last executing test programs: 11m42.87407404s ago: executing program 3 (id=167): open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x42) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) 11m42.066112119s ago: executing program 3 (id=171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) 11m41.161851054s ago: executing program 3 (id=174): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newae={0x40, 0x1e, 0x101, 0x70bd2b, 0x25dfdbfb, {{@in=@loopback, 0x4d5, 0xa, 0xff}, @in=@loopback, 0xb413, 0x34ff}}, 0x40}}, 0x20008000) 11m40.433247025s ago: executing program 3 (id=178): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x800800, &(0x7f0000000280)={[{@utf8}, {@allow_utime={'allow_utime', 0x3d, 0x9}}, {@sys_tz}, {@namecase}, {@umask={'umask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@fmask={'fmask', 0x3d, 0x3c}}, {@errors_continue}, {@sys_tz}]}, 0x1, 0x152b, &(0x7f0000000a00)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x141) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 11m38.691787757s ago: executing program 3 (id=184): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x8) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="b1970eab", 0x4}], 0x1}, 0x0) 11m37.757183123s ago: executing program 3 (id=188): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb00}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x18}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m35.09230391s ago: executing program 32 (id=188): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb00}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x18}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m54.38890684s ago: executing program 1 (id=1126): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x1, 0xffffffff, 0x6, {0x0, 0x0, 0x0, r1, 0x1ee61, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}}, 0x0) 7m53.647944772s ago: executing program 1 (id=1130): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000440)=""/183, 0xb7, &(0x7f00000003c0)={&(0x7f0000000340)={'sha224-generic\x00'}, &(0x7f0000000380)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) 7m52.819634858s ago: executing program 1 (id=1132): r0 = socket$netlink(0x10, 0x3, 0x8000000004) setuid(0xee01) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 7m50.257829618s ago: executing program 1 (id=1144): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000009b80)=ANY=[@ANYBLOB='iocharset=macromanian,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c757466382c646973636172642c6b6565705f6c6173745f646f74732c666d61736b3d30303030303030303030303030303030303030303331372c6e616d65636173653d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030342c696f636861727365743d69736f383835392d322c0036b31d821d64f6269a45f32df22d1ca8bb2f562a2c947b9b1642d15000b2bfe919b892a8b2deb4ead6027b0215761d101255ca823e3e5b3ad9d42af3944b48687df1b9"], 0x1, 0x1521, &(0x7f0000007640)="$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") mount$nfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x201048, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) 7m48.929294818s ago: executing program 1 (id=1151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) close_range(r0, r1, 0x0) 7m47.535385368s ago: executing program 1 (id=1155): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}, {0x0}], 0x2, 0x0, 0x0, 0x44011}, 0x0) 7m45.030046311s ago: executing program 33 (id=1155): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}, {0x0}], 0x2, 0x0, 0x0, 0x44011}, 0x0) 3m5.740118331s ago: executing program 0 (id=2322): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000000010002", 0x7) 3m4.493046942s ago: executing program 0 (id=2324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x1000, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 3m2.819480557s ago: executing program 0 (id=2328): r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)={0xb000001c}) 3m1.319928564s ago: executing program 0 (id=2333): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2m59.22108984s ago: executing program 0 (id=2338): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000004c80)='./file0\x00', 0x0, &(0x7f0000000880)={[{@uid}, {@uid}, {@gid}, {@part={'part', 0x3d, 0x400}}, {@codepage={'codepage', 0x3d, 'cp855'}}, {}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@umask={'umask', 0x3d, 0x7}}, {@gid}]}, 0x4, 0x337, &(0x7f0000000540)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r0, 0xffffffffffffffff, 0x0) 2m57.713176393s ago: executing program 0 (id=2344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x2000004) 2m53.518622616s ago: executing program 34 (id=2344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x2000004) 1m33.736515651s ago: executing program 6 (id=2608): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000100)=0x1, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) 1m33.025647107s ago: executing program 6 (id=2613): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}]}, 0x3c}}, 0x4000880) 1m31.881545522s ago: executing program 6 (id=2616): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x3) listen(r0, 0x8) 1m30.96669822s ago: executing program 6 (id=2620): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d170ddbbba28854f76e642c756d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d63703934392c6572726f72733d72656d6f756e742d726f2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 1m29.554643729s ago: executing program 6 (id=2627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {0x0, 0x4101}}}, 0x1c}}, 0x10) 1m28.678807483s ago: executing program 6 (id=2630): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x0) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='K'], 0x801) 1m25.154564671s ago: executing program 35 (id=2630): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x0) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='K'], 0x801) 7.793388283s ago: executing program 4 (id=2964): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000140)=[{0x9, 0x2000, 0x0, 0x0}], 0x1}) 5.800960238s ago: executing program 2 (id=2972): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0)) 5.739870458s ago: executing program 5 (id=2973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r1, 0x303, 0x70bd2a, 0x25dfdbfb, {0xa}}, 0x14}}, 0x0) 5.471157236s ago: executing program 8 (id=2974): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x200800c, &(0x7f0000000840)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) 5.397221373s ago: executing program 4 (id=2975): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x7c3442, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000004c0)={0x285, 0x6, 0x26, 0x100000000000009, 0x8, 0xb, 0x64d, 0x8, 0x9657, 0x5, 0x2, 0xe7d4, 0x8, 0xb, 0x5, 0xcc4, 0x2efa, 0x1, 0x94d8, 0x4, 0x1, 0x6, 0xe, 0xfffffffffffffffa, 0x1, 0x2000008000000}) 5.168707212s ago: executing program 5 (id=2976): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) 4.899836882s ago: executing program 2 (id=2977): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x141800, 0x100) 4.703520771s ago: executing program 4 (id=2978): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) 4.62190267s ago: executing program 7 (id=2979): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2) write$sysctl(r0, &(0x7f0000000000)='4\x00', 0x2) 4.442616272s ago: executing program 8 (id=2980): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 4.413616726s ago: executing program 5 (id=2981): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@force}, {@uid}, {@umask={'umask', 0x3d, 0x803}}, {@gid}, {@type={'type', 0x3d, "f268d651"}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6b8, &(0x7f00000009c0)="$eJzs3U9oXVkdB/DvfU1f+ip0Mv86VYSGKQw6xTbpY2wFYaqIdFGk6Ga2oU2noWlnSDPSGcS+qqPgypXMwsWI1MWIICLCuBoc14LgxlX3BXcuulAj989LXpKXNGmavDjz+cB995x77j3nd369975/DS/Ap9aF13KwlyIXTl68Xdbv3+vO37/XvdEvJxlP0krG6lWKTlJ8nJxPveSz5camu2KjcV558GEx9t4H3bo21izV/q3Njltn6J695NBy5UCSybr47y13u66/aqn6ubzS32MqluMuE3ainzgYtaV1eiuNrUcevvXrFti37tTPm+tMJIdTP7uWrwPS3B0efWcYhc6q2qb3pt5uxwIAAAC7b+h7+UFPPczD3M6RvQkHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhmK+jcDi2Zp9cuTKfq//98e+E399ojD3aF3r1arbz816kAAAAAAAAAAYEeOP8zD3M6Rfn2pqL7zf7GqPFc9fiZv5VZms5BTuZ2ZLGYxC5lOMjHQUfv2zOLiwvTAka36yJ+nPHJpaelOc+SZoUeeWR1Xb22gw/6nwbqdAAAAAAAAAOBT6we5sPL9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7AdFcqBeVctz/fJEWmNJDiVpF5PLu7dHGuyO1KF/NOowAAAAYO8cKf5bF5aK6j3/0ep9/6G8lZtZzFwWM5/ZXKk+C6jfOrf+1uvO37/XvVEu6zv82j83HKs1ZFu72X6gqg0beara4/nlIy7km/lOTmYyl7KQuXw3M1nMbCbzjao0kyITzacXE/fvddKPdX2851fVLq2N7fhAuYzvWBVJJ1czV8V2Kpfb/dD7czs2MNof28maEe+W2SlebWyYqdWuNOtyRj9r1vvDRDXzg8sZmWpyX2bj6cG8r8/9JufJVkaaTmv5M6jnVkYpq2tHeqycH27We5DrbX6UtjoTvZ+Wtf7Zd3TznCdf/PufL11r3bx+7eqtk/vnNHpMa8+J7kAmXthSJubLTPR2kIlDO4n/yWk32ajvotu7W75YHXskc/lW3siVzOZspjKdc5nKV3Im3ZwZyOvzm+e1utZa27vWTnyhKXSS/KRZ76nxjRrKvD49kNfBO91E1Ta4ZSVLz2whS0U7w7P0j6GhjH2uKZRj/HCDZ9PRWJuJ6YFMPLt5Jn75n6Ukt+ZvXl+4NvPmFsd7qVmXl+27q+/Rv3oiE9q+Zrrl+fJM+Y9VVn6cVWdH2fZsv21NvtrNNy5jTWer2tqprue67VFXatnT0bvDeqrbXhg6SrdqOzbQtupVTt7I/PKrEAD2rVYOv3y43XnQ+Wvn/c6POtc6Fw99ffzc+OfbOfiXsT8d+F3r162vFi/n/Xw/R0YdKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBLcevud6zPz87ML+7CQ1hZ2/m223uHdoU39VNRb2rs9r3qwj34z8vQ+0UL/RBrf7Iz6fZJN+mmPIvhOkt0d4vjWds7YHkx5PEOaLi5v6SSt5XiSXN8nP3AH7IbTizfePH3r7Xe+NHdj5vXZ12dvnjl39tWz3S9P3zl9dW5+dqp+HHWUwG5Y+7oUAAAAAAAAAAAA2P/24q8shgxb9EYwVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/04XXcrCXItNTp6bK+v173fly6ZdX9hxL0kpSfC8pPk7Op14yMdBdsdE4rzz48BcvvfdBd6Wvsf7+rTXH/eFfS0vbnEWvWTKZ5ECzfrTxLfV3eaC/3jYDqxXLMywTdqKfOBi1/wUAAP//QnIEcg==") chdir(&(0x7f0000000040)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.921089989s ago: executing program 7 (id=2982): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='uid_map\x00') lseek(r0, 0x1, 0x1) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000040)=""/83, 0x53}], 0x1, 0xe, 0x8) 3.836594497s ago: executing program 4 (id=2983): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.311205687s ago: executing program 2 (id=2984): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="01002abd7000fcdbdf250100000008000100"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x4040) 3.013094367s ago: executing program 7 (id=2985): unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 2.872885824s ago: executing program 5 (id=2986): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') preadv(r0, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0xea}], 0x1, 0xffff, 0x5dd073cf) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000600)=""/155, 0x9b}], 0x1, 0x7fffffff, 0x8) 2.78396309s ago: executing program 8 (id=2987): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c000280050015"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 2.432349358s ago: executing program 4 (id=2988): syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r0, 0x0, 0x0) 2.25055699s ago: executing program 7 (id=2989): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) 2.113620257s ago: executing program 2 (id=2990): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x38, 0x0, 0xa6332f269575c9ce, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xa}]}, 0x38}}, 0x4000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.902425786s ago: executing program 5 (id=2991): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2003041, 0x0) 1.680788144s ago: executing program 8 (id=2992): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000000)=0x4a, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 1.566209485s ago: executing program 7 (id=2993): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x38, r1, 0x1, 0x70bd26, 0x80, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x18}, 0x4014) 1.311871007s ago: executing program 2 (id=2994): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x1003d}}}, 0x24}}, 0x0) 948.801799ms ago: executing program 5 (id=2995): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000140)) 852.316765ms ago: executing program 8 (id=2996): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) 713.887412ms ago: executing program 7 (id=2997): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000680)={0xa, 0x4e1e, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002140)="ab", 0x1}], 0x1}}], 0x1, 0x4c040) 460.005382ms ago: executing program 2 (id=2998): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) 155.879186ms ago: executing program 4 (id=2999): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0xa, 'P5'}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) 0s ago: executing program 8 (id=3000): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f0000000400)) kernel console output (not intermixed with test programs): ce= 0.40 [ 725.357104][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 725.365944][ T42] usb 3-1: SerialNumber: syz [ 725.389834][T10833] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 725.462820][ T42] usb 3-1: bad CDC descriptors [ 725.495979][ T9939] usb 5-1: USB disconnect, device number 8 [ 725.746330][ T42] usb 3-1: USB disconnect, device number 13 [ 727.655872][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1879'. [ 727.704760][T10857] bridge0: entered promiscuous mode [ 727.718269][T10857] bridge0: port 3(macvlan2) entered blocking state [ 727.725405][T10857] bridge0: port 3(macvlan2) entered disabled state [ 727.733568][T10857] macvlan2: entered allmulticast mode [ 727.739537][T10857] bridge0: entered allmulticast mode [ 727.922946][T10857] macvlan2: left allmulticast mode [ 727.928609][T10857] bridge0: left allmulticast mode [ 728.016339][T10857] bridge0: left promiscuous mode [ 728.138554][T10860] netlink: 'syz.2.1881': attribute type 1 has an invalid length. [ 728.352515][T10865] hub 9-0:1.0: USB hub found [ 728.379581][T10865] hub 9-0:1.0: 1 port detected [ 728.961587][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'. [ 729.022597][ T9939] kernel read not supported for file /vbi0 (pid: 9939 comm: kworker/0:3) [ 729.039055][T10875] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1886'. [ 729.048908][T10875] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1886'. [ 729.868711][ T9939] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 730.068223][ T9939] usb 5-1: Using ep0 maxpacket: 16 [ 730.104099][ T9939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.114769][ T9939] usb 5-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 730.124432][ T9939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.242793][ T9939] usb 5-1: config 0 descriptor?? [ 730.253950][T10889] loop0: detected capacity change from 0 to 256 [ 730.875127][T10894] loop6: detected capacity change from 0 to 256 [ 730.885415][ T9939] thrustmaster 0003:044F:B654.001D: hidraw0: USB HID v0.00 Device [HID 044f:b654] on usb-dummy_hcd.4-1/input0 [ 730.885609][ T9939] thrustmaster 0003:044F:B654.001D: no inputs found [ 731.010136][ T9939] usb 5-1: USB disconnect, device number 9 [ 732.893490][T10907] fido_id[10907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 733.444975][T10918] loop2: detected capacity change from 0 to 16 [ 733.504515][T10918] erofs (device loop2): mounted with root inode @ nid 36. [ 734.547177][T10932] loop6: detected capacity change from 0 to 256 [ 734.600950][T10932] exfat: Deprecated parameter 'namecase' [ 734.720353][T10932] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf764d861, utbl_chksum : 0xe619d30d) [ 735.170080][T10931] loop0: detected capacity change from 0 to 4096 [ 735.425375][T10934] loop2: detected capacity change from 0 to 2048 [ 735.592417][T10937] loop5: detected capacity change from 0 to 256 [ 736.429857][T10943] loop6: detected capacity change from 0 to 1024 [ 738.507421][T10964] loop0: detected capacity change from 0 to 16 [ 738.584610][T10964] erofs (device loop0): mounted with root inode @ nid 36. [ 740.217360][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1938'. [ 