last executing test programs: 15m24.439683028s ago: executing program 32 (id=178): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000000000)={[{@user_xattr}, {@errors_remount}]}, 0x1, 0x576, &(0x7f0000000140)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 11m30.497142014s ago: executing program 33 (id=1351): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000200)="7e04", 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)={r1}) 10m41.042379381s ago: executing program 34 (id=1642): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x7, 0xf9, 0x8be, 0xffff}, 'syz0\x00', 0x2}) 9m49.312349094s ago: executing program 35 (id=1896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000490}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x6c, 0x0, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) 6m3.803380451s ago: executing program 3 (id=3581): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x38, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x42, 0x4038a09, 0x4, @remote, @mcast2={0xff, 0x5}}}) 6m2.92858672s ago: executing program 3 (id=3588): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000010c0)=[{&(0x7f0000001100)="7f", 0x1}], 0x1, 0x2, 0x0) 6m2.410862867s ago: executing program 3 (id=3592): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8e, 0x180000504) 6m1.787430375s ago: executing program 3 (id=3597): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$eJzs3U9sHNX9APA367+JTbwGfmDgR0ihFYGCHZJITW9BoB4Rl95BIaERhqKGHoiAmB4QlRBFQpwqDlRcKJVSpCKBKlWop7anVr31hHqhUpVKQT20SImr2G/Wuy/72PXYnrV3Px/p67dv3ux8v2M7zszs7NsAjKzG2tfjxxeKEN759O1HX36q+Pjasrtaaxxa+1rEXjOEMNHWL5LtfR4XXLn80qlubRGOrn0t++GxS63nzoQQVsKh8Flohg+Xlr/84N1HDn/02vQtb55/5pUd2v2WdD8AAGAYXfzT8t/u+8cfH5j/6uLBk2Gqtbw8Pm/G/kw87j8SD5TL4+VG6OwXbdFuMllvLEYjWW8sWW88yTOeyTeRbGcis95kj3xjbcu67ScAAADsReV5bTMUjcWOfqOxuLh+3n/N53OTxeJzZ5fPnBtQoQAAAEBl/76wdtOtEEIIIYQQQgghhjhW5wZ9BQIAAAAYNel8YddZ2d6Zulpba/aX/9LDje7Ph21Q9+//1+efHnD+LkY8//uv+osDAEB1w3o0We5XeRxdzmOQziM4ljxvs8f/jWQ745usMzev4F6ZbzBXZ/p93a1y9W/25zgoufrT+TB3q1z96Tydu1Wu/qma66gqV3+XKz+7Uq7+fTXXUVWu/v0111FVrv6ZmuuoKlf/bM11VJWr/4aa66gqV/+BmuuoKlf/XrmtNld/s+Y6qsrVP19zHVXl6r+x5jqqytV/U811VJWr/+aa6xiUO2Nbfh8OZtab6XJOt1fO8QAAAGDU/df8f0IIIUR7rN8CMfg6hBBCCCG2NS4M+gIEAAAAMHDl+wLKd72vRuX4WI/x8fbx6Y0VyvGJHs+f7DE+1WMcAAAACOG3r5+57a1iY767rc6HV84btS98fDVUmMconY9ws/m3Ou/ZVvPvlXnLAAAAGC3F9z67ev+j770w/9XFgyfbzn6vxvPdch7Q8Xht4JPYL+8LmE36RXkOfbIzTyOzXnp94Ibc9h7f4o4CAADACCvP35uhaCy2nXc3Q6OxuLhxPr4QJoozZ5dPH4n98vNZ/jA3MXVt+UM11w0AAAD0b+N8v/v5f/k5vgthslh87uzymXPr/dnW8olG+3WBuY3lRft1gWay/Ghm+bHYLz+/8wdz+9aWL5764fJT273zAAAAMCLOvXj+mSeXl0//yAMPPPCg9WDQf5kAAIDt9sUXb0/8+Njs79bf/78x/93V+OBQ7Dfj3H5/jsvL+wTK9wFc9379JzrzzOXWe75zvWay3liMqaTu6bbthLX5BjufN5/L1+zczmQm30ySbzbJl85TMJ6sX3SZSzB0mZ+wXG8uWZ7Owzie5CiS/Hd3yQUAAAClpReefX7p3IvnHzz77JNPn3769HPHjp747okTRx76zkNLa/f1L7Xf3Q8AAADsRRs3/Q66EgAAAAAAAAAAAAAAAAAAABhddXyc2KD3EQAAAEbdvy6EEFaEyET5AYODrkPs5lidGnwNwx3Bv0MhhBBCbDGc94mVEFZX00+aBwAAANhZVy6/dKq9vc5Ksa35WltrrjdXY96ynX3wr/PXolzt0sOd10v2b2s1jLq6f//l3635p7qOv//q9uafDht/+0Jff/8anRs42dHb12/ee5d+udDKH0K4fbzP/On+P95vxk6Hk/z3hv7yr76X5H+io9foN/99Sf79fea/bv+f7zdjp/tj/oXYP3xPv/k7d7H8LS33o99fgG8n+/9U6Dd/sv/NPhMmHoj5AWAUtf43X70w2EK2WXmUUB5Pz8R+ub/xcDOkdz9s9vi/kWxnfMuVd263PA66NfanW3V05i1ttv7y+zIb2xsq1pnaK3eV5Orfrp/jTsvVP1FzHVXl6p+suY6qcvV3P3vffXL1T9dcR1W5+vu+EDFgufr3ynXlXP0zNddRVa7+2ZrrqCpX/2b/Hx+UXP0Haq6jqlz9czXXUVWu/oqX1WqXq3++5jqqytV/Y811VJWr/6aa66gqV//NNdcxKHfENnc+XJ5/zsWxst9M+lNdvpd9vxgCAAAA7Kh/7sp5INquHAy8FiGEEEIIIYY//rO6btB1CCF2LlZXB3n1gUHb2XczA7Bb+fs/2vz8R5uf/2jz8+frlK/EF0m/NNZjfLzH+ESP8clkPP19neoxflOy3dXyumZ0c4/x/4t7kBs/0OP5t/YYX+gxfluP8dt7jN/RYxwAAIDRcEtsnR8CAADA8Hr5V5+88Zt7n7g8/9XFgyfD5HXzzh+J/an42vrrsZ/Oe1+aiK/5/yT2fxHb38f278n67j8BAACAnVd+TozX/wEAAGB4lZ9T6vwfAAAAhtd8bJ3/AwAAwPC6MbbO/wEAAGCIFdPdF8e2vC5wd2z7ndcPANj9/j+2d8b2YGzviu03YlseB9wT22/WVB8AsH1+/v2fnnir2Jjv/1gyfiUuL9vrrKxfKSganTP574vt/th+q8960s8D6Dd/6UCfeXYq/9wW8wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6Ox9vX48YUihHc+ffvRn02+8Zdry+5qrXFo7WsRe80QwkTreeXoRv/XccUrl1861d5ejW0RjoYiFK3l4bFLrUwzIYSVcCh8Fprhw6XlLz9495HDH702fcub5595ZQe/BR37BwAAAMPofwEAAP//fccg7g==") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 6m0.601996057s ago: executing program 3 (id=3604): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002280)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@creator={'creator', 0x3d, "a8215961"}}, {@umask={'umask', 0x3d, 0xf}}, {@nls={'nls', 0x3d, 'cp861'}}, {@uid={'uid', 0x3d, 0xee01}}, {@uid}, {@gid}]}, 0x1d, 0x6e5, &(0x7f0000000f40)="$eJzs3U1sG2kZAOB3bMeJu1LWu7S7BSE12ooKttAmNUuLhERBCOWwgkpc9mradBvVyVaJF6UVol5g4Qgn1MMeFqFw2BPigATigFjOSEjce6/EgVvFAaMZzyT+yZ/bOOmW55HG883M9/PO6/Fne9LKAfzfWnwrpjqRxOL5NzfS7YebjdbDzcZKUY6I6YgoRVR6q0hWI5KPI65Gb4lPpzvz7pLdxnnj0R8/OPfgo0Zvq5IvWf3SXu22dfcYoZMvMRcR5Xw9pspu/V3fob/7Y3WdbMWdJuxskTg4bt0RnXGaH+B1Czzr7keUp3bYX484EREz+eeAyGeH0hGHd+jGmuUAAADg2VTer8KLj+NxbMTs0YQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4ek95uBSb6UivJcJPnv/383r5apVo833H18cZ/j7988okAAAAAAAAAA4PBNbRfPPI7HsRGzxXY3yf7m/1q2cTJ7fCHejfVYirW4EBvRjHa0Yy0WIqZm+/qsbjTb7bWF0Za/irRlt9u9n7e8FBH1kZaXJnzOAAAAAAAAAPB8+3EsxuxxBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP2SiHJvlS0ni3I9SpWImImIalqvE/HnovxJ9pfjDgAAAAAmr5avZ5P/9grdJPvO/0r2vX8m3o3VaMdytKMVS3EjuxfQ+9Zf+ken0Xq42VhJl9GOv/GvseLIeoyIcry3y8jzWY1TWy0W49vxvTgfc3Et1mI5fhDNaMdSzEUtPYloRhL1Wu/uRb2IczDect7V1YFQrg3HdmZo+3QWSS1uxnIW24W4Xi16K2U1kjjdN9ofqhFDGXovzU7y9dwBc3Sj7/n6ZX5fJtd98YB9TEY9O/OprYzMp7nPs/HSzrkvjHmdDI+0EKWte1Ant0dJN4dHKnL+/XFyfiJfp7n+2WDOD9uYt9KGM3EpSvnVF/HKYM7vfO7By4ONv/DPv167VVq9fevm+vkJntJETRWF4Uw0+jLx6t5XX56JVpqJzsEzMTW8Y+YpzuMQVfNs9Ca2g82W38pKzXit7xJ8J27EUlyO+ViIKzEfX41L0Ri4wk4N5LXSWBnMSfZaK43Ob7U9gj/7+b5KP9+n8tFK8/JSX177Z7p6dizfc/UXMd+XpZf3vvqe5F2g8pm8kI7xk613nGfBQCbyubmIrniD2iUTv+6mj+ut1dtrt5p3DjjeuXydvmzfH5ybf/PUJ/NU0uslnXEr2VaWk1pxvaTHPrUV7WC+qvlfXHrtSiPHTm0dq8dsLMd3dn2lVvPPcKM99Y69uuOxRnbsdN+xgU858U60sk8hQ+aOJqsA7Gx6dNeJ109Ua49qf699WPtp7VbtzZlvTl+Z/mw1pv5W+VP5d6Xflr6WvB4fxo9i9jgCBgAAAAAAAAAAAAAAAAAAAAAAAAAAAACA58363Xu3m63W0toEC9UnHCtK+9bZfOFgHUY9Yu+xkrxQnXQ2noHCv2f2zEYtJjT67yOi2WoVPw41XKf61EMkk7+e08APpcPih9OyPd3yGM0rRaud61RifWa3Z3B6+3mP+u1m6z/dgTq16HvJAM+5i+2VOxfX79770vJK8+2lt5dWL125fOVy4ysLX754c7m1NN97PO4ogUlYv3uvfNwxAAAAAAAAAAAAAOPJ//V/+4n/M0NlnzrVtfWdRz5z1KcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfEItvhVTnUhiYf7CfLr9cLPRSpeivF2zEhGliEh+GJF8HHE1ekvU+7pLdhvnjUfVD849+Kix3VelqF/aq93BdPIl5iKinK/3N71DN6P9Xe/rr/NE4SVbZ5gm7GyRODhu/wsAAP//7gLxdA==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6m0.065477163s ago: executing program 3 (id=3608): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) recvfrom(r0, 0x0, 0x0, 0x110e2, 0x0, 0x0) 5m58.262561205s ago: executing program 36 (id=3608): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) recvfrom(r0, 0x0, 0x0, 0x110e2, 0x0, 0x0) 3m8.936836804s ago: executing program 5 (id=4804): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) llistxattr(&(0x7f00000001c0)='./bus\x00', 0x0, 0x11) 3m8.262060465s ago: executing program 5 (id=4807): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000", @ANYRES8], 0x3, 0x6b8, &(0x7f0000000ac0)="$eJzs3UGIXHcdB/Dvm2xmMxHSbZumUYQsDRRtMNnNUBNBaBSRHIIEvfS6JJtmySYtm62kRczEWgVPnqQHDxWJh4ogIkI9FetZELx4yj3gzUMO6sp782Z3dnaymc1md7bt5wNv3v8////7/3/vl/fezLzJMgE+s86/mv2dFDl/4sKtsn7vbnvx3t329V45yWSSRjLRXaVoJcXHybl0l3y+fLIernjYPC/f/7CYeO+Ddrc2US9V/8Zm220wtGcnObBa2Zdkulv8z8jDbhivWqpxLq2N95iK1bjLhB3vJQ7GbWWDzlpj45Gbj37eAnvW7e7r5gZTycF0X13L9wGprw6PvjKMQ2tdbdNrU2enYwEAAICdN/SzfL+nHuRBbuXQ7oQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnw5F9zcDi3pp9MrTKXq//9/s+0395pjD3aZ3r1Sr7z417kAAAAAAAAAAYFuOPciD3MqhXn2lqL7zf6GqHK4eP5c3czPzWcrJ3MpclrOcpcwmmeobqHlrbnl5aXbjlr9IueXKysrtesvTQ7c8vT6uzmCgw/6nwYZOAAAAAAAAAPCZ9aOcX/v+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9oIi2dddVcvhXnkqjYkkB5I0i+nV7s2xBrst3dA/GncYAAAAsHsOFf/rFlaK6jP/kepz/4G8mRtZzkKWs5j5XK7uBXQ/Ojf+3mkv3rvbvl4uGwf8xr+2NH81Yrr3HobPPFP1eG51i/P5dr6XE5nOxSxlId/PXJYzn+l8qyrNpchUffdi6t7dVnqxboz33LraxcHYjvWVy/iOVpG0ciULVWwnc6nZC71R9zvaN9ufmsnAjHfK7BSv1EbM0eV6Xe7Rz+v13jBV7fn+1YzM1Lkvs/F0f9435n6Lx8ngTLNprN6DOrw2S1kdnOmxcn6wXu9Crrd4K219Jjo/K2u9o+/I5jlPvvyPv1y82rhx7eqVmyf2zmH0mAaPiXZfJp4fKROLZSY628jEge3E/+Q062x0r6Jbu1q+UG17KAv5Tl7P5cznTGYym7OZyddyOu2c7svrc5vntTrXGls7145/qS60kvy0Xu+qyYc1lHl9ui+v/Ve6qaqt/5m1LD0zQpaKZoZn6Z9DQ5n4Ql0o53in7xVn/AYzMduXiWc3z8Sv/ruS5ObijWtLV+feGHG+F+t1edq+u/4a/esnskNbV+9uebw8U/5jlZWfZN3RUbY922sbyFez/sZloh5sXVsz1fncbXvUmVqOdOTOsJG6bc8PnaVdtR3ta1v3LievZ3H1XQgAe1YjB1862Gzdb/2t9X7rx62rrQsHvjl5dvKLzez/68Sf9/2+8ZvG14uX8n5+mEPjjhUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr719rW5xcX5pT1YSGOEzr/L6APeGdrUS0X3meZO71d3so9+O/b0PtFC70Ca3OyI+kOSTcZpjiP4VpKdneLYaJ0zsQu7PJkhTRdWn2kljdV4klzbIz9wB+yEU8vX3zh18623v7Jwfe61+dfmb5w+e+aVM+2vzt4+dWVhcX6m+zjuKIGdMPi+FAAAAAAAAAAAANj7duOvLIZMW3TGsK8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJ9P5V7O/kyKzMydnyvq9u+3FcumV13pOJGkkKX6QFB8n59JdMtU3XPGweV6+/+EvX3zvg/baWBO9/o2B7f7475WV0YJ/p1fo1Eumk+yr1482+bCGdeNd6huvM1pgA4rVPSwTdryXOBi3/wcAAP//fbEE8Q==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 3m7.366861791s ago: executing program 5 (id=4812): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x200408, &(0x7f0000000240)={[{@gid}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@fmask={'fmask', 0x3d, 0x1000}}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x9}}, {@fmask={'fmask', 0x3d, 0x8}}, {@gid}]}, 0x1, 0x151c, &(0x7f0000001f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 3m6.397200687s ago: executing program 5 (id=4820): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@orlov}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@barrier}, {@usrjquota}, {@jqfmt_vfsold}, {@minixdf}]}, 0x3, 0x466, &(0x7f0000000340)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 3m5.601997978s ago: executing program 5 (id=4825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, '\x00@e', 0x8, 0x2c, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, {[@routing={0x3b, 0x0, 0x0, 0x7}]}}}}}, 0x0) 3m4.763825956s ago: executing program 5 (id=4832): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000036dbdf25250000000e0001006e657464657673696d0000000f0002"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3m2.739868503s ago: executing program 37 (id=4832): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000036dbdf25250000000e0001006e657464657673696d0000000f0002"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m19.345236141s ago: executing program 7 (id=5111): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_io_uring_setup(0x6b9d, &(0x7f0000000480)={0x0, 0xc43f, 0x20, 0x0, 0x1f5, 0x0, r0}, 0x0, 0x0) 2m18.711021894s ago: executing program 7 (id=5116): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020300) 2m18.293431157s ago: executing program 7 (id=5119): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='=00000000000000000000000,decompose,nls=cp874,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',nobarrier,part=0x0000000000000006,\x00'], 0x20, 0x6de, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) creat(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x28) 2m17.416817866s ago: executing program 7 (id=5124): r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000003c0)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x8be4, @mcast1}, 0x1c) 2m16.79016111s ago: executing program 7 (id=5129): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m16.173723399s ago: executing program 7 (id=5135): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7ff) ioctl$RTC_AIE_OFF(r0, 0x7002) 2m14.417672993s ago: executing program 2 (id=5143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004a80)={0x18, r1, 0x301, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x40006) 2m13.99195293s ago: executing program 2 (id=5146): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m13.382378638s ago: executing program 2 (id=5150): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x48) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 2m12.879553807s ago: executing program 2 (id=5153): syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0xff, 0x27f, &(0x7f00000002c0)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='mqueue\x00', 0x10001, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, 0x0) 2m12.029171943s ago: executing program 2 (id=5158): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3011}}) 2m11.455899649s ago: executing program 2 (id=5161): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m8.434758097s ago: executing program 38 (id=5161): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m0.909286007s ago: executing program 39 (id=5135): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7ff) ioctl$RTC_AIE_OFF(r0, 0x7002) 1m32.746150279s ago: executing program 6 (id=5337): unshare(0x2a020400) r0 = socket(0x1d, 0x2, 0x6) recvmsg$kcm(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) 1m32.156553129s ago: executing program 6 (id=5342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1m31.488983462s ago: executing program 6 (id=5347): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {0x0, r1, 0x1}}, 0x18) 1m30.954017695s ago: executing program 6 (id=5351): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x3, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cc}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299", 0x12}], 0x3}, 0x8001) 1m30.470052219s ago: executing program 6 (id=5356): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fcntl$setstatus(r0, 0x4, 0x2c00) 1m29.846802701s ago: executing program 6 (id=5362): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x180c006, &(0x7f000000cb40)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="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"], 0xff, 0x2b3, &(0x7f0000000ac0)="$eJzs3MFrE08UwPGXTZtN+6NpTz/Qiw+96GWp8aiCUVoQA0raiHoQtnSrITEpu0ETEczZk39H8ehNEPHeu3+AtyBITz25kmSz3cakYl0TTb+fy87O26FvMt3ypnTavvf6SXnLs7bsuhhpFUOkJfsiS1KSvkRwTXXbqbBfrmalJReWn+69Wrv/4FYun18pqK7m1i9lVTVz5v2zF2/Ofqj/d/dtxjRld+lh+2v28+7/u6fa39YflzwteVqt1dXWjVqtbm9UHN0seWVL9U7FsT1HS1XPcQ/Ftyq17e2m2tXNhflt1/E8tatNNaSp9Zqmg6yqalmWLsx32mk5QVK/PKK4UyjYuaGhE/XJTTfXzdlJEZn7YU2LO5PJCAAATNLo+t8In+nX/8Zg/S/yk/r/ZfBU5l3s9X9Swvq/7HTr/7rbVPuRXYrW/zhS8drI+v8Ixp9JBr8j0YrcXD8Uct3c3PBB1P8AAAAAAAAAAAAAAAAAAAAAAPwL9n1/0ff9xc7VEBE/uDdFJBm5HzKUE+JTILr+fv9kT7D+6aPXH1MgcnAvLfKl1Sg2ionutRdfvZlfWdauyMG/vUajmAzjF3txPRyflfkgnh0aT8n5c714J3bjdj6Mtz/2rpuRPGeCn0cHWjF/EgAAAAAATC9LQ0thZ1rC/b1lqSmD8e7+vdvobMv7vx8Y2N/PyOmZMU4EAAAAAACM5DWfl+1KxXHH00iO8WsduyFyvOGXfTOWNJIiEukxg6WKPlNYE4lvyik57pQHGqY4/WzHu3CfcpP/thndyMT4ol2JLTE/IdLrmQ3WbOAt4C/8AAAAgOlysB+YdCYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxc4/gXaJOeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC3+B4AAP//iGirAg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m14.596204643s ago: executing program 40 (id=5362): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x180c006, &(0x7f000000cb40)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="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"], 0xff, 0x2b3, &(0x7f0000000ac0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5.224278767s ago: executing program 9 (id=5914): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1fdb}]}) r0 = gettid() rt_sigqueueinfo(r0, 0x11, &(0x7f0000000280)={0x4, 0x0, 0x8}) 4.615835436s ago: executing program 9 (id=5919): semget$private(0x0, 0x4000, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) 4.249109213s ago: executing program 8 (id=5920): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0xc8) 4.071846318s ago: executing program 9 (id=5924): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000500)=ANY=[], 0x1, 0x151b, &(0x7f0000001580)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 3.511374413s ago: executing program 0 (id=5927): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x2, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 3.492229426s ago: executing program 8 (id=5928): rseq(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 3.240924894s ago: executing program 9 (id=5929): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061188e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0}, 0x94) 3.143729014s ago: executing program 1 (id=5930): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x5, 