last executing test programs: 27m58.564865224s ago: executing program 32 (id=1009): r0 = socket(0x1e, 0x1, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000004c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4800) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/79, 0x4f}], 0x1, &(0x7f0000000840)=""/70, 0x18}, 0x0) 26m24.870548126s ago: executing program 33 (id=1343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25m33.450190003s ago: executing program 34 (id=1473): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 23m53.777740846s ago: executing program 35 (id=1948): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88640, 0x0) 15m54.810099822s ago: executing program 8 (id=4188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x0) 15m53.869164315s ago: executing program 8 (id=4192): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa08344, &(0x7f0000000200)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@quota}, {@usrjquota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x51f001, 0x488) 15m52.598102694s ago: executing program 8 (id=4199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r1, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) 15m51.323303357s ago: executing program 8 (id=4206): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r1, 0x7, 0x70bd27, 0x0, {{0x2}, {@val={0x8, 0x2}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x30}}, 0x0) 15m50.218351098s ago: executing program 8 (id=4211): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) 15m49.409104126s ago: executing program 8 (id=4216): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) statx(r0, &(0x7f00000004c0)='.\x00', 0x0, 0x0, 0x0) 15m34.194195151s ago: executing program 36 (id=4216): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) statx(r0, &(0x7f00000004c0)='.\x00', 0x0, 0x0, 0x0) 9m23.654616127s ago: executing program 9 (id=5768): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) 9m22.627133084s ago: executing program 9 (id=5773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x2, 0x1, 0x46, 0xfffffffc, 0x992}, 0x14) 9m21.795074303s ago: executing program 9 (id=5777): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1511, 0x1008c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044880}, 0x0) 9m20.947008564s ago: executing program 9 (id=5782): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 9m20.11124955s ago: executing program 9 (id=5786): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 9m19.219386663s ago: executing program 9 (id=5790): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x4, @private0, 0x7, 0x2}, 0x20) 9m3.96551342s ago: executing program 37 (id=5790): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x4, @private0, 0x7, 0x2}, 0x20) 4m51.218329976s ago: executing program 3 (id=6845): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900ffffffff02dbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m50.336392762s ago: executing program 3 (id=6849): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040)) 4m49.377068665s ago: executing program 3 (id=6863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) 4m48.180747353s ago: executing program 3 (id=6858): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00000003c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000540)={0x2, 0x6e21, @private=0xa010102}, 0x10) 4m47.572205727s ago: executing program 3 (id=6861): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x47d, &(0x7f0000000ec0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 4m46.455875114s ago: executing program 3 (id=6868): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc040, 0x0, 0x11, 0x0, &(0x7f0000000d40)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m30.841600431s ago: executing program 38 (id=6868): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc040, 0x0, 0x11, 0x0, &(0x7f0000000d40)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m8.579298474s ago: executing program 5 (id=7209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3f7) ioctl$sock_TIOCINQ(r0, 0x894b, 0x0) 3m7.588685927s ago: executing program 5 (id=7214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d0000000024000280080001400000000d0500030000000000080004400000008b08000240000000040900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0xc0000}, 0x0) 3m6.693672818s ago: executing program 5 (id=7219): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) landlock_restrict_self(r0, 0x0) 3m6.235122265s ago: executing program 5 (id=7221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="cd3e25bd7000fbdbdf25010000000800020005000000c600010043"], 0xf4}, 0x1, 0x0, 0x0, 0x4004041}, 0x4) 3m5.287302705s ago: executing program 5 (id=7226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r0}, 0x38) 3m4.306455948s ago: executing program 5 (id=7230): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r0, 0x1007}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 2m48.965840693s ago: executing program 39 (id=7230): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r0, 0x1007}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 2m37.512546939s ago: executing program 2 (id=7317): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') lseek(r0, 0x9, 0x1) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000020) 2m36.537563624s ago: executing program 2 (id=7320): ioprio_set$pid(0x2, 0x0, 0x4004) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r0, r0, 0x0, 0x21) 2m35.399699627s ago: executing program 2 (id=7324): socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d0000000a0000000400000005"], 0x48) 2m34.318135491s ago: executing program 2 (id=7328): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[], 0x0) 2m33.289847769s ago: executing program 2 (id=7331): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) 2m32.525202188s ago: executing program 2 (id=7334): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000000280)) 2m17.063548796s ago: executing program 40 (id=7334): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000000280)) 7.291921164s ago: executing program 1 (id=7853): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xb11, 0x103144) r1 = dup(r0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) 6.633827227s ago: executing program 6 (id=7857): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63d, 0x1, 0x1, 0xd59f83, 0x19f2, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x3, 0xba2, 0x0, 0x0, {0x8, 0xffffffff}, 0xd1, 0x9}}) 6.274322605s ago: executing program 1 (id=7859): unshare(0x400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x0, 0x0) 6.047760618s ago: executing program 7 (id=7860): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) 5.898254198s ago: executing program 4 (id=7861): unshare(0x22020600) r0 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) 5.514090372s ago: executing program 6 (id=7862): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe8c, 0x258, 0x1, 0x1, 0xc, 0x19f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x9, 0x440, 0xd1, 0xc, 0x30, {0x8, 0x2}, 0xd0, 0x81}}) 5.472889608s ago: executing program 0 (id=7863): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x840) 5.186844407s ago: executing program 1 (id=7864): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x102, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b00010100000009040000120206000005240600000524ab"], 0x0) 5.062421208s ago: executing program 7 (id=7865): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f00000000c0), 0x26, 0x766, &(0x7f0000000a40)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0xc05c5340, &(0x7f0000000040)) 4.829013472s ago: executing program 4 (id=7866): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x3, 0x3, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 4.512198858s ago: executing program 0 (id=7867): syz_mount_image$erofs(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES16], 0x1, 0x23d, &(0x7f0000000c00)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) 4.478273127s ago: executing program 6 (id=7868): r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x80402) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) 3.780595268s ago: executing program 4 (id=7869): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x280000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(r0, r0, 0x813c, 0x0) 3.537330896s ago: executing program 6 (id=7870): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@allow_utime={'allow_utime', 0x3d, 0xc4}}, {@namecase}, {@errors_remount}, {@umask={'umask', 0x3d, 0x10}}, {@fmask={'fmask', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@gid}, {@umask={'umask', 0x3d, 0x3}}, {@errors_continue}, {}, {@allow_utime={'allow_utime', 0x3d, 0x400000}}]}, 0x1, 0x1528, &(0x7f0000000340)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.485277542s ago: executing program 7 (id=7871): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x18, 0x5a, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x0) 3.254550955s ago: executing program 0 (id=7872): r0 = io_uring_setup(0x3538, &(0x7f0000000300)) close(r0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 3.133854619s ago: executing program 4 (id=7873): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x1fffff, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 2.687299967s ago: executing program 1 (id=7874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4048010) 2.539925858s ago: executing program 0 (id=7875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2.220452279s ago: executing program 4 (id=7876): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x5008000, &(0x7f00000004c0)=ANY=[@ANYBLOB="757466383d302c756e695f786c6174653d312c696f636861727365743d6d616363656c7469632c696f636861727365743d64656661756c742c756d61736b3d30303030303030303030303030303030303030303230302c757466383d312c756e695f786c6174653d302c726f6469722c00a61b769c2f94abdcd0660f2f7355dbd97f81ee573bbbb27e69be2600008d3e531e1113a57b4b085c1aa59f4db55ee39933ed508263ea8e3318ac15f42c1b3b6672f54de33c0f408cde5dbdc5a2b8eca389d9963438cecce51dd13b98d561126c9731129811638d394ce51f70f815dd0ea21cab265f640a6d3e"], 0x1, 0x27e, &(0x7f0000000740)="$eJzs3UFrI2UYB/AnTWzSgiQHoSiCI148lbbiPUUqiAFFyUFPFpuiNLXQQKE9tL1Vv4N+Bb3pVfBQvPoFRJDuwl7aPfWwkCU7SZN0synZ3ews29/v0od3nn/fN9Nhhh7mzTdvb29t7LQ2Ly7OolTKRaEa1bjMRSVmIh+p4wAAXiWX7Xact1NZrwUAeDE8/wHg9hnx/J/pHcsdX419ns3qAIBpeKb//2emsiQAYMq+/OrrT1drtbUvkqQUsX2yV9+rpz/T46ub8X00oxFLUY4HEe0raf3xJ7W1paTjTiVK20fd/NFePT+cX45yVEbnl5NU1Afzr8V8N//vfDRi5TQXb4zOr4zMz8b77w3Mvxjl+Ofb2IlmbEQnm+aLEXG4nCQffVa7li8+6gMAAAAAAAAAAAAAAAAAAAAAgGlYTHpK3ZHh/XsW+w2V4f1x0u7+/kDF8tzY/YGu789TiLcK2X1uAAAAAAAAAAAAAAAAAAAAeJm09g+21pvNxu644oe/f/3rrBjRzkesN3tv7d+UGlnkuuHJUidPNdf44vV3///5+qFCHGwVJz8/z7f4850MJm3sRmGS1OnZd29+0Fr48Ek9URgc+alzuQz1dC6kEb+5MK0Tfq8cMaVT91uvqN5/rKd3MTV257L4mw4WC79U1/84/O9udyQfN6TG3DTa+anciwAAAAAAAAAAAAAAAAAA4Lbrv/Sb9UoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDv97/+ftChG8/cfW/tJd6Q01DN7NcF5O9PPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHQ8DAAD//xEekcw=") r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000540)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) 1.986038301s ago: executing program 7 (id=7877): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c00ca) 1.810806581s ago: executing program 6 (id=7878): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x0) 1.758069001s ago: executing program 1 (id=7879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x8, 0x203, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x8002, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000014c0), &(0x7f00000024c0), 0x6, r0}, 0x38) 1.587926651s ago: executing program 0 (id=7880): r0 = fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) 1.114528987s ago: executing program 4 (id=7881): syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@check_strict}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}, 0x1, 0xabe, &(0x7f0000001540)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 1.058450272s ago: executing program 7 (id=7882): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1503, &(0x7f0000002a80)="$eJzs3AuYzlW7MPB1r7X+jGnS0ySHYd3r/vOkwTJJkkNCDkmSJElOCUmTJAmJIackJDkfJslhCMlhGpPG+XzIOWnySpMkITmF9V1629v77t79tvf3tj/ftef+Xde6Zt2znns995p7rnn+/+e65vm++8g6zerWbEJE4l8Cf/2SIoSIEUIMEULcIIQIhBAV4ivEX1nPpyDlX3sS9ud6NO1aV8CuJe5/7sb9z924/7kb9z934/7nbtz/3I37n7tx/xnLzbbPKXIjj9w7+P3/3Ixf//8XySk7+euNZW/u8d9I4f7nbtz/3I37n7tx/3M37n/uxv3/36/GP1nj/udu3H/GcrNr/f4zj2s7rvXvH2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx3OGcv0oLIf5tfq3rYowxxhhjjDHG2J/H573WFTDGGGOMMcYYY+x/HggplNAiEHlEXhEj8olYcZ2IE9eL/OIGERE3inhxkyggbhYFRSFRWBQRCaKoKCaMQGEFiVAUFyVEVNwiSopbRaIoJUqLMsKJsiJJ3CbKidtFeXGHqCDuFBXFXaKSqCyqiKriblFN3COqixqiprhX1BK1RR1RV9wn6on7RX3xgGggHhQNxUOikXhYNBaPiCbiUdFUPCaaicdFc/GEaCFailaitWjzf5X/iugtXhV9RF+RIvqJ/uI1MUAMFIPEYDFEvC6GijfEMPGmGC5GiJHiLTFKvC1Gi3fEGDFWjBPjxQQxUUwSk8UUMVWkinfFNPGemC7eFzPETDFLzBZpYo6YKz4Q88R8sUB8KBaKj8QisVgsEUtFuvhYZIhlIlN8IpaLT0WWWCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu/hM7BA7xS6xW+wRe8U+8bnYL74QB8SXIlt89d/MP/sf8nuAAAESJGjQkAfyQAzEQCzEQhzEQX7IDxGIQDzEQwEoAAWhIBSGwpAACVAMigECAgFBcSgOUYhCSSgJiZAIpaE0OHCQBElQDm6H8lAeKkAFqAgVoRJUhspQFapCNagG1aE61ISaUAtqQR2oA/fBfXA/1If60AAaQENoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAK2gFbaANtIW20A7aQQfoAB2hI3SCTpAMydAZOkMX6AJdoSt0g27QHbpDD+gJPeEVeAVehVehL9SS/aA/9IcBMAAGwWAYDK/DUHgD3oA3YTiMgJHwFrwFb8NoOANjYCyMg3FQTU6ESTAZSE6FVEiFaTANpsN0mAEzYSbMhjSYA3NhLsyD+TAfPoSF8BF8BIthMSyFdEiHDFgGmZAJy+EsZMEKWAmrYDWsgdWwDtbDOtgIm2AjbIEtsA22wWfwGeyEnbAbdsNe2Aufw+fwBXwBwyEbsuEgHIRDcAgOw2HIgRw4AkfgKByFY3AMjsNxOAEn4RSchNNwGs7AWTgH5+ACXICL8FLCt033ltowXMgrtNQyj8wjY2SMjJWxMk7Gyfwyv4zIiIyX8bKALCALyoKysCwsE2SCLCaLSZQoSYayuCwuozIqS8qSMlEmytKytHTSySSZJMvJcrK8LC8ryDtlRXmXrCQry/auqqwqq8kOrrqsIWvKmrKWrC3ryLqyrqwn68n6sr5sIBvIhrKhbCQflo1lPxgEj8ornWkmR0BzORJayJaylWwt34YnZVs5GtrJ9rKDfFqOhTHQSbZ1yfI52VlOgi7yBTkZXpTd5FToLl+WPWRP2Uu+InvLdq6P7CtnQD/ZX86GAXKgHCQHy3lQW17pWB35phwuR8iR8i25FN6Wo+U7cowcK8fJ8XKCnCgnyclyipwqU+W7cpp8T06X78sZcqacJWfLNDlHzpUfyHlyvlwgP5QL5UdykVwsl8ilMl1+LDPkMpkpP5HL5acyS66QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2uV1+JnfInXKX3C33yL1yn/xc7pdfyAPyS5ktv5IH5V/kIfm1PCy/kTnyW3lEfiePyu/lMfmDPC5/lCfkSXlK/iRPy5/lGXlWnpPn5QX5i7woL8nL0kuhQEmllFaByqPyqhiVT8Wq61Scul7lVzeoiLpRxaubVAF1syqoCqnCqohKUEVVMWUUKqtIhaq4KqGi6hZVUt2qElUpVVqVUU6VVUnqNlVO3a7KqztUBXWnqqjuUpVUZVVFVVV3q2rqHlVd1VA11b2qlqqt6qi66j5VT92v6qsHVAP1oGqoHlKN1MOqsXpENVGPqqbqMdVMPa6aqydUC9VStVKtVRv1pGqrnlLtVHvVQT2tOqpnVCf1rEpWz6nO6nnVRb2guqoXVTf1kuquXlY9VE/VS11Sl5VXfVRflaL6qf7qNTVADVSD1GA1RL2uhqo31DD1phquRqiR6i01Sr2tRqt31Bg1Vo1T49UENVFNUpPVFDVVpap31TT1npqu3lcz1Ew1S81WaWqOGvTbTgv+C/nv/YP8Yb8++za1XX2mdqidapfarfaovWqf2qf2q/3qgDqgslW2OqgOqkPqkDqsDqsclaOOqCPqqDqqjqlj6rg6rk6ok+q8+kmdVj+rM+qsOqvOqwvqgrr4289AaNBSK611oPPovDpG59Ox+jodp6/X+fUNOqJv1PH6Jl1A36wL6kK6sC6iE3RRXUwbjdpq0qEurkvoqL5Fl9S36kRdSpfWZbTTZXWSvu1fzv+j+troNrqtbqvb6Xa6g+6gO+qOupPupJN1su6sO+suuovuqrvqbrqb7q676x66h+6le+neurfuo/voFJ2i++vX9AA9UA/Sg/UQ/boeqofqYXqYHq6H65F6pB6lR+nRerQeo8focXqcnqAn6El6kp6ip+hUnaqn6Wl6up6uZ+gZepaepdN0mp6r5+p5ep5eoBfohXqhXqQX6SV6iU7X6TpDZ+hMnamX6+U6S6/QK/QqvUqv0Wv0Or1Ob9Ab9Ca9SW/RW3SW3q636x16h96ld+k9eo/ep/fp/Xq/PqAP6GydrQ/qg/qQPqQP68M6R+foI/qIPqqP6mP6mD6uj+sT+oQ+pU/p0/q0PqPP6HP6nL6gL+iL+qK+rC9fuewLZCADHeggT5AniAligtggNogL4oL8Qf4gEkSC+CA+KBDcHBQMCgWFgyJBQlA0KBaYAAMbUBAGxYMSQTS4JSgZ3BokBqWC0kGZwAVlg6TgtqBccHtQPrgjqBDcGVQM7goqBZWDKkHV4O6gWnBPUD2oEdQM7g1qBbWDOkHd4L6gXnB/UD94IGgQPBg0DB4KGgUPB42DR4ImwaNB0+CxoFnweNA8eCJoEbQMWgWtgzZ/6v7enyn0lOtj+poU08/0N6+ZAWagGWQGmyHmdTPUvGGGmTfNcDPCjDRvmVHmbTPavGPGmLFmnBlvJpiJZpKZbKaYqSbVvGummffMdPO+mWFmmllmtkkzc8xc84GZZ+abBeZDs9B8ZBaZxWaJWWrSzccmwywzmeYTs9x8arLMCrPSrDKrzRqz1qwz680Gs9FsMpvNFrPVbDPbzWdmh9lpdpndZo/Za/aZz81+84U5YL402eYrc9D8xRwyX5vD5huTY741R8x35qj53hwzP5jj5kdzwpw0p8xP5rT52ZwxZ805c95cML+Yi+aSuWz8lYv7Ky/vqFFjHsyDMRiDsRiLcRiH+TE/RjCC8RiPBbAAFsSCWBgLYwImYDEshlcQEhbH4hjFKJbEkpiIiVgaS6NDh0mYhOWwHJbH8lgBK2BFrIiVsBJWwSp4N96N9+A9WANr4L14L9bG2lgX62I9rIf1sT42wAbYEBtiI2yEjbExNsEm2BSbYjNshs2xObbAFtgKW2EbbINtsS22w3bYATtgR+yInbATJmMydsbO2AW7YFfsit2wG3bH7tgDe2Av7IW9sTf2wT6YginYH/vjAByAg3AQDsEhOBSH4jAchuPLbapx5c5pFI7C0Tgax+BYHIfjcQJOxEk4GafgVEzFVJyG03A6TscZOANn4SxMwzSci3NxHs7DBbgAF+JCXISLcAkuwXRMxwzMwEzMxOW4HLMwC1fiSlyNq3EtrsX1uB434kbcjJtxK27F7bgdd+AO3IW7cA/uwX24D/fjfjyABzAbs/EgHsRDeAgP42HMwRw8gkfwKB7FY3gMj+NxPIEn8BSewtN4Gs/gGTyH5/AC/oIX8RJeRo