last executing test programs: 13m28.244115476s ago: executing program 0 (id=1249): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0x42, 0x4, 0x400, 0xffffffff, 0x0, 0x188, 0x98, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0xffffff00, 'veth1_macvtap\x00', 'veth0_macvtap\x00', {}, {}, 0x89}, 0x0, 0x90, 0xf0, 0x0, {0x60010000}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0xffff, 0x0, 0x0, 0x1c, 0x0, 0x2f, 0x0, 0x0, 0x1f, 0x2, 0x0, 0x0, 0x0, 0xfffc, 0x100]}}}, {{@uncond, 0x0, 0xb8, 0x1e0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x675, 0x6, 0xfffffffffffffff3, 0xa8, 0x3ff, 0x3a, 0x5d4b}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffff8001, 'system_u:object_r:tzdata_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 13m27.23838755s ago: executing program 0 (id=1254): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x19) 13m26.263531954s ago: executing program 0 (id=1260): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x5}, 0x20) 13m24.892651755s ago: executing program 0 (id=1268): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@type={'type', 0x3d, "2bbe4f3d"}}, {@part={'part', 0x3d, 0x9}}, {@codepage={'codepage', 0x3d, 'cp869'}}, {}, {@uid}, {@part={'part', 0x3d, 0x2}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$eJzs3c1O1EAAB/D/tPspBCtgMN5ETTyRBQ8aY6Ix3HwBD4aIUBJCxQQwUaIBPXgyxpuJiUdvno2+gl6ML6AnDsSTXggx1Mx0uu2Wme4uHwXC/5ewdNv5nnY6g+4WRHRs3Rr/+eHymvwRZQAugGuAA6AGlACcxlDt0fzS7FLgT+cl5KoY8kcgiim2hZma901RZTwVQ/PkuxJ60/tof4RhGP5qG+pPIWWhgyOia38bB6jqq1MdrxVesh1Z7SBAtZiiHCKpHhYb2DD3OBERHSf6/u/ou0Svnr87DnBRz8OP0v0/ll5BtNztNoCnJ4svz6Gh7v+Pk94MhWwf1SIiWe+pJZxsQydeJZrSUqmUMzvDpLkriM6slg4QhlVly4xMlcWpz8wG/siqSuAFbmipYIPqdTo6dWO20laiX8OGtWmOvLrn61F1KMs6lC3lH+g6xy/reGvObuJbpX2ZxFfxXUwID+8wjT69sxQK2TgqugfU9e64TWcDv2FPUdXSU7VstNQyufpOqUzOxj3w+WNSy7qtXWtwZVlMZCoiO3/XJQDeWFpB7e5vHRR074zaa6diDRhjjTXfbxpjDWZj1WfKgT8y9TCITvpwxZ7tXjDO78VrcUcM4zc+YbzZ/7KrXTnUW67M7MgvVMioFRrN+piUVEhLP7ZQJ9uDrq5Mwua/MKLfZ8dhMw+vcB9X0bf4ZHluMgj8hcI25GhhPBRfKgWXx7YRnYj6dJR75O9UGNTkhmzuPct0KwxD46GSucXiDaejLCpxUW1ljk6dK++bVVbDrP5Tyu4qiNWoDVOHbtoDJ8OmqrvWZaYq+kozlrxbdBP9b5S77HdjGJGUcKGyvydknNVkEJxpdpyLakdXSn0Hmd5+NjcZ7HhEoiNk8eU5PeZg6O769YMuDhVPzrtEtP5LrVcaatSRL17OaiRsl3gqxVHLCqhfvZ5IVhtC//0+Z83VY1/B9cQbgT+Wt+Y6fwm4kNopc3MQ5/g8m6yHeLJ+CP9VsmoqVj27Yzm1LcbxA/dS838iIiIiIiIiIiIiIiIiIiIiIiIiIjoSkv/07+3y4wRb+nNI5k9iJNaO4RdvEBERERERERERERERERERERERERERERHtTur5v4CrnhhT2fPn/8Zf7N3p83/dDp7/K9o+4pOI2vgfAAD//xhyY3Q=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 13m23.897490852s ago: executing program 0 (id=1274): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, 0x0, 0x0) 13m23.183692219s ago: executing program 0 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}}, 0x0) 13m21.010273439s ago: executing program 32 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}}, 0x0) 11m32.290396828s ago: executing program 3 (id=1829): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getpgrp(0x0) 11m31.508099566s ago: executing program 3 (id=1834): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000003300010026bd7000fcdbde250400"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 11m30.752215876s ago: executing program 3 (id=1839): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x141400) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) 11m30.085875939s ago: executing program 3 (id=1842): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x800800, &(0x7f0000000740)={[{@errors_remount}, {@discard}, {@dmask={'dmask', 0x3d, 0x2}}, {@errors_continue}, {@errors_remount}, {@keep_last_dots}, {@gid}, {@gid={'gid', 0x3d, 0xee01}}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}]}, 0x1, 0x152a, &(0x7f0000002900)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JSZMcSUgMuSUNSch1SC5DSC4Tk8b9fr8kJEmTJCG5Jev/Ef7qVL/T+Z1+x/mceb6fz/5Yz6z9rP287/Ne9t6YbzoOqtageuV6RAT/ErzwRxIAxAJAPwC4BgACACgdVzru/Hx2iUn/2kHYX+vh1CtdAbuSuP9ZG/c/a+P+Z23c/6yN+5+1cf+zNu5/1sb9Zywr2zg1/7W8Zd2N7///96vzhzP8/f9fJLPE6C9Wl7i+E0DMn03h/mdt3P//WsGf2Yn7n7Vx/7Oq2CtdAPsPwO//rCDbH85w/7M27j9jWdmVvv98pTeIZO3n4Eq//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ2n/GUKAC6Nr3RdjDHGGGOMMcYY++v4bFe6AsYYY4wxxhhjjP3fQxAgQUEAMZANYiE75AABAFdDLrgGInAtxMF1kBuuhzyQF/JBfoiHAlAQNBiwQBBCISgMUbgBisCNUBRugmJQHByUgAS4GUrCLVAKboXScBuUgduhLJSD8lAB7oCKcCdUgrugMtwNVaAqVIPqcA/UgHuhJtwHteB+qA0PQB14EOrCQ1APHob68Ag0gEehITwGjaAxNIGm0Ox/lf8idIWXoBt0hyToAT3hZegFvaEP9IV+8Ar0h1dhALwGyTAQBsHrMBjegCHwJgyFYTAc3oIRMBJGwWgYA2MhBcbBeHgbJsA7MBEmwWSYAqkwFabBuzAdZsBMeA9mwfswG+bAXJgHafABzIcFkA4fwkL4CDJgESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/ZP7Jv8vvhICAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2IxLIYOHSZgApbEW7AUlsLSWBrLYBksi+WwHFbAClgRK2IlrISVsTJWwSpYDavhPXgP9sCaWBNrYS2sjbUv3Z7CelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBREzEttgW22E7bI/tsQN2wI7YETthZ+yc+WI2wJfwJeyOVUQP7Ik9sRcmZ+uDfbEvvoL98VV8FV/DZByIg/B1fB3fwCF4AofiMByOw7GiGImjcDSSGIspmILjcTxOwAk4ESfhJJyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4f/1X9j29alQziPCWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARxgCAiIqoKCKKiKKiqCgmigknnEgQCaKkKClKiVKitLhNlBG3i7KinGjpKogKoqJo5SqJu0RlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXEg6Ku6IF98GFxvjMNxEBsKAZhI9FYyIufYM3FEGwhWopW4kkxDIdiG9HcJYpnRFsxCtuJv4nR+JzoIMZiR/GC6CQ6iy7iRdFVtHDdRHcxEXuInmIK9hK9RR/RV0zHquI9nJW9mnhNJIuBYpB4XczDN8QQ8aYYKoaJ4eItMUKMFKPEaDFGjBUpYpwYL94WE8Q7YqKYJCaLKSJVTBXTxLtiupghZor3xCzxvpgt5oi5Yp5IEx+I+WKBSBcfioXiI5EhFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iY7FDfCJ2il1it/hU7BGfib3ic7FPfCH2iy9FpvhKHBBfi4PiG3FIfCsOi+/EEXFUHBPfi+PiB3FCnBSnxGlxRvwozoqfxDnhBUiUQkqpZCBjZDYZK7PLHPIqmVMGF5/da2WcvE7mltfLPDKvzCfzy3hZQBaUWhppJclQFpKFZVTeIIvIG2VReZMsJotLJ0vIBHmzLClvkaXkrbK0vE2WkbfLsrKcLC8ryDtkRXmnhMiFY1SRVWU1WV3eI5PgXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlonxGtpX+4kvkOdlBPi87yhdkJ9lZdpE/yXPSy26yu4QeIHvKl2Uv2Vv2kX1lP/mK7C9flQPkazJZDpSD5OtysHxDDpFvyqFymBwu35Ij5Eg5So6WY+RYmSLHyfHybTlBviMnyklyspwiU+VU2efiSjOl/If5b/9O/oCfj75BbpSb5Ga5RW6V2+R2+bHcIXfInXKn3C13yz1yj9wr98p9cp/cL/fLTJkpD8gD8qA8KA/JQ/KwPCyPyKPytPxeHpc/yBPypDwpT8sz8ow8e/E5AIVKKKmUClSMyqZiVXaVQ12lcqqrVS51jYqoa1Wcuk7lVterPCqvyqfyq3hVQBVUWhllFalQFVKFVVTdgBdfMKqYKq6cKqES1M3/TL4qom5URdVNv8q/VF/SH9TXTDVTzVVz1UK1UK1UK9VatVZtVBuVqBJVW9VWtVPtVHvVXnVQHVRH1VF1Up1UF9VFdVVdVTfVTSWpJNVTvax6qd6qj+qr+qlXVH/VXw1QA1SySlaD1CA1WA1WQ9QQNVQNVcPVcDVCjVCj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfpat0tVAtVBlqkVqklqglaplaplaoFWqVWqXWqDVqnVqnMtRGtVFtVpvVVrVVbVfb1Q61Q+1UO9VutVvtUXvUXrVX7VP71H61X2WqTHVAHVAH1UF1SB1Sh9VhdUQdUcfUMXVcHVcn1Al1Sp1SZ9QZdVadVefUufOnfYEIRKACFcQEMUFsEBvkCHIEOYOcQa4gVxAJIkFcEBfkDq4P8gR5g3xB/iA+KBAUDHRgAhuIi02PBjcERYIbg6LBTUGxoHjgghJBQnBzUDK4JSgV3BqUDm4LygS3B2WDckH5oEJwR1AxuDOoFNwVVA7uDqoEVYNqQfXgnqBGcG9QM7gvqBXcH9QOHgjqBA8GdYOHgnrBw0H94JGgQfBo0DB4LGgUNA6aBE2DZn/p+t6fyPuE66a76yTdQ/fUL+teurfuo/vqfvoV3V+/qgfo13SyHqgH6df1YP2GHqLf1EP1MD1cv6VH6JF6lB6tx+ixOkWP0+P123qCfkdP1JP0ZD1Fp+qpepp+V0/XM/RM/Z6epd/Xs/UcPVfP02n6Az1fL9Dp+kO9UH+kM/QivVgv0Uv1Mr1cr9Ar9Sq9Wq/Ra/U6vV5v0Bv1Jr1Zb9Fb9Ta9XX+sd+hP9E69S+/Wn+o9+jO9V3+u9+kv9H79pc7UX+kD+mt9UH+jD+lv9WH9nT6ij+pj+nt9XP+gT+iT+pQ+rc/oH/VZ/ZM+p/35k/vzX+9GGWViTIyJNbEmh8lhcpqcJpfJZSImYuJMnMltcps8Jo/JZ/KZeBNvCpqC5jwyZAqZQiZqoqaIKWKKmqKmmClmnHEmwSSYkqakKWVKmdKmtCljypiypqwpb8qbO8wd5k5zp7nL3GXuNnebqqaqqW6qmxqmhqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWKamGammWlumpsWpoVpZVqZ1qa1aWPamESTaNqatqadaWfam/amg+lgOpqOppPpZLqYLqar6Wq6mW4mySSZnqan6WV6mT6mj+ln+pn+pr8ZYAaYZJNsBplBZrAZbIaYIWaoGWaGnz9RNSPNKDPajDFjTYpJMePNeDPBTDATzUQz2Uw2qSbVTDPTzHQz3cw0M80sM8vMNrPNXDPXpJk0M9/MN+km3Sw0C02GyTCLzWKz1Cw1y81ys9KsNKvNarMW1pr1Zr3ZaDaazWaz2Wq2mu1mu9lhdpidZqfZbXabPWaP2Wv2mn1mn9lv9ptMk2kOmAPmoDloDplD5rA5bI6YI+aYOWaOm+PmhDlhTplT5ozJe/H70ptYm93msFfZnPZqm8teY/8+zmfz23hbwBa02uaxeX8VG2ttUXuTLWaLW2dL2AR782/isracLW8r2DtsRXunrfSbuIa919a099la9n5b3d7zq7i2fcDWsY/auogAtrGtb5vaBvZR29A+ZhvZxraJbWpb26dsG/u0TbTP2Lb22d/E8+0Cu9KusqvtGrvT7rKn7Gl70H5jz9gfbTfb3fazr9j+9lU7wL5mk+3A38TD7Vt2hB1pR9nRdowd+5t4sp1iU+1UO82+a6fbGb+J0+wHdpZNt7PtHDvXzvs5Pl9Tuv3QLrQf2QwbwGK7xC61y+xyu+L/17rErrPr7Qa7w35iN9stdqvdZrdfOhG2u+xu+6ndYz+zB+zXdp/9wu63h2ym/ern+PzjO2S/tYftd/aIPWqP2e/tcfuD+jl3ZC8A+6P93v5kz1lvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCXyitGxclRCUqgm6kk3UKl6FYqTbdRGbqdylI5Kk8V6A6qSHdSJbqLKtPdVIWqUjWqTvdQDbqXatJ9VIvup9r0ANWhB6kuPUT16GGqT49QA3qUGtJj1IgaUxNqSs3ocWpOT1ALakmt6ElqTU9RG3qaEukZakvPUjv6G7Wn56gDPU8d6QXqRJ2pC71IXekl6kbdKYl6UE96mXpRb+pDfakfvUL96VUaQK9RMg2kQfQ6DaY3aAi9SUNpGA2nt2gEjaRRNJrG0FhKoXE0nt6mCfQOTaRJNJmmUCpNpWn0Lk2nGTST3qNZ9D7Npjk0l+ZRGn1A82kBpdOHtJA+ogxaRItpCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ0+ph30Ce2kXbSbPqU99Bntpc9pH31B++lLyqSv6AB9TQfpGzpE3/ru9B0doaN0jL6n4/QDnaCTdIpO0xn6kc7ST3SOPEGIoQhlqMIgjAmzhbFh9jBHeFWYM7w6zBVeE0bCa8O48Lowd3h9mCfMG+YL84fxYYGwYKhDE9qQwjAsFBYOo+ENYZHwxrBoiGGxsHjowhJhQnhzWDK8JSwV3hqWDm8Ly4S3h2XDcuGj91cI7wgrhneGlcK7wsrh3WGVsGpYLawe3hPWCO8Na4b3hbXC+8NS4QNhnfDBsG74UFgvfDisHz4SNggfDRuGj4WNwsZhk7Bp2Cx8PGwePhG2CFuGrcInw9bhU2Gb8OkwMXwmbBs++/P8Awv+eD4p7BH2DF8OXw69v0/Ojc6LpkU/iM6PLoimRz+MLox+FM2ILoouji6JLo0uiy6ProiujK6Kro6uia6Nrouuj26Iel89Gzh0wkmnXOBiXDYX67K7HO4ql9Nd7XK5a1zEXevi3HUut7ve5XF5XT6X38W7Aq6g084468iFrpAr7KLuBlfE3eiKuptcMVfcOVfCJbimrplr5pq7J1wL19K1ck+6J91T7in3tHvaPePaumddO/c319495zq4593z7gXXyXV2XdyLrqsbl+vCezLJ9XQ9XS/Xy/VxfVw/18/1d/3dADfAJbtkN8gNcoPdYDfEDXFD3VA33A13I9wIN8qNcmPcGJfiUtx4N95NcBPcRDfRTXaTXapLddPcNDfdTXcVZ1w4ymw32811c12aS3Pz3flzxnS30C10GS7DLXaL3VK31C13y91Kt9KtdqvdWrfWrXfr3Ua30W12m91Wt9Vtd9vdDrfD7fTXXFjU7XF73V63z+1z+92XLtN95Q64r91B94075L51h9137og76o65791x94M74U66U+60O+N+dGfdT+6c8y4lMi4yPvJ2ZELkncjEyKTI5MiUSGpkamRa5N3I9MiMyMzIe5FZkfcjsyNzInMj8yJpkQ8i8yMLIumRDyMLIx9FMiKLIosjSyJLI8si3hfYHPpCvrCP+ht8EX+jL+pv8sV8ce98CZ/gb/Yl/S2+lL/Vl/a3+TL+dl/Wl/Pl/WO+kW/sm/imvpl/3Df3T/gWvqVv5Z/0rf1Tvo1/2if6Z3xb/6xv5//m2/vnfAf/vO/oX/CdfGffxb/ou/qXfDff3Sf5Hr6nf9n38r19H9/X9/Ov+P7+VT/Av+aT/UA/yL/uB/s3/BD/ph/qh/nhMW/5EZcukWGsT/Hj/Hj/tp/g3/ET/SQ/2U/xqX6qn+bf9dP9DD/Tv+dn+ff9bD/Hz/XzfJr/wM/3C3y6/9Av9B/5DL/o0k1lv9yv8Cv9Kr/ar/Fr/Tq/3m/wG/0mv9lv8Vv9Nr/df+x3+E/8Tr/L7/af+j3+M7/Xf+73+S/8fv+lz/Rf+QP+a3/Qf+MP+W/9Yf+dP+KP+mP+e3/c/+BP+JP+lD/tz/gf/Vn/kz/H/2eNMcYYY+xPGXd5KH49c+F2fo/fyRG/2LknAFy9JX/mL+fPn1GuzXNh3FvEt44AwDPdOz58aatSJSkp6eK+GRKCwnMALv1N0HkxcDleBK3gKUiEllDyd+vvLTqfoX+wfvQ2gBy/yImFy/Hl9T8HwKTfWf/xJ4fPLxOeivsf1p8DULTw5ZzscDleBK1+vr/SEkr9Qf15m/+y/tjfrp/9ixSAFr/IyQmX48v1J8AT8Cwk/mpPxhhjjDHGGGPsgt6ifPtL15+X/sXn712fx6vLOdngcvyPrs8ZY4wxxhhjjDF25T3XucvTjycmtmz/zw8q/a+y/vSgIfxfrcyD3x14D3DpJwoA/sUFAc4P5L/zUWz6txwr+eJb5++nlp72AfxntPKvGFzhDybGGGOMMcbYX+7ySf+vf66uVEGMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlgW9O/4dWJX+jEyxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9r/CwAA///UxgMC") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 11m28.785091443s ago: executing program 3 (id=1851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000065c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c000080090003400000000020000b801c0001800a0001"], 0xe0}}, 0x0) 11m27.718163893s ago: executing program 3 (id=1857): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040008800c0001800600060080350000"], 0x34}}, 0xc000) 11m25.418688254s ago: executing program 33 (id=1857): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040008800c0001800600060080350000"], 0x34}}, 0xc000) 2m39.885135702s ago: executing program 6 (id=4714): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x0, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0xe, 0xfffffc02, 0xfffffffb, 0x8, 0x4, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x1002ca, 0x5, 0x76, 0xc, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x6, 0x7fff, 0x4000000, 0x7, 0x60, 0xe, 0x7, 0x1, 0x2001, 0x7, 0xf, 0x7, 0x10001, 0x9, 0x5, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x5, 0x80000001, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0xfffffffd, 0x6], [0xffffffd2, 0x7ffffffe, 0xfffc, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x804, 0x6c368000, 0x4, 0x7, 0x0, 0xe, 0x5, 0x8, 0x8001, 0x4, 0x7fff, 0x7, 0x0, 0x484f, 0x4, 0x3, 0x8, 0x40, 0xc0c, 0x80000001, 0x3, 0x9, 0x7, 0x7, 0xf, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x0, 0x1, 0x6, 0x1, 0x0, 0x206, 0x8, 0x8, 0x6, 0x68], [0x3, 0x201, 0x0, 0xfffffffc, 0x4000, 0x7fff, 0x401, 0xfffffff7, 0x2, 0x1000, 0x7, 0x2, 0xd, 0x7, 0x6, 0xe, 0x5, 0x4, 0x5, 0x5, 0x0, 0x30000000, 0x644, 0x2, 0x7, 0x8000, 0x5, 0x1ff, 0x7fb, 0xd, 0x400, 0xd, 0x41, 0x2c000, 0xc99, 0x25a, 0x2, 0x0, 0x4, 0x5d9fffa, 0x3ff, 0x1ff, 0x40, 0xb, 0x10000, 0xe7, 0x200, 0x7af5, 0x210, 0xb, 0x0, 0xfffd, 0x7, 0x0, 0x2, 0x81, 0x800, 0x2, 0x7, 0x10100, 0x8, 0x0, 0x6, 0x1], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62e, 0x4, 0x8, 0x2, 0x5, 0x8, 0x8, 0x8000, 0x8, 0x5, 0x80000800, 0x5, 0x3, 0x200, 0xfff, 0x3, 0x1, 0xfffffff3, 0x7, 0x8000006, 0xe6, 0xffffffff, 0x1, 0x2, 0x7, 0x1, 0x7, 0x9, 0x8, 0x0, 0xf, 0x9, 0x17ce, 0x1000, 0x3, 0x6fe, 0xe, 0xd1, 0x13a, 0x7, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x5, 0x1, 0x3, 0xf, 0x100, 0xf30b, 0x8, 0x6, 0xff, 0x1, 0xc, 0x2]}, 0x45c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) 2m38.806305604s ago: executing program 6 (id=4718): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000810) 2m37.575879389s ago: executing program 6 (id=4722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m35.700578301s ago: executing program 6 (id=4731): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@allow_utime}, {@gid}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {}, {@gid}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@keep_last_dots}, {@keep_last_dots}]}, 0x1, 0x152d, &(0x7f00000034c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m33.796538722s ago: executing program 6 (id=4736): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@fadd={0x58, 0x114, 0x6, {{0x81, 0xdc2}, 0x0, 0x0, 0xdf85b17, 0x8, 0x20b8a8, 0x8000000000000000, 0x4, 0x2}}, @zcopy_cookie={0x18}], 0x70}, 0x0) 2m31.872057071s ago: executing program 6 (id=4742): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000240)=0x2, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) 2m27.701658665s ago: executing program 34 (id=4742): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000240)=0x2, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) 12.420312143s ago: executing program 2 (id=5114): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 10.511523262s ago: executing program 2 (id=5119): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x1e8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x200000, 0x7) fcntl$getownex(r0, 0x10, 0x0) 10.235971515s ago: executing program 5 (id=5120): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/65, 0x41}, {&(0x7f0000000100)=""/121, 0x79}, {&(0x7f0000000180)=""/68, 0x44}], 0x9}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000010b, 0x2100, 0x0) 9.148952437s ago: executing program 2 (id=5124): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0xcd, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0}) 8.769874778s ago: executing program 1 (id=5125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2a00802, &(0x7f0000005f00)=ANY=[@ANYBLOB='acl,version_upgrade=incompatible,norecovery,fix_errors=no,journal_flush_disabled,inodes_use_key_cache,journal_transaction_names,inline_data,norecovery,fsck,fowner<', @ANYRESDEC=0x0, @ANYRESOCT], 0x1, 0x5972, &(0x7f0000006000)="$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") 8.466664348s ago: executing program 5 (id=5126): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x40000000, 0x40000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000001c0)={r1, 0x0, 0x0}) 8.415778184s ago: executing program 4 (id=5127): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181004000000000000000000000000e000a000d00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000000)=0x100005) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) 8.202801969s ago: executing program 7 (id=5128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 7.051050743s ago: executing program 4 (id=5129): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=']) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) 6.524106652s ago: executing program 5 (id=5130): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "ea4f029d"}]}}, 0x0}, 0x0) 6.365347189s ago: executing program 1 (id=5131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000210a010200000000000000000200ffff0900010073797a31"], 0x20}}, 0x0) 6.204274089s ago: executing program 7 (id=5132): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x586, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x16df9, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c40)=[{0x0, 0x3, 0x7, 0xb}], 0x10, 0x7fffffff}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r0, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0) 5.663703631s ago: executing program 2 (id=5133): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) 