket option. [ 900.724023][T22390] Use struct sctp_assoc_value instead [ 900.792670][T22381] loop2: detected capacity change from 0 to 8192 [ 900.884684][T22381] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 901.002971][T22381] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 901.028189][T22381] REISERFS (device loop2): using ordered data mode [ 901.080080][T22381] reiserfs: using flush barriers [ 901.122035][T22381] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 901.197866][T22381] REISERFS (device loop2): checking transaction log (loop2) [ 901.207035][T22407] xt_addrtype: ipv6 does not support BROADCAST matching [ 901.232896][T22408] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 901.255101][T22381] REISERFS (device loop2): Using rupasov hash to sort names [ 901.292442][T22381] REISERFS (device loop2): using 3.5.x disk format [ 901.326678][T22381] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 901.368265][T22381] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 901.409395][T22381] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 901.437052][T22414] netlink: 'syz.4.7779': attribute type 10 has an invalid length. [ 901.453743][T22381] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 901.487533][T22381] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 901.516125][T22381] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 901.560419][T22381] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 901.572454][T22416] loop0: detected capacity change from 0 to 2048 [ 901.579947][T22414] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 901.610781][T22416] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 902.445354][T22454] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (253) [ 902.477507][T22456] loop3: detected capacity change from 0 to 64 [ 902.558597][ T4427] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 902.675268][T22463] wg1 speed is unknown, defaulting to 1000 [ 902.764443][T22463] wg1 speed is unknown, defaulting to 1000 [ 902.855623][T22463] wg1 speed is unknown, defaulting to 1000 [ 902.901595][T22463] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 902.973063][T22463] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 903.096989][T22463] wg1 speed is unknown, defaulting to 1000 [ 903.149113][T22463] wg1 speed is unknown, defaulting to 1000 [ 903.190520][T22463] wg1 speed is unknown, defaulting to 1000 [ 903.213443][T22485] loop3: detected capacity change from 0 to 256 [ 903.220609][T22485] exfat: Deprecated parameter 'namecase' [ 903.240236][T22463] wg1 speed is unknown, defaulting to 1000 [ 903.252045][T22488] netlink: 'syz.4.7816': attribute type 3 has an invalid length. [ 903.266496][T22463] wg1 speed is unknown, defaulting to 1000 [ 903.273333][T22485] /dev/loop3: Can't open blockdev [ 903.459404][T22493] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 903.505992][T22493] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 903.597905][T22500] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 904.024334][T15059] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 904.216651][T15059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 904.268177][T15059] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 904.291643][T15059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 904.327380][T15059] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 904.356472][T15059] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 904.381069][T15059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.392720][ T26] audit: type=1326 audit(2000000042.432:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22537 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 904.443056][T15059] usb 4-1: config 0 descriptor?? [ 904.473596][ T26] audit: type=1326 audit(2000000042.474:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22537 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 904.502463][T22542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7843'. [ 904.527048][T22542] netlink: 'syz.0.7843': attribute type 1 has an invalid length. [ 904.546064][ T26] audit: type=1326 audit(2000000042.474:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22537 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 904.643903][T15059] hdpvr 4-1:0.0: firmware version 0xd dated [ 904.652593][ T26] audit: type=1326 audit(2000000042.474:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22537 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 904.805872][T22555] vivid-000: ================= START