740.273412][T10986] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1938'. [ 740.283203][T10986] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1938'. [ 740.872357][T10995] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 742.605257][T11015] loop6: detected capacity change from 0 to 1764 [ 742.680961][T11012] loop2: detected capacity change from 0 to 4096 [ 742.850129][T11022] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 743.569052][T11026] loop5: detected capacity change from 0 to 1024 [ 743.723464][T11026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.188253][T11035] loop2: detected capacity change from 0 to 512 [ 744.289307][T11035] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.1957: corrupted in-inode xattr: overlapping e_value [ 744.332265][T11035] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1957: couldn't read orphan inode 15 (err -117) [ 744.456194][T11035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.564413][ T6430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.603905][T11035] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.1957: Directory hole found for htree leaf block 0 [ 745.148153][T11033] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 745.280687][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.612570][T11047] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 745.622996][T11047] [U] J"—E:ÀÆ" [ 745.626847][T11047] [U] ª‡Ó [ 745.882324][T11050] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1963'. [ 746.119274][T11054] loop0: detected capacity change from 0 to 128 [ 746.667313][T11056] loop4: detected capacity change from 0 to 512 [ 746.898379][T11056] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 746.906717][T11056] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 746.952474][T11056] System zones: 0-1, 15-15, 18-18, 34-34 [ 747.034090][T11056] EXT4-fs (loop4): orphan cleanup on readonly fs [ 747.041257][T11056] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 747.051320][T11056] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 747.066611][T11056] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 747.220603][T11056] EXT4-fs (loop4): 1 truncate cleaned up [ 747.229068][T11056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 747.406778][T11056] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 747.470308][T11056] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 747.986621][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.350788][T11075] loop0: detected capacity change from 0 to 256 [ 748.428641][T11077] binder: 11074:11077 ioctl 4018620d 0 returned -22 [ 748.446816][T11075] exfat: Deprecated parameter 'namecase' [ 748.454049][T11077] binder: 11074:11077 ioctl c0306201 80001440 returned -11 [ 748.651864][T11075] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 749.136952][T11082] loop4: detected capacity change from 0 to 2048 [ 749.308077][T11089] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 750.877464][T11105] loop2: detected capacity change from 0 to 128 [ 750.959507][T11105] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 751.049462][T11105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 751.150710][T11107] loop5: detected capacity change from 0 to 8 [ 751.978286][T11115] loop2: detected capacity change from 0 to 1024 [ 752.210925][T11115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.399767][T11115] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 754.484234][T11132] RDS: rds_bind could not find a transport for ::a:0:0, load rds_tcp or rds_rdma? [ 755.777362][ T5789] Bluetooth: hci3: unexpected event for opcode 0x080c [ 755.831671][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.444743][T11140] vivid-004: disconnect [ 756.489162][T11139] vivid-004: reconnect [ 757.335289][T11154] loop4: detected capacity change from 0 to 8 [ 757.561354][T11154] SQUASHFS error: lzo decompression failed, data probably corrupt [ 757.571205][T11154] SQUASHFS error: Failed to read block 0x60: -5 [ 757.584234][T11154] SQUASHFS error: Failed to read block 0x71: -5 [ 757.596215][T11154] SQUASHFS error: lzo decompression failed, data probably corrupt [ 757.604656][T11154] SQUASHFS error: Failed to read block 0x60: -5 [ 757.620529][ T30] audit: type=1800 audit(1751537363.484:105): pid=11154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2011" name="file0" dev="loop4" ino=1 res=0 errno=0 [ 758.324357][T11166] loop0: detected capacity change from 0 to 256 [ 758.596045][T11166] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 758.616882][T11166] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 758.979286][T11173] loop5: detected capacity change from 0 to 128 [ 759.170408][T11177] pim6reg: entered allmulticast mode [ 759.272704][T11177] pim6reg: left allmulticast mode [ 759.465775][T11179] loop4: detected capacity change from 0 to 64 [ 759.646456][T11179] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 759.876680][T11178] minix_free_inode: bit 5 already cleared [ 759.974902][T11184] loop0: detected capacity change from 0 to 64 [ 761.590728][T11197] loop5: detected capacity change from 0 to 2048 [ 761.788489][T11197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.309516][ T6430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.533222][ T9939] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 762.738315][ T9939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.750120][ T9939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.760482][ T9939] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 762.773843][ T9939] usb 7-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 762.783381][ T9939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.961945][ T9939] usb 7-1: config 0 descriptor?? [ 763.467709][ T9939] dragonrise 0003:0079:0011.001E: reserved main item tag 0xe [ 763.551251][ T9939] dragonrise 0003:0079:0011.001E: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.6-1/input0 [ 763.740484][ T9939] usb 7-1: USB disconnect, device number 4 [ 763.787623][T11221] netlink: 'syz.4.2040': attribute type 298 has an invalid length. [ 763.812520][T11223] loop2: detected capacity change from 0 to 64 [ 764.396656][T11224] fido_id[11224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 765.122205][T11236] loop6: detected capacity change from 0 to 64 [ 765.225603][T11235] loop2: detected capacity change from 0 to 512 [ 765.320776][T11236] hfs: hfs: Invalid key length: 94 [ 765.368781][T11235] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 765.377025][T11235] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 765.435097][T11229] loop4: detected capacity change from 0 to 4096 [ 765.455490][T11235] System zones: 1-12 [ 765.463574][T11235] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 765.463574][T11235] [ 765.475393][T11235] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 765.486761][T11235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 765.527642][T11229] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 765.846567][ T8954] hfs: node 4:3 still has 1 user(s)! [ 766.078866][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.474615][T11244] netlink: 666 bytes leftover after parsing attributes in process `syz.6.2049'. [ 767.857371][T11261] loop4: detected capacity change from 0 to 8 [ 768.991464][T11273] binder: 11271:11273 ioctl c018620c 80000080 returned -22 [ 769.134889][T11275] loop2: detected capacity change from 0 to 256 [ 769.241731][T11275] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 769.342715][T11275] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 769.350368][ T30] audit: type=1800 audit(1751537375.204:106): pid=11275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2065" name="file1" dev="loop2" ino=1048764 res=0 errno=0 [ 769.356728][T11275] FAT-fs (loop2): Filesystem has been set read-only [ 772.204946][T11306] loop0: detected capacity change from 0 to 512 [ 772.253755][T11306] EXT4-fs: Ignoring removed orlov option [ 772.272772][T11310] loop5: detected capacity change from 0 to 256 [ 772.294328][T11310] exfat: Deprecated parameter 'utf8' [ 772.300809][T11310] exfat: Deprecated parameter 'utf8' [ 772.311827][T11306] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 772.368200][T11306] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 772.448430][T11306] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.2079: corrupted in-inode xattr: e_value size too large [ 772.514108][T11310] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d) [ 772.563796][T11306] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2079: couldn't read orphan inode 15 (err -117) [ 772.616227][T11306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.678248][ T42] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 772.867336][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.881177][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 772.894739][ T42] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 772.904479][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.098905][ T42] usb 5-1: config 0 descriptor?? [ 773.152704][ T42] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 773.164136][ T30] audit: type=1326 audit(1751537379.004:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11317 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 773.187035][ T30] audit: type=1326 audit(1751537379.004:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11317 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 773.393569][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.475321][ T42] usb 5-1: USB disconnect, device number 10 [ 774.038129][ T42] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 774.113737][T11326] tipc: Enabled bearer , priority 10 [ 774.270194][ T42] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 774.280222][ T42] usb 5-1: config 0 has no interface number 0 [ 774.286615][ T42] usb 5-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 774.301896][ T42] usb 5-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 774.312617][ T42] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 774.322173][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.496840][T11296] Bluetooth: hci2: command 0x0405 tx timeout [ 774.656480][ T42] usb 5-1: config 0 descriptor?? [ 774.887480][ T42] usb 5-1: string descriptor 0 read error: -71 [ 774.902263][ T42] keyspan 5-1:0.168: Keyspan 2 port adapter converter detected [ 774.911069][ T42] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 1 [ 774.922993][ T42] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 84 [ 774.934729][ T42] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 2 [ 775.154564][ T42] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 775.173512][ T42] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 88 [ 775.183293][ T42] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 6 [ 775.330102][ T42] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 775.405915][ T42] usb 5-1: USB disconnect, device number 11 [ 775.482014][ T42] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 775.521827][ T42] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 775.540110][ T42] keyspan 5-1:0.168: device disconnected [ 778.418731][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2109'. [ 778.938575][ T42] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 779.090103][ T42] usb 7-1: device descriptor read/64, error -71 [ 779.354223][ T42] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 779.441902][ T1646] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 779.531987][ T42] usb 7-1: device descriptor read/64, error -71 [ 779.630708][ T1646] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.641165][ T1646] usb 1-1: config 0 interface 0 has no altsetting 0 [ 779.651439][ T1646] usb 1-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 779.661057][ T1646] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.688722][ T42] usb usb7-port1: attempt power cycle [ 779.713468][ T1646] usb 1-1: config 0 descriptor?? [ 780.042860][ T42] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 780.076137][ T42] usb 7-1: device descriptor read/8, error -71 [ 780.241544][ T1646] wacom 0003:056A:00BA.001F: unbalanced collection at end of report description [ 780.296138][ T1646] wacom 0003:056A:00BA.001F: parse failed [ 780.303134][ T1646] wacom 0003:056A:00BA.001F: probe with driver wacom failed with error -22 [ 780.342160][ T42] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 780.380796][ T42] usb 7-1: device descriptor read/8, error -71 [ 780.435510][ T1646] usb 1-1: USB disconnect, device number 8 [ 780.492742][ T42] usb usb7-port1: unable to enumerate USB device [ 781.724024][T11409] loop4: detected capacity change from 0 to 128 [ 781.775791][T11409] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 782.251134][T11409] FAT-fs (loop4): FAT read failed (blocknr 128) [ 782.690858][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.697609][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 784.008913][T11428] loop5: detected capacity change from 0 to 2048 [ 784.280843][T11428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.293708][T11428] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.861466][ T6430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.077580][T11457] loop0: detected capacity change from 0 to 512 [ 786.163526][T11457] EXT4-fs: Ignoring removed i_version option [ 786.228197][T11457] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 786.262190][T11460] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2146'. [ 786.272053][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'. [ 786.436192][T11457] EXT4-fs (loop0): 1 truncate cleaned up [ 786.444690][T11457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.024463][T11466] loop4: detected capacity change from 0 to 256 [ 787.068866][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.358399][T11468] loop6: detected capacity change from 0 to 1024 [ 787.475473][T11466] FAT-fs (loop4): Directory bread(block 64) failed [ 787.485532][T11466] FAT-fs (loop4): Directory bread(block 65) failed [ 787.492810][T11466] FAT-fs (loop4): Directory bread(block 66) failed [ 787.499773][T11466] FAT-fs (loop4): Directory bread(block 67) failed [ 787.506750][T11466] FAT-fs (loop4): Directory bread(block 68) failed [ 787.513819][T11466] FAT-fs (loop4): Directory bread(block 69) failed [ 787.520949][T11466] FAT-fs (loop4): Directory bread(block 70) failed [ 787.528056][T11466] FAT-fs (loop4): Directory bread(block 71) failed [ 787.535103][T11466] FAT-fs (loop4): Directory bread(block 72) failed [ 787.543303][T11466] FAT-fs (loop4): Directory bread(block 73) failed [ 787.633329][T11468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.624635][ T8954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.330112][T11488] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2157'. [ 790.024764][T11490] loop5: detected capacity change from 0 to 4096 [ 790.171987][T11490] ntfs3(loop5): It is recommened to use chkdsk. [ 790.243090][T11490] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 790.255556][T11490] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 790.264320][T11490] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 790.272826][T11490] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 790.281305][T11490] ntfs3(loop5): try to read out of volume at offset 0x3fffffc1c00 [ 790.289840][T11490] ntfs3(loop5): try to read out of volume at offset 0x3fffffc2c00 [ 790.298416][T11490] ntfs3(loop5): try to read out of volume at offset 0x3fffffc4c00 [ 790.306782][T11490] ntfs3(loop5): try to read out of volume at offset 0x3fffffc8c00 [ 790.315288][T11490] ntfs3(loop5): try to read out of volume at offset 0x3fffffd0c00 [ 790.486776][T11498] loop6: detected capacity change from 0 