8xVopYe52Ns9fb/PYGG2Pz2b+NC9siNsEWtcWssQVtob+L0VqbaEvZ0raMdbasTbK3/S6uZCvbKraqvdtWs/fY6r+L69n7bX37gG1gH7R17X1/Fze0D9lG9nHb2D5hm9iWtqltbZvZx21z+4RtYVvaVra17WifsZ3sszbZPmc72+d/F2fYZXa93WA32k12v/3CnrPn7VH7vb1gf7F9bF87xL5uh9o37DD7ph1uR/wuHmfH2wl2op1kJ9spdurv4ll2tk2zc+xc+4GdZ+f/Lk63H9uFNtMusovtErv01/hKTZn2E7vcfmqz7Aq70q6yq+0au9au+/daV9ktdqvdZvfZz+0Ou9PusrvtHrv31/jKOQ7YL222/coesd/ZQ/Zre9geszn221/jK+cT4gd73P5oT9iT9pT9yZ62P9sz9uyv579y9p/sJXvZeisISJIiTQHlobwUQ/kolq6jOLqe8tMNFKEbKZ5uogJ0MxWkQlSYilACFaViZAjJElFIxakERekWKkm3UiKVotJUhhyVpSS6jcrR7VSe7qAKdCdVpLuoElWmKlSV7qZqdA9VpxpUk+6lWlSb6lBduo/q0f1Unx6gBvQgNaSHqBE9TI3pEWpCj1JTeoya0ePUnJ6gFtSSWlFrakNPUlt6itpRe+pAT1NHeoY60bOUTM9RZ3qeutAL1JVepG70EnWnl6kH9aRe9Ar1plepD/WlFOpH/ek1GkADaRANpiH0Og2lN2gYvUnDaQSNpLdoFL1No+kdGkNjaRyNpwk0kSbRZJpCUymV3qVp9B5Np/dpBs2kWTSb0mgOzaUPaB7NpwX0IS2kj2gRLaYltJTS6WPKoGWUSZ/QcvqUsmgFraRVtJrW0FpaR+tpA22kTbSZttBW2kbb6TPaQTtpF+2mPbSX9tHntJ++oAP0JWXTV3SQ/kKH6Gs6TN9QDn1LR+g7Okrf0zH6gY7Tj3SCTtIp+olO0890hs7SOTpPF+gXukiX6DJ5EiGEMlShDoMwT5g3jAnzhbHhdWFceH2YP7whjIQ3hvHhTWGB8OawYFgoLBwWCRPComGx0IQY2pDCMCwelgij4S1hyfDWMDEsFZYOy4QuLBsmhbeF5cLbw/LhHWGF8M6wYnhXWCmsHD7+YNXw7rBaeE9YPawR1gzvDWuFtcM6Yd3wvrBeeH9YP3wgbBA+GJYPHwobhQ+HjcNHwibho2HT8LGwWfh42Dx8ImwRtgxbha3DNuGTYdvwqbBd2D7sED4ddgyfCTuFz4bJ4XNh5/D5P1xPCfuF/cPXwtdC7x9QS6JLo+nRj6MZ0WXRzOgn0eXRT6NZ0RXRldFV0dXRNdG10XXR9dEN0Y3RTdHN0S3RrdFtUe/r5hUOnHTKaRe4PC6vi3H5XKy7zsW5611+d4OLuBtdvLvJFXA3u4KukCvsirgEV9QVc8ahs45c6Iq7Ei7qbnEl3a0u0ZVypV0Z51xZl+RauzaujWvrnnLtXHvXwT3tnnbPuGfcs+5Z95zr7J53XdwLrqt70XVzL7mX3Muuh+vperlXXG/3quvj+roUl+L6u/5ugBvgBrlBbogb4oa6oW6YG+aGu+FupBvpRrlRbrQb7ca4MW6cG+cmuAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5h4kK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvuiP0xX0JH/W3+JL+Vp/oS/nSvox3vqxP8rf5cv52X97f4Sv4O31Ff5ev5Cv7Kv4J38K39K18a9/GP+nb+qd8O9/ed/BP+47+Gd/JP+uT/XO+s3/ed/Ev+K7+Rd/Nv+S7+5d9D9/T9/Kv+N7+Vd/H9/Upvp/v71/zA/xAP8gP9kP8636of8MP82/64X6EH+nf8qP82360f8eP8WP9OD/eT/AT/SQ/2U/xU32qf9dP8+/56f59P8PP9LP8bJ/m5/i5/gM/z8/3C/yHfqH/yC/yi/0Sv9Sn+499hl/mM/0nfrn/1Gf5FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+8/8Dr/T7/K7/R6/1+/zn/v9/gt/wH/ps/1X/qD/iz/kv/aH/Tc+x3/rj/jv/FH/vT/mf/DH/Y/+hD/pT/mf/Gn/sz/jz/pz/ry/4H/xF/0lf/m/+j9ref6n309njDHGGPv/W+ofrPf7B9+Tv40r+gshrt9ZJOdv15UQYnPBv84HyoSOESHEc327P/pvo1atlJSU3x6bpURQYrEQInI1/9dLtN/iFaKDeEYki/ai3D+sb6DseYH+YP/onULE/k1OzF8/5uA/7H/7f7L/k0+Py6gYnov/J/svFiKxxNWcfOJqfHX/8v/J/oXa/kH9+b5OFaLd3+TEiavx1f2TxFPieZH8d49kjDHGGGOMMcb+aqCs0pWu3BGLf35/nqCv5uQVV+M/uj9njDHGGGOMMcbYtfdiz17PPpmc3L4rT3jCE578++Ra/2VijDHGGGOM/dmuXvRf60oYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLHc6//Fx4ld6zMyxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj19r/CQAA//9YKT35") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) 880.763262ms ago: executing program 1 (id=7883): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/179, 0xb3}], 0x1) 708.146515ms ago: executing program 0 (id=7884): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) 601.989385ms ago: executing program 6 (id=7885): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 0s ago: executing program 7 (id=7886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a0101000000000000000007000000090002"], 0xc0}}, 0x0) kernel console output (not intermixed with test programs): -fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1870.598187][T21714] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1871.301652][T21727] loop6: detected capacity change from 0 to 256 [ 1871.386614][T19479] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1871.511938][T21729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6709'. [ 1872.087835][T21733] cifs: Bad value for 'port' [ 1873.031901][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6718'. [ 1873.157106][T21747] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1874.026391][T21755] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1874.264082][T20891] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1874.560082][T20891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1874.571658][T20891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1874.581969][T20891] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1874.599066][T20891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.691014][T20891] usb 3-1: config 0 descriptor?? [ 1875.240497][T20891] logitech 0003:046D:CA04.0037: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 1875.253394][T20891] logitech 0003:046D:CA04.0037: no inputs found [ 1875.277250][T21766] loop7: detected capacity change from 0 to 1024 [ 1875.464708][T20891] usb 3-1: USB disconnect, device number 7 [ 1877.382366][T21789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6739'. [ 1877.415636][T21789] gretap0: entered promiscuous mode [ 1877.432146][T21789] gretap0: left promiscuous mode [ 1877.483085][T21791] loop7: detected capacity change from 0 to 256 [ 1877.647536][T21791] FAT-fs (loop7): Directory bread(block 64) failed [ 1877.656220][T21791] FAT-fs (loop7): Directory bread(block 65) failed [ 1877.664580][T21791] FAT-fs (loop7): Directory bread(block 66) failed [ 1877.675324][T21791] FAT-fs (loop7): Directory bread(block 67) failed [ 1877.682347][T21791] FAT-fs (loop7): Directory bread(block 68) failed [ 1877.694610][T21791] FAT-fs (loop7): Directory bread(block 69) failed [ 1877.701608][T21791] FAT-fs (loop7): Directory bread(block 70) failed [ 1877.709998][T21791] FAT-fs (loop7): Directory bread(block 71) failed [ 1877.721321][T21791] FAT-fs (loop7): Directory bread(block 72) failed [ 1877.729422][T21791] FAT-fs (loop7): Directory bread(block 73) failed [ 1878.067876][T21797] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6742'. [ 1878.812731][T21804] loop2: detected capacity change from 0 to 64 [ 1879.481950][T21807] loop7: detected capacity change from 0 to 2048 [ 1879.768219][T21816] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1879.901359][T21815] loop2: detected capacity change from 0 to 1024 [ 1880.072097][T16609] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1880.135334][T21815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1880.315934][T21823] loop5: detected capacity change from 0 to 16 [ 1880.357365][T21823] erofs (device loop5): mounted with root inode @ nid 36. [ 1880.430020][T21823] syz.5.6753: attempt to access beyond end of device [ 1880.430020][T21823] loop5: rw=524288, sector=68719476744, nr_sectors = 24 limit=16 [ 1880.450846][T21823] syz.5.6753: attempt to access beyond end of device [ 1880.450846][T21823] loop5: rw=0, sector=68719476744, nr_sectors = 16 limit=16 [ 1880.467851][T21816] NILFS (loop7): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 1880.481138][ T30] audit: type=1800 audit(1743860535.117:156): pid=21823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6753" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 1880.504017][T21816] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=2) [ 1880.607267][T21816] Remounting filesystem read-only [ 1880.616126][ T9706] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 1880.686347][T19479] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1881.217159][T21829] loop5: detected capacity change from 0 to 256 [ 1881.612090][T21829] FAT-fs (loop5): Directory bread(block 64) failed [ 1881.625379][T21829] FAT-fs (loop5): Directory bread(block 65) failed [ 1881.632420][T21829] FAT-fs (loop5): Directory bread(block 66) failed [ 1881.639628][T21829] FAT-fs (loop5): Directory bread(block 67) failed [ 1881.649835][T21829] FAT-fs (loop5): Directory bread(block 68) failed [ 1881.659801][T21829] FAT-fs (loop5): Directory bread(block 69) failed [ 1881.667061][T21829] FAT-fs (loop5): Directory bread(block 70) failed [ 1881.677226][T21829] FAT-fs (loop5): Directory bread(block 71) failed [ 1881.687455][T21829] FAT-fs (loop5): Directory bread(block 72) failed [ 1881.694501][T21829] FAT-fs (loop5): Directory bread(block 73) failed [ 1882.320575][T21840] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6760'. [ 1882.971021][T20891] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1883.138792][T20891] usb 4-1: Using ep0 maxpacket: 16 [ 1883.186421][T20891] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1883.205220][T20891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1883.212221][T21850] loop2: detected capacity change from 0 to 16 [ 1883.267386][T21850] erofs (device loop2): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1883.314916][T20891] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1883.325066][T20891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.339614][T20891] usb 4-1: Product: syz [ 1883.344317][T20891] usb 4-1: Manufacturer: syz [ 1883.349268][T20891] usb 4-1: SerialNumber: syz [ 1883.397008][T21850] CIFS mount error: No usable UNC path provided in device string! [ 1883.397008][T21850] [ 1883.409960][T21850] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1883.466912][T20891] usb 4-1: config 0 descriptor?? [ 1883.538403][T20891] hub 4-1:0.0: bad descriptor, ignoring hub [ 1883.544928][T20891] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1883.575354][T20891] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input29 [ 1884.135422][T17608] usb 4-1: USB disconnect, device number 24 [ 1884.441791][T21862] loop7: detected capacity change from 0 to 8 [ 1884.485595][T21862] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1884.494435][T21862] SQUASHFS error: Failed to read block 0x91: -5 [ 1884.500937][T21862] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1884.511846][T21862] SQUASHFS error: Unable to read inode 0x11f [ 1884.659061][T21863] loop6: detected capacity change from 0 to 1024 [ 1884.889469][T21863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1885.408615][T21873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6777'. [ 1885.510786][ T9246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1886.402079][T21884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6790'. [ 1886.471841][T21886] netlink: 'syz.7.6782': attribute type 1 has an invalid length. [ 1888.281484][T21905] loop7: detected capacity change from 0 to 64 [ 1888.437952][ T30] audit: type=1800 audit(1743860543.087:157): pid=21905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6791" name="file1" dev="loop7" ino=18 res=0 errno=0 [ 1888.469193][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1888.476358][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1889.095823][T21913] loop5: detected capacity change from 0 to 64 [ 1889.229752][ T30] audit: type=1800 audit(1743860543.877:158): pid=21913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6806" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 1889.958861][T21922] netlink: 'syz.5.6798': attribute type 4 has an invalid length. [ 1889.967500][T21922] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6798'. [ 1890.444057][T21928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6799'. [ 1890.506812][T21928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6799'. [ 1891.165934][T21934] loop5: detected capacity change from 0 to 256 [ 1892.830694][T21942] loop5: detected capacity change from 0 to 4096 [ 1892.855147][T21950] loop2: detected capacity change from 0 to 256 [ 1892.886093][T21950] exfat: Deprecated parameter 'utf8' [ 1893.001383][T21950] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1893.504105][T21942] ntfs3(loop5): ino=5, "/" indx_read [ 1893.509820][T21942] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1893.564994][T21942] ntfs3(loop5): ino=5, ntfs_readdir [ 1893.589762][T21948] loop7: detected capacity change from 0 to 4096 [ 1894.264057][T21948] ntfs3(loop7): failed to convert "0080" to maciceland [ 1894.300175][T21948] ntfs3(loop7): failed to convert name for inode 1e. [ 1894.326461][T21948] ntfs3(loop7): ino=1f, mi_enum_attr [ 1894.332327][T21948] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1894.413743][T21948] ntfs3(loop7): ino=1f, mi_enum_attr [ 1895.133554][T17608] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1895.314914][T17608] usb 3-1: Using ep0 maxpacket: 16 [ 1895.370998][T17608] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1895.388550][T17608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1895.400918][T21970] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6823'. [ 1895.501905][T17608] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1895.514891][T17608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.523900][T17608] usb 3-1: Product: syz [ 1895.528345][T17608] usb 3-1: Manufacturer: syz [ 1895.533470][T17608] usb 3-1: SerialNumber: syz [ 1895.630051][T17608] usb 3-1: config 0 descriptor?? [ 1895.667242][T21972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6824'. [ 1895.682443][T17608] hub 3-1:0.0: bad descriptor, ignoring hub [ 1895.691946][T17608] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1895.712629][T17608] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30 [ 1896.226595][T17608] usb 3-1: USB disconnect, device number 8 [ 1896.705249][T21983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6838'. [ 1897.514857][T21992] loop6: detected capacity change from 0 to 128 [ 1897.529067][T21992] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1897.637456][T21992] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1898.028543][T21990] loop2: detected capacity change from 0 to 4096 [ 1898.059453][ T8354] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1898.449256][T21990] ntfs3(loop2): ino=5, "/" indx_read [ 1898.460576][T21990] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1898.497934][T21990] ntfs3(loop2): ino=5, ntfs_readdir [ 1898.626429][T21998] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6836'. [ 1898.648012][T21998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6836'. [ 1899.405747][T21999] loop6: detected capacity change from 0 to 4096 [ 1899.984700][T22007] loop5: detected capacity change from 0 to 512 [ 1899.992938][T21999] ntfs3(loop6): failed to convert "0080" to maciceland [ 1900.032475][T21999] ntfs3(loop6): failed to convert name for inode 1e. [ 1900.056971][T22007] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1900.087879][T21999] ntfs3(loop6): ino=1f, mi_enum_attr [ 1900.093799][T21999] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1900.124081][T21999] ntfs3(loop6): ino=1f, mi_enum_attr [ 1900.152173][T22007] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.6842: invalid block [ 1900.171398][T22007] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6842: invalid indirect mapped block 4294967295 (level 1) [ 1900.216761][T22007] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6842: invalid indirect mapped block 4294967295 (level 1) [ 1900.271956][T22007] EXT4-fs (loop5): 2 truncates cleaned up [ 1900.287397][T22007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1900.434794][T22007] EXT4-fs warning (device loop5): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 1900.850980][ T8249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1900.987706][T22014] netlink: zone id is out of range [ 1900.998038][T22014] netlink: set zone limit has 8 unknown bytes [ 1901.642116][T22020] netlink: 'syz.5.6848': attribute type 7 has an invalid length. [ 1902.214566][T22028] ieee802154 phy0 wpan0: encryption failed: -22 [ 1902.690957][T22032] loop2: detected capacity change from 0 to 128 [ 1902.746279][T22032] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1902.814449][T22032] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1902.902680][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6863'. [ 1902.916931][T22036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6863'. [ 1903.096665][T22035] loop7: detected capacity change from 0 to 2048 [ 1903.190656][T22039] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1903.378078][T14751] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1905.446853][T22062] loop6: detected capacity change from 0 to 512 [ 1905.505447][T22062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1905.630824][T22062] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.6865: invalid block [ 1905.679898][T22062] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6865: invalid indirect mapped block 4294967295 (level 1) [ 1905.692342][T22066] netlink: zone id is out of range [ 1905.710652][T22066] netlink: set zone limit has 8 unknown bytes [ 