STATUS ================= [ 904.841596][T15059] hdpvr 4-1:0.0: device init failed [ 904.846878][T15059] hdpvr: probe of 4-1:0.0 failed with error -12 [ 904.857092][T22555] vivid-000: Radio HW Seek Mode: Bounded [ 904.873164][T15059] usb 4-1: USB disconnect, device number 36 [ 904.910884][T22555] vivid-000: Radio Programmable HW Seek: false [ 904.946099][T22555] vivid-000: RDS Rx I/O Mode: Block I/O [ 904.951878][T22555] vivid-000: Generate RBDS Instead of RDS: false [ 904.977053][T22555] vivid-000: RDS Reception: true [ 904.988760][T22555] vivid-000: RDS Program Type: 0 inactive [ 904.995184][T22555] vivid-000: RDS PS Name: inactive [ 905.000564][T22555] vivid-000: RDS Radio Text: inactive [ 905.006375][T22555] vivid-000: RDS Traffic Announcement: false inactive [ 905.031106][T22560] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7852'. [ 905.039715][T22555] vivid-000: RDS Traffic Program: false inactive [ 905.049470][T22555] vivid-000: RDS Music: false inactive [ 905.065316][T22555] vivid-000: ================== END STATUS ================== [ 905.508132][T15059] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 905.521975][T22585] loop2: detected capacity change from 0 to 64 [ 905.674619][T22590] loop3: detected capacity change from 0 to 2048 [ 905.705955][T15059] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 905.729153][T15059] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.761638][T15059] usb 1-1: config 0 has no interface number 0 [ 905.773103][T22590] loop3: p1 < > p4 < > [ 905.783053][T15059] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 905.807382][T22596] loop2: detected capacity change from 0 to 256 [ 905.810818][T15059] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 905.852994][T15059] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 905.888429][T15059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.916784][T22596] FAT-fs (loop2): Directory bread(block 64) failed [ 905.927694][T15059] usb 1-1: Product: syz [ 905.931900][T15059] usb 1-1: Manufacturer: syz [ 905.936523][T15059] usb 1-1: SerialNumber: syz [ 905.946686][T22596] FAT-fs (loop2): Directory bread(block 65) failed [ 905.953333][T22596] FAT-fs (loop2): Directory bread(block 66) failed [ 905.987263][T15059] usb 1-1: config 0 descriptor?? [ 906.003652][T22596] FAT-fs (loop2): Directory bread(block 67) failed [ 906.038541][T22596] FAT-fs (loop2): Directory bread(block 68) failed [ 906.067011][T22596] FAT-fs (loop2): Directory bread(block 69) failed [ 906.090965][T22596] FAT-fs (loop2): Directory bread(block 70) failed [ 906.097558][T22596] FAT-fs (loop2): Directory bread(block 71) failed [ 906.111376][T22596] FAT-fs (loop2): Directory bread(block 72) failed [ 906.119619][T22596] FAT-fs (loop2): Directory bread(block 73) failed [ 906.318268][T22606] MTD: Couldn't look up './bus': -15 [ 906.341293][T22609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7877'. [ 906.390124][T22609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7877'. [ 906.403413][T15059] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 906.430457][T15059] usb 1-1: USB disconnect, device number 41 [ 906.564628][T22616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7880'. [ 906.732002][T22626] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 906.746290][T22626] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 906.818122][T22628] siw: device registration error -23 [ 906.838655][T22630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7897'. [ 906.847863][T22630] netlink: 'syz.1.7897': attribute type 1 has an invalid length. [ 907.096173][T22642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7892'. [ 907.117367][T22642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7892'. [ 907.198927][ T26] audit: type=1326 audit(2000000045.382:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22643 comm="syz.0.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66df59bf79 code=0x7ffc0000 [ 907.272994][ T26] audit: type=1326 audit(2000000045.414:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22643 comm="syz.0.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f66df59bf79 code=0x7ffc0000 [ 907.332146][ T26] audit: type=1326 audit(2000000045.414:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22643 comm="syz.0.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66df59bf79 code=0x7ffc0000 [ 907.383428][ T26] audit: type=1326 audit(2000000045.414:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22643 comm="syz.0.