5.109461903s ago: executing program 4 (id=5134): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000020c0)='./file1\x00', 0x10400, &(0x7f00000001c0)={[{@barrier}, {@gid}, {@barrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {@force}, {@nls={'nls', 0x3d, 'cp1255'}}, {}]}, 0x1, 0x6e4, &(0x7f0000000240)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) llistxattr(&(0x7f0000001180)='./file1\x00', 0x0, 0x0) 4.967541494s ago: executing program 1 (id=5135): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x80000000) 4.076144674s ago: executing program 7 (id=5136): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x6, 0xf7, &(0x7f0000000040)=""/247}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) 3.291935061s ago: executing program 1 (id=5137): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="0209fd020b00000028bd7000fbdbdf2709001800"], 0x58}}, 0x44804) 2.750090556s ago: executing program 5 (id=5138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000024) 2.630378957s ago: executing program 4 (id=5139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r1, 0x1, 0x0, 0x0, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) 2.627425026s ago: executing program 7 (id=5140): syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/user\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.271349094s ago: executing program 2 (id=5141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000100)="83", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) 1.758739194s ago: executing program 1 (id=5142): mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 1.462772612s ago: executing program 5 (id=5143): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) tee(r1, r0, 0xa000000000000000, 0x0) 1.303861798s ago: executing program 4 (id=5144): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x820061, &(0x7f0000000400)=ANY=[@ANYBLOB="6e725f696e6f6465733da2"]) 1.177594687s ago: executing program 7 (id=5145): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 1.004342883s ago: executing program 2 (id=5146): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') exit(0xa1) read$FUSE(r0, 0x0, 0x0) 451.500809ms ago: executing program 1 (id=5147): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0xfffffffffffffffd}]) 137.413193ms ago: executing program 7 (id=5148): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 34.105156ms ago: executing program 5 (id=5149): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x5, 0xf7, &(0x7f00000007c0)=""/247, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe1}, 0x94) 0s ago: executing program 4 (id=5150): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000001000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) kernel console output (not intermixed with test programs): ig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c0d8e929 code=0x7ffc0000 [ 955.176855][ T30] audit: type=1326 audit(955.095:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fd0c0d8e929 code=0x7ffc0000 [ 955.608989][ T30] audit: type=1326 audit(955.595:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c0d8e929 code=0x7ffc0000 [ 955.659135][T14756] syz.2.3795: attempt to access beyond end of device [ 955.659135][T14756] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 955.672693][T14756] MINIX-fs: unable to read superblock [ 956.010987][T14761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3796'. [ 957.236619][T14780] loop5: detected capacity change from 0 to 64 [ 957.745783][T14784] loop4: detected capacity change from 0 to 1024 [ 959.036958][T14799] loop2: detected capacity change from 0 to 1024 [ 959.091934][T14799] EXT4-fs: Ignoring removed nomblk_io_submit option [ 959.180973][T14799] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 959.341548][T14799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.707352][T14811] IPVS: length: 138 != 8 [ 959.917058][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.552670][T14823] loop1: detected capacity change from 0 to 64 [ 961.163562][T14830] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3828'. [ 961.710126][T14835] loop4: detected capacity change from 0 to 8 [ 961.883856][T14841] kAFS: unparsable volume name [ 961.906559][T14835] SQUASHFS error: lzo decompression failed, data probably corrupt [ 961.914731][T14835] SQUASHFS error: Failed to read block 0x1c0: -5 [ 961.921693][T14835] SQUASHFS error: Unable to read metadata cache entry [1be] [ 963.534323][T14862] loop2: detected capacity change from 0 to 256 [ 963.959542][T14862] FAT-fs (loop2): Directory bread(block 64) failed [ 963.966937][T14862] FAT-fs (loop2): Directory bread(block 65) failed [ 963.974023][T14862] FAT-fs (loop2): Directory bread(block 66) failed [ 963.981372][T14862] FAT-fs (loop2): Directory bread(block 67) failed [ 963.988513][T14862] FAT-fs (loop2): Directory bread(block 68) failed [ 963.995496][T14862] FAT-fs (loop2): Directory bread(block 69) failed [ 964.002459][T14862] FAT-fs (loop2): Directory bread(block 70) failed [ 964.011807][T14862] FAT-fs (loop2): Directory bread(block 71) failed [ 964.019695][T14862] FAT-fs (loop2): Directory bread(block 72) failed [ 964.026728][T14862] FAT-fs (loop2): Directory bread(block 73) failed [ 965.633643][T14886] loop6: detected capacity change from 0 to 64 [ 966.192124][T14892] loop2: detected capacity change from 0 to 2048 [ 966.336787][T14892] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 966.889006][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 966.896427][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.290289][T14908] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 967.404552][T14910] loop4: detected capacity change from 0 to 256 [ 969.451567][T14941] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 969.460393][T14941] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 970.526345][T14956] netlink: 'syz.5.3888': attribute type 75 has an invalid length. [ 970.746945][T14962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3890'. [ 970.756839][T14962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3890'. [ 971.882105][T14972] loop6: detected capacity change from 0 to 2048 [ 972.029157][T14972] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 972.107701][T14972] syz.6.3895: attempt to access beyond end of device [ 972.107701][T14972] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 972.124585][T14977] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 972.379476][T14972] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 16777227 [ 972.388436][T14972] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=16) [ 972.453911][T14972] Remounting filesystem read-only [ 972.459611][T14972] NILFS (loop6): error -5 truncating bmap (ino=16) [ 973.130519][T10295] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 973.386542][T14988] openvswitch: netlink: Key type 30 is not supported [ 974.937362][T15006] No such timeout policy "syz1" [ 975.569298][T15016] loop2: detected capacity change from 0 to 256 [ 976.473287][T15029] IPv6: NLM_F_CREATE should be specified when creating new route [ 977.366251][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 977.571606][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 977.594485][ T9] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 977.603216][ T9] usb 3-1: config 0 has no interface number 0 [ 977.610110][ T9] usb 3-1: config 0 interface 213 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 977.621862][ T9] usb 3-1: config 0 interface 213 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 977.783451][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice=c5.ad [ 977.793137][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.801685][ T9] usb 3-1: Product: syz [ 977.806312][ T9] usb 3-1: Manufacturer: syz [ 977.811166][ T9] usb 3-1: SerialNumber: syz [ 978.002899][ T9] usb 3-1: config 0 descriptor?? [ 978.011705][T15039] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 978.317581][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 978.575964][ T9] usb 3-1: USB disconnect, device number 18 [ 978.739715][T15054] loop4: detected capacity change from 0 to 512 [ 978.830063][T15054] EXT4-fs: Ignoring removed i_version option [ 978.836850][T15054] EXT4-fs: Ignoring removed mblk_io_submit option [ 978.947606][T15054] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.3935: inode #13: comm syz.4.3935: iget: illegal inode # [ 978.996188][T15054] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3935: couldn't read orphan inode 13 (err -117) [ 979.105280][T15054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 979.138809][ T6133] udevd[6133]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.213/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.301830][T15054] EXT4-fs error (device loop4): ext4_resize_begin:60: comm syz.4.3935: resize_inode disabled but reserved GDT blocks non-zero [ 979.914450][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.524933][T15077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3943'. [ 980.536562][T15077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3943'. [ 980.575882][ T30] audit: type=1326 audit(980.555:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.2.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff243d8e929 code=0x7ffc0000 [ 980.600060][ T30] audit: type=1326 audit(980.575:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.2.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff243d8e929 code=0x7ffc0000 [ 980.622986][ T30] audit: type=1326 audit(980.585:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.2.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff243d8e929 code=0x7ffc0000 [ 980.647080][ T30] audit: type=1326 audit(980.585:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.2.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff243d8e929 code=0x7ffc0000 [ 980.669970][ T30] audit: type=1326 audit(980.585:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.2.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff243d8e929 code=0x7ffc0000 [ 981.612170][T15092] loop1: detected capacity change from 0 to 1764 [ 983.438161][T15104] loop6: detected capacity change from 0 to 8192 [ 983.511057][T15104] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 983.716858][T15104] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 983.726768][T15104] FAT-fs (loop6): Filesystem has been set read-only [ 983.733740][T15104] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 983.743189][T15104] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 983.752463][T15104] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 983.761751][T15104] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 983.771069][T15104] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 983.780319][T15104] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 983.789551][T15104] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 983.798871][T15104] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 983.808141][T15104] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 983.879737][T15123] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 983.911568][ T30] audit: type=1800 audit(983.885:102): pid=15104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3959" name="file2" dev="loop6" ino=1048669 res=0 errno=0 [ 984.942560][T15133] netlink: 'syz.6.3971': attribute type 2 has an invalid length. [ 984.950987][T15133] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3971'. [ 984.981860][T15134] loop1: detected capacity change from 0 to 64 [ 985.070238][T15135] cgroup: noprefix used incorrectly [ 985.708955][T15139] xt_limit: Overflow, try lower: 1207959552/384 [ 985.967868][T15145] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3977'. [ 986.934721][T15156] loop6: detected capacity change from 0 to 1024 [ 986.957970][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 987.118787][T15156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.194489][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 987.266627][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 987.275214][T15156] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3984: corrupted xattr block 128: overlapping e_value [ 987.339713][ T9] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 987.348874][ T9] usb 3-1: config 7 has no interface number 0 [ 987.355224][ T9] usb 3-1: config 7 interface 187 has no altsetting 0 [ 987.370077][T15161] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 987.437241][ T9] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 987.447311][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.456371][ T9] usb 3-1: Product: syz [ 987.460831][ T9] usb 3-1: Manufacturer: syz [ 987.465860][ T9] usb 3-1: SerialNumber: syz [ 987.792399][ T9] usb 3-1: Limiting number of CPorts to U8_MAX [ 987.801014][ T9] usb 3-1: Not enough endpoints found in device, aborting! [ 987.835796][ T30] audit: type=1400 audit(987.825:103): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A9A47D62AA50F45F72391BACA3346E8A82F2F26 pid=15167 comm="syz.1.3988" [ 987.989011][T10295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.028399][ T9] usb 3-1: USB disconnect, device number 19 [ 988.696066][ T5851] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 988.907871][ T5851] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 988.918261][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.065267][ T5851] pwc: Logitech ViewPort AV 100 webcam detected. [ 989.218889][T15179] netlink: 'syz.5.3993': attribute type 3 has an invalid length. [ 989.227203][T15179] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3993'. [ 989.426366][T15183] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 989.547921][ T5851] pwc: send_video_command error -71 [ 989.553419][ T5851] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 989.562747][ T5851] Philips webcam 5-1:127.0: probe with driver Philips webcam failed with error -71 [ 989.633512][T15186] netlink: 'syz.1.3996': attribute type 1 has an invalid length. [ 989.674577][ T5851] usb 5-1: USB disconnect, device number 20 [ 990.136308][T15191] loop6: detected capacity change from 0 to 16 [ 990.210882][T15191] erofs (device loop6): mounted with root inode @ nid 36. [ 990.308089][T15191] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 990.406721][T15191] erofs (device loop6): failed to decompress -35 in[64, 4032] out[1851] [ 990.420105][T15191] erofs (device loop6): read error -117 @ 43 of nid 36 [ 991.530283][T15210] Illegal XDP return value 8 on prog (id 115) dev N/A, expect packet loss! [ 992.206537][T15220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4013'. [ 992.219395][T15220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4013'. [ 992.419544][T15222] netlink: 'syz.1.4014': attribute type 3 has an invalid length. [ 992.428005][T15222] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4014'. [ 993.025816][ T5851] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 993.182866][T15232] Cannot find add_set index 2 as target [ 993.257214][ T5851] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.267967][ T5851] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 993.366647][ T5851] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 993.376224][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 993.384603][ T5851] usb 7-1: SerialNumber: syz [ 993.801247][ T5851] usb 7-1: 0:2 : does not exist [ 993.876569][T15241] loop2: detected capacity change from 0 to 128 [ 993.992287][ T5851] usb 7-1: USB disconnect, device number 3 [ 994.606344][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 994.975946][T15241] EXT4-fs (loop2): Test dummy encryption mode enabled [ 995.048098][T15249] loop1: detected capacity change from 0 to 2048 [ 995.053906][T15241] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 995.085688][T15245] loop5: detected capacity change from 0 to 4096 [ 995.122430][T15245] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 995.160736][T15249] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 96: 0x25 != 0x13 [ 995.171541][T15249] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 995.316139][T15249] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 995.714146][ T5801] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 997.186688][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 997.415887][ T9] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 997.424584][ T9] usb 5-1: config 0 has no interface number 1 [ 997.434555][ T9] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 997.446144][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 997.496317][ T9] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 997.506278][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 997.514586][ T9] usb 