1905.738157][T22062] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6865: invalid indirect mapped block 4294967295 (level 1) [ 1905.757634][T22062] EXT4-fs (loop6): 2 truncates cleaned up [ 1905.769723][T22062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1905.926945][T22062] EXT4-fs warning (device loop6): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 1906.280609][ T9246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1907.011835][T22075] loop2: detected capacity change from 0 to 64 [ 1907.052334][T22076] program syz.6.6871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1907.719358][T22080] loop6: detected capacity change from 0 to 512 [ 1907.763040][T22080] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1908.022286][T22080] EXT4-fs (loop6): 1 truncate cleaned up [ 1908.031026][T22080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1908.467188][T19480] Bluetooth: hci2: Dropping invalid advertising data [ 1908.479367][T19480] Bluetooth: hci2: Dropping invalid advertising data [ 1908.487057][T19480] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1908.607165][ T9246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1908.671103][T22090] loop7: detected capacity change from 0 to 1024 [ 1908.681292][T22090] EXT4-fs: Ignoring removed orlov option [ 1908.691187][T22090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1908.929040][T22090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1909.535482][ T9706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1909.842781][T22103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6884'. [ 1909.852456][T22103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6884'. [ 1910.369970][T22107] loop5: detected capacity change from 0 to 64 [ 1912.114764][T22120] loop7: detected capacity change from 0 to 4096 [ 1912.229970][T22120] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1912.529755][T22120] ntfs3(loop7): ino=19, mi_enum_attr [ 1912.535605][T22120] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1913.440872][T22131] loop5: detected capacity change from 0 to 1024 [ 1913.494538][T22131] EXT4-fs: Ignoring removed orlov option [ 1913.500599][T22131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1913.640422][T22131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1914.106194][ T8249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1914.671648][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6897'. [ 1914.681047][T22142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6897'. [ 1914.974493][T22138] xt_CT: No such helper "snmp" [ 1916.388472][T22156] loop6: detected capacity change from 0 to 2048 [ 1916.493690][T22159] netlink: 'syz.7.6905': attribute type 5 has an invalid length. [ 1916.702004][T22161] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1916.872733][T22163] loop2: detected capacity change from 0 to 64 [ 1917.392591][T22167] loop7: detected capacity change from 0 to 16 [ 1917.472657][T22167] erofs (device loop7): mounted with root inode @ nid 36. [ 1918.601321][T22171] loop6: detected capacity change from 0 to 4096 [ 1918.657174][T22171] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1919.101417][T22171] ntfs3(loop6): ino=19, mi_enum_attr [ 1919.113748][T22171] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1919.153582][ T4511] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 1919.243728][T17608] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1919.486043][T17608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1919.500688][T17608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1919.511248][T17608] usb 6-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1919.521330][T17608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.750719][T17608] usb 6-1: config 0 descriptor?? [ 1920.029690][T22184] loop2: detected capacity change from 0 to 256 [ 1920.089940][T22185] loop7: detected capacity change from 0 to 8 [ 1920.100404][T22184] exfat: Deprecated parameter 'namecase' [ 1920.108705][T22184] exfat: Deprecated parameter 'namecase' [ 1920.213612][T22185] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1920.221981][T22185] SQUASHFS error: Failed to read block 0x9b: -5 [ 1920.235272][T22185] SQUASHFS error: Unable to read metadata cache entry [99] [ 1920.243017][T22185] SQUASHFS error: Unable to read inode 0x127 [ 1920.246897][T17608] asus 0003:0B05:1807.0038: item fetching failed at offset 0/3 [ 1920.280251][T22184] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1920.344080][T17608] asus 0003:0B05:1807.0038: Asus hid parse failed: -22 [ 1920.351771][T17608] asus 0003:0B05:1807.0038: probe with driver asus failed with error -22 [ 1920.492177][T17608] usb 6-1: USB disconnect, device number 34 [ 1921.852248][T22196] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6925'. [ 1922.938345][T15851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1922.956357][T15851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1922.992632][T15851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1923.010758][T15851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1923.061542][T15851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1923.259140][T22205] virt_wifi0 speed is unknown, defaulting to 1000 [ 1924.397579][T22211] loop7: detected capacity change from 0 to 4096 [ 1924.412807][T22205] chnl_net:caif_netlink_parms(): no params data found [ 1924.446696][T22211] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 1925.116795][T15851] Bluetooth: hci3: command tx timeout [ 1926.593486][T17608] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1926.752714][ T7507] tipc: Resetting bearer [ 1926.929833][ T7507] tipc: Disabling bearer [ 1926.981937][T17608] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1926.992563][T17608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.001481][T17608] usb 3-1: Product: syz [ 1927.008544][T22234] loop5: detected capacity change from 0 to 1024 [ 1927.016158][T17608] usb 3-1: Manufacturer: syz [ 1927.021035][T17608] usb 3-1: SerialNumber: syz [ 1927.024981][ T7507] smc: removing net device syz_tun with user defined pnetid SYZ1 [ 1927.139670][T17608] usb 3-1: config 0 descriptor?? [ 1927.141448][T22205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1927.153067][T22205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.161669][T22205] bridge_slave_0: entered allmulticast mode [ 1927.178968][T22205] bridge_slave_0: entered promiscuous mode [ 1927.195325][T15851] Bluetooth: hci3: command tx timeout [ 1927.206934][T17608] ch341 3-1:0.0: ch341-uart converter detected [ 1927.426711][T22205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1927.438375][T22205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.447393][T22205] bridge_slave_1: entered allmulticast mode [ 1927.464052][T22205] bridge_slave_1: entered promiscuous mode [ 1927.957038][T17608] usb 3-1: failed to send control message: -71 [ 1927.968075][T17608] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1928.011442][T22241] loop7: detected capacity change from 0 to 256 [ 1928.019788][T17608] usb 3-1: USB disconnect, device number 9 [ 1928.031697][T17608] ch341 3-1:0.0: device disconnected [ 1928.072552][T22205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1928.140086][T22205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1928.307797][T22241] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1928.395066][T22205] team0: Port device team_slave_0 added [ 1928.496378][T22205] team0: Port device team_slave_1 added [ 1928.832621][T22205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1928.843476][T22205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1928.872975][T22205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1929.055558][T22205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1929.062903][T22205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1929.095027][T22205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1929.281196][T15851] Bluetooth: hci3: command tx timeout [ 1929.572449][T22205] hsr_slave_0: entered promiscuous mode [ 1929.590474][T22205] hsr_slave_1: entered promiscuous mode [ 1929.600199][T22205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1929.608429][T22205] Cannot create hsr debugfs directory [ 1931.372386][T15851] Bluetooth: hci3: command tx timeout [ 1931.581187][T22205] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.652490][T22267] IPVS: Unknown mcast interface: pimreg1 [ 1931.685705][T22205] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.900208][T22205] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.027273][T22205] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.198603][T22265] loop2: detected capacity change from 0 to 4096 [ 1932.259358][T22265] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1932.565227][T22205] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1932.601381][T22205] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1932.653943][T22205] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1932.740491][T22205] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1934.115265][T22205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1934.350750][T22205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1934.467528][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.475424][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1934.500723][T22279] loop2: detected capacity change from 0 to 4096 [ 1934.597385][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.605259][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1935.398088][T22288] gretap0: entered promiscuous mode [ 1935.407164][T22288] macsec1: entered promiscuous mode [ 1935.470221][T22288] gretap0: left promiscuous mode [ 1936.799207][T22300] loop2: detected capacity change from 0 to 256 [ 1937.041017][T22300] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1937.553048][T22205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1938.330114][T22205] veth0_vlan: entered promiscuous mode [ 1938.491409][T22205] veth1_vlan: entered promiscuous mode [ 1939.157133][T22205] veth0_macvtap: entered promiscuous mode [ 1939.294662][T22205] veth1_macvtap: entered promiscuous mode [ 1939.428164][T22321] netlink: 136 bytes leftover after parsing attributes in process `syz.7.6980'. [ 1939.438823][T22321] netlink: 'syz.7.6980': attribute type 1 has an invalid length. [ 1939.450327][T22321] netlink: 'syz.7.6980': attribute type 1 has an invalid length. [ 1939.546847][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1939.564521][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1939.575036][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1939.589058][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1939.609371][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1939.624604][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1939.637923][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1939.648803][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1939.662051][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1939.676073][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1939.689345][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1939.700410][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1939.716739][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1939.727832][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1939.738049][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1939.756426][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1939.769439][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1939.786354][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1939.796789][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1939.807657][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1939.838083][T22205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1940.239749][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1940.258206][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1940.268566][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1940.279570][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1940.296234][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1940.307261][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1940.320505][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1940.334434][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1940.347823][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1940.358710][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1940.372307][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1940.386334][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1940.400614][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1940.411608][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1940.428130][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1940.439073][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1940.449334][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1940.466535][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1940.481804][T22205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1940.492750][T22205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1940.516247][T22205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1940.895053][T22205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.910386][T22205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.919793][T22205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.929033][T22205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1941.201517][T22332] loop6: detected capacity change from 0 to 1024 [ 1941.504751][T22336] netlink: 'syz.5.6988': attribute type 3 has an invalid length. [ 1941.827642][T15326] hfsplus: b-tree write err: -5, ino 4 [ 1942.569600][T22346] netlink: 'syz.7.7001': attribute type 3 has an invalid length. [ 1942.708361][T22349] program syz.6.6991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1943.822848][T22360] overlayfs: lower data-only dirs require metacopy support. [ 1944.341282][T22367] loop7: detected capacity change from 0 to 512 [ 1944.446263][T22367] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1944.562692][T22367] EXT4-fs error (device loop7): ext4_orphan_get:1416: comm syz.7.6997: bad orphan inode 131083 [ 1944.624358][T22367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1945.257836][ T9706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1945.302989][T22380] loop6: detected capacity change from 0 to 16 [ 1945.339408][T22380] erofs (device loop6): mounted with root inode @ nid 36. [ 1945.854643][T22383] netlink: 'syz.2.7005': attribute type 3 has an invalid length. [ 1946.066617][T22386] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7006'. [ 1946.078774][T22386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7006'. [ 1946.935929][T22397] overlayfs: lower data-only dirs require metacopy support. [ 1947.683689][T22403] overlayfs: lower data-only dirs require metacopy support. [ 1947.950827][T22410] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7024'. [ 1948.581621][T22413] loop5: detected capacity change from 0 to 512 [ 1948.612080][T22413] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1948.647051][T22416] loop2: detected capacity change from 0 to 16 [ 1948.678875][T22413] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.7015: bad orphan inode 131083 [ 1948.716746][T22413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1948.740699][T22416] erofs (device loop2): mounted with root inode @ nid 36. [ 1948.986947][T22419] loop6: detected capacity change from 0 to 1024 [ 1949.235981][ T8249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1949.260568][T22421] loop7: detected capacity change from 0 to 1024 [ 1949.271598][ T4206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1949.283992][ T4206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1949.415626][T22419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1949.505136][ T8354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1949.515145][ T8354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1949.862567][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1949.869654][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1950.105830][ T9246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1950.202235][T14751] hfsplus: b-tree write err: -5, ino 