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66df59bf79 code=0x7ffc0000 [ 907.559906][T22660] siw: device registration error -23 [ 908.140381][T22689] netdevsim netdevsim3: Direct firmware load for þ failed with error -2 [ 908.162583][T22689] netdevsim netdevsim3: Falling back to sysfs fallback for: þ [ 908.264793][T22696] siw: device registration error -23 [ 908.284415][T22694] Process accounting resumed [ 908.527996][T15059] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 908.549977][T22712] vivid-001: ================= START STATUS ================= [ 908.560391][T22712] vivid-001: Radio HW Seek Mode: Bounded [ 908.566091][T22712] vivid-001: Radio Programmable HW Seek: false [ 908.573631][T22712] vivid-001: RDS Rx I/O Mode: Block I/O [ 908.584427][T22712] vivid-001: Generate RBDS Instead of RDS: false [ 908.592900][T22712] vivid-001: RDS Reception: true [ 908.600871][T22712] vivid-001: RDS Program Type: 0 inactive [ 908.607848][T22712] vivid-001: RDS PS Name: inactive [ 908.613212][T22712] vivid-001: RDS Radio Text: inactive [ 908.622712][T22712] vivid-001: RDS Traffic Announcement: false inactive [ 908.630721][T22712] vivid-001: RDS Traffic Program: false inactive [ 908.640273][T22712] vivid-001: RDS Music: false inactive [ 908.647455][T22712] vivid-001: ================== END STATUS ================== [ 908.708729][T15059] usb 2-1: Using ep0 maxpacket: 32 [ 908.718602][T15059] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 908.744248][T15059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.760286][T15059] usb 2-1: Product: syz [ 908.769680][T15059] usb 2-1: Manufacturer: syz [ 908.778737][T15059] usb 2-1: SerialNumber: syz [ 908.850497][T22720] xt_policy: neither incoming nor outgoing policy selected [ 908.925124][T22724] loop4: detected capacity change from 0 to 64 [ 908.931617][T22723] libceph: resolve '0' (ret=-3): failed [ 909.027411][T15059] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 909.065943][T15059] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 909.090183][T15059] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 909.227978][T18930] usb 2-1: USB disconnect, device number 34 [ 909.257885][T18930] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 909.302461][T18930] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 909.335555][T18930] visor 2-1:1.0: device disconnected [ 909.694859][T22750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7946'. [ 909.723919][T22750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7946'. [ 909.770545][T22750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7946'. [ 909.812643][T22754] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 909.845556][T22754] netdevsim netdevsim0: Falling back to sysfs fallback for: þ [ 909.859349][T22756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7949'. [ 910.029047][T22762] netlink: 'syz.4.7953': attribute type 8 has an invalid length. [ 910.042624][T22762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 910.101813][T22740] loop2: detected capacity change from 0 to 32768 [ 910.120502][T22760] loop1: detected capacity change from 0 to 4096 [ 910.135152][T22740] [ 910.135152][T22740] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 910.135152][T22740] [ 910.200053][T22740] jfs_rename: dtInsert returned -EIO [ 910.325277][ T4280] [ 910.325277][ T4280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 910.325277][ T4280] [ 910.361588][ T4280] [ 910.361588][ T4280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 910.361588][ T4280] [ 910.503666][T22774] loop2: detected capacity change from 0 to 512 [ 910.530014][T22769] Process accounting resumed [ 910.649707][T22774] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 910.667127][T22774] EXT4-fs (loop2): mount failed [ 910.915920][T22787] netlink: 'syz.1.7962': attribute type 10 has an invalid length. [ 910.962027][T22787] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 910.971657][T22792] syz.3.7964 (22792): /proc/22788/oom_adj is deprecated, please use /proc/22788/oom_score_adj instead. [ 911.071434][T18930] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 911.179464][T22801] netlink: 'syz.1.7971': attribute type 1 has an invalid length. [ 911.290449][T18930] usb 5-1: Using ep0 maxpacket: 32 [ 911.299229][T18930] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 911.346358][T18930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.376294][T18930] usb 5-1: Product: syz [ 911.380509][T18930] usb 5-1: Manufacturer: syz [ 911.405115][T18930] usb 5-1: SerialNumber: syz [ 