last executing test programs: 5.05445432s ago: executing program 3 (id=1600): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r2 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 4.825476621s ago: executing program 3 (id=1604): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xa08800, &(0x7f00000000c0)=ANY=[], 0x1, 0x671, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002d00)=""/4096, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16) shmctl$SHM_LOCK(r4, 0xb) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) sched_setscheduler(0x0, 0x2, 0x0) 3.688815458s ago: executing program 3 (id=1618): r0 = getpid() ioprio_set$pid(0x2, r0, 0x0) 3.089713251s ago: executing program 3 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480100001800c000100636f756e74657200240001800a0001007175657565000000140002800600034000810000060001"], 0xe8}}, 0x0) 2.292332206s ago: executing program 1 (id=1627): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x2, 0x3}, 0x20) 2.225458397s ago: executing program 1 (id=1630): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa2500, 0x0) close(r0) 2.091482987s ago: executing program 0 (id=1634): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x2a08800, &(0x7f0000000140)=ANY=[], 0x0, 0x67c, &(0x7f0000000ac0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) 2.000581988s ago: executing program 3 (id=1635): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000080)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c6c6f63616c616c6c6f633d31383434363734343037333730393535313631302c6e6f61636c2c009e952c808f009b8a2a2ba5c45decab84ea8c68fb7016e25d75317ec64ca76ee292fe2e1a2a41aaf805a4bb34d7776eb390b8fade283f3d2957e4b70a21bc08d561546ded2783f4c4fd223b24044bbd7e720c3b85c2a5fa4df07027e648a2bab84e71838bec147b85485acfd6db4ac607060e6585f04feaf6705b0547a170164b415c767dcbfa4d5140560b030a74bc334a9332d0cd2851a36809fdcc5c5d34b81dc0b229dcd31e40309ede3c36fa0b64a4731ade0637b9bbc589bc269e00776a9d8b6a794daf03f7192671780559443a5d2791e117c4fff4954e6382a01d8a6434383cd198c401f3bf987a96c60d364e3383d3981748e8e670679a66249ea23cc55681c53b577151626f83db09238e4dc497"], 0x1, 0x470b, &(0x7f0000008f40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 1.976150368s ago: executing program 0 (id=1636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=@can_delroute={0x3c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_UID={0x8}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "cf908ff3ed9bd7f7"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc}}]}, 0x3c}}, 0x0) 1.938356478s ago: executing program 1 (id=1637): socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'veth1_virt_wifi\x00', @random='\x00\x00\x00 \x00'}) 1.857328619s ago: executing program 0 (id=1638): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xa08800, &(0x7f00000000c0)=ANY=[], 0x1, 0x671, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200000a, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2bd, &(0x7f00000017c0)="$eJzs3U9rY1UUAPDz8q+pLhLEjSL4QBeuytStm0YZQexKiaBuDE4HJCkDGQhYwTqr+QQuxa/h1p1rv4HgVnA3s6g8ef+axCZtpP9g+vttevvuPfed3PNIVjn56o3D8YNHSTx59kd0u0k09mIvnifRj0bUfohWAAAvjudZFn9nEdEu/082jmw1ri8rAOA6lZ//pdvOBQC4GZ9+/sXHg/39+5+kaTde6z2dDZOIOHw6G5bzg4fxTUziIO5FL04islPl+MOP9u9HK8314+3D49lwtrT/4K/YLuJ3oxf91fG7aamKH0bkf9vxUqQxeNiut+rFq6vj3z0bvx3DTrzz1kL+O9GL37+ORzGJB5HHzuO/303TD7Ifn333ZX6bPD5pxHCrWDeXNW+mIgAAAAAAAAAAAAAAAAAAAAAA3AU7aZqU7XuK/j35par/TvOkmN9Ja/3l/jxl/Gm/4LI/UBZVi57jLH6q++vcS9M0qxbO41vxessPCwAAAAAAAAAAAAAAAAAAAEDu8bdH49FkcjC99KA5Hk3qbgD11/o3C29GxPKVvYU1b8bReNRcv+HW5vda7DaQ53ru4mi14gqO5eJB/Lqd57Nmzc9Vvv9/5615cT+Lo+J86sJc6at45f3TDNNqqj7k8Si56F7dunC/LE51YuM0kmTpSlHbycE0Kx6Jk2y5pt01h9m5gtPIn9HOyyun/smybLN93vuzrFFZwWlStNjYLI12NVj7tHTP1uK39RuufctoXvY9BwAAAAAAAAAAAAAAAAAAWG35i9P/8eTc0Ma1JQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN2z++//1oBsRy1fODI6r4PPWVINOTB/f8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDvg3AAD//0t9Q48=") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16) shmctl$SHM_LOCK(r3, 0xb) sched_setscheduler(0x0, 0x2, 0x0) 1.856192829s ago: executing program 4 (id=1639): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xe501, 0x3, 0x468, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3d0, 0x230, 0x230, 0x3d0, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 1.71617947s ago: executing program 4 (id=1640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0xfdd1df4705532f1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x756, 0x1, 0x7, 0x6}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) 969.483854ms ago: executing program 2 (id=1641): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) 917.034394ms ago: executing program 2 (id=1642): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 916.435265ms ago: executing program 1 (id=1643): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1658}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 836.646475ms ago: executing program 1 (id=1644): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c790103", @ANYRES16=0x0, @ANYBLOB="c89045efe05ae52d00009300000008003617"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3204c80, &(0x7f0000000000), 0x1, 0x78a, &(0x7f0000003600)="$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") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 807.128135ms ago: executing program 1 (id=1645): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xa08800, &(0x7f00000000c0)=ANY=[], 0x1, 