4 [ 1951.459140][T22440] loop2: detected capacity change from 0 to 256 [ 1951.853780][T22441] loop1: detected capacity change from 0 to 1764 [ 1952.825057][T22452] loop5: detected capacity change from 0 to 16 [ 1952.887469][T22452] erofs (device loop5): mounted with root inode @ nid 36. [ 1953.000950][T22450] loop2: detected capacity change from 0 to 2048 [ 1953.083757][T22450] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1954.110478][T22460] loop5: detected capacity change from 0 to 1024 [ 1954.338308][T22463] loop1: detected capacity change from 0 to 2048 [ 1954.724177][ T1824] hfsplus: b-tree write err: -5, ino 4 [ 1955.602695][T22477] tipc: Bearer : already 2 bearers with priority 0 [ 1955.610771][T22477] tipc: Enabling of bearer rejected, cannot adjust to lower [ 1955.658541][T22474] loop5: detected capacity change from 0 to 1024 [ 1955.741079][T22474] EXT4-fs: Ignoring removed orlov option [ 1955.762682][T22479] loop6: detected capacity change from 0 to 1764 [ 1955.816535][T22474] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1955.926579][T22474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1956.046552][ T8249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1956.741875][T22489] loop1: detected capacity change from 0 to 256 [ 1956.878766][T22486] loop7: detected capacity change from 0 to 2048 [ 1957.021081][T22486] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1958.774160][T22512] tipc: Enabling of bearer rejected, failed to enable media [ 1959.378352][T22514] loop2: detected capacity change from 0 to 1024 [ 1959.543236][T22514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1959.950880][T19479] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1960.755421][T22524] loop2: detected capacity change from 0 to 1764 [ 1962.507969][T22540] loop6: detected capacity change from 0 to 2048 [ 1962.566565][T22538] loop1: detected capacity change from 0 to 2048 [ 1962.632804][T22538] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1962.711385][T22543] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1966.918113][T22577] loop7: detected capacity change from 0 to 2048 [ 1967.106771][T22584] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1967.712347][T22586] loop5: detected capacity change from 0 to 512 [ 1967.819585][T22586] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1967.908262][T22586] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1967.979106][T22586] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1968.120349][T22586] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1968.158250][T22586] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.7089: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1968.198264][T22586] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.7089: couldn't read orphan inode 13 (err -117) [ 1968.261077][T22586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1968.500634][T22586] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 1968.553704][T22586] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1968.652828][T22586] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5. [ 1969.039666][ T8249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1969.887443][T22607] loop6: detected capacity change from 0 to 256 [ 1969.952741][T22609] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 1970.310825][T22607] FAT-fs (loop6): Directory bread(block 64) failed [ 1970.320028][T22607] FAT-fs (loop6): Directory bread(block 65) failed [ 1970.334249][T22607] FAT-fs (loop6): Directory bread(block 66) failed [ 1970.343640][T22607] FAT-fs (loop6): Directory bread(block 67) failed [ 1970.350760][T22607] FAT-fs (loop6): Directory bread(block 68) failed [ 1970.364147][T22607] FAT-fs (loop6): Directory bread(block 69) failed [ 1970.371164][T22607] FAT-fs (loop6): Directory bread(block 70) failed [ 1970.378203][T22607] FAT-fs (loop6): Directory bread(block 71) failed [ 1970.388360][T22607] FAT-fs (loop6): Directory bread(block 72) failed [ 1970.398492][T22607] FAT-fs (loop6): Directory bread(block 73) failed [ 1971.547087][T22617] loop5: detected capacity change from 0 to 2048 [ 1971.730829][T22620] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1973.284367][T22641] loop1: detected capacity change from 0 to 1024 [ 1973.387692][T22641] hfsplus: small dir entry [ 1975.718756][T22663] loop6: detected capacity change from 0 to 512 [ 1975.920609][T22663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1975.934402][T22663] ext4 filesystem being mounted at /1172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1976.142575][ T9246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1976.500737][T22674] loop2: detected capacity change from 0 to 1024 [ 1976.692185][T22674] hfsplus: small dir entry [ 1979.087769][T22691] loop6: detected capacity change from 0 to 4096 [ 1979.746666][ T8956] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1979.972078][ T8956] usb 6-1: Using ep0 maxpacket: 16 [ 1980.036134][ T8956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1980.047682][ T8956] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1980.060962][ T8956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.280542][ T8956] usb 6-1: config 0 descriptor?? [ 1980.384074][T22705] loop7: detected capacity change from 0 to 1024 [ 1980.550991][T22705] hfsplus: small dir entry [ 1980.701637][T22707] loop2: detected capacity change from 0 to 512 [ 1980.766976][T22707] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1980.854464][ T8956] pantherlord 0003:0E8F:0003.0039: item fetching failed at offset 4/5 [ 1980.887602][T22707] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1980.899523][T22707] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1980.939246][T22707] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1980.954999][T22707] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.7141: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1980.978665][ T8956] pantherlord 0003:0E8F:0003.0039: parse failed [ 1980.979061][ T8956] pantherlord 0003:0E8F:0003.0039: probe with driver pantherlord failed with error -22 [ 1981.052987][ T8956] usb 6-1: USB disconnect, device number 35 [ 1981.115972][T22707] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.7141: couldn't read orphan inode 13 (err -117) [ 1981.140326][T22707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1981.201795][T22707] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1981.227643][T22707] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1981.261806][T22707] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1981.636627][T22714] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7143'. [ 1981.669503][T19479] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1981.941227][T22717] loop6: detected capacity change from 0 to 256 [ 1982.016455][T22717] exfat: Deprecated parameter 'namecase' [ 1982.060094][T22717] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1982.267714][T22717] (unnamed net_device) (uninitialized): option mode: invalid value (48) [ 1982.441548][T22720] loop2: detected capacity change from 0 to 128 [ 1982.758270][T22720] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1982.800449][T22720] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1982.963624][T22720] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:105: comm syz.2.7145: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 1983.186365][T19479] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1984.159130][T22738] loop5: detected capacity change from 0 to 16 [ 1984.221305][T22738] erofs (device loop5): mounted with root inode @ nid 36. [ 1984.271394][T22735] loop1: detected capacity change from 0 to 4096 [ 1984.407105][T22738] syz.5.7154: attempt to access beyond end of device [ 1984.407105][T22738] loop5: rw=0, sector=524984, nr_sectors = 8 limit=16 [ 1984.407283][T22738] erofs (device loop5): failed to readdir of logical block 0 of nid 36 [ 1985.349920][T22744] loop6: detected capacity change from 0 to 512 [ 1985.447964][T22744] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7155: bg 0: block 393: padding at end of block bitmap is not set [ 1985.604495][T22744] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1985.667456][T22744] EXT4-fs (loop6): 2 truncates cleaned up [ 1985.676288][T22744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1986.186331][ T9246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1986.331339][T22749] loop2: detected capacity change from 0 to 4096 [ 1986.387369][T22752] loop1: detected capacity change from 0 to 512 [ 1986.504470][T22752] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1986.589040][T22752] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1986.678137][T22752] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1986.790778][T22752] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1986.831276][T22752] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.7156: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1986.952477][T22752] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.7156: couldn't read orphan inode 13 (err -117) [ 1987.086633][T22752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1987.121302][T22756] loop6: detected capacity change from 0 to 128 [ 1987.202651][T22756] EXT4-fs: Ignoring removed nobh option [ 1987.237558][T22758] loop5: detected capacity change from 0 to 256 [ 1987.259540][T22756] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1987.311576][T22756] ext4 filesystem being mounted at /1181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1987.329871][T22752] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1987.356456][T22758] exfat: Deprecated parameter 'namecase' [ 1987.383875][T22756] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:376: inode #11: comm syz.6.7160: No space for directory leaf checksum. Please run e2fsck -D. [ 1987.403477][T22756] EXT4-fs error (device loop6): __ext4_find_entry:1628: inode #11: comm syz.6.7160: checksumming directory block 0 [ 1987.450224][T22752] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1987.482452][T22752] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1987.489579][T22758] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1987.720538][T22758] (unnamed net_device) (uninitialized): option mode: invalid value (48) [ 1987.916609][ T9246] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1987.964835][T22205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1988.180069][T22762] pimreg3: entered allmulticast mode [ 1988.603992][T22765] loop1: detected capacity change from 0 to 128 [ 1988.730705][T22765] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1988.772730][T22765] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1988.949685][T22765] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:105: comm syz.1.7163: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 1989.300640][T22205] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1989.545762][T22775] loop6: detected capacity change from 0 to 16 [ 1989.570890][T22775] erofs (device loop6): mounted with root inode @ nid 36. [ 1989.713796][T22775] syz.6.7168: attempt to access beyond end of device [ 1989.713796][T22775] loop6: rw=0, sector=524984, nr_sectors = 8 limit=16 [ 1989.728027][T22775] erofs (device loop6): failed to readdir of logical block 0 of nid 36 [ 1990.351538][T22781] loop2: detected capacity change from 0 to 512 [ 1990.505735][T22781] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7170: bg 0: block 393: padding at end of block bitmap is not set [ 1990.542004][T22781] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1990.560018][T22781] EXT4-fs (loop2): 2 truncates cleaned up [ 1990.569358][T22781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1990.743590][T19479] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1990.929620][T22786] loop1: detected capacity change from 0 to 128 [ 1990.998991][T22786] EXT4-fs: Ignoring removed nobh option [ 1991.101172][T22786] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1991.198982][T22786] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1991.272368][T22786] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:376: inode #11: comm syz.1.7173: No space for directory leaf checksum. Please run e2fsck -D. [ 1991.292114][T22786] EXT4-fs error (device loop1): __ext4_find_entry:1628: inode #11: comm syz.1.7173: checksumming directory block 0 [ 1991.668853][T22205] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1991.737451][T22794] pimreg3: entered allmulticast mode [ 1994.412881][T22806] loop5: detected capacity change from 0 to 128 [ 1994.792384][T22806] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1995.057650][T22806] ext4 filesystem being mounted at /1300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1995.573745][T22806] EXT4-fs error (device loop5): ext4_validate_inode_bitmap:105: comm syz.5.7179: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 1997.489911][T22813] loop1: detected capacity change from 0 to 16 [ 1997.632214][T22813] erofs (device loop1): mounted with root inode @ nid 36. [ 1997.751895][T22813] syz.1.7182: attempt to access beyond end of device [ 1997.751895][T22813] loop1: rw=0, sector=524984, nr_sectors = 8 limit=16 [ 1997.772203][T22813] erofs (device loop1): failed to readdir of logical block 0 of nid 36 [ 1997.960766][ T8249] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1999.354331][T22825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7186'. [ 2000.629712][T22837] pimreg3: entered allmulticast mode [ 2003.583861][T22863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7207'. [ 2003.600682][T22863] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7207'. [ 2003.610412][T22863] netlink: 'syz.7.7207': attribute type 12 has an invalid length. [ 2003.619930][T22863] netlink: 'syz.7.7207': attribute type 13 has an invalid length. [ 2004.474695][T22873] loop6: detected capacity change from 0 to 64 [ 2005.653023][T22886] loop7: detected capacity change from 0 to 512 [ 2005.739539][T22886] EXT4-fs (loop7): Test dummy encryption mode enabled [ 2005.747106][T22886] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 2005.892080][T22886] EXT4-fs (loop7): 1 truncate cleaned up [ 2005.900832][T22886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2006.097926][T22894] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7221'. [ 2006.256132][ T9706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2006.977373][T22897] loop6: detected capacity change from 0 to 2048 [ 2007.216669][T22897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2007.229906][T22897] ext4 filesystem being mounted at /1189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2007.696327][T22913] loop1: detected capacity change from 0 to 8 [ 2007.896048][T22913] SQUASHFS error: Unable to read directory block [249:c] [ 2007.921516][ T9246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2008.832545][T22924] loop6: detected capacity change from 0 to 512 [ 2008.903004][T22924] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 2008.939837][T22925] loop1: detected capacity change from 0 to 1024 [ 2008.995219][T22925] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 2009.005859][T22925] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 2009.015016][T22924] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2009.022923][T22924] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #3: comm syz.6.7232: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 2009.038327][T22925] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #32: comm syz.1.7234: iget: special inode unallocated [ 2009.084457][T22925] EXT4-fs (loop1): no journal found [ 2009.089986][T22925] EXT4-fs (loop1): can't get journal size [ 2009.170791][T22924] EXT4-fs error (device loop6): ext4_quota_enable:7129: comm syz.6.7232: Bad quota inode: 3, type: 0 [ 2009.201844][T22925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 2009.262397][T22924] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 2009.279412][T22924] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 2009.292239][T22924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2009.401311][T22929] loop2: detected capacity change from 0 to 64 [ 2009.419967][T22924] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7232'. [ 