911.480933][T22811] libceph: resolve '0' (ret=-3): failed [ 911.613126][T18930] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 911.643278][T18930] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 911.672084][T18930] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 911.833889][T16623] usb 5-1: USB disconnect, device number 30 [ 911.852769][T22827] loop1: detected capacity change from 0 to 128 [ 911.854666][T16623] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 911.890919][T22827] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 911.904280][T16623] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 911.927262][T16623] visor 5-1:1.0: device disconnected [ 912.099857][T18930] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 912.311485][T18930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 912.331873][T18930] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 912.374475][T18930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 912.394874][T18930] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 912.444449][T18930] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 912.450987][T22851] loop1: detected capacity change from 0 to 64 [ 912.470207][T18930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.493451][T22853] loop4: detected capacity change from 0 to 1024 [ 912.501951][T18930] usb 1-1: config 0 descriptor?? [ 912.582613][T22851] Trying to free block not in datazone [ 912.604903][T22851] Trying to free block not in datazone [ 912.627806][T22853] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 912.629328][T22851] Trying to free block not in datazone [ 912.665737][T22857] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 912.711773][T18930] hdpvr 1-1:0.0: firmware version 0xd dated [ 912.745450][ T9] hfsplus: b-tree write err: -5, ino 4 [ 912.887761][T22859] loop2: detected capacity change from 0 to 4096 [ 912.924333][T18930] hdpvr 1-1:0.0: device init failed [ 912.932701][T18930] hdpvr: probe of 1-1:0.0 failed with error -12 [ 912.982800][T18930] usb 1-1: USB disconnect, device number 42 [ 913.036046][T22865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8014'. [ 913.452564][T16568] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 913.521333][T22886] loop4: detected capacity change from 0 to 64 [ 913.564730][T22886] Trying to free block not in datazone [ 913.576583][T22886] Trying to free block not in datazone [ 913.604197][T22886] Trying to free block not in datazone [ 913.654580][T16568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 913.672314][T16568] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 913.710084][T16568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.724205][T22894] netlink: 'syz.0.8018': attribute type 2 has an invalid length. [ 913.739533][T16568] usb 3-1: config 0 descriptor?? [ 913.810468][T22894] netlink: 'syz.0.8018': attribute type 2 has an invalid length. [ 913.859321][T22894] netlink: 'syz.0.8018': attribute type 1 has an invalid length. [ 913.872338][T22900] loop4: detected capacity change from 0 to 256 [ 913.904085][T22894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8018'. [ 913.926150][T22901] netlink: 'syz.3.8020': attribute type 10 has an invalid length. [ 913.940823][T16568] ath6kl: Failed to submit usb control message: -71 [ 913.947519][T16568] ath6kl: unable to send the bmi data to the device: -71 [ 913.966510][T16568] ath6kl: Unable to send get target info: -71 [ 913.974179][T16568] ath6kl: Failed to init ath6kl core: -71 [ 913.981798][T22900] FAT-fs (loop4): Directory bread(block 64) failed [ 913.988595][T22900] FAT-fs (loop4): Directory bread(block 65) failed [ 914.024719][T22900] FAT-fs (loop4): Directory bread(block 66) failed [ 914.031369][T22900] FAT-fs (loop4): Directory bread(block 67) failed [ 914.059182][T22901] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 914.067596][T22900] FAT-fs (loop4): Directory bread(block 68) failed [ 914.078849][T16568] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 914.098287][T16568] usb 3-1: USB disconnect, device number 42 [ 914.104380][T22900] FAT-fs (loop4): Directory bread(block 69) failed [ 914.127976][T22900] FAT-fs (loop4): Directory bread(block 70) failed [ 914.157850][T22900] FAT-fs (loop4): Directory bread(block 71) failed [ 914.178060][T22900] FAT-fs (loop4): Directory bread(block 72) failed [ 914.184651][T22900] FAT-fs (loop4): Directory bread(block 73) failed [ 914.363333][T22909] netlink: 'syz.3.8025': attribute type 4 has an invalid length. [ 