last executing test programs: 12m7.751809903s ago: executing program 2 (id=443): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x7, @pix_mp={0x8, 0x400c000, 0x3656f53d, 0x0, 0x6, [{0x1, 0xe037}, {0x6}, {0x2, 0x6}, {0x101, 0x7fff}, {0xffffef80, 0x10000}, {0x2, 0x100003}, {0x6, 0xfff}, {0x9, 0x3ff}], 0xca, 0x1, 0x6, 0x3}}) 12m7.072741219s ago: executing program 2 (id=444): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 12m4.366805323s ago: executing program 2 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x490, 0x7}]}, 0xc, 0x2) 12m3.487091292s ago: executing program 2 (id=462): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x818884, &(0x7f0000000480)=ANY=[@ANYBLOB='keep_last_dots,sys_tz,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',errors=continue,umask=00000000000000000000013,namecase=1,discard,time_offset=0x0000000000000008,discard,discard,iocharset=maccenteuro,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x81, 0x1534, &(0x7f0000000e40)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2145c89, 0x0) 12m2.435304883s ago: executing program 2 (id=469): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x80000580, 0x800005b0, 0x800005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000"]}, 0xe0) 12m1.295978907s ago: executing program 2 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x23, "2d720787b641423f000000a6aa0825471829a0bc32e5cde916af6df149333e29680c00"}}) 11m59.437429602s ago: executing program 32 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x23, "2d720787b641423f000000a6aa0825471829a0bc32e5cde916af6df149333e29680c00"}}) 1m53.80625158s ago: executing program 1 (id=3398): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0xfffc, 0x1000}, 0x4) 1m52.975987415s ago: executing program 1 (id=3403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1m52.200122202s ago: executing program 1 (id=3406): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 1m51.445695764s ago: executing program 1 (id=3409): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x448, &(0x7f0000000780)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x18) 1m49.838433087s ago: executing program 1 (id=3424): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)={0x14, r1, 0x401, 0x70bd22, 0x10400, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m49.021772904s ago: executing program 1 (id=3418): r0 = socket$nl_route(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300231a05003c0012800b00010069703667726500002c00028014000612fe8000000000000000000000000000bb14000700ff"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1m46.330970595s ago: executing program 33 (id=3418): r0 = socket$nl_route(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300231a05003c0012800b00010069703667726500002c00028014000612fe8000000000000000000000000000bb14000700ff"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 5.442034023s ago: executing program 6 (id=3866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000001c0)=0x9, 0x4) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 5.092072626s ago: executing program 0 (id=3869): r0 = syz_io_uring_setup(0xec4, &(0x7f00000001c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0xa9e7, 0x3, &(0x7f0000000040)={[0xfffffffffffffffa]}, 0x8) 5.005475885s ago: executing program 4 (id=3870): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000e80)={[{@debug}, {@lazytime}, {@noblock_validity}, {@delalloc}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x1, 0x7b5, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000480)={0x47, 0xffffffffffffffff, 0x4, 0x9}) 4.749191896s ago: executing program 5 (id=3871): r0 = socket(0x1, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000440)=[{0x4d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x4, 0x9}, {0x6, 0xff, 0x0, 0x7fff0000}]}) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip6erspan0\x00'}) 4.560241641s ago: executing program 6 (id=3873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b000000018000100000000000000000002000000000000090000000006001500040000008c0016808800088084000180"], 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 4.201648446s ago: executing program 0 (id=3874): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0x20000080) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x21) 3.916123419s ago: executing program 3 (id=3875): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) stat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)) 3.713938732s ago: executing program 6 (id=3876): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x54) 3.629191843s ago: executing program 5 (id=3877): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x80047437, &(0x7f0000020780)) 3.339394154s ago: executing program 4 (id=3878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.144740679s ago: executing program 3 (id=3879): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xffffffff}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 3.009814849s ago: executing program 0 (id=3880): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x8, 0x5, 0x3040, 0x5, 'syz0\x00', 0x4000040}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040)) 2.950017005s ago: executing program 5 (id=3881): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x80000001, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000004c0), &(0x7f0000000500)=0x4) 2.623752709s ago: executing program 6 (id=3882): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x40000}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) 2.382318544s ago: executing program 4 (id=3883): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 2.277370521s ago: executing program 3 (id=3884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 2.193986634s ago: executing program 5 (id=3885): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x1007b, 0x7fa962bfffff, 0x13012, r0, 0x0) 2.09614851s ago: executing program 0 (id=3886): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000004, 0x4004012, r0, 0x4000000) ftruncate(r0, 0x200000) 1.96430274s ago: executing program 6 (id=3887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x80000001, 0x5, 0x0, 0x100, 0x25, 0x21100e6, r1}) 1.620685959s ago: executing program 4 (id=3888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x40) 1.435277739s ago: executing program 3 (id=3889): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x2024, 0x1920}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0000c1}, 0x48814) 1.295826895s ago: executing program 5 (id=3890): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0x20000080) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x21) 1.283688383s ago: executing program 0 (id=3900): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7ffb, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xa74, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xf, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.195324873s ago: executing program 6 (id=3891): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0), 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0xb, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000080)='./file2\x00', 0x1ffa) 878.803104ms ago: executing program 4 (id=3892): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) 773.236434ms ago: executing program 3 (id=3893): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 609.701353ms ago: executing program 0 (id=3894): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf906, 0x800, 0x0, 0x308}, &(0x7f0000000080), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000008c0)={0xa, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000800)=[0x2, 0x4]}, 0x20) 475.953572ms ago: executing program 5 (id=3895): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), 0x64}, 0x20) 13.678585ms ago: executing program 4 (id=3896): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000500)=ANY=[], 0x1, 0x1537, &(0x7f0000001ec0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 3 (id=3897): r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xb, &(0x7f0000000000)={0x4, 0xfffffffe, 0x4}) kernel console output (not intermixed with test programs): ode @ nid 36. [ 711.322263][T11452] hfsplus: bad catalog entry type [ 711.368294][T11455] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2460'. [ 711.696382][ T6377] hfsplus: b-tree write err: -5, ino 25 [ 711.702457][ T6377] hfsplus: b-tree write err: -5, ino 4 [ 711.718112][ T6377] hfsplus: b-tree write err: -5, ino 2 [ 712.052800][T11459] netlink: 316 bytes leftover after parsing attributes in process `syz.3.2462'. [ 712.192913][T11462] loop5: detected capacity change from 0 to 256 [ 712.514969][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 712.737110][ T10] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 712.796318][ T10] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 712.830801][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.872785][ T10] usb 5-1: Product: syz [ 712.908384][ T10] usb 5-1: Manufacturer: syz [ 712.913265][ T10] usb 5-1: SerialNumber: syz [ 713.249755][T11469] [U]  [ 713.252774][T11469] [U] K{ [ 713.259025][ T10] usb 5-1: selecting invalid altsetting 1 [ 713.345748][T11469] [U] t 1ŠFfˊ`GJgo/mC [ 713.375597][T11469] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 713.435611][T11469] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 713.468917][ T10] LME2510(C): Firmware Status: 06 03 fc 60 37 01 [ 713.469391][ T10] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 713.533935][T11469] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 713.655634][T11469] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 713.698719][ T5823] usb 5-1: USB disconnect, device number 10 [ 713.771574][T11469] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 713.835526][T11474] loop3: detected capacity change from 0 to 64 [ 713.885337][T11469] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 713.920338][T11474] minix: block size(59136) > page size(4096) not supported by filesystem [ 713.994065][T11469] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/< rejected, failed to enable media [ 748.628912][T11865] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2635'. [ 748.655008][T11865] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2635'. [ 749.924095][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2642'. [ 749.970601][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'. [ 750.935466][T11894] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2650'. [ 750.964067][ T6377] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.967417][T11889] Zero length message leads to an empty skb [ 751.008841][ T6377] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.039172][ T6393] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.158170][ T6377] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.618701][T11896] loop5: detected capacity change from 0 to 128 [ 753.625276][ T10] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 753.670135][ T10] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 753.696913][ T10] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 753.745704][ T10] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 753.772111][ T10] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 753.810512][ T10] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 753.844897][ T10] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 753.858419][ T10] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 753.875336][ T10] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 753.884102][ T10] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 753.968371][ T10] hid-generic 00A0:0006:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 754.713326][T11928] fido_id[11928]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 755.010398][T11935] netlink: 'syz.5.2670': attribute type 8 has an invalid length. [ 755.034860][T11935] netlink: 5096 bytes leftover after parsing attributes in process `syz.5.2670'. [ 755.268351][T11938] loop3: detected capacity change from 0 to 512 [ 755.550705][T11938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.629879][T11938] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.030646][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.220853][T11948] loop1: detected capacity change from 0 to 1024 [ 756.265337][T10887] Bluetooth: hci0: command 0x0401 tx timeout [ 756.271730][ T5772] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 756.428022][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 756.613619][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 756.650502][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.737411][ T10] usb 5-1: config 0 descriptor?? [ 756.790281][ T10] cp210x 5-1:0.0: cp210x converter detected [ 757.021345][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.028948][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.521818][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 757.552883][ T10] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 757.659005][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 757.720066][ T10] usb 5-1: USB disconnect, device number 11 [ 757.886835][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 757.960658][ T10] cp210x 5-1:0.0: device disconnected [ 758.244112][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2681'. [ 759.012127][T11966] loop4: detected capacity change from 0 to 512 [ 759.079470][T11966] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 759.156259][T11971] loop5: detected capacity change from 0 to 128 [ 759.260496][T11966] EXT4-fs (loop4): 1 truncate cleaned up [ 759.286428][T11971] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 759.307907][T11966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.374165][T11971] hpfs: filesystem error: improperly stopped [ 759.380724][T11971] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 759.434816][T11971] hpfs: You really don't want any