to 1024 [ 790.583421][T11498] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 790.594808][T11498] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 790.605009][T11498] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 790.728666][T11498] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.2163: unexpected bad inode w/o EXT4_IGET_BAD [ 790.843561][T11498] EXT4-fs (loop6): no journal found [ 790.849897][T11498] EXT4-fs (loop6): can't get journal size [ 790.971542][T11498] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 791.405176][T11506] loop0: detected capacity change from 0 to 1024 [ 791.519428][T11506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 ro without journal. Quota mode: writeback. [ 791.536157][ T8954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.172854][T11506] EXT4-fs: Ignoring removed orlov option [ 792.306235][T11506] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.2166: Abort forced by user [ 792.412347][T11506] EXT4-fs (loop0): Remounting filesystem read-only [ 792.419425][T11506] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-001000000000 r/w. [ 792.476992][T11520] bridge0: entered promiscuous mode [ 792.588683][T11520] bridge0: left promiscuous mode [ 792.860470][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 793.555818][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2176'. [ 794.379116][T11536] loop0: detected capacity change from 0 to 1024 [ 794.421991][T11541] loop4: detected capacity change from 0 to 512 [ 794.555564][T11541] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2179: iget: bad extended attribute block 1 [ 794.576339][T11541] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2179: couldn't read orphan inode 15 (err -117) [ 794.586583][T11536] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 794.601321][T11536] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 794.611260][T11536] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2178: Failed to acquire dquot type 0 [ 794.646640][T11541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.726470][T11536] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 794.742085][T11536] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.2178: corrupted inode contents [ 794.861749][T11536] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #13: comm syz.0.2178: mark_inode_dirty error [ 794.862017][T11541] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 13: comm syz.4.2179: lblock 0 mapped to illegal pblock 13 (length 1) [ 794.981761][T11536] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.2178: corrupted inode contents [ 795.050269][T11536] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.2178: mark_inode_dirty error [ 795.138814][T11536] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.2178: corrupted inode contents [ 795.153699][T11549] tipc: Enabling of bearer rejected, failed to enable media [ 795.214867][T11536] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 795.281662][T11536] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.2178: corrupted inode contents [ 795.358787][T11536] EXT4-fs error (device loop0): ext4_truncate:4597: inode #13: comm syz.0.2178: mark_inode_dirty error [ 795.514491][T11536] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 795.659337][T11536] EXT4-fs (loop0): 1 truncate cleaned up [ 795.670056][T11536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.730591][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.858506][T11536] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 795.905375][T11553] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 795.952565][T11553] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 796.455218][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.469842][T11558] loop6: detected capacity change from 0 to 1764 [ 796.852314][T11563] loop5: detected capacity change from 0 to 512 [ 796.895913][T11563] EXT4-fs: journaled quota format not specified [ 797.218802][T11568] loop4: detected capacity change from 0 to 256 [ 797.289082][T11568] exfat: Deprecated parameter 'utf8' [ 797.295368][T11568] exfat: Deprecated parameter 'utf8' [ 797.451841][T11568] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 797.989028][ T5846] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 798.238827][ T5846] usb 6-1: Using ep0 maxpacket: 8 [ 798.292092][ T5846] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 798.306251][ T5846] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 798.315885][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.476826][ T5846] usb 6-1: config 0 descriptor?? [ 799.002325][ T5846] kye 0003:0458:4018.0020: unbalanced delimiter at end of report description [ 799.100125][ T5846] kye 0003:0458:4018.0020: parse failed [ 799.106287][ T5846] kye 0003:0458:4018.0020: probe with driver kye failed with error -22 [ 799.329578][ T9939] usb 6-1: USB disconnect, device number 14 [ 800.668402][ T30] audit: type=1326 audit(1751537406.514:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11594 comm="syz.0.2204" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x0 [ 801.318201][T11602] loop4: detected capacity change from 0 to 1024 [ 801.564222][T11602] hfsplus: bad catalog entry type [ 802.084517][ T3524] hfsplus: b-tree write err: -5, ino 4 [ 803.986919][T11627] loop0: detected capacity change from 0 to 256 [ 805.011241][T11635] loop2: detected capacity change from 0 to 256 [ 805.442932][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2223'. [ 805.665216][T11635] FAT-fs (loop2): Directory bread(block 64) failed [ 805.672550][T11635] FAT-fs (loop2): Directory bread(block 65) failed [ 805.680061][T11635] FAT-fs (loop2): Directory bread(block 66) failed [ 805.686884][T11635] FAT-fs (loop2): Directory bread(block 67) failed [ 805.694086][T11635] FAT-fs (loop2): Directory bread(block 68) failed [ 805.701069][T11635] FAT-fs (loop2): Directory bread(block 69) failed [ 805.711182][T11635] FAT-fs (loop2): Directory bread(block 70) failed [ 805.718266][T11635] FAT-fs (loop2): Directory bread(block 71) failed [ 805.725329][T11635] FAT-fs (loop2): Directory bread(block 72) failed [ 805.732401][T11635] FAT-fs (loop2): Directory bread(block 73) failed [ 806.623740][T11648] loop6: detected capacity change from 0 to 16 [ 808.055021][T11658] batman_adv: batadv0: Adding interface: wlan0 [ 808.064061][T11658] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.090924][T11658] batman_adv: batadv0: Interface activated: wlan0 [ 808.935540][T11665] loop5: detected capacity change from 0 to 512 [ 808.976500][T11665] EXT4-fs (loop5): Test dummy encryption mode enabled [ 808.996013][T11665] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 809.274739][T11665] EXT4-fs (loop5): 1 truncate cleaned up [ 809.283575][T11665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.947562][ T30] audit: type=1326 audit(1751537415.804:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 810.143628][ T30] audit: type=1326 audit(1751537415.864:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 810.174741][ T30] audit: type=1326 audit(1751537415.914:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 810.205720][ T30] audit: type=1326 audit(1751537415.914:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.4.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 810.887175][T11665] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 811.522744][ T6430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.119593][T11695] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 814.941451][T11722] loop0: detected capacity change from 0 to 512 [ 815.106404][T11722] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 815.166480][T11722] EXT4-fs (loop0): invalid journal inode [ 815.183196][T11722] EXT4-fs (loop0): can't get journal size [ 815.247372][T11722] EXT4-fs (loop0): 1 truncate cleaned up [ 815.264913][T11722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.393827][T11722] EXT4-fs (loop0): resizing filesystem from 256 to 1 blocks [ 815.409871][T11722] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 815.816336][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.664484][T11736] loop0: detected capacity change from 0 to 256 [ 817.439136][T11736] FAT-fs (loop0): Directory bread(block 64) failed [ 817.446171][T11736] FAT-fs (loop0): Directory bread(block 65) failed [ 817.453371][T11736] FAT-fs (loop0): Directory bread(block 66) failed [ 817.460737][T11736] FAT-fs (loop0): Directory bread(block 67) failed [ 817.467688][T11736] FAT-fs (loop0): Directory bread(block 68) failed [ 817.474720][T11736] FAT-fs (loop0): Directory bread(block 69) failed [ 817.483943][T11736] FAT-fs (loop0): Directory bread(block 70) failed [ 817.491687][T11736] FAT-fs (loop0): Directory bread(block 71) failed [ 817.498841][T11736] FAT-fs (loop0): Directory bread(block 72) failed [ 817.505647][T11736] FAT-fs (loop0): Directory bread(block 73) failed [ 819.348471][ T9939] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 819.608692][T11757] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.618007][T11757] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.627149][T11757] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.639082][T11757] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.668151][ T9939] usb 6-1: Using ep0 maxpacket: 32 [ 819.715455][ T9939] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 819.724133][ T9939] usb 6-1: config 0 has no interface number 0 [ 819.730807][ T9939] usb 6-1: config 0 interface 12 has no altsetting 0 [ 819.855537][ T9939] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 819.865182][ T9939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.876710][ T9939] usb 6-1: Product: syz [ 819.881345][ T9939] usb 6-1: Manufacturer: syz [ 819.886222][ T9939] usb 6-1: SerialNumber: syz [ 820.024344][ T9939] usb 6-1: config 0 descriptor?? [ 820.148524][ T5846] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 820.494168][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 820.506301][ T5846] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 820.516269][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.791817][ T5846] usb 3-1: config 0 descriptor?? [ 820.802323][ T9939] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 820.810818][ T9939] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 820.818518][ T9939] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 820.826678][ T9939] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 821.141199][ T9939] usb 6-1: USB disconnect, device number 15 [ 821.485506][ T5846] corsair 0003:1B1C:1B09.0021: hidraw0: USB HID vff.fe Device [HID 1b1c:1b09] on usb-dummy_hcd.2-1/input0 [ 821.614458][ T5846] usb 3-1: USB disconnect, device number 14 [ 822.853166][T11771] fido_id[11771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 823.025137][T11770] loop0: detected capacity change from 0 to 4096 [ 823.141725][T11770] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 826.955770][T11806] loop5: detected capacity change from 0 to 2048 [ 827.088255][T11806] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 827.229850][ T5846] IPVS: starting estimator thread 0... [ 827.247267][T11811] loop4: detected capacity change from 0 to 8 [ 827.338571][T11810] IPVS: using max 192 ests per chain, 9600 per kthread [ 827.624278][T11811] SQUASHFS error: Failed to read block 0x721f: -5 [ 827.631433][T11811] SQUASHFS error: Unable to read metadata cache entry [721f] [ 827.639370][T11811] SQUASHFS error: Unable to read directory block [721f:26] [ 828.904350][T11823] tipc: Enabling of bearer rejected, failed to enable media [ 830.300665][T11835] sp0: Synchronizing with TNC [ 830.437424][T11834] [U] è [ 833.360851][T11864] ptrace attach of "./syz-executor exec"[11867] was attempted by "./syz-executor exec"[11864] [ 833.935936][T11861] loop6: detected capacity change from 0 to 4096 [ 834.373871][T11870] loop2: detected capacity change from 0 to 1024 [ 834.702443][T11870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.715540][T11870] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.579899][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.694195][T11876] loop4: detected capacity change from 0 to 4096 [ 836.259274][T11884] tipc: Bearer : already 2 bearers with priority 10 [ 836.267158][T11884] tipc: Bearer : trying with adjusted priority [ 836.274947][T11884] tipc: Enabling of bearer rejected, failed to enable media [ 836.357192][T11876] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 836.367332][T11885] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 836.474643][T11876] Remounting filesystem read-only [ 839.368520][T11905] loop0: detected capacity change from 0 to 512 [ 839.379283][T11905] EXT4-fs: Ignoring removed bh option [ 839.488648][T11905] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 839.549553][T11907] loop6: detected capacity change from 0 to 256 [ 839.666113][T11905] EXT4-fs (loop0): 1 truncate cleaned up [ 839.674917][T11905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.695379][T11907] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 839.708842][T11907] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 839.809369][T11913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2336'. [ 840.052291][T11907] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 840.063294][T11905] overlayfs: upper fs needs to support d_type. [ 840.842992][ T5791] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 840.961648][ T5791] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 841.956359][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.076702][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.128474][T11922] tipc: Failed to obtain node identity [ 842.134295][T11922] tipc: Enabling of bearer rejected, failed to enable media [ 842.196745][T11916] loop5: detected capacity change from 0 to 4096 [ 842.278375][T11916] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 842.331446][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.699964][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.056917][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.141828][T11916] ntfs3(loop5): ino=19, mi_enum_attr [ 843.147590][T11916] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 843.256364][T11916] ntfs3(loop5): ino=18, mi_enum_attr [ 844.073823][ T35] bridge_slave_1: left allmulticast mode [ 844.084180][ T35] bridge_slave_1: left promiscuous mode [ 844.091162][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.186671][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 844.191062][ T35] bridge_slave_0: left allmulticast mode [ 844.199605][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 844.208911][ T35] bridge_slave_0: left promiscuous mode [ 844.215674][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.528937][ T35] tipc: Resetting bearer [ 845.488434][ T14] smc: removing ib device syz2 [ 845.496966][ T35] tipc: Disabling bearer [ 846.277989][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.353763][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.406899][ T35] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 846.451802][ T35] bond0 (unregistering): Released all slaves [ 847.203202][ T2175] ip6_vti0 speed is unknown, defaulting to 1000 [ 847.217502][ T2175] syz2: Port: 1 Link DOWN [ 847.876477][T11939] loop6: detected capacity change from 0 to 1024 [ 848.171021][T11939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.045760][ T8954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.089356][T11950] CUSE: info not properly terminated [ 849.310815][T11296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 849.341151][T11296] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 849.354533][ T35] tipc: Disabling bearer [ 849.361869][ T35] tipc: Left network mode [ 849.368920][T11296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 