0x671, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200000a, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2bd, &(0x7f00000017c0)="$eJzs3U9rY1UUAPDz8q+pLhLEjSL4QBeuytStm0YZQexKiaBuDE4HJCkDGQhYwTqr+QQuxa/h1p1rv4HgVnA3s6g8ef+axCZtpP9g+vttevvuPfed3PNIVjn56o3D8YNHSTx59kd0u0k09mIvnifRj0bUfohWAAAvjudZFn9nEdEu/082jmw1ri8rAOA6lZ//pdvOBQC4GZ9+/sXHg/39+5+kaTde6z2dDZOIOHw6G5bzg4fxTUziIO5FL04islPl+MOP9u9HK8314+3D49lwtrT/4K/YLuJ3oxf91fG7aamKH0bkf9vxUqQxeNiut+rFq6vj3z0bvx3DTrzz1kL+O9GL37+ORzGJB5HHzuO/303TD7Ifn333ZX6bPD5pxHCrWDeXNW+mIgAAAAAAAAAAAAAAAAAAAAAA3AU7aZqU7XuK/j35par/TvOkmN9Ja/3l/jxl/Gm/4LI/UBZVi57jLH6q++vcS9M0qxbO41vxessPCwAAAAAAAAAAAAAAAAAAAEDu8bdH49FkcjC99KA5Hk3qbgD11/o3C29GxPKVvYU1b8bReNRcv+HW5vda7DaQ53ru4mi14gqO5eJB/Lqd57Nmzc9Vvv9/5615cT+Lo+J86sJc6at45f3TDNNqqj7k8Si56F7dunC/LE51YuM0kmTpSlHbycE0Kx6Jk2y5pt01h9m5gtPIn9HOyyun/smybLN93vuzrFFZwWlStNjYLI12NVj7tHTP1uK39RuufctoXvY9BwAAAAAAAAAAAAAAAAAAWG35i9P/8eTc0Ma1JQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN2z++//1oBsRy1fODI6r4PPWVINOTB/f8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDvg3AAD//0t9Q48=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002d00)=""/4096, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16) shmctl$SHM_LOCK(r4, 0xb) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) sched_setscheduler(0x0, 0x2, 0x0) 798.463745ms ago: executing program 2 (id=1646): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x4, 0x252, &(0x7f0000001140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1, 0x0) 792.742655ms ago: executing program 0 (id=1647): r0 = syz_open_dev$vim2m(&(0x7f0000004300), 0x1000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x1, 0x3, {0xf73c4710c7cbbcfe, @win={{0xf, 0x4, 0x2, 0x6}, 0x8, 0x40, 0x0, 0x0, 0x0, 0x3}}}) 648.758186ms ago: executing program 0 (id=1648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000050900010073797a30000000002c000000030a01130000000000000000010000000900030073797a32000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800b000100736f636b657400001c00028008000240000000000800014000000003080003"], 0xcc}}, 0x0) 606.213016ms ago: executing program 4 (id=1649): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10112, r0, 0x0) 558.474767ms ago: executing program 4 (id=1650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@getnexthop={0x20, 0x76, 0xd11, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 498.075637ms ago: executing program 4 (id=1651): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000840)={0x67, "d6cecf87037ce66b93aa99c7c491418f8bc160f100f7922da1816af0a8dd3859f5c15c7d71793763e2fd49e0ed9504d523ef137d9013da8ebd313333ec25c7276e534e3aa36b6a04c491d3b177a326a44c48a69d86d13ef59698cf95f879092ea5a428c5e803de2bfaaf5beeb7654c1972cef9ca404563f4a50ca4253b5d961685328d92c4b5597396d2e9686c206bb13b613383d82cc992f7f5111b54b1fb0fa8ffa03a2cdf1f191a77d8037e534c8cbe136425065b86aa53bb212835a249f90eea8090bfe6ca325e84cec9a52245d8224864e5982fa07f46fa1ab7319666f6706d1f7c2a4e6dee089834dc8b88bfdfdc66a5bff8cf42085b4a5a5d66117f5370be5c685d406790d74289777db2b882f04f042107646a99446d4f135067d343beb2129cde76e9526abce1738e3a117abe9441834bf2a1a4bf1a4815352ebd0576e285441f83e4d0c6e17ea7059bf7e21cd9ba843cc000829257c5571f6f96ca7689959c6d8c51dce17d1691483582d2d741e8c5ea218e99fe4683d1866e63fd17c7aa93c395b90049a0ef7128242a35ec50e56d9eb176f89aa7055752385eee86ae6a8f4a778ffbca3ec5d25fa34b2720001cc34204edfa177621faa66274ca0c8ee359a3608a77b0e8e572165ba948ffa3008763015166c4ea2f7eb5732a3fbc1500"}) 364.537868ms ago: executing program 4 (id=1652): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x3) socket$inet(0x2, 0x4000000805, 0x0) 349.319238ms ago: executing program 2 (id=1653): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0xe0, 0x0, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) 211.421719ms ago: executing program 0 (id=1654): socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'veth1_virt_wifi\x00', @random='\x00\x00\x00 \x00'}) 36.65553ms ago: executing program 3 (id=1655): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c790103", @ANYRES16=0x0, @ANYBLOB="c89045efe05ae52d00009300000008003617"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 36.31201ms ago: executing program 2 (id=1656): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 0s ago: executing program 2 (id=1657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000001}, 0x0) kernel console output (not intermixed with test programs): [ 162.223760][ T4030] hfsplus: walked past end of dir [ 162.695679][ T4030] hfsplus: xattr search failed [ 162.710698][ T5421] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 162.851205][ T5428] netlink: 44 bytes leftover after parsing attributes in process `syz.1.360'. [ 163.002845][ T5437] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 163.018958][ T5436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'. [ 163.026885][ T5428] netlink: 277 bytes leftover after parsing attributes in process `syz.1.360'. [ 163.051518][ T5428] netlink: 56 bytes leftover after parsing attributes in process `syz.1.360'. [ 163.053494][ T5428] netlink: 'syz.1.360': attribute type 5 has an invalid length. [ 163.055229][ T5428] netlink: 44 bytes leftover after parsing attributes in process `syz.1.360'. [ 163.135053][ T5445] xt_TCPMSS: Only works on TCP SYN packets [ 163.173022][ T5446] device team0 entered promiscuous mode [ 163.174353][ T5446] device team_slave_0 entered promiscuous mode [ 163.175927][ T5446] device team_slave_1 entered promiscuous mode [ 163.257732][ T5446] device team0 left promiscuous mode [ 163.259195][ T5446] device team_slave_0 left promiscuous mode [ 163.262021][ T5446] device team_slave_1 left promiscuous mode [ 163.459729][ T5454] binder: BINDER_SET_CONTEXT_MGR already set [ 163.474464][ T5454] binder: 5452:5454 ioctl 4018620d 20000040 returned -16 [ 163.487964][ T5454] binder: 5452:5454 got transaction to invalid handle, 1 [ 