5-1: SerialNumber: syz [ 997.600840][ T9] usb 5-1: config 0 descriptor?? [ 997.866982][ T9] usb 5-1: Found UVC 0.00 device (0002:0000) [ 997.874242][ T9] usb 5-1: No valid video chain found. [ 998.001315][ T9] usb 5-1: USB disconnect, device number 21 [ 999.544268][T15305] netlink: 'syz.1.4051': attribute type 21 has an invalid length. [ 999.552710][T15305] IPv6: NLM_F_CREATE should be specified when creating new route [ 999.740518][T15307] loop4: detected capacity change from 0 to 256 [ 1001.244411][T15327] loop4: detected capacity change from 0 to 1024 [ 1001.456604][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4065'. [ 1001.796681][ T14] hfsplus: b-tree write err: -5, ino 4 [ 1002.185739][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4069'. [ 1002.429561][T15345] loop1: detected capacity change from 0 to 256 [ 1002.920076][T15350] loop6: detected capacity change from 0 to 256 [ 1003.137953][T15352] loop4: detected capacity change from 0 to 164 [ 1003.461603][T15350] FAT-fs (loop6): Directory bread(block 64) failed [ 1003.468993][T15350] FAT-fs (loop6): Directory bread(block 65) failed [ 1003.478246][T15350] FAT-fs (loop6): Directory bread(block 66) failed [ 1003.485060][T15350] FAT-fs (loop6): Directory bread(block 67) failed [ 1003.492805][T15350] FAT-fs (loop6): Directory bread(block 68) failed [ 1003.499818][T15350] FAT-fs (loop6): Directory bread(block 69) failed [ 1003.507028][T15350] FAT-fs (loop6): Directory bread(block 70) failed [ 1003.513856][T15350] FAT-fs (loop6): Directory bread(block 71) failed [ 1003.521142][T15350] FAT-fs (loop6): Directory bread(block 72) failed [ 1003.528176][T15350] FAT-fs (loop6): Directory bread(block 73) failed [ 1004.193355][T15360] loop5: detected capacity change from 0 to 256 [ 1004.566828][T15365] netlink: set zone limit has 8 unknown bytes [ 1006.026549][T15385] ieee802154 phy0 wpan0: encryption failed: -22 [ 1007.683008][ T5851] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1007.869930][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 1007.908737][ T5851] usb 6-1: config 0 has an invalid interface number: 17 but max is 0 [ 1007.917610][ T5851] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.920198][T15412] loop4: detected capacity change from 0 to 2048 [ 1007.928189][ T5851] usb 6-1: config 0 has no interface number 0 [ 1007.988746][ T5851] usb 6-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 1007.998731][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.007361][ T5851] usb 6-1: Product: syz [ 1008.011788][ T5851] usb 6-1: Manufacturer: syz [ 1008.016776][ T5851] usb 6-1: SerialNumber: syz [ 1008.107034][T15412] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1008.158918][ T5851] usb 6-1: config 0 descriptor?? [ 1008.215115][T15412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1008.421600][ T5851] usb 6-1: Found UVC 0.00 device syz (0408:4034) [ 1008.428541][ T5851] usb 6-1: No valid video chain found. [ 1008.644420][ T5851] usb 6-1: USB disconnect, device number 14 [ 1009.599674][T15428] loop2: detected capacity change from 0 to 256 [ 1009.886404][T15434] xt_hashlimit: max too large, truncated to 1048576 [ 1009.895870][T15434] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1010.206266][T15428] FAT-fs (loop2): Directory bread(block 64) failed [ 1010.213275][T15428] FAT-fs (loop2): Directory bread(block 65) failed [ 1010.220539][T15428] FAT-fs (loop2): Directory bread(block 66) failed [ 1010.227492][T15428] FAT-fs (loop2): Directory bread(block 67) failed [ 1010.238457][T15428] FAT-fs (loop2): Directory bread(block 68) failed [ 1010.246804][T15428] FAT-fs (loop2): Directory bread(block 69) failed [ 1010.253747][T15428] FAT-fs (loop2): Directory bread(block 70) failed [ 1010.260877][T15428] FAT-fs (loop2): Directory bread(block 71) failed [ 1010.268262][T15428] FAT-fs (loop2): Directory bread(block 72) failed [ 1010.275097][T15428] FAT-fs (loop2): Directory bread(block 73) failed [ 1011.327067][T15449] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 1012.268423][T15464] loop2: detected capacity change from 0 to 1024 [ 1014.198937][T15493] loop1: detected capacity change from 0 to 1024 [ 1014.411364][T15493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.478629][T15493] EXT4-fs error (device loop1): ext4_get_first_dir_block:3536: inode #11: comm syz.1.4142: directory missing '.' [ 1014.624014][T15493] EXT4-fs (loop1): Remounting filesystem read-only [ 1015.141854][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.683773][T15515] loop6: detected capacity change from 0 to 22 [ 1015.837076][T15515] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1016.407277][T15523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1017.028250][T15531] netlink: 'syz.5.4160': attribute type 6 has an invalid length. [ 1018.153218][T15546] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4167'. [ 1018.164623][T15545] netlink: 'syz.1.4166': attribute type 8 has an invalid length. [ 1018.172889][T15545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4166'. [ 1018.566410][ T5857] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1018.822510][ T5857] usb 7-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1018.835629][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.917320][ T5857] usb 7-1: config 0 descriptor?? [ 1018.949191][ T5857] pwc: Philips SPC 900NC USB webcam detected. [ 1018.974801][T15556] loop4: detected capacity change from 0 to 8 [ 1019.119560][T15556] cramfs: Error -3 while decompressing! [ 1019.125805][T15556] cramfs: ffffffff95525122(26)->ffff8880675cd000(4096) [ 1019.133312][T15556] cramfs: Error -3 while decompressing! [ 1019.143845][T15556] cramfs: ffffffff9552513c(16)->ffff888066b07000(4096) [ 1019.201821][T15556] cramfs: Error -3 while decompressing! [ 1019.208212][T15556] cramfs: ffffffff95525122(26)->ffff8880675cd000(4096) [ 1019.221137][ T30] audit: type=1800 audit(1019.225:104): pid=15556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4171" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1019.228493][ T5857] pwc: Failed to set LED on/off time (-71) [ 1019.296198][ T5857] pwc: send_video_command error -71 [ 1019.302042][ T5857] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1019.310794][ T5857] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1019.313512][T15560] loop5: detected capacity change from 0 to 764 [ 1019.443343][ T6134] udevd[6134]: incorrect cramfs checksum on /dev/loop4 [ 1019.520191][ T5857] usb 7-1: USB disconnect, device number 4 [ 1019.830769][ T5968] udevd[5968]: incorrect cramfs checksum on /dev/loop4 [ 1021.609832][T15587] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1022.073544][T15589] loop5: detected capacity change from 0 to 256 [ 1022.299159][T15597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1022.528116][T15589] FAT-fs (loop5): Directory bread(block 64) failed [ 1022.535207][T15589] FAT-fs (loop5): Directory bread(block 65) failed [ 1022.542514][T15589] FAT-fs (loop5): Directory bread(block 66) failed [ 1022.549538][T15589] FAT-fs (loop5): Directory bread(block 67) failed [ 1022.556944][T15589] FAT-fs (loop5): Directory bread(block 68) failed [ 1022.563723][T15589] FAT-fs (loop5): Directory bread(block 69) failed [ 1022.570941][T15589] FAT-fs (loop5): Directory bread(block 70) failed [ 1022.577959][T15589] FAT-fs (loop5): Directory bread(block 71) failed [ 1022.587096][T15589] FAT-fs (loop5): Directory bread(block 72) failed [ 1022.593885][T15589] FAT-fs (loop5): Directory bread(block 73) failed [ 1022.847525][ T30] audit: type=1800 audit(1022.835:105): pid=15589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4187" name="cgroup.controllers" dev="loop5" ino=1048677 res=0 errno=0 [ 1022.868447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1022.886337][T15589] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000656c) [ 1023.027947][T15601] loop2: detected capacity change from 0 to 512 [ 1023.062422][T15603] loop4: detected capacity change from 0 to 64 [ 1023.244368][T15601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.261746][T15603] hfs: request for non-existent node 56 in B*Tree [ 1023.268639][T15603] hfs: request for non-existent node 56 in B*Tree [ 1023.275549][T15603] hfs: request for non-existent node 57 in B*Tree [ 1023.282206][T15603] hfs: request for non-existent node 57 in B*Tree [ 1023.808209][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.961203][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4196'. [ 1024.542397][T15618] loop2: detected capacity change from 0 to 1764 [ 1025.287837][T15630] loop6: detected capacity change from 0 to 1024 [ 1025.361277][T15630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1025.873308][T10295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.347906][T15649] tmpfs: Bad value for 'nr_blocks' [ 1026.738708][T15643] loop4: detected capacity change from 0 to 4096 [ 1026.779716][T15653] netlink: 'syz.1.4216': attribute type 1 has an invalid length. [ 1026.822971][T15643] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 1026.906067][T15655] loop6: detected capacity change from 0 to 64 [ 1027.231271][T15643] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1027.517169][T15661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4220'. [ 1027.731237][T15667] loop6: detected capacity change from 0 to 256 [ 1028.311101][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1028.319949][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1029.373791][T15687] loop6: detected capacity change from 0 to 256 [ 1032.276425][T15730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1032.562518][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1032.766119][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.776997][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1032.788988][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.801035][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.811401][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1032.821508][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1032.925126][ T9] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1032.934867][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.943387][ T9] usb 6-1: Product: syz [ 1032.947955][ T9] usb 6-1: Manufacturer: syz [ 1032.952877][ T9] usb 6-1: SerialNumber: syz [ 1033.159712][ T9] usb 6-1: config 0 descriptor?? [ 1033.411677][ T9] usb 6-1: ucan: probing device on interface #0 [ 1033.418573][ T9] usb 6-1: ucan: invalid endpoint configuration [ 1033.425170][ T9] usb 6-1: ucan: probe failed; try to update the device firmware [ 1033.638697][ T9] usb 6-1: USB disconnect, device number 15 [ 1035.080182][T15763] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4268'. [ 1035.227488][T15767] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4270'. [ 1038.049884][T15803] sctp: [Deprecated]: syz.4.4288 (pid 15803) Use of int in max_burst socket option. [ 1038.049884][T15803] Use struct sctp_assoc_value instead [ 1038.654530][T15811] loop2: detected capacity change from 0 to 128 [ 1038.775984][T15811] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1038.993162][T15811] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1039.391024][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4298'. [ 1040.806310][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1041.066621][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1041.167426][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1041.177184][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1041.185863][ T9] usb 3-1: Product: syz [ 1041.190288][ T9] usb 3-1: Manufacturer: syz [ 1041.195174][ T9] usb 3-1: SerialNumber: syz [ 1041.348376][ T9] usb 3-1: config 0 descriptor?? [ 1041.417229][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1041.560788][T15848] loop5: detected capacity change from 0 to 256 [ 1041.767630][T15848] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1041.783239][T15848] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1041.853215][ T9] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1041.861404][ T9] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 1041.945537][T15848] exFAT-fs (loop5): valid_size(150994954) is greater than size(10) [ 1041.947561][ T9] usb 3-1: USB disconnect, device number 20 [ 1042.244562][T15854] openvswitch: netlink: Missing valid actions attribute. [ 1042.252303][T15854] openvswitch: netlink: Actions may not be safe on all matching packets [ 1042.318309][ T30] audit: type=1326 audit(1042.305:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.6.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c0d8e929 code=0x7ffc0000 [ 1042.341194][ T30] audit: type=1326 audit(1042.325:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.6.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c0d8e929 code=0x7ffc0000 [ 1042.397849][ T30] audit: type=1326 audit(1042.375:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.6.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fd0c0d8e929 code=0x7ffc0000 [ 1042.445238][ T30] audit: type=1326 audit(1042.445:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.6.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c0d8e929 code=0x7ffc0000 [ 1042.621437][T15858] loop4: detected capacity change from 0 to 1024 [ 1042.733921][T15858] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1042.745917][T15858] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1042.762355][T15858] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1042.926393][T15858] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.4315: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 1043.026092][T15858] EXT4-fs (loop4): no journal found [ 1043.031600][T15858] EXT4-fs (loop4): can't get journal size [ 1043.089222][T15858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1043.797844][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.358374][T15876] netlink: 'syz.4.4322': attribute type 8 has an invalid length. [ 1045.396310][T15890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4329'. [ 1045.405879][T15890] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4329'. [ 1045.434764][T15890] bridge4: entered promiscuous mode [ 1045.440474][T15890] bridge4: entered allmulticast mode [ 1046.016108][T15896] loop4: detected capacity change from 0 to 2048 [ 1046.085700][T15896] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1046.189292][T15896] syz.4.4333: attempt to access beyond end of device [ 1046.189292][T15896] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1046.216254][T15900] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1046.310420][T15896] syz.4.4333: attempt to access beyond end of device [ 1046.310420][T15896] loop4: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 1046.357359][T15903] loop6: detected capacity change from 0 to 128 [ 1046.391778][T15896] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3) [ 1046.401415][T15896] NILFS (loop4): error -5 reading inode: ino=12 [ 1046.408290][T15892] loop1: detected capacity change from 0 to 4096 [ 1046.465933][T15892] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1046.519518][T15903] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1046.970534][T10295] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1047.032519][T15892] ntfs3(loop1): ino=19, mi_enum_attr [ 1047.038457][T15892] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1047.432231][T15911] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4339'. [ 1047.442218][T15911] netlink: 477 bytes leftover after parsing attributes in process `syz.4.4339'. [ 1048.524798][T15923] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1048.582170][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4345'. [ 1048.591609][T15922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1048.710096][T15925] loop6: detected capacity change from 0 to 256 [ 1049.139169][T15925] FAT-fs (loop6): Directory bread(block 64) failed [ 1049.150431][T15925] FAT-fs (loop6): Directory bread(block 65) failed [ 1049.159031][T15925] FAT-fs (loop6): Directory bread(block 66) failed [ 1049.166004][T15925] FAT-fs (loop6): Directory bread(block 67) failed [ 1049.172979][T15925] FAT-fs (loop6): Directory bread(block 68) failed [ 1049.180034][T15925] FAT-fs (loop6): Directory bread(block 69) failed [ 1049.187127][T15925] FAT-fs (loop6): Directory bread(block 70) failed [ 1049.193912][T15925] FAT-fs (loop6): Directory bread(block 71) failed [ 1049.200997][T15925] FAT-fs (loop6): Directory bread(block 72) failed [ 1049.207945][T15925] FAT-fs (loop6): Directory bread(block 73) failed [ 1049.421931][T15931] netlink: 'syz.4.4349': attribute type 6 has an invalid length. [ 1049.576661][T15933] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4350'. [ 