914.456325][T22913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8037'. [ 914.931945][T22934] netlink: 'syz.0.8035': attribute type 10 has an invalid length. [ 914.977053][T22938] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 915.006638][T22934] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 915.198418][T22944] IPv6: sit2: Disabled Multicast RS [ 915.343118][T22949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8043'. [ 915.420313][T22924] loop4: detected capacity change from 0 to 32768 [ 915.449018][T22924] [ 915.449018][T22924] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 915.449018][T22924] [ 915.484307][T22924] jfs_rename: dtInsert returned -EIO [ 915.631001][ T4275] [ 915.631001][ T4275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 915.631001][ T4275] [ 915.647080][ T4275] [ 915.647080][ T4275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 915.647080][ T4275] [ 915.896239][T22969] netlink: 'syz.2.8054': attribute type 10 has an invalid length. [ 916.001394][T22969] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 916.434308][T22992] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8063'. [ 916.454338][T22992] tc_dump_action: action bad kind [ 916.510046][T22987] loop0: detected capacity change from 0 to 4096 [ 916.548709][T22987] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 916.589292][T22968] loop1: detected capacity change from 0 to 32768 [ 916.640134][T22987] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 916.684259][T22968] XFS (loop1): Mounting V5 Filesystem [ 916.863046][T22968] XFS (loop1): Ending clean mount [ 916.976649][ T4267] XFS (loop1): Unmounting Filesystem [ 917.149047][T18930] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 917.372842][T18930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 917.395016][T18930] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 917.419473][T18930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 917.440800][T18930] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 917.461987][T18930] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 917.486076][T18930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.516203][T18930] usb 3-1: config 0 descriptor?? [ 917.604113][ T26] audit: type=1326 audit(2000000056.300:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.1.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 917.626497][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.706333][ T26] audit: type=1326 audit(2000000056.342:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.1.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 917.754035][ T26] audit: type=1326 audit(2000000056.342:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.1.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 917.756378][T18930] hdpvr 3-1:0.0: firmware version 0xd dated [ 917.803288][ T26] audit: type=1326 audit(2000000056.342:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.1.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 917.891531][ T26] audit: type=1326 audit(2000000056.342:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.1.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 917.957504][T23020] loop0: detected capacity change from 0 to 32768 [ 917.964519][ T26] audit: type=1326 audit(2000000056.342:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.1.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 917.989860][T18930] hdpvr 3-1:0.0: device init failed [ 917.995146][T18930] hdpvr: probe of 3-1:0.0 failed with error -12 [ 918.025453][T18930] usb 3-1: USB disconnect, device number 43 [ 918.037570][ T26] audit: type=1326 audit(2000000056.342:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.1.8080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f430219bf79 code=0x7ffc0000 [ 918.067899][T23020] XFS (loop0): Mounting V5 Filesystem [ 918.169373][T23020] XFS (loop0): Ending clean mount [ 918.242545][ T4278] XFS (loop0): Unmounting Filesystem [ 918.395282][T23059] program syz.4.8091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 918.415285][T23059] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 918.582822][T23067] netlink: 'syz.4.8092': attribute type 10 has an invalid length. [ 918.660178][T23067] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 918.968617][ T26] audit: type=1326 audit(2000000057.739:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23083 comm="syz.4.8101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 919.005317][T23086] program syz.0.8103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 