163.489950][ T5454] binder: 5452:5454 transaction failed 29201/-22, size 12288-0 line 2917 [ 163.694011][ T5454] syz.1.368 (5454): drop_caches: 2 [ 164.626078][ T4069] binder: undelivered TRANSACTION_ERROR: 29201 [ 165.082021][ T5477] nvme_fabrics: missing parameter 'transport=%s' [ 165.084039][ T5477] nvme_fabrics: missing parameter 'nqn=%s' [ 165.526102][ T5494] netlink: 'syz.0.377': attribute type 2 has an invalid length. [ 166.111397][ T5489] netlink: 44 bytes leftover after parsing attributes in process `syz.4.376'. [ 166.171536][ T5500] loop3: detected capacity change from 0 to 512 [ 166.306551][ T5503] fuse: Unknown parameter 'ÿÿÿÿ' [ 168.562113][ T5527] netlink: 'syz.1.388': attribute type 11 has an invalid length. [ 168.695058][ T5534] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (34504) [ 168.712969][ T5534] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 168.808780][ T5536] loop4: detected capacity change from 0 to 8192 [ 168.858169][ T5536] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 168.860651][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.865688][ T5536] REISERFS (device loop4): using ordered data mode [ 168.867124][ T5536] reiserfs: using flush barriers [ 168.892984][ T5536] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.912204][ T5536] REISERFS (device loop4): checking transaction log (loop4) [ 168.957373][ T5536] REISERFS (device loop4): Using r5 hash to sort names [ 169.011649][ T5536] reiserfs: enabling write barrier flush mode [ 169.054862][ T5541] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 169.075849][ T5536] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 169.080309][ T4067] Bluetooth: hci3: command 0x0406 tx timeout [ 169.081988][ T4067] Bluetooth: hci1: command 0x0406 tx timeout [ 169.112437][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 169.240314][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.248643][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.251483][ T13] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 169.253534][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.064910][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 170.087780][ T13] usb 1-1: config 0 descriptor?? [ 170.363284][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'. [ 170.395090][ T5553] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 170.398300][ T5553] device syzkaller0 entered promiscuous mode [ 170.422757][ T5532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 172.291518][ T4068] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 172.294594][ T4068] Bluetooth: hci2: Injecting HCI hardware error event [ 172.298310][ T144] Bluetooth: hci2: hardware error 0x00 [ 172.477711][ T5573] device syzkaller0 entered promiscuous mode [ 172.495422][ T5573] futex_wake_op: syz.4.396 tries to shift op by -1; fix this program [ 172.518441][ T5573] loop4: detected capacity change from 0 to 164 [ 172.695216][ T5573] Unable to read rock-ridge attributes [ 172.700374][ T13] usbhid 1-1:0.0: can't add hid device: -71 [ 172.701983][ T13] usbhid: probe of 1-1:0.0 failed with error -71 [ 172.705418][ T13] usb 1-1: USB disconnect, device number 3 [ 172.797545][ T5587] vhci_hcd: invalid port number 245 [ 172.798806][ T5587] vhci_hcd: default hub control req: 1f16 v4092 i00f5 l1093 [ 172.953113][ T5587] team0: Port device virt_wifi0 added [ 174.429954][ T5593] loop3: detected capacity change from 0 to 512 [ 174.434091][ T5573] netlink: 228 bytes leftover after parsing attributes in process `syz.4.396'. [ 174.436232][ T5573] netlink: 32 bytes leftover after parsing attributes in process `syz.4.396'. [ 174.479672][ T5592] netlink: 44 bytes leftover after parsing attributes in process `syz.1.407'. [ 174.493354][ T5595] netlink: 144 bytes leftover after parsing attributes in process `syz.0.408'. [ 174.499710][ T5576] netlink: 76 bytes leftover after parsing attributes in process `syz.4.396'. [ 174.585487][ T5592] [U] ÔKU½ ¨'.•h¤ [ 174.586677][ T5592] [U] ©§ÂQ•8@ qïŒ×žØ}¶³ëgÇß'Çóæ=ϼççç÷;€©Um¾.//TB¸øúËGÿñàßço9Ô£Þ|mKÕB•˜žÍ>ïÝ™•øú{/œìWÂRó5¥ÃW[Ón!œ »Ã¥P;/^~éͥǟ?vaÏ[¯¼²>s [ 174.589914][ T5592] [U] ­áiÿ¼Ó[â~ÿá¸ãŸöÿ«¡3]i íæ²ñfc¨ÎwŽ7Óe¼örjÙx³=ÊŸËʯõoCøàògÚ†u›o˜di=®‡Ju±#]­..®“‡æqý\eñìé3ÏL³ß}ÿ§áÅÊêq~~L?èùðtží®hÀúäç#-?¿ïwP·[~~?1Œ³?œxòÔž~êòÊýÿ•Öú#®ïép£[—âé|a~^½uï½³œjñîÎêsW—ñ›ï·wŽWÙ¾ú9¡m;sK=:§ÛÚk¼]ãÕ³ñæcؘÕ7ß?Ù”M—ö?Òv5-¯Ùl~kÙ|ÌeõHÛ•m1ÎëÃHëc¯ûÿÓú¹j•gNŸ9õhL§õôO3µ [ 174.615276][ T5593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.406'. [ 174.618217][ T5592] [U] 7‡ïq½Û×ïó? ¡óùŸ-­áµjûvaëêðÊÊváµøy×ZåtßÓéî[3óÍá‹'¿{æ鵟}˜jÏýèùoŸ8sæÔ÷¼úÍWÇ£ƒ¼I‡-ãRoÆîMÉ&`ÝíýñÊNÀ#§¿sâÙSÏž:»ÿÀýKK¾¸yos¿~oûÞ}»s%ÔXK«úe× [ 174.630564][ T5593] ebt_among: dst integrity fail: 101 [ 174.646038][ T5592] [U] ¬ÎeãÕbøpVßíY9;²é>ãV?~ñùÿT\Þ®kªÏ=ÙðZdÖœÀ-í¥Ìemäý~<Æbüë [ 174.647818][ T5592] [U] qºÏ!ïïdÐú§û+ÒÿÀŽìó+ÿoúÿl_ŠqÑï!õÿ›ÖÇzüËoK7—eJ׺,Û;u[“êÝ©ºþ7aãÔAè?4f†˜®ÕO\Éõo4ë{B«@©…Súò/û8¡ìòË^þEòþó}ø¼ÿßÏï¦GºþÓë÷¿½ ˜\?{uß‘§~ûÍúÊóÿs­ó!