1049.674333][T15929] loop1: detected capacity change from 0 to 4096 [ 1049.776539][T15929] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1049.785007][T15929] NILFS (loop1): trying rollback from an earlier position [ 1049.958310][T15929] NILFS (loop1): recovery complete [ 1050.013767][T15936] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1050.516096][ T5857] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1050.742754][ T5857] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1050.752849][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.861310][ T5857] usb 5-1: config 0 descriptor?? [ 1051.176187][ T5857] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1051.393792][ T5857] [drm:udl_init] *ERROR* Selecting channel failed [ 1051.466478][ T5857] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1051.473495][ T5857] [drm] Initialized udl on minor 2 [ 1051.486990][T15952] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1051.569286][ T5857] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1051.580167][ T5857] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1051.606279][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1051.652320][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1051.661525][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1051.719796][ T5857] usb 5-1: USB disconnect, device number 22 [ 1052.315178][T15961] kAFS: unable to lookup cell '/,c¾ûL' [ 1053.236238][T15974] loop6: detected capacity change from 0 to 1024 [ 1053.246362][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1053.517684][ T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1053.527529][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.536203][ T9] usb 3-1: Product: syz [ 1053.540638][ T9] usb 3-1: Manufacturer: syz [ 1053.549886][ T9] usb 3-1: SerialNumber: syz [ 1053.598786][T15976] loop4: detected capacity change from 0 to 1024 [ 1053.635984][T15979] syz.5.4370: attempt to access beyond end of device [ 1053.635984][T15979] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1053.653976][T15979] syz.5.4370: attempt to access beyond end of device [ 1053.653976][T15979] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1053.668787][T15979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1053.679055][T15979] syz.5.4370: attempt to access beyond end of device [ 1053.679055][T15979] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1053.692448][T15979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1053.739268][ T9] usb 3-1: config 0 descriptor?? [ 1053.745135][T15976] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1053.759565][ T9] ch341 3-1:0.0: ch341-uart converter detected [ 1053.796155][T15979] syz.5.4370: attempt to access beyond end of device [ 1053.796155][T15979] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1053.810476][T15979] syz.5.4370: attempt to access beyond end of device [ 1053.810476][T15979] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1053.824604][T15979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1053.835168][T15979] syz.5.4370: attempt to access beyond end of device [ 1053.835168][T15979] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1053.849065][T15979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1053.867263][T15976] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1053.878841][T15976] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1053.889285][T15976] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1053.900005][T15976] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.4369: inode #1: comm syz.4.4369: iget: illegal inode # [ 1053.908847][T15979] syz.5.4370: attempt to access beyond end of device [ 1053.908847][T15979] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1053.929331][T15979] syz.5.4370: attempt to access beyond end of device [ 1053.929331][T15979] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1053.943429][T15979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1053.953682][T15979] syz.5.4370: attempt to access beyond end of device [ 1053.953682][T15979] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1053.970583][T15979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1054.089004][ T14] hfsplus: b-tree write err: -5, ino 4 [ 1054.143939][T15976] EXT4-fs (loop4): Remounting filesystem read-only [ 1054.151479][T15976] EXT4-fs (loop4): no journal found [ 1054.267788][T15979] syz.5.4370: attempt to access beyond end of device [ 1054.267788][T15979] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1054.282071][T15979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1054.292709][T15979] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1054.302907][T15979] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1054.339962][ T9] usb 3-1: failed to send control message: -71 [ 1054.346964][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1054.421866][ T9] usb 3-1: USB disconnect, device number 21 [ 1054.431202][ T9] ch341 3-1:0.0: device disconnected [ 1054.589475][T15985] loop6: detected capacity change from 0 to 256 [ 1054.675671][ T5851] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1054.895619][ T5851] usb 5-1: Using ep0 maxpacket: 16 [ 1054.973718][ T5851] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.986313][ T5851] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1055.050426][ T5851] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1055.060153][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.069901][T15985] FAT-fs (loop6): Directory bread(block 64) failed [ 1055.069929][ T5851] usb 5-1: Product: syz [ 1055.070034][ T5851] usb 5-1: Manufacturer: syz [ 1055.077042][T15985] FAT-fs (loop6): Directory bread(block 65) failed [ 1055.082891][ T5851] usb 5-1: SerialNumber: syz [ 1055.103282][T15985] FAT-fs (loop6): Directory bread(block 66) failed [ 1055.110241][T15985] FAT-fs (loop6): Directory bread(block 67) failed [ 1055.117448][T15985] FAT-fs (loop6): Directory bread(block 68) failed [ 1055.124240][T15985] FAT-fs (loop6): Directory bread(block 69) failed [ 1055.131330][T15985] FAT-fs (loop6): Directory bread(block 70) failed [ 1055.138299][T15985] FAT-fs (loop6): Directory bread(block 71) failed [ 1055.145262][T15985] FAT-fs (loop6): Directory bread(block 72) failed [ 1055.152268][T15985] FAT-fs (loop6): Directory bread(block 73) failed [ 1055.466165][T15988] loop1: detected capacity change from 0 to 1024 [ 1055.470386][T15985] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 328) [ 1055.568855][T15985] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 328) [ 1055.586507][ T5851] usb 5-1: 0:2 : does not exist [ 1055.723497][ T5851] usb 5-1: USB disconnect, device number 23 [ 1056.214650][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1057.562680][T16009] nfs: Deprecated parameter 'nointr' [ 1057.576653][T16011] netlink: 'syz.4.4386': attribute type 6 has an invalid length. [ 1057.584680][T16011] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4386'. [ 1058.994032][T16033] loop5: detected capacity change from 0 to 256 [ 1059.949047][T16031] loop4: detected capacity change from 0 to 8192 [ 1061.226435][ T5851] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1061.272171][T16057] netlink: 'syz.2.4409': attribute type 3 has an invalid length. [ 1061.281020][T16057] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4409'. [ 1061.456882][ T5851] usb 5-1: Using ep0 maxpacket: 8 [ 1061.466867][T16059] tmpfs: Bad value for 'mpol' [ 1061.521388][ T5851] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1061.530262][ T5851] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1061.542341][ T5851] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1061.553625][ T5851] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1061.564075][ T5851] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1061.578387][ T5851] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1061.587909][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.418464][ T9] usb 5-1: USB disconnect, device number 24 [ 1062.620356][ T5857] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1062.808400][ T5857] usb 7-1: Using ep0 maxpacket: 16 [ 1062.847110][ T5857] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1062.856057][ T5857] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 1062.866390][ T5857] usb 7-1: config 0 has no interface number 0 [ 1062.935166][ T5857] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1062.945508][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.953811][ T5857] usb 7-1: Product: syz [ 1062.958425][ T5857] usb 7-1: Manufacturer: syz [ 1062.963332][ T5857] usb 7-1: SerialNumber: syz [ 1063.072192][T16064] loop1: detected capacity change from 0 to 8192 [ 1063.129499][ T5857] usb 7-1: config 0 descriptor?? [ 1063.164348][ T5857] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 1063.176421][ T5857] usb 7-1: No valid video chain found. [ 1063.179836][T16064] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1063.409234][ T5851] usb 7-1: USB disconnect, device number 5 [ 1066.538837][T16104] loop4: detected capacity change from 0 to 4096 [ 1066.619155][T16113] bio_check_eod: 3 callbacks suppressed [ 1066.619236][T16113] syz.1.4436: attempt to access beyond end of device [ 1066.619236][T16113] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1066.638741][T16113] syz.1.4436: attempt to access beyond end of device [ 1066.638741][T16113] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1066.655247][T16113] Mount JFS Failure: -5 [ 1066.662003][T16113] jfs_mount failed w/return code = -5 [ 1066.784942][T16104] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1066.806268][T16117] Bluetooth: MGMT ver 1.23 [ 1067.754106][T16126] loop5: detected capacity change from 0 to 1024 [ 1068.031116][T16126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.326944][T16138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4447'. [ 1068.336587][T16138] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1068.717282][ T8778] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.369422][T16149] loop5: detected capacity change from 0 to 128 [ 1069.453084][T16149] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1069.594736][T16149] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1069.720325][T16149] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.4450: checksumming directory block 0 [ 1070.288508][ T8778] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1070.626668][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4459'. [ 1070.993457][T16168] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4461'. [ 1071.927068][T16178] loop1: detected capacity change from 0 to 1024 [ 1072.122688][T16181] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4468'. [ 1072.132344][T16181] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4468'. [ 1072.141746][T16181] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4468'. [ 1072.238164][T16182] loop2: detected capacity change from 0 to 1024 [ 1072.393289][T16182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.478394][T16186] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1072.494529][ T14] hfsplus: b-tree write err: -5, ino 4 [ 1072.573311][T16182] EXT4-fs error (device loop2): ext4_get_first_dir_block:3536: inode #11: comm syz.2.4467: directory missing '.' [ 1072.945246][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4471'. [ 1072.991501][T16195] ALSA: mixer_oss: invalid index 100000 [ 1073.134632][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.418889][T16197] loop5: detected capacity change from 0 to 512 [ 1073.497864][T16197] EXT4-fs: Ignoring removed bh option [ 1073.556037][T16197] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1073.662214][T16197] EXT4-fs (loop5): 1 truncate cleaned up [ 1073.670625][T16197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1073.724403][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4477'. [ 1073.735124][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4477'. [ 1073.836405][ T30] audit: type=1800 audit(1073.815:110): pid=16197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4474" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 1074.509596][ T8778] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.963854][T16232] loop1: detected capacity change from 0 to 512 [ 1076.072187][T16232] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1076.087688][T16232] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1076.230081][T16232] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1076.252573][T16232] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1076.327010][T16232] System zones: 0-2, 18-18, 34-35 [ 1076.429763][T16232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.730446][T16243] loop6: detected capacity change from 0 to 256 [ 1076.827270][T16243] exfat: Deprecated parameter 'namecase' [ 1076.833366][T16243] exfat: Deprecated parameter 'utf8' [ 1076.839788][T16243] exfat: Deprecated parameter 'namecase' [ 1076.846107][T16243] exfat: Deprecated parameter 'utf8' [ 1077.034409][T16243] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 1077.183941][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.769685][T16254] loop5: detected capacity change from 0 to 64 [ 1078.757359][T16263] tipc: Enabling of bearer rejected, failed to enable media [ 1079.457520][T16270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4505'. [ 1079.466923][T16270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4505'. [ 1081.779190][T16306] loop5: detected capacity change from 0 to 8 [ 1081.972015][T16306] SQUASHFS error: zstd decompression error: 10 [ 1081.978821][T16306] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1081.988347][T16306] SQUASHFS error: Failed to read block 0x60: -5 [ 1081.995829][T16306] SQUASHFS error: zstd decompression error: 10 [ 1082.002237][T16306] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1082.014750][T16306] SQUASHFS error: Failed to read block 0x60: -5 [ 1082.649903][T16318] loop4: detected capacity change from 0 to 512 [ 1082.776512][T16318] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1082.828541][T16318] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1082.888237][T16318] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #15: comm syz.4.4527: iget: bad i_size value: 360287970189639690 [ 1082.929921][T16321] loop5: detected capacity change from 0 to 256 [ 1082.948243][T16318] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.4527: Bad quota inode: 15, type: 2 [ 1082.979592][T16318] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 1083.078517][T16318] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1083.088193][T16318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1083.581355][T16330] netlink: 1256 bytes leftover after parsing attributes in process `syz.6.4532'. [ 1083.591458][T16330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1083.940504][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.588457][T16345] loop6: detected capacity change from 0 to 256 [ 1085.107709][T16345] FAT-fs (loop6): Directory bread(block 64) failed [ 1085.114674][T16345] FAT-fs (loop6): Directory bread(block 65) failed [ 1085.122061][T16345] FAT-fs (loop6): Directory bread(block 66) failed [ 1085.129062][T16345] FAT-fs (loop6): Directory bread(block 67) failed [ 1085.136782][T16345] FAT-fs (loop6): Directory bread(block 68) failed [ 1085.143573][T16345] FAT-fs (loop6): Directory bread(block 69) failed [ 1085.150756][T16345] FAT-fs (loop6): Directory bread(block 70) failed [ 1085.157683][T16345] FAT-fs (loop6): Directory bread(block 71) failed [ 1085.164615][T16345] FAT-fs (loop6): Directory bread(block 72) failed [ 1085.172064][T16345] FAT-fs (loop6): Directory bread(block 73) failed [ 1085.636681][T16351] loop5: detected capacity change from 0 to 1764 [ 1085.869953][T16351] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1088.414531][T16386] dummy0: entered promiscuous mode [ 1088.432143][T16386] dummy0: left promiscuous mode [ 1089.757912][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.764632][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1089.931921][T16398] tipc: Enabling of bearer rejected, failed to enable media [ 1090.004232][T16401] loop2: detected capacity change from 0 to 256 [ 1090.257844][T16401] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1090.273598][T16401] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1090.477163][ T30] audit: type=1800 audit(1090.475:111): pid=16401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4564" name="file2" dev="loop2" ino=1048718 res=0 errno=0 [ 1091.374893][T16413] netlink: 212 bytes leftover after parsing attributes in process `syz.6.4568'. [ 1091.596566][T16418] IPVS: Unknown mcast interface: vlan0 [ 