0x14fe, &(0x7f0000003f40)="$eJzs3AvYTdX2MPAx5pxLL0k7ScIccyx2cpkkSS5JckmS5MiR3BJCkiQh8ZJbEpLcb0nuIbmF5H6/5Z4kR5IkISHJ/J639NQ5nf+/8/3POX/n+97xe575mMPac+6x3rH3Wmuu51n7q/YDK9WpXL4WM8M/BX/+JxUAUgCgDwBcDQARABTPWjxr2vaMGlP/uTcR/1oPTb3cGYjLSeqfvkn90zepf/om9U/fpP7pm9Q/fZP6p29SfyHSs63TbrhGWvptf3T/v+s/+kGS+///D5Lzf7o0+JeO1D99k/r/fyjjb4Ny+r97qdQ/fZP6p29S//RN6p++Sf3TN6m/EOnZ/+CeccWH/wPuW/8vNgUAlzuHf1u73J8/IYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDpw7nwKwMAv/Qvd15CCCGEEEIIIYT41wlXXO4MhBBCCCGEEEII8e+HoECDgQgywBWQAhkhE1wJmeEqyAJXQwKugaxwLWSD68r9MiIn5ILcYIHAAUMMeSAvJOFGyAc3QX4oAAWhEHgoDEXgZigKt0AxuBWKw21QAm6HklAKSkMZuAPKwp1QDu6C8nA3VICKUAkqwz1QBe6FqnAfVIP7oTo8ADXgQagJf4Ja8BDUhj9DHXgY6sIjUA/qQwNoCI3+R+Ofh87wAnSBrpAK3aA7vAg9oCf0gt7QB16CvvAy9INXoD8MgIHwKgyC12AwvA5DYCgMg+EwAkbCKBgNY2AsjIM3YDy8CRPgLZgIk2AyTIGpMA2mw9swA2bCLHgHZsO7MAfmwjyYDwvgPVgIi2AxvA9L4ANYCstgOayAlbAKVsMaWAvrYD1sgI2wCTbDFtgKH8I22A47YCfsgt2wBz6CvfAx7INPYD98+n85/uzfjO+AgIAKFRo0mAEzYAqmYCbMhJkxM2bBgAAJzIpZMRtmw+yYHXNgDsyJOTE35kZCQkbGPJgHk5jEfJgP82N+LIgF0aPHIlgEi+ItWAyLYXEsjiWwBJbEUlgKy2AZLItlsRyWw/JYHitgBayElfAevAfvxapYFathNayO1bEG1sCaWBNrYS2sjbWxDtbBulgX62E9bIANsBE2wsbYGJtgE2yGzbA5NseW2BJbYStsja2xBbbBttgW22E7bI/tsQN2xI74PD6PL+AL2BUrqG7YHbtjD+yBvbA39saXsC++jC/jK9gfB+BAfBVfxddwMJ7BITgUh+EwLKtG4igcjazG4jgch+NxPE7ACTgRJ+EknIJTcRpOx+k4A2fiTHwHZ+O7+C7Oxbk4HxfgAlyIi3AxLtZpX76luAyX4wpciatwJa7BtbgG1+MGXI+bcBNuwS34IX6Iw3E77sSduBt340f4EX6MH2N/3I/78QAewIN4EA/hITyMh/EIHsGjeBSP4TE8jsfxBJ7EU3gST+NpPINn8Ryew/N4Hi/gszm/qL27wLr+oNIYZVQGlUGlqBSVSWVSmVVmlUVlUQmVUFlVVpVNZVPZVXaVQ+VQOVVOlVvlVqRIsYpVHpVHJVVS5VMpl44QBZVXXhVRRVRRVVQVU8VUcXWbKqFuVyVVKdXUl1FlVFnVzJdTd6nyqryqoCqqSqoyAqSqKqqqqqqqqWqquqquaqgHVU3VDXvhQyqtMnXUAKyrBmI9VV81UA3Va/ioaqwGYxPVVDVTj6uhOARbqsa+lXpStVajsI16Wo3GZ1Q7NRbbq+dUB9VRdVLPq86qie+iuqqJ2E11V1Owh+qpeqneagZWVGkVq6ReUf3VADVQvarm42tqsHpdDVFD1TA1XI1QI9UoNVqNUWPVOPWGGq/eVBPUW2qimqQmqylqqpqmpqu31Qw1s9ws9Y6ard5Vc9RcNU/NVwvUe2qhWqQWq/fVEvWBWqqWqeVqhVqpVqnVao1aq9ap9WqD2qg2qc1qi9qqPlTb1Ha1Q+1Uu9RutUd9pPaqj9U+9Ynarz5VB9Rf1EH1mTqkPleH1RfqiPpSHVVfqWPqa3VcfaNOqJPqlPpWnVbfqTPqrDqnvlfn1Q/qgvpRXVRBgUattNZGRzqDvkKn6Iw6k75SZ9ZX6Sz6ap3Q1+is+lqdTV+ns+vrdQ59g86pc2lQP1eadazz6Lw6qW/U+fRNOr8uoAvqQtrrwrqIvlkX1bfoYvpWXVzfpkvo23VJXUqX1mX0HbqsvlOX03fp8vpuXUFX1JV0ZX2PrqLv1VX1fbqavl9X1w/oGvpBXVP/SdfSD+naumES4GFdVz+i6+n6uoFuqBvpR3Vj/ZhuopvqZvpx3Vy30C31E7qVflK31k/pNvpp3VY/o9vpZ3V7/ZzuoDvqTvpHfVEH3UV31am6m+6uX9Q9dE/dS/fWffRLuq9+WffTr+j+eoAeqF/Vg/RrerB+XQ/RQ/UwPVyP0CP1KD1aj9Fj9Tj9hh6v39QT9Ft6op6kJ+speqqepntdmmnWPzD+zb8zvt9P775Fb9Uf6m16u96hd+pderfeo/fovXqv3qf36f16vz6gD+iD+qA+pA/pw/qwPqKP6KP6qD6mj+nj+rg+oU/q7/W3+rT+Tp/RZ/VZ/b0+r8/rC5f+BmDQKKONMZHJYK4wKSajyWSuNJnNVSaLudokzDUmq7nWZDPXmezmepPD3GBymlwmt7GGjDNsYpPH5DVJc6PJZ24y+U0BU9AUMt4UNkXMzf/0+D/Kr5FpZBqbxqaJaWKamWamuWluWpqWppVpZVqb1qaNaWPamramnWln2pv2poPpYDqZTqaz6Wy6mC4m1aSa7uZF08P0NL1Mb9PHvGT6mr6mn+ln+pv+ZqAZaAaZQWawGWyGmCFmmBlmRpgRZpQZZcaYMWacGWfGm/FmgplgJpqJZrKZbKaaqWa6mW5mmBlmlpllZpvZZk7al8XMMwvMArPQLDSLzWKzxCwxS80ys8ysMCvMKrPKrDFrzDqzzmwwG8wms8ksNVvNVrPNbDM7zA6zy+wye8wes9fsNfvMPrPf7DcHzAFz0Bw0h8whczjt8GuOmKPmqDlmjpnj5rg5YU6YU+aUOW1OmzPmjDlnzpnz5ry5YC6Yi+Zi2mVfpCIVmchEGaIMUUqUEmWKMkWZo8xRlihLlIgSUdYoa5Qtui7KHl0f5YhuiHJGuaLckY0ochFHcZQnyhsloxujfNFNUf6oQFQwKhT5qHBUJLo5KhrdEhWLbo2KR7dFJaLbo5JRqah0VCa6Iyob3RmVi+6Kykd3RxWiilGlqHJ0T1QlujeqGt0XVYvuj6pHD0Q1ogejmtGfolrRQ1HtyFw6vzwS1YvqRw2ihlGjf+n8IZy5/jHfxXa1qbab7W5ftD1sT9vL9rZ97Eu2r33Z9rOv2P52gB1oX7WD7Gt2sH3dDrFD7TA73I6wI+0oO9qOsWPtOPuGHW/ftBPsW3ainWQn2yl2qp1mp9u37Qw7086y79jZ9l07x8618+x8mwEAFtpFdrF93y6xH9ildpldblfYlXaVXW3X2LV2nV1vN9iNdpPdbLfYrfZDu81utzvsTrvL7rZ77Ed2r/3Y7rOf2P32U3vA/sUetJ/ZQ/Zze9h+YY/YL+1R+5U9Zr+2x+039oQ9aU/Zb+1p+509Y8/ac/Z7e97+YC/YH+1FG9Iu7tNO72TIUAbKQCmUQpkoE2WmzJSFslCCEpSVslI2ykbZKTvloByUk3JSbspNaZiY8lAeSlKS8lE+yk/5qSAVJE+eilARKkpFqRgVo+JUnEpQCSpJJak0laY76A66k+6ku+guupvupopUkSpTZapCVagqVaVqVI2qU3WqQTWoJtWkWlSLalNtqkN1qC7VpXpUjxpQA2pEjagxNaYm1ISaUTNqTs2pJbWkVtSKWlNrakNtqC21pXbUjtpTe+pAHagTdaLO1Jm6UBdKpVTqTt2pB/WgXtSL+lAf6kt9qR/1o/7UnwbSQBpEg2gwDaYhNJSG0XAaQSNpFI2mMTSWxtE4Gk/jaQJNoIk0kSbTZJpKU2k6TacZNINm0SyaTbNpDs2heTSPFtACWkgLaTEtpiW0hJbSUlpOy2klraTVtJrW0lpaT+tpI22kzbSZttJW2kbbaAftoF20i/bQnhSgvbSP9tF+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydpx/oAv1IFylQisvoMrkrXWZ3lcvirnZ/G+dwN7icLpfL7azL7q7/q5icc/ldAVfQFXLeFXZF3M2/i0u6Uq60K+PucGXdna7c7+Iq7l5X1d3nqrn7XWV3z1/F1d0Drka5h11N94ir5eq72q6hq+MednXdI66eq+8auIauuWvhWronXCv3pGvtnvpdvNAtQnDr3Hq3we11H7tz7nt31H3lzrsfXBfX1fVxL7m+7mXXz73i+rsBv4uHueFuhBvpRrnRbowb+7t4spviprppbrp7281wM38XL3DvudlusZvj5rp5bv5P8UK3yC1277sl7gO31C1zy90Kt9KtcqvdGrf2Uq4r3Ca32W1xe9xHbpvb7na4nW6X2/1TnLYf+9wnbr/71B1xX7qD7jN3yB1zh90XP8Vp+3fMfe2Ou2/cCXfSnXLfutPuO3fGnf1p/9P2/Vv3o7voggNGVqzZcMQZ+ApO4Yycia/kzHwVZ+GrOcHXcFa+lrPxdZydr+ccfAPn5Fycmy0TO2aOOQ/n5STfyPn4Js7PBbggF2LPhbkI38xF+RYuxrdycb6NS/DtXJJLcWkuw3dwWb6Ty/FdXJ7v5gpckStxZb6Hq/C9XJXv42p8P1fnB7gGP8g1+U9cix/i2vxnrsMPc11+hOtxfW7ADbkRP8qN+TFuwk25GT/OzbkFt+QnuBU/ya35KW7DTzOk/nw2ac/PcQfuyJ34ee7ML3AX7sqpnMrd+UXuwT25F/fmPvwS9+WXuR+/wv15AA/kV3kQv8aD+XUewkN5GA/nETySR/FoHsNjeRy/weP5TZ7Ab/FEnsSTeQpP5Wk8nd/mGTyTZ/E7PJvf5Tk8l+fxfF7A7/FCXsSL+X1ewh/wUl7Gy3kFr+RVvJrX8Fpex+t5A2/kTbyZt/BW/pC38XbewTt5F+/mPfwR7+WPeR9/wvv5Uz7Af+GD/Bkf4s/5MH/BR/hLPspf8TH+mo/zN3yCT/Ip/pZP83d8hs/yOf6ez/MPfIF/5IscGGKMVaxjE0dxhviKOCXOGGc6sDzOHF8VZ4mvjhPxNXHW+No4W3xdnD2+Ps4R3xDnjHPFuWMbU+xijuM4T5w3TsY3xvnim+L8cYG4YFwo9nHhuEh8c1w0viUuFt8aF49vi0vEt8cl41Lxw/eXie+Iy8Z3xuXiu+Ly8d1xhbhiXCmuHN8TV4nvjavG98XV4vvjYvEDcY34wbhm/Ke4VvxQXDv+c1wnfjiuGz8S14vrxw3ihnGj+NG4cfxY3CRuGjeLH4+bxy3ilvETcav4ybh1/NQfbk+Nu8Xd4xfjF+MQ7tPzkvOTC5LvJRcmFyUzXroGWZpcllyeXJFcmVyVXJ1ck1ybXJdcn9yQ3JjclNyc3JIMofIV4NErr73xkc/gr/ApPqPP5K/0mf1VPou/2if8NT6rv9Zn89f57P56n8Pf4HP6XD63t5688+xjn8fn9Ul/o8/nb/L5fQFf0Bfy3hf2RXxD38g38o39Y76Jb+qb+cf9476Fb+Gf8E/4J31r/5Rv45/2bf0zvp1/1j/rn/MdfEffyT/vO/sXfBff1af6S4/7dO3he/levo/v4/v6vr6f7+f7+/5+oB/oB/lBfrAf7If4IX6YH+ZH+BF+lB/lx/gxfpwf58f78X6Cn+An+ol+sp/sp/qpfrqf7mf4GX6Wn+Vn55/t5/g5fp6f5xf4BX6hX+gX+8V+iV/il/qlfrlf7lf6lX61X+3X+rV+vV/vN/qNfrPf7Lf6rX6b3+Z3+B1+l9/l9/g9fq/f6/f5fX6/3+8P+AP+oD/oD/nP/WH/hT/iv/RH/Vf+mP/aH/ff+BP+pD/lv/Wn/Xf+jD/rz/nv/Xn/g7/gf/QXffDjEm8kxifeTExIvJWYmJiUmJyYkpiamJaYnng7MSMxMzEr8U5iduLdxJzE3MS8xPzEgsR7iYWJRYnFifcTSxIfJJYmliWWJ1YkViZWJULItS0OeULekAw3hnzhppA/FAgFQ6HgQ+FQJNwcioZbQrFwaygebgslwu2hZCgVSodHQr1QPzQIDUOj8GhoHB4LTULT0Cw8HpqHFqFleCK0Ck+G1uGp0CY8HdqGZ0K78GxoH54LHULH0Ck8HzqHF0KX0DWkhm6he3gx9Ag9Q6/QO/QJL4W+4eXQL7wS+ocBYWB4NQwKr4XB4fUwJAwNw8LwMCKMDKPC6DAmjA3jwhthfHgzTAhvhYlhUpgcpoSpYVqYHt4OM8LMMCu8E2aHd8OcMDfMC/PDgvBeWBgWhcXh/bAkfBCWhmVheVgRVoZVYXVYE9YGvPRd2RQ2hy1ha/gwbAvbw46wM+wKu8Oe8FHYGz4O+8InYX/4NBwIfwkHw2fhUPg8HA5fhCPhy3A0fBWOha/D8fBNOBFOhlPh23A6fBfOhLPhXPg+nA8/hAvhx3BRnlkTQgghhPiHjP+D7d3+zv+pSy1NdwC4avsNh3+7XQPAxuw/93uqnM0TAPBk1/YP/dIqVEhNvbT0hqUaorxzASABGX4Z/9PvDyR+7i+DZtACWkFTKPp38+upOp7nP5g/eRtApt+MSYFf49D1l/lv+S/mHzn7D+efC3/1FEXaCjF/3r/Nv9h/Mf/1jf9g/oyfjQNo8psxmeHX+Nf5i8Bj8BS0+qtXCiGEEEIIIYQQP+upSrf9o/Vt2vo8p/l1TNpi95d4GeB/uz4XQgghhBBCCCHE5fdMx05PPNqqVdO26bLT7T8jjf/8jr70cfnNpoIlAC5/YtL5d3Uu84FJCCGEEEII8S/360X/5c5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYRIv/43fk7scu+jEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIcbn9nwAAAP//JFUlwg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) 2.933651918s ago: executing program 4 (id=5931): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000004c0)={0x7, 0x6, 0x26, 0x100000000000009, 0x8, 0xb, 0x64d, 0x8, 0x9657, 0x5, 0x2, 0xe7d4, 0x8, 0xb, 0x5, 0xcc4, 0x2efa, 0x1, 0x94d8, 0x4, 0x1, 0x6, 0xe, 0xfffffffffffffffa, 0x1, 0x2000008000000}) 2.920927546s ago: executing program 8 (id=5932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 2.618117244s ago: executing program 9 (id=5933): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.540811875s ago: executing program 0 (id=5934): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x9, 0x3f, 0x1a, "3eccd25569e20900"}) 2.382699487s ago: executing program 8 (id=5935): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8863"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) 2.299446411s ago: executing program 4 (id=5936): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x43, 0x0, 0x4, 0x0, 0x0, 0x400}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000300)) 2.263580259s ago: executing program 1 (id=5937): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20) 1.920711023s ago: executing program 8 (id=5938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) 1.896820274s ago: executing program 0 (id=5939): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 1.885627722s ago: executing program 4 (id=5940): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a0069ae25bd7000000000001c000080"], 0x1c}}, 0x0) 1.62026679s ago: executing program 1 (id=5941): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e23, @local}], 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0xee, 0x4) 1.321327558s ago: executing program 4 (id=5942): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r1, 0x121, 0x70bd28, 0x25dfdbfb, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc005}, 0x0) 1.298255591s ago: executing program 0 (id=5943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x5, 0xe, r0, 0x0}]) 1.228139337s ago: executing program 8 (id=5944): r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3e, 0x0) 1.102892285s ago: executing program 1 (id=5945): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x252, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 795.943525ms ago: executing program 4 (id=5946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1}) 663.662854ms ago: executing program 0 (id=5947): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)) add_key$keyring(&(0x7f00000002c0), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r0) 589.149185ms ago: executing program 1 (id=5948): r0 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r0, &(0x7f0000000200)) mq_notify(r0, 0x0) 266.013947ms ago: executing program 1 (id=5949): rt_sigaction(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r0, 0x9, 0x0) 167.184426ms ago: executing program 9 (id=5950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 84.17845ms ago: executing program 0 (id=5951): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004080) 0s ago: executing program 4 (id=5952): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') lseek(r0, 0xffffeffffffffffe, 0x0) read$alg(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 4] kthread+0xd59/0xf00 [ 979.565759][ T5874] ? __pfx_worker_thread+0x10/0x10 [ 979.571367][ T5874] ? __pfx_kthread+0x10/0x10 [ 979.578858][ T5874] ret_from_fork+0x1e0/0x310 [ 979.583724][ T5874] ? __pfx_kthread+0x10/0x10 [ 979.589386][ T5874] ret_from_fork_asm+0x1a/0x30 [ 979.600560][ T5874] [ 979.603780][ T5874] ---[ end trace 0000000000000000 ]--- [ 979.609621][ T5874] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f662 [ 979.618768][ T5874] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 979.626206][ T5874] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 979.635284][ T5874] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 979.644259][ T5874] raw: ffffea00027a7ea0 ffffea00027bbea0 [ 979.650221][ T5874] page dumped because: Not a kmalloc allocation [ 979.657255][ T5874] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f660 [ 979.666332][ T5874] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 979.673946][ T5874] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 979.685237][ T5874] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 979.696056][ T5874] raw: ffffea00027a7e00 ffffea00027bbe00 [ 979.702283][ T5874] page dumped because: Not a kmalloc allocation [ 979.709382][ T5874] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f65e [ 979.718512][ T5874] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 979.725936][ T5874] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 979.734918][ T5874] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 979.743856][ T5874] raw: ffffea00027a7d60 ffffea00027bbd60 [ 979.750432][ T5874] page dumped because: Not a kmalloc allocation [ 979.757452][ T5874] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f65c [ 979.766581][ T5874] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 979.774133][ T5874] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 979.785915][ T5874] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 979.795514][ T5874] raw: ffffea00027a7cc0 ffffea00027bbcc0 [ 979.804025][ T5874] page dumped because: Not a kmalloc allocation [ 979.811637][ T5874] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f65a [ 979.820744][ T5874] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 979.828159][ T5874] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 979.837131][ T5874] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 979.846192][ T5874] raw: ffffea00027a7c20 ffffea00027bbc20 [ 979.852094][ T5874] page dumped because: Not a kmalloc allocation [ 979.859223][ T5874] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f658 [ 979.868227][ T5874] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 979.875728][ T5874] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 979.887112][ T5874] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 979.896661][ T5874] raw: ffffea00027a7b80 ffffea00027bbb80 [ 979.904468][ T5874] page dumped because: Not a kmalloc allocation [ 979.911660][ T5874] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f656 [ 979.920809][ T5874] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 979.928245][ T5874] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 979.937261][ T5874] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 979.946221][ T5874] raw: ffffea00027a7ae0 ffffea00027bbae0 [ 979.952179][ T5874] page dumped because: Not a kmalloc allocation [ 979.959544][ T5874] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f654 [ 979.968681][ T5874] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 979.976096][ T5874] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 979.987773][ T5874] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 979.997456][ T5874] raw: ffffea00027a7a40 ffffea00027bba40 [ 980.007849][ T5874] page dumped because: Not a kmalloc allocation [ 980.016194][ T5874] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f652 [ 980.025657][ T5874] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 980.033180][ T5874] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 980.042136][ T5874] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 980.051228][ T5874] raw: ffffea00027a79a0 ffffea00027bb9a0 [ 980.057070][ T5874] page dumped because: Not a kmalloc allocation [ 980.064161][ T5874] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f650 [ 980.073330][ T5874] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 980.080850][ T5874] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 980.092252][ T5874] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 980.101885][ T5874] raw: ffffea00027a7900 ffffea00027bb900 [ 980.109050][ T5874] page dumped because: Not a kmalloc allocation [ 980.386232][T16507] loop7: detected capacity change from 0 to 1024 [ 980.636864][T16507] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 980.650232][T16507] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.664606][ T5874] smsusb:smsusb_probe: Device initialized with return code -22 [ 980.732101][T16516] loop5: detected capacity change from 0 to 1024 [ 980.771452][ T5874] smsusb 6-1:0.0: probe with driver smsusb failed with error -22 [ 980.794833][ T5874] usb 6-1: USB disconnect, device number 17 [ 980.853136][ T30] audit: type=1800 audit(2000000179.919:551): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4608" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 981.142688][ T9879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 981.165917][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4612'. [ 981.333813][ T3512] hfsplus: b-tree write err: -5, ino 4 [ 982.209256][T16544] loop8: detected capacity change from 0 to 512 [ 982.247360][T16546] loop5: detected capacity change from 0 to 8 [ 982.266135][T16544] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 982.375814][T16544] EXT4-fs (loop8): 1 truncate cleaned up [ 982.383896][T16544] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 982.412562][T16546] SQUASHFS error: Unable to read directory block [1d0:32] [ 982.774099][T10737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.074597][T16553] loop2: detected capacity change from 0 to 4096 [ 983.238847][T16561] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 983.340539][T16563] loop7: detected capacity change from 0 to 512 [ 983.412586][T16563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 983.441261][T16563] System zones: 1-12 [ 983.472927][T16563] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.4632: corrupted in-inode xattr: e_value size too large [ 983.549458][T16563] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.4632: couldn't read orphan inode 15 (err -117) [ 983.613770][T16563] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.255950][T16575] loop5: detected capacity change from 0 to 128 [ 984.320749][T16575] EXT4-fs: Ignoring removed nobh option [ 984.370776][T16575] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 984.422014][ T9879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.449553][T16575] ext4 filesystem being mounted at /896/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 984.938780][ T6425] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 985.369569][T16589] net_ratelimit: 1 callbacks suppressed [ 985.369644][T16589] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 985.458732][T16597] loop2: detected capacity change from 0 to 256 [ 985.477524][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4645'. [ 985.982304][T16600] loop8: detected capacity change from 0 to 1024 [ 986.067655][T16600] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 986.080750][T16600] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.179031][T16601] loop7: detected capacity change from 0 to 4096 [ 986.276982][T10737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 986.424939][T16601] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 986.611932][T16601] ntfs3(loop7): Failed to load $Extend (-22). [ 986.618294][T16601] ntfs3(loop7): Failed to initialize $Extend. [ 987.672934][T16626] loop7: detected capacity change from 0 to 2048 [ 987.771777][T16633] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 988.109918][T16633] NILFS (loop7): vblocknr = 22 has abnormal lifetime: start cno (= 1099511627778) > current cno (= 3) [ 988.115458][T16639] loop5: detected capacity change from 0 to 64 [ 988.121427][T16633] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=6) [ 988.175150][T16633] Remounting filesystem read-only [ 988.189738][ T9879] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 988.331030][T16643] loop2: detected capacity change from 0 to 128 [ 988.410870][T16643] FAT-fs (loop2): Directory bread(block 524322) failed [ 988.418025][T16643] FAT-fs (loop2): Directory bread(block 524323) failed [ 988.425602][T16643] FAT-fs (loop2): Directory bread(block 524324) failed [ 988.432853][T16643] FAT-fs (loop2): Directory bread(block 524325) failed [ 988.440101][T16643] FAT-fs (loop2): Directory bread(block 524326) failed [ 988.447232][T16643] FAT-fs (loop2): Directory bread(block 524327) failed [ 988.454581][T16643] FAT-fs (loop2): Directory bread(block 524328) failed [ 988.461836][T16643] FAT-fs (loop2): Directory bread(block 524329) failed [ 989.429015][T11843] Bluetooth: hci1: command 0x0405 tx timeout [ 990.030579][T16670] loop9: detected capacity change from 0 to 512 [ 990.059368][T16670] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 990.177268][T16670] EXT4-fs (loop9): 1 truncate cleaned up [ 990.185416][T16670] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.349167][ T30] audit: type=1800 audit(2000000189.419:552): pid=16670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4681" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 990.359687][T16681] syz.2.4686: attempt to access beyond end of device [ 990.359687][T16681] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 990.383239][T16681] (syz.2.4686,16681,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 990.391355][T16681] (syz.2.4686,16681,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 990.399143][T16681] (syz.2.4686,16681,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 990.408184][T16681] (syz.2.4686,16681,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 990.451458][T16682] loop8: detected capacity change from 0 to 128 [ 990.539759][T16682] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 990.609324][T16682] ext4 filesystem being mounted at /528/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 990.717239][T16682] EXT4-fs (loop8): resizing filesystem from 64 to 1 blocks [ 990.725246][T16682] EXT4-fs warning (device loop8): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 990.778636][T14302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.823133][T16687] loop2: detected capacity change from 0 to 64 [ 990.988996][T10737] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 991.938774][ T5874] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 992.108970][ T5874] usb 10-1: Using ep0 maxpacket: 32 [ 992.140680][ T5874] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.152283][ T5874] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.162546][ T5874] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 992.173594][ T5874] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.189468][T16711] loop5: detected capacity change from 0 to 8 [ 992.227412][ T5874] usb 10-1: config 0 descriptor?? [ 992.725689][T16716] bpf: Bad value for 'gid' [ 992.730800][ T5874] ft260 0003:0403:6030.0029: item fetching failed at offset 0/2 [ 992.757329][ T5874] ft260 0003:0403:6030.0029: failed to parse HID [ 992.764434][ T5874] ft260 0003:0403:6030.0029: probe with driver ft260 failed with error -22 [ 992.919390][ T1631] usb 10-1: USB disconnect, device number 7 [ 992.932778][T16721] loop8: detected capacity change from 0 to 512 [ 993.049686][T16721] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 993.063994][T16721] ext4 filesystem being mounted at /532/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 993.377357][T10737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.297705][T16742] loop7: detected capacity change from 0 to 2048 [ 994.322102][T16745] loop8: detected capacity change from 0 to 512 [ 994.328770][T16742] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 994.366930][T16749] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 994.409291][T16745] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 994.467422][T16745] EXT4-fs (loop8): 1 truncate cleaned up [ 994.475740][T16745] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.701361][T10737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.186410][T16758] loop9: detected capacity change from 0 to 64 [ 995.604888][T16763] loop5: detected capacity change from 0 to 512 [ 995.735137][T16763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.748876][T16763] ext4 filesystem being mounted at /913/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 995.809340][T16770] tipc: MTU too low for tipc bearer [ 995.929050][T16763] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.4723: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 996.009482][T16763] EXT4-fs (loop5): Remounting filesystem read-only [ 996.752857][ T6425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.096220][T16792] loop2: detected capacity change from 0 to 512 [ 997.214529][T16792] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 997.225858][T16792] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 997.236373][T16792] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4737: Failed to acquire dquot type 1 [ 997.272861][T16792] EXT4-fs (loop2): 1 truncate cleaned up [ 997.280998][T16792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 997.297563][T16792] ext4 filesystem being mounted at /969/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 997.402506][T16802] netdevsim netdevsim9: Firmware load for '../file0' refused, path contains '..' component [ 997.500410][ T5874] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 997.521185][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.726233][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 997.743028][ T5874] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.753733][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 997.765608][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 997.776933][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 997.787039][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 997.850389][ T5874] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 997.860644][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 997.869404][ T5874] usb 6-1: Product: syz [ 997.873835][ T5874] usb 6-1: Manufacturer: syz [ 997.878771][ T5874] usb 6-1: SerialNumber: syz [ 997.898152][ T5874] usb 6-1: config 0 descriptor?? [ 998.137711][ T5874] radio-si470x 6-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 998.180202][T16811] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4743'. [ 998.348998][ T5874] radio-si470x 6-1:0.0: software version 100, hardware version 101 [ 998.557010][ T5874] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 998.565871][ T5874] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 998.599855][ T5874] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 998.609844][ T5874] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 998.667541][ T5874] usb 6-1: USB disconnect, device number 18 [ 998.678904][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4746'. [ 998.739867][T16815] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4746'. [ 998.750479][T16815] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4746'. [ 1001.088582][T16855] loop9: detected capacity change from 0 to 256 [ 1001.102826][T16855] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1001.114360][T16855] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1001.247407][T16855] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1001.566844][T16855] exFAT-fs (loop9): error, invalid access to FAT (entry 0xffffffff) [ 1001.575773][T16855] exFAT-fs (loop9): Filesystem has been set read-only [ 1001.620640][T16855] exFAT-fs (loop9): error, invalid access to FAT (entry 0xffffffff) [ 1001.638290][T16855] exFAT-fs (loop9): error, invalid access to FAT (entry 0xffffffff) [ 1001.849525][T16865] loop8: detected capacity change from 0 to 512 [ 1001.890964][T16865] EXT4-fs: Ignoring removed nobh option [ 1001.945918][T16858] loop7: detected capacity change from 0 to 8192 [ 1002.009489][T16865] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 1002.019573][T16865] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61 [ 1002.035116][T16865] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #13: comm syz.8.4769: casefold flag without casefold feature [ 1002.056233][T16867] loop2: detected capacity change from 0 to 2048 [ 1002.073616][T16865] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.4769: couldn't read orphan inode 13 (err -117) [ 1002.104951][T16867] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1002.113022][T16867] UDF-fs: Scanning with blocksize 512 failed [ 1002.126665][T16865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1002.141477][T16867] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1002.525228][T10737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.683823][T16875] loop2: detected capacity change from 0 to 512 [ 1003.740834][T16875] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1003.887047][T16875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.900639][T16875] ext4 filesystem being mounted at /978/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1004.294421][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.447538][T16890] loop8: detected capacity change from 0 to 4096 [ 1004.629691][T16898] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1004.771046][T16890] NILFS (loop8): error -2 reading inode: ino=17293822569102704642 [ 1007.262761][ T5874] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1007.468966][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 1007.488001][ T5874] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 1007.496769][ T5874] usb 3-1: config 0 has no interface number 0 [ 1007.577192][ T5874] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 1007.586858][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.595535][ T5874] usb 3-1: Product: syz [ 1007.600061][ T5874] usb 3-1: Manufacturer: syz [ 1007.604886][ T5874] usb 3-1: SerialNumber: syz [ 1007.686990][ T5874] usb 3-1: config 0 descriptor?? [ 1007.924678][ T5874] peak_usb 3-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1008.109493][ T5874] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 1008.116644][ T5874] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 1008.124674][ T5874] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 1008.147482][T16953] loop9: detected capacity change from 0 to 64 [ 1008.226819][T16953] syz.9.4808: attempt to access beyond end of device [ 1008.226819][T16953] loop9: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1008.240447][T16955] loop5: detected capacity change from 0 to 1024 [ 1008.251097][T16953] buffer_io_error: 5 callbacks suppressed [ 1008.251160][T16953] Buffer I/O error on dev loop9, logical block 1295, async page read [ 1008.280682][T16959] loop8: detected capacity change from 0 to 1024 [ 1008.296895][ T5874] peak_usb 3-1:0.56: probe with driver peak_usb failed with error -22 [ 1008.315672][ T5874] usb 3-1: USB disconnect, device number 23 [ 1008.326090][T16953] syz.9.4808: attempt to access beyond end of device [ 1008.326090][T16953] loop9: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1008.341163][T16953] Buffer I/O error on dev loop9, logical block 1295, async page read [ 1008.359711][ T30] audit: type=1800 audit(2000000207.439:553): pid=16953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4808" name="file2" dev="loop9" ino=6 res=0 errno=0 [ 1008.419039][T16953] Trying to free block not in datazone [ 1008.424842][T16953] minix_free_block (loop9:21): bit already cleared [ 1008.448052][ T30] audit: type=1800 audit(2000000207.529:554): pid=16955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4807" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 1008.493648][T16959] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.498631][ T30] audit: type=1800 audit(2000000207.559:555): pid=16955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4807" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 1008.702703][ T3512] hfsplus: b-tree write err: -5, ino 4 [ 1008.837034][T10737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.105043][T16968] loop5: detected capacity change from 0 to 256 [ 1009.234139][T16972] loop8: detected capacity change from 0 to 512 [ 1009.254447][T16968] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011fde, chksum : 0x6fab550a, utbl_chksum : 0xe619d30d) [ 1009.382398][T16972] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.396910][T16972] ext4 filesystem being mounted at /555/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.642516][T16980] loop7: detected capacity change from 0 to 256 [ 1009.762482][T10737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.070363][T16985] loop5: detected capacity change from 0 to 512 [ 1010.098976][T16985] EXT4-fs: Ignoring removed orlov option [ 1010.190172][T16991] program syz.2.4823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1010.201116][T16985] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.4820: corrupted in-inode xattr: invalid ea_ino [ 1010.202344][T16985] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.4820: couldn't read orphan inode 15 (err -117) [ 1010.205326][T16985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.294438][T16993] use of bytesused == 0 is deprecated and will be removed in the future, [ 1010.305287][T16993] use the actual size instead. [ 1010.352543][T16995] loop7: detected capacity change from 0 to 128 [ 1010.451524][T16995] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1010.493338][ T6425] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 1010.581773][T16995] ext4 filesystem being mounted at /618/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.584983][ T6425] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 1010.656807][ T6425] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 1010.943487][T17002] loop9: detected capacity change from 0 to 256 [ 1010.970589][ T9879] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1011.023005][ T3704] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.049299][ T30] audit: type=1800 audit(2000000210.129:556): pid=17002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4828" name="file1" dev="loop9" ino=1049043 res=0 errno=0 [ 1011.051373][ T6425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.202796][ T3704] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.342294][ T3704] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.497197][ T3704] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.828141][T17012] loop2: detected capacity change from 0 to 16 [ 1011.859747][ T3704] bridge_slave_1: left allmulticast mode [ 1011.865739][ T3704] bridge_slave_1: left promiscuous mode [ 1011.872626][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.899573][T17012] erofs (device loop2): mounted with root inode @ nid 36. [ 1011.940812][ T3704] bridge_slave_0: left allmulticast mode [ 1011.946691][ T3704] bridge_slave_0: left promiscuous mode [ 1011.954519][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.223820][ T5881] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1012.364589][ T3704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.378769][ T5881] usb 10-1: Using ep0 maxpacket: 8 [ 1012.408672][ T5881] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1012.418087][ T5881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.426670][ T5881] usb 10-1: Product: syz [ 1012.431200][ T5881] usb 10-1: Manufacturer: syz [ 1012.436112][ T5881] usb 10-1: SerialNumber: syz [ 1012.455556][ T5881] usb 10-1: config 0 descriptor?? [ 1012.455985][ T3704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.472305][ T5881] gspca_main: se401-2.14.0 probing 047d:5003 [ 1012.489885][ T3704] bond0 (unregistering): Released all slaves [ 1012.606099][ T3704] tipc: Disabling bearer [ 1012.612586][ T3704] tipc: Disabling bearer [ 1012.647720][ T3704] tipc: Left network mode [ 1012.844609][ T3704] hsr_slave_0: left promiscuous mode [ 1012.873343][ T3704] hsr_slave_1: left promiscuous mode [ 1012.881283][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.892222][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.911843][ T3704] pim6reg (unregistering): left allmulticast mode [ 1013.078317][ T5881] usb 10-1: reset high-speed USB device number 8 using dummy_hcd [ 1013.245127][ T3704] team0 (unregistering): Port device team_slave_1 removed [ 1013.304295][ T3704] team0 (unregistering): Port device team_slave_0 removed [ 1013.969940][ T5881] gspca_se401: read req failed req 0x06 error -71 [ 1013.976886][ T5881] se401 10-1:0.0: probe with driver se401 failed with error -71 [ 1013.992579][ T5881] usb 10-1: USB disconnect, device number 8 [ 1014.185391][ T3704] IPVS: stop unused estimator thread 0... [ 1014.540786][T17026] smc: net device bond0 applied user defined pnetid SYZ2 [ 1014.575992][T11843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1014.590383][T11843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1014.612482][T11843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1014.641336][T11843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1014.669697][T11843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1014.899727][T17033] loop8: detected capacity change from 0 to 256 [ 1014.939900][T17033] exfat: Deprecated parameter 'utf8' [ 1015.047130][T17033] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 1015.092970][T17035] netlink: 232 