é:ÞᘮÅã§Æt~Ý;´¥oæ½ÓËòÇý|L“¼ýŒüÿý¡‚|`r¥û¼ü¾a [ 174.654338][ T5592] [U] U6vã¢v«zíç3Y>ãÏÄø³1~$Æ‹1Þã}1^QýXG^ûýÁ+«Çû[³ü~ï'ÏŸêh'*„°¿Ïúä罟=oÇoP·[þƒ [ 174.672138][ T5592] [U] [ 174.672846][ T5592] [U] [ 174.673460][ T5592] [U] [ 174.674069][ T5592] [U] [ 174.674714][ T5592] [U] [ 174.675300][ T5592] [U] [ 174.675831][ T5592] [U] [ 174.745910][ T5591] [U] [ 174.779431][ T5593] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #16: comm syz.3.406: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 174.796902][ T5593] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.406: couldn't read orphan inode 16 (err -117) [ 174.818079][ T5593] EXT4-fs (loop3): mounted filesystem without journal. Opts: (null). Quota mode: writeback. [ 174.878017][ T26] audit: type=1326 audit(174.830:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa54db2a8 code=0x7ffc0000 [ 174.886547][ T26] audit: type=1326 audit(174.840:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa54db2a8 code=0x7ffc0000 [ 174.895787][ T26] audit: type=1326 audit(174.850:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=85 compat=0 ip=0xffffa54db2a8 code=0x7ffc0000 [ 174.905829][ T26] audit: type=1326 audit(174.850:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa54db2a8 code=0x7ffc0000 [ 174.910761][ T26] audit: type=1326 audit(174.850:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa54db2a8 code=0x7ffc0000 [ 174.930217][ T26] audit: type=1326 audit(174.850:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=87 compat=0 ip=0xffffa54db2a8 code=0x7ffc0000 [ 174.935090][ T26] audit: type=1326 audit(174.850:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa54db2a8 code=0x7ffc0000 [ 174.945642][ T26] audit: type=1326 audit(174.850:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa54db2a8 code=0x7ffc0000 [ 174.954206][ T26] audit: type=1326 audit(174.850:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa54db2a8 code=0x7ffc0000 [ 174.958909][ T26] audit: type=1326 audit(174.850:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5612 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa54db2a8 code=0x7ffc0000 [ 177.117299][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.719221][ T5673] loop4: detected capacity change from 0 to 512 [ 177.871386][ T5673] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.424: invalid indirect mapped block 4294967295 (level 1) [ 177.881332][ T5673] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.424: invalid indirect mapped block 4294967295 (level 1) [ 177.895855][ T5673] EXT4-fs (loop4): 2 truncates cleaned up [ 177.897493][ T5673] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 178.135188][ T5673] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.424: bg 0: block 5: invalid block bitmap [ 178.820532][ T5691] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 178.820593][ T5691] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 178.823376][ T5691] vhci_hcd vhci_hcd.0: Device attached [ 179.856534][ T5700] loop4: detected capacity change from 0 to 8 [ 179.858446][ T5703] loop3: detected capacity change from 0 to 64 [ 179.880302][ T5078] usb 6-1: new high-speed USB device number 2 using vhci_hcd [ 179.890777][ T5700] squashfs: Unknown parameter 'filter' [ 179.997136][ T5695] vhci_hcd: connection reset by peer [ 180.049159][ T4413] vhci_hcd: stop threads [ 180.076935][ T4413] vhci_hcd: release socket [ 180.079580][ T4413] vhci_hcd: disconnect device [ 180.388128][ T5706] usb usb8: check_ctrlrecip: process 5706 (syz.1.434) requesting ep 01 but needs 81 [ 180.390697][ T5706] usb usb8: usbfs: process 5706 (syz.1.434) did not claim interface 0 before use [ 180.397591][ T5706] vhci_hcd: default hub control req: 0200 v0000 i0001 l0 [ 180.979007][ T5703] attempt to access beyond end of device [ 180.979007][ T5703] loop3: rw=2049, want=130, limit=64 [ 180.986820][ T5703] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 181.077416][ T5710] loop4: detected capacity change from 0 to 512 [ 181.138901][ T5710] EXT4-fs (loop4): Ignoring removed oldalloc option [ 181.198847][ T5710] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.437: Parent and EA inode have the same ino 15 [ 181.210364][ T5710] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 181.213714][ T5710] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.437: Parent and EA inode have the same ino 15 [ 181.215740][ T5703] attempt to access beyond end of device [ 181.215740][ T5703] loop3: rw=2049, want=355, limit=64 [ 181.219630][ T5710] EXT4-fs (loop4): 1 orphan inode deleted [ 181.226647][ T5710] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 183.604831][ T5726] loop2: detected capacity change from 0 to 256 [ 184.499845][ T153] attempt to access beyond end of device [ 184.499845][ T153] loop3: rw=1, want=251, limit=64 [ 185.002581][ T5741] sp0: Synchronizing with TNC [ 185.640169][ T5078] vhci_hcd: vhci_device speed not set [ 187.171844][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 187.171857][ T26] audit: type=1326 audit(443.120:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84f422a8 code=0x7ffc0000 [ 187.180653][ T26] audit: type=1326 audit(443.120:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84f422a8 code=0x7ffc0000 [ 187.201050][ T5764] loop3: detected capacity change from 0 to 2048 [ 187.202683][ T26] audit: type=1326 audit(443.120:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84f422a8 code=0x7ffc0000 [ 187.228196][ T26] audit: type=1326 audit(443.140:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84f422a8 code=0x7ffc0000 [ 187.233532][ T26] audit: type=1326 audit(443.140:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84f422a8 code=0x7ffc0000 [ 187.238249][ T26] audit: type=1326 audit(443.140:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84f422a8 code=0x7ffc0000 [ 187.260600][ T26] audit: type=1326 audit(443.140:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84f422a8 code=0x7ffc0000 [ 187.270648][ T26] audit: type=1326 audit(443.140:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84f422a8 code=0x7ffc0000 [ 187.275941][ T26] audit: type=1326 audit(443.140:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84f422a8 code=0x7ffc0000 [ 187.283284][ T5760] loop4: detected capacity change from 0 to 4096 [ 187.284887][ T26] audit: type=1326 audit(443.150:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84f422a8 code=0x7ffc0000 [ 187.307551][ T5764] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.332889][ T5760] ntfs3: Unknown parameter '/dev/nbd#' [ 187.335252][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.337252][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.408034][ T5775] netlink: 44 bytes leftover after parsing attributes in process `syz.1.454'. [ 187.410247][ T5775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'. [ 187.420916][ T5754] loop2: detected capacity change from 0 to 8192 [ 187.428591][ T5764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.451'. [ 187.431179][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 187.446979][ T5754] loop2: p1 < > p2 < p5 > p4 [ 187.456899][ T5774] device vlan1 entered promiscuous mode [ 187.463229][ T5754] loop2: p4 size 16776960 extends beyond EOD, truncated [ 187.465672][ T5754] loop2: p5 size 16776960 extends beyond EOD, truncated [ 187.694481][ T5786] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 188.880329][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 188.913629][ T5814] input: syz0 as /devices/virtual/input/input8 [ 189.027357][ T4014] udevd[4014]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 189.059980][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 189.077554][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 189.083514][ T5807] dccp_close: ABORT with 190 bytes unread [ 189.150379][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 189.236109][ T5833] loop2: detected capacity change from 0 to 128 [ 189.242910][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 189.310703][ T5832] loop3: detected capacity change from 0 to 8192 [ 189.356022][ T5832] loop3: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 189.356310][ T5832] loop3: p1 size 8388608 extends beyond EOD, truncated [ 189.424210][ T5832] loop3: p5 size 8388608 extends beyond EOD, truncated [ 189.430938][ T5832] loop3: p7 size 8388608 extends beyond EOD, truncated [ 189.434903][ T5832] loop3: p9 size 8388608 extends beyond EOD, truncated [ 189.438973][ T5832] loop3: p11 size 8388608 extends beyond EOD, truncated [ 189.446988][ T5832] loop3: p13 size 8388608 extends beyond EOD, truncated [ 189.449720][ T5832] loop3: p15 size 8388608 extends beyond EOD, truncated [ 189.452582][ T5832] loop3: p17 size 8388608 extends beyond EOD, truncated [ 189.457614][ T5832] loop3: p19 size 8388608 extends beyond EOD, truncated [ 189.460466][ T5832] loop3: p21 size 8388608 extends beyond EOD, truncated [ 189.465381][ T5832] loop3: p23 size 8388608 extends beyond EOD, truncated [ 189.468789][ T5832] loop3: p25 size 8388608 extends beyond EOD, truncated [ 189.471659][ T5832] loop3: p27 size 8388608 extends beyond EOD, truncated [ 189.552192][ T5832] loop3: p29 size 8388608 extends beyond EOD, truncated [ 189.560789][ T5832] loop3: p31 size 8388608 extends beyond EOD, truncated [ 189.570802][ T5832] loop3: p33 size 8388608 extends beyond EOD, truncated [ 189.587844][ T5832] loop3: p35 size 8388608 extends beyond EOD, truncated [ 189.601568][ T5832] loop3: p37 size 8388608 extends beyond EOD, truncated [ 189.616171][ T5832] loop3: p39 size 8388608 extends beyond EOD, truncated [ 189.631044][ T5832] loop3: p41 size 8388608 extends beyond EOD, truncated [ 189.654379][ T5832] loop3: p43 size 8388608 extends beyond EOD, truncated [ 189.672138][ T5832] loop3: p45 size 8388608 extends beyond EOD, truncated [ 189.692320][ T5832] loop3: p47 size 8388608 extends beyond EOD, truncated [ 189.709178][ T5832] loop3: p49 size 8388608 extends beyond EOD, truncated [ 189.724803][ T5832] loop3: p51 size 8388608 extends beyond EOD, truncated [ 189.742390][ T5832] loop3: p53 size 8388608 extends beyond EOD, truncated [ 189.759419][ T5832] loop3: p55 size 8388608 extends beyond EOD, truncated [ 189.776219][ T5832] loop3: p57 size 8388608 extends beyond EOD, truncated [ 189.796476][ T5832] loop3: p59 size 8388608 extends beyond EOD, truncated [ 189.812240][ T5832] loop3: p61 size 8388608 extends beyond EOD, truncated [ 189.831843][ T5832] loop3: p63 size 8388608 extends beyond EOD, truncated [ 189.850418][ T5832] loop3: p65 size 8388608 extends beyond EOD, truncated [ 189.855412][ T5843] loop2: detected capacity change from 0 to 4096 [ 189.867528][ T5832] loop3: p67 size 8388608 extends beyond EOD, truncated [ 189.875002][ T5843] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 189.885338][ T5832] loop3: p69 size 8388608 extends beyond EOD, truncated [ 189.901690][ T5843] ntfs3: loop2: try to read out of volume at offset 0xffffffff0000 [ 189.908437][ T5832] loop3: p71 size 8388608 extends beyond EOD, truncated [ 189.926132][ T5832] loop3: p73 size 8388608 extends beyond EOD, truncated [ 189.945702][ T5832] loop3: p75 size 8388608 extends beyond EOD, truncated [ 189.964590][ T5832] loop3: p77 size 8388608 extends beyond EOD, truncated [ 189.982452][ T5832] loop3: p79 size 8388608 extends beyond EOD, truncated [ 190.003381][ T5832] loop3: p81 size 8388608 extends beyond EOD, truncated [ 190.014848][ T5832] loop3: p83 size 8388608 extends beyond EOD, truncated [ 190.027171][ T5832] loop3: p85 size 8388608 extends beyond EOD, truncated [ 190.031985][ T5832] loop3: p87 size 8388608 extends beyond EOD, truncated [ 190.036900][ T5832] loop3: p89 size 8388608 extends beyond EOD, truncated [ 190.052011][ T5832] loop3: p91 size 8388608 extends beyond EOD, truncated [ 190.055000][ T5832] loop3: p93 size 8388608 extends beyond EOD, truncated [ 190.088749][ T5832] loop3: p95 size 8388608 extends beyond EOD, truncated [ 190.097837][ T5832] loop3: p97 size 8388608 extends beyond EOD, truncated [ 190.108857][ T5832] loop3: p99 size 8388608 extends