1093.154912][T16424] sctp: failed to load transform for md5: -2 [ 1093.189722][T16428] sctp: failed to load transform for md5: -2 [ 1093.802074][T16442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4580'. [ 1093.811906][T16442] tipc: Started in network mode [ 1093.817312][T16442] tipc: Node identity 9, cluster identity 3142 [ 1093.823731][T16442] tipc: Node number set to 9 [ 1093.830218][T16442] tipc: Cannot configure node identity twice [ 1094.352773][T16448] loop6: detected capacity change from 0 to 1024 [ 1094.597940][T16448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1094.855573][T16448] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.4582: Abort forced by user [ 1094.980889][T16448] EXT4-fs (loop6): Remounting filesystem read-only [ 1094.993135][T16448] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 1095.643071][T10295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.090666][T16461] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 1097.134018][T16475] loop2: detected capacity change from 0 to 64 [ 1098.637683][T13581] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1098.946353][T13581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1098.957982][T13581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.968564][T13581] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1098.980842][T13581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.204789][T13581] usb 6-1: config 0 descriptor?? [ 1099.351119][ T5851] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1099.556661][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 1099.648513][ T5851] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1099.662342][ T5851] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1099.670480][ T5851] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1099.680208][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.756530][T13581] isku 0003:1E7D:319C.0001: item fetching failed at offset 5/7 [ 1099.836621][T13581] isku 0003:1E7D:319C.0001: parse failed [ 1099.843086][T13581] isku 0003:1E7D:319C.0001: probe with driver isku failed with error -22 [ 1099.947578][T13581] usb 6-1: USB disconnect, device number 16 [ 1100.021675][ T5851] usb 5-1: config 0 descriptor?? [ 1100.465528][T16509] bridge_slave_0: left allmulticast mode [ 1100.471552][T16509] bridge_slave_0: left promiscuous mode [ 1100.479484][T16509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.607423][ T5851] hid-retrode 0003:0403:97C1.0002: item fetching failed at offset 4/5 [ 1100.708359][T16509] bridge_slave_1: left allmulticast mode [ 1100.717558][T16509] bridge_slave_1: left promiscuous mode [ 1100.724316][T16509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.780420][ T5851] hid-retrode 0003:0403:97C1.0002: probe with driver hid-retrode failed with error -22 [ 1100.898529][T16505] loop2: detected capacity change from 0 to 4096 [ 1101.012014][ T5851] usb 5-1: USB disconnect, device number 25 [ 1101.077406][T16505] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1101.333218][T16509] bond0: (slave bond_slave_0): Releasing backup interface [ 1101.611555][T16509] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1101.664380][T16505] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 1102.079284][ T30] audit: type=1800 audit(1102.035:112): pid=16515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4604" name="file2" dev="loop2" ino=31 res=0 errno=0 [ 1102.175975][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1102.524495][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1102.539148][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.552935][ T9] usb 6-1: Product: syz [ 1102.564034][ T9] usb 6-1: Manufacturer: syz [ 1102.574146][ T9] usb 6-1: SerialNumber: syz [ 1102.714665][ T9] usb 6-1: config 0 descriptor?? [ 1103.130530][ T5912] usb 6-1: USB disconnect, device number 17 [ 1103.608015][T16525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4612'. [ 1103.738057][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1104.408104][ T5912] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1104.665165][ T5912] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1104.674948][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.785659][T16537] loop6: detected capacity change from 0 to 512 [ 1104.803679][ T5912] usb 5-1: config 0 descriptor?? [ 1104.998222][T16537] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 1105.005773][T16537] EXT4-fs (loop6): mount failed [ 1105.351323][ T5912] appleir 0003:05AC:8241.0003: item fetching failed at offset 2/5 [ 1105.478634][ T5912] appleir 0003:05AC:8241.0003: parse failed [ 1105.485243][ T5912] appleir 0003:05AC:8241.0003: probe with driver appleir failed with error -22 [ 1105.671819][ T5912] usb 5-1: USB disconnect, device number 26 [ 1106.234566][T16545] bridge_slave_1: left allmulticast mode [ 1106.245759][T16545] bridge_slave_1: left promiscuous mode [ 1106.252700][T16545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.554542][T16545] bond0: (slave bond_slave_0): Releasing backup interface [ 1106.845956][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4622'. [ 1106.857544][T16548] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4622'. [ 1106.883117][T16545] bond0: (slave bond_slave_1): Releasing backup interface [ 1107.023644][T16545] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1108.176455][T16559] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4627'. [ 1108.904087][T16566] loop5: detected capacity change from 0 to 47 [ 1109.356446][T16571] loop2: detected capacity change from 0 to 1024 [ 1109.547222][T16571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.168587][T16579] syz.6.4636: attempt to access beyond end of device [ 1110.168587][T16579] nbd6: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1110.184442][T16579] qnx6: unable to read the first superblock [ 1110.195605][T16579] syz.6.4636: attempt to access beyond end of device [ 1110.195605][T16579] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1110.210003][T16579] qnx6: unable to read the first superblock [ 1110.216412][T16579] qnx6: unable to read the first superblock [ 1110.344572][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.967602][T16580] loop1: detected capacity change from 0 to 4096 [ 1111.033442][T16580] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 1111.505971][T16580] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 1111.896116][T16596] loop2: detected capacity change from 0 to 512 [ 1112.213619][T16596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1113.196235][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.549106][T16607] loop4: detected capacity change from 0 to 256 [ 1113.618216][T16607] exfat: Deprecated parameter 'utf8' [ 1113.623838][T16607] exfat: Deprecated parameter 'utf8' [ 1113.630386][T16607] exfat: Deprecated parameter 'utf8' [ 1113.817723][T16607] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1117.023486][T16644] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 1118.482422][T16660] loop5: detected capacity change from 0 to 1024 [ 1118.523656][T16662] netlink: 'syz.2.4673': attribute type 1 has an invalid length. [ 1118.716791][T16660] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1118.754063][T16660] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1118.839991][T16665] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1118.846994][T16665] hfsplus: xattr searching failed [ 1119.366014][ T8503] hfsplus: b-tree write err: -5, ino 4 [ 1119.682786][T16666] loop1: detected capacity change from 0 to 4096 [ 1119.711282][ T5857] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1119.896541][T16666] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1119.910821][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 1119.943775][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.960416][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.980319][ T5857] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1119.994915][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.217829][ T5857] usb 3-1: config 0 descriptor?? [ 1120.624539][T16666] ntfs3(loop1): ino=1a, mi_enum_attr [ 1120.637461][T16666] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1120.656729][T16666] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 1120.760749][ T5857] savu 0003:1E7D:2D5A.0004: invalid report_count 41476 [ 1120.770124][ T5857] savu 0003:1E7D:2D5A.0004: item 0 2 1 9 parsing failed [ 1120.942835][ T5857] savu 0003:1E7D:2D5A.0004: parse failed [ 1120.954844][ T5857] savu 0003:1E7D:2D5A.0004: probe with driver savu failed with error -22 [ 1121.073769][ T5857] usb 3-1: USB disconnect, device number 22 [ 1123.697634][ T30] audit: type=1800 audit(1123.685:113): pid=16703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4691" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1124.408194][T16710] loop1: detected capacity change from 0 to 1024 [ 1124.547121][T16510] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1124.602359][T16710] hfsplus: xattr searching failed [ 1124.614528][T16716] hfsplus: xattr searching failed [ 1125.616147][T16718] loop4: detected capacity change from 0 to 32768 [ 1125.640264][T16510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.650611][T16510] usb 3-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 1125.661207][T16510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.901156][T16718] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names,read_only [ 1125.903767][T16718] allowing incompatible features above 0.0: (unknown version) [ 1125.903862][T16718] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1125.955038][T16718] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 1125.963749][T16718] bcachefs (loop4): initializing new filesystem [ 1125.985655][T16718] bcachefs (loop4): going read-write [ 1125.997491][T16510] usb 3-1: config 0 descriptor?? [ 1126.046066][T16718] bcachefs (loop4): marking superblocks [ 1126.134812][T16718] bcachefs (loop4): initializing freespace [ 1126.182447][T16718] bcachefs (loop4): done initializing freespace [ 1126.216553][T16718] bcachefs (loop4): reading snapshots table [ 1126.223436][T16718] bcachefs (loop4): reading snapshots done [ 1126.368978][T16718] bcachefs (loop4): going read-only [ 1126.374722][T16718] bcachefs (loop4): finished waiting for writes to stop [ 1126.386755][T16718] bcachefs (loop4): flushing journal and stopping allocators, journal seq 1 [ 1126.608650][T16510] wacom 0003:056A:032B.0005: unknown main item tag 0x7 [ 1126.616281][T16510] wacom 0003:056A:032B.0005: unknown main item tag 0x0 [ 1126.727388][T16718] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 2 [ 1126.758141][T16510] usb 3-1: USB disconnect, device number 23 [ 1126.773981][T16718] bcachefs (loop4): clean shutdown complete, journal seq 3 [ 1126.787632][T16718] bcachefs (loop4): marking filesystem clean [ 1126.819924][T16718] bcachefs (loop4): done starting filesystem [ 1127.055455][T16718] syz.4.4698 (16718) used greatest stack depth: 1168 bytes left [ 1127.111419][ T5808] bcachefs (loop4): shutting down [ 1127.236556][ T5808] bcachefs (loop4): shutdown complete [ 1129.255737][T16754] loop2: detected capacity change from 0 to 512 [ 1130.431350][T16761] loop6: detected capacity change from 0 to 32768 [ 1130.597388][T16754] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.4710: casefold flag without casefold feature [ 1130.678721][T16761] bcachefs (/dev/loop6): error validating superblock: Invalid superblock: optional field with size 0 (type 1) [ 1130.693981][T16761] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size [ 1130.833803][T16757] loop5: detected capacity change from 0 to 32768 [ 1130.849456][T16757] XFS: attr2 mount option is deprecated. [ 1130.866643][T16757] XFS (loop5): sunit and swidth must be specified together [ 1131.225939][T16754] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.4710: couldn't read orphan inode 15 (err -117) [ 1131.381857][T16754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1131.572581][T16754] EXT4-fs error (device loop2): ext4_empty_dir:3075: inode #2: comm syz.2.4710: invalid size [ 1132.214073][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.932393][T11746] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 1136.083235][T16795] loop4: detected capacity change from 0 to 8 [ 1136.316425][T16802] loop6: detected capacity change from 0 to 256 [ 1136.677916][T16802] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1137.005978][T11746] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1137.014748][T11746] Bluetooth: hci4: Injecting HCI hardware error event [ 1137.023943][T11746] Bluetooth: hci4: hardware error 0x00 [ 1137.232664][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4733'. [ 1138.030593][T16810] loop2: detected capacity change from 0 to 32768 [ 1138.041432][T16810] btrfs: Deprecated parameter 'usebackuproot' [ 1138.048041][T16810] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1138.059819][T16810] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4735 (16810) [ 1138.082608][T16810] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1138.096021][T16810] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 1138.107078][T16810] BTRFS info (device loop2): using free-space-tree [ 1138.283483][ T8539] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1138.299675][T16810] BTRFS error (device loop2): failed to load root extent [ 1138.307988][T16810] BTRFS warning (device loop2): try to load backup roots slot 1 [ 1138.432278][ T8539] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1138.456826][T16810] BTRFS warning (device loop2): couldn't read tree root [ 1138.464088][T16810] BTRFS warning (device loop2): try to load backup roots slot 2 [ 1138.480801][ T8539] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1138.499908][T16810] BTRFS warning (device loop2): couldn't read tree root [ 1138.507443][T16810] BTRFS warning (device loop2): try to load backup roots slot 3 [ 1138.563834][ T8516] BTRFS warning (device loop2): checksum verify failed on logical 5251072 mirror 1 wanted 0x6f2ebd38 found 0x18b98612 level 0 [ 1138.577932][T16810] BTRFS error (device loop2): failed to load root extent [ 1138.748837][T16810] BTRFS error (device loop2): open_ctree failed: -5 [ 1139.086450][T11746] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1139.550990][ T14] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.935089][ T14] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.310770][ T14] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.562883][ T14] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.431910][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.491596][ T14] bond0 (unregistering): Released all slaves [ 1144.484656][T16856] loop4: detected capacity change from 0 to 256 [ 1144.577713][T16856] exfat: Deprecated parameter 'utf8' [ 1144.586474][T16856] exfat: Deprecated parameter 'utf8' [ 1144.592648][T16856] exfat: Deprecated parameter 'utf8' [ 1145.075160][T16856] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1145.327408][ T14] hsr_slave_0: left promiscuous mode [ 1145.420725][ T14] hsr_slave_1: left promiscuous mode [ 1145.434309][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1145.447284][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.455143][T16856] exFAT-fs (loop4): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 1145.475126][T16856] exFAT-fs (loop4): Filesystem has been set read-only [ 1145.619096][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1145.632189][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1145.850182][ T14] veth1_macvtap: left promiscuous mode [ 1145.862161][ T14] veth0_macvtap: left promiscuous mode [ 1145.873487][ T14] veth1_vlan: left promiscuous mode [ 1145.884389][ T14] veth0_vlan: left promiscuous mode [ 1146.342212][T16738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1146.379646][T16738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1146.389280][T16738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1146.404695][T16738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1146.420913][T16738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1147.939950][T16870] loop2: detected capacity change from 0 to 32768 [ 1147.950209][T16870] btrfs: Deprecated parameter 'usebackuproot' [ 1147.966617][T16870] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1148.007555][T16870] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4753 (16870) [ 1148.232224][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1148.360296][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1148.446627][T16738] Bluetooth: hci1: command tx timeout [ 1149.067681][T16870] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1149.086708][T16870] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 