checks? You are crazy... [ 759.442684][T11971] hpfs: hpfs_map_sector(): read error [ 759.534768][T11971] hpfs: code page support is disabled [ 759.540704][T11971] hpfs: hpfs_map_4sectors(): unaligned read [ 759.582051][T11971] hpfs: hpfs_map_4sectors(): unaligned read [ 759.668013][T11971] hpfs: filesystem error: unable to find root dir [ 759.852198][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.121182][T11979] loop3: detected capacity change from 0 to 512 [ 760.196368][T11979] EXT4-fs: Ignoring removed nobh option [ 760.370858][T11979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.384932][T11979] ext4 filesystem being mounted at /556/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 760.807062][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.842207][T12002] loop0: detected capacity change from 0 to 164 [ 761.913021][T12002] ISOFS: unable to read i-node block [ 761.964859][T12002] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 762.590479][T12009] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2701'. [ 763.087831][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 763.198725][T12014] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2702'. [ 763.426224][T12016] loop1: detected capacity change from 0 to 128 [ 763.538850][T12016] FAT-fs (loop1): Directory bread(block 524322) failed [ 763.612342][T12016] FAT-fs (loop1): Directory bread(block 524323) failed [ 763.662771][T12016] FAT-fs (loop1): Directory bread(block 524324) failed [ 763.697566][T12016] FAT-fs (loop1): Directory bread(block 524325) failed [ 763.764772][T12016] FAT-fs (loop1): Directory bread(block 524326) failed [ 763.824714][T12016] FAT-fs (loop1): Directory bread(block 524327) failed [ 763.831869][T12016] FAT-fs (loop1): Directory bread(block 524328) failed [ 763.946416][T12016] FAT-fs (loop1): Directory bread(block 524329) failed [ 764.097896][T12025] FAT-fs (loop1): Directory bread(block 524322) failed [ 764.175896][T12025] FAT-fs (loop1): Directory bread(block 524323) failed [ 766.282304][T12052] loop1: detected capacity change from 0 to 128 [ 767.921180][T12067] team_slave_0: entered promiscuous mode [ 767.927446][T12067] team_slave_1: entered promiscuous mode [ 767.942144][T12067] macsec1: entered promiscuous mode [ 768.014840][T12067] team0: entered promiscuous mode [ 768.023192][T12067] macsec1: entered allmulticast mode [ 768.046022][T12067] team0: entered allmulticast mode [ 768.077381][T12067] team_slave_0: entered allmulticast mode [ 768.115726][T12067] team_slave_1: entered allmulticast mode [ 768.202539][T12067] team0: Device macsec1 is already an upper device of the team interface [ 768.302203][T12067] team0: left allmulticast mode [ 768.389494][T12067] team_slave_0: left allmulticast mode [ 768.438242][T12067] team_slave_1: left allmulticast mode [ 768.496647][T12067] team0: left promiscuous mode [ 768.532673][T12067] team_slave_0: left promiscuous mode [ 768.538795][T12067] team_slave_1: left promiscuous mode [ 768.733829][T12069] 8021q: VLANs not supported on lo [ 769.827778][T12089] loop5: detected capacity change from 0 to 512 [ 769.861285][T12089] EXT4-fs: Ignoring removed nobh option [ 770.073031][T12089] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 770.126104][T12089] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2737: invalid indirect mapped block 256 (level 1) [ 770.140458][T12089] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 770.141863][T12089] EXT4-fs (loop5): Remounting filesystem read-only [ 770.151589][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 770.151697][ C1] EXT4-fs (loop5): initial error at time 1772511347: ext4_free_branches:1023: inode 13 [ 770.151872][ C1] EXT4-fs (loop5): last error at time 1772511347: ext4_free_branches:1023: inode 13 [ 770.296457][T12089] EXT4-fs (loop5): 1 truncate cleaned up [ 770.356685][T12089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.461330][T12096] loop3: detected capacity change from 0 to 1024 [ 770.612515][T12096] hfsplus: invalid length 65281 has been corrected to 255 [ 770.841635][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.495584][T12106] tipc: Cannot configure node identity twice [ 773.103118][T12120] loop1: detected capacity change from 0 to 2048 [ 773.153272][T12120] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 773.303672][T12127] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 773.407511][T12129] loop0: detected capacity change from 0 to 65 [ 773.486611][T12129] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 773.535960][T12129] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 775.624934][ T5823] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 775.824989][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.874939][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.946083][ T5823] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 775.995890][ T5823] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 776.022113][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.116550][ T5823] usb 6-1: config 0 descriptor?? [ 776.697161][ T5823] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 776.889064][ T5890] usb 6-1: USB disconnect, device number 6 [ 777.622999][T12168] fido_id[12168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 778.167685][T12179] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2776'. [ 778.327772][T12182] loop3: detected capacity change from 0 to 512 [ 778.368448][T12182] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 778.441781][T12182] EXT4-fs (loop3): orphan cleanup on readonly fs [ 778.475905][T12182] EXT4-fs error (device loop3): __ext4_iget:5378: inode #11: block 8: comm syz.3.2777: invalid block [ 778.585369][T12182] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 778.594580][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 778.610707][ C1] EXT4-fs (loop3): initial error at time 1772511355: __ext4_iget:5378: inode 11: block 8 [ 778.621063][ C1] EXT4-fs (loop3): last error at time 1772511355: __ext4_iget:5378: inode 11: block 8 [ 778.694817][T12182] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2777: couldn't read orphan inode 11 (err -117) [ 778.795993][T12182] loop3: lost filesystem error report for type 5 error -117 [ 778.813676][T12182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 779.429858][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.005360][T12199] loop3: detected capacity change from 0 to 512 [ 780.079409][T12199] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 780.101721][T12202] loop0: detected capacity change from 0 to 256 [ 780.216076][T12199] EXT4-fs (loop3): 1 truncate cleaned up [ 780.317304][T12199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.383604][T12202] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 780.525301][T12202] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff) [ 781.011061][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.250218][T12211] loop4: detected capacity change from 0 to 2048 [ 781.355881][T12211] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 781.559938][T12215] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 782.493501][T12223] loop1: detected capacity change from 0 to 512 [ 782.619473][T12225] loop5: detected capacity change from 0 to 64 [ 782.705242][T12223] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2793: invalid indirect mapped block 4294967295 (level 1) [ 782.766713][T12223] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 782.774525][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 782.790813][ C1] EXT4-fs (loop1): initial error at time 1772511359: ext4_free_branches:1023: inode 11 [ 782.800909][ C1] EXT4-fs (loop1): last error at time 1772511359: ext4_free_branches:1023: inode 11 [ 782.879285][T12223] EXT4-fs (loop1): Remounting filesystem read-only [ 782.938283][T12223] EXT4-fs (loop1): 2 truncates cleaned up [ 783.027330][T12223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.245085][T12223] EXT4-fs warning (device loop1): empty_inline_dir:1777: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 783.557627][ T5890] IPVS: starting estimator thread 0... [ 783.664968][T12233] IPVS: using max 192 ests per chain, 9600 per kthread [ 783.807757][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.642636][T12246] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2804'. [ 785.474980][T12251] loop3: detected capacity change from 0 to 2048 [ 785.551003][T12251] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 785.679515][T12259] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 786.360076][T12265] loop0: detected capacity change from 0 to 512 [ 786.526033][T12265] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 786.653475][T12265] EXT4-fs (loop0): 1 orphan inode deleted [ 786.761643][T12270] team_slave_0: entered promiscuous mode [ 786.767835][T12270] team_slave_1: entered promiscuous mode [ 786.834098][T12265] EXT4-fs (loop0): 1 truncate cleaned up [ 786.878505][T12270] macsec1: entered promiscuous mode [ 786.883954][T12270] team0: entered promiscuous mode [ 786.900600][T12265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.020968][T12270] macsec1: entered allmulticast mode [ 787.097737][T12270] team0: entered allmulticast mode [ 787.103114][T12270] team_slave_0: entered allmulticast mode [ 787.123181][T12265] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.0.2811: path /539/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 787.158889][T12270] team_slave_1: entered allmulticast mode [ 787.180032][T12265] EXT4-fs (loop0): Remounting filesystem read-only [ 787.255726][T12270] team0: Device macsec1 is already an upper device of the team interface [ 787.349834][T12270] team0: left allmulticast mode [ 787.355842][T12270] team_slave_0: left allmulticast mode [ 787.383219][T12270] team_slave_1: left allmulticast mode [ 787.415420][T12270] team0: left promiscuous mode [ 787.479490][T12270] team_slave_0: left promiscuous mode [ 787.482655][T12280] netlink: 'syz.4.2815': attribute type 3 has an invalid length. [ 787.485251][T12270] team_slave_1: left promiscuous mode [ 787.661293][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.140397][T12295] loop5: detected capacity change from 0 to 512 [ 789.244779][T12295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 789.291767][T12295] EXT4-fs (loop5): orphan cleanup on readonly fs [ 789.322719][T12295] EXT4-fs error (device loop5): ext4_quota_enable:7188: comm syz.5.2823: Bad quota inum: 2, type: 2 [ 789.337782][T12295] loop5: lost filesystem error report for type 5 error -117 [ 789.344528][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 789.358747][ C0] EXT4-fs (loop5): last error at time 1772511366: ext4_quota_enable:7188 [ 789.382335][T12297] loop4: detected capacity change from 0 to 512 [ 789.394276][T12295] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 789.420825][T12295] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 789.435740][T12295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 789.461640][T12297] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 789.523636][T12297] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 789.560032][T12301] loop3: detected capacity change from 0 to 1024 [ 789.590689][T12304] netlink: 'syz.0.2825': attribute type 58 has an invalid length. [ 789.600996][T12297] System zones: 0-1, 15-15, 18-18, 34-34 [ 789.622913][T12301] EXT4-fs: Ignoring removed oldalloc option [ 789.654241][T12297] EXT4-fs (loop4): orphan cleanup on readonly fs [ 789.687295][T12301] EXT4-fs: Ignoring removed orlov option [ 789.696992][T12306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2827'. [ 789.729474][T12297] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 789.792763][T12297] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 789.831426][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.860392][T12297] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 789.875342][T12301] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 789.955785][T12297] EXT4-fs (loop4): 1 truncate cleaned up [ 789.992161][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2828'. [ 789.997183][T12301] System zones: [ 790.021917][T12297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 790.055894][T12301] 0-1, 3-12 [ 790.092657][T12301] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.167595][T12297] overlay: filesystem on ./file0 is read-only [ 790.243411][T12312] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 790.753762][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 790.766848][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.220857][T12348] loop1: detected capacity change from 0 to 64 [ 793.497728][T12350] loop0: detected capacity change from 0 to 16 [ 795.276208][T12369] tipc: Enabled bearer , priority 10 [ 795.884105][T12370] loop1: detected capacity change from 0 to 4096 [ 795.987979][T12370] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 796.614955][T12370] ntfs3(loop1): failed to convert "c46c" to cp861 [ 796.695035][T12370] ntfs3(loop1): ino=20, mi_enum_attr [ 796.700609][T12370] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 796.986842][T12384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2861'. [ 798.155194][ T5823] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 798.388549][ T5823] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 798.428079][ T5823] usb 1-1: config 0 has no interface number 0 [ 798.445636][ T5823] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 798.459126][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.522596][ T5823] usb 1-1: config 0 descriptor?? [ 798.605893][ T796] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 798.650310][ T5823] usb 1-1: selecting invalid altsetting 1 [ 798.674274][ T5823] dvb_ttusb_budget: ttusb_init_controller: error [ 798.724685][ T5823] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 798.816977][ T796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.866954][ T796] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 798.920063][ T796] usb 2-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 798.962949][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.148069][ T796] usb 2-1: config 0 descriptor?? [ 799.294568][ T5823] DVB: Unable to find symbol cx22700_attach() [ 799.433098][ T5772] Bluetooth: hci3: adv larger than maximum supported [ 799.433300][ T5772] Bluetooth: hci3: Malformed LE Event: 0x0d [ 799.450763][ T796] usb 2-1: string descriptor 0 read error: -71 [ 799.498758][ T796] usb 2-1: USB disconnect, device number 10 [ 799.828339][ T5823] DVB: Unable to find symbol tda10046_attach() [ 799.865348][ T5823] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 799.950536][ T5823] usb 1-1: USB disconnect, device number 12 [ 800.027722][T12407] loop4: detected capacity change from 0 to 4096 [ 800.129004][T12413] netlink: 'syz.3.2874': attribute type 29 has an invalid length. [ 800.168025][T12407] ntfs3(loop4): ino=3, Correct links count -> 2. [ 800.198493][T12413] netlink: 'syz.3.2874': attribute type 29 has an invalid length. [ 800.627135][T12407] ntfs3(loop4): ino=1a, mi_enum_attr [ 800.651714][T12407] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 800.852856][T12407] ntfs3(loop4): MFT: r=b, expect seq=0 instead of b! [ 800.957693][T12421] loop3: detected capacity change from 0 to 8 [ 801.210837][ T5922] udevd[5922]: incorrect cramfs checksum on /dev/loop3 [ 802.187905][T12429] binder: 12427:12429 ioctl c018620c 0 returned -14 [ 803.264975][ T5823] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 803.448397][ T5823] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 803.448551][ T5823] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 803.448677][ T5823] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 803.448808][ T5823] usb 2-1: config 220 has no interface number 2 [ 803.448963][ T5823] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 803.449136][ T5823] usb 2-1: config 220 interface 0 has no altsetting 0 [ 803.449256][ T5823] usb 2-1: config 220 interface 76 has no altsetting 0 [ 803.449380][ T5823] usb 2-1: config 220 interface 1 has no altsetting 0 [ 803.521903][ T5823] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 803.522072][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.522204][ T5823] usb 2-1: Product: syz [ 803.522309][ T5823] usb 2-1: Manufacturer: syz [ 803.522416][ T5823] usb 2-1: SerialNumber: syz [ 803.856012][ T5823] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 803.856194][ T5823] uvcvideo 2-1:220.0: No valid video chain found. [ 803.856431][ T5823] usb 2-1: selecting invalid altsetting 0 [ 803.941989][ T5823] usb 2-1: selecting invalid altsetting 0 [ 803.942118][ T5823] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 803.999132][ T5823] usb 2-1: USB disconnect, device number 11 [ 804.262662][T12445] loop3: detected capacity change from 0 to 2048 [ 804.389154][T12445] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 804.389814][T12445] System zones: 0-4 [ 804.402169][T12445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.402586][T12445] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.513845][ T29] audit: type=1800 audit(1772511381.374:87): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2889" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 805.017907][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.273218][T12455] loop0: detected capacity change from 0 to 16 [ 805.375684][T12455] erofs (device loop0): mounted with root inode @ nid 36. [ 805.483891][T12455] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 805.502796][T12455] erofs (device loop0): readahead error at folio 1 @ nid 89 [ 805.593147][T12455] erofs (device loop0): read error -117 @ 1 of nid 89 [ 805.687896][ T29] audit: type=1800 audit(1772511382.534:88): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2893" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 806.105582][T12457] loop1: detected capacity change from 0 to 4096 [ 806.167333][T12457] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 806.545341][T12457] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 806.670085][T12457] ntfs3(loop1): ino=5, "/" ntfs_readdir [ 806.693777][T12471] loop3: detected capacity change from 0 to 64 [ 807.305321][T12468] loop0: detected capacity change from 0 to 4096 [ 807.467624][T12468] ntfs3(loop0): ino=0, mi_enum_attr [ 807.676371][T12468] ntfs3(loop0): ino=0, mi_enum_attr [ 808.248169][T12468] ntfs3(loop0): failed to convert "0080" to cp864 [ 808.344865][T12468] ntfs3(loop0): ino=1e, mi_enum_attr [ 810.178515][T12500] loop0: detected capacity change from 0 to 512 [ 810.278178][T12500] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2913: bg 0: block 393: padding at end of block bitmap is not set [ 810.425406][T12500] loop0: lost filesystem error report for type 5 error -117 [ 810.431637][T12500] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 810.439493][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 810.439594][ C1] EXT4-fs (loop0): initial error at time 1772511387: ext4_validate_block_bitmap:441 [ 810.439738][ C1] EXT4-fs (loop0): last error at time 1772511387: ext4_validate_block_bitmap:441 [ 810.558119][T12500] loop0: lost filesystem error report for type 5 error -117 [ 810.559947][T12500] EXT4-fs (loop0): 2 truncates cleaned up [ 810.673708][T12500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.325642][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.862975][T12530] loop1: detected capacity change from 0 to 128 [ 813.085816][T12530] FAT-fs (loop1): error, clusters badly computed (2 != 0) [ 813.152979][T12530] FAT-fs (loop1): Filesystem has been set read-only [ 813.167364][T12530] FAT-fs (loop1): error, clusters badly computed (3 != 1) [ 813.171956][T12530] FAT-fs (loop1): error, clusters badly computed (4 != 2) [ 813.288497][T12532] process 'syz.4.2928' launched '/dev/fd/3' with NULL argv: empty string added [ 814.832697][T12550] loop5: detected capacity change from 0 to 8 [ 816.045600][T12567] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2940'. [ 817.949204][T12589] loop1: detected capacity change from 0 to 64 [ 818.341216][T12594] loop0: detected capacity change from 0 to 512 [ 818.421499][T12594] EXT4-fs: Ignoring removed oldalloc option [ 818.457807][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.464632][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.504837][T12594] EXT4-fs: Ignoring removed bh option [ 818.609902][T12594] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 818.680991][T12594] System zones: 1-12 [ 818.729550][T12594] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.2954: corrupted in-inode xattr: e_value size too large [ 818.809492][T12594] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 818.810917][T12594] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2954: couldn't read orphan inode 15 (err -117) [ 818.820670][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 818.820774][ C0] EXT4-fs (loop0): initial error at time 1772511395: ext4_iget_extra_inode:5025: inode 15 [ 818.820944][ C0] EXT4-fs (loop0): last error at time 1772511395: ext4_iget_extra_inode:5025: inode 15 [ 819.108040][T12594] loop0: lost filesystem error report for type 5 error -117 [ 819.144025][T12594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.889279][T12614] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2962'. [ 820.051512][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.578443][T12620] loop4: detected capacity change from 0 to 16 [ 820.660508][T12620] erofs (device loop4): mounted with root inode @ nid 36. [ 820.766573][ T29] audit: type=1800 audit(1772511397.634:89): pid=12620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2966" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 820.778280][T12620] syz.4.2966: attempt to access beyond end of device [ 820.778280][T12620] loop4: rw=8423424, sector=1342177272, nr_sectors = 8 limit=16 [ 822.283419][T12638] loop1: detected capacity change from 0 to 512 [ 822.385384][T12638] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 822.466056][T12638] EXT4-fs (loop1): orphan cleanup on readonly fs [ 822.593391][T12638] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2974: bad orphan inode 15 [ 822.681535][T12638] loop1: lost filesystem error report for type 5 error -117 [ 822.684538][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 822.699016][ C1] EXT4-fs (loop1): initial error at time 1772511399: ext4_orphan_get:1417 [ 822.707941][ C1] EXT4-fs (loop1): last error at time 1772511399: ext4_orphan_get:1417 [ 822.718703][T12638] ext4_test_bit(bit=14, block=18) = 1 [ 822.724278][T12638] is_bad_inode(inode)=0 [ 822.736399][T12638] NEXT_ORPHAN(inode)=1023 [ 822.743724][T12638] max_ino=32 [ 822.758833][T12638] i_nlink=0 [ 822.798168][T12638] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2974: bg 0: block 161: padding at end of block bitmap is not set [ 822.852684][T12638] loop1: lost filesystem error report for type 5 error -117 [ 822.868749][T12638] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 822.924865][T12638] loop1: lost filesystem error report for type 5 error -117 [ 822.977666][T12638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 823.012814][T12643] loop3: detected capacity change from 0 to 2048 [ 823.045453][T12643] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 823.257765][T12650] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 823.559417][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.936515][T12652] loop5: detected capacity change from 0 to 764 [ 824.115619][T12652] rock: directory entry would overflow storage [ 824.146264][T12652] rock: sig=0x4f50, size=4, remaining=3 [ 824.179030][T12652] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 824.773469][T12663] loop0: detected capacity change from 0 to 512 [ 824.848149][T12663] EXT4-fs: Ignoring removed nobh option [ 824.891086][T12663] EXT4-fs (loop0): Test dummy encryption mode enabled [ 825.038037][T12663] EXT4-fs error (device loop0): __ext4_iget:5378: inode #11: block 1: comm syz.0.2985: invalid block [ 825.091908][T12663] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 825.093562][T12663] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2985: couldn't read orphan inode 11 (err -117) [ 825.103344][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 825.103443][ C1] EXT4-fs (loop0): initial error at time 1772511401: __ext4_iget:5378: inode 11: block 1 [ 825.103663][ C1] EXT4-fs (loop0): last error at time 1772511401: __ext4_iget:5378: inode 11: block 1 [ 825.288199][T12663] loop0: lost filesystem error report for type 5 error -117 [ 825.301807][T12663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.797514][T12667] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 826.101620][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.690801][T12685] loop0: detected capacity change from 0 to 256 [ 827.101042][T12688] loop5: detected capacity change from 0 to 512 [ 827.106472][T12685] FAT-fs (loop0): Directory bread(block 64) failed [ 827.131810][T12685] FAT-fs (loop0): Directory bread(block 65) failed [ 827.181980][T12685] FAT-fs (loop0): Directory bread(block 66) failed [ 827.193191][T12688] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 827.230813][T12685] FAT-fs (loop0): Directory bread(block 67) failed [ 827.275013][T12685] FAT-fs (loop0): Directory bread(block 68) failed [ 827.292727][T12685] FAT-fs (loop0): Directory bread(block 69) failed [ 827.365406][T12685] FAT-fs (loop0): Directory bread(block 70) failed [ 827.390766][T12688] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2996: bg 0: block 104: invalid block bitmap [ 827.432016][T12685] FAT-fs (loop0): Directory bread(block 71) failed [ 827.452646][T12688] loop5: lost filesystem error report for type 5 error -117 [ 827.465915][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 827.478614][T12685] FAT-fs (loop0): Directory bread(block 72) failed [ 827.480489][ C0] EXT4-fs (loop5): initial error at time 1772511404: ext4_validate_block_bitmap:432 [ 827.496422][ C0] EXT4-fs (loop5): last error at time 1772511404: ext4_validate_block_bitmap:432 [ 827.524118][T12688] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 827.537571][T12688] loop5: lost filesystem error report for type 5 error -117 [ 827.557422][T12685] FAT-fs (loop0): Directory bread(block 73) failed [ 827.593661][T12688] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2996: invalid indirect mapped block 1 (level 1) [ 827.680085][T12688] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 827.688158][T12688] EXT4-fs (loop5): 1 truncate cleaned up [ 827.790482][T12688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.825926][T12685] syz.0.2994: attempt to access beyond end of device [ 827.825926][T12685] loop0: rw=8390659, sector=1224, nr_sectors = 544 limit=256 [ 828.401654][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.583031][T12702] loop3: detected capacity change from 0 to 512 [ 828.716024][T12702] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3000: Directory hole found for htree index block 0 [ 828.745213][T12702] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 828.754579][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 828.770692][ C0] EXT4-fs (loop3): initial error at time 1772511405: dx_probe:791: inode 2 [ 828.779802][ C0] EXT4-fs (loop3): last error at time 1772511405: dx_probe:791: inode 2 [ 828.812597][T12702] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 828.877720][T12702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.253225][T12707] loop0: detected capacity change from 0 to 1024 [ 829.450229][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.587863][T12720] loop4: detected capacity change from 0 to 256 [ 