beyond EOD, truncated [ 190.115760][ T5832] loop3: p101 size 8388608 extends beyond EOD, truncated [ 190.121416][ T5832] loop3: p103 size 8388608 extends beyond EOD, truncated [ 190.131252][ T5832] loop3: p105 size 8388608 extends beyond EOD, truncated [ 190.141475][ T5832] loop3: p107 size 8388608 extends beyond EOD, truncated [ 190.148837][ T5832] loop3: p109 size 8388608 extends beyond EOD, truncated [ 190.192356][ T5832] loop3: p111 size 8388608 extends beyond EOD, truncated [ 190.207254][ T5832] loop3: p113 size 8388608 extends beyond EOD, truncated [ 190.215156][ T5832] loop3: p115 size 8388608 extends beyond EOD, truncated [ 190.227312][ T5832] loop3: p117 size 8388608 extends beyond EOD, truncated [ 190.237950][ T5832] loop3: p119 size 8388608 extends beyond EOD, truncated [ 190.248127][ T5832] loop3: p121 size 8388608 extends beyond EOD, truncated [ 190.256895][ T5832] loop3: p123 size 8388608 extends beyond EOD, truncated [ 190.271629][ T5859] loop4: detected capacity change from 0 to 64 [ 190.292897][ T5832] loop3: p125 size 8388608 extends beyond EOD, truncated [ 190.295681][ T5832] loop3: p127 size 8388608 extends beyond EOD, truncated [ 190.301689][ T5832] loop3: p129 size 8388608 extends beyond EOD, truncated [ 190.312450][ T5832] loop3: p131 size 8388608 extends beyond EOD, truncated [ 190.315065][ T5832] loop3: p133 size 8388608 extends beyond EOD, truncated [ 190.317740][ T5832] loop3: p135 size 8388608 extends beyond EOD, truncated [ 190.328227][ T5832] loop3: p137 size 8388608 extends beyond EOD, truncated [ 190.333637][ T5859] hfs: found bad thread record in catalog [ 190.335218][ T5859] hfs: get root inode failed [ 190.335236][ T5832] loop3: p139 size 8388608 extends beyond EOD, truncated [ 190.336284][ T5832] loop3: p141 size 8388608 extends beyond EOD, truncated [ 190.348035][ T5832] loop3: p143 size 8388608 extends beyond EOD, truncated [ 190.351188][ T5832] loop3: p145 size 8388608 extends beyond EOD, truncated [ 190.353845][ T5832] loop3: p147 size 8388608 extends beyond EOD, truncated [ 190.356652][ T5832] loop3: p149 size 8388608 extends beyond EOD, truncated [ 190.359317][ T5832] loop3: p151 size 8388608 extends beyond EOD, truncated [ 190.362717][ T5832] loop3: p153 size 8388608 extends beyond EOD, truncated [ 190.365335][ T5832] loop3: p155 size 8388608 extends beyond EOD, truncated [ 190.368233][ T5832] loop3: p157 size 8388608 extends beyond EOD, truncated [ 190.387537][ T5832] loop3: p159 size 8388608 extends beyond EOD, truncated [ 190.407341][ T5832] loop3: p161 size 8388608 extends beyond EOD, truncated [ 190.411676][ T5832] loop3: p163 size 8388608 extends beyond EOD, truncated [ 190.414471][ T5832] loop3: p165 size 8388608 extends beyond EOD, truncated [ 190.420973][ T5832] loop3: p167 size 8388608 extends beyond EOD, truncated [ 190.439541][ T5832] loop3: p169 size 8388608 extends beyond EOD, truncated [ 190.473112][ T5832] loop3: p171 size 8388608 extends beyond EOD, truncated [ 190.488360][ T5832] loop3: p173 size 8388608 extends beyond EOD, truncated [ 190.495642][ T5832] loop3: p175 size 8388608 extends beyond EOD, truncated [ 190.504673][ T5832] loop3: p177 size 8388608 extends beyond EOD, truncated [ 190.509432][ T5832] loop3: p179 size 8388608 extends beyond EOD, truncated [ 190.521426][ T5832] loop3: p181 size 8388608 extends beyond EOD, truncated [ 190.531915][ T5832] loop3: p183 size 8388608 extends beyond EOD, truncated [ 190.538622][ T5832] loop3: p185 size 8388608 extends beyond EOD, truncated [ 190.551522][ T5832] loop3: p187 size 8388608 extends beyond EOD, truncated [ 190.559996][ T5832] loop3: p189 size 8388608 extends beyond EOD, truncated [ 190.563320][ T5832] loop3: p191 size 8388608 extends beyond EOD, truncated [ 190.571554][ T5832] loop3: p193 size 8388608 extends beyond EOD, truncated [ 190.584301][ T5832] loop3: p195 size 8388608 extends beyond EOD, truncated [ 190.589852][ T5832] loop3: p197 size 8388608 extends beyond EOD, truncated [ 190.594738][ T5832] loop3: p199 size 8388608 extends beyond EOD, truncated [ 190.604567][ T5832] loop3: p201 size 8388608 extends beyond EOD, truncated [ 190.614174][ T5832] loop3: p203 size 8388608 extends beyond EOD, truncated [ 190.621040][ T5832] loop3: p205 size 8388608 extends beyond EOD, truncated [ 190.631235][ T5832] loop3: p207 size 8388608 extends beyond EOD, truncated [ 190.638097][ T5832] loop3: p209 size 8388608 extends beyond EOD, truncated [ 190.650833][ T5832] loop3: p211 size 8388608 extends beyond EOD, truncated [ 190.661501][ T5832] loop3: p213 size 8388608 extends beyond EOD, truncated [ 190.664231][ T5832] loop3: p215 size 8388608 extends beyond EOD, truncated [ 190.671182][ T5832] loop3: p217 size 8388608 extends beyond EOD, truncated [ 190.681165][ T5832] loop3: p219 size 8388608 extends beyond EOD, truncated [ 190.691124][ T5832] loop3: p221 size 8388608 extends beyond EOD, truncated [ 190.701409][ T5832] loop3: p223 size 8388608 extends beyond EOD, truncated [ 190.713981][ T5832] loop3: p225 size 8388608 extends beyond EOD, truncated [ 190.716712][ T5832] loop3: p227 size 8388608 extends beyond EOD, truncated [ 190.729557][ T5832] loop3: p229 size 8388608 extends beyond EOD, truncated [ 190.745761][ T5832] loop3: p231 size 8388608 extends beyond EOD, truncated [ 190.755099][ T5832] loop3: p233 size 8388608 extends beyond EOD, truncated [ 190.765268][ T5832] loop3: p235 size 8388608 extends beyond EOD, truncated [ 190.774849][ T5832] loop3: p237 size 8388608 extends beyond EOD, truncated [ 190.777484][ T5846] loop2: detected capacity change from 0 to 32768 [ 190.779784][ T5832] loop3: p239 size 8388608 extends beyond EOD, truncated [ 