bytes leftover after parsing attributes in process `syz.9.4843'. [ 1015.318211][T17039] loop2: detected capacity change from 0 to 64 [ 1015.336883][T17027] chnl_net:caif_netlink_parms(): no params data found [ 1016.249342][T17051] loop9: detected capacity change from 0 to 256 [ 1016.303289][T17051] FAT-fs (loop9): bogus logical sector size 58182 [ 1016.310500][T17051] FAT-fs (loop9): Can't find a valid FAT filesystem [ 1016.524947][T17027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.532661][T17027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.543475][T17027] bridge_slave_0: entered allmulticast mode [ 1016.554569][T17027] bridge_slave_0: entered promiscuous mode [ 1016.611887][T17027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.625922][T17027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.634007][T17027] bridge_slave_1: entered allmulticast mode [ 1016.645735][T17027] bridge_slave_1: entered promiscuous mode [ 1016.724433][T11843] Bluetooth: hci4: command tx timeout [ 1016.918673][T17027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.980186][T17027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.195676][T17027] team0: Port device team_slave_0 added [ 1017.254831][T17027] team0: Port device team_slave_1 added [ 1017.487594][T17027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.494960][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.522491][T17027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.599325][T17027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.606482][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.633170][T17027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.893588][T17027] hsr_slave_0: entered promiscuous mode [ 1017.903481][T17027] hsr_slave_1: entered promiscuous mode [ 1017.912206][T17027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1017.921193][T17027] Cannot create hsr debugfs directory [ 1017.930277][T17076] loop2: detected capacity change from 0 to 64 [ 1018.105390][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1018.790856][T11843] Bluetooth: hci4: command tx timeout [ 1019.970996][T17027] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1020.076809][T17027] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1020.170329][T17027] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1020.260374][T17027] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1020.883430][T11843] Bluetooth: hci4: command tx timeout [ 1021.217428][T17027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.432400][T17027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.517931][ T3704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.525537][ T3704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.623079][ T3704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.630691][ T3704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.857331][T17123] loop2: detected capacity change from 0 to 1024 [ 1022.234924][ T5881] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1022.439122][ T5881] usb 9-1: Using ep0 maxpacket: 32 [ 1022.446885][T17132] loop9: detected capacity change from 0 to 128 [ 1022.463775][ T5881] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1022.474257][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.516185][ T5881] usb 9-1: config 0 descriptor?? [ 1022.546185][ T5881] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1022.613273][T17132] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1022.708302][T17132] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.757131][ T30] audit: type=1326 audit(2000000221.839:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.2.4885" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5539 code=0x0 [ 1022.949338][T11843] Bluetooth: hci4: command tx timeout [ 1023.100406][T17027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.207606][ T5881] gspca_nw80x: reg_w err -71 [ 1023.214079][ T5881] nw80x 9-1:0.0: probe with driver nw80x failed with error -71 [ 1023.259356][ T5881] usb 9-1: USB disconnect, device number 7 [ 1023.544579][T17027] veth0_vlan: entered promiscuous mode [ 1023.569442][T14302] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1023.657766][T17027] veth1_vlan: entered promiscuous mode [ 1023.959265][T17027] veth0_macvtap: entered promiscuous mode [ 1024.038326][T17027] veth1_macvtap: entered promiscuous mode [ 1024.218781][T17027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.299642][T17027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.363467][T17027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.372929][T17027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.385129][T17027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.395940][T17027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.909789][ T5874] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1025.112125][ T5874] usb 10-1: config index 0 descriptor too short (expected 3133, got 61) [ 1025.121911][ T5874] usb 10-1: config 0 has an invalid interface number: 156 but max is 1 [ 1025.130705][ T5874] usb 10-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1025.139818][ T5874] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.151864][ T5874] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1025.162418][ T5874] usb 10-1: config 0 has no interface number 0 [ 1025.170630][ T5874] usb 10-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1025.182636][ T5874] usb 10-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1025.194893][ T5874] usb 10-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1025.205153][ T5874] usb 10-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1025.218756][ T5874] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1025.228150][ T5874] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.367131][ T5874] usb 10-1: config 0 descriptor?? [ 1025.407272][ T5874] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1025.614617][ T5874] spca561 10-1:0.156: probe with driver spca561 failed with error -22 [ 1025.627261][ T5874] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1025.634672][ T5874] usb 10-1: MIDIStreaming interface descriptor not found [ 1025.772837][T17173] pim6reg: entered allmulticast mode [ 1025.855216][ T5874] usb 10-1: USB disconnect, device number 9 [ 1025.869620][T17176] pim6reg: left allmulticast mode [ 1026.165400][T17180] loop2: detected capacity change from 0 to 512 [ 1026.220456][T17180] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1026.230186][T17180] EXT4-fs (loop2): blocks per group (64) and clusters per group (32768) inconsistent [ 1026.691014][T17184] loop7: detected capacity change from 0 to 1024 [ 1026.726143][T17188] loop9: detected capacity change from 0 to 64 [ 1028.066429][T17207] erofs: Unexpected value for 'acl' [ 1028.706672][T17217] loop2: detected capacity change from 0 to 2048 [ 1028.891280][T17217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.992017][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4917'. [ 1029.131664][T17217] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1029.185012][T17217] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 5 with error 28 [ 1029.185575][T17231] loop7: detected capacity change from 0 to 512 [ 1029.199583][T17217] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1029.199583][T17217] [ 1029.215029][T17217] EXT4-fs (loop2): Total free blocks count 0 [ 1029.221342][T17217] EXT4-fs (loop2): Free/Dirty block details [ 1029.227471][T17217] EXT4-fs (loop2): free_blocks=4096 [ 1029.233076][T17217] EXT4-fs (loop2): dirty_blocks=528 [ 1029.238578][T17217] EXT4-fs (loop2): Block reservation details [ 1029.251785][T17217] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 1029.321698][T17231] EXT4-fs: Ignoring removed mblk_io_submit option [ 1029.322773][T17233] loop8: detected capacity change from 0 to 128 [ 1029.367143][T17231] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1029.371854][T17233] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1029.411214][T17233] ext4 filesystem being mounted at /576/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.458011][T17233] EXT4-fs (loop8): shut down requested (2) [ 1029.500820][T17231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 1029.585527][T17231] System zones: 1-12 [ 1029.631604][T17231] EXT4-fs (loop7): 1 truncate cleaned up [ 1029.639715][T17231] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.641525][T10737] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1029.740642][ T3473] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1029.773785][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.782963][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.924246][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.932465][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.044479][ T9879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.681188][T17250] loop1: detected capacity change from 0 to 128 [ 1030.768945][T17250] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1030.789301][T17250] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.873099][T17255] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4926'. [ 1030.985442][ T30] audit: type=1400 audit(2000000230.059:558): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26FEA175E41F pid=17249 comm="syz.1.4835" [ 1031.124153][T17258] loop8: detected capacity change from 0 to 2048 [ 1031.234692][T17258] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1031.247098][T17027] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1031.276171][T17261] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1032.056543][T17265] loop2: detected capacity change from 0 to 2048 [ 1032.126192][T17265] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1032.453038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 1034.704609][T17310] loop2: detected capacity change from 0 to 512 [ 1034.715882][T17311] loop1: detected capacity change from 0 to 512 [ 1034.730880][T17311] EXT4-fs: Ignoring removed orlov option [ 1034.848888][T17311] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #15: comm syz.1.4950: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 1034.863410][T17310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.888282][T17310] ext4 filesystem being mounted at /1019/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.919598][T17311] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.4950: couldn't read orphan inode 15 (err -117) [ 1034.935533][T17311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.069003][T17310] EXT4-fs error (device loop2): ext4_get_first_dir_block:3525: inode #12: comm syz.2.4951: Attempting to read directory block (0) that is past i_size (3) [ 1035.204228][T17027] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.372673][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.524783][T17326] loop7: detected capacity change from 0 to 256 [ 1035.800734][T17326] FAT-fs (loop7): Directory bread(block 64) failed [ 1035.808635][T17326] FAT-fs (loop7): Directory bread(block 65) failed [ 1035.815911][T17326] FAT-fs (loop7): Directory bread(block 66) failed [ 1035.822840][T17326] FAT-fs (loop7): Directory bread(block 67) failed [ 1035.829854][T17326] FAT-fs (loop7): Directory bread(block 68) failed [ 1035.836596][T17326] FAT-fs (loop7): Directory bread(block 69) failed [ 1035.843738][T17326] FAT-fs (loop7): Directory bread(block 70) failed [ 1035.850597][T17326] FAT-fs (loop7): Directory bread(block 71) failed [ 1035.857494][T17326] FAT-fs (loop7): Directory bread(block 72) failed [ 1035.864454][T17326] FAT-fs (loop7): Directory bread(block 73) failed [ 1035.983334][T17334] netlink: 'syz.9.4960': attribute type 1 has an invalid length. [ 1035.992479][T17334] netlink: 'syz.9.4960': attribute type 1 has an invalid length. [ 1036.004877][T17334] netlink: 'syz.9.4960': attribute type 1 has an invalid length. [ 1036.016506][T17334] netlink: 'syz.9.4960': attribute type 1 has an invalid length. [ 1036.027289][T17334] netlink: 'syz.9.4960': attribute type 1 has an invalid length. [ 1036.035446][T17334] netlink: 'syz.9.4960': attribute type 1 has an invalid length. [ 1036.044738][T17334] netlink: 'syz.9.4960': attribute type 1 has an invalid length. [ 1036.052835][T17334] netlink: 'syz.9.4960': attribute type 1 has an invalid length. [ 1036.060864][T17334] netlink: 'syz.9.4960': attribute type 1 has an invalid length. [ 1036.069081][T17334] netlink: 'syz.9.4960': attribute type 1 has an invalid length. [ 1036.477174][T17341] loop2: detected capacity change from 0 to 512 [ 1036.516745][T17341] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 1036.650201][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4962'. [ 1036.659659][T17341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4962'. [ 1037.048680][T17348] loop9: detected capacity change from 0 to 1024 [ 1037.071502][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4968'. [ 1037.092159][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4968'. [ 1038.136800][T17370] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4977'. [ 1038.545082][T17372] loop7: detected capacity change from 0 to 1024 [ 1038.612545][T17372] EXT4-fs: inline encryption not supported [ 1038.618840][T17372] EXT4-fs: Ignoring removed i_version option [ 1038.679078][T17372] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1038.820148][T17372] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #3: block 1: comm syz.7.4978: lblock 1 mapped to illegal pblock 1 (length 1) [ 1038.939389][T17372] Quota error (device loop7): write_blk: dquota write failed [ 1038.947152][T17372] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1038.957868][T17372] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4978: Failed to acquire dquot type 0 [ 1038.963654][ T30] audit: type=1326 audit(2000000238.029:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17377 comm="syz.9.4980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1038.996033][ T30] audit: type=1326 audit(2000000238.029:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17377 comm="syz.9.4980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1039.117640][ T30] audit: type=1326 audit(2000000238.119:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17377 comm="syz.9.4980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1039.120748][T17382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4981'. [ 1039.140893][ T30] audit: type=1326 audit(2000000238.119:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17377 comm="syz.9.4980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1039.172004][ T30] audit: type=1326 audit(2000000238.119:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17377 comm="syz.9.4980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1039.197787][ T30] audit: type=1326 audit(2000000238.139:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17377 comm="syz.9.4980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=256 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1039.221969][ T30] audit: type=1326 audit(2000000238.139:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17377 comm="syz.9.4980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1039.238862][T17372] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.4978: Freeing blocks not in datazone - block = 0, count = 4096 [ 1039.245031][ T30] audit: type=1326 audit(2000000238.139:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17377 comm="syz.9.4980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1039.352281][T17372] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.4978: Invalid inode bitmap blk 0 in block_group 0 [ 1039.369629][T17372] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 1039.399158][T11294] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1039.425306][T11294] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 1039.437371][T17372] EXT4-fs (loop7): 1 orphan inode deleted [ 1039.439707][T17372] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1039.590903][T17372] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm syz.7.4978: lblock 1 mapped to illegal pblock 1 (length 1) [ 1039.630864][T17372] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4978: Failed to acquire dquot type 0 [ 1039.713404][T17386] can0: slcan on ttyS3. [ 1039.812849][T17383] can0 (unregistered): slcan off ttyS3. [ 1039.946297][ T9879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.583751][T17397] loop8: detected capacity change from 0 to 4096 [ 1040.656591][T17402] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1041.437215][T17418] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4999'. [ 1041.447870][T17418] validate_nla: 43 callbacks suppressed [ 1041.447935][T17418] netlink: 'syz.2.4999': attribute type 9 has an invalid length. [ 1041.462282][T17418] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4999'. [ 1041.472061][T17418] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4999'. [ 1041.969000][T17420] loop2: detected capacity change from 0 to 1764 [ 1042.644628][T17436] loop2: detected capacity change from 0 to 128 [ 1042.710967][T17434] loop9: detected capacity change from 0 to 512 [ 1042.735289][T17436] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 1042.743736][T17436] FAT-fs (loop2): Filesystem has been set read-only [ 1042.753250][T17436] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 