1149.103283][T16870] BTRFS info (device loop2): using free-space-tree [ 1149.515596][T16870] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1149.516793][T16870] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1149.532244][T16870] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1149.560868][T16870] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1149.577478][T16870] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1149.592705][T16870] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1149.652399][T16870] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1149.668161][T16870] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1149.683315][T16870] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1149.699079][T16870] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1149.719206][T16870] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1149.736277][T16870] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1149.772948][T16870] BTRFS error (device loop2): open_ctree failed: -12 [ 1150.566222][T16738] Bluetooth: hci1: command tx timeout [ 1150.710533][T16898] loop1: detected capacity change from 0 to 512 [ 1150.991652][T16898] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 1151.028472][T16898] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.4757: iget: bad i_size value: 12154757448730 [ 1151.083508][T16898] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.4757: couldn't read orphan inode 13 (err -117) [ 1151.165163][T16867] chnl_net:caif_netlink_parms(): no params data found [ 1151.223567][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.230779][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.279131][T16898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1152.242686][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.626599][T11746] Bluetooth: hci1: command tx timeout [ 1153.941896][T16925] loop2: detected capacity change from 0 to 512 [ 1153.969626][T16921] loop5: detected capacity change from 0 to 32768 [ 1153.970922][T16925] EXT4-fs: Ignoring removed oldalloc option [ 1154.060767][T16921] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section [ 1154.060767][T16921] clean (size 2912): [ 1154.060767][T16921] flags: 0 [ 1154.060767][T16921] journal_seq: 10 [ 1154.060767][T16921] usage: type=inodes v=8 [ 1154.060767][T16921] usage: type=key_version v=0 [ 1154.060767][T16921] usage: type=reserved v=0 [ 1154.060767][T16921] usage: type=reserved v=0 [ 1154.060767][T16921] usage: type=reserved v=0 [ 1154.060767][T16921] usage: type=reserved v=0 [ 1154.060767][T16921] data_usage: btree: 1/1 [0]=2816 [ 1154.060767][T16921] data_usage: journal: 1/1 [0]=0 [ 1154.060767][T16921] data_usage: user: 1/1 [0]=16 [ 1154.060767][T16921] dev_usage: dev=0 [ 1154.060767][T16921] free: buckets=83 sectors=0 fragmented=0 [ 1154.060767][T16921] sb: buckets=25 sectors=6152 fragmented=248 [ 1154.060767][T16921] journal: buckets=8 sectors=2048 fragmented=0 [ 1154.060767][T16921] btree: buckets=11 sectors=2816 fragmented=0 [ 1154.060767][T16921] user: buckets=1 sectors=16 fragmented=240 [ 1154.060767][T16921] cached: buckets=0 sectors=0 fragmented=0 [ 1154.060767][T16921] parity: buckets=0 sectors=0 fragmented=0 [ 1154.060767][T16921] stripe: buckets=0 sectors=0 fragmented=0 [ 1154.060767][T16921] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 1154.060767][T16921] need_discard: buckets=0 sectors=0 fragmented=0 [ 1154.060767][T16921] clock: read=0 [ 1154.060767][T16921] clock: write=1280 [ 1154.060767][T16921] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX [ 1154.062018][T16921] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 1154.510037][T16925] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.4765: corrupted in-inode xattr: invalid ea_ino [ 1154.696129][T11746] Bluetooth: hci1: command tx timeout [ 1154.788755][T16925] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.4765: couldn't read orphan inode 15 (err -117) [ 1154.867896][T16925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1155.443628][T16867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.456777][T16867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.464584][T16867] bridge_slave_0: entered allmulticast mode [ 1155.479848][T16867] bridge_slave_0: entered promiscuous mode [ 1155.729147][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.768585][T16867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.776502][T16867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.784267][T16867] bridge_slave_1: entered allmulticast mode [ 1155.794337][T16867] bridge_slave_1: entered promiscuous mode [ 1156.059868][T16867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.103410][T16867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.811920][T16867] team0: Port device team_slave_0 added [ 1156.927561][T16867] team0: Port device team_slave_1 added [ 1157.495041][T16867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.502458][T16867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.529208][T16867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.872788][T16956] loop1: detected capacity change from 0 to 256 [ 1157.920721][T16956] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1157.934203][T16867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.934285][T16867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.934555][T16867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.995459][T16956] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1158.043221][T16956] exFAT-fs (loop1): Invalid exboot-signature(sector = 2): 0x1119abd0 [ 1158.060832][T16956] exFAT-fs (loop1): Invalid exboot-signature(sector = 5): 0x1119abd0 [ 1158.083156][T16956] exFAT-fs (loop1): Invalid exboot-signature(sector = 6): 0x00000000 [ 1158.099991][T16956] exFAT-fs (loop1): Invalid exboot-signature(sector = 7): 0x00000000 [ 1158.136927][T16956] exFAT-fs (loop1): Invalid exboot-signature(sector = 8): 0x00000000 [ 1158.222763][T16956] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x231e8b82) [ 1158.239091][T16956] exFAT-fs (loop1): invalid boot region [ 1158.244945][T16956] exFAT-fs (loop1): failed to recognize exfat type [ 1158.931151][T16867] hsr_slave_0: entered promiscuous mode [ 1158.951982][T16867] hsr_slave_1: entered promiscuous mode [ 1158.971201][T16867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1158.985150][T16867] Cannot create hsr debugfs directory [ 1159.841799][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4782'. [ 1159.970996][T16972] loop2: detected capacity change from 0 to 16 [ 1160.329661][T16972] erofs (device loop2): mounted with root inode @ nid 36. [ 1160.608097][T16972] erofs (device loop2): read error -117 @ 0 of nid 36 [ 1161.493134][T16867] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1161.622685][T16867] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1161.802079][T16867] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1161.932375][T16867] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1162.446822][ T30] audit: type=1326 audit(1162.425:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16993 comm="syz.1.4789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabae38e929 code=0x0 [ 1164.292361][T16867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.549136][T17013] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4797'. [ 1164.665091][T16867] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.757093][T16736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.764737][T16736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.935484][T16736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.943092][T16736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.950633][T17026] netlink: 'syz.2.4802': attribute type 4 has an invalid length. [ 1165.964866][T17026] netlink: 'syz.2.4802': attribute type 2 has an invalid length. [ 1166.502598][ T5857] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1166.740729][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 1166.870310][ T5857] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1166.885894][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.894204][ T5857] usb 2-1: Product: syz [ 1166.904004][ T5857] usb 2-1: Manufacturer: syz [ 1166.917415][ T5857] usb 2-1: SerialNumber: syz [ 1167.264969][ T5857] usb 2-1: config 0 descriptor?? [ 1167.410829][ T5857] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1167.429921][ T5857] usb 2-1: setting power ON [ 1167.434730][ T5857] dvb-usb: bulk message failed: -22 (2/0) [ 1167.530804][T17031] dvb-usb: bulk message failed: -22 (3/0) [ 1167.542313][T17031] dvb-usb: bulk message failed: -22 (4/0) [ 1167.553748][T17031] cxusb: i2c read failed [ 1167.751592][ T5857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1167.902704][ T5857] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1167.916990][ T5857] usb 2-1: media controller created [ 1168.049918][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1168.572132][ T5857] usb 2-1: selecting invalid altsetting 6 [ 1168.583671][ T5857] usb 2-1: digital interface selection failed (-22) [ 1168.596014][ T5857] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1168.716291][T17049] loop4: detected capacity change from 0 to 512 [ 1168.741002][ T5857] usb 2-1: setting power OFF [ 1168.756944][ T5857] dvb-usb: bulk message failed: -22 (2/0) [ 1168.762931][ T5857] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1168.779463][ T5857] (NULL device *): no alternate interface [ 1169.120936][T17049] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1169.173960][T17049] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1169.195849][T17049] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1169.207031][T17049] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1169.321394][ T5857] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1169.495931][T17049] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1169.504962][T16867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.532813][ T5857] usb 2-1: USB disconnect, device number 18 [ 1169.583357][T17049] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4809: bg 0: block 40: padding at end of block bitmap is not set [ 1169.702054][T17049] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1169.812498][T17049] EXT4-fs (loop4): 1 truncate cleaned up [ 1169.831135][T17049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1171.034464][T17062] loop1: detected capacity change from 0 to 40427 [ 1171.072070][T17062] F2FS-fs (loop1): Wrong segment_count / block_count (4044 > 16384) [ 1171.081954][T17062] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1171.158240][T17062] F2FS-fs (loop1): invalid crc value [ 1171.181747][T17062] F2FS-fs (loop1): invalid crc value [ 1171.187861][T17062] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 1171.884678][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.461480][T17081] loop5: detected capacity change from 0 to 2048 [ 1173.786519][T17088] loop4: detected capacity change from 0 to 256 [ 1173.799149][T17088] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1173.825591][T17081] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1174.187706][T17088] FAT-fs (loop4): Directory bread(block 64) failed [ 1174.194721][T17088] FAT-fs (loop4): Directory bread(block 65) failed [ 1174.202276][T17088] FAT-fs (loop4): Directory bread(block 66) failed [ 1174.209437][T17088] FAT-fs (loop4): Directory bread(block 67) failed [ 1174.216468][T17088] FAT-fs (loop4): Directory bread(block 68) failed [ 1174.223259][T17088] FAT-fs (loop4): Directory bread(block 69) failed [ 1174.230356][T17088] FAT-fs (loop4): Directory bread(block 70) failed [ 1174.237293][T17088] FAT-fs (loop4): Directory bread(block 71) failed [ 1174.244229][T17088] FAT-fs (loop4): Directory bread(block 72) failed [ 1174.251197][T17088] FAT-fs (loop4): Directory bread(block 73) failed [ 1175.231991][T17085] loop1: detected capacity change from 0 to 32768 [ 1175.254056][T17085] jfs_mount: dbMount failed w/rc = -22 [ 1175.265535][T17085] Mount JFS Failure: -22 [ 1175.270017][T17085] jfs_mount failed w/return code = -22 [ 1177.163877][T16867] veth0_vlan: entered promiscuous mode [ 1177.250114][T17100] loop1: detected capacity change from 0 to 4096 [ 1177.430234][T16867] veth1_vlan: entered promiscuous mode [ 1177.877588][T17100] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1177.896324][T16867] veth0_macvtap: entered promiscuous mode [ 1177.993668][T17100] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 1178.087409][T16867] veth1_macvtap: entered promiscuous mode [ 1178.224269][T17100] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 1178.405673][T16867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.519626][T16867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.758925][T16867] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.768405][T16867] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.777758][T16867] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.789229][T16867] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.918394][T17117] loop2: detected capacity change from 0 to 64 [ 1179.064926][T17117] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1181.580899][T17137] Zero length message leads to an empty skb [ 1183.351710][T17152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4840'. [ 1183.630480][T17155] tipc: Started in network mode [ 1183.637394][T17155] tipc: Node identity ac141427, cluster identity 4711 [ 1183.649697][T17155] tipc: Enabled bearer , priority 10 [ 1184.765719][T13581] tipc: Node number set to 2886997031 [ 1185.708937][ T5857] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1185.964853][ T5857] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1186.034129][ T5857] usb 3-1: not running at top speed; connect to a high speed hub [ 1186.094119][ T5857] usb 3-1: config 3 has an invalid interface number: 42 but max is 1 [ 1186.107846][ T5857] usb 3-1: config 3 has an invalid interface number: 138 but max is 1 [ 1186.121593][ T5857] usb 3-1: config 3 has no interface number 0 [ 1186.133199][ T5857] usb 3-1: config 3 has no interface number 1 [ 1186.144780][ T5857] usb 3-1: config 3 interface 42 altsetting 42 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1186.164471][ T5857] usb 3-1: config 3 interface 42 altsetting 42 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1186.181715][ T5857] usb 3-1: config 3 interface 138 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1186.198044][ T5857] usb 3-1: config 3 interface 42 has no altsetting 0 [ 1186.205589][ T5857] usb 3-1: config 3 interface 138 has no altsetting 0 [ 1186.617383][ T5857] usb 3-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice=a5.ce [ 1186.632067][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.644203][ T5857] usb 3-1: Product: syz [ 1186.648823][ T5857] usb 3-1: Manufacturer: syz [ 1186.653651][ T5857] usb 3-1: SerialNumber: syz [ 1187.115816][ T5857] appletouch 3-1:3.42: Could not find int-in endpoint [ 1187.122944][ T5857] appletouch 3-1:3.42: probe with driver appletouch failed with error -5 [ 1187.139698][ T5857] usbhid 3-1:3.42: couldn't find an input interrupt endpoint [ 1187.345029][ T5857] appletouch 3-1:3.138: Failed to read mode from device. [ 1187.358773][ T5857] appletouch 3-1:3.138: probe with driver appletouch failed with error -5 [ 1187.474681][ T5857] usb 3-1: USB disconnect, device number 24 [ 1187.600662][ T5968] udevd[5968]: setting owner of /dev/bus/usb/003/024 to uid=0, gid=0 failed: No such file or directory [ 1188.383874][T17206] loop5: detected capacity change from 0 to 256 [ 1188.480613][T17206] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1188.492020][T17206] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1188.696702][T17208] netlink: 79 bytes leftover after parsing attributes in process `syz.2.4857'. [ 1188.724425][T17206] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1189.604228][T17214] loop1: detected capacity change from 0 to 1764 [ 1189.686679][T17218] loop2: detected capacity change from 0 to 256 [ 1190.125957][T11746] Bluetooth: hci1: command tx timeout [ 1191.693820][T17229] loop4: detected capacity change from 0 to 32768 [ 1191.708197][T17229] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4863 (17229) [ 1191.743280][T17229] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1191.754190][T17229] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 1191.765874][T17229] BTRFS error (device loop4): ignoresuperflags must be used with ro mount option [ 1191.777461][T17229] BTRFS info (device loop4): using free-space-tree [ 1191.787756][T17229] BTRFS error (device loop4): open_ctree failed: -22 [ 