830.617987][T12716] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.625821][T12716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.635273][T12716] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.642896][T12716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.908856][T12731] loop4: detected capacity change from 0 to 256 [ 831.952397][T12731] exfat: Deprecated parameter 'utf8' [ 831.978341][T12731] exfat: Deprecated parameter 'namecase' [ 832.017555][T12733] loop5: detected capacity change from 0 to 64 [ 832.161953][T12731] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 832.386532][T12727] loop0: detected capacity change from 0 to 4096 [ 832.449940][T12727] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 832.876355][T12727] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 833.042504][T12727] ntfs3(loop0): ino=5, "/" ntfs_readdir [ 833.735062][T12747] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 834.298052][T12749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3022'. [ 835.875332][T12772] loop0: detected capacity change from 0 to 16 [ 836.722479][T12779] loop5: detected capacity change from 0 to 256 [ 836.906936][T12772] erofs (device loop0): mounted with root inode @ nid 36. [ 837.023822][T12783] loop4: detected capacity change from 0 to 2048 [ 837.249981][T12787] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 838.151922][T12789] loop5: detected capacity change from 0 to 1024 [ 838.467756][ T1916] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 838.504320][T12795] loop4: detected capacity change from 0 to 1024 [ 838.652465][ T1916] usb 2-1: Using ep0 maxpacket: 32 [ 838.668681][ T1916] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 838.689309][T12795] hfsplus: bad catalog entry type [ 838.698665][ T1916] usb 2-1: config 2 has no interface number 0 [ 838.759643][ T1916] usb 2-1: config 2 interface 88 has no altsetting 0 [ 838.790802][ T6380] hfsplus: b-tree write err: -5, ino 25 [ 838.848168][ T6380] hfsplus: b-tree write err: -5, ino 4 [ 838.854172][ T6380] hfsplus: b-tree write err: -5, ino 2 [ 838.875003][ T1916] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 838.936822][ T1916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.018413][ T1916] usb 2-1: Product: syz [ 839.022832][ T1916] usb 2-1: Manufacturer: syz [ 839.098479][ T1916] usb 2-1: SerialNumber: syz [ 839.117051][ T6395] hfsplus: b-tree write err: -5, ino 25 [ 839.123133][ T6395] hfsplus: b-tree write err: -5, ino 4 [ 839.203036][ T6395] hfsplus: b-tree write err: -5, ino 2 [ 839.618886][ T1916] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 839.680655][ T1916] asix 2-1:2.88: probe with driver asix failed with error -71 [ 839.800408][ T1916] usb 2-1: USB disconnect, device number 12 [ 841.323214][T12815] loop5: detected capacity change from 0 to 1764 [ 841.874786][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 842.119543][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 842.160277][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 842.223802][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 842.282502][ T10] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 842.327678][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.369340][ T10] usb 2-1: Product: syz [ 842.373883][ T10] usb 2-1: Manufacturer: syz [ 842.403032][T12831] loop0: detected capacity change from 0 to 64 [ 842.426438][ T10] usb 2-1: SerialNumber: syz [ 842.470423][ T10] usb 2-1: config 0 descriptor?? [ 842.551103][T12820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 842.608638][T12820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 842.660945][ T10] usb 2-1: ucan: probing device on interface #0 [ 843.306968][ T10] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 843.454123][ T10] usb 2-1: USB disconnect, device number 13 [ 844.729531][T12846] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3063'. [ 845.431061][T12851] loop4: detected capacity change from 0 to 256 [ 845.751584][T12851] FAT-fs (loop4): Directory bread(block 64) failed [ 845.780484][T12851] FAT-fs (loop4): Directory bread(block 65) failed [ 845.805009][T12851] FAT-fs (loop4): Directory bread(block 66) failed [ 845.811802][T12851] FAT-fs (loop4): Directory bread(block 67) failed [ 845.868151][T12851] FAT-fs (loop4): Directory bread(block 68) failed [ 845.921571][T12851] FAT-fs (loop4): Directory bread(block 69) failed [ 845.955275][T12851] FAT-fs (loop4): Directory bread(block 70) failed [ 845.962114][T12851] FAT-fs (loop4): Directory bread(block 71) failed [ 846.026616][T12851] FAT-fs (loop4): Directory bread(block 72) failed [ 846.054991][T12851] FAT-fs (loop4): Directory bread(block 73) failed [ 847.504097][T12875] loop3: detected capacity change from 0 to 256 [ 847.612371][T12875] exfat: Deprecated parameter 'utf8' [ 847.649924][T12875] exfat: Deprecated parameter 'utf8' [ 847.684982][T12875] exfat: Deprecated parameter 'utf8' [ 847.874136][T12875] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 848.062929][T12878] loop5: detected capacity change from 0 to 1024 [ 848.291989][T12878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.686228][ T29] audit: type=1800 audit(1772511425.554:90): pid=12878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3077" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 849.160657][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.268737][T12889] loop3: detected capacity change from 0 to 1024 [ 849.347261][T12889] EXT4-fs: Ignoring removed mblk_io_submit option [ 849.400827][T12890] loop4: detected capacity change from 0 to 1024 [ 849.528624][T12889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 849.542561][T12890] hfsplus: invalid length 32517 has been corrected to 255 [ 849.900324][T12895] hfsplus: b-tree write err: -5, ino 2 [ 850.149324][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.239607][T12892] loop1: detected capacity change from 0 to 4096 [ 850.263105][T12892] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 850.583428][T12892] ntfs3(loop1): ino=19, mi_enum_attr [ 850.838615][ T12] hfsplus: b-tree write err: -5, ino 4 [ 850.881230][ T12] hfsplus: b-tree write err: -5, ino 2 [ 851.294694][T12906] macvlan2: entered promiscuous mode [ 851.303457][T12906] macvlan2: entered allmulticast mode [ 852.784110][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 852.812356][T12923] loop4: detected capacity change from 0 to 1024 [ 852.910023][T12927] bridge: RTM_NEWNEIGH with invalid ether address [ 852.956959][T12923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 853.179647][ T29] audit: type=1800 audit(1772511430.034:91): pid=12923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3094" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 853.402087][T12933] loop0: detected capacity change from 0 to 1024 [ 853.553497][T12933] hfsplus: bad catalog entry type [ 853.561250][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.973059][ T6393] hfsplus: b-tree write err: -5, ino 25 [ 854.006502][ T6393] hfsplus: b-tree write err: -5, ino 4 [ 854.036478][ T6393] hfsplus: b-tree write err: -5, ino 2 [ 854.742222][T12947] loop3: detected capacity change from 0 to 128 [ 855.921229][ T10] IPVS: starting estimator thread 0... [ 856.043212][T12964] IPVS: using max 192 ests per chain, 9600 per kthread [ 856.150430][T12961] loop5: detected capacity change from 0 to 2048 [ 856.328053][T12961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.928609][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.653941][T12983] loop5: detected capacity change from 0 to 512 [ 857.709010][T12983] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 857.809336][T12983] EXT4-fs (loop5): invalid journal inode [ 857.815942][T12983] EXT4-fs (loop5): can't get journal size [ 857.923262][T12983] EXT4-fs (loop5): 1 truncate cleaned up [ 858.030576][T12983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.642412][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.778453][T13019] loop4: detected capacity change from 0 to 512 [ 860.975098][T13019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.008486][T13023] loop0: detected capacity change from 0 to 1024 [ 861.081150][T13019] ext4 filesystem being mounted at /632/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 861.112989][T13019] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.128562][T13023] hfsplus: invalid length 32517 has been corrected to 255 [ 861.303299][T13029] atomic_op ffff8880557ccd28 conn xmit_atomic 0000000000000000 [ 861.449150][T13030] hfsplus: b-tree write err: -5, ino 2 [ 862.018075][ T6389] hfsplus: b-tree write err: -5, ino 4 [ 862.024005][ T6389] hfsplus: b-tree write err: -5, ino 2 [ 863.848926][T13059] random: crng reseeded on system resumption [ 864.619407][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 864.858226][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 864.910598][ T10] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 864.958315][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 864.980292][ T10] usb 1-1: config 220 has no interface number 2 [ 865.004589][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 865.052543][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 865.086461][T13069] loop3: detected capacity change from 0 to 512 [ 865.095958][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 865.103074][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 865.155348][T13069] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 865.172812][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 865.185632][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.226198][T13067] loop1: detected capacity change from 0 to 1024 [ 865.281829][T13069] EXT4-fs (loop3): 1 truncate cleaned up [ 865.332754][T13069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.364804][ T10] usb 1-1: Product: syz [ 865.369320][ T10] usb 1-1: Manufacturer: syz [ 865.374126][ T10] usb 1-1: SerialNumber: syz [ 865.395354][T13067] hfsplus: invalid length 32517 has been corrected to 255 [ 865.742722][T13075] hfsplus: b-tree write err: -5, ino 2 [ 865.833938][ T10] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 865.893194][ T10] uvcvideo 1-1:220.0: No valid video chain found. [ 865.924943][ T10] usb 1-1: selecting invalid altsetting 0 [ 866.166701][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.228955][ T10] usb 1-1: selecting invalid altsetting 0 [ 866.294706][ T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 866.377161][ T10] usb 1-1: USB disconnect, device number 13 [ 866.566615][ T6389] hfsplus: b-tree write err: -5, ino 4 [ 866.572578][ T6389] hfsplus: b-tree write err: -5, ino 2 [ 866.689020][ T6389] hfsplus: b-tree write err: -5, ino 8 [ 867.076394][T13087] loop0: detected capacity change from 0 to 256 [ 867.147268][T13087] exfat: Deprecated parameter 'utf8' [ 867.387493][T13087] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 867.537303][ T29] audit: type=1800 audit(1772511444.404:92): pid=13087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3160" name="file1" dev="loop0" ino=1048726 res=0 errno=0 [ 867.849751][T13091] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 867.982084][T13091] macsec1: entered promiscuous mode [ 868.157607][T13100] random: crng reseeded on system resumption [ 868.222531][T13091] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 869.412498][T13111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3168'. [ 869.417640][T13109] loop1: detected capacity change from 0 to 256 [ 869.577533][T13109] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 869.662522][T13113] sp0: Synchronizing with TNC [ 872.071563][T13143] loop4: detected capacity change from 0 to 64 [ 872.903435][T13151] loop0: detected capacity change from 0 to 128 [ 874.290018][T13168] tipc: Enabled bearer , priority 10 [ 874.412322][T13167] loop1: detected capacity change from 0 to 1024 [ 874.635202][T13171] loop0: detected capacity change from 0 to 512 [ 874.662597][T13167] hfsplus: bad catalog entry type [ 874.699005][T13171] EXT4-fs: Ignoring removed oldalloc option [ 874.743707][T13171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 874.818414][T13171] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0003] [ 874.845619][T13171] System zones: 1-2, 4-12, 8-8 [ 874.895533][T13171] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3197: iget: bad i_size value: 38620345925642 [ 874.937022][T13171] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 874.938816][T13171] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3197: couldn't read orphan inode 15 (err -117) [ 874.948770][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 874.948866][ C1] EXT4-fs (loop0): initial error at time 1772511451: ext4_orphan_get:1391: inode 15 [ 874.949038][ C1] EXT4-fs (loop0): last error at time 1772511451: ext4_orphan_get:1391: inode 15 [ 875.002499][T13171] loop0: lost filesystem error report for type 5 error -117 [ 875.083422][T13171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 875.140098][ T6395] hfsplus: b-tree write err: -5, ino 25 [ 875.189445][ T6395] hfsplus: b-tree write err: -5, ino 4 [ 875.216159][ T6395] hfsplus: b-tree write err: -5, ino 2 [ 875.414618][ T5823] tipc: Node number set to 4278255617 [ 875.474671][T13174] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 875.963334][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.259565][T13183] loop4: detected capacity change from 0 to 2048 [ 876.406696][T13183] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 876.545153][T13183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 876.699987][T13189] loop0: detected capacity change from 0 to 256 [ 876.739947][T13189] exfat: Deprecated parameter 'namecase' [ 876.795673][T13189] exfat: Deprecated parameter 'namecase' [ 877.108112][T13189] exFAT-fs (loop0): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 878.693104][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3215'. [ 879.200855][T13216] loop5: detected capacity change from 0 to 512 [ 879.281320][T13216] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 