1042.822180][T17434] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1042.835735][T17434] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1043.257922][T17445] loop8: detected capacity change from 0 to 1024 [ 1043.299237][T14302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.353970][T11843] Bluetooth: hci4: command tx timeout [ 1044.186516][T17455] loop8: detected capacity change from 0 to 4096 [ 1044.233801][T17455] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1044.433819][T17455] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1044.489131][T17464] loop7: detected capacity change from 0 to 512 [ 1044.633042][T17464] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1044.817791][T17467] loop1: detected capacity change from 0 to 512 [ 1044.860078][T17464] __quota_error: 3 callbacks suppressed [ 1044.860151][T17464] Quota error (device loop7): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 1044.871285][T17467] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.5020: bad orphan inode 11 [ 1044.877180][T17464] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1044.935122][T17467] ext4_test_bit(bit=10, block=4) = 1 [ 1044.940953][T17467] is_bad_inode(inode)=0 [ 1044.945485][T17467] NEXT_ORPHAN(inode)=2080374784 [ 1044.950803][T17467] max_ino=32 [ 1044.954180][T17467] i_nlink=0 [ 1044.957687][T17467] EXT4-fs (loop1): 1 truncate cleaned up [ 1044.965860][T17467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.114490][T17027] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.305762][ T9879] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1046.130328][T17488] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5028'. [ 1046.145417][T17488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5028'. [ 1046.666652][T17496] loop2: detected capacity change from 0 to 256 [ 1047.330621][T17509] netlink: 'syz.2.5038': attribute type 2 has an invalid length. [ 1047.933265][T17518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5041'. [ 1048.037760][T17523] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 1048.990620][T17535] smc: net device bond0 erased user defined pnetid SYZ2 [ 1049.279300][T17541] loop1: detected capacity change from 0 to 512 [ 1049.323643][T17541] EXT4-fs: Ignoring removed bh option [ 1049.370521][T17541] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1049.422738][T17541] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1049.459292][T17541] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1049.465864][T17541] EXT4-fs error (device loop1): ext4_quota_enable:7120: comm syz.1.5052: Bad quota inum: 4294967291, type: 0 [ 1049.558081][T17541] EXT4-fs (loop1): Remounting filesystem read-only [ 1049.565175][T17541] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 1049.581317][T17541] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1049.591267][T17541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1049.611779][T17547] loop8: detected capacity change from 0 to 2048 [ 1049.675813][T17547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1049.844376][T17550] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5057'. [ 1049.854391][T17550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5057'. [ 1049.980057][T17027] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.811007][T17564] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5064'. [ 1050.820631][T17564] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5064'. [ 1051.731903][T17580] loop1: detected capacity change from 0 to 1024 [ 1052.051924][T17587] hfsplus: request for non-existent node 211 in B*Tree [ 1052.059376][T17587] hfsplus: request for non-existent node 211 in B*Tree [ 1052.326799][ T1120] hfsplus: b-tree write err: -5, ino 8 [ 1052.519630][T17595] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5077'. [ 1052.529195][T17595] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5077'. [ 1052.771141][ T5877] kernel write not supported for file /584/net/fib_triestat (pid: 5877 comm: kworker/1:3) [ 1053.214737][T17600] loop8: detected capacity change from 0 to 4096 [ 1053.472975][T17613] loop2: detected capacity change from 0 to 8 [ 1053.599481][T17613] SQUASHFS error: xz decompression failed, data probably corrupt [ 1053.607534][T17613] SQUASHFS error: Failed to read block 0xa8: -5 [ 1053.622458][T17613] SQUASHFS error: xz decompression failed, data probably corrupt [ 1053.633235][T17613] SQUASHFS error: Failed to read block 0xa8: -5 [ 1053.645383][ T30] audit: type=1800 audit(2000000252.729:567): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5085" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 1053.719681][T17600] ntfs3(loop8): failed to convert "0000" to iso8859-14 [ 1054.472214][T17621] loop8: detected capacity change from 0 to 1024 [ 1054.810548][ T3473] hfsplus: b-tree write err: -5, ino 4 [ 1055.132303][T17633] program syz.1.5096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1055.770264][T17647] loop8: detected capacity change from 0 to 256 [ 1056.456831][T17649] loop2: detected capacity change from 0 to 8192 [ 1057.567359][T17670] loop2: detected capacity change from 0 to 1024 [ 1057.749899][T17670] hfsplus: bad catalog entry type [ 1057.769034][ T5874] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1057.949471][ T5874] usb 9-1: Using ep0 maxpacket: 8 [ 1057.969550][ T3473] hfsplus: b-tree write err: -5, ino 4 [ 1057.977595][ T5874] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.989789][ T5874] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.000512][ T5874] usb 9-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1058.010677][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.120912][ T5874] usb 9-1: config 0 descriptor?? [ 1058.176195][T17682] loop7: detected capacity change from 0 to 1024 [ 1058.599701][ T5874] wacom 0003:056A:0000.002A: item fetching failed at offset 10/11 [ 1058.649103][ T5874] wacom 0003:056A:0000.002A: parse failed [ 1058.655520][ T5874] wacom 0003:056A:0000.002A: probe with driver wacom failed with error -22 [ 1058.684551][ T3704] hfsplus: b-tree write err: -5, ino 4 [ 1058.805312][ T5874] usb 9-1: USB disconnect, device number 8 [ 1059.013385][T17692] loop2: detected capacity change from 0 to 1024 [ 1059.869077][ T5874] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1060.050203][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5133'. [ 1060.081200][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 1060.137933][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.149588][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.159753][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1060.174516][ T5874] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 1060.186646][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.219881][ T5874] usb 3-1: config 0 descriptor?? [ 1060.674176][ T5874] hid (null): invalid report_size 14847 [ 1060.736885][ T5874] hid-generic 0003:045E:9994.002B: unknown main item tag 0x3 [ 1060.745008][ T5874] hid-generic 0003:045E:9994.002B: unknown main item tag 0x2 [ 1060.752932][ T5874] hid-generic 0003:045E:9994.002B: collection stack underflow [ 1060.762550][ T5874] hid-generic 0003:045E:9994.002B: item 0 4 0 12 parsing failed [ 1060.870572][ T5874] hid-generic 0003:045E:9994.002B: probe with driver hid-generic failed with error -22 [ 1060.919981][ T5877] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1060.939837][ T5874] usb 3-1: USB disconnect, device number 24 [ 1061.092241][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 1061.124941][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.136365][ T5877] usb 2-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 1061.145841][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.155424][T17725] atomic_op ffff88804b875928 conn xmit_atomic 0000000000000000 [ 1061.199352][ T5877] usb 2-1: config 0 descriptor?? [ 1061.689455][ T5877] apple 0003:05AC:027C.002C: hidraw0: USB HID v0.05 Device [HID 05ac:027c] on usb-dummy_hcd.1-1/input0 [ 1061.865990][ T5877] usb 2-1: USB disconnect, device number 3 [ 1062.204167][T17734] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1062.889390][T17743] loop1: detected capacity change from 0 to 256 [ 1063.239705][T17743] FAT-fs (loop1): Directory bread(block 64) failed [ 1063.246505][T17743] FAT-fs (loop1): Directory bread(block 65) failed [ 1063.257448][T17743] FAT-fs (loop1): Directory bread(block 66) failed [ 1063.265964][T17743] FAT-fs (loop1): Directory bread(block 67) failed [ 1063.273241][T17743] FAT-fs (loop1): Directory bread(block 68) failed [ 1063.280363][T17743] FAT-fs (loop1): Directory bread(block 69) failed [ 1063.287247][T17743] FAT-fs (loop1): Directory bread(block 70) failed [ 1063.294191][T17743] FAT-fs (loop1): Directory bread(block 71) failed [ 1063.301250][T17743] FAT-fs (loop1): Directory bread(block 72) failed [ 1063.308009][T17743] FAT-fs (loop1): Directory bread(block 73) failed [ 1063.614771][T17751] loop2: detected capacity change from 0 to 64 [ 1063.690953][T17751] hfs: filesystem is marked locked, mounting read-only. [ 1064.068267][ T5821] hfs: walked past end of dir [ 1064.099332][ T5821] hfs: walked past end of dir [ 1064.500615][T17761] netlink: 'syz.9.5159': attribute type 10 has an invalid length. [ 1064.543430][ T3968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.652617][T17761] team0: Port device netdevsim3 added [ 1064.719883][T17763] netlink: 'syz.9.5159': attribute type 10 has an invalid length. [ 1064.752252][ T3968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.865410][T17763] team0: Port device netdevsim3 removed [ 1064.969198][ T3968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.233531][ T3968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.349476][T17766] loop8: detected capacity change from 0 to 512 [ 1065.394749][T17766] EXT4-fs: Ignoring removed oldalloc option [ 1065.445136][T17766] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1065.535939][T17766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 1065.565999][T17766] System zones: 1-12 [ 1065.577973][T17766] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.5162: corrupted in-inode xattr: e_name out of bounds [ 1065.599447][ T3968] bridge_slave_1: left allmulticast mode [ 1065.605331][ T3968] bridge_slave_1: left promiscuous mode [ 1065.616198][ T3968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.649499][T17766] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.5162: couldn't read orphan inode 15 (err -117) [ 1065.670135][ T3968] bridge_slave_0: left allmulticast mode [ 1065.676005][ T3968] bridge_slave_0: left promiscuous mode [ 1065.682168][T17766] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.682720][ T3968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.300289][ T3968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.362236][ T3968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.404209][ T3968] bond0 (unregistering): Released all slaves [ 1066.459223][T10737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.675847][ T3968] IPVS: stopping master sync thread 10824 ... [ 1067.038629][ T3968] hsr_slave_0: left promiscuous mode [ 1067.058501][ T3968] hsr_slave_1: left promiscuous mode [ 1067.066078][ T3968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.073919][ T3968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.101339][ T3968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.111494][ T3968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.179119][ T3968] veth1_macvtap: left promiscuous mode [ 1067.184869][ T3968] veth0_macvtap: left promiscuous mode [ 1067.192206][ T3968] veth1_vlan: left promiscuous mode [ 1067.197779][ T3968] veth0_vlan: left promiscuous mode [ 1067.511394][ T3968] pim6reg527 (unregistering): left allmulticast mode [ 1067.869780][ T3968] team0 (unregistering): Port device team_slave_1 removed [ 1067.916941][ T3968] team0 (unregistering): Port device team_slave_0 removed [ 1068.891640][T17781] loop9: detected capacity change from 0 to 256 [ 1068.931811][T17781] exfat: Deprecated parameter 'namecase' [ 1069.033091][T17781] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1069.044178][ T5109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1069.058090][ T5109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1069.067574][ T5109] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1069.113636][ T5109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1069.124950][ T5109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1069.502705][T17788] loop1: detected capacity change from 0 to 256 [ 1069.725911][T17788] FAT-fs (loop1): Directory bread(block 64) failed [ 1069.733130][T17788] FAT-fs (loop1): Directory bread(block 65) failed [ 1069.740377][T17788] FAT-fs (loop1): Directory bread(block 66) failed [ 1069.747135][T17788] FAT-fs (loop1): Directory bread(block 67) failed [ 1069.754466][T17788] FAT-fs (loop1): Directory bread(block 68) failed [ 1069.761357][T17788] FAT-fs (loop1): Directory bread(block 69) failed [ 1069.768281][T17788] FAT-fs (loop1): Directory bread(block 70) failed [ 1069.775201][T17788] FAT-fs (loop1): Directory bread(block 71) failed [ 1069.782320][T17788] FAT-fs (loop1): Directory bread(block 72) failed [ 1069.791317][T17788] FAT-fs (loop1): Directory bread(block 73) failed [ 1069.943694][T17783] chnl_net:caif_netlink_parms(): no params data found [ 1071.077271][T17805] loop9: detected capacity change from 0 to 1024 [ 1071.107991][T17805] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1071.183938][T17783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.192150][T17783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.201830][T17783] bridge_slave_0: entered allmulticast mode [ 1071.211185][T17783] bridge_slave_0: entered promiscuous mode [ 1071.229155][ T5109] Bluetooth: hci2: command tx timeout [ 1071.262609][T17805] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.342981][T17783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.350764][T17783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.358752][T17783] bridge_slave_1: entered allmulticast mode [ 1071.368139][T17783] bridge_slave_1: entered promiscuous mode [ 1071.481158][T17805] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.5176: missing EA_INODE flag [ 1071.500740][T17805] EXT4-fs (loop9): Remounting filesystem read-only [ 1071.526607][T17783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.604321][T17783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.779022][T14302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.881256][T17783] team0: Port device team_slave_0 added [ 1071.946575][T17783] team0: Port device team_slave_1 added [ 1072.164937][T17819] 9pnet_fd: p9_fd_create_unix (17819): problem connecting socket: qY3aK: -111 [ 1072.194739][T17783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.202061][T17783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.228729][T17783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.305068][T17783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.315313][T17783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.341805][T17783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.628060][T17783] hsr_slave_0: entered promiscuous mode [ 1072.638028][T17783] hsr_slave_1: entered promiscuous mode [ 1072.646758][T17783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.654628][T17783] Cannot create hsr debugfs directory [ 1072.729257][T17821] loop9: detected capacity change from 0 to 4096 [ 1072.756025][T17821] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 1073.279170][ T5109] Bluetooth: hci2: command tx timeout [ 1073.825431][T17783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1073.858958][T17783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1073.947469][T17783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1074.040854][T17783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1074.931525][T17783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.090568][T17783] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.205064][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.212681][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.331210][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.338794][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.357155][ T5109] Bluetooth: hci2: command tx timeout [ 1076.110103][T17853] No buffer was provided with the request [ 1076.311235][T11843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1076.347560][T11843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1076.365258][T11843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1076.386812][T11843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1076.404677][T11843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1077.222791][T17783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.429467][ T5109] Bluetooth: hci2: command tx timeout [ 1077.709436][T17868] loop1: detected capacity change from 0 to 4096 [ 1078.339323][T17854] chnl_net:caif_netlink_parms(): no params data found [ 1078.378998][T17880] loop9: detected capacity change from 0 to 64 [ 1078.475431][ T5109] Bluetooth: hci6: command tx timeout [ 1078.497047][T17880] hfs: unable to locate alternate MDB [ 1078.503123][T17880] hfs: continuing without an alternate MDB [ 1078.520859][T17875] loop8: detected capacity change from 0 to 4096 [ 1078.724453][ T30] audit: type=1800 audit(2000000277.809:568): pid=17880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5204" name="file1" dev="loop9" ino=18 res=0 errno=0 [ 