849.412217][T11296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 849.451542][T11296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 849.846651][T11955] sctp: [Deprecated]: syz.6.2354 (pid 11955) Use of int in max_burst socket option. [ 849.846651][T11955] Use struct sctp_assoc_value instead [ 850.217532][ T35] hsr_slave_0: left promiscuous mode [ 850.238280][ T42] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 850.264740][ T35] hsr_slave_1: left promiscuous mode [ 850.272945][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.281361][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.431355][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.439322][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.455059][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 850.485539][ T42] usb 5-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 850.500234][ T42] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.511893][ T42] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 850.525579][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 850.535566][ T42] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 850.545081][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.573597][ T35] veth1_macvtap: left promiscuous mode [ 850.581593][ T35] veth0_macvtap: left promiscuous mode [ 850.587607][ T35] veth1_vlan: left promiscuous mode [ 850.593599][ T35] veth0_vlan: left promiscuous mode [ 850.895222][ T42] usb 5-1: config 0 descriptor?? [ 851.636439][ T5789] Bluetooth: hci3: command tx timeout [ 851.644129][ T35] pimreg (unregistering): left allmulticast mode [ 851.652153][T11974] 9p: Unknown Cache mode or invalid value n [ 851.851926][ T42] magicmouse 0003:05AC:0269.0022: item fetching failed at offset 5/7 [ 851.873596][ T42] magicmouse 0003:05AC:0269.0022: magicmouse hid parse failed [ 851.888731][ T42] magicmouse 0003:05AC:0269.0022: probe with driver magicmouse failed with error -22 [ 852.055722][ T42] usb 5-1: USB disconnect, device number 12 [ 852.435030][ T35] team0 (unregistering): Port device team_slave_1 removed [ 852.605833][ T35] team0 (unregistering): Port device team_slave_0 removed [ 853.237060][T11986] loop2: detected capacity change from 0 to 512 [ 853.378223][T11986] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 853.657593][T11986] EXT4-fs (loop2): 1 truncate cleaned up [ 853.669350][T11986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 853.700005][T11296] Bluetooth: hci3: command tx timeout [ 853.759560][ T35] IPVS: stop unused estimator thread 0... [ 853.768444][ T30] audit: type=1800 audit(1751537459.614:114): pid=11986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2365" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 854.489627][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.057409][T11996] loop4: detected capacity change from 0 to 4096 [ 855.169660][T12006] netlink: 'syz.6.2372': attribute type 62 has an invalid length. [ 855.289881][T12009] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 855.334457][T11951] chnl_net:caif_netlink_parms(): no params data found [ 855.768892][ T5789] Bluetooth: hci3: command tx timeout [ 856.366787][T12017] loop6: detected capacity change from 0 to 512 [ 856.440825][T12017] EXT4-fs: Ignoring removed i_version option [ 856.447282][T12017] EXT4-fs: Ignoring removed mblk_io_submit option [ 856.540715][T12017] EXT4-fs (loop6): Test dummy encryption mode enabled [ 856.589174][T12017] EXT4-fs (loop6): orphan cleanup on readonly fs [ 856.598280][T12017] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.2375: inode #13: comm syz.6.2375: iget: illegal inode # [ 856.763087][T12017] EXT4-fs (loop6): Remounting filesystem read-only [ 856.772366][T12017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 857.647024][T11951] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.660915][T11951] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.669399][T11951] bridge_slave_0: entered allmulticast mode [ 857.679390][T11951] bridge_slave_0: entered promiscuous mode [ 857.839371][ T5789] Bluetooth: hci3: command tx timeout [ 857.880790][T11951] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.888708][T11951] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.896632][T11951] bridge_slave_1: entered allmulticast mode [ 857.991170][T12017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 858.048335][T11951] bridge_slave_1: entered promiscuous mode [ 858.055295][T12017] EXT4-fs (loop6): can't enable nombcache during remount [ 858.509668][T11951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.523353][ T8954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.632315][T11951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.219136][T11951] team0: Port device team_slave_0 added [ 859.247546][T11951] team0: Port device team_slave_1 added [ 859.762928][T11951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.772729][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.798874][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.806316][T11951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.068197][ T30] audit: type=1804 audit(1751537465.924:115): pid=12057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2388" name="/" dev="pidfs" ino=12055 res=1 errno=0 [ 860.098606][T11951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.105928][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.132057][ C0] vkms_vblank_simulate: vblank timer overrun [ 860.139033][T11951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.746211][T12062] loop5: detected capacity change from 0 to 764 [ 860.836965][T11951] hsr_slave_0: entered promiscuous mode [ 860.847917][T11951] hsr_slave_1: entered promiscuous mode [ 860.856908][T11951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 860.864973][T11951] Cannot create hsr debugfs directory [ 860.939369][T12062] rock: directory entry would overflow storage [ 860.946000][T12062] rock: sig=0x4654, size=5, remaining=4 [ 861.104722][T12065] netlink: 'syz.2.2391': attribute type 3 has an invalid length. [ 861.936798][T12071] loop6: detected capacity change from 0 to 1024 [ 862.159225][T12073] loop2: detected capacity change from 0 to 1024 [ 862.201190][T12071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.214083][T12071] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.849599][ T4545] hfsplus: b-tree write err: -5, ino 4 [ 862.985947][T11951] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 863.132514][T11951] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 863.146702][ T8954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.300091][T11951] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 863.408981][T11951] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 863.507127][T12089] loop2: detected capacity change from 0 to 128 [ 863.691953][T12089] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 863.773636][T12089] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 864.433623][T12096] loop4: detected capacity change from 0 to 512 [ 864.525416][ T5796] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 864.540446][T12098] loop5: detected capacity change from 0 to 64 [ 864.649063][T12096] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.2401: bad orphan inode 15 [ 864.721680][T12096] ext4_test_bit(bit=14, block=5) = 0 [ 864.731080][T12096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.303027][T11951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.530189][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.560984][ T6430] hfs: node 4:3 still has 1 user(s)! [ 865.589349][T11951] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.713645][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.721410][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.828690][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.836376][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.641627][T12116] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2408'. [ 866.655961][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2408'. [ 867.400072][T12114] loop2: detected capacity change from 0 to 4096 [ 868.358464][T12114] ntfs3(loop2): failed to convert "0080" to koi8-ru [ 869.103706][T11951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.232081][T12141] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2415'. [ 869.244986][T12141] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2415'. [ 869.254737][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2415'. [ 870.411329][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2419'. [ 870.423246][T12155] tipc: Started in network mode [ 870.429319][T12155] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 870.439459][T12155] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 870.449285][T12155] tipc: Enabled bearer , priority 10 [ 871.578620][ T9939] tipc: Node number set to 1 [ 871.660415][T12168] loop5: detected capacity change from 0 to 1024 [ 871.898010][ T30] audit: type=1800 audit(1751537477.764:116): pid=12168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2421" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 871.980980][T12168] syz.5.2421: attempt to access beyond end of device [ 871.980980][T12168] loop5: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 872.730798][T12181] atomic_op ffff888050149d28 conn xmit_atomic 0000000000000000 [ 872.941522][T11951] veth0_vlan: entered promiscuous mode [ 873.092128][T11951] veth1_vlan: entered promiscuous mode [ 873.374507][ T9939] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 873.486010][T11951] veth0_macvtap: entered promiscuous mode [ 873.570496][T11951] veth1_macvtap: entered promiscuous mode [ 873.618656][ T9939] usb 7-1: Using ep0 maxpacket: 16 [ 873.706414][ T9939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.718382][ T9939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.728714][ T9939] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 873.742164][ T9939] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 873.751724][ T9939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.896178][T12192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2430'. [ 873.955245][T11951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.071768][ T9939] usb 7-1: config 0 descriptor?? [ 874.123486][T11951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.355865][T11951] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.365903][T11951] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.378171][T11951] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.387330][T11951] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.741135][ T9939] hid-multitouch 0003:0457:07DA.0023: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 874.818953][ T9939] usb 7-1: USB disconnect, device number 9 [ 874.938897][T12197] loop5: detected capacity change from 0 to 128 [ 874.997559][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2433'. [ 875.072242][T12197] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 875.170279][T12200] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2433'. [ 875.172023][T12197] ext4 filesystem being mounted at /444/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 875.181351][T12200] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2433'. [ 875.809037][ T6430] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 876.185537][T12204] fido_id[12204]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 876.444519][T12211] loop6: detected capacity change from 0 to 8 [ 876.652374][T12211] SQUASHFS error: xz decompression failed, data probably corrupt [ 876.663485][T12211] SQUASHFS error: Failed to read block 0x108: -5 [ 876.672345][T12211] SQUASHFS error: Unable to read metadata cache entry [106] [ 876.681208][T12211] SQUASHFS error: Unable to read inode 0x11f [ 877.229608][T12221] loop4: detected capacity change from 0 to 512 [ 877.551559][T12221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.568757][T12221] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 878.177207][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.847248][T12255] loop6: detected capacity change from 0 to 256 [ 879.966254][T12255] exfat: Deprecated parameter 'utf8' [ 880.111223][T12254] loop4: detected capacity change from 0 to 1764 [ 880.193735][T12255] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 880.380252][T12254] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 881.894274][T12273] loop4: detected capacity change from 0 to 2048 [ 882.260724][T12273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.838571][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.057360][T12282] loop2: detected capacity change from 0 to 4096 [ 883.178295][T12282] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 883.734090][T12282] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 883.838812][T12282] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 883.969632][T12282] ntfs3(loop2): MFT: r=b, expect seq=0 instead of b! [ 884.226834][T12300] loop5: detected capacity change from 0 to 512 [ 884.616407][T12300] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.2460: corrupted in-inode xattr: invalid ea_ino [ 884.640619][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2461'. [ 884.650190][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2461'. [ 884.661625][T12304] netlink: 'syz.6.2461': attribute type 12 has an invalid length. [ 884.670534][T12304] netlink: 'syz.6.2461': attribute type 13 has an invalid length. [ 884.699893][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.708308][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.822503][T12300] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2460: couldn't read orphan inode 15 (err -117) [ 884.890632][ T9280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.900324][ T9280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.029459][T12300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.204112][T12300] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2460: invalid indirect mapped block 234881024 (level 0) [ 885.760886][ T6430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.020758][T12308] loop4: detected capacity change from 0 to 4096 [ 886.128102][T12308] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 886.493497][T12319] loop5: detected capacity change from 0 to 256 [ 886.556539][T12321] loop2: detected capacity change from 0 to 256 [ 886.623631][T12319] exfat: Deprecated parameter 'namecase' [ 886.630483][T12319] exfat: Deprecated parameter 'utf8' [ 886.636233][T12319] exfat: Deprecated parameter 'utf8' [ 886.820884][T12308] ntfs3(loop4): ino=19, mi_enum_attr [ 886.827471][T12308] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 886.873315][T12319] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 886.919172][T12321] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 889.550228][T12350] netlink: 'syz.2.2477': attribute type 29 has an invalid length. [ 889.625972][T12350] netlink: 'syz.2.2477': attribute type 29 has an invalid length. [ 891.606663][T12374] loop2: detected capacity change from 0 to 64 [ 891.763811][ T30] audit: type=1800 audit(1751537497.604:117): pid=12374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2485" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 893.761011][T12388] loop4: detected capacity change from 0 to 4096 [ 894.525264][T12407] loop6: detected capacity change from 0 to 64 [ 895.236453][T12414] loop5: detected capacity change from 0 to 256 [ 895.479296][T12414] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 896.085367][ T1646] IPVS: starting estimator thread 0... [ 896.212141][T12425] IPVS: using max 240 ests per chain, 12000 per kthread [ 896.681413][ T1646] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 