879.347654][T13216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 879.392082][T13216] System zones: 1-12 [ 879.439798][T13216] EXT4-fs (loop5): 1 truncate cleaned up [ 879.477743][T13216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.897167][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.903862][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.529919][T13232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3224'. [ 880.667940][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.134124][T13254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3234'. [ 883.336062][T13265] loop0: detected capacity change from 0 to 512 [ 883.401350][T13265] EXT4-fs: Ignoring removed mblk_io_submit option [ 883.466529][T13265] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 883.582124][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3242'. [ 883.597811][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3242'. [ 883.677336][T13265] EXT4-fs (loop0): 1 truncate cleaned up [ 883.737236][T13265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 884.201348][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.100274][T13286] loop3: detected capacity change from 0 to 128 [ 885.333348][T13288] sch_tbf: burst 3 is lower than device tunl0 mtu (32769) ! [ 885.404095][T13286] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 885.404224][T13286] FAT-fs (loop3): Filesystem has been set read-only [ 885.408237][T13286] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 885.658883][T13290] loop4: detected capacity change from 0 to 1024 [ 886.281698][ T6380] hfsplus: b-tree write err: -5, ino 25 [ 886.282077][ T6380] hfsplus: b-tree write err: -5, ino 4 [ 886.282363][ T6380] hfsplus: b-tree write err: -5, ino 2 [ 886.282808][ T6380] hfsplus: b-tree write err: -5, ino 20 [ 886.835891][T13295] loop3: detected capacity change from 0 to 4096 [ 886.985952][T13301] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 887.662130][T13305] loop1: detected capacity change from 0 to 2048 [ 887.738746][T13305] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 887.821767][T13305] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 888.396006][T13307] loop4: detected capacity change from 0 to 2048 [ 888.572367][T13307] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 889.220493][T13317] loop5: detected capacity change from 0 to 512 [ 889.274498][T13317] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 889.668138][T13317] EXT4-fs (loop5): 1 truncate cleaned up [ 889.736725][T13317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.447558][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.057611][T13331] loop4: detected capacity change from 0 to 1764 [ 891.206292][ T796] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 891.396923][ T796] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 891.466477][ T796] usb 2-1: config 0 has no interface number 0 [ 891.472865][ T796] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 891.629573][ T796] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 891.741471][ T796] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 891.774733][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.783358][ T796] usb 2-1: Product: syz [ 891.820006][ T796] usb 2-1: Manufacturer: syz [ 891.842844][ T796] usb 2-1: SerialNumber: syz [ 891.883513][ T796] usb 2-1: config 0 descriptor?? [ 891.918303][T13333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 891.978052][ T796] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 892.051451][ T796] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 892.604762][T12234] usb 2-1: USB disconnect, device number 14 [ 892.679263][T12234] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 892.781557][T12234] cyberjack 2-1:0.69: device disconnected [ 893.791814][T13359] loop5: detected capacity change from 0 to 1024 [ 894.008252][T13359] hfsplus: bad catalog entry type [ 894.418024][ T6380] hfsplus: b-tree write err: -5, ino 25 [ 894.457447][ T6380] hfsplus: b-tree write err: -5, ino 4 [ 894.463378][ T6380] hfsplus: b-tree write err: -5, ino 2 [ 895.125574][ T29] audit: type=1326 audit(1772511471.984:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.3289" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f83f6c code=0x0 [ 896.953163][T13395] loop4: detected capacity change from 0 to 64 [ 897.462934][T13399] loop5: detected capacity change from 0 to 256 [ 897.641365][T13403] loop0: detected capacity change from 0 to 1024 [ 897.741388][T13399] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 897.962007][T13403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 898.054828][T13399] exFAT-fs (loop5): error, in sector 160, dentry 12 should be unused, but 0x85 [ 898.077812][T13399] exFAT-fs (loop5): Filesystem has been set read-only [ 898.086130][T13403] ext4 filesystem being mounted at /626/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 898.658100][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 899.376614][T13419] sp0: Synchronizing with TNC [ 899.409555][T13418] [U] ` [ 900.008414][T13425] loop5: detected capacity change from 0 to 2048 [ 900.045755][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 900.219784][T13425] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 901.083742][T13437] loop1: detected capacity change from 0 to 64 [ 901.655469][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3317'. [ 903.542615][T13461] loop3: detected capacity change from 0 to 256 [ 903.599852][T13461] exfat: Deprecated parameter 'namecase' [ 903.600095][T13461] exfat: Deprecated parameter 'namecase' [ 903.761697][T13461] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 904.605007][ T5823] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 904.815645][ T5823] usb 1-1: Using ep0 maxpacket: 32 [ 904.885036][ T5823] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 904.932121][ T5823] usb 1-1: config 0 interface 0 has no altsetting 0 [ 904.965222][ T5823] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 905.017923][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.135119][ T5823] usb 1-1: config 0 descriptor?? [ 905.663407][ T5823] hid_parser_main: 5 callbacks suppressed [ 905.663513][ T5823] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0 [ 905.764070][T13482] bridge_slave_0: default FDB implementation only supports local addresses [ 905.785986][ T5823] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0 [ 905.793713][ T5823] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0 [ 905.851935][ T5823] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0 [ 905.884925][ T5823] corsair-psu 0003:1B1C:1C09.0006: unknown main item tag 0x0 [ 906.000380][ T5823] corsair-psu 0003:1B1C:1C09.0006: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 906.195205][ T5823] corsair-psu 0003:1B1C:1C09.0006: unable to initialize device (-38) [ 906.260109][ T5823] corsair-psu 0003:1B1C:1C09.0006: probe with driver corsair-psu failed with error -38 [ 906.444964][ T5823] usb 1-1: USB disconnect, device number 14 [ 906.758743][T13471] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 906.929734][T13483] fido_id[13483]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 907.015017][T13471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.071179][T13471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.115125][T13471] usb 5-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 907.175747][T13471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.268468][T13471] usb 5-1: config 0 descriptor?? [ 907.571520][T13488] loop5: detected capacity change from 0 to 4096 [ 907.796451][T13471] lg-g15 0003:046D:0A07.0007: unknown main item tag 0x0 [ 907.815618][T13471] lg-g15 0003:046D:0A07.0007: unknown main item tag 0x0 [ 907.822963][T13471] lg-g15 0003:046D:0A07.0007: unknown main item tag 0x0 [ 907.901573][T13471] lg-g15 0003:046D:0A07.0007: unknown main item tag 0x0 [ 907.934602][T13471] lg-g15 0003:046D:0A07.0007: unknown main item tag 0x0 [ 908.019706][T13471] lg-g15 0003:046D:0A07.0007: hidraw0: USB HID v0.00 Device [HID 046d:0a07] on usb-dummy_hcd.4-1/input0 [ 908.161107][T13471] usb 5-1: USB disconnect, device number 12 [ 908.328658][T13488] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 908.966588][ T7039] ntfs3(loop5): ino=9, ntfs_sync_fs failed, -22. [ 909.048552][T13498] fido_id[13498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 910.244789][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 910.438473][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 910.459899][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 910.529984][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.561958][ T10] usb 1-1: config 0 descriptor?? [ 910.608449][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 910.673023][T13509] loop1: detected capacity change from 0 to 4096 [ 911.272560][ T10] gspca_sonixj: reg_w1 err -71 [ 911.292561][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 911.383118][ T10] usb 1-1: USB disconnect, device number 15 [ 911.505259][T13509] ntfs3(loop1): failed to convert "0000" to iso8859-6 [ 911.579513][T13509] ntfs3(loop1): failed to convert "0030" to iso8859-6 [ 911.621780][T13509] ntfs3(loop1): failed to convert name for inode 1e. [ 911.648894][T13521] loop5: detected capacity change from 0 to 256 [ 911.679186][T13509] ntfs3(loop1): failed to convert "0032" to iso8859-6 [ 911.688264][T13521] exfat: Deprecated parameter 'utf8' [ 911.688382][T13521] exfat: Deprecated parameter 'utf8' [ 911.707507][T13521] exfat: Deprecated parameter 'utf8' [ 911.766231][T13509] ntfs3(loop1): ino=1f, mi_enum_attr [ 911.771803][T13509] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 911.848618][T13521] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 912.475606][T13525] netlink: 'syz.3.3355': attribute type 3 has an invalid length. [ 913.362817][T13537] loop3: detected capacity change from 0 to 8 [ 913.538860][T13537] SQUASHFS error: Failed to read block 0x2d7: -5 [ 913.587186][T13537] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 915.898106][T13560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3370'. [ 915.969630][T13563] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3370'. [ 916.916335][T13572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3373'. [ 916.969076][T13572] netlink: 'syz.3.3373': attribute type 2 has an invalid length. [ 916.985049][T13575] loop1: detected capacity change from 0 to 64 [ 917.015233][T13572] netlink: 'syz.3.3373': attribute type 1 has an invalid length. [ 917.039925][T13577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3377'. [ 917.076414][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3373'. [ 918.527334][T13589] loop5: detected capacity change from 0 to 64 [ 919.120058][ T29] audit: type=1326 audit(1772511495.974:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 919.232397][ T29] audit: type=1326 audit(1772511495.974:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 919.360248][ T29] audit: type=1326 audit(1772511496.024:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 919.484651][ T29] audit: type=1326 audit(1772511496.044:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 919.629852][ T29] audit: type=1326 audit(1772511496.044:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 921.382263][T13617] loop3: detected capacity change from 0 to 4096 [ 921.617876][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3397'. [ 921.739452][T13626] vlan2: entered promiscuous mode [ 922.849507][T13635] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3403'. [ 922.956159][T13636] loop3: detected capacity change from 0 to 1024 [ 923.176514][T13636] syz.3.3401: attempt to access beyond end of device [ 923.176514][T13636] loop3: rw=8388608, sector=393216, nr_sectors = 2 limit=1024 [ 924.433426][T13648] loop1: detected capacity change from 0 to 512 [ 924.475303][T13648] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 924.548947][T13648] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.3409: corrupted in-inode xattr: invalid ea_ino [ 924.549111][T13648] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 924.553395][T13648] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3409: couldn't read orphan inode 15 (err -117) [ 924.553576][T13648] loop1: lost filesystem error report for type 5 error -117 [ 924.554533][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 924.554636][ C1] EXT4-fs (loop1): initial error at time 1772511501: ext4_iget_extra_inode:5025: inode 15 [ 924.554810][ C1] EXT4-fs (loop1): last error at time 1772511501: ext4_orphan_get:1396 [ 924.600327][T13648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 924.716248][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3411'. [ 924.869660][T13655] vlan2: entered promiscuous mode [ 925.113258][ T5778] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 925.150016][ T5778] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 925.168286][ T5778] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 926.164936][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.292070][ T129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.385765][ T129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.610274][T13667] loop3: detected capacity change from 0 to 256 [ 926.642052][ T129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.683278][ T129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.771321][T13667] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 927.056978][ T129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.126164][ T129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.313018][T13673] loop4: detected capacity change from 0 to 2048 [ 927.323875][ T129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.376839][T13673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 927.421198][ T129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.166711][ T129] bridge_slave_1: left allmulticast mode [ 928.172682][ T129] bridge_slave_1: left promiscuous mode [ 928.209777][ T129] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.249160][ T129] bridge_slave_0: left allmulticast mode [ 928.262075][ T129] bridge_slave_0: left promiscuous mode [ 928.278892][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.216039][T13677] program syz.0.3423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 929.267951][ T129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.313804][ T129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.372925][ T129] bond0 (unregistering): Released all slaves [ 929.417912][ T129] bond1 (unregistering): Released all slaves [ 930.440069][T10887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 930.466814][T10887] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 930.503352][T10887] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 930.528631][T10887] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 930.555702][T10887] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 930.923847][T13696] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3431'. [ 930.949046][ T129] hsr_slave_0: left promiscuous mode [ 930.997474][ T129] hsr_slave_1: left promiscuous mode [ 931.028735][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 931.064944][ T129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.110463][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 931.163654][ T129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.285314][ T129] veth1_macvtap: left promiscuous mode [ 931.304733][ T129] veth0_macvtap: left promiscuous mode [ 931.310718][ T129] veth1_vlan: left promiscuous mode [ 931.385132][ T129] veth0_vlan: left promiscuous mode [ 932.664973][ T5772] Bluetooth: hci3: command tx timeout [ 933.887096][ T129] team0 (unregistering): Port device team_slave_1 removed [ 933.984182][ T129] team0 (unregistering): Port device team_slave_0 removed [ 934.734108][T13704] macsec1: entered promiscuous mode [ 934.739810][T13704] macvlan0: entered promiscuous mode [ 934.746007][ T5772] Bluetooth: hci3: command tx timeout [ 934.814264][T13704] macvlan0: left promiscuous mode [ 935.332058][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3447'. [ 935.553267][ T129] IPVS: stop unused estimator thread 0... [ 936.740648][T13692] chnl_net:caif_netlink_parms(): no params data found [ 936.828830][ T5772] Bluetooth: hci3: command tx timeout [ 937.292268][T13773] loop5: detected capacity change from 0 to 164 [ 937.431189][T13773] Unable to read rock-ridge attributes [ 937.982799][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3458'. [ 938.031483][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3458'. [ 938.062363][T13784] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3460'. [ 938.081879][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3458'. [ 938.386410][T13787] loop5: detected capacity change from 0 to 256 [ 938.904686][ T5772] Bluetooth: hci3: command tx timeout [ 938.957516][T13787] FAT-fs (loop5): Directory bread(block 64) failed [ 938.965149][T13787] FAT-fs (loop5): Directory bread(block 65) failed [ 938.972094][T13787] FAT-fs (loop5): Directory bread(block 66) failed [ 939.015016][T13787] FAT-fs (loop5): Directory bread(block 67) failed [ 939.023759][T13787] FAT-fs (loop5): Directory bread(block 68) failed [ 939.057318][T13787] FAT-fs (loop5): Directory bread(block 69) failed [ 939.067536][T13692] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.092487][T13787] FAT-fs (loop5): Directory bread(block 70) failed [ 939.101261][T13692] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.146071][T13787] FAT-fs (loop5): Directory bread(block 71) failed [ 939.154014][T13692] bridge_slave_0: entered allmulticast mode [ 939.188580][T13787] FAT-fs (loop5): Directory bread(block 72) failed [ 939.223884][T13692] bridge_slave_0: entered promiscuous mode [ 939.240889][T13787] FAT-fs (loop5): Directory bread(block 73) failed [ 939.296941][T13692] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.321431][T13692] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.358838][T13692] bridge_slave_1: entered allmulticast mode [ 939.379539][T13692] bridge_slave_1: entered promiscuous mode [ 939.780603][T13692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.805063][T13801] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3465'. [ 939.853991][T13692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.327516][T13692] team0: Port device team_slave_0 added [ 940.441836][T13692] team0: Port device team_slave_1 added [ 940.694782][T13815] GUP no longer grows the stack in syz.5.3468 (13815): 80005000-80008000 (80004000) [ 940.745440][T13815] CPU: 0 UID: 0 PID: 13815 Comm: syz.5.3468 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.745641][T13815] Tainted: [L]=SOFTLOCKUP [ 940.745701][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 940.745808][T13815] Call Trace: [ 940.745867][T13815] [ 940.745925][T13815] __dump_stack+0x26/0x30 [ 940.746235][T13815] dump_stack_lvl+0x14c/0x1c0 [ 940.746427][T13815] dump_stack+0x1e/0x25 [ 940.746592][T13815] fixup_user_fault+0xcc0/0xde0 [ 940.746866][T13815] fault_in_user_writeable+0x99/0x1a0 [ 940.747138][T13815] futex_lock_pi+0x5a8/0x1530 [ 940.747343][T13815] ? kmsan_get_metadata+0xf1/0x160 [ 940.747616][T13815] ? kmsan_get_metadata+0xf1/0x160 [ 940.747830][T13815] ? __se_sys_futex_time32+0x557/0x6c0 [ 940.748040][T13815] ? __msan_warning+0x1b/0x30 [ 940.748231][T13815] ? __pfx_futex_wake_mark+0x10/0x10 [ 940.748501][T13815] do_futex+0x2e1/0x480 [ 940.748693][T13815] __se_sys_futex_time32+0x557/0x6c0 [ 940.748897][T13815] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 940.749128][T13815] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 940.749361][T13815] __ia32_sys_futex_time32+0x112/0x1a0 [ 940.749602][T13815] ia32_sys_call+0x11ea/0x4360 [ 940.749748][T13815] __do_fast_syscall_32+0x17f/0x3f0 [ 940.749980][T13815] do_fast_syscall_32+0x37/0x80 [ 940.750134][T13815] do_SYSENTER_32+0x1f/0x30 [ 940.750280][T13815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 940.750488][T13815] RIP: 0023:0xf7f72f6c [ 940.750616][T13815] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 940.750754][T13815] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 940.750899][T13815] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d [ 940.751001][T13815] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 940.751094][T13815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 940.751186][T13815] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 940.751278][T13815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 940.751406][T13815] [ 941.208016][T13692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.255181][T13692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.356166][T13692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.369097][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.377184][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.416266][T13692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.423426][T13692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.532681][T13692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.675663][T13821] tipc: Enabling of bearer rejected, failed to enable media [ 942.182076][T13692] hsr_slave_0: entered promiscuous mode [ 942.242046][T13692] hsr_slave_1: entered promiscuous mode [ 942.275214][T13692] debugfs: 'hsr0' already exists in 'hsr' [ 942.281174][T13692] Cannot create hsr debugfs directory [ 942.573827][T13830] loop4: detected capacity change from 0 to 256 [ 942.610488][T13830] exfat: Deprecated parameter 'utf8' [ 942.791106][T13830] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72538abf, utbl_chksum : 0xe619d30d) [ 944.900225][T13692] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 945.056455][T13692] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 945.106174][T13855] loop3: detected capacity change from 0 to 4096 [ 945.174185][T13855] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 945.198903][T13692] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 945.313128][T13692] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 945.547845][T13855] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 945.776057][T13870] loop4: detected capacity change from 0 to 128 [ 946.032602][T13870] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 946.116773][T13876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3494'. [ 946.131849][T13870] ext4 filesystem being mounted at /709/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.779425][ T5775] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 947.346543][T13692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.719249][T13887] tipc: Enabled bearer , priority 17 [ 947.829959][T13692] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.964110][ T6393] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.972014][ T6393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.210318][ T129] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.218026][ T129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.049259][T13692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 951.313355][T13692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.344765][T12234] IPVS: starting estimator thread 0... [ 951.428905][T13934] loop5: detected capacity change from 0 to 512 [ 951.444987][T13935] IPVS: using max 240 ests per chain, 12000 per kthread [ 951.472380][T13934] EXT4-fs: Ignoring removed i_version option [ 951.534214][T13934] EXT4-fs: Ignoring removed bh option [ 951.709691][T13934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.815242][T13934] ext4 filesystem being mounted at /597/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 952.320783][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.509394][T13692] veth0_vlan: entered promiscuous mode [ 954.670579][T13692] veth1_vlan: entered promiscuous mode [ 954.984245][T13983] loop4: detected capacity change from 0 to 256 [ 955.178370][T13692] veth0_macvtap: entered promiscuous mode [ 955.294457][T13692] veth1_macvtap: entered promiscuous mode [ 955.370292][T13983] FAT-fs (loop4): Directory bread(block 64) failed [ 955.370424][T13983] FAT-fs (loop4): Directory bread(block 65) failed [ 955.370690][T13983] FAT-fs (loop4): Directory bread(block 66) failed [ 955.370803][T13983] FAT-fs (loop4): Directory bread(block 67) failed [ 955.371058][T13983] FAT-fs (loop4): Directory bread(block 68) failed [ 955.371181][T13983] FAT-fs (loop4): Directory bread(block 69) failed [ 955.371432][T13983] FAT-fs (loop4): Directory bread(block 70) failed [ 955.371544][T13983] FAT-fs (loop4): Directory bread(block 71) failed [ 955.371797][T13983] FAT-fs (loop4): Directory bread(block 72) failed [ 955.371913][T13983] FAT-fs (loop4): Directory bread(block 73) failed [ 955.637634][T13692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.765415][T13692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.869958][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.897118][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.897736][ T6359] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.898276][ T6359] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.945019][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 957.098344][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 957.115464][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.115642][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.115844][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 957.116007][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.155155][ T10] usb 5-1: config 0 descriptor?? [ 957.166368][T13990] loop5: detected capacity change from 0 to 4096 [ 957.413299][T14002] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 957.794803][ T10] savu 0003:1E7D:2D5A.