1078.838269][T17875] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 1078.873843][ T3704] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.955963][ T30] audit: type=1800 audit(2000000278.029:569): pid=17875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5203" name="file1" dev="loop8" ino=30 res=0 errno=0 [ 1079.031517][ T3704] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.255256][ T3704] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.360301][ T3704] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.574806][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1079.925311][ T3704] bridge_slave_1: left allmulticast mode [ 1079.933751][ T3704] bridge_slave_1: left promiscuous mode [ 1079.940665][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.950739][T17895] loop8: detected capacity change from 0 to 2048 [ 1079.988006][ T3704] bridge_slave_0: left allmulticast mode [ 1079.995311][ T3704] bridge_slave_0: left promiscuous mode [ 1080.002052][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.023627][T17895] loop8: p1 < > p3 p4 < > [ 1080.047781][T17895] loop8: p3 start 4284289 is beyond EOD, truncated [ 1080.553033][ T5109] Bluetooth: hci6: command tx timeout [ 1080.612618][ T3704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.630612][ T3704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1080.671827][ T3704] bond0 (unregistering): Released all slaves [ 1080.728720][T17783] veth0_vlan: entered promiscuous mode [ 1080.742558][T17854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.755156][T17854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.764092][T17854] bridge_slave_0: entered allmulticast mode [ 1080.773277][T17854] bridge_slave_0: entered promiscuous mode [ 1080.829019][T17783] veth1_vlan: entered promiscuous mode [ 1080.918546][T17854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.926259][T17854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.935612][T17854] bridge_slave_1: entered allmulticast mode [ 1080.944944][T17854] bridge_slave_1: entered promiscuous mode [ 1080.964412][ T1631] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1080.982642][ T3704] tipc: Disabling bearer [ 1080.997719][ T3704] tipc: Disabling bearer [ 1081.004553][ T3704] tipc: Left network mode [ 1081.168627][ T1631] usb 9-1: Using ep0 maxpacket: 8 [ 1081.210607][ T1631] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.221902][ T1631] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.232044][ T1631] usb 9-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 1081.241433][ T1631] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.296230][T17854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.327030][ T1631] usb 9-1: config 0 descriptor?? [ 1081.351702][T17854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.779648][ T1631] logitech-hidpp-device 0003:046D:C343.002D: unknown main item tag 0x0 [ 1081.822040][T17854] team0: Port device team_slave_0 added [ 1081.860551][ T1631] logitech-hidpp-device 0003:046D:C343.002D: hidraw0: USB HID v3.0e Device [HID 046d:c343] on usb-dummy_hcd.8-1/input0 [ 1081.962558][ T1631] usb 9-1: USB disconnect, device number 9 [ 1081.982880][T17854] team0: Port device team_slave_1 added [ 1082.031458][T17783] veth0_macvtap: entered promiscuous mode [ 1082.129512][ T3704] hsr_slave_0: left promiscuous mode [ 1082.140952][ T3704] hsr_slave_1: left promiscuous mode [ 1082.148950][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.156643][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.172838][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.183663][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.221606][ T3704] veth1_macvtap: left promiscuous mode [ 1082.228209][ T3704] veth0_macvtap: left promiscuous mode [ 1082.234330][ T3704] veth1_vlan: left promiscuous mode [ 1082.239977][ T3704] veth0_vlan: left promiscuous mode [ 1082.639340][ T5109] Bluetooth: hci6: command tx timeout [ 1082.704373][ T3704] pim6reg (unregistering): left allmulticast mode [ 1083.126022][ T3704] team0 (unregistering): Port device team_slave_1 removed [ 1083.167691][ T3704] team0 (unregistering): Port device team_slave_0 removed [ 1083.257335][T17924] loop9: detected capacity change from 0 to 2048 [ 1083.438211][T17924] loop9: p1 < > p3 p4 < > [ 1083.454359][T17924] loop9: p3 start 4284289 is beyond EOD, truncated [ 1083.639478][T17854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.646755][T17854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.673460][T17854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.710278][T17919] pim6reg: entered allmulticast mode [ 1083.718938][T17920] pim6reg: left allmulticast mode [ 1083.771794][T17783] veth1_macvtap: entered promiscuous mode [ 1083.840766][T17854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.847992][T17854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.875711][T17854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.974583][ T3704] IPVS: stop unused estimator thread 0... [ 1084.085996][T17783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.307910][T17854] hsr_slave_0: entered promiscuous mode [ 1084.318213][T17854] hsr_slave_1: entered promiscuous mode [ 1084.326811][T17854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1084.335672][T17854] Cannot create hsr debugfs directory [ 1084.365481][T17783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.426997][T17783] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.441709][T17783] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.454148][T17783] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.464223][T17783] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.698318][T17937] netlink: 260 bytes leftover after parsing attributes in process `syz.9.5224'. [ 1084.728235][ T5109] Bluetooth: hci6: command tx timeout [ 1085.770106][T17947] loop8: detected capacity change from 0 to 1024 [ 1085.975467][T17854] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1086.092961][T17854] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1086.159810][T17854] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1086.207316][T17854] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1087.141050][T17854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.311441][T17854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.421377][T11294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.429002][T11294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.510886][T11294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.518544][T11294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.829119][T17978] loop9: detected capacity change from 0 to 256 [ 1089.317880][T17854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.687013][T18008] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1089.936554][ T3968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.944998][ T3968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.149886][T17886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.157968][T17886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.878549][T18024] sd 0:0:1:0: device reset [ 1091.413573][T17854] veth0_vlan: entered promiscuous mode [ 1091.453651][T17854] veth1_vlan: entered promiscuous mode [ 1091.650584][T17854] veth0_macvtap: entered promiscuous mode [ 1091.696179][T17854] veth1_macvtap: entered promiscuous mode [ 1091.782021][T17854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.890860][T17854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.987296][T17854] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.997837][T17854] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.007070][T17854] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.019278][T17854] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.142874][T18035] loop1: detected capacity change from 0 to 1024 [ 1092.557671][ T3968] hfsplus: b-tree write err: -5, ino 4 [ 1092.823030][ T30] audit: type=1326 audit(2000000005.660:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18032 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7fc00000 [ 1093.895935][T18061] loop8: detected capacity change from 0 to 128 [ 1094.108658][ T30] audit: type=1804 audit(2000000006.950:571): pid=18067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5268" name="/" dev="pidfs" ino=18066 res=1 errno=0 [ 1094.730758][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 1095.921886][T18098] loop4: detected capacity change from 0 to 16 [ 1095.973733][T18098] erofs (device loop4): unsupported datalayout 7 of nid 36 [ 1096.450424][T18099] loop9: detected capacity change from 0 to 4096 [ 1096.511672][T18099] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1096.556314][T18099] ntfs3(loop9): It is recommened to use chkdsk. [ 1096.850545][T18099] ntfs3(loop9): ino=1b, "file0" ntfs_readdir [ 1097.161805][T18113] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5286'. [ 1097.263679][ T3968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.272773][ T3968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.439587][ T3704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.447674][ T3704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.740352][T18120] netlink: 'syz.9.5288': attribute type 1 has an invalid length. [ 1098.652935][T18136] loop6: detected capacity change from 0 to 256 [ 1098.715217][T18136] exfat: Unknown parameter 'allow_u y5@PPbset00000000000Zg5' [ 1098.865096][T18142] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5298'. [ 1099.451027][T18150] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5304'. [ 1099.472247][T18152] loop6: detected capacity change from 0 to 64 [ 1099.889840][T18156] tipc: Enabling of bearer rejected, failed to enable media [ 1101.237962][T18176] loop6: detected capacity change from 0 to 256 [ 1101.289029][ T30] audit: type=1800 audit(2000000014.120:572): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5319" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1101.346258][T18178] sp0: Synchronizing with TNC [ 1101.733587][T18185] binder_alloc: binder_alloc_mmap_handler: 18184 80ffd000-81000000 already mapped failed -16 [ 1101.947101][T18189] loop6: detected capacity change from 0 to 1024 [ 1102.360705][ T3704] hfsplus: b-tree write err: -5, ino 4 [ 1103.395758][T18216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5334'. [ 1103.692180][T18224] loop8: detected capacity change from 0 to 128 [ 1104.573737][T18230] ALSA: seq fatal error: cannot create timer (-19) [ 1106.502454][T18272] loop1: detected capacity change from 0 to 764 [ 1106.820686][T18278] loop9: detected capacity change from 0 to 512 [ 1106.832857][T18275] loop4: detected capacity change from 0 to 1024 [ 1106.885409][T18278] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1106.947137][T18278] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.5365: bad orphan inode 15 [ 1107.001295][T18275] ptrace attach of "./syz-executor exec"[17783] was attempted by " [ 1107.006340][T18282] loop1: detected capacity change from 0 to 256 [ 1107.037408][T18278] ext4_test_bit(bit=14, block=4) = 1 [ 1107.116518][T18278] is_bad_inode(inode)=0 [ 1107.121526][T18278] NEXT_ORPHAN(inode)=0 [ 1107.125774][T18278] max_ino=32 [ 1107.129318][T18278] i_nlink=1 [ 1107.134605][T18278] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.312741][T18282] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1107.327957][T18282] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1107.541836][T14302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.703989][T18284] loop8: detected capacity change from 0 to 2048 [ 1107.759687][T18286] program syz.4.5368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1107.830101][T18284] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1108.270740][T10737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.994724][T18302] loop4: detected capacity change from 0 to 128 [ 1109.083231][T18302] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1109.124458][T18302] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1109.509304][T18304] loop9: detected capacity change from 0 to 4096 [ 1109.533790][T18304] ntfs3(loop9): It is recommened to use chkdsk. [ 1109.556089][T18304] ntfs3(loop9): try to read out of volume at offset 0x3fffffc0c00 [ 1109.567036][T18304] ntfs3(loop9): try to read out of volume at offset 0x3fffffc0c00 [ 1109.577378][T18304] ntfs3(loop9): try to read out of volume at offset 0x3fffffc0c00 [ 1109.587505][T18304] ntfs3(loop9): try to read out of volume at offset 0x3fffffc0c00 [ 1109.595876][T18304] ntfs3(loop9): try to read out of volume at offset 0x3fffffc1c00 [ 1109.604262][T18304] ntfs3(loop9): try to read out of volume at offset 0x3fffffc2c00 [ 1109.612635][T18304] ntfs3(loop9): try to read out of volume at offset 0x3fffffc4c00 [ 1109.621079][T18304] ntfs3(loop9): try to read out of volume at offset 0x3fffffc8c00 [ 1109.630554][T18304] ntfs3(loop9): try to read out of volume at offset 0x3fffffd0c00 [ 1109.682367][T17783] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1111.048202][T18322] loop8: detected capacity change from 0 to 256 [ 1111.573712][T18328] devtmpfs: Too few inodes for current use [ 1113.574688][T18353] loop8: detected capacity change from 0 to 1764 [ 1113.759070][T18353] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1114.448185][T18365] loop1: detected capacity change from 0 to 512 [ 1114.496869][T18365] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1114.533792][T18365] EXT4-fs (loop1): 1 truncate cleaned up [ 1114.544616][T18365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1114.896219][T17027] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.025475][T18373] loop4: detected capacity change from 0 to 2048 [ 1115.136265][T18373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1115.234827][T18373] EXT4-fs error (device loop4): ext4_ext_precache:649: inode #2: comm syz.4.5407: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1115.273643][T18373] EXT4-fs (loop4): Remounting filesystem read-only [ 1115.544370][T17783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.164590][T18392] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5413'. [ 1116.249845][T18389] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5413'. [ 1118.337194][T18416] loop9: detected capacity change from 0 to 4096 [ 1118.508192][T18416] ntfs3(loop9): ino=1a, mi_enum_attr [ 1118.514322][T18416] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1118.749593][T18424] loop1: detected capacity change from 0 to 512 [ 1118.853460][T18424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1118.963218][T18424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.977392][T18424] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.369963][T17027] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.517361][ T30] audit: type=1326 audit(2000000032.360:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18436 comm="syz.8.5436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 1120.270159][T18443] loop4: detected capacity change from 0 to 4096 [ 1120.302604][T18443] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1120.397584][T18449] loop1: detected capacity change from 0 to 256 [ 1120.550131][T18449] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 1120.582930][T18449] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 1120.635263][T18449] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 1120.646636][T18443] ntfs3(loop4): ino=19, mi_enum_attr [ 1120.653031][T18443] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1120.751454][T18443] ntfs3(loop4): failed to convert "c46c" to iso8859-13 [ 1120.819823][T18443] ntfs3(loop4): ino=20, mi_enum_attr [ 1122.176542][T18467] loop1: detected capacity change from 0 to 2048 [ 1122.230906][T18473] loop4: detected capacity change from 0 to 64 [ 1122.351584][T18467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1122.565436][T11843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1122.579475][T11843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1122.606244][T11843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1122.620062][T11843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1122.634180][T11843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1123.500754][T18485] ptrace attach of "./syz-executor exec"[18486] was attempted by "./syz-executor exec"[18485] [ 1123.659565][T18484] loop4: detected capacity change from 0 to 4096 [ 1123.896143][T18490] loop8: detected capacity change from 0 to 2048 [ 1124.032366][T18490] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1124.042501][T18490] NILFS (loop8): mounting unchecked fs [ 1124.113629][T18475] chnl_net:caif_netlink_parms(): no params data found [ 1124.245950][T18484] ntfs3(loop4): ino=5, "/" ntfs_readdir [ 1124.248756][T18490] NILFS (loop8): recovery complete [ 1124.251979][T18484] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1124.305934][T18496] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1124.657324][ T3968] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.709396][ T5109] Bluetooth: hci0: command tx timeout [ 1124.844093][ T3968] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.052307][ T3968] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.300813][T18507] loop9: detected capacity change from 0 to 2048 [ 1125.398179][ T3968] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.431138][T18510] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1125.469100][T18506] can0: slcan on ttyS3. [ 1125.499416][T18475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.506947][T18475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.516104][T18475] bridge_slave_0: entered allmulticast mode [ 1125.530052][T18475] bridge_slave_0: entered promiscuous mode [ 1125.573538][T18507] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1125.685882][T18509] can0 (unregistered): slcan off ttyS3. [ 1125.694604][T18475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.698774][T18507] Remounting filesystem read-only [ 1125.706189][T18475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.717148][T18475] bridge_slave_1: entered allmulticast mode [ 1125.726533][T18475] bridge_slave_1: entered promiscuous mode [ 1125.759357][ T3968] bridge_slave_1: left allmulticast mode [ 1125.765234][ T3968] bridge_slave_1: left promiscuous mode [ 1125.772417][ T3968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.786447][ T3968] bridge_slave_0: left allmulticast mode [ 1125.792681][ T3968] bridge_slave_0: left promiscuous mode [ 1125.799419][ T3968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.322160][T14302] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 1126.448276][ T3968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.493492][ T3968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.605226][ T3968] bond0 (unregistering): Released all slaves [ 1126.812954][ T5109] Bluetooth: hci0: command tx timeout [ 1126.938809][T18475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.957747][T18528] CUSE: info not properly terminated [ 1127.083504][T18531] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.5474'. [ 1127.127690][T18475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.551409][T18475] team0: Port device team_slave_0 added [ 1127.648880][ T3968] hsr_slave_0: left promiscuous mode [ 1127.667376][ T3968] hsr_slave_1: left promiscuous mode [ 1127.675485][ T3968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.683387][ T3968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.739053][ T3968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.746869][ T3968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.847831][ T3968] veth1_macvtap: left promiscuous mode [ 1127.858519][ T3968] veth0_macvtap: left promiscuous mode [ 1127.864428][ T3968] veth1_vlan: left promiscuous mode [ 1127.871002][ T3968] veth0_vlan: left promiscuous mode [ 1128.488102][T18547] loop4: detected capacity change from 0 to 128 [ 1128.610367][T18547] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1128.782477][T18547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1128.796168][ T3968] team0 (unregistering): Port device team_slave_1 removed [ 1128.831561][ T3968] team0 (unregistering): Port device team_slave_0 removed [ 1128.868961][ T5109] Bluetooth: hci0: command tx timeout [ 1128.989449][T18545] loop8: detected capacity change from 0 to 4096 [ 1129.060338][T18545] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1129.153119][T18475] team0: Port device team_slave_1 added [ 1129.431417][T18475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.439883][T18475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.466618][T18475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.484159][T18545] ntfs3(loop8): ino=19, mi_enum_attr [ 1129.491008][T18545] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1129.538787][T18475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.546055][T18475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.573477][T18475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.657622][T18545] ntfs3(loop8): failed to convert "c46c" to macgreek [ 1129.700374][T18545] ntfs3(loop8): ino=20, mi_enum_attr [ 1129.928660][T18475] hsr_slave_0: entered promiscuous mode [ 1129.940565][T18475] hsr_slave_1: entered promiscuous mode [ 1129.951204][T18475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1129.959281][T18475] Cannot create hsr debugfs directory [ 1130.370077][T18564] netlink: 'syz.9.5491': attribute type 5 has an invalid length. [ 1130.863270][T18475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.948695][ T5109] Bluetooth: hci0: command tx timeout [ 1130.984356][T18475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.169889][T18576] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5494'. [ 1131.203717][T18475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.267761][T18578] Bluetooth: MGMT ver 1.23 [ 1131.406390][T18475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.417258][T18574] loop9: detected capacity change from 0 to 4096 [ 1131.777628][T18475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1131.824116][T18475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1131.909854][T18475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1131.975231][T18475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1132.813990][T18475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.928977][T18475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.959921][T18599] loop9: detected capacity change from 0 to 512 [ 1132.989736][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.997304][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.005641][T18599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1133.077853][T18599] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.091916][T18599] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.098266][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.110081][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.209602][T18603] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1133.362428][T11843] Bluetooth: hci0: command 0x0c1a tx timeout [ 1133.368938][ T5109] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1133.682852][T14302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.224040][T18475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.670051][T18475] veth0_vlan: entered promiscuous mode [ 1134.746779][T18625] netlink: 'syz.1.5515': attribute type 29 has an invalid length. [ 1134.787980][T18475] veth1_vlan: entered promiscuous mode [ 1134.798828][T18625] netlink: 'syz.1.5515': attribute type 29 has an invalid length. [ 1135.055634][T18475] veth0_macvtap: entered promiscuous mode [ 1135.150827][T18475] veth1_macvtap: entered promiscuous mode [ 1135.205485][T18627] loop8: detected capacity change from 0 to 1024 [ 1135.270509][T18475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.348994][T18475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.413718][T18475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.422995][T18475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.435365][T18475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.446423][T18475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.502055][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5517'. [ 1137.115613][T18657] loop8: detected capacity change from 0 to 256 [ 1137.322109][T18657] FAT-fs (loop8): Directory bread(block 64) failed [ 1137.329244][T18657] FAT-fs (loop8): Directory bread(block 65) failed [ 1137.336240][T18657] FAT-fs (loop8): Directory bread(block 66) failed [ 1137.343404][T18657] FAT-fs (loop8): Directory bread(block 67) failed [ 1137.350501][T18657] FAT-fs (loop8): Directory bread(block 68) failed [ 1137.357249][T18657] FAT-fs (loop8): Directory bread(block 69) failed [ 1137.364303][T18657] FAT-fs (loop8): Directory bread(block 70) failed [ 1137.371253][T18657] FAT-fs (loop8): Directory bread(block 71) failed [ 1137.380908][T18657] FAT-fs (loop8): Directory bread(block 72) failed [ 1137.387667][T18657] FAT-fs (loop8): Directory bread(block 73) failed [ 1137.534202][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5530'. [ 1138.292880][T18676] sp0: Synchronizing with TNC [ 1138.400153][T18675] [U] [ 1138.490933][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5536'. [ 1138.650181][T18683] can0: slcan on ttyS3. [ 1138.768714][T18683] can0 (unregistered): slcan off ttyS3. [ 1140.168765][T17886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.176844][T17886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.372712][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.381263][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.426318][T18709] loop1: detected capacity change from 0 to 2048 [ 1140.551255][T18716] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1140.664400][T18709] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1140.714359][T18709] Remounting filesystem read-only [ 1140.989206][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1141.035241][T17027] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1142.454335][T18737] loop9: detected capacity change from 0 to 8192 [ 1142.489030][ T5877] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1142.518301][T18737] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1142.708642][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.719579][ T5877] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1142.733068][ T5877] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1142.742641][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.824912][ T5877] usb 9-1: config 0 descriptor?? [ 1143.353621][ T5877] kovaplus 0003:1E7D:2D50.002E: item fetching failed at offset 2/5 [ 1143.387163][ T5877] kovaplus 0003:1E7D:2D50.002E: parse failed [ 1143.394305][ T5877] kovaplus 0003:1E7D:2D50.002E: probe with driver kovaplus failed with error -22 [ 1143.571869][ T5874] usb 9-1: USB disconnect, device number 10 [ 1143.662289][T18762] netlink: 'syz.0.5573': attribute type 3 has an invalid length. [ 1143.695506][ T30] audit: type=1800 audit(2000000056.539:574): pid=18763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5572" name="#823" dev="tmpfs" ino=823 res=0 errno=0 [ 1143.947741][T18759] loop9: detected capacity change from 0 to 4096 [ 1144.181640][T18759] ntfs3(loop9): ino=1a, mi_enum_attr [ 1144.187342][T18759] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1144.216313][T18769] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1144.226021][T18769] tipc: Started in network mode [ 1144.231446][T18769] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 1144.244560][T18769] tipc: Enabled bearer , priority 7 [ 1144.846722][T18775] loop1: detected capacity change from 0 to 1024 [ 1145.214179][ T3968] hfsplus: b-tree write err: -5, ino 4 [ 1145.361884][ T5874] tipc: Node number set to 4269801514 [ 1146.105033][T18797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5589'. [ 1147.246361][ T5877] kernel write not supported for file /cpuinfo (pid: 5877 comm: kworker/1:3) [ 1148.821035][T18846] hub 1-0:1.0: USB hub found [ 1148.867947][T18846] hub 1-0:1.0: 1 port detected [ 1149.785805][T18864] loop4: detected capacity change from 0 to 256 [ 1150.334643][T18863] loop8: detected capacity change from 0 to 8192 [ 1150.366705][T18863] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1151.186375][T18880] loop9: detected capacity change from 0 to 2048 [ 1151.361724][T18880] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1151.537115][T14302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.610874][ T5874] IPVS: starting estimator thread 0... [ 1151.699114][T18895] IPVS: using max 240 ests per chain, 12000 per kthread [ 1152.065910][T18899] loop9: detected capacity change from 0 to 1024 [ 1152.537606][T18907] loop4: detected capacity change from 0 to 128 [ 1152.600334][T18907] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1152.643050][T18907] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1152.766811][T18915] loop8: detected capacity change from 0 to 256 [ 1153.020611][T18915] FAT-fs (loop8): Directory bread(block 64) failed [ 1153.027498][T18915] FAT-fs (loop8): Directory bread(block 65) failed [ 1153.034693][T18915] FAT-fs (loop8): Directory bread(block 66) failed [ 1153.044311][T18915] FAT-fs (loop8): Directory bread(block 67) failed [ 1153.052119][T18915] FAT-fs (loop8): Directory bread(block 68) failed [ 1153.060014][T18915] FAT-fs (loop8): Directory bread(block 69) failed [ 1153.066910][T18915] FAT-fs (loop8): Directory bread(block 70) failed [ 1153.074053][T18915] FAT-fs (loop8): Directory bread(block 71) failed [ 1153.081158][T18915] FAT-fs (loop8): Directory bread(block 72) failed [ 1153.090703][T18915] FAT-fs (loop8): Directory bread(block 73) failed [ 1153.801458][T18928] loop1: detected capacity change from 0 to 128 [ 1153.837696][T18928] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1153.924571][T18928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1154.026572][T18931] loop8: detected capacity change from 0 to 1024 [ 1154.103049][T18931] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1154.114197][T18931] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1154.175431][T18931] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1154.331610][T18931] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5650: bg 0: block 32: padding at end of block bitmap is not set [ 1154.399333][T18931] EXT4-fs (loop8): Remounting filesystem read-only [ 1154.744603][T10737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.623946][T18957] loop8: detected capacity change from 0 to 512 [ 1155.646476][T18957] EXT4-fs: Ignoring removed bh option [ 1155.654995][T18957] EXT4-fs: Ignoring removed mblk_io_submit option [ 1155.778827][T18957] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.793025][T18957] ext4 filesystem being mounted at /749/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.413758][T10737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.694489][T18983] loop1: detected capacity change from 0 to 512 [ 1157.755668][T18983] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1157.767553][T18983] EXT4-fs (loop1): #clusters per group too big: 729088 [ 1158.090648][T18991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5678'. [ 1159.064652][T19010] program syz.4.5687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1159.138641][ T5881] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1159.319757][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 1159.395577][ T5881] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.411297][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1159.418204][ T5881] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1159.428630][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.513002][ T5881] usb 1-1: config 0 descriptor?? [ 1159.612763][T19019] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5691'. [ 1159.989058][ T5881] aquacomputer_d5next 0003:0C70:F011.002F: hidraw0: USB HID v0.07 Device [HID 0c70:f011] on usb-dummy_hcd.0-1/input0 [ 1160.237532][T19027] loop4: detected capacity change from 0 to 512 [ 1160.260027][ T5877] usb 1-1: USB disconnect, device number 5 [ 1160.381149][T19027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.395099][T19027] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.421211][T19025] loop9: detected capacity change from 0 to 4096 [ 1160.669499][T19025] ntfs3(loop9): ino=19, mi_enum_attr [ 1160.675252][T19025] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1160.764383][T19025] ntfs3(loop9): failed to convert "0000" to iso8859-4 [ 1160.765748][T17783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.781646][T19025] ntfs3(loop9): failed to convert name for inode 1e. [ 1160.783643][T19025] ntfs3(loop9): ino=1f, mi_enum_attr [ 1160.797015][T19025] ntfs3(loop9): ino=1f, mi_enum_attr [ 1161.007650][T19038] loop8: detected capacity change from 0 to 1024 [ 1161.233312][T19040] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5700'. [ 1161.409333][ T3968] hfsplus: b-tree write err: -5, ino 4 [ 1161.872972][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5706'. [ 1163.287824][T19071] loop1: detected capacity change from 0 to 512 [ 1163.330432][T19067] loop8: detected capacity change from 0 to 4096 [ 1163.344714][T19071] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1163.412157][T19071] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5715: bg 0: block 104: invalid block bitmap [ 1163.472902][T19071] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1163.524195][T19071] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5715: invalid indirect mapped block 1 (level 1) [ 1163.575777][T19071] EXT4-fs (loop1): 1 truncate cleaned up [ 1163.584043][T19071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1163.618731][T19067] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1163.639620][T19067] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 1163.868652][T17027] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.581442][T19088] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5723'. [ 1166.951541][T19126] 9pnet_fd: p9_fd_create_tcp (19126): problem binding to privport [ 1168.137457][T19143] loop4: detected capacity change from 0 to 1024 [ 1168.406203][ T5109] Bluetooth: hci1: Dropping invalid advertising data [ 1168.416135][ T5109] Bluetooth: hci1: unknown advertising packet type: 0x7f [ 1168.416292][ T5109] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1168.478532][ T3704] hfsplus: b-tree write err: -5, ino 4 [ 1168.634923][ T5109] Bluetooth: hci4: command 0x0406 tx timeout [ 1169.306373][T19163] loop1: detected capacity change from 0 to 128 [ 1169.375471][T19163] syz.1.5757: attempt to access beyond end of device [ 1169.375471][T19163] loop1: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 1169.477634][T19167] loop8: detected capacity