896.775752][T12432] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2507'. [ 896.785350][T12432] netlink: 'syz.5.2507': attribute type 1 has an invalid length. [ 896.793725][T12432] netlink: 'syz.5.2507': attribute type 1 has an invalid length. [ 896.891592][ T1646] usb 3-1: Using ep0 maxpacket: 8 [ 896.927451][T12435] loop7: detected capacity change from 0 to 256 [ 896.939635][ T1646] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 896.953901][ T1646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.003823][T12436] loop4: detected capacity change from 0 to 16 [ 897.079770][T12436] erofs (device loop4): mounted with root inode @ nid 36. [ 897.106907][ T1646] usb 3-1: config 0 descriptor?? [ 897.604707][ T1646] uclogic 0003:145F:0212.0024: interface is invalid, ignoring [ 897.835916][ T9939] usb 3-1: USB disconnect, device number 15 [ 898.309354][T12441] loop5: detected capacity change from 0 to 1024 [ 899.638499][ T1646] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 899.676858][T12454] loop5: detected capacity change from 0 to 128 [ 899.863422][ T1646] usb 3-1: Using ep0 maxpacket: 32 [ 899.899454][ T1646] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 899.908294][ T1646] usb 3-1: config 0 has no interface number 0 [ 899.916465][ T1646] usb 3-1: config 0 interface 12 has no altsetting 0 [ 900.034385][ T1646] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 900.047471][ T1646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.056120][ T1646] usb 3-1: Product: syz [ 900.061509][ T1646] usb 3-1: Manufacturer: syz [ 900.066411][ T1646] usb 3-1: SerialNumber: syz [ 900.180442][T12459] loop6: detected capacity change from 0 to 128 [ 900.196887][ T1646] usb 3-1: config 0 descriptor?? [ 900.579668][T12452] loop4: detected capacity change from 0 to 4096 [ 900.601243][T12459] FAT-fs (loop6): Directory bread(block 32) failed [ 900.611433][T12459] FAT-fs (loop6): Directory bread(block 33) failed [ 900.618941][T12459] FAT-fs (loop6): Directory bread(block 34) failed [ 900.625999][T12459] FAT-fs (loop6): Directory bread(block 35) failed [ 900.635459][T12459] FAT-fs (loop6): Directory bread(block 36) failed [ 900.646065][T12459] FAT-fs (loop6): Directory bread(block 37) failed [ 900.653651][T12459] FAT-fs (loop6): Directory bread(block 38) failed [ 900.660902][T12459] FAT-fs (loop6): Directory bread(block 39) failed [ 900.671318][T12459] FAT-fs (loop6): Directory bread(block 40) failed [ 900.678586][T12459] FAT-fs (loop6): Directory bread(block 41) failed [ 900.706791][T12452] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 900.852861][T12452] ntfs3(loop4): It is recommened to use chkdsk. [ 901.071800][ T1646] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 901.081118][ T1646] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 901.091792][ T1646] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 901.100192][ T1646] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 901.334097][ T1646] usb 3-1: USB disconnect, device number 16 [ 901.581392][T12452] ntfs3(loop4): failed to convert "076c" to iso8859-1 [ 902.995999][ T2175] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 903.208490][ T2175] usb 3-1: Using ep0 maxpacket: 32 [ 903.265580][ T2175] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 903.274565][ T2175] usb 3-1: config 0 has no interface number 0 [ 903.392017][ T2175] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 903.405151][ T2175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.414872][ T2175] usb 3-1: Product: syz [ 903.419438][ T2175] usb 3-1: Manufacturer: syz [ 903.424387][ T2175] usb 3-1: SerialNumber: syz [ 903.586016][ T2175] usb 3-1: config 0 descriptor?? [ 903.668290][ T2175] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 903.697604][T12483] loop7: detected capacity change from 0 to 512 [ 903.725813][T12479] loop6: detected capacity change from 0 to 2048 [ 903.801729][T12483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 903.842459][T12484] loop5: detected capacity change from 0 to 512 [ 903.945147][T12484] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 903.957450][T12489] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 904.042762][ T2175] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 904.086782][T12484] EXT4-fs (loop5): 1 truncate cleaned up [ 904.093623][ T2175] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 904.095779][T12484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.131118][T12483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 904.144783][T12483] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 904.552997][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 904.567473][ T2175] usb 3-1: USB disconnect, device number 17 [ 904.626990][T12484] EXT4-fs error (device loop5): ext4_find_extent:903: inode #15: comm syz.5.2525: inode has invalid extent depth: 25964 [ 904.674598][T12493] EXT4-fs error (device loop5): ext4_find_extent:903: inode #15: comm syz.5.2525: inode has invalid extent depth: 25964 [ 904.675898][ T2175] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 904.835967][T12493] EXT4-fs (loop5): Remounting filesystem read-only [ 904.836280][ T2175] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 904.846390][T12493] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 904.870340][ T2175] quatech2 3-1:0.51: device disconnected [ 904.918634][T12484] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 905.147626][T11951] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 905.245703][T12496] loop4: detected capacity change from 0 to 64 [ 905.381814][ T6430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.570940][ T30] audit: type=1800 audit(1751537511.374:118): pid=12496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2528" name="bus" dev="loop4" ino=21 res=0 errno=0 [ 905.611435][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.618849][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 906.269920][T12505] loop2: detected capacity change from 0 to 512 [ 906.328074][T12505] EXT4-fs: Ignoring removed mblk_io_submit option [ 906.386074][T12505] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 906.533903][T12505] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 906.702996][T12505] System zones: 1-12 [ 906.826604][T12505] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.2532: corrupted in-inode xattr: e_value size too large [ 906.861215][T12505] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2532: couldn't read orphan inode 15 (err -117) [ 906.925524][T12505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.350475][T12507] loop6: detected capacity change from 0 to 4096 [ 907.640772][T12507] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 907.641822][T12520] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 907.705274][T12507] Remounting filesystem read-only [ 907.721817][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.435424][T12529] loop7: detected capacity change from 0 to 8 [ 908.899035][ T1646] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 909.091234][ T1646] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.105361][ T1646] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 909.119042][ T1646] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 909.133586][ T1646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.240006][T12537] netlink: 'syz.4.2542': attribute type 28 has an invalid length. [ 909.344286][ T1646] usb 3-1: config 0 descriptor?? [ 910.034284][ T1646] kovaplus 0003:1E7D:2D50.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 910.158826][ T1646] kovaplus 0003:1E7D:2D50.0025: couldn't init struct kovaplus_device [ 910.167410][ T1646] kovaplus 0003:1E7D:2D50.0025: couldn't install mouse [ 910.202710][ T1646] kovaplus 0003:1E7D:2D50.0025: probe with driver kovaplus failed with error -71 [ 910.237332][T12543] loop5: detected capacity change from 0 to 128 [ 910.334438][ T1646] usb 3-1: USB disconnect, device number 18 [ 910.531085][ T30] audit: type=1800 audit(1751537516.394:119): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2544" name="file1" dev="loop5" ino=1048820 res=0 errno=0 [ 910.605154][ T5789] Bluetooth: hci3: command tx timeout [ 910.726948][T12539] loop7: detected capacity change from 0 to 4096 [ 911.023877][T12543] syz.5.2544: attempt to access beyond end of device [ 911.023877][T12543] loop5: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 911.039095][T12543] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 911.051105][T12543] syz.5.2544: attempt to access beyond end of device [ 911.051105][T12543] loop5: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 911.065052][T12543] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 911.077225][T12543] syz.5.2544: attempt to access beyond end of device [ 911.077225][T12543] loop5: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 911.094700][T12543] Buffer I/O error on dev loop5, logical block 139, lost async page write [ 911.103845][T12543] syz.5.2544: attempt to access beyond end of device [ 911.103845][T12543] loop5: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 911.123173][T12543] Buffer I/O error on dev loop5, logical block 140, lost async page write [ 911.132264][T12543] syz.5.2544: attempt to access beyond end of device [ 911.132264][T12543] loop5: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 911.146363][T12543] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 911.158334][T12543] syz.5.2544: attempt to access beyond end of device [ 911.158334][T12543] loop5: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 911.172386][T12543] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 911.183780][T12543] syz.5.2544: attempt to access beyond end of device [ 911.183780][T12543] loop5: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 911.201428][T12543] Buffer I/O error on dev loop5, logical block 143, lost async page write [ 911.210511][T12543] syz.5.2544: attempt to access beyond end of device [ 911.210511][T12543] loop5: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 911.224488][T12543] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 911.237534][T12543] syz.5.2544: attempt to access beyond end of device [ 911.237534][T12543] loop5: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 911.245192][T12539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.251534][T12543] Buffer I/O error on dev loop5, logical block 147, lost async page write [ 911.276428][T12543] syz.5.2544: attempt to access beyond end of device [ 911.276428][T12543] loop5: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 911.295346][T12543] Buffer I/O error on dev loop5, logical block 148, lost async page write [ 911.732902][T12550] fido_id[12550]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 911.963534][T11951] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.474507][T12589] loop6: detected capacity change from 0 to 64 [ 914.520466][T12587] usb usb8: usbfs: process 12587 (syz.5.2559) did not claim interface 0 before use [ 915.942746][T12613] loop5: detected capacity change from 0 to 256 [ 915.992475][T12613] exfat: Deprecated parameter 'utf8' [ 916.213724][T12613] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 916.806024][T12624] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2572'. [ 916.818913][T12624] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2572'. [ 917.416087][T12628] loop5: detected capacity change from 0 to 64 [ 918.822290][T12645] loop6: detected capacity change from 0 to 512 [ 918.892061][T12645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 918.894058][T12649] loop7: detected capacity change from 0 to 16 [ 918.900354][T12645] EXT4-fs: Ignoring removed oldalloc option [ 919.033126][T12649] erofs (device loop7): mounted with root inode @ nid 36. [ 919.175029][T12645] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.2579: Parent and EA inode have the same ino 15 [ 919.238263][T12645] EXT4-fs (loop6): Remounting filesystem read-only [ 919.245351][T12645] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -30) [ 919.255121][T12645] EXT4-fs (loop6): 1 orphan inode deleted [ 919.275256][T12645] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 919.442714][T12645] EXT4-fs warning (device loop6): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 919.987986][T12659] loop2: detected capacity change from 0 to 1024 [ 920.041441][ T8954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.153845][T12661] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2585'. [ 920.240065][T12659] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 920.247146][T12659] hfsplus: xattr search failed [ 921.098070][ T1646] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 921.361468][ T1646] usb 7-1: Using ep0 maxpacket: 16 [ 921.385222][ T1646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.399947][ T1646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.410495][ T1646] usb 7-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 921.410636][ T1646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.469732][T12672] loop7: detected capacity change from 0 to 512 [ 921.589348][ T1646] usb 7-1: config 0 descriptor?? [ 921.709678][T12672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 921.710281][T12672] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.861640][T12679] loop2: detected capacity change from 0 to 128 [ 921.876908][T12672] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 921.877542][T12672] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 921.878039][T12672] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2589: Failed to acquire dquot type 0 [ 921.944837][T12679] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 922.008655][T12679] FAT-fs (loop2): Directory bread(block 148) failed [ 922.008799][T12679] FAT-fs (loop2): Directory bread(block 149) failed [ 922.008936][T12679] FAT-fs (loop2): Directory bread(block 150) failed [ 922.009060][T12679] FAT-fs (loop2): Directory bread(block 151) failed [ 922.009313][T12679] FAT-fs (loop2): Directory bread(block 152) failed [ 922.009444][T12679] FAT-fs (loop2): Directory bread(block 153) failed [ 922.009579][T12679] FAT-fs (loop2): Directory bread(block 154) failed [ 922.009698][T12679] FAT-fs (loop2): Directory bread(block 155) failed [ 922.223898][T12679] FAT-fs (loop2): Directory bread(block 148) failed [ 922.224126][T12679] FAT-fs (loop2): Directory bread(block 149) failed [ 922.391995][ T1646] usb 7-1: string descriptor 0 read error: -71 [ 922.408900][ T1646] uclogic 0003:5543:004D.0026: failed retrieving string descriptor #200: -71 [ 922.409173][ T1646] uclogic 0003:5543:004D.0026: failed retrieving pen parameters: -71 [ 922.409293][ T1646] uclogic 0003:5543:004D.0026: failed probing pen v2 parameters: -71 [ 922.409546][ T1646] uclogic 0003:5543:004D.0026: failed probing parameters: -71 [ 922.410056][ T1646] uclogic 0003:5543:004D.0026: probe with driver uclogic failed with error -71 [ 922.468399][ T1646] usb 7-1: USB disconnect, device number 10 [ 922.573910][T11951] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 922.903458][ T3524] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 923.189539][ T1646] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 923.521039][ T1646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 923.533012][ T1646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.546091][ T1646] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 923.555746][ T1646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.805124][ T1646] usb 5-1: config 0 descriptor?? [ 923.856678][ T1646] hub 5-1:0.0: USB hub found [ 924.100347][ T1646] hub 5-1:0.0: 20 ports detected [ 924.130724][ T1646] hub 5-1:0.0: insufficient power available to use all downstream ports [ 924.308794][ T1646] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 924.315601][ T1646] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 924.478323][ T1646] usbhid 5-1:0.0: can't add hid device: -71 [ 924.485059][ T1646] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 924.611069][ T1646] usb 5-1: USB disconnect, device number 13 [ 925.337249][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2602'. [ 927.310246][T12733] loop5: detected capacity change from 0 to 2048 [ 927.566068][T12733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.618301][T12744] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 927.708154][T12744] EXT4-fs (loop5): Remounting filesystem read-only [ 928.217599][ T6430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.538974][T12751] loop4: detected capacity change from 0 to 256 [ 928.799173][T12751] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 929.079970][T12760] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 929.477380][T12765] loop6: detected capacity change from 0 to 256 [ 929.849248][T12765] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 931.114365][ T1126] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.127877][ T1126] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.321114][ T1126] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.332165][ T1126] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.710396][ T1126] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.721251][ T1126] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.930346][T12779] loop7: detected capacity change from 0 to 4096 [ 932.123150][ T1126] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.134222][ T1126] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.218271][T12788] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 932.371194][T12787] team_slave_0: entered promiscuous mode [ 932.377491][T12787] team_slave_1: entered promiscuous mode [ 932.394967][T12787] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 932.408728][T12787] team0: Device macvtap1 is already an upper device of the team interface [ 932.641772][T12787] team_slave_0: left promiscuous mode [ 932.647905][T12787] team_slave_1: left promiscuous mode [ 933.440642][ T1126] bridge_slave_1: left allmulticast mode [ 933.446621][ T1126] bridge_slave_1: left promiscuous mode [ 933.453599][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.522170][ T1126] bridge_slave_0: left allmulticast mode [ 933.530469][ T1126] bridge_slave_0: left promiscuous mode [ 933.537274][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.330357][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.374204][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.435419][ T1126] bond0 (unregistering): Released all slaves [ 934.758654][ T1126] batman_adv: batadv0: Interface deactivated: wlan0 [ 934.842403][ T1126] batman_adv: batadv0: Removing interface: wlan0 [ 935.108498][ T1126] hsr_slave_0: left promiscuous mode [ 935.150399][ T1126] hsr_slave_1: left promiscuous mode [ 935.159112][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.167029][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.262946][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.271108][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.407478][ T1126] veth1_macvtap: left promiscuous mode [ 935.413612][ T1126] veth0_macvtap: left promiscuous mode [ 935.420588][ T1126] veth1_vlan: left promiscuous mode [ 935.426266][ T1126] veth0_vlan: left promiscuous mode [ 936.293082][T12822] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 936.480063][T11296] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 936.564576][T11296] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 936.595951][T11296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 936.681627][T11296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 936.701061][T11296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 937.060975][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 937.205284][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'. [ 937.223785][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 937.271499][T12830] loop7: detected capacity change from 0 to 128 [ 937.592003][T12809] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2636'. [ 937.843673][T12830] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 937.944706][T12830] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 938.466661][T11951] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 938.798846][T11296] Bluetooth: hci2: command tx timeout [ 938.942049][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2646'. [ 939.549504][T12849] netlink: 'syz.2.2648': attribute type 2 has an invalid length. [ 939.557686][T12849] netlink: 'syz.2.2648': attribute type 1 has an invalid length. [ 939.566208][T12849] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2648'. [ 939.576391][T12849] block nbd5: not configured, cannot reconfigure [ 939.917264][T12821] chnl_net:caif_netlink_parms(): no params data found [ 940.483484][T12860] loop7: detected capacity change from 0 to 1024 [ 940.534139][T12860] EXT4-fs: Ignoring removed mblk_io_submit option [ 940.544897][T12860] EXT4-fs: Ignoring removed nobh option [ 940.554013][T12860] EXT4-fs: Ignoring removed bh option [ 940.723743][T12860] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 940.829575][T12866] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2653'. [ 940.881830][T11296] Bluetooth: hci2: command tx timeout [ 942.596217][T12821] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.604829][T12821] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.618446][T12821] bridge_slave_0: entered allmulticast mode [ 942.628419][T12821] bridge_slave_0: entered promiscuous mode [ 942.645899][T12885] loop5: detected capacity change from 0 to 512 [ 942.867270][T12821] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.875848][T12821] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.883871][T12821] bridge_slave_1: entered allmulticast mode [ 942.893891][T12821] bridge_slave_1: entered promiscuous mode [ 942.986416][T11296] Bluetooth: hci2: command tx timeout [ 943.003404][T12885] EXT4-fs (loop5): 1 orphan inode deleted [ 943.014606][T12885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.048026][T12885] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.060238][T12831] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 943.074067][T12831] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 943.426359][T12821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.440577][T12534] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 943.543209][T12821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.623644][ T6430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.712696][T12534] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 943.721510][T12534] usb 5-1: config 0 has no interface number 0 [ 943.728254][T12534] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=b4.98 [ 943.737605][T12534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.894722][T12534] usb 5-1: config 0 descriptor?? [ 943.930653][T12534] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 944.042949][T12821] team0: Port device team_slave_0 added [ 944.148227][T12821] team0: Port device team_slave_1 added [ 944.477464][T12821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.486544][T12821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.516296][T12821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.550652][T12821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.558314][T12821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.588351][T12821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.665767][T12534] gspca_vc032x: reg_r err -71 [ 944.673908][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.681397][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.686933][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.692670][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.701214][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.706745][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.712657][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.718350][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.723892][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.732307][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.737966][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.743471][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.749146][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.754658][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.763313][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.769361][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.774895][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.780607][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.786128][T12534] gspca_vc032x: I2c Bus Busy Wait 00 [ 944.794725][T12534] gspca_vc032x: Unknown sensor... [ 944.800615][T12534] vc032x 5-1:0.153: probe with driver vc032x failed with error -22 [ 945.104765][T11296] Bluetooth: hci2: command tx timeout [ 945.211111][T12534] usb 5-1: USB disconnect, device number 14 [ 945.336712][T12821] hsr_slave_0: entered promiscuous mode [ 945.347611][T12821] hsr_slave_1: entered promiscuous mode [ 946.193216][ T4112] tipc: Subscription rejected, illegal request [ 946.384823][T12918] loop4: detected capacity change from 0 to 512 [ 946.555980][T12918] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 946.760585][T12918] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #17: comm syz.4.2667: inline data xattr refers to an external xattr inode [ 946.974875][T12918] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2667: couldn't read orphan inode 17 (err -117) [ 947.009015][T12918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.440956][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.464647][T12821] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 947.592134][T12821] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 947.669484][T12821] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 947.779420][T12821] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 949.543446][T12821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.807025][T12821] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.918801][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.926419][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.069975][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.077624][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.262391][T12963] loop7: detected capacity change from 0 to 256 [ 950.676092][T12963] FAT-fs (loop7): Directory bread(block 64) failed [ 950.685234][T12963] FAT-fs (loop7): Directory bread(block 65) failed [ 950.692425][T12963] FAT-fs (loop7): Directory bread(block 66) failed [ 950.699418][T12963] FAT-fs (loop7): Directory bread(block 67) failed [ 950.710661][T12963] FAT-fs (loop7): Directory bread(block 68) failed [ 950.717476][T12963] FAT-fs (loop7): Directory bread(block 69) failed [ 950.726064][T12963] FAT-fs (loop7): Directory bread(block 70) failed [ 950.733126][T12963] FAT-fs (loop7): Directory bread(block 71) failed [ 950.740281][T12963] FAT-fs (loop7): Directory bread(block 72) failed [ 950.747087][T12963] FAT-fs (loop7): Directory bread(block 73) failed [ 950.812024][T12969] loop2: detected capacity change from 0 to 164 [ 951.992909][T12985] loop7: detected capacity change from 0 to 64 [ 952.109197][T12985] hfs: bad catalog folder thread [ 952.237194][T12987] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2688'. [ 952.780423][T12821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.719982][T13007] loop2: detected capacity change from 0 to 1024 [ 953.779565][T13007] ext4: Unknown parameter 'noacl' [ 953.933021][T13005] loop4: detected capacity change from 0 to 4096 [ 954.053041][T13005] NILFS (loop4): invalid segment: Checksum error in segment payload [ 954.063791][T13005] NILFS (loop4): trying rollback from an earlier position [ 954.202699][T13005] NILFS (loop4): recovery complete [ 954.243587][T13016] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 955.319825][T13020] loop5: detected capacity change from 0 to 4096 [ 955.388585][T13020] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 955.948251][T13020] ntfs3(loop5): ino=5, "/" ntfs_readdir [ 955.954272][T13020] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 955.998379][T12821] veth0_vlan: entered promiscuous mode [ 956.101858][T12821] veth1_vlan: entered promiscuous mode [ 956.502447][T12821] veth0_macvtap: entered promiscuous mode [ 956.589089][T12821] veth1_macvtap: entered promiscuous mode [ 956.791946][T12821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.853958][T12821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.979748][T12821] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.989191][T12821] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.998645][T12821] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.008201][T12821] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.510403][T13055] loop5: detected capacity change from 0 to 256 [ 957.578246][T13055] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 957.592618][T13055] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 957.938592][T13055] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 958.172762][ T30] audit: type=1800 audit(1751537564.034:120): pid=13055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2707" name="file1" dev="loop5" ino=1048833 res=0 errno=0 [ 958.221803][T13055] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 958.230374][T13055] exFAT-fs (loop5): Filesystem has been set read-only [ 958.377303][T13067] loop4: detected capacity change from 0 to 736 [ 959.047294][T13076] loop2: detected capacity change from 0 to 256 [ 959.163486][T13074] loop7: detected capacity change from 0 to 1024 [ 960.912769][T13102] loop5: detected capacity change from 0 to 512 [ 960.929764][T13101] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2719'. [ 960.979674][T13102] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 961.933829][T13116] loop2: detected capacity change from 0 to 16 [ 962.022367][T13116] erofs (device loop2): mounted with root inode @ nid 36. [ 962.705381][T13118] loop5: detected capacity change from 0 to 4096 [ 962.758333][T13118] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 963.241034][T13118] ntfs3(loop5): ino=0, attr_set_size [ 964.608120][T13153] Driver unsupported XDP return value 0 on prog (id 83) dev N/A, expect packet loss! [ 965.232940][T13154] loop5: detected capacity change from 0 to 4096 [ 965.246796][T13154] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 965.361751][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.370214][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.628537][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.636844][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.869504][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'. [ 965.879128][T13164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2738'. [ 966.348247][ T11] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 966.536249][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.548119][ T11] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 966.557929][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.689225][ T11] usb 5-1: config 0 descriptor?? [ 967.003156][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 967.010911][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.298801][ T11] dragonrise 0003:0079:0006.0027: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 967.311531][ T11] dragonrise 0003:0079:0006.0027: no inputs found [ 967.318505][ T11] dragonrise 0003:0079:0006.0027: force feedback init failed [ 967.360455][T13170] loop7: detected capacity change from 0 to 4096 [ 