1192.964012][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.977531][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.376144][T13581] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1193.434707][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.448379][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.635753][T13581] usb 3-1: Using ep0 maxpacket: 16 [ 1193.682919][T13581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.694646][T13581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.704931][T13581] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1193.718476][T13581] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1193.728048][T13581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.103040][T13581] usb 3-1: config 0 descriptor?? [ 1194.942499][T13581] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input20 [ 1195.051906][T17261] netlink: 'syz.7.4746': attribute type 29 has an invalid length. [ 1195.161041][T17261] netlink: 'syz.7.4746': attribute type 29 has an invalid length. [ 1195.474546][T13581] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1195.593782][T17265] loop1: detected capacity change from 0 to 128 [ 1195.597331][T13581] usb 3-1: USB disconnect, device number 25 [ 1195.657556][T17265] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1195.842318][T17265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1196.079651][T17265] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only [ 1196.094238][T17265] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null. [ 1196.580366][T17272] loop4: detected capacity change from 0 to 256 [ 1196.624173][T17272] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1196.642413][T17272] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1196.885977][T17275] loop2: detected capacity change from 0 to 1024 [ 1197.073812][T17272] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1197.765111][ T3982] hfsplus: b-tree write err: -5, ino 4 [ 1199.735894][T17304] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4890'. [ 1199.796308][T17305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4889'. [ 1199.877282][T17306] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 1200.550170][ T30] audit: type=1800 audit(1200.535:115): pid=17312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4893" name="file1" dev="tmpfs" ino=5036 res=0 errno=0 [ 1200.586558][T17313] ucma_write: process 1466 (syz.5.4892) changed security contexts after opening file descriptor, this is not allowed. [ 1201.508099][T17324] loop2: detected capacity change from 0 to 16 [ 1201.532303][T17323] loop5: detected capacity change from 0 to 128 [ 1201.602727][T17324] erofs (device loop2): mounted with root inode @ nid 36. [ 1201.665676][T17323] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1201.766056][T17324] erofs (device loop2): bogus dirent @ nid 36 [ 1202.073433][T17323] syz.5.4898: attempt to access beyond end of device [ 1202.073433][T17323] loop5: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 1202.087267][T17323] syz.5.4898: attempt to access beyond end of device [ 1202.087267][T17323] loop5: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 1203.231577][T17339] loop2: detected capacity change from 0 to 512 [ 1203.248067][T17339] EXT4-fs: Ignoring removed nobh option [ 1203.507787][T17339] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.4903: iget: bad i_size value: 38620345925642 [ 1203.563541][T17339] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.4903: couldn't read orphan inode 15 (err -117) [ 1203.646904][T17339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.032589][T17352] loop1: detected capacity change from 0 to 64 [ 1204.308499][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.142769][T17363] loop5: detected capacity change from 0 to 64 [ 1205.245711][T17363] hfs: unable to locate alternate MDB [ 1205.251447][T17363] hfs: continuing without an alternate MDB [ 1205.381121][T17363] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1205.498211][T17363] hfs: bad catalog entry type 0 [ 1207.509792][T17386] loop4: detected capacity change from 0 to 1024 [ 1209.092924][T17403] loop1: detected capacity change from 0 to 128 [ 1209.306401][T17403] FAT-fs (loop1): bogus number of FAT sectors [ 1209.312776][T17403] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1212.651279][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.658233][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.766949][T16738] Bluetooth: hci1: command 0x0405 tx timeout [ 1213.026878][T17430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4936'. [ 1213.170721][T17417] fido_id[17417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1213.661927][ T9678] udevd[9678]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1213.950017][T17437] loop2: detected capacity change from 0 to 128 [ 1214.078550][ T9678] udevd[9678]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1214.850835][T16738] Bluetooth: hci1: command 0x0405 tx timeout [ 1216.301469][T17455] loop1: detected capacity change from 0 to 256 [ 1216.522730][T17455] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 1217.101636][T17458] loop5: detected capacity change from 0 to 2048 [ 1217.517359][T17458] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1217.714332][T17462] loop7: detected capacity change from 0 to 2048 [ 1218.073659][T17462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1219.510867][T15748] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1219.710945][T15748] usb 6-1: Using ep0 maxpacket: 8 [ 1219.772679][T15748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.791578][T15748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.807954][T15748] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1219.822769][T15748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.072263][T15748] usb 6-1: config 0 descriptor?? [ 1220.548692][T15748] hid (null): bogus close delimiter [ 1220.580746][T15748] uclogic 0003:2179:0053.0007: interface is invalid, ignoring [ 1221.052722][T15748] usb 6-1: USB disconnect, device number 18 [ 1222.111482][T17489] loop1: detected capacity change from 0 to 32768 [ 1222.337699][T17489] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names,read_only [ 1222.337844][T17489] allowing incompatible features above 0.0: (unknown version) [ 1222.337939][T17489] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1222.379395][T17489] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 1222.388867][T17489] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 1222.397830][T17489] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 1222.397830][T17489] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 1222.680545][T17489] bcachefs (loop1): btree node read error at btree lru level 0/0 [ 1222.680654][T17489] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0 [ 1222.680772][T17489] loop1 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0 [ 1222.680863][T17489] flagging btree lru lost data [ 1222.680941][T17489] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 1222.681049][T17489] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 1222.681153][T17489] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 1222.681247][T17489] ret btree_node_read_validate_error [ 1222.757574][T17489] bcachefs (loop1): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 1222.859349][T17489] bcachefs (loop1): btree node read error at btree freespace level 0/0 [ 1222.859459][T17489] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 1222.859575][T17489] loop1 node offset 0/32 bset u64s 0: invalid bkey format: field 4 too large: 0 + 4294967296 > 4294967295 [ 1222.859674][T17489] u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:4294967296, 0:0 [ 1222.859750][T17489] flagging btree freespace lost data [ 1222.859842][T17489] ret btree_node_read_validate_error [ 1222.916422][T17489] bcachefs (loop1): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 1222.969617][T17489] bcachefs (loop1): check_topology... done [ 1222.983116][T17489] bcachefs (loop1): accounting_read... done [ 1222.992405][T17489] bcachefs (loop1): alloc_read... done [ 1223.000689][T17489] bcachefs (loop1): snapshots_read... done [ 1223.009765][T17489] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 1223.023934][T17489] bcachefs (loop1): done starting filesystem [ 1223.371089][ T5806] bcachefs (loop1): shutting down [ 1223.804031][ T5806] bcachefs (loop1): shutdown complete [ 1225.254328][T17503] loop5: detected capacity change from 0 to 512 [ 1225.512640][T17503] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1225.526643][T17503] EXT4-fs error (device loop5): ext4_quota_enable:7124: comm syz.5.4965: inode #16777216: comm syz.5.4965: iget: illegal inode # [ 1225.651551][T17503] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.4965: Bad quota inode: 16777216, type: 2 [ 1225.808696][T17503] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 1226.066003][T17503] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1226.075108][T17503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0007-000000000000 ro without journal. Quota mode: writeback. [ 1226.506801][T17503] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4965: bg 0: block 248: padding at end of block bitmap is not set [ 1226.974974][ T8778] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 1227.484397][T17517] loop7: detected capacity change from 0 to 256 [ 1228.166850][T17517] FAT-fs (loop7): Directory bread(block 64) failed [ 1228.173692][T17517] FAT-fs (loop7): Directory bread(block 65) failed [ 1228.180987][T17517] FAT-fs (loop7): Directory bread(block 66) failed [ 1228.187928][T17517] FAT-fs (loop7): Directory bread(block 67) failed [ 1228.194854][T17517] FAT-fs (loop7): Directory bread(block 68) failed [ 1228.201871][T17517] FAT-fs (loop7): Directory bread(block 69) failed [ 1228.208970][T17517] FAT-fs (loop7): Directory bread(block 70) failed [ 1228.216027][T17517] FAT-fs (loop7): Directory bread(block 71) failed [ 1228.222954][T17517] FAT-fs (loop7): Directory bread(block 72) failed [ 1228.230087][T17517] FAT-fs (loop7): Directory bread(block 73) failed [ 1228.968165][T17528] loop2: detected capacity change from 0 to 128 [ 1229.092033][T17528] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1229.311005][T17528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1229.796794][T17532] loop4: detected capacity change from 0 to 256 [ 1229.898549][T17532] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1229.909991][T17532] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1230.584046][T17532] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1230.973573][T17532] exFAT-fs (loop4): error, bogus directory size (clus : ondisk(12) != counted(13)) [ 1230.988821][T17532] exFAT-fs (loop4): Filesystem has been set read-only [ 1231.073223][T17538] loop5: detected capacity change from 0 to 32768 [ 1231.184194][T17538] bcachefs (/dev/loop5): error validating superblock: Bad number of member devices 129 (max 64) [ 1231.196821][T17538] bcachefs: bch2_fs_get_tree() error: invalid_sb_too_many_members [ 1232.330209][T17546] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 1234.772106][T17572] loop4: detected capacity change from 0 to 16 [ 1234.950852][T17572] erofs (device loop4): mounted with root inode @ nid 36. [ 1236.112348][T17585] loop4: detected capacity change from 0 to 256 [ 1237.066755][T17591] loop7: detected capacity change from 0 to 32768 [ 1237.177327][T17591] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section crypt: bad kdf type 10 [ 1237.177327][T17591] crypt (size 64): [ 1237.177327][T17591] KFD: 10 [ 1237.177327][T17591] scrypt n: 52612 [ 1237.177327][T17591] scrypt r: 44575 [ 1237.177327][T17591] scrypt p: 1453 [ 1237.177327][T17591] [ 1237.211121][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.218724][T17591] bcachefs: bch2_fs_get_tree() error: invalid_sb_crypt [ 1237.671528][T17585] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1239.149603][T17607] loop4: detected capacity change from 0 to 512 [ 1239.246380][T17607] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1239.410008][T17607] EXT4-fs (loop4): invalid journal inode [ 1239.416466][T17607] EXT4-fs (loop4): can't get journal size [ 1239.547183][T17607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 1239.666449][T17607] System zones: 1-12, 13-13 [ 1239.797668][T17607] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.5003: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1240.049526][T17607] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.5003: couldn't read orphan inode 15 (err -117) [ 1240.245535][T17607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1240.740862][T17610] loop2: detected capacity change from 0 to 32768 [ 1241.062554][T17610] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names [ 1241.062694][T17610] allowing incompatible features above 0.0: (unknown version) [ 1241.062788][T17610] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1241.118826][T17610] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 1241.128025][T17610] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 1241.136698][T17610] bcachefs (loop2): superblock requires following recovery passes to be run: [ 1241.136698][T17610] delete_dead_inodes,fix_reflink_p [ 1241.161208][T17610] bcachefs (loop2): Version upgrade required: [ 1241.161208][T17610] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 1241.161208][T17610] Doing incompatible version upgrade from 0.8: (unknown version) to 1.28: inode_has_case_insensitive [ 1241.161208][T17610] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 1241.414514][T17610] bcachefs (loop2): invalid bkey in btree_node btree=alloc level=0: u64s 29 type deleted 1:256:65536 len 0 ver 0: [ 1241.414629][T17610] nonzero snapshot, deleting [ 1241.610664][T17610] bcachefs (loop2): btree node read error at btree freespace level 0/0 [ 1241.610775][T17610] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 1241.610896][T17610] loop2 node offset 0/32 bset u64s 0: invalid bkey format: field 4 too large: 0 + 4294967296 > 4294967295 [ 1241.610997][T17610] u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:4294967296, 0:0 [ 1241.611089][T17610] flagging btree freespace lost data [ 1241.611164][T17610] ret btree_node_read_validate_error [ 1241.697385][T17610] bcachefs (loop2): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 1241.772219][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.865396][T17610] bcachefs (loop2): check_topology... done [ 1241.883465][T17610] bcachefs (loop2): accounting_read... done [ 1241.905080][T17610] bcachefs (loop2): alloc_read... done [ 1241.924500][T17610] bcachefs (loop2): snapshots_read... done [ 1241.943714][T17610] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 1241.965924][T17610] bcachefs (loop2): done starting filesystem [ 1242.353904][ T5801] bcachefs (loop2): shutting down [ 1242.600112][ T5801] bcachefs (loop2): shutdown complete [ 1242.820476][T17642] loop4: detected capacity change from 0 to 128 [ 1242.930949][T17642] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1243.017025][T17642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1243.879037][T17650] mkiss: ax0: crc mode is auto. [ 1244.996159][T17659] loop4: detected capacity change from 0 to 1024 [ 1245.041810][T17664] loop7: detected capacity change from 0 to 256 [ 1245.142472][T17664] exfat: Deprecated parameter 'utf8' [ 1245.318929][T17664] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1245.342294][T17539] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1245.524395][T17539] usb 2-1: Using ep0 maxpacket: 16 [ 1245.612501][T17539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.629166][T17539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.644588][T17539] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1245.666500][T17539] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1245.682365][T17539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.754558][ T8508] hfsplus: b-tree write err: -5, ino 4 [ 1245.973626][T17539] usb 2-1: config 0 descriptor?? [ 1246.530705][T17539] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1246.543375][T17539] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1246.556409][T17539] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1246.564014][T17539] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1246.582568][T17539] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1246.657010][T17673] netlink: 'syz.4.5024': attribute type 5 has an invalid length. [ 1246.896813][T17539] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input21 [ 1246.924266][ T5855] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1247.150917][ T5855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.167362][ T5855] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1247.182273][ T5855] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1247.200065][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.252649][ T5855] usb 6-1: config 0 descriptor?? [ 1247.264644][T17539] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1247.303597][T17539] usb 2-1: USB disconnect, device number 19 [ 1247.341347][ T5855] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1247.354133][ T5855] dvb-usb: bulk message failed: -22 (3/0) [ 1247.431888][ T5855] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1247.449042][ T5855] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1247.463591][ T5855] usb 6-1: media controller created [ 1247.587765][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1247.617412][T17674] dvb-usb: bulk message failed: -22 (2/0) [ 1247.694207][ T5855] dvb-usb: bulk message failed: -22 (6/0) [ 1247.716467][ T5855] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1247.791981][ T5855] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input22 [ 1247.882963][ T5855] dvb-usb: schedule remote query interval to 150 msecs. [ 1247.895471][ T5855] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1247.997086][ T5855] usb 6-1: USB disconnect, device number 19 [ 1248.232150][ T5855] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1249.896360][T17690] loop7: detected capacity change from 0 to 32768 [ 1249.907164][T17690] XFS: ikeep mount option is deprecated. [ 1250.003233][T17690] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1250.381810][T17707] netem: incorrect gi model size [ 1250.392911][T17707] netem: change failed [ 1251.864220][T17711] loop4: detected capacity change from 0 to 40427 [ 1251.902155][T17711] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 1251.916617][T17711] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1251.941533][T17690] XFS (loop7): Ending clean mount [ 1251.964154][T17711] F2FS-fs (loop4): invalid crc value [ 1252.034281][T17711] F2FS-fs (loop4): SIT is corrupted node# 2 vs 7 [ 1252.074918][T17690] XFS (loop7): Quotacheck needed: Please wait. [ 1252.214833][T17711] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 1252.327934][T17690] XFS (loop7): Quotacheck: Done. [ 1252.460511][T16867] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1253.245485][T17729] loop2: detected capacity change from 0 to 64 [ 1253.701879][T17730] Trying to free block not in datazone [ 1255.871155][ T30] audit: type=1326 audit(1255.825:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabae38e929 code=0x7ffc0000 [ 1256.198523][ T30] audit: type=1326 audit(1255.905:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabae38e929 code=0x7ffc0000 [ 1256.221114][ T30] audit: type=1326 audit(1255.905:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fabae38e929 code=0x7ffc0000 [ 1256.243696][ T30] audit: type=1326 audit(1255.995:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabae38e929 code=0x7ffc0000 [ 1256.266288][ T30] audit: type=1326 audit(1255.995:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabae38e929 code=0x7ffc0000 [ 1257.102215][T17741] fido_id[17741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1257.154381][T17754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5048'. [ 1257.169131][T17754] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5048'. [ 1257.183700][T17754] netlink: 'syz.4.5048': attribute type 10 has an invalid length. [ 1257.472060][T17757] loop1: detected capacity change from 0 to 256 [ 1257.514677][T17757] exfat: Deprecated parameter 'utf8' [ 1257.526812][T17757] exfat: Deprecated parameter 'utf8' [ 1257.749368][T17757] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1258.922443][T17769] sp0: Synchronizing with TNC [ 1258.996813][T17768] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5053'. [ 1259.444147][T17775] loop1: detected capacity change from 0 to 256 [ 1259.696316][T17775] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1260.323325][T17786] loop4: detected capacity change from 0 to 47 [ 1260.414000][T13581] IPVS: starting estimator thread 0... [ 1260.556855][T17792] IPVS: using max 192 ests per chain, 9600 per kthread [ 1261.620876][T17801] loop7: detected capacity change from 0 to 64 [ 1264.203343][T17809] loop5: detected capacity change from 0 to 8192 [ 1265.498547][T17822] loop1: detected capacity change from 0 to 32768 [ 1265.508541][T17822] XFS: noattr2 mount option is deprecated. [ 1265.518888][T17822] XFS (loop1): attr2 and noattr2 cannot both be specified. [ 1266.206522][T17836] loop4: detected capacity change from 0 to 256 [ 1266.223241][T17836] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1270.220200][T17873] Bluetooth: MGMT ver 1.23 [ 1271.560430][T17885] loop1: detected capacity change from 0 to 64 [ 1273.320042][T17897] loop1: detected capacity change from 0 to 128 [ 1273.621063][T17897] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1273.743502][T17891] loop7: detected capacity change from 0 to 32768 [ 1274.123212][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.392715][T17891] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names [ 1274.392849][T17891] allowing incompatible features above 0.0: (unknown version) [ 1274.392942][T17891] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1274.449219][T17891] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 1274.466440][T17891] bcachefs (loop7): recovering from clean shutdown, journal seq 10 [ 1274.481059][T17891] bcachefs (loop7): Version upgrade required: [ 1274.481059][T17891] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 1274.481059][T17891] Doing incompatible version upgrade from 0.8: (unknown version) to 1.28: inode_has_case_insensitive [ 1274.481059][T17891] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 1274.696211][T17891] bcachefs (loop7): btree node read error at btree xattrs level 0/0 [ 1274.696321][T17891] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 65535 min_key R POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 1274.696439][T17891] loop7 node offset 16/65535: btree node data missing: expected 65535 sectors, found 16 [ 1274.696534][T17891] repair success (rewriting node) [ 1274.858207][ T5806] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1274.940647][T17891] bcachefs (loop7): btree node read error at btree lru level 0/0 [ 1274.940755][T17891] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0 [ 1274.940871][T17891] loop7 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0 [ 1274.940961][T17891] flagging btree lru lost data [ 1274.941034][T17891] ret btree_node_read_validate_error [ 1275.002673][T17891] bcachefs (loop7): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 1275.031684][T17891] bcachefs (loop7): btree node read error at btree freespace level 0/0 [ 1275.031794][T17891] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 1275.031918][T17891] loop7 node offset 0/32 bset u64s 0: invalid bkey format: field 4 too large: 0 + 4294967296 > 4294967295 [ 1275.032024][T17891] u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:4294967296, 0:0 [ 1275.032108][T17891] flagging btree freespace lost data [ 1275.032185][T17891] ret btree_node_read_validate_error [ 1275.123363][T17891] bcachefs (loop7): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 1275.171423][T17891] bcachefs (loop7): check_topology... done [ 1275.192518][T17891] bcachefs (loop7): accounting_read... done [ 1275.212357][T17891] bcachefs (loop7): alloc_read... done [ 1275.221541][T17891] bcachefs (loop7): snapshots_read... done [ 1275.235878][T17891] bcachefs (loop7): Fixed errors, running fsck a second time to verify fs is clean [ 1275.257727][T17891] bcachefs (loop7): done starting filesystem [ 1275.380911][T16867] bcachefs (loop7): shutting down [ 1275.603605][T16867] bcachefs (loop7): shutdown complete [ 1277.376151][T17934] loop5: detected capacity change from 0 to 1024 [ 1277.886373][ T30] audit: type=1800 audit(1277.855:121): pid=17934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5107" name="file2" dev="loop5" ino=21 res=0 errno=0 [ 1279.944664][T17954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5114'. [ 1284.180156][T17983] loop1: detected capacity change from 0 to 32768 [ 1284.248626][T17983] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry (unknown data_type 122): 1/246 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 5 5 6 7 8 9 10 11 14 14 24 27 31 35 43 47 47 51 56 65 68 80 89 96 102 119 128 132 172 173 174 179 205 222 235 245] [ 1284.248626][T17983] replicas_v0 (size 64): [ 1284.248626][T17983] (unknown data_type 122): 246 [119 43 0 222 65 89 132 205 31 174 173 5 172 235 128 0 0 0 0 0 0 0 0 0 0 1 8 0 0 0 179 245 51 102 0 0 0 0 0 0 14 96 0 0 0 0 0 0 0 0 0 0 0 0 5 0 0 0 1 0 0 0 9 0 0 0 0 0 0 0 7 0 0 0 0 0 0 0 24 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 80 0 0 0 10 0 0 0 0 0 0 0 0 0 0 0 56 68 14 0 0 0 0 0 0 0 0 0 0 [ 1284.249592][T17983] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry [ 1285.511900][T17992] autofs: Bad value for 'uid' [ 1285.524010][T17992] autofs: Bad value for 'uid' [ 1285.824623][T13581] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1286.189247][T13581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.202601][T13581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.213571][T13581] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1286.223471][T13581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.257874][T17998] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5132'. [ 1286.267408][T17998] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5132'. [ 1286.451686][T17998] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1286.687655][T13581] usb 6-1: config 0 descriptor?? [ 1287.470940][T13581] usb 6-1: string descriptor 0 read error: -71 [ 1287.550376][T18004] loop4: detected capacity change from 0 to 1024 [ 1287.552093][T13581] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 1287.568950][T13581] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 1287.577724][T13581] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 1287.586423][T13581] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 1287.594577][T13581] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 1287.985656][T13581] usb 6-1: USB disconnect, device number 20 [ 1288.449236][T18001] syz.2.5133 (18001): drop_caches: 2 [ 1288.866406][ T8503] hfsplus: b-tree write err: -5, ino 4 [ 1290.752780][T18031] hugetlbfs: Bad value '¢' for mount option 'nr_inodes' [ 1290.752780][T18031] [ 1291.782958][T18041] ===================================================== [ 1291.790497][T18041] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xf0e/0x33f0 [ 1291.798358][T18041] _copy_to_iter+0xf0e/0x33f0 [ 1291.803257][T18041] __skb_datagram_iter+0x196/0x12c0 [ 1291.810511][T18041] skb_copy_datagram_iter+0x5b/0x1e0 [ 1291.816288][T18041] tun_do_read+0x26d8/0x30f0 [ 1291.821116][T18041] tun_chr_read_iter+0x393/0x6b0 [ 1291.826457][T18041] vfs_read+0x85a/0xf00 [ 1291.832884][T18041] __x64_sys_read+0x1fb/0x4d0 [ 1291.838737][T18041] x64_sys_call+0x39db/0x3db0 [ 1291.843680][T18041] do_syscall_64+0xd9/0x210 [ 1291.848998][T18041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.855129][T18041] [ 1291.857882][T18041] Uninit was created at: [ 1291.862406][T18041] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 1291.868798][T18041] kmalloc_reserve+0x13c/0x4b0 [ 1291.873829][T18041] __alloc_skb+0x347/0x7d0 [ 1291.878810][T18041] alloc_skb_with_frags+0xc5/0xa60 [ 1291.884213][T18041] sock_alloc_send_pskb+0xad8/0xc70 [ 1291.889923][T18041] __ip_append_data+0x4e30/0x7100 [ 1291.897112][T18041] ip_make_skb+0x1df/0x5f0 [ 1291.901770][T18041] udp_sendmsg+0x2bff/0x34b0 [ 1291.906956][T18041] udpv6_sendmsg+0x1795/0x4220 [ 1291.911942][T18041] inet6_sendmsg+0x1ef/0x2a0 [ 1291.916944][T18041] __sock_sendmsg+0x145/0x3d0 [ 1291.921878][T18041] ____sys_sendmsg+0x7e0/0xd80 [ 1291.927072][T18041] ___sys_sendmsg+0x271/0x3b0 [ 1291.933876][T18041] __x64_sys_sendmsg+0x211/0x3e0 [ 1291.939791][T18041] x64_sys_call+0x32fb/0x3db0 [ 1291.944728][T18041] do_syscall_64+0xd9/0x210 [ 1291.949858][T18041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.956684][T18041] [ 1291.959130][T18041] Bytes 38-41 of 100 are uninitialized [ 1291.964740][T18041] Memory access of size 100 starts at ffff888051b59c00 [ 1291.971997][T18041] Data copied to user address 00007ffe2f1aa5e0 [ 1291.978476][T18041] [ 1291.980965][T18041] CPU: 1 UID: 0 PID: 18041 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) [ 1291.993856][T18041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1292.004292][T18041] ===================================================== [ 1292.011520][T18041] Disabling lock debugging due to kernel taint [ 1292.017973][T18041] Kernel panic - not syncing: kmsan.panic set ... [ 1292.024587][T18041] CPU: 1 UID: 0 PID: 18041 Comm: syz-executor Tainted: G B 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) [ 1292.038754][T18041] Tainted: [B]=BAD_PAGE [ 1292.043056][T18041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1292.053302][T18041] Call Trace: [ 1292.056741][T18041] [ 1292.059840][T18041] __dump_stack+0x26/0x30 [ 1292.064413][T18041] dump_stack_lvl+0x53/0x270 [ 1292.069246][T18041] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1292.075363][T18041] dump_stack+0x1e/0x25 [ 1292.079783][T18041] panic+0x4bd/0xd50 [ 1292.083992][T18041] kmsan_report+0x31c/0x320 [ 1292.088774][T18041] ? kmsan_internal_check_memory+0x16c/0x230 [ 1292.095053][T18041] ? kmsan_copy_to_user+0xf1/0x190 [ 1292.100438][T18041] ? _copy_to_iter+0xf0e/0x33f0 [ 1292.105506][T18041] ? __skb_datagram_iter+0x196/0x12c0 [ 1292.111104][T18041] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 1292.116783][T18041] ? tun_do_read+0x26d8/0x30f0 [ 1292.121799][T18041] ? tun_chr_read_iter+0x393/0x6b0 [ 1292.127132][T18041] ? vfs_read+0x85a/0xf00 [ 1292.131711][T18041] ? __x64_sys_read+0x1fb/0x4d0 [ 1292.136819][T18041] ? x64_sys_call+0x39db/0x3db0 [ 1292.141925][T18041] ? do_syscall_64+0xd9/0x210 [ 1292.146819][T18041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.153150][T18041] ? kmsan_get_metadata+0xfb/0x160 [ 1292.158507][T18041] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1292.165084][T18041] ? kmsan_get_metadata+0xfb/0x160 [ 1292.170478][T18041] ? kmsan_get_metadata+0xfb/0x160 [ 1292.175870][T18041] ? kmsan_get_metadata+0xfb/0x160 [ 1292.181254][T18041] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1292.187359][T18041] kmsan_internal_check_memory+0x16c/0x230 [ 1292.193476][T18041] kmsan_copy_to_user+0xf1/0x190 [ 1292.198686][T18041] _copy_to_iter+0xf0e/0x33f0 [ 1292.203587][T18041] ? kernel_text_address+0x10e/0x1a0 [ 1292.209132][T18041] ? kmsan_get_metadata+0xfb/0x160 [ 1292.214492][T18041] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1292.220558][T18041] ? do_syscall_64+0xc1/0x210 [ 1292.225450][T18041] ? kmsan_get_metadata+0xfb/0x160 [ 1292.230843][T18041] __skb_datagram_iter+0x196/0x12c0 [ 1292.236260][T18041] ? filter_irq_stacks+0x49/0x190 [ 1292.241496][T18041] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1292.247363][T18041] ? stack_depot_save_flags+0x35/0x7b0 [ 1292.253078][T18041] skb_copy_datagram_iter+0x5b/0x1e0 [ 1292.258585][T18041] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1292.264656][T18041] tun_do_read+0x26d8/0x30f0 [ 1292.269508][T18041] ? __pfx_default_wake_function+0x10/0x10 [ 1292.275629][T18041] tun_chr_read_iter+0x393/0x6b0 [ 1292.280811][T18041] vfs_read+0x85a/0xf00 [ 1292.285226][T18041] ? __pfx_tun_chr_read_iter+0x10/0x10 [ 1292.290933][T18041] __x64_sys_read+0x1fb/0x4d0 [ 1292.295891][T18041] x64_sys_call+0x39db/0x3db0 [ 1292.300804][T18041] do_syscall_64+0xd9/0x210 [ 1292.305511][T18041] ? irqentry_exit+0x16/0x60 [ 1292.310338][T18041] ? clear_bhb_loop+0x40/0x90 [ 1292.315230][T18041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.321338][T18041] RIP: 0033:0x7f48b518d33c [ 1292.325932][T18041] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1292.345805][T18041] RSP: 002b:00007ffe2f1aa5b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1292.354467][T18041] RAX: ffffffffffffffda RBX: 00007ffe2f1aa5e0 RCX: 00007f48b518d33c [ 1292.362625][T18041] RDX: 00000000000003e8 RSI: 00007ffe2f1aa5e0 RDI: 00000000000000c8 [ 1292.370773][T18041] RBP: 00007ffe2f1aaa1c R08: 0000000000000000 R09: 0000000000000000 [ 1292.378934][T18041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000037 [ 1292.387103][T18041] R13: 00000000000927c0 R14: 000000000013b267 R15: 00007ffe2f1aaa70 [ 1292.395302][T18041] [ 1292.398852][T18041] Kernel Offset: disabled [ 1292.403272][T18041] Rebooting in 86400 seconds..