2009.500678][T22205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2009.581950][T22929] syz.2.7235: attempt to access beyond end of device [ 2009.581950][T22929] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 2009.596277][T22929] Buffer I/O error on dev loop2, logical block 512, async page read [ 2009.611034][T22929] syz.2.7235: attempt to access beyond end of device [ 2009.611034][T22929] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 2009.625241][T22929] Buffer I/O error on dev loop2, logical block 56576, async page read [ 2009.922652][ T9246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2011.310212][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2011.317529][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2011.545237][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7242'. [ 2013.271383][ T8956] IPVS: starting estimator thread 0... [ 2013.366895][T22958] IPVS: using max 192 ests per chain, 9600 per kthread [ 2015.597337][T22978] loop6: detected capacity change from 0 to 512 [ 2015.617163][T22978] EXT4-fs: Ignoring removed bh option [ 2015.781371][T22978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2015.798069][T22978] ext4 filesystem being mounted at /1196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2016.106180][ T9246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2017.834650][T22998] loop2: detected capacity change from 0 to 1024 [ 2018.309533][T23002] loop1: detected capacity change from 0 to 1024 [ 2018.377984][ T8354] hfsplus: b-tree write err: -5, ino 4 [ 2018.413919][T23002] EXT4-fs: Ignoring removed nobh option [ 2018.437170][T23002] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2018.619401][T23002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2019.231800][T22205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2019.571475][T23014] loop2: detected capacity change from 0 to 2048 [ 2019.730106][T23017] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2020.593921][ T30] audit: type=1326 audit(2000000009.150:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23020 comm="syz.6.7276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 2020.683410][T23024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7277'. [ 2020.740139][ T30] audit: type=1326 audit(2000000009.200:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23020 comm="syz.6.7276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 2020.763560][ T30] audit: type=1326 audit(2000000009.200:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23020 comm="syz.6.7276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 2020.792593][ T30] audit: type=1326 audit(2000000009.230:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23020 comm="syz.6.7276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=262 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 2020.822391][ T30] audit: type=1326 audit(2000000009.230:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23020 comm="syz.6.7276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 2020.852257][ T30] audit: type=1326 audit(2000000009.230:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23020 comm="syz.6.7276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 2021.443795][ T8956] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2021.469968][T23030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7278'. [ 2021.506675][T23030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7278'. [ 2021.624160][ T8956] usb 3-1: Using ep0 maxpacket: 32 [ 2021.709798][ T8956] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 2021.718615][ T8956] usb 3-1: config 4 has no interface number 0 [ 2021.725454][ T8956] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2021.740427][ T8956] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2021.753959][ T8956] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2021.768690][ T8956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2021.986048][ T8956] hub 3-1:4.128: USB hub found [ 2022.189485][ T8956] hub 3-1:4.128: 2 ports detected [ 2022.195149][ T8956] hub 3-1:4.128: Using single TT (err -22) [ 2022.391345][ T8956] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 2022.401806][ T8956] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 2022.558386][ T8956] usb 3-1: USB disconnect, device number 10 [ 2024.238173][ T8956] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 2024.490760][ T8956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2024.506141][ T8956] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2024.521255][ T8956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 2024.662122][T23051] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2024.683305][T23051] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2024.697417][T23051] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2024.768063][T23051] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2024.791204][T23051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2024.842618][ T8956] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2024.852674][ T8956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.861375][ T8956] usb 3-1: Product: syz [ 2024.869451][ T8956] usb 3-1: Manufacturer: syz [ 2024.874893][ T8956] usb 3-1: SerialNumber: syz [ 2024.901555][ T8956] usb 3-1: config 0 descriptor?? [ 2024.910954][T23049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2024.987803][T23049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2025.055062][ T8956] usb 3-1: ucan: probing device on interface #0 [ 2025.236682][T23050] virt_wifi0 speed is unknown, defaulting to 1000 [ 2025.776350][T23061] loop6: detected capacity change from 0 to 64 [ 2025.856541][ T8956] usb 3-1: ucan: device reported invalid tx-fifo size [ 2025.863801][ T8956] usb 3-1: ucan: probe failed; try to update the device firmware [ 2026.119242][ T8956] usb 3-1: USB disconnect, device number 11 [ 2026.953851][T23051] Bluetooth: hci0: command tx timeout [ 2026.961186][T23050] chnl_net:caif_netlink_parms(): no params data found [ 2027.769068][T23074] netlink: 'syz.2.7296': attribute type 10 has an invalid length. [ 2027.828839][T23076] netlink: 'syz.2.7296': attribute type 10 has an invalid length. [ 2027.861078][T23074] team0: Port device netdevsim3 added [ 2027.975804][T23076] team0: Port device netdevsim3 removed [ 2028.007893][T23076] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 2029.037790][T23051] Bluetooth: hci0: command tx timeout [ 2029.322521][T23086] Bluetooth: MGMT ver 1.23 [ 2029.690900][T23050] bridge0: port 1(bridge_slave_0) entered blocking state [ 2029.702026][T23050] bridge0: port 1(bridge_slave_0) entered disabled state [ 2029.710643][T23050] bridge_slave_0: entered allmulticast mode [ 2029.721424][T23050] bridge_slave_0: entered promiscuous mode [ 2029.898704][T23050] bridge0: port 2(bridge_slave_1) entered blocking state [ 2029.910695][T23050] bridge0: port 2(bridge_slave_1) entered disabled state [ 2029.919639][T23050] bridge_slave_1: entered allmulticast mode [ 2029.930637][T23050] bridge_slave_1: entered promiscuous mode [ 2030.490384][T23050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2030.631134][T23050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2031.121062][T23051] Bluetooth: hci0: command tx timeout [ 2031.178113][T23050] team0: Port device team_slave_0 added [ 2031.205832][T23050] team0: Port device team_slave_1 added [ 2031.654715][T23050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2031.661951][T23050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2031.696928][T23050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2031.843527][T23050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2031.850781][T23050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2031.884124][T23050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2032.376755][T12491] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 2032.514162][T23050] hsr_slave_0: entered promiscuous mode [ 2032.528965][T23050] hsr_slave_1: entered promiscuous mode [ 2032.542088][T23050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2032.550168][T23050] Cannot create hsr debugfs directory [ 2032.687798][T12491] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2032.700448][T12491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.750779][T12491] usb 2-1: config 0 descriptor?? [ 2032.806929][T12491] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2033.193837][T15851] Bluetooth: hci0: command tx timeout [ 2033.421743][T12491] gp8psk: usb out operation failed. [ 2033.427637][T12491] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2033.438671][T12491] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2033.555741][T12491] usb 2-1: USB disconnect, device number 9 [ 2034.486181][T23050] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2034.736698][T23050] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2034.864516][T23120] loop1: detected capacity change from 0 to 64 [ 2034.987343][T23050] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.230363][T23050] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.136135][T23050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2036.270063][T23050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2036.382594][T23050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2036.576221][T23050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2037.159265][T23139] option changes via remount are deprecated (pid=23138 comm=syz.1.7326) [ 2038.489879][T23050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2038.762085][T23050] 8021q: adding VLAN 0 to HW filter on device team0 [ 2038.989364][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 2038.997280][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2039.128847][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.136911][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2040.978883][ T30] audit: type=1326 audit(2000000029.520:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23160 comm="syz.6.7336" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f55579 code=0x0 [ 2041.672708][T23050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2043.180220][T23177] loop1: detected capacity change from 0 to 64 [ 2044.857276][T23050] veth0_vlan: entered promiscuous mode [ 2045.166122][T23050] veth1_vlan: entered promiscuous mode [ 2045.478314][T23191] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7346'. [ 2045.854952][T23050] veth0_macvtap: entered promiscuous mode [ 2046.021870][T23050] veth1_macvtap: entered promiscuous mode [ 2046.302744][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2046.317969][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2046.331834][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2046.343827][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2046.357164][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2046.368192][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2046.378563][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2046.392566][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2046.403896][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2046.417850][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2046.431549][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2046.443451][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2046.456899][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2046.467803][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2046.478310][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2046.492136][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2046.502434][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2046.516548][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2046.530325][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2046.542161][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2046.555674][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2046.566603][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2046.587234][T23050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2046.778926][T23196] loop7: detected capacity change from 0 to 164 [ 2046.856281][T23198] loop6: detected capacity change from 0 to 64 [ 2047.091386][T23196] rock: directory entry would overflow storage [ 2047.101229][T23196] rock: sig=0x4f50, size=4, remaining=3 [ 2047.107723][T23196] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 2047.374263][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2047.385330][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.398995][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2047.410990][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.421454][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2047.435771][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.449832][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2047.461861][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.475434][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2047.486415][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.496698][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2047.510555][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.520952][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2047.531838][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.545291][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2047.559713][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.571069][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2047.585417][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.595689][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2047.606578][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.620254][T23050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2047.631224][T23050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2047.654195][T23050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2048.290887][T23201] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7352'. [ 2048.520105][T23050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.529942][T23050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.539260][T23050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.551925][T23050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.626922][T23204] loop7: detected capacity change from 0 to 16 [ 2048.714378][T23204] erofs (device loop7): mounted with root inode @ nid 36. [ 2049.202231][T23051] Bluetooth: hci3: command 0x0406 tx timeout [ 2049.422671][T23209] loop6: detected capacity change from 0 to 64 [ 2050.892938][T23214] loop1: detected capacity change from 0 to 4096 [ 2051.362166][T23214] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 2052.923527][ T30] audit: type=1400 audit(2000000041.470:166): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=263A20310A666C6167733A203078300A6864725F6C656E3A2032340A747970655F6F66663A20300A747970655F6C656E3A20300A7374725F6F66663A20300A7374725F6C656E3A20320A6274665F746F74616C5F73697A653A2032360A4E6F207479706520666F756E64 pid=23231 comm="syz.6.7364" [ 2056.432390][T23051] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2056.482499][T23051] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2056.538612][T23051] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2056.603050][T23051] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2056.658551][T23051] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2057.020983][T23262] virt_wifi0 speed is unknown, defaulting to 1000 [ 2057.779476][T23272] loop1: detected capacity change from 0 to 256 [ 2058.163792][T23275] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7378'. [ 2058.804171][T23051] Bluetooth: hci6: command tx timeout [ 2059.162543][T23279] loop7: detected capacity change from 0 to 512 [ 2059.253741][T23279] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 2059.457959][T23279] EXT4-fs (loop7): 1 truncate cleaned up [ 2059.466746][T23279] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2059.497816][T23283] loop6: detected capacity change from 0 to 1024 [ 2059.517987][ T4511] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 2059.678828][T11036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2059.690535][T11036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2059.912782][T23283] hfsplus: bad catalog entry type [ 2059.960064][T23262] chnl_net:caif_netlink_parms(): no