change from 0 to 256 [ 1169.683116][T19167] FAT-fs (loop8): Directory bread(block 64) failed [ 1169.690526][T19167] FAT-fs (loop8): Directory bread(block 65) failed [ 1169.697423][T19167] FAT-fs (loop8): Directory bread(block 66) failed [ 1169.705009][T19167] FAT-fs (loop8): Directory bread(block 67) failed [ 1169.712107][T19167] FAT-fs (loop8): Directory bread(block 68) failed [ 1169.719214][T19167] FAT-fs (loop8): Directory bread(block 69) failed [ 1169.726100][T19167] FAT-fs (loop8): Directory bread(block 70) failed [ 1169.734447][T19167] FAT-fs (loop8): Directory bread(block 71) failed [ 1169.741850][T19167] FAT-fs (loop8): Directory bread(block 72) failed [ 1169.749506][T19167] FAT-fs (loop8): Directory bread(block 73) failed [ 1169.855243][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5761'. [ 1169.866508][T19169] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1169.882782][T19169] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5761'. [ 1171.011347][T19188] wlan0 speed is unknown, defaulting to 1000 [ 1171.017858][T19188] wlan0 speed is unknown, defaulting to 1000 [ 1171.025447][T19188] wlan0 speed is unknown, defaulting to 1000 [ 1171.043729][T19188] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1171.090218][T19188] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1171.153993][T19188] wlan0 speed is unknown, defaulting to 1000 [ 1171.169170][T19188] wlan0 speed is unknown, defaulting to 1000 [ 1171.179178][T19188] wlan0 speed is unknown, defaulting to 1000 [ 1171.190272][T11843] Bluetooth: hci0: command 0x0c1a tx timeout [ 1171.191963][T19188] wlan0 speed is unknown, defaulting to 1000 [ 1171.205347][T19188] wlan0 speed is unknown, defaulting to 1000 [ 1171.214408][T19188] wlan0 speed is unknown, defaulting to 1000 [ 1171.230372][ T5877] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1171.459040][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1171.473206][ T5877] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1171.484964][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.543931][ T5877] usb 1-1: config 0 descriptor?? [ 1172.014785][ T5877] logitech 0003:046D:C295.0030: unbalanced delimiter at end of report description [ 1172.076900][ T5877] logitech 0003:046D:C295.0030: parse failed [ 1172.083571][ T5877] logitech 0003:046D:C295.0030: probe with driver logitech failed with error -22 [ 1172.221420][ T5877] usb 1-1: USB disconnect, device number 6 [ 1172.279257][T19203] loop1: detected capacity change from 0 to 764 [ 1172.759243][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5781'. [ 1172.796615][T19210] loop4: detected capacity change from 0 to 1024 [ 1174.883134][T19242] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5798'. [ 1174.977907][T19248] loop8: detected capacity change from 0 to 764 [ 1175.104787][T19248] rock: directory entry would overflow storage [ 1175.111624][T19248] rock: sig=0x4f50, size=4, remaining=3 [ 1175.117392][T19248] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1175.782648][T19258] trusted_key: encrypted_key: insufficient parameters specified [ 1176.485817][T19270] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5810'. [ 1177.566643][T19290] RDS: rds_bind could not find a transport for 4:80::, load rds_tcp or rds_rdma? [ 1178.031797][T19293] [U] [ 1178.255721][T19302] loop9: detected capacity change from 0 to 256 [ 1178.457695][T19302] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1180.000173][T19332] loop9: detected capacity change from 0 to 1024 [ 1180.210592][T19332] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1180.224458][T19332] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.354207][T19332] EXT4-fs (loop9): stripe (248) is not aligned with cluster size (16), stripe is disabled [ 1180.413697][T19332] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 1180.694761][T14302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.440438][T19358] loop9: detected capacity change from 0 to 128 [ 1181.495289][T19358] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1181.645912][T19358] ext4 filesystem being mounted at /457/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1182.070896][T14302] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1182.545915][T19378] sp0: Synchronizing with TNC [ 1182.602178][T19376] [U] ` [ 1182.937066][T19386] loop9: detected capacity change from 0 to 128 [ 1183.096877][T19388] loop8: detected capacity change from 0 to 64 [ 1183.236823][T19390] loop4: detected capacity change from 0 to 512 [ 1183.271198][T19390] EXT4-fs: Ignoring removed nobh option [ 1183.314311][T19390] EXT4-fs (loop4): invalid inodes per group: 3 [ 1183.314311][T19390] [ 1183.811357][T19394] loop1: detected capacity change from 0 to 2048 [ 1183.877103][T19394] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1184.639703][T19413] loop1: detected capacity change from 0 to 256 [ 1184.649380][T19413] exfat: Deprecated parameter 'utf8' [ 1184.722449][T19413] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6c34595, utbl_chksum : 0xe619d30d) [ 1184.959450][T19415] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5876'. [ 1185.645345][ T30] audit: type=1326 audit(2000000098.489:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.8.5880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 1185.745804][ T30] audit: type=1326 audit(2000000098.519:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.8.5880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=250 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 1185.769743][ T30] audit: type=1326 audit(2000000098.519:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.8.5880" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 1186.156422][T19433] ptrace attach of "./syz-executor exec"[18475] was attempted by "\x22"[19433] [ 1186.309677][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1186.386406][T19437] loop4: detected capacity change from 0 to 256 [ 1186.500467][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.511860][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.522315][ T5881] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1186.532614][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.597040][ T5881] usb 2-1: config 0 descriptor?? [ 1187.057159][ T5881] samsung 0003:0419:0600.0031: unknown main item tag 0x0 [ 1187.064939][ T5881] samsung 0003:0419:0600.0031: unknown main item tag 0x0 [ 1187.150188][ T5881] samsung 0003:0419:0600.0031: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 1187.252791][ T5877] usb 2-1: USB disconnect, device number 4 [ 1187.748747][ T5881] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1187.821858][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5893'. [ 1187.909750][ T5881] usb 9-1: Using ep0 maxpacket: 8 [ 1187.944184][ T5881] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1187.953781][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.962963][ T5881] usb 9-1: Product: syz [ 1187.967634][ T5881] usb 9-1: Manufacturer: syz [ 1187.972634][ T5881] usb 9-1: SerialNumber: syz [ 1188.129504][ T5881] usb 9-1: config 0 descriptor?? [ 1188.145692][ T5881] gspca_main: se401-2.14.0 probing 047d:5003 [ 1188.576619][ T5881] gspca_se401: Wrong descriptor type [ 1188.764763][T19463] loop1: detected capacity change from 0 to 128 [ 1188.821115][ T5877] usb 9-1: USB disconnect, device number 11 [ 1189.431069][T19473] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1189.447452][T19473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1189.509110][ T5881] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1189.727729][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.739373][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.752986][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1189.766511][ T5881] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1189.776138][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.799840][ T5881] usb 2-1: config 0 descriptor?? [ 1190.010428][T19479] loop8: detected capacity change from 0 to 2048 [ 1190.162375][T19479] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1190.299522][ T5881] hid-udraw 0003:20D6:CB17.0032: item fetching failed at offset 5/7 [ 1190.352468][ T5881] hid-udraw 0003:20D6:CB17.0032: parse failed [ 1190.354046][T10737] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.359468][ T5881] hid-udraw 0003:20D6:CB17.0032: probe with driver hid-udraw failed with error -22 [ 1190.435837][T19487] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5910'. [ 1190.537621][ T5881] usb 2-1: USB disconnect, device number 5 [ 1190.593175][T19490] netlink: 'syz.9.5909': attribute type 1 has an invalid length. [ 1190.602380][T19490] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5909'. [ 1191.009319][ T30] audit: type=1326 audit(2000000103.849:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19498 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1191.036830][ T30] audit: type=1326 audit(2000000103.849:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19498 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1191.245161][ T30] audit: type=1326 audit(2000000103.929:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19498 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1191.271263][ T30] audit: type=1326 audit(2000000103.929:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19498 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1191.295800][ T30] audit: type=1326 audit(2000000103.929:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19498 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1191.319149][ T30] audit: type=1326 audit(2000000103.929:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19498 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=178 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1191.344288][ T30] audit: type=1326 audit(2000000103.929:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19498 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f32558 code=0x7ffc0000 [ 1191.369591][ T30] audit: type=1326 audit(2000000103.939:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19498 comm="syz.9.5914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1192.305003][T19523] loop9: detected capacity change from 0 to 256 [ 1192.447871][T19523] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1193.344512][T19540] loop1: detected capacity change from 0 to 256 [ 1193.481534][T19540] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 1194.129098][ T5877] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1194.230797][T19517] Bluetooth: hci2: command 0x0406 tx timeout [ 1194.313973][ T5877] usb 10-1: Using ep0 maxpacket: 8 [ 1194.364789][ T5877] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1194.376774][ T5877] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1194.385250][ T5877] usb 10-1: Product: syz [ 1194.390076][ T5877] usb 10-1: Manufacturer: syz [ 1194.394989][ T5877] usb 10-1: SerialNumber: syz [ 1194.503926][ T5877] usb 10-1: config 0 descriptor?? [ 1194.539150][ T5877] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1195.207746][ T5877] gspca_zc3xx: reg_w_i err -71 [ 1195.213256][ T5877] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1195.242905][ T5877] usb 10-1: USB disconnect, device number 10 [ 1195.272028][T19570] loop1: detected capacity change from 0 to 128 [ 1195.336458][T19570] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1195.363543][T19570] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1195.499172][T17027] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1196.283314][T19584] ===================================================== [ 1196.290803][T19584] BUG: KMSAN: uninit-value in ieee802154_max_payload+0x399/0x3c0 [ 1196.299055][T19584] ieee802154_max_payload+0x399/0x3c0 [ 1196.305605][T19584] ieee802154_header_create+0x99b/0xb90 [ 1196.311936][T19584] dgram_sendmsg+0xb3d/0x16d0 [ 1196.318426][T19584] ieee802154_sock_sendmsg+0x92/0xd0 [ 1196.323936][T19584] __sock_sendmsg+0x330/0x3d0 [ 1196.328965][T19584] ____sys_sendmsg+0x7e0/0xd80 [ 1196.333931][T19584] ___sys_sendmsg+0x271/0x3b0 [ 1196.338967][T19584] __sys_sendmsg+0x1aa/0x300 [ 1196.345236][T19584] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1196.352277][T19584] ia32_sys_call+0x3692/0x42c0 [ 1196.358097][T19584] __do_fast_syscall_32+0xb0/0x150 [ 1196.363827][T19584] do_fast_syscall_32+0x38/0x80 [ 1196.369031][T19584] do_SYSENTER_32+0x1f/0x30 [ 1196.376346][T19584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1196.383839][T19584] [ 1196.386282][T19584] Local variable hdr created at: [ 1196.391673][T19584] ieee802154_header_create+0x4e/0xb90 [ 1196.397357][T19584] dgram_sendmsg+0xb3d/0x16d0 [ 1196.403439][T19584] [ 1196.406170][T19584] CPU: 0 UID: 0 PID: 19584 Comm: syz.0.5951 Tainted: G W 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(none) [ 1196.420341][T19584] Tainted: [W]=WARN [ 1196.424273][T19584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1196.434615][T19584] ===================================================== [ 1196.441808][T19584] Disabling lock debugging due to kernel taint [ 1196.448096][T19584] Kernel panic - not syncing: kmsan.panic set ... [ 1196.454666][T19584] CPU: 0 UID: 0 PID: 19584 Comm: syz.0.5951 Tainted: G B W 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(none) [ 1196.468538][T19584] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1196.473676][T19584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1196.483867][T19584] Call Trace: [ 1196.487253][T19584] [ 1196.490289][T19584] __dump_stack+0x26/0x30 [ 1196.494809][T19584] dump_stack_lvl+0x53/0x270 [ 1196.499590][T19584] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1196.505606][T19584] dump_stack+0x1e/0x25 [ 1196.509958][T19584] panic+0x4bd/0xd50 [ 1196.514100][T19584] kmsan_report+0x31c/0x320 [ 1196.518774][T19584] ? do_fast_syscall_32+0x38/0x80 [ 1196.523967][T19584] ? __msan_warning+0x1b/0x30 [ 1196.528809][T19584] ? ieee802154_max_payload+0x399/0x3c0 [ 1196.534567][T19584] ? ieee802154_header_create+0x99b/0xb90 [ 1196.540471][T19584] ? dgram_sendmsg+0xb3d/0x16d0 [ 1196.545500][T19584] ? ieee802154_sock_sendmsg+0x92/0xd0 [ 1196.551156][T19584] ? __sock_sendmsg+0x330/0x3d0 [ 1196.556201][T19584] ? ____sys_sendmsg+0x7e0/0xd80 [ 1196.561312][T19584] ? ___sys_sendmsg+0x271/0x3b0 [ 1196.566339][T19584] ? __sys_sendmsg+0x1aa/0x300 [ 1196.571270][T19584] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1196.577178][T19584] ? ia32_sys_call+0x3692/0x42c0 [ 1196.582272][T19584] ? __do_fast_syscall_32+0xb0/0x150 [ 1196.587734][T19584] ? do_fast_syscall_32+0x38/0x80 [ 1196.592922][T19584] ? do_SYSENTER_32+0x1f/0x30 [ 1196.597771][T19584] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1196.604486][T19584] ? cfg802154_pernet_exit+0x1b1/0x230 [ 1196.610165][T19584] ? filter_irq_stacks+0x49/0x190 [ 1196.615354][T19584] ? kmsan_get_metadata+0xfb/0x160 [ 1196.620638][T19584] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1196.627107][T19584] ? kmsan_get_metadata+0xfb/0x160 [ 1196.632392][T19584] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 1196.638958][T19584] ? __msan_memcpy+0x108/0x1c0 [ 1196.643937][T19584] ? kmsan_get_metadata+0xfb/0x160 [ 1196.649238][T19584] __msan_warning+0x1b/0x30 [ 1196.653912][T19584] ieee802154_max_payload+0x399/0x3c0 [ 1196.659518][T19584] ieee802154_header_create+0x99b/0xb90 [ 1196.665277][T19584] ? kmsan_get_metadata+0xfb/0x160 [ 1196.670577][T19584] ? __pfx_ieee802154_header_create+0x10/0x10 [ 1196.676834][T19584] dgram_sendmsg+0xb3d/0x16d0 [ 1196.681735][T19584] ? __pfx_dgram_sendmsg+0x10/0x10 [ 1196.687028][T19584] ieee802154_sock_sendmsg+0x92/0xd0 [ 1196.692522][T19584] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1196.698708][T19584] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1196.704905][T19584] __sock_sendmsg+0x330/0x3d0 [ 1196.709794][T19584] ____sys_sendmsg+0x7e0/0xd80 [ 1196.714775][T19584] ___sys_sendmsg+0x271/0x3b0 [ 1196.719631][T19584] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1196.725628][T19584] ? __rcu_read_unlock+0x6d/0xd0 [ 1196.730731][T19584] ? __fget_files+0x3b4/0x4a0 [ 1196.735588][T19584] ? __fget_files+0x3b9/0x4a0 [ 1196.740447][T19584] ? kmsan_get_metadata+0xfb/0x160 [ 1196.745727][T19584] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1196.751720][T19584] __sys_sendmsg+0x1aa/0x300 [ 1196.756536][T19584] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1196.762279][T19584] ia32_sys_call+0x3692/0x42c0 [ 1196.767209][T19584] __do_fast_syscall_32+0xb0/0x150 [ 1196.772512][T19584] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1196.778410][T19584] do_fast_syscall_32+0x38/0x80 [ 1196.783437][T19584] do_SYSENTER_32+0x1f/0x30 [ 1196.788106][T19584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1196.794627][T19584] RIP: 0023:0xf7f55539 [ 1196.798830][T19584] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1196.818637][T19584] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1196.827246][T19584] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 1196.835358][T19584] RDX: 0000000020004080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1196.843461][T19584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1196.851576][T19584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1196.859682][T19584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1196.867824][T19584] [ 1196.871222][T19584] Kernel Offset: disabled [ 1196.875613][T19584] Rebooting in 86400 seconds..