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 957.967655][ T10] usb 5-1: USB disconnect, device number 13 [ 958.674011][T14006] fido_id[14006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 958.985319][T13471] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 959.184896][T13471] usb 6-1: Using ep0 maxpacket: 8 [ 959.202310][T14017] loop3: detected capacity change from 0 to 512 [ 959.233888][T13471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.263187][T13471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.315096][T14017] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 959.334591][T13471] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 959.389865][T13471] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.429842][T14017] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3537: Invalid block bitmap block 0 in block_group 0 [ 959.461311][T13471] usb 6-1: config 0 descriptor?? [ 959.509501][T14017] loop3: lost filesystem error report for type 5 error -117 [ 959.514497][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 959.528667][ C0] EXT4-fs (loop3): initial error at time 1772511536: ext4_read_block_bitmap_nowait:483 [ 959.538720][ C0] EXT4-fs (loop3): last error at time 1772511536: ext4_read_block_bitmap_nowait:483 [ 959.550368][T14017] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 959.564160][T14017] loop3: lost filesystem error report for type 5 error -117 [ 959.619580][T14017] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.3537: attempt to clear invalid blocks 983261 len 1 [ 959.756018][T14017] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 959.785468][T14017] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.3537: Invalid inode table block 0 in block_group 0 [ 959.895934][T14017] loop3: lost filesystem error report for type 5 error -117 [ 959.901461][T14017] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 959.996206][T14025] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3539'. [ 960.051480][T13471] cherry 0003:046A:0027.0009: unknown main item tag 0x3 [ 960.052846][T14017] loop3: lost filesystem error report for type 5 error -117 [ 960.082770][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3539'. [ 960.085571][T13471] cherry 0003:046A:0027.0009: unknown main item tag 0x1 [ 960.129453][T14017] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 960.138741][T13471] cherry 0003:046A:0027.0009: bogus close delimiter [ 960.162496][T13471] cherry 0003:046A:0027.0009: item 0 0 2 10 parsing failed [ 960.171032][T14017] loop3: lost filesystem error report for type 5 error -117 [ 960.177725][T14017] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.3537: Invalid inode table block 0 in block_group 0 [ 960.229993][T13471] cherry 0003:046A:0027.0009: probe with driver cherry failed with error -22 [ 960.259556][T14017] loop3: lost filesystem error report for type 5 error -117 [ 960.260879][T14017] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 960.317337][T13471] usb 6-1: USB disconnect, device number 7 [ 960.383119][T14017] loop3: lost filesystem error report for type 5 error -117 [ 960.385005][T14017] EXT4-fs error (device loop3): ext4_truncate:4587: inode #11: comm syz.3.3537: mark_inode_dirty error [ 960.456348][T14017] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 960.460027][T14017] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 960.496933][T14017] loop3: lost filesystem error report for type 5 error -117 [ 960.524030][T14017] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.3537: Invalid inode table block 0 in block_group 0 [ 960.615229][T14017] loop3: lost filesystem error report for type 5 error -117 [ 960.616590][T14017] EXT4-fs (loop3): 1 truncate cleaned up [ 960.676106][T14017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.967977][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.378543][T14051] loop4: detected capacity change from 0 to 512 [ 962.495180][T14051] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 962.556857][T14051] EXT4-fs (loop4): orphan cleanup on readonly fs [ 962.586074][T14051] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3549: iget: bad i_size value: 360287970189639680 [ 962.652586][T14051] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 962.654052][T14051] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3549: couldn't read orphan inode 15 (err -117) [ 962.654504][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 962.654638][ C0] EXT4-fs (loop4): initial error at time 1772511539: ext4_orphan_get:1391: inode 15 [ 962.654813][ C0] EXT4-fs (loop4): last error at time 1772511539: ext4_orphan_get:1391: inode 15 [ 962.721990][T14051] loop4: lost filesystem error report for type 5 error -117 [ 962.730410][T14051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 962.977700][T14051] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 3: comm syz.4.3549: lblock 0 mapped to illegal pblock 3 (length 1) [ 963.095224][T14063] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 3: comm syz.4.3549: lblock 0 mapped to illegal pblock 3 (length 1) [ 963.441696][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.953828][T12234] IPVS: starting estimator thread 0... [ 964.054745][T14075] IPVS: using max 192 ests per chain, 9600 per kthread [ 964.155217][ T6380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.186791][ T6380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.257427][T14079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3557'. [ 964.461174][ T6380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.503729][ T6380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.569298][T14090] loop6: detected capacity change from 0 to 512 [ 965.750169][T14090] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.3422: iget: bad i_size value: 38620345925642 [ 965.825591][T14090] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 965.834505][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 965.850784][ C0] EXT4-fs (loop6): initial error at time 1772511542: ext4_orphan_get:1391: inode 15 [ 965.860656][ C0] EXT4-fs (loop6): last error at time 1772511542: ext4_orphan_get:1391: inode 15 [ 965.874880][T14090] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3422: couldn't read orphan inode 15 (err -117) [ 965.887795][T14090] loop6: lost filesystem error report for type 5 error -117 [ 965.941502][T14090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.231681][T14090] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3422: bg 0: block 5: invalid block bitmap [ 966.310925][T14090] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 57 with error 28 [ 966.388193][T14090] EXT4-fs (loop6): This should not happen!! Data will be lost [ 966.388193][T14090] [ 966.470101][T14090] EXT4-fs (loop6): Total free blocks count 0 [ 966.500983][T14090] EXT4-fs (loop6): Free/Dirty block details [ 966.544044][T14090] EXT4-fs (loop6): free_blocks=0 [ 966.585027][T14090] EXT4-fs (loop6): dirty_blocks=57 [ 966.590398][T14090] EXT4-fs (loop6): Block reservation details [ 966.635806][T14090] EXT4-fs (loop6): i_reserved_data_blocks=57 [ 967.149787][T13692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.167757][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3570'. [ 967.256114][T14108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3570'. [ 967.331082][T14108] netlink: 'syz.4.3570': attribute type 7 has an invalid length. [ 968.151897][T14117] loop6: detected capacity change from 0 to 512 [ 968.370208][T14117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.050040][T13692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.316894][T14164] loop5: detected capacity change from 0 to 64 [ 971.498814][ T29] audit: type=1800 audit(1772511548.364:99): pid=14164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3591" name="file1" dev="loop5" ino=22 res=0 errno=0 [ 972.219784][T14172] can0: slcan on ttyS3. [ 972.333931][T14176] loop3: detected capacity change from 0 to 512 [ 972.450412][T14176] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 972.477890][T14170] can0 (unregistered): slcan off ttyS3. [ 972.556789][T14176] EXT4-fs (loop3): 1 truncate cleaned up [ 972.595269][T14181] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3596'. [ 972.680146][T14176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.008080][T14176] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 973.449872][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.731712][T14192] tipc: MTU too low for tipc bearer [ 974.616675][T14203] [U] V3Fپ"S/4:XTZWTLW= [ 974.720431][T14203] [U] J"E:" [ 974.724217][T14203] [U] [ 974.820902][T14206] netlink: 'syz.6.3606': attribute type 2 has an invalid length. [ 974.895057][ T29] audit: type=1326 audit(1772511551.754:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f6c code=0x7ffc0000 [ 975.048450][ T29] audit: type=1326 audit(1772511551.804:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f6c code=0x7ffc0000 [ 975.164952][ T29] audit: type=1326 audit(1772511551.804:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f6c code=0x7ffc0000 [ 975.278843][ T29] audit: type=1326 audit(1772511551.824:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f83f6c code=0x7ffc0000 [ 975.445436][ T29] audit: type=1326 audit(1772511551.824:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f6c code=0x7ffc0000 [ 975.594961][ T29] audit: type=1326 audit(1772511551.824:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f6c code=0x7ffc0000 [ 975.734628][ T29] audit: type=1326 audit(1772511551.824:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f6c code=0x7ffc0000 [ 975.868838][ T29] audit: type=1326 audit(1772511551.824:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=334 compat=1 ip=0xf7f83f6c code=0x7ffc0000 [ 976.000160][ T29] audit: type=1326 audit(1772511551.824:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f6c code=0x7ffc0000 [ 976.425112][T14216] loop4: detected capacity change from 0 to 4096 [ 976.516848][T14216] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 977.071305][T14231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3616'. [ 977.075305][T14216] ntfs3(loop4): Failed to load $Extend (-22). [ 977.075423][T14216] ntfs3(loop4): Failed to initialize $Extend. [ 977.104828][T14233] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 978.771169][T14249] loop3: detected capacity change from 0 to 512 [ 978.870730][T14249] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 978.888514][T14249] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 978.889160][T14249] System zones: 1-12 [ 978.889932][T14249] EXT4-fs (loop3): orphan cleanup on readonly fs [ 978.904074][T14249] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3623: invalid indirect mapped block 2 (level 2) [ 978.904234][T14249] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 978.909411][T14249] EXT4-fs (loop3): Remounting filesystem read-only [ 978.909818][T14249] EXT4-fs (loop3): 1 truncate cleaned up [ 978.923413][T14249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 978.954216][T14249] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.3623: error -117 reading directory block [ 979.497240][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 979.767330][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3626'. [ 980.018414][T14262] loop5: detected capacity change from 0 to 256 [ 980.076965][T14262] exfat: Deprecated parameter 'namecase' [ 980.077305][T14262] exfat: Deprecated parameter 'utf8' [ 980.261937][T14262] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 980.722880][T14268] loop4: detected capacity change from 0 to 736 [ 982.842378][T14287] loop4: detected capacity change from 0 to 2048 [ 982.995275][T14287] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 983.884842][T14301] program syz.3.3641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 984.125425][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3643'. [ 984.248911][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3643'. [ 985.596917][T14321] binder: 14320:14321 ioctl c018620b 8001ed80 returned -14 [ 985.663387][T14324] netlink: 'syz.5.3650': attribute type 1 has an invalid length. [ 985.890423][T14325] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 986.227136][T14329] loop4: detected capacity change from 0 to 128 [ 986.333202][T14329] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 986.422847][T14329] hpfs: filesystem error: improperly stopped [ 986.464799][T14329] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 986.524993][T14329] hpfs: You really don't want any checks? You are crazy... [ 986.556592][T14329] hpfs: hpfs_map_sector(): read error [ 986.562239][T14329] hpfs: code page support is disabled [ 986.605275][T14329] hpfs: hpfs_map_4sectors(): unaligned read [ 986.639099][T14329] hpfs: hpfs_map_4sectors(): unaligned read [ 986.676261][T14329] hpfs: filesystem error: unable to find root dir [ 986.772942][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3656'. [ 986.782736][T14338] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3656'. [ 988.433591][T14355] loop6: detected capacity change from 0 to 2048 [ 988.604986][T14360] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 990.213092][T14370] loop4: detected capacity change from 0 to 4096 [ 990.335239][T14370] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 990.935541][T14370] ntfs3(loop4): ino=1a, mi_enum_attr [ 990.974104][T14370] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 991.137715][T14391] netlink: 'syz.5.3674': attribute type 1 has an invalid length. [ 992.270664][T14405] raw_sendmsg: syz.4.3679 forgot to set AF_INET. Fix it! [ 992.300503][T14407] loop5: detected capacity change from 0 to 256 [ 992.847727][T14409] loop6: detected capacity change from 0 to 256 [ 993.023251][T14409] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d) [ 995.414065][T14427] loop3: detected capacity change from 0 to 4096 [ 995.475616][T14427] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 995.768388][T14427] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 995.804701][T14427] ntfs3(loop3): ino=19, mi_enum_attr [ 996.379571][T14445] vlan2: entered promiscuous mode [ 996.406932][T14445] syz_tun: entered promiscuous mode [ 997.269613][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3703'. [ 997.899947][T14459] loop4: detected capacity change from 0 to 4096 [ 998.019544][T14467] loop5: detected capacity change from 0 to 128 [ 998.109819][T14467] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 998.241985][T14467] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 998.463065][T14469] sctp: [Deprecated]: syz.0.3709 (pid 14469) Use of int in max_burst socket option. [ 998.463065][T14469] Use struct sctp_assoc_value instead [ 998.804723][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 998.840983][T14459] ntfs3(loop4): ino=5, "/" indx_read_ra [ 998.865070][T14459] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 998.944971][T14459] ntfs3(loop4): ino=5, "/" ntfs_readdir [ 999.054997][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.102947][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.175264][ T10] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 999.208948][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.241830][ T10] usb 4-1: config 0 descriptor?? [ 999.981444][ T10] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -71 [ 1000.027605][ T10] usb 4-1: USB disconnect, device number 13 [ 1000.214810][T14481] loop4: detected capacity change from 0 to 256 [ 1000.516205][T14485] loop6: detected capacity change from 0 to 256 [ 1000.566843][T14485] exfat: Deprecated parameter 'namecase' [ 1000.760445][T14485] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1001.547477][T14483] loop5: detected capacity change from 0 to 8192 [ 1002.369807][T14497] loop3: detected capacity change from 0 to 256 [ 1002.775928][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.782615][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.858000][T14493] loop4: detected capacity change from 0 to 4096 [ 1004.376024][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3730'. [ 1004.430107][T14511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3730'. [ 1004.620056][T14516] loop3: detected capacity change from 0 to 512 [ 1004.775895][T14516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.974458][T14516] EXT4-fs warning (device loop3): ext4_begin_enable_verity:135: inode #15: comm syz.3.3731: verity is only allowed on extent-based files [ 1005.447222][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.669385][T14526] vlan2: entered promiscuous mode [ 1005.721948][T14526] syz_tun: entered promiscuous mode [ 1006.505628][T14522] loop4: detected capacity change from 0 to 8192 [ 1006.818057][T14534] loop3: detected capacity change from 0 to 128 [ 1006.915991][T14534] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1006.959820][T14534] hpfs: filesystem error: improperly stopped [ 1007.013948][T14534] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1007.044142][T14534] hpfs: You really don't want any checks? You are crazy... [ 1007.154690][T14534] hpfs: Code page index out of array [ 1007.160218][T14534] hpfs: code page support is disabled [ 1007.264982][T14534] hpfs: hpfs_map_4sectors(): unaligned read [ 1007.271317][T14534] hpfs: hpfs_map_4sectors(): unaligned read [ 1007.399973][T14534] hpfs: filesystem error: unable to find root dir [ 1008.542560][T14548] loop3: detected capacity change from 0 to 512 [ 1009.076209][T14555] UHID_CREATE from different security context by process 79 (syz.6.3750), this is not allowed. [ 1009.425038][T14557] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 1011.202407][T14580] netlink: 'syz.6.3762': attribute type 1 has an invalid length. [ 1012.860480][T14596] bond1: (slave bond_slave_1): Device is not bonding slave [ 1012.875616][T14596] bond1: option active_slave: invalid value (bond_slave_1) [ 1012.951715][T14596] bond1 (unregistering): Released all slaves [ 1014.504157][T14620] trusted_key: encrypted_key: key trusted:syz not found [ 1014.655157][T14625] sd 0:0:1:0: device reset [ 1015.465314][T14634] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3788'. [ 1015.517093][T14634] tipc: Started in network mode [ 1015.545604][T14634] tipc: Node identity fc0000005f003a000000000000000001, cluster identity 4711 [ 1015.577138][T14634] tipc: Enabling of bearer rejected, failed to enable media [ 1016.407331][T14646] option changes via remount are deprecated (pid=14645 comm=syz.3.3793) [ 1016.659592][T14643] loop5: detected capacity change from 0 to 4096 [ 1016.734567][T14643] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1016.964929][T14643] ntfs3(loop5): ino=1a, mi_enum_attr [ 1016.971672][T14643] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1017.576373][ T6359] ntfs3(loop5): ino=1e, ntfs3_write_inode failed, -22. [ 1019.483380][T14682] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1022.765485][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3828'. [ 1022.888723][T14725] loop6: detected capacity change from 0 to 128 [ 1022.918983][T14725] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1023.051522][T14725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1023.519194][T14727] bond2: (slave bond_slave_1): Device is not our slave [ 1023.575711][T14727] bond2: option active_slave: invalid value (bond_slave_1) [ 1023.671364][T14727] bond2 (unregistering): Released all slaves [ 1023.821204][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3834'. [ 1024.351938][T14740] loop3: detected capacity change from 0 to 1024 [ 1024.608873][T14744] loop6: detected capacity change from 0 to 256 [ 1024.618878][T14740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.658694][T14744] exfat: Deprecated parameter 'namecase' [ 1024.818202][T14744] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1024.840752][T14740] EXT4-fs warning (device loop3): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 1025.389940][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.974017][T14759] tipc: Started in network mode [ 1026.000730][T14759] tipc: Node identity ac141433, cluster identity 4711 [ 1026.096026][T14759] tipc: New replicast peer: 255.255.255.255 [ 1026.127406][T14759] tipc: Enabled bearer , priority 10 [ 1027.106496][T14773] loop6: detected capacity change from 0 to 128 [ 1027.238167][T13471] tipc: Node number set to 2886997043 [ 1027.267664][T14773] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1027.350035][T14773] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.877317][T13692] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1027.905550][T14782] macsec1: entered promiscuous mode [ 1027.925507][T14782] macsec1: entered allmulticast mode [ 1027.958171][T14782] ip6gretap0: entered allmulticast mode [ 1030.910269][T14814] loop4: detected capacity change from 0 to 2048 [ 1031.139635][T14814] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0003] [ 1031.176280][T14824] netlink: 'syz.6.3873': attribute type 2 has an invalid length. [ 1031.253786][T14814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.352154][T14814] EXT4-fs error (device loop4): ext4_ext_precache:648: inode #2: comm syz.4.3870: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1031.454062][T14814] EXT4-fs (loop4): Remounting filesystem read-only [ 1031.950847][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.258102][T14833] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3876'. [ 1034.627727][T14863] loop6: detected capacity change from 0 to 512 [ 1034.764994][T14863] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1034.916415][T14863] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3891: bg 0: block 248: padding at end of block bitmap is not set [ 1034.985412][T14863] loop6: lost filesystem error report for type 5 error -117 [ 1034.994449][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1035.008796][ C1] EXT4-fs (loop6): last error at time 1772511611: ext4_validate_block_bitmap:441 [ 1035.019056][T14863] __quota_error: 4 callbacks suppressed [ 1035.019135][T14863] Quota error (device loop6): write_blk: dquota write failed [ 1035.065609][T14863] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1035.115385][T14863] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.3891: Failed to acquire dquot type 1 [ 1035.169908][T14863] loop6: lost filesystem error report for type 5 error -117 [ 1035.182271][T14863] EXT4-fs (loop6): 1 truncate cleaned up [ 1035.223539][T14863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1035.405212][T14863] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 1035.466944][T14874] ===================================================== [ 1035.475176][T14874] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x4e4/0x3400 [ 1035.482920][T14874] _copy_to_iter+0x4e4/0x3400 [ 1035.487987][T14874] __skb_datagram_iter+0x18f/0x12b0 [ 1035.493533][T14874] skb_copy_datagram_iter+0x5b/0x240 [ 1035.499312][T14874] packet_recvmsg+0xe34/0x2510 [ 1035.504722][T14874] sock_recvmsg+0x2d9/0x380 [ 1035.509612][T14874] ____sys_recvmsg+0x193/0x620 [ 1035.514852][T14874] ___sys_recvmsg+0x20b/0x850 [ 1035.524451][T14874] __sys_recvmsg+0x1a7/0x300 [ 1035.529246][T14874] __ia32_compat_sys_recvmsg+0xa4/0x100 [ 1035.535296][T14874] ia32_sys_call+0xfce/0x4360 [ 1035.542798][T14874] __do_fast_syscall_32+0x17f/0x3f0 [ 1035.549365][T14874] do_fast_syscall_32+0x37/0x80 [ 1035.554583][T14874] do_SYSENTER_32+0x1f/0x30 [ 1035.559276][T14874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1035.568150][T14874] [ 1035.570586][T14874] Uninit was created at: [ 1035.575665][T14874] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 1035.581851][T14874] __alloc_skb+0x855/0x1190 [ 1035.586868][T14874] tipc_buf_acquire+0x4c/0x230 [ 1035.591949][T14874] tipc_disc_create+0x12f/0x870 [ 1035.597379][T14874] __tipc_nl_bearer_enable+0x1f61/0x2a00 [ 1035.603242][T14874] tipc_nl_bearer_enable+0x3d/0x70 [ 1035.608760][T14874] genl_family_rcv_msg_doit+0x338/0x3f0 [ 1035.614806][T14874] genl_rcv_msg+0xac5/0xc00 [ 1035.619561][T14874] netlink_rcv_skb+0x54d/0x680 [ 1035.624860][T14874] genl_rcv+0x41/0x60 [ 1035.629065][T14874] netlink_unicast+0xf04/0x12b0 [ 1035.634158][T14874] netlink_sendmsg+0x10b2/0x1250 [ 1035.639501][T14874] ____sys_sendmsg+0xfe7/0x1080 [ 1035.647361][T14874] ___sys_sendmsg+0x271/0x3b0 [ 1035.652297][T14874] __sys_sendmsg+0x1aa/0x300 [ 1035.658321][T14874] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1035.664140][T14874] ia32_sys_call+0x1e4a/0x4360 [ 1035.669206][T14874] __do_fast_syscall_32+0x17f/0x3f0 [ 1035.674823][T14874] do_fast_syscall_32+0x37/0x80 [ 1035.679883][T14874] do_SYSENTER_32+0x1f/0x30 [ 1035.684749][T14874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1035.691321][T14874] [ 1035.693740][T14874] Bytes 4-5 of 90 are uninitialized [ 1035.699281][T14874] Memory access of size 90 starts at ffff8881162abd24 [ 1035.706344][T14874] Data copied to user address 00000000800002ca [ 1035.712616][T14874] [ 1035.715382][T14874] CPU: 0 UID: 0 PID: 14874 Comm: syz.5.3895 Tainted: G L syzkaller #0 PREEMPT(full) [ 1035.726817][T14874] Tainted: [L]=SOFTLOCKUP [ 1035.731285][T14874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1035.741714][T14874] ===================================================== [ 1035.751758][T14874] Disabling lock debugging due to kernel taint [ 1035.858776][T14863] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1035.894795][T14874] Kernel panic - not syncing: kmsan.panic set ... [ 1035.901445][T14874] CPU: 0 UID: 0 PID: 14874 Comm: syz.5.3895 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1035.912634][T14874] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1035.918317][T14874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1035.928543][T14874] Call Trace: [ 1035.931956][T14874] [ 1035.935009][T14874] __dump_stack+0x26/0x30 [ 1035.939596][T14874] dump_stack_lvl+0x50/0x1c0 [ 1035.944418][T14874] ? dump_stack+0x12/0x25 [ 1035.948972][T14874] dump_stack+0x1e/0x25 [ 1035.953340][T14874] vpanic+0x7b4/0x1430 [ 1035.957666][T14874] panic+0x15d/0x160 [ 1035.961840][T14874] kmsan_report+0x31a/0x320 [ 1035.966611][T14874] ? kmsan_internal_check_memory+0x166/0x240 [ 1035.972840][T14874] ? kmsan_copy_to_user+0xef/0x190 [ 1035.978207][T14874] ? _copy_to_iter+0x4e4/0x3400 [ 1035.983243][T14874] ? __skb_datagram_iter+0x18f/0x12b0 [ 1035.988880][T14874] ? skb_copy_datagram_iter+0x5b/0x240 [ 1035.994605][T14874] ? packet_recvmsg+0xe34/0x2510 [ 1035.999768][T14874] ? sock_recvmsg+0x2d9/0x380 [ 1036.004702][T14874] ? ____sys_recvmsg+0x193/0x620 [ 1036.009838][T14874] ? ___sys_recvmsg+0x20b/0x850 [ 1036.014896][T14874] ? __sys_recvmsg+0x1a7/0x300 [ 1036.019856][T14874] ? __ia32_compat_sys_recvmsg+0xa4/0x100 [ 1036.025858][T14874] ? ia32_sys_call+0xfce/0x4360 [ 1036.030892][T14874] ? __do_fast_syscall_32+0x17f/0x3f0 [ 1036.036468][T14874] ? do_fast_syscall_32+0x37/0x80 [ 1036.041688][T14874] ? do_SYSENTER_32+0x1f/0x30 [ 1036.046566][T14874] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1036.053318][T14874] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1036.059907][T14874] ? kmsan_get_metadata+0xf1/0x160 [ 1036.065273][T14874] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1036.071352][T14874] ? finish_task_switch+0x145/0x8b0 [ 1036.076944][T14874] ? kmsan_get_metadata+0xf1/0x160 [ 1036.082317][T14874] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1036.088419][T14874] kmsan_internal_check_memory+0x166/0x240 [ 1036.094505][T14874] kmsan_copy_to_user+0xef/0x190 [ 1036.099694][T14874] _copy_to_iter+0x4e4/0x3400 [ 1036.104563][T14874] ? kmsan_get_metadata+0xf1/0x160 [ 1036.109949][T14874] ? kmsan_get_metadata+0xf1/0x160 [ 1036.115345][T14874] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1036.121511][T14874] __skb_datagram_iter+0x18f/0x12b0 [ 1036.126972][T14874] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1036.133283][T14874] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1036.139213][T14874] skb_copy_datagram_iter+0x5b/0x240 [ 1036.144828][T14874] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1036.150927][T14874] packet_recvmsg+0xe34/0x2510 [ 1036.155928][T14874] ? aa_sock_msg_perm+0x284/0x2e0 [ 1036.161381][T14874] ? __pfx_packet_recvmsg+0x10/0x10 [ 1036.166810][T14874] ? __pfx_packet_recvmsg+0x10/0x10 [ 1036.172233][T14874] sock_recvmsg+0x2d9/0x380 [ 1036.176945][T14874] ____sys_recvmsg+0x193/0x620 [ 1036.181886][T14874] ? import_iovec+0xaf/0xe0 [ 1036.186581][T14874] ? get_compat_msghdr+0x673/0x740 [ 1036.191949][T14874] ___sys_recvmsg+0x20b/0x850 [ 1036.196787][T14874] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1036.202852][T14874] ? __fget_files+0x3b4/0x4a0 [ 1036.207816][T14874] ? __fget_files+0x3b9/0x4a0 [ 1036.212679][T14874] ? kmsan_get_metadata+0xf1/0x160 [ 1036.218026][T14874] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1036.224082][T14874] __sys_recvmsg+0x1a7/0x300 [ 1036.228880][T14874] __ia32_compat_sys_recvmsg+0xa4/0x100 [ 1036.234672][T14874] ia32_sys_call+0xfce/0x4360 [ 1036.239523][T14874] __do_fast_syscall_32+0x17f/0x3f0 [ 1036.244911][T14874] do_fast_syscall_32+0x37/0x80 [ 1036.249932][T14874] do_SYSENTER_32+0x1f/0x30 [ 1036.254600][T14874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1036.261160][T14874] RIP: 0023:0xf7f72f6c [ 1036.265388][T14874] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1036.285213][T14874] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 1036.293814][T14874] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1036.301929][T14874] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1036.310036][T14874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1036.318134][T14874] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1036.326271][T14874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1036.334415][T14874] [ 1036.338182][T14874] Kernel Offset: disabled [ 1036.342581][T14874] Rebooting in 86400 seconds..