params data found [ 2060.179716][T15327] hfsplus: b-tree write err: -5, ino 4 [ 2060.306454][T15327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2060.319881][T15327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2060.606339][ T9706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2060.876314][T23051] Bluetooth: hci6: command tx timeout [ 2062.886261][T23262] bridge0: port 1(bridge_slave_0) entered blocking state [ 2062.895107][T23262] bridge0: port 1(bridge_slave_0) entered disabled state [ 2062.906860][T23262] bridge_slave_0: entered allmulticast mode [ 2062.922508][T23262] bridge_slave_0: entered promiscuous mode [ 2062.982470][T23051] Bluetooth: hci6: command tx timeout [ 2063.046166][T23262] bridge0: port 2(bridge_slave_1) entered blocking state [ 2063.058471][T23262] bridge0: port 2(bridge_slave_1) entered disabled state [ 2063.066824][T23262] bridge_slave_1: entered allmulticast mode [ 2063.077719][T23262] bridge_slave_1: entered promiscuous mode [ 2063.942123][T23262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2064.094443][T23262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2064.696420][T23262] team0: Port device team_slave_0 added [ 2064.812528][T23262] team0: Port device team_slave_1 added [ 2064.876582][T17608] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2065.035471][T23051] Bluetooth: hci6: command tx timeout [ 2065.084277][T17608] usb 5-1: Using ep0 maxpacket: 32 [ 2065.149308][T17608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2065.166914][T17608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2065.178355][T17608] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2065.190464][T17608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2065.389576][T17608] usb 5-1: config 0 descriptor?? [ 2065.456930][T17608] hub 5-1:0.0: USB hub found [ 2065.548171][T23262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2065.555743][T23262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2065.590182][T23262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2065.627525][T17608] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 2065.836879][T17608] usbhid 5-1:0.0: can't add hid device: -71 [ 2065.843881][T17608] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2065.933875][T17608] usb 5-1: USB disconnect, device number 9 [ 2065.989021][T23262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2066.008267][T23262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2066.041121][T23262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2066.340302][T23326] loop1: detected capacity change from 0 to 4096 [ 2066.361218][T23330] Invalid logical block size (1023) [ 2066.428135][T23326] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 2066.826949][T23332] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7399'. [ 2066.850948][T23262] hsr_slave_0: entered promiscuous mode [ 2066.862816][T23262] hsr_slave_1: entered promiscuous mode [ 2066.879639][T23262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2066.887699][T23262] Cannot create hsr debugfs directory [ 2067.371454][T23333] ntfs3(loop1): ino=1e, "file1" ntfs_rename [ 2068.070965][T23339] [U]  [ 2068.993418][T23262] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.170368][T23262] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.442967][T23262] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.721402][T23262] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2070.132175][T23349] loop6: detected capacity change from 0 to 2048 [ 2070.310052][T23349] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 2070.326146][T23349] UDF-fs: Scanning with blocksize 512 failed [ 2070.539489][T23349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2070.788182][T23262] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2071.074786][T23262] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2071.198783][T23262] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2071.313893][T23262] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2072.763121][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2072.777096][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2072.875669][T23370] loop6: detected capacity change from 0 to 256 [ 2073.434874][T23262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2073.528458][T23370] FAT-fs (loop6): Directory bread(block 64) failed [ 2073.535739][T23370] FAT-fs (loop6): Directory bread(block 65) failed [ 2073.542783][T23370] FAT-fs (loop6): Directory bread(block 66) failed [ 2073.552923][T23370] FAT-fs (loop6): Directory bread(block 67) failed [ 2073.563946][T23370] FAT-fs (loop6): Directory bread(block 68) failed [ 2073.570837][T23370] FAT-fs (loop6): Directory bread(block 69) failed [ 2073.584598][T23370] FAT-fs (loop6): Directory bread(block 70) failed [ 2073.592172][T23370] FAT-fs (loop6): Directory bread(block 71) failed [ 2073.599485][T23370] FAT-fs (loop6): Directory bread(block 72) failed [ 2073.609525][T23370] FAT-fs (loop6): Directory bread(block 73) failed [ 2073.715633][T23375] loop7: detected capacity change from 0 to 512 [ 2073.785534][T23375] EXT4-fs: Ignoring removed nobh option [ 2073.791615][T23375] EXT4-fs: Ignoring removed nobh option [ 2073.795566][T23262] 8021q: adding VLAN 0 to HW filter on device team0 [ 2073.868821][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.876761][ T3666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2074.092271][T23375] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 2074.143907][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state [ 2074.151703][ T3666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2074.204367][T23375] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.7418: invalid indirect mapped block 4294967295 (level 2) [ 2074.334864][T23375] EXT4-fs (loop7): 1 truncate cleaned up [ 2074.349944][T23375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2074.595553][T23375] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2075.627035][T23388] loop4: detected capacity change from 0 to 256 [ 2075.640248][T23387] loop1: detected capacity change from 0 to 1024 [ 2075.742233][T23388] exfat: Deprecated parameter 'namecase' [ 2075.749694][T23388] exfat: Deprecated parameter 'namecase' [ 2075.803465][T23387] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2075.817161][T23387] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 2075.831676][T23387] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 2075.982904][T23387] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #5: comm syz.1.7422: unexpected bad inode w/o EXT4_IGET_BAD [ 2076.068538][T23388] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 2076.105155][T23387] EXT4-fs (loop1): no journal found [ 2076.110683][T23387] EXT4-fs (loop1): can't get journal size [ 2076.248497][T23387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2077.006450][T22205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2077.134021][T23392] loop6: detected capacity change from 0 to 4096 [ 2077.643939][T23392] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 2077.873768][T23262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2078.286235][T23405] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7428'. [ 2079.008646][T23262] veth0_vlan: entered promiscuous mode [ 2079.258978][T23262] veth1_vlan: entered promiscuous mode [ 2079.979616][T23262] veth0_macvtap: entered promiscuous mode [ 2080.102916][T23262] veth1_macvtap: entered promiscuous mode [ 2080.538324][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.552737][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.567450][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.578597][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.588873][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.602675][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.612993][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.630729][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.642374][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.650978][T23417] loop1: detected capacity change from 0 to 512 [ 2080.658644][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.658759][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.658864][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.658966][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.659063][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.659161][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.659258][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.659388][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.659484][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.659580][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.788962][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.802364][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.813407][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.826320][T23417] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 2080.838671][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.852925][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.872995][T23262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2080.986148][T23417] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 2080.991563][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.009906][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.020262][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.031414][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.048426][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.062774][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.074334][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.088309][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.098828][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.110181][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.126065][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.140838][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.147041][T23417] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #15: comm syz.1.7434: corrupted in-inode xattr: e_value size too large [ 2081.152187][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.182372][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.192684][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.208463][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.218807][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.229725][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.246623][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.260979][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.275357][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.286316][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.296740][T23262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2081.310462][T23262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2081.326758][T23262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2081.367668][T23417] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.7434: couldn't read orphan inode 15 (err -117) [ 2081.512181][T23417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2081.787813][T23417] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 863271013 > max in inode 18 [ 2082.192301][T23262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.201955][T23262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.234123][T23262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.252585][T23262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.309792][T22205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2082.550708][T23433] loop7: detected capacity change from 0 to 2048 [ 2082.731543][T23433] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2084.985808][T23450] loop7: detected capacity change from 0 to 4096 [ 2089.518528][T23490] loop4: detected capacity change from 0 to 128 [ 2089.588553][T23492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7462'. [ 2089.631038][T23490] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 2089.800036][T23490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2091.875224][T23508] loop4: detected capacity change from 0 to 256 [ 2092.149483][T22484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2092.159116][T22484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2092.312696][ T3666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2092.323592][ T3666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2092.475918][T23051] Bluetooth: hci6: command tx timeout [ 2093.737802][T23526] loop4: detected capacity change from 0 to 1024 [ 2093.802366][T23526] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 2093.816177][T23526] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 2093.889149][T23526] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #32: comm syz.4.7474: iget: special inode unallocated [ 2093.921316][T23526] EXT4-fs (loop4): no journal found [ 2093.931224][T23526] EXT4-fs (loop4): can't get journal size [ 2094.013735][T23526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 2094.628298][T23050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2096.541042][T23549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7485'. [ 2096.622216][T23550] loop4: detected capacity change from 0 to 512 [ 2096.709059][T23550] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2096.988443][T23550] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.7487: couldn't read orphan inode 26 (err -116) [ 2097.118052][T23550] EXT4-fs (loop4): Remounting filesystem read-only [ 2097.130544][T23550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2097.147701][T23550] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2097.737824][T23050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2098.290081][T23568] loop1: detected capacity change from 0 to 512 [ 2098.349860][T23568] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2098.468597][T23568] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #12: comm syz.1.7494: corrupted in-inode xattr: invalid ea_ino [ 2098.580334][T23568] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.7494: couldn't read orphan inode 12 (err -117) [ 2098.666967][T23568] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2098.781444][T23573] loop4: detected capacity change from 0 to 512 [ 2099.007228][T23578] loop0: detected capacity change from 0 to 8 [ 2099.050992][T23573] EXT4-fs (loop4): too many log groups per flexible block group [ 2099.061462][T23573] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 2099.228766][T22205] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 2099.243967][T23573] EXT4-fs (loop4): mount failed [ 2099.314186][T23578] SQUASHFS error: xz decompression failed, data probably corrupt [ 2099.322321][T23578] SQUASHFS error: Failed to read block 0xa8: -5 [ 2099.379932][T23578] SQUASHFS error: xz decompression failed, data probably corrupt [ 2099.392879][T23578] SQUASHFS error: Failed to read block 0xa8: -5 [ 2099.427055][ T30] audit: type=1800 audit(2000000087.970:167): pid=23578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7497" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 2100.115752][T23584] loop1: detected capacity change from 0 to 1024 [ 2100.411587][T23586] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7500'. [ 2100.706286][T11036] hfsplus: b-tree write err: -5, ino 4 [ 2101.362056][T23595] loop6: detected capacity change from 0 to 64 [ 2101.560523][T23595] syz.6.7505: attempt to access beyond end of device [ 2101.560523][T23595] loop6: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 2101.581362][T23595] Buffer I/O error on dev loop6, logical block 512, async page read [ 2101.591018][T23595] syz.6.7505: attempt to access beyond end of device [ 2101.591018][T23595] loop6: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 2101.610932][T23595] Buffer I/O error on dev loop6, logical block 56576, async page read [ 2103.082537][T20891] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2103.354939][T20891] usb 5-1: Using ep0 maxpacket: 16 [ 2103.399709][T20891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2103.417747][T20891] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 2103.427503][T20891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2103.501166][T23617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7514'. [ 