919.056841][ T26] audit: type=1326 audit(2000000057.791:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23083 comm="syz.4.8101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 919.103847][T23086] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 919.158983][ T26] audit: type=1326 audit(2000000057.791:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23083 comm="syz.4.8101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f906699bf79 code=0x7ffc0000 [ 919.596778][T15059] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 919.776207][T23117] autofs4:pid:23117:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 919.782331][T15059] usb 1-1: Using ep0 maxpacket: 16 [ 919.810828][T15059] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 919.847962][T15059] usb 1-1: config 0 has no interface number 0 [ 919.856779][T15059] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 919.893933][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 919.900285][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 919.911099][T15059] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 919.969458][T15059] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 919.977722][T15059] usb 1-1: Product: syz [ 920.000816][T15059] usb 1-1: SerialNumber: syz [ 920.015362][T15059] usb 1-1: config 0 descriptor?? [ 920.038749][T15059] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input64 [ 920.236503][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 920.246446][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 920.263845][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 920.271042][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 920.280613][T15059] usb 1-1: USB disconnect, device number 43 [ 920.287524][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 920.294513][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 920.323708][T15059] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 920.820124][T23127] loop1: detected capacity change from 0 to 32768 [ 920.915971][T23127] [ 920.915971][T23127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 920.915971][T23127] [ 920.974664][T23162] netlink: 'syz.3.8139': attribute type 10 has an invalid length. [ 920.989490][T23160] netlink: 'syz.0.8138': attribute type 1 has an invalid length. [ 921.001915][T23127] jfs_rename: dtInsert returned -EIO [ 921.087717][ T4267] [ 921.087717][ T4267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 921.087717][ T4267] [ 921.104072][ T4267] [ 921.104072][ T4267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 921.104072][ T4267] [ 921.447714][T23178] binder: 23177:23178 ioctl c018620c 200000000080 returned -22 [ 921.812135][T23193] netlink: 'syz.2.8154': attribute type 10 has an invalid length. [ 921.816698][ T4270] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 921.829399][T23186] loop1: detected capacity change from 0 to 4096 [ 921.877982][T23186] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 921.947719][T23186] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 922.496631][T23220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8167'. [ 922.554902][T23224] loop4: detected capacity change from 0 to 8 [ 922.628072][T23226] loop0: detected capacity change from 0 to 2048 [ 922.647988][T23228] netlink: 'syz.3.8172': attribute type 10 has an invalid length. [ 922.698379][T23226] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 922.845407][T23233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.909901][T23233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.931915][T23233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 923.402976][T23257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.456479][T23257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 923.483278][T23257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 923.556597][T23259] loop1: detected capacity change from 0 to 2048 [ 923.611530][T23259] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 923.693915][T23265] loop2: detected capacity change from 0 to 2048 [ 923.744634][T23265] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 923.778127][T23265] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 923.819203][T23265] Process accounting resumed [ 923.838470][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 924.064196][T23282] loop1: detected capacity change from 0 to 256 [ 924.187151][T23282] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 924.333087][T23292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8202'. [ 