190.791531][ T5832] loop3: p241 size 8388608 extends beyond EOD, truncated [ 190.794313][ T5832] loop3: p243 size 8388608 extends beyond EOD, truncated [ 190.797048][ T5832] loop3: p245 size 8388608 extends beyond EOD, truncated [ 190.809261][ T5832] loop3: p247 size 8388608 extends beyond EOD, truncated [ 190.812943][ T5832] loop3: p249 size 8388608 extends beyond EOD, truncated [ 190.815591][ T5832] loop3: p251 size 8388608 extends beyond EOD, truncated [ 190.824085][ T5832] loop3: p253 size 8388608 extends beyond EOD, truncated [ 190.834547][ T5832] loop3: p255 size 8388608 extends beyond EOD, truncated [ 190.843514][ T5846] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 190.845724][ T5846] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 191.005599][ T5846] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 191.019028][ T4067] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 191.021674][ T4067] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 191.324406][ T153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 191.337045][ T4067] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 315ms [ 191.364835][ T4067] gfs2: fsid=syz:syz.0: jid=0: Done [ 191.376686][ T5846] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 192.184062][ T5897] loop3: detected capacity change from 0 to 256 [ 192.234704][ T5897] FAT-fs (loop3): bogus sectors per cluster 30 [ 192.236176][ T5897] FAT-fs (loop3): Can't find a valid FAT filesystem [ 192.522800][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.524632][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.504493][ T5904] loop3: detected capacity change from 0 to 2048 [ 193.603776][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 193.611302][ T5904] EXT4-fs (loop3): bad geometry: block count 536870912256 exceeds size of device (256 blocks) [ 193.700895][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop3p8, 10) failed: No such file or directory [ 193.767682][ T5910] udevd[5910]: inotify_add_watch(7, /dev/loop3p13, 10) failed: No such file or directory [ 193.904189][ T5909] udevd[5909]: inotify_add_watch(7, /dev/loop3p12, 10) failed: No such file or directory [ 193.928295][ T5905] udevd[5905]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 193.933490][ T4129] udevd[4129]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 194.160537][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 194.161662][ T5910] udevd[5910]: inotify_add_watch(7, /dev/loop3p17, 10) failed: No such file or directory [ 194.166682][ T5909] udevd[5909]: inotify_add_watch(7, /dev/loop3p18, 10) failed: No such file or directory [ 194.169849][ T4129] udevd[4129]: inotify_add_watch(7, /dev/loop3p15, 10) failed: No such file or directory [ 194.202802][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop3p19, 10) failed: No such file or directory [ 195.161123][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop3p20, 10) failed: No such file or directory [ 195.163293][ T5906] udevd[5906]: inotify_add_watch(7, /dev/loop3p21, 10) failed: No such file or directory [ 195.172323][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop3p22, 10) failed: No such file or directory [ 195.185679][ T5905] udevd[5905]: inotify_add_watch(7, /dev/loop3p23, 10) failed: No such file or directory [ 195.193393][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop3p27, 10) failed: No such file or directory [ 195.201952][ T5925] loop2: detected capacity change from 0 to 8192 [ 195.323452][ T5925] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 195.325698][ T5925] REISERFS (device loop2): using ordered data mode [ 195.327089][ T5925] reiserfs: using flush barriers [ 195.329344][ T5925] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.334170][ T5925] REISERFS (device loop2): checking transaction log (loop2) [ 195.338048][ T5925] REISERFS warning: reiserfs-5086 is_leaf: item location seems wrong (second one): *3.6* [1 0 0x3d SD], item_len 1580, item_location 3840, free_space(entry_count) 0 [ 195.347110][ T5925] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 195.349505][ T5925] REISERFS (device loop2): Remounting filesystem read-only [ 195.351205][ T5925] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 196.635317][ T5947] loop3: detected capacity change from 0 to 64 [ 196.654794][ T5947] hfs: found bad thread record in catalog [ 196.656187][ T5947] hfs: get root inode failed [ 196.660519][ T5941] loop4: detected capacity change from 0 to 4096 [ 197.656693][ T5941] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 197.662621][ T5941] ntfs3: loop4: try to read out of volume at offset 0xffffffff0000 [ 197.700351][ T5950] device vlan2 entered promiscuous mode [ 197.707732][ T5954] loop2: detected capacity change from 0 to 512 [ 197.716007][ T5953] loop3: detected capacity change from 0 to 128 [ 197.747242][ T5954] EXT4-fs (loop2): Ignoring removed oldalloc option [ 197.779970][ T5954] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.531: Parent and EA inode have the same ino 15 [ 197.784077][ T5954] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.531: Parent and EA inode have the same ino 15 [ 197.794418][ T5960] loop4: detected capacity change from 0 to 128 [ 197.809974][ T5954] EXT4-fs (loop2): 1 orphan inode deleted [ 197.811459][ T5954] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 197.845997][ T5960] ufs: Unable to do repair on error, will lock lock instead [ 197.864262][ T5960] ufs: You didn't specify the type of your ufs filesystem [ 197.864262][ T5960] [ 197.864262][ T5960] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 197.864262][ T5960] [ 197.864262][ T5960] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 