967.518762][ T42] usb 5-1: USB disconnect, device number 15 [ 967.758890][T13170] ntfs3(loop7): ino=21, "cpuacct.stat" mmap(write) compressed not supported [ 968.649599][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2749'. [ 968.722379][T13197] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2749'. [ 968.734955][T13197] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2749'. [ 968.933183][T13202] loop4: detected capacity change from 0 to 1024 [ 969.121847][T13202] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 969.128855][T13202] hfsplus: xattr searching failed [ 969.715842][T13213] loop7: detected capacity change from 0 to 1024 [ 970.765088][T13225] RDS: rds_bind could not find a transport for 4:80::, load rds_tcp or rds_rdma? [ 970.895083][T13229] loop5: detected capacity change from 0 to 256 [ 970.955895][T13231] loop7: detected capacity change from 0 to 64 [ 971.076273][T13229] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 972.423358][T13248] [U] [ 972.961337][T13259] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 974.672987][T13280] loop4: detected capacity change from 0 to 4096 [ 974.762423][T13280] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 976.185347][T13308] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 976.248453][T13309] loop5: detected capacity change from 0 to 64 [ 977.774135][T13331] loop8: detected capacity change from 0 to 128 [ 977.950900][T13338] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2800'. [ 977.962433][T13337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2800'. [ 978.013937][T13325] loop4: detected capacity change from 0 to 4096 [ 978.147426][T13325] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 978.158836][T13325] UDF-fs: Scanning with blocksize 512 failed [ 978.316639][T13325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 978.653990][T13342] loop5: detected capacity change from 0 to 256 [ 978.781162][T13344] program syz.7.2801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 978.984459][T13346] loop2: detected capacity change from 0 to 256 [ 979.023789][T13346] exfat: Deprecated parameter 'utf8' [ 979.033140][T13346] exfat: Deprecated parameter 'utf8' [ 979.171998][T13346] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 979.856174][T13351] loop8: detected capacity change from 0 to 2048 [ 980.041611][T13362] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 980.394222][T13362] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 980.406333][T13362] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 980.492078][T13362] Remounting filesystem read-only [ 980.887949][T13357] loop5: detected capacity change from 0 to 8192 [ 981.500670][ T30] audit: type=1326 audit(1751537587.364:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.4.2814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 981.528693][ T30] audit: type=1326 audit(1751537587.364:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.4.2814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 981.550922][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.559518][ T30] audit: type=1326 audit(1751537587.374:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.4.2814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 981.582658][ T30] audit: type=1326 audit(1751537587.374:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.4.2814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 981.605382][ T30] audit: type=1326 audit(1751537587.374:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.4.2814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 982.202292][T13383] loop7: detected capacity change from 0 to 512 [ 982.236581][T13383] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 982.335494][T13383] EXT4-fs (loop7): orphan cleanup on readonly fs [ 982.459249][T13383] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.2818: Block bitmap for bg 0 marked uninitialized [ 982.553004][T13383] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 982.608257][T13383] EXT4-fs (loop7): 1 orphan inode deleted [ 982.616690][T13383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 982.871087][T13383] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 982.963903][T13383] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 982.976864][T13395] loop5: detected capacity change from 0 to 1024 [ 983.003679][T13397] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.2818: Block bitmap for bg 0 marked uninitialized [ 983.085482][T13395] hfsplus: failed to load root directory [ 983.089915][T13397] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.2818: Block bitmap for bg 0 marked uninitialized [ 983.180197][T13397] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.2818: Block bitmap for bg 0 marked uninitialized [ 983.263368][T13397] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.2818: Block bitmap for bg 0 marked uninitialized [ 983.302406][T13397] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.2818: Block bitmap for bg 0 marked uninitialized [ 983.363649][T13397] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.2818: Block bitmap for bg 0 marked uninitialized [ 983.398826][ T42] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 983.502298][T12534] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 983.599716][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2823'. [ 983.632169][ T42] usb 6-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 983.643062][ T42] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 983.655386][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 983.753160][T12534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.754885][T11951] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.764552][T12534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.764700][T12534] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 983.808142][T12534] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 983.817532][T12534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.921431][ T42] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 983.931209][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.939782][ T42] usb 6-1: Product: syz [ 983.944302][ T42] usb 6-1: Manufacturer: syz [ 983.952428][ T42] usb 6-1: SerialNumber: syz [ 984.060749][ T42] usb 6-1: config 0 descriptor?? [ 984.092384][T12534] usb 5-1: config 0 descriptor?? [ 984.299848][ T42] usb 6-1: Found UVC 34.00 device syz (8086:0b5b) [ 984.306905][ T42] usb 6-1: No valid video chain found. [ 984.375146][ T42] usb 6-1: USB disconnect, device number 16 [ 984.612766][T12534] razer 0003:1532:011B.0028: unknown main item tag 0x0 [ 984.643971][T12534] razer 0003:1532:011B.0028: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.4-1/input0 [ 984.791607][T12535] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 984.851722][ T11] usb 5-1: USB disconnect, device number 16 [ 985.013617][T12535] usb 8-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 985.023317][T12535] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.074681][T12535] usb 8-1: config 0 descriptor?? [ 985.588961][T12535] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 985.603968][T12535] asix 8-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 985.615651][T12535] asix 8-1:0.0: probe with driver asix failed with error -71 [ 985.815850][T12535] usb 8-1: USB disconnect, device number 2 [ 985.974166][T13427] loop2: detected capacity change from 0 to 1024 [ 985.999027][T13427] EXT4-fs: inline encryption not supported [ 986.042094][T13427] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 986.142879][T13427] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.2831: lblock 1 mapped to illegal pblock 1 (length 1) [ 986.208506][T13427] EXT4-fs (loop2): Remounting filesystem read-only [ 986.215613][T13427] Quota error (device loop2): write_blk: dquota write failed [ 986.223737][T13427] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 986.237343][T13427] EXT4-fs (loop2): 1 orphan inode deleted [ 986.246546][T13427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.357610][T13433] loop4: detected capacity change from 0 to 1024 [ 986.821214][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.995049][ T4112] hfsplus: b-tree write err: -5, ino 4 [ 987.081650][T13443] loop7: detected capacity change from 0 to 8 [ 987.147241][T13443] SQUASHFS error: lzo decompression failed, data probably corrupt [ 987.155790][T13443] SQUASHFS error: Failed to read block 0x62b: -5 [ 987.162709][T13443] SQUASHFS error: Unable to read metadata cache entry [629] [ 987.173526][T13443] SQUASHFS error: Unable to read inode 0x11f [ 987.383565][T13447] loop2: detected capacity change from 0 to 8 [ 987.541317][T13450] loop4: detected capacity change from 0 to 64 [ 987.721074][T13448] loop5: detected capacity change from 0 to 2048 [ 987.736747][T13448] EXT4-fs: inline encryption not supported [ 987.820340][T13448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.090595][T13448] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #12: block 9: comm syz.5.2838: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 988.148910][T13448] EXT4-fs (loop5): Remounting filesystem read-only [ 988.585218][ T6430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.301679][T13467] macvtap1: entered promiscuous mode [ 989.307349][T13467] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 989.316198][T13467] macvtap1: entered allmulticast mode [ 989.322604][T13467] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 990.058806][ T30] audit: type=1326 audit(1751537595.904:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.2850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 990.084994][ T30] audit: type=1326 audit(1751537595.904:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.2850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 990.305182][ T30] audit: type=1326 audit(1751537595.994:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.2850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 990.331162][ T30] audit: type=1326 audit(1751537595.994:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.2850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 990.354169][ T30] audit: type=1326 audit(1751537595.994:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.2850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 990.379732][ T30] audit: type=1326 audit(1751537596.004:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.2850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=294 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 990.403175][ T30] audit: type=1326 audit(1751537596.024:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.2850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 990.428778][ T30] audit: type=1326 audit(1751537596.024:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.2.2850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 990.547171][T13484] loop4: detected capacity change from 0 to 256 [ 990.997153][T13490] loop7: detected capacity change from 0 to 256 [ 991.017239][T13492] loop2: detected capacity change from 0 to 22 [ 991.075080][T13492] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 991.157049][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2857'. [ 991.166826][T13494] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2857'. [ 991.231903][ T11] IPVS: starting estimator thread 0... [ 991.238274][T13497] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 991.338663][T13498] IPVS: using max 192 ests per chain, 9600 per kthread [ 992.759988][T13520] loop7: detected capacity change from 0 to 256 [ 993.121703][T13520] FAT-fs (loop7): Directory bread(block 64) failed [ 993.128737][T13520] FAT-fs (loop7): Directory bread(block 65) failed [ 993.135929][T13520] FAT-fs (loop7): Directory bread(block 66) failed [ 993.143043][T13520] FAT-fs (loop7): Directory bread(block 67) failed [ 993.150282][T13520] FAT-fs (loop7): Directory bread(block 68) failed [ 993.157078][T13520] FAT-fs (loop7): Directory bread(block 69) failed [ 993.164205][T13520] FAT-fs (loop7): Directory bread(block 70) failed [ 993.171217][T13520] FAT-fs (loop7): Directory bread(block 71) failed [ 993.178413][T13520] FAT-fs (loop7): Directory bread(block 72) failed [ 993.185378][T13520] FAT-fs (loop7): Directory bread(block 73) failed [ 994.410512][T13541] loop4: detected capacity change from 0 to 1024 [ 994.441997][T13541] EXT4-fs: Ignoring removed orlov option [ 994.467128][T13541] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 994.599234][T13541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.615137][T13546] loop2: detected capacity change from 0 to 128 [ 994.671339][T13546] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 994.758317][T13546] ext4 filesystem being mounted at /602/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 994.793888][T13541] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.2877: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 994.988645][T13549] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2879'. [ 994.998571][T13549] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2879'. [ 995.008061][T13549] tipc: Invalid UDP bearer configuration [ 995.008302][T13549] tipc: Enabling of bearer rejected, failed to enable media [ 995.015600][T13553] loop7: detected capacity change from 0 to 164 [ 995.100732][T13553] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 995.226645][ T5796] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 995.279990][T13555] loop5: detected capacity change from 0 to 512 [ 995.374065][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.501930][T13555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.515415][T13555] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 995.608092][T13555] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2882: corrupted xattr block 33: invalid header [ 995.646224][T13555] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2882: corrupted xattr block 33: invalid header [ 995.707300][T13555] fscrypt (loop5, inode 15): Error -117 getting encryption context [ 996.074566][ T6430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.941670][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.112001][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.554032][T13585] ip6tnl1: entered allmulticast mode [ 999.199467][T13596] loop2: detected capacity change from 0 to 4096 [ 999.258061][T13596] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 999.408178][ C0] vkms_vblank_simulate: vblank timer overrun [ 999.599531][ C0] vkms_vblank_simulate: vblank timer overrun [ 999.806738][T13596] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 999.819403][ C0] vkms_vblank_simulate: vblank timer overrun [ 999.965326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.014969][T13609] program syz.8.2904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1000.042422][T13596] ntfs3(loop2): ino=1e, mi_enum_attr [ 1000.048344][T13596] ntfs3(loop2): ino=1e, mi_enum_attr [ 1000.307643][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.578652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.728810][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.977126][ C0] vkms_vblank_simulate: vblank timer overrun [ 1001.619861][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2911'. [ 1003.071220][T12534] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1003.320761][T12534] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1003.330560][T12534] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 1003.342024][T12534] usb 5-1: Product: syz [ 1003.346479][T12534] usb 5-1: Manufacturer: syz [ 1003.351603][T12534] usb 5-1: SerialNumber: syz [ 1003.456822][T12534] usb 5-1: config 0 descriptor?? [ 1004.114598][T12534] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1004.128998][T12534] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1004.215919][T12534] usb 