2103.621760][T20891] usb 5-1: config 0 descriptor?? [ 2103.878392][T23621] loop7: detected capacity change from 0 to 512 [ 2103.949482][T23621] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 2104.019780][T23621] EXT4-fs error (device loop7): ext4_orphan_get:1416: comm syz.7.7516: bad orphan inode 131083 [ 2104.135959][T23621] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2104.173456][T20891] bigben 0003:146B:0902.003A: unexpected rdesc, please submit for review [ 2104.234810][T20891] bigben 0003:146B:0902.003A: unknown main item tag 0x0 [ 2104.242198][T20891] bigben 0003:146B:0902.003A: unknown main item tag 0x0 [ 2104.256206][T20891] bigben 0003:146B:0902.003A: unknown main item tag 0x0 [ 2104.263789][T20891] bigben 0003:146B:0902.003A: unknown main item tag 0x0 [ 2104.271107][T20891] bigben 0003:146B:0902.003A: unknown main item tag 0x0 [ 2104.488750][T20891] bigben 0003:146B:0902.003A: hidraw0: USB HID v0.05 Device [HID 146b:0902] on usb-dummy_hcd.4-1/input0 [ 2104.501064][T20891] bigben 0003:146B:0902.003A: missing HID_OUTPUT_REPORT 0 [ 2104.513430][T20891] bigben 0003:146B:0902.003A: no output report found [ 2104.659423][T20891] usb 5-1: USB disconnect, device number 10 [ 2104.825592][ T9706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2106.317396][T23642] loop6: detected capacity change from 0 to 2048 [ 2106.577818][T23642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2106.699070][T23638] loop1: detected capacity change from 0 to 4096 [ 2106.770553][T23642] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.7522: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 2106.804068][T23638] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 2106.817464][T23642] EXT4-fs (loop6): Remounting filesystem read-only [ 2107.138248][T23650] loop4: detected capacity change from 0 to 1024 [ 2107.252850][T23638] ntfs3(loop1): ino=19, mi_enum_attr [ 2107.262079][T23638] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 2107.268167][ T9246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2107.366468][T23650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2107.507042][ T30] audit: type=1800 audit(2000000096.070:168): pid=23650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7527" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 2107.527834][ C0] vkms_vblank_simulate: vblank timer overrun [ 2107.924118][T23050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2108.285089][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7531'. [ 2108.297878][T23661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7531'. [ 2108.311674][T23661] netlink: 'syz.0.7531': attribute type 12 has an invalid length. [ 2108.541837][T23663] loop7: detected capacity change from 0 to 1024 [ 2108.744775][T23663] syz.7.7533: attempt to access beyond end of device [ 2108.744775][T23663] loop7: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 2108.765458][T23663] Buffer I/O error on dev loop7, logical block 100663296, async page read [ 2108.777768][T23663] hfsplus: unable to mark blocks free: error -5 [ 2108.784528][T23663] hfsplus: can't free extent [ 2109.001945][T23667] loop1: detected capacity change from 0 to 2048 [ 2109.064011][T23667] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2109.160102][T23669] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2110.295408][T23679] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 2110.472021][T23680] loop0: detected capacity change from 0 to 1024 [ 2110.594640][T23680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2111.088937][T23262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2111.184050][T23689] loop4: detected capacity change from 0 to 256 [ 2112.301644][T23693] loop0: detected capacity change from 0 to 2048 [ 2112.440269][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7548'. [ 2112.456375][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7548'. [ 2112.552937][T23693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2112.992758][T23707] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7550'. [ 2113.112931][T23701] loop7: detected capacity change from 0 to 4096 [ 2113.167462][T23701] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 2113.469971][T23262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2113.969029][T23701] ntfs3(loop7): failed to convert "c46c" to maccenteuro [ 2114.021605][T23701] ntfs3(loop7): ino=20, mi_enum_attr [ 2114.031350][T23701] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 2114.907839][T23721] cifs: Bad value for 'port' [ 2116.447687][T23736] loop0: detected capacity change from 0 to 512 [ 2116.536797][T23736] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 2116.615482][T23736] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 2116.627545][T23736] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 2116.807335][T23736] EXT4-fs (loop0): 1 truncate cleaned up [ 2116.815890][T23736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2116.959136][T23736] EXT4-fs: group quota file already specified [ 2117.440972][T23262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2118.042710][T23756] loop0: detected capacity change from 0 to 8 [ 2119.755972][T23776] smc: net device bond0 erased user defined pnetid SYZ0 [ 2120.474851][T23779] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7583'. [ 2120.738682][T23784] loop0: detected capacity change from 0 to 1024 [ 2121.472602][T23791] loop1: detected capacity change from 0 to 256 [ 2121.815192][T23791] FAT-fs (loop1): Directory bread(block 64) failed [ 2121.822280][T23791] FAT-fs (loop1): Directory bread(block 65) failed [ 2121.833372][T23791] FAT-fs (loop1): Directory bread(block 66) failed [ 2121.840292][T23791] FAT-fs (loop1): Directory bread(block 67) failed [ 2121.848006][T23791] FAT-fs (loop1): Directory bread(block 68) failed [ 2121.858190][T23791] FAT-fs (loop1): Directory bread(block 69) failed [ 2121.865437][T23791] FAT-fs (loop1): Directory bread(block 70) failed [ 2121.872327][T23791] FAT-fs (loop1): Directory bread(block 71) failed [ 2121.879452][T23791] FAT-fs (loop1): Directory bread(block 72) failed [ 2121.889657][T23791] FAT-fs (loop1): Directory bread(block 73) failed [ 2123.186092][T23801] loop4: detected capacity change from 0 to 1024 [ 2123.405220][T23801] syz.4.7592: attempt to access beyond end of device [ 2123.405220][T23801] loop4: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 2123.422669][T23801] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 2123.429221][T23804] loop6: detected capacity change from 0 to 1024 [ 2123.436258][T23801] hfsplus: unable to mark blocks free: error -5 [ 2123.451833][T23801] hfsplus: can't free extent [ 2124.824565][T23815] loop0: detected capacity change from 0 to 256 [ 2125.240535][T23815] FAT-fs (loop0): Directory bread(block 64) failed [ 2125.247888][T23815] FAT-fs (loop0): Directory bread(block 65) failed [ 2125.255229][T23815] FAT-fs (loop0): Directory bread(block 66) failed [ 2125.262099][T23815] FAT-fs (loop0): Directory bread(block 67) failed [ 2125.280213][T23815] FAT-fs (loop0): Directory bread(block 68) failed [ 2125.287587][T23815] FAT-fs (loop0): Directory bread(block 69) failed [ 2125.299635][T23815] FAT-fs (loop0): Directory bread(block 70) failed [ 2125.309811][T23815] FAT-fs (loop0): Directory bread(block 71) failed [ 2125.316959][T23815] FAT-fs (loop0): Directory bread(block 72) failed [ 2125.326926][T23815] FAT-fs (loop0): Directory bread(block 73) failed [ 2125.460580][T23818] loop7: detected capacity change from 0 to 2048 [ 2125.556914][T23818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2125.969384][ T9706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2128.413393][T23854] loop6: detected capacity change from 0 to 1024 [ 2130.530069][T23870] xt_CT: No such helper "snmp" [ 2131.220798][T23883] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7628'. [ 2131.288980][T23882] loop1: detected capacity change from 0 to 512 [ 2131.303815][T23883] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7628'. [ 2131.380964][T23882] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 2131.512537][T23882] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 2131.573609][T23882] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 2131.582312][T23882] System zones: 0-2, 18-18, 34-34 [ 2131.677553][T23882] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 2131.736873][T23882] EXT4-fs (loop1): 1 truncate cleaned up [ 2131.746571][T23882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2131.851463][T23888] loop4: detected capacity change from 0 to 2048 [ 2132.006268][T23882] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.7627: path /140/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 2132.092409][T23892] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2132.181719][T23882] EXT4-fs (loop1): Remounting filesystem read-only [ 2132.619451][T22205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2132.712862][T23892] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 2132.730808][T23892] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 2132.829142][T23892] Remounting filesystem read-only [ 2132.899541][T23050] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 2133.016178][T23899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7634'. [ 2133.535349][T23905] loop6: detected capacity change from 0 to 256 [ 2133.768050][T23905] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 2134.200653][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2134.207916][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2134.670275][T23912] loop7: detected capacity change from 0 to 2048 [ 2134.830990][T23912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2134.966124][T23915] loop6: detected capacity change from 0 to 4096 [ 2134.990873][T23915] EXT4-fs (loop6): Test dummy encryption mode enabled [ 2135.007890][T23917] loop4: detected capacity change from 0 to 1024 [ 2135.072273][T23915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2135.089635][T23923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7644'. [ 2135.105845][T23923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7644'. [ 2135.354002][T23917] hfsplus: bad catalog entry type [ 2135.480240][ T9706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2135.541105][ T9246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2135.884607][ T4206] hfsplus: b-tree write err: -5, ino 4 [ 2138.046787][T23939] loop4: detected capacity change from 0 to 4096 [ 2138.100587][T23939] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 2138.838987][T23939] ntfs3(loop4): ino=1f, "file2" failed to open parent directory r=5 to update [ 2139.423970][ T3666] ntfs3(loop4): ino=1f, failed to open parent directory r=5 to update [ 2140.024858][T23959] Bluetooth: MGMT ver 1.23 [ 2142.205871][T23984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7674'. [ 2142.775247][T23989] loop7: detected capacity change from 0 to 1024 [ 2142.841069][T23989] EXT4-fs (loop7): Test dummy encryption mode enabled [ 2142.880438][T23989] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 2143.035641][T23989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2143.443787][T23995] bridge0: entered promiscuous mode [ 2143.449659][T23995] macvlan2: entered promiscuous mode [ 2143.456444][T23995] macvlan2: entered allmulticast mode [ 2143.462101][T23995] bridge0: entered allmulticast mode [ 2143.479602][T23995] bridge0: port 3(macvlan2) entered blocking state [ 2143.487370][T23995] bridge0: port 3(macvlan2) entered disabled state [ 2143.559327][T23995] bridge0: left allmulticast mode [ 2143.565941][T23995] bridge0: left promiscuous mode [ 2143.641050][ T9706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2144.514194][T24001] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7681'. [ 2144.599731][T24001] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7681'. [ 2144.609364][T24001] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7681'. [ 2144.678086][T24005] loop1: detected capacity change from 0 to 24 [ 2144.716700][T24005] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 2146.728921][T24024] loop4: detected capacity change from 0 to 64 [ 2146.950851][T24026] loop6: detected capacity change from 0 to 256 [ 2147.085519][T24030] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7694'. [ 2147.984388][T24036] loop4: detected capacity change from 0 to 256 [ 2148.101082][T24036] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 2148.593684][ T8956] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2148.826830][ T8956] usb 2-1: Using ep0 maxpacket: 16 [ 2148.867431][ T8956] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2148.880297][ T8956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2148.889020][ T8956] usb 2-1: Product: syz [ 2148.893826][ T8956] usb 2-1: Manufacturer: syz [ 2148.898757][ T8956] usb 2-1: SerialNumber: syz [ 2149.093316][ T8956] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2149.100117][ T8956] r8152-cfgselector 2-1: config 0 descriptor?? [ 2149.268994][T24051] veth1_macvtap: left promiscuous mode [ 2149.282051][T24051] macsec0: entered promiscuous mode [ 2149.288837][T24051] macsec0: entered allmulticast mode [ 2149.400065][T24052] veth1_macvtap: entered promiscuous mode [ 2149.407976][T24052] veth1_macvtap: entered allmulticast mode [ 2149.421572][T24052] macsec0: left promiscuous mode [ 2149.428134][T24052] macsec0: left allmulticast mode [ 2149.433806][T24052] veth1_macvtap: left allmulticast mode [ 2149.722138][T12491] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 2150.578633][T24058] loop6: detected capacity change from 0 to 8 [ 2150.995521][T24058] SQUASHFS error: lzo decompression failed, data probably corrupt [ 2151.007413][T24058] SQUASHFS error: Failed to read block 0x60: -5 [ 2151.014797][T24058] SQUASHFS error: Failed to read block 0x71: -5 [ 2151.021870][T24058] SQUASHFS error: lzo decompression failed, data probably corrupt [ 2151.030565][T24058] SQUASHFS error: Failed to read block 0x60: -5 [ 2151.049777][ T30] audit: type=1800 audit(2000000139.610:169): pid=24058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7706" name="file0" dev="loop6" ino=1 res=0 errno=0 [ 2151.228504][T24060] xt_CT: No such helper "snmp" [ 2151.596146][T15851] Bluetooth: hci0: command 0x0406 tx timeout [ 2151.682228][T24068] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7709'. [ 2152.404713][T24074] loop4: detected capacity change from 0 to 512 [ 2152.539763][T24074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2152.867091][T24074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2152.882452][T24074] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2152.989569][T24070] loop6: detected capacity change from 0 to 4096 [ 2153.324253][ T8956] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2153.481662][T23050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2153.543989][ T8956] usb 2-1: Using ep0 maxpacket: 16 [ 2153.650959][ T8956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2153.665536][ T8956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2153.680346][ T8956] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2153.693890][ T8956] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2153.706623][ T8956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.811987][ T8956] usb 2-1: config 0 descriptor?? [ 2153.873785][T24070] ntfs3(loop6): ino=5, "/" indx_read [ 2153.879457][T24070] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 2153.925510][T24070] ntfs3(loop6): ino=5, ntfs_readdir [ 2154.328943][ T8956] microsoft 0003:045E:07DA.003B: unbalanced collection at end of report description [ 2154.346154][T24090] loop7: detected capacity change from 0 to 256 [ 2154.405621][ T8956] microsoft 0003:045E:07DA.003B: parse failed [ 2154.412710][ T8956] microsoft 0003:045E:07DA.003B: probe with driver microsoft failed with error -22 [ 2154.508737][T24090] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 2154.517187][T24090] FAT-fs (loop7): Filesystem has been set read-only [ 2154.595251][ T8956] usb 2-1: USB disconnect, device number 11 [ 2155.769501][T24104] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7724'. [ 2156.571645][T24113] loop7: detected capacity change from 0 to 64 [ 