924.562423][T23300] loop4: detected capacity change from 0 to 2048 [ 924.648835][T23300] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 924.723333][T23300] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 924.788710][T23284] loop3: detected capacity change from 0 to 32768 [ 924.796584][T23284] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.8198 (23284) [ 924.868831][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 924.887341][T23284] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 924.936143][T23284] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 924.981094][T23284] BTRFS info (device loop3): force zlib compression, level 3 [ 925.010147][T23284] BTRFS info (device loop3): force clearing of disk cache [ 925.049721][T23284] BTRFS info (device loop3): disabling tree log [ 925.083697][T23284] BTRFS info (device loop3): enabling disk space caching [ 925.110008][T23284] BTRFS info (device loop3): disk space caching is enabled [ 925.255734][T23298] loop1: detected capacity change from 0 to 32768 [ 925.270530][T23298] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.8216 (23298) [ 925.319869][T23298] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 925.340207][T23298] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 925.378999][T23298] BTRFS info (device loop1): using free space tree [ 925.438025][T23284] BTRFS info (device loop3): enabling ssd optimizations [ 925.471167][T23284] BTRFS warning (device loop3: state M): Skipping commit of aborted transaction. [ 925.508406][T23284] ------------[ cut here ]------------ [ 925.523900][T23284] WARNING: CPU: 0 PID: 23284 at fs/btrfs/transaction.c:1997 btrfs_commit_transaction+0x3355/0x3c30 [ 925.534789][T23284] Modules linked in: [ 925.538717][T23284] CPU: 0 PID: 23284 Comm: syz.3.8198 Not tainted syzkaller #0 [ 925.546363][T23284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 925.556572][T23284] RIP: 0010:btrfs_commit_transaction+0x3355/0x3c30 [ 925.563186][T23284] Code: e8 00 ac 18 fe be 01 00 00 00 48 89 df e8 33 1b a7 00 e9 56 d2 ff ff e8 e9 ab 18 fe 48 c7 c7 40 78 cf 8a 89 de e8 eb 1b e4 fd <0f> 0b e9 bb f8 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c f2 cd [ 925.582882][T23284] RSP: 0018:ffffc9000e72f7e0 EFLAGS: 00010246 [ 925.589034][T23284] RAX: a9d7ca094a074500 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 925.597052][T23284] RDX: ffffc9000ee6a000 RSI: 000000000000a17d RDI: 000000000000a17e [ 925.605098][T23284] RBP: ffffc9000e72fb08 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 925.613141][T23284] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffff88807898c000 [ 925.621184][T23284] R13: fffff52001ce5f20 R14: dffffc0000000000 R15: 0000000000000000 [ 925.629258][T23284] FS: 00007f774fba16c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 925.638259][T23284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 925.644889][T23284] CR2: 00007f774ede96c0 CR3: 0000000076669000 CR4: 00000000003506f0 [ 925.652938][T23284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 925.660992][T23284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 925.669037][T23284] Call Trace: [ 925.672345][T23284] [ 925.675367][T23284] ? btrfs_commit_transaction+0x192/0x3c30 [ 925.681229][T23284] ? join_transaction+0xb66/0xd20 [ 925.686355][T23284] ? btrfs_commit_transaction_async+0x470/0x470 [ 925.692647][T23284] ? do_raw_spin_unlock+0x11d/0x230 [ 925.697928][T23284] ? _raw_spin_unlock+0x24/0x40 [ 925.702854][T23284] ? join_transaction+0xb66/0xd20 [ 925.708009][T23284] ? btrfs_record_root_in_trans+0x8d/0x180 [ 925.713924][T23284] ? start_transaction+0x469/0x11c0 [ 925.719187][T23284] btrfs_set_free_space_cache_v1_active+0x6d/0x1c0 [ 925.725778][T23284] btrfs_remount+0x1036/0x14b0 [ 925.730613][T23284] ? btrfs_statfs+0x1890/0x1890 [ 925.735545][T23284] ? dentry_lru_isolate+0x2e0/0x2e0 [ 925.740831][T23284] ? hook_sb_remount+0x19/0xc0 [ 925.745637][T23284] ? bpf_lsm_sb_remount+0x5/0x10 [ 925.750669][T23284] reconfigure_super+0x219/0x8a0 [ 925.755663][T23284] path_mount+0xe13/0x1020 [ 925.760160][T23284] ? kmem_cache_free+0xf7/0x290 [ 925.765077][T23284] __se_sys_mount+0x2e3/0x3d0 [ 925.769835][T23284] ? __x64_sys_mount+0xc0/0xc0 [ 925.774644][T23284] ? lockdep_hardirqs_on+0x94/0x140 [ 925.779907][T23284] ? __x64_sys_mount+0x1c/0xc0 [ 925.784723][T23284] do_syscall_64+0x4c/0xa0 [ 925.789217][T23284] ? clear_bhb_loop+0x60/0xb0 [ 925.793930][T23284] ? clear_bhb_loop+0x60/0xb0 [ 925.798690][T23284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 925.804624][T23284] RIP: 