5-1: USB disconnect, device number 17 [ 1004.421786][T13662] loop7: detected capacity change from 0 to 1024 [ 1004.471576][T13662] EXT4-fs: inline encryption not supported [ 1004.477974][T13662] EXT4-fs: Ignoring removed i_version option [ 1004.509220][T13662] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1004.709772][T13662] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.2922: lblock 2 mapped to illegal pblock 2 (length 1) [ 1004.804192][T13662] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1004.813251][T13662] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.2922: lblock 0 mapped to illegal pblock 48 (length 1) [ 1004.882486][T13662] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1004.892002][T13662] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2922: Failed to acquire dquot type 0 [ 1004.930418][T13662] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 1004.995664][T13662] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.2922: mark_inode_dirty error [ 1005.015280][T13655] loop8: detected capacity change from 0 to 8192 [ 1005.024315][T13662] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1005.035467][T13662] EXT4-fs (loop7): 1 orphan inode deleted [ 1005.046981][T13662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1005.060337][ T35] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 1005.061167][ T35] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1005.061345][ T35] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 1005.132084][T13655] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1005.423075][T13655] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1005.448628][T13655] ntfs3(loop8): Failed to load $Extend (-2). [ 1005.455075][T13655] ntfs3(loop8): Failed to initialize $Extend. [ 1005.524332][T13672] loop2: detected capacity change from 0 to 4096 [ 1005.643064][T13677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2928'. [ 1005.678728][T13678] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1005.725705][T13677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2928'. [ 1005.785730][T11951] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.822829][T13655] syz.8.2920 (13655) used greatest stack depth: 4720 bytes left [ 1005.850759][ T30] audit: type=1800 audit(1751537611.714:134): pid=13672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2926" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 1005.865307][T11951] EXT4-fs error (device loop7): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1005.968148][T11951] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 1005.978896][ T30] audit: type=1804 audit(1751537611.764:135): pid=13672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2926" name="/newroot/611/file0/file3" dev="loop2" ino=16 res=1 errno=0 [ 1006.043667][T11951] EXT4-fs error (device loop7): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 1006.193276][T13672] syz.2.2926 (13672) used greatest stack depth: 4184 bytes left [ 1006.633817][T13687] loop7: detected capacity change from 0 to 8 [ 1008.003077][T13708] loop5: detected capacity change from 0 to 512 [ 1008.127276][T13708] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1008.169121][T13708] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1008.239787][T13708] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1008.251712][T13708] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1008.295941][T13708] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1008.368273][T13708] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2938: bg 0: block 40: padding at end of block bitmap is not set [ 1008.389995][T13712] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.2939'. [ 1008.413414][T13708] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1008.463468][T13708] EXT4-fs (loop5): 1 truncate cleaned up [ 1008.472094][T13708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1008.698735][T13708] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.2938: bad symlink. [ 1008.771510][T13720] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.2938: bad symlink. [ 1009.106909][ T6430] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.661762][T13731] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2947'. [ 1010.463108][T13743] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2950'. [ 1012.508680][T13776] loop5: detected capacity change from 0 to 128 [ 1012.572357][T13776] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1012.734317][T13776] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1012.788166][T12534] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1012.961146][T12534] usb 5-1: Using ep0 maxpacket: 8 [ 1013.010117][T12534] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1013.032551][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2966'. [ 1013.099814][T12534] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1013.215246][T12534] usb 5-1: string descriptor 0 read error: -22 [ 1013.225715][T12534] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1013.247142][T12534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.322111][T12534] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1013.383651][T12534] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1013.400850][T12534] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1013.408670][T12534] usb 5-1: media controller created [ 1013.561343][T12534] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1013.744347][T12534] zl10353_read_register: readreg error (reg=127, ret==0) [ 1014.351890][T12534] usb 5-1: USB disconnect, device number 18 [ 1015.652696][T13814] loop2: detected capacity change from 0 to 1024 [ 1015.878772][T13814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.028773][T13826] loop8: detected capacity change from 0 to 512 [ 1016.131563][T13814] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1016.133982][T13826] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1016.209600][T13826] EXT4-fs (loop8): 1 truncate cleaned up [ 1016.218196][T13826] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.333736][T13828] loop5: detected capacity change from 0 to 1024 [ 1016.646502][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.069539][ T9280] hfsplus: b-tree write err: -5, ino 4 [ 1017.237337][T12821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.418720][T13844] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2984'. [ 1017.839546][T13849] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2987'. [ 1017.849297][T13849] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1018.159387][T13856] netlink: 822 bytes leftover after parsing attributes in process `syz.2.2990'. [ 1018.184300][ T42] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1018.391296][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.482908][ T42] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1018.492821][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.504133][ T42] usb 5-1: Product: syz [ 1018.508887][ T42] usb 5-1: Manufacturer: syz [ 1018.513765][ T42] usb 5-1: SerialNumber: syz [ 1018.594191][ T42] usb 5-1: config 0 descriptor?? [ 1018.662750][ T42] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1018.675908][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 1018.773138][ T42] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1018.816949][ T42] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1018.832419][ T42] usb 5-1: media controller created [ 1018.902346][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1018.995120][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 1019.001665][ T42] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1019.110230][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 1019.175798][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 1019.183475][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 1019.237129][ T42] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1019.323947][ T42] usb 5-1: USB disconnect, device number 19 [ 1019.540592][ T42] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1019.949202][ T5431] ===================================================== [ 1019.956566][ T5431] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xf0e/0x33f0 [ 1019.964377][ T5431] _copy_to_iter+0xf0e/0x33f0 [ 1019.969411][ T5431] __skb_datagram_iter+0x196/0x12c0 [ 1019.974934][ T5431] skb_copy_datagram_iter+0x5b/0x1e0 [ 1019.981546][ T5431] netlink_recvmsg+0x4bb/0xfe0 [ 1019.986630][ T5431] sock_recvmsg+0x2dc/0x390 [ 1019.992952][ T5431] ____sys_recvmsg+0x193/0x610 [ 1019.999178][ T5431] ___sys_recvmsg+0x20b/0x850 [ 1020.004083][ T5431] __x64_sys_recvmsg+0x20e/0x3d0 [ 1020.009465][ T5431] x64_sys_call+0x11ff/0x3db0 [ 1020.014525][ T5431] do_syscall_64+0xd9/0x210 [ 1020.019346][ T5431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.025486][ T5431] [ 1020.033744][ T5431] Uninit was stored to memory at: [ 1020.041075][ T5431] pskb_expand_head+0x310/0x1610 [ 1020.046243][ T5431] netlink_trim+0x496/0x500 [ 1020.051299][ T5431] netlink_broadcast_filtered+0x80/0x2370 [ 1020.057260][ T5431] nlmsg_notify+0x15b/0x2f0 [ 1020.062113][ T5431] rtnl_notify+0xba/0x100 [ 1020.066767][ T5431] wireless_nlevent_process+0xfe/0x290 [ 1020.072583][ T5431] process_scheduled_works+0xb8e/0x1d80 [ 1020.081774][ T5431] worker_thread+0xedf/0x1590 [ 1020.086729][ T5431] kthread+0xd5c/0xf00 [ 1020.092597][ T5431] ret_from_fork+0x1e0/0x310 [ 1020.097478][ T5431] ret_from_fork_asm+0x1a/0x30 [ 1020.102645][ T5431] [ 1020.105187][ T5431] Uninit was stored to memory at: [ 1020.111062][ T5431] wireless_send_event+0x67f/0x1530 [ 1020.116590][ T5431] ioctl_standard_iw_point+0x12b0/0x13f0 [ 1020.122629][ T5431] compat_standard_call+0x188/0x4c0 [ 1020.134282][ T5431] wext_ioctl_dispatch+0x18f/0x7a0 [ 1020.141705][ T5431] compat_wext_handle_ioctl+0x1a1/0x300 [ 1020.147601][ T5431] compat_sock_ioctl+0x20c/0xff0 [ 1020.152966][ T5431] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1020.158884][ T5431] ia32_sys_call+0x2d07/0x42c0 [ 1020.163937][ T5431] __do_fast_syscall_32+0xb0/0x150 [ 1020.169488][ T5431] do_fast_syscall_32+0x38/0x80 [ 1020.174571][ T5431] do_SYSENTER_32+0x1f/0x30 [ 1020.179496][ T5431] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1020.186155][ T5431] [ 1020.188775][ T5431] Local variable iwp created at: [ 1020.193854][ T5431] compat_standard_call+0x4a/0x4c0 [ 1020.199516][ T5431] wext_ioctl_dispatch+0x18f/0x7a0 [ 1020.204892][ T5431] [ 1020.207344][ T5431] Bytes 60-63 of 64 are uninitialized [ 1020.213063][ T5431] Memory access of size 64 starts at ffff888058484dc0 [ 1020.220136][ T5431] Data copied to user address 00007ffcf7e15500 [ 1020.226546][ T5431] [ 1020.229121][ T5431] CPU: 0 UID: 101 PID: 5431 Comm: dhcpcd Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 1020.247993][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1020.260681][ T5431] ===================================================== [ 1020.267948][ T5431] Disabling lock debugging due to kernel taint [ 1020.274269][ T5431] Kernel panic - not syncing: kmsan.panic set ... [ 1020.280906][ T5431] CPU: 0 UID: 101 PID: 5431 Comm: dhcpcd Tainted: G B 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 1020.294649][ T5431] Tainted: [B]=BAD_PAGE [ 1020.298957][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1020.309208][ T5431] Call Trace: [ 1020.312655][ T5431] [ 1020.315743][ T5431] __dump_stack+0x26/0x30 [ 1020.320323][ T5431] dump_stack_lvl+0x53/0x270 [ 1020.325163][ T5431] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1020.331263][ T5431] dump_stack+0x1e/0x25 [ 1020.335695][ T5431] panic+0x4bd/0xd50 [ 1020.339908][ T5431] kmsan_report+0x31c/0x320 [ 1020.344689][ T5431] ? kmsan_get_metadata+0xfb/0x160 [ 1020.350046][ T5431] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1020.356261][ T5431] ? kmsan_copy_to_user+0xf1/0x190 [ 1020.361609][ T5431] ? _copy_to_iter+0xf0e/0x33f0 [ 1020.366669][ T5431] ? __skb_datagram_iter+0x196/0x12c0 [ 1020.372243][ T5431] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 1020.377905][ T5431] ? netlink_recvmsg+0x4bb/0xfe0 [ 1020.383043][ T5431] ? sock_recvmsg+0x2dc/0x390 [ 1020.387940][ T5431] ? ____sys_recvmsg+0x193/0x610 [ 1020.393090][ T5431] ? ___sys_recvmsg+0x20b/0x850 [ 1020.398144][ T5431] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 1020.403466][ T5431] ? x64_sys_call+0x11ff/0x3db0 [ 1020.408569][ T5431] ? do_syscall_64+0xd9/0x210 [ 1020.413444][ T5431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.419725][ T5431] ? _raw_spin_lock_irqsave+0x31/0xc0 [ 1020.425354][ T5431] ? filter_irq_stacks+0x49/0x190 [ 1020.430595][ T5431] ? stack_depot_save_flags+0x35/0x7b0 [ 1020.436267][ T5431] ? kmsan_get_metadata+0xfb/0x160 [ 1020.441620][ T5431] ? kmsan_get_metadata+0xfb/0x160 [ 1020.446984][ T5431] ? kmsan_get_metadata+0xfb/0x160 [ 1020.452329][ T5431] ? kmsan_get_metadata+0xfb/0x160 [ 1020.457679][ T5431] ? kmsan_get_metadata+0xfb/0x160 [ 1020.463125][ T5431] ? remove_wait_queue+0x36/0x270 [ 1020.468383][ T5431] ? remove_wait_queue+0x36/0x270 [ 1020.473648][ T5431] ? __msan_warning+0x1b/0x30 [ 1020.478555][ T5431] ? filter_irq_stacks+0x12c/0x190 [ 1020.483885][ T5431] ? kmsan_get_metadata+0xfb/0x160 [ 1020.489245][ T5431] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1020.495327][ T5431] kmsan_internal_check_memory+0x1e1/0x230 [ 1020.501396][ T5431] kmsan_copy_to_user+0xf1/0x190 [ 1020.506570][ T5431] _copy_to_iter+0xf0e/0x33f0 [ 1020.511447][ T5431] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1020.518020][ T5431] ? kmsan_get_metadata+0xfb/0x160 [ 1020.523375][ T5431] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1020.529442][ T5431] ? kmsan_get_metadata+0xfb/0x160 [ 1020.534797][ T5431] ? __pfx_kmsan_internal_set_shadow_origin+0x1/0x10 [ 1020.541722][ T5431] ? kmsan_get_metadata+0xfb/0x160 [ 1020.547096][ T5431] __skb_datagram_iter+0x196/0x12c0 [ 1020.552531][ T5431] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1020.558414][ T5431] skb_copy_datagram_iter+0x5b/0x1e0 [ 1020.563900][ T5431] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1020.569981][ T5431] netlink_recvmsg+0x4bb/0xfe0 [ 1020.575007][ T5431] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1020.580509][ T5431] sock_recvmsg+0x2dc/0x390 [ 1020.585263][ T5431] ____sys_recvmsg+0x193/0x610 [ 1020.590245][ T5431] ? setup_fault_attr+0x2f0/0x300 [ 1020.595483][ T5431] ? stack_depot_save_flags+0x35/0x7b0 [ 1020.601206][ T5431] ___sys_recvmsg+0x20b/0x850 [ 1020.606128][ T5431] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1020.612189][ T5431] ? kmsan_get_metadata+0xfb/0x160 [ 1020.617544][ T5431] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1020.623643][ T5431] __x64_sys_recvmsg+0x20e/0x3d0 [ 1020.628816][ T5431] ? kmsan_get_metadata+0xfb/0x160 [ 1020.634212][ T5431] x64_sys_call+0x11ff/0x3db0 [ 1020.639155][ T5431] do_syscall_64+0xd9/0x210 [ 1020.643858][ T5431] ? clear_bhb_loop+0x40/0x90 [ 1020.648748][ T5431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.654855][ T5431] RIP: 0033:0x7f113496f407 [ 1020.659534][ T5431] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1020.679431][ T5431] RSP: 002b:00007ffcf7e153f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 1020.688080][ T5431] RAX: ffffffffffffffda RBX: 00007f11348e5740 RCX: 00007f113496f407 [ 1020.696247][ T5431] RDX: 0000000000000040 RSI: 00007ffcf7e15470 RDI: 0000000000000009 [ 1020.704390][ T5431] RBP: 000055e706861aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.712524][ T5431] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 1020.720676][ T5431] R13: 00007ffcf7e195d0 R14: 0000000000000000 R15: 00007ffcf7e195c0 [ 1020.728874][ T5431] [ 1020.732417][ T5431] Kernel Offset: disabled [ 1020.736840][ T5431] Rebooting in 86400 seconds..