2156.608105][T24114] vivid-000: disconnect [ 2156.666533][T24115] loop6: detected capacity change from 0 to 64 [ 2157.307556][T24111] vivid-000: reconnect [ 2158.222024][T24127] tipc: Started in network mode [ 2158.227659][T24127] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 2158.248687][T24127] tipc: Enabled bearer , priority 7 [ 2158.748197][T24125] loop1: detected capacity change from 0 to 4096 [ 2158.847682][T24125] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2158.979555][T24125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2159.030802][T24134] loop7: detected capacity change from 0 to 64 [ 2159.363699][ T8956] tipc: Node number set to 9480874 [ 2159.617799][T24137] dvmrp8: entered allmulticast mode [ 2159.622717][T22205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2159.770789][T24136] dvmrp8: left allmulticast mode [ 2160.453592][T24139] xt_CT: No such helper "snmp" [ 2160.487452][T24145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7743'. [ 2160.504147][T24145] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7743'. [ 2161.687486][T24157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7748'. [ 2162.161206][T24160] loop4: detected capacity change from 0 to 2048 [ 2162.307950][T24160] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 2162.390933][T24160] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 2162.399602][T24160] UDF-fs: Scanning with blocksize 512 failed [ 2162.702360][T24160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2163.500507][T24176] netlink: 'syz.7.7757': attribute type 2 has an invalid length. [ 2163.737020][T24178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7760'. [ 2164.487371][T24181] xt_CT: No such helper "snmp" [ 2164.947746][T24191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7763'. [ 2164.971293][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7765'. [ 2165.921404][T24202] loop0: detected capacity change from 0 to 256 [ 2165.974764][T24204] loop1: detected capacity change from 0 to 8 [ 2166.010195][T24202] exfat: Deprecated parameter 'namecase' [ 2166.221641][T24202] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 2166.933494][T24213] loop4: detected capacity change from 0 to 256 [ 2168.449423][T24221] loop7: detected capacity change from 0 to 4096 [ 2168.883484][T24230] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2170.620362][T24250] loop6: detected capacity change from 0 to 1024 [ 2171.231006][T15326] hfsplus: b-tree write err: -5, ino 4 [ 2173.086089][T24272] loop4: detected capacity change from 0 to 64 [ 2173.236631][T24272] syz.4.7800: attempt to access beyond end of device [ 2173.236631][T24272] loop4: rw=0, sector=917514, nr_sectors = 2 limit=64 [ 2173.254036][T24272] Buffer I/O error on dev loop4, logical block 458757, async page read [ 2173.429868][T24272] syz.4.7800: attempt to access beyond end of device [ 2173.429868][T24272] loop4: rw=0, sector=917514, nr_sectors = 2 limit=64 [ 2173.453258][T24272] Buffer I/O error on dev loop4, logical block 458757, async page read [ 2173.559642][T24272] syz.4.7800: attempt to access beyond end of device [ 2173.559642][T24272] loop4: rw=0, sector=917514, nr_sectors = 2 limit=64 [ 2173.580152][T24272] Buffer I/O error on dev loop4, logical block 458757, async page read [ 2173.740446][T24272] syz.4.7800: attempt to access beyond end of device [ 2173.740446][T24272] loop4: rw=0, sector=917514, nr_sectors = 2 limit=64 [ 2173.760672][T24272] Buffer I/O error on dev loop4, logical block 458757, async page read [ 2174.171648][T24280] loop6: detected capacity change from 0 to 64 [ 2174.700557][T24287] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 2176.851698][T24305] loop6: detected capacity change from 0 to 2048 [ 2176.884390][ T30] audit: type=1326 audit(2000000165.450:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24308 comm="syz.1.7819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 2177.017068][T24305] Alternate GPT is invalid, using primary GPT. [ 2177.024978][T24305] loop6: p1 p2 p3 [ 2178.202911][T24323] loop7: detected capacity change from 0 to 1024 [ 2178.647677][ T30] audit: type=1326 audit(2000000167.200:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24326 comm="syz.0.7827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 2178.677103][ T30] audit: type=1326 audit(2000000167.210:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24326 comm="syz.0.7827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 2178.706739][ T30] audit: type=1326 audit(2000000167.270:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24326 comm="syz.0.7827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 2178.737119][ T30] audit: type=1326 audit(2000000167.270:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24326 comm="syz.0.7827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 2179.002106][ T1824] hfsplus: b-tree write err: -5, ino 4 [ 2179.173548][ T30] audit: type=1326 audit(2000000167.340:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24326 comm="syz.0.7827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=16 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 2179.199910][ T30] audit: type=1326 audit(2000000167.340:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24326 comm="syz.0.7827" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 2180.106200][T24342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7834'. [ 2180.119386][T24342] IPVS: Error joining to the multicast group [ 2180.989456][T24346] loop0: detected capacity change from 0 to 2048 [ 2181.132209][T24346] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2181.587543][T24354] loop6: detected capacity change from 0 to 1024 [ 2181.919815][T24354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2181.939085][T24354] ext4 filesystem being mounted at /1320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2182.056479][ T30] audit: type=1326 audit(2000000170.610:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24358 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2182.197732][ T30] audit: type=1326 audit(2000000170.680:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24358 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2182.228987][ T30] audit: type=1326 audit(2000000170.680:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24358 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2182.254239][ T30] audit: type=1326 audit(2000000170.680:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24358 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2182.280779][ T30] audit: type=1326 audit(2000000170.680:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24358 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2182.306812][ T30] audit: type=1326 audit(2000000170.710:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24358 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=143 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2182.334967][ T30] audit: type=1326 audit(2000000170.710:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24358 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2182.362923][ T30] audit: type=1326 audit(2000000170.710:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24358 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 2182.714561][ T9246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2182.849546][T24364] loop7: detected capacity change from 0 to 1024 [ 2183.908627][T24376] loop1: detected capacity change from 0 to 256 [ 2184.043810][T24374] loop4: detected capacity change from 0 to 2048 [ 2184.127824][T24374] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2184.284160][T24381] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2184.939743][T24385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7854'. [ 2187.466636][ T8956] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2187.515150][T24410] loop7: detected capacity change from 0 to 2048 [ 2187.669708][ T8956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2187.684142][ T8956] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 2187.751349][T24417] loop0: detected capacity change from 0 to 16 [ 2187.782774][ T8956] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2187.792758][ T8956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2187.801431][ T8956] usb 2-1: SerialNumber: syz [ 2187.807816][T24410] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2187.808324][T24410] ext4 filesystem being mounted at /1270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2187.851855][T24417] erofs (device loop0): mounted with root inode @ nid 36. [ 2187.874684][ T8956] usb 2-1: bad CDC descriptors [ 2188.019455][T24417] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2188.098895][T24417] erofs (device loop0): failed to decompress -57 in[61, 4035] out[1851] [ 2188.111067][T24417] erofs (device loop0): read error -117 @ 43 of nid 36 [ 2188.210164][T12491] usb 2-1: USB disconnect, device number 12 [ 2188.274308][ T9706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2188.988978][T24425] loop6: detected capacity change from 0 to 256 [ 2189.042161][T24425] exfat: Deprecated parameter 'namecase' [ 2189.343797][T24425] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabdedc71, utbl_chksum : 0xe619d30d) [ 2189.420979][T24430] netlink: 'syz.7.7871': attribute type 1 has an invalid length. [ 2190.081687][T24435] loop4: detected capacity change from 0 to 256 [ 2190.403794][ T30] audit: type=1400 audit(2000000178.940:185): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A1E1113A57B4B085C1AA59F4DB55EE39933ED508263EA8E3318AC15F42C1B3B6672F54DE33C0F408CDE5DBDC5A2B8ECA389D9963438CECCE51DD13B98D561126C9731129811638D394CE51F70F815DD0EA21CAB265F640A6D3E pid=24434 comm="syz.4.7876" [ 2191.206547][T24445] loop7: detected capacity change from 0 to 256 [ 2191.252871][T24445] exfat: Deprecated parameter 'namecase' [ 2191.265841][T24445] exfat: Deprecated parameter 'namecase' [ 2191.357077][T24445] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 2191.490681][T24447] loop4: detected capacity change from 0 to 1764 [ 2191.860811][T24453] ===================================================== [ 2191.868686][T24453] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0xd6b/0xe80 [ 2191.879131][T24453] ieee802154_hdr_push+0xd6b/0xe80 [ 2191.890891][T24453] ieee802154_header_create+0x9bc/0xc70 [ 2191.897141][T24453] dgram_sendmsg+0xd91/0x15e0 [ 2191.902243][T24453] ieee802154_sock_sendmsg+0x96/0xd0 [ 2191.907956][T24453] __sock_sendmsg+0x30f/0x380 [ 2191.913693][T24453] __sys_sendto+0x594/0x750 [ 2191.918451][T24453] __se_compat_sys_socketcall+0xceb/0x1a30 [ 2191.931020][T24453] __ia32_compat_sys_socketcall+0x6b/0xa0 [ 2191.938404][T24453] ia32_sys_call+0x3c1f/0x41f0 [ 2191.944196][T24453] __do_fast_syscall_32+0xb0/0x110 [ 2191.949627][T24453] do_fast_syscall_32+0x38/0x80 [ 2191.962050][T24453] do_SYSENTER_32+0x1f/0x30 [ 2191.967706][T24454] loop6: detected capacity change from 0 to 512 [ 2191.975884][T24453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2191.982749][T24453] [ 2191.991407][T24453] Local variable hdr created at: [ 2191.997461][T24453] ieee802154_header_create+0x4e/0xc70 [ 2192.003399][T24453] dgram_sendmsg+0xd91/0x15e0 [ 2192.008331][T24453] [ 2192.010836][T24453] CPU: 1 UID: 0 PID: 24453 Comm: syz.0.7884 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(undef) [ 2192.029347][T24453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2192.040922][T24453] ===================================================== [ 2192.048630][T24453] Disabling lock debugging due to kernel taint [ 2192.062067][T24453] Kernel panic - not syncing: kmsan.panic set ... [ 2192.068734][T24453] CPU: 1 UID: 0 PID: 24453 Comm: syz.0.7884 Tainted: G B 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(undef) [ 2192.082415][T24453] Tainted: [B]=BAD_PAGE [ 2192.086733][T24453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2192.097010][T24453] Call Trace: [ 2192.100463][T24453] [ 2192.103540][T24453] dump_stack_lvl+0x216/0x2d0 [ 2192.108478][T24453] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2192.114557][T24453] dump_stack+0x1e/0x24 [ 2192.118951][T24453] panic+0x4e5/0xcf0 [ 2192.123067][T24453] ? kmsan_internal_poison_memory+0x80/0x90 [ 2192.129265][T24453] kmsan_report+0x2ca/0x2d0 [ 2192.133993][T24453] ? __msan_memcpy+0x108/0x1c0 [ 2192.138985][T24453] ? __se_compat_sys_socketcall+0xceb/0x1a30 [ 2192.145251][T24453] ? do_fast_syscall_32+0x38/0x80 [ 2192.150530][T24453] ? do_SYSENTER_32+0x1f/0x30 [ 2192.155451][T24453] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2192.162245][T24453] ? stack_depot_save+0x12/0x20 [ 2192.167400][T24453] ? __msan_warning+0x95/0x120 [ 2192.172380][T24453] ? ieee802154_hdr_push+0xd6b/0xe80 [ 2192.177917][T24453] ? ieee802154_header_create+0x9bc/0xc70 [ 2192.183864][T24453] ? dgram_sendmsg+0xd91/0x15e0 [ 2192.188936][T24453] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 2192.194628][T24453] ? __sock_sendmsg+0x30f/0x380 [ 2192.199713][T24453] ? __sys_sendto+0x594/0x750 [ 2192.204588][T24453] ? __se_compat_sys_socketcall+0xceb/0x1a30 [ 2192.210852][T24453] ? __ia32_compat_sys_socketcall+0x6b/0xa0 [ 2192.217063][T24453] ? ia32_sys_call+0x3c1f/0x41f0 [ 2192.222300][T24453] ? __do_fast_syscall_32+0xb0/0x110 [ 2192.227820][T24453] ? do_fast_syscall_32+0x38/0x80 [ 2192.233087][T24453] ? do_SYSENTER_32+0x1f/0x30 [ 2192.238001][T24453] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2192.244753][T24453] ? __se_compat_sys_socketcall+0xceb/0x1a30 [ 2192.250981][T24453] ? __ia32_compat_sys_socketcall+0x6b/0xa0 [ 2192.257157][T24453] ? ia32_sys_call+0x3c1f/0x41f0 [ 2192.262322][T24453] ? kmsan_get_metadata+0x13e/0x1c0 [ 2192.267868][T24453] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2192.273944][T24453] ? filter_irq_stacks+0x165/0x1b0 [ 2192.279321][T24453] ? kmsan_get_metadata+0x13e/0x1c0 [ 2192.284774][T24453] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 2192.291283][T24453] ? kmsan_get_metadata+0x13e/0x1c0 [ 2192.296747][T24453] ? kmsan_internal_memmove_metadata+0x17b/0x230 [ 2192.303323][T24453] ? kmsan_get_metadata+0x13e/0x1c0 [ 2192.308770][T24453] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2192.314842][T24453] __msan_warning+0x95/0x120 [ 2192.319671][T24453] ieee802154_hdr_push+0xd6b/0xe80 [ 2192.325078][T24453] ? __msan_memcpy+0x108/0x1c0 [ 2192.330139][T24453] ieee802154_header_create+0x9bc/0xc70 [ 2192.335961][T24453] ? __pfx_ieee802154_header_create+0x10/0x10 [ 2192.342291][T24453] dgram_sendmsg+0xd91/0x15e0 [ 2192.347261][T24453] ? __pfx_dgram_sendmsg+0x10/0x10 [ 2192.352622][T24453] ieee802154_sock_sendmsg+0x96/0xd0 [ 2192.358177][T24453] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 2192.364418][T24453] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 2192.370660][T24453] __sock_sendmsg+0x30f/0x380 [ 2192.375587][T24453] __sys_sendto+0x594/0x750 [ 2192.380287][T24453] ? filter_irq_stacks+0x165/0x1b0 [ 2192.385696][T24453] ? stack_depot_save_flags+0x37/0x7e0 [ 2192.391455][T24453] __se_compat_sys_socketcall+0xceb/0x1a30 [ 2192.397548][T24453] ? kmsan_get_metadata+0x13e/0x1c0 [ 2192.402993][T24453] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2192.409095][T24453] __ia32_compat_sys_socketcall+0x6b/0xa0 [ 2192.415095][T24453] ia32_sys_call+0x3c1f/0x41f0 [ 2192.420091][T24453] __do_fast_syscall_32+0xb0/0x110 [ 2192.425446][T24453] ? irqentry_exit+0x16/0x60 [ 2192.430312][T24453] do_fast_syscall_32+0x38/0x80 [ 2192.435489][T24453] do_SYSENTER_32+0x1f/0x30 [ 2192.440217][T24453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2192.446804][T24453] RIP: 0023:0xf7fc5579 [ 2192.451052][T24453] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2192.470981][T24453] RSP: 002b:00000000f50e5430 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 2192.479659][T24453] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f50e5444 [ 2192.487808][T24453] RDX: 0000000000000000 RSI: 00000000f50e5560 RDI: 00000000f744cff4 [ 2192.495949][T24453] RBP: 00000000f50e5560 R08: 0000000000000000 R09: 0000000000000000 [ 2192.504099][T24453] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2192.512251][T24453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2192.520429][T24453] [ 2192.523897][T24453] Kernel Offset: disabled [ 2192.528341][T24453] Rebooting in 86400 seconds..