0033:0x7f774ed9bf79 [ 925.809110][T23284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.828804][T23284] RSP: 002b:00007f774fba1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 925.837302][T23284] RAX: ffffffffffffffda RBX: 00007f774f015fa0 RCX: 00007f774ed9bf79 [ 925.845307][T23284] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 925.853343][T23284] RBP: 00007f774ee327e0 R08: 0000000000000000 R09: 0000000000000000 [ 925.861374][T23284] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000000 [ 925.869410][T23284] R13: 00007f774f016038 R14: 00007f774f015fa0 R15: 00007fffdbb60cd8 [ 925.877466][T23284] [ 925.880514][T23284] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 925.887818][T23284] CPU: 0 PID: 23284 Comm: syz.3.8198 Not tainted syzkaller #0 [ 925.895315][T23284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 925.905399][T23284] Call Trace: [ 925.908691][T23284] [ 925.911635][T23284] dump_stack_lvl+0x188/0x24e [ 925.916339][T23284] ? memcpy+0x3c/0x60 [ 925.920332][T23284] ? show_regs_print_info+0x12/0x12 [ 925.925543][T23284] ? load_image+0x400/0x400 [ 925.930072][T23284] panic+0x2e5/0x730 [ 925.933984][T23284] ? bpf_jit_dump+0xd0/0xd0 [ 925.938512][T23284] __warn+0x2f8/0x4f0 [ 925.942505][T23284] ? btrfs_commit_transaction+0x3355/0x3c30 [ 925.948434][T23284] ? btrfs_commit_transaction+0x3355/0x3c30 [ 925.954347][T23284] report_bug+0x2ba/0x4f0 [ 925.958691][T23284] ? btrfs_commit_transaction+0x3355/0x3c30 [ 925.964615][T23284] handle_bug+0x3a/0x70 [ 925.968795][T23284] exc_invalid_op+0x16/0x40 [ 925.973318][T23284] asm_exc_invalid_op+0x16/0x20 [ 925.978189][T23284] RIP: 0010:btrfs_commit_transaction+0x3355/0x3c30 [ 925.984794][T23284] Code: e8 00 ac 18 fe be 01 00 00 00 48 89 df e8 33 1b a7 00 e9 56 d2 ff ff e8 e9 ab 18 fe 48 c7 c7 40 78 cf 8a 89 de e8 eb 1b e4 fd <0f> 0b e9 bb f8 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c f2 cd [ 926.004497][T23284] RSP: 0018:ffffc9000e72f7e0 EFLAGS: 00010246 [ 926.010584][T23284] RAX: a9d7ca094a074500 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 926.018588][T23284] RDX: ffffc9000ee6a000 RSI: 000000000000a17d RDI: 000000000000a17e [ 926.026594][T23284] RBP: ffffc9000e72fb08 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 926.034587][T23284] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffff88807898c000 [ 926.042569][T23284] R13: fffff52001ce5f20 R14: dffffc0000000000 R15: 0000000000000000 [ 926.050582][T23284] ? btrfs_commit_transaction+0x192/0x3c30 [ 926.056422][T23284] ? join_transaction+0xb66/0xd20 [ 926.061472][T23284] ? btrfs_commit_transaction_async+0x470/0x470 [ 926.067734][T23284] ? do_raw_spin_unlock+0x11d/0x230 [ 926.072962][T23284] ? _raw_spin_unlock+0x24/0x40 [ 926.077828][T23284] ? join_transaction+0xb66/0xd20 [ 926.082877][T23284] ? btrfs_record_root_in_trans+0x8d/0x180 [ 926.088728][T23284] ? start_transaction+0x469/0x11c0 [ 926.093955][T23284] btrfs_set_free_space_cache_v1_active+0x6d/0x1c0 [ 926.100478][T23284] btrfs_remount+0x1036/0x14b0 [ 926.105280][T23284] ? btrfs_statfs+0x1890/0x1890 [ 926.110149][T23284] ? dentry_lru_isolate+0x2e0/0x2e0 [ 926.115370][T23284] ? hook_sb_remount+0x19/0xc0 [ 926.120157][T23284] ? bpf_lsm_sb_remount+0x5/0x10 [ 926.125114][T23284] reconfigure_super+0x219/0x8a0 [ 926.130075][T23284] path_mount+0xe13/0x1020 [ 926.134500][T23284] ? kmem_cache_free+0xf7/0x290 [ 926.139370][T23284] __se_sys_mount+0x2e3/0x3d0 [ 926.144064][T23284] ? __x64_sys_mount+0xc0/0xc0 [ 926.148851][T23284] ? lockdep_hardirqs_on+0x94/0x140 [ 926.154055][T23284] ? __x64_sys_mount+0x1c/0xc0 [ 926.158835][T23284] do_syscall_64+0x4c/0xa0 [ 926.163281][T23284] ? clear_bhb_loop+0x60/0xb0 [ 926.167975][T23284] ? clear_bhb_loop+0x60/0xb0 [ 926.172682][T23284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.178622][T23284] RIP: 0033:0x7f774ed9bf79 [ 926.183061][T23284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.202680][T23284] RSP: 002b:00007f774fba1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 926.211106][T23284] RAX: ffffffffffffffda RBX: 00007f774f015fa0 RCX: 00007f774ed9bf79 [ 926.219112][T23284] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 926.227093][T23284] RBP: 00007f774ee327e0 R08: 0000000000000000 R09: 0000000000000000 [ 926.235074][T23284] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000000 [ 926.243073][T23284] R13: 00007f774f016038 R14: 00007f774f015fa0 R15: 00007fffdbb60cd8 [ 926.251091][T23284] [ 926.254681][T23284] Kernel Offset: disabled [ 926.259152][T23284] Rebooting in 86400 seconds..