197.895655][ T5960] ufs: ufstype=old is supported read-only [ 197.911622][ T5960] ufs: ufs_fill_super(): bad magic number [ 199.649760][ T5905] udevd[5905]: inotify_add_watch(7, /dev/loop3p94, 10) failed: No such file or directory [ 199.655501][ T4014] udevd[4014]: inotify_add_watch(7, /dev/loop3p96, 10) failed: No such file or directory [ 199.665228][ T4129] udevd[4129]: inotify_add_watch(7, /dev/loop3p97, 10) failed: No such file or directory [ 199.671088][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop3p99, 10) failed: No such file or directory [ 199.676763][ T5910] udevd[5910]: inotify_add_watch(7, /dev/loop3p100, 10) failed: No such file or directory [ 199.694512][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop3p93, 10) failed: No such file or directory [ 199.701021][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop3p95, 10) failed: No such file or directory [ 199.722438][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop3p98, 10) failed: No such file or directory [ 199.724275][ T5909] udevd[5909]: inotify_add_watch(7, /dev/loop3p101, 10) failed: No such file or directory [ 199.984063][ T5992] loop4: detected capacity change from 0 to 128 [ 199.999485][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop3p102, 10) failed: No such file or directory [ 200.164750][ T5999] device vlan2 entered promiscuous mode [ 200.466592][ T6010] trusted_key: encrypted_key: master key parameter is missing [ 203.019972][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 203.079017][ T6041] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 203.082618][ T6040] IPVS: stopping backup sync thread 6041 ... [ 203.222338][ T6047] device vlan0 entered promiscuous mode [ 204.951287][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop3p219, 10) failed: No such file or directory [ 204.962313][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop3p224, 10) failed: No such file or directory [ 204.968237][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop3p239, 10) failed: No such file or directory [ 204.975551][ T5910] udevd[5910]: inotify_add_watch(7, /dev/loop3p230, 10) failed: No such file or directory [ 204.977750][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop3p240, 10) failed: No such file or directory [ 204.984171][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop3p242, 10) failed: No such file or directory [ 204.990682][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop3p243, 10) failed: No such file or directory [ 204.996389][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop3p244, 10) failed: No such file or directory [ 205.004993][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop3p245, 10) failed: No such file or directory [ 205.010820][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop3p246, 10) failed: No such file or directory [ 205.084085][ T6069] loop4: detected capacity change from 0 to 2048 [ 205.294710][ T6073] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 207.183546][ T6077] loop2: detected capacity change from 0 to 256 [ 207.191847][ T6069] EXT4-fs (loop4): bad geometry: block count 536870912256 exceeds size of device (256 blocks) [ 207.238321][ T6077] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 207.242418][ T6077] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 207.255510][ T6077] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 207.257299][ T6077] UDF-fs: Scanning with blocksize 512 failed [ 207.261957][ T6077] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 207.276654][ T6077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.361003][ T6079] IPVS: stopping backup sync thread 6081 ... [ 207.462959][ T6087] loop2: detected capacity change from 0 to 128 [ 207.491087][ T6087] ufs: Unable to do repair on error, will lock lock instead [ 207.493031][ T6087] ufs: You didn't specify the type of your ufs filesystem [ 207.493031][ T6087] [ 207.493031][ T6087] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 207.493031][ T6087] [ 207.493031][ T6087] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 207.525160][ T6087] ufs: ufstype=old is supported read-only [ 207.671351][ T6087] ufs: ufs_fill_super(): bad magic number [ 209.115726][ T6096] dccp_close: ABORT with 190 bytes unread [ 209.117306][ T6096] dccp_close: ABORT with 108 bytes unread [ 209.182814][ T6107] loop3: detected capacity change from 0 to 128 [ 210.544030][ T6121] Dead loop on virtual device ip6_vti0, fix it urgently! [ 210.657109][ T6122] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 210.710311][ T6126] netlink: 76 bytes leftover after parsing attributes in process `syz.0.582'. [ 210.714210][ T6126] netlink: 'syz.0.582': attribute type 1 has an invalid length. [ 210.754596][ T6129] loop4: detected capacity change from 0 to 256 [ 210.855823][ T6107] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.865234][ T6129] FAT-fs (loop4): Directory bread(block 64) failed [ 210.869649][ T6135] loop2: detected capacity change from 0 to 2048 [ 210.878095][ T6129] FAT-fs (loop4): Directory bread(block 65) failed [ 210.890631][ T6129] FAT-fs (loop4): Directory bread(block 66) failed [ 210.906768][ T6129] FAT-fs (loop4): Directory bread(block 67) failed [ 210.918725][ C0] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(59224755280277) <= P.seqno(0) <= S.SWH(59224755280351)) and (P.ackno exists or LAWL(235652283122235) <= P.ackno(235652283122236) <= S.AWH(235652283122236), sending SYNC... [ 210.920311][ T6129] FAT-fs (loop4): Directory bread(block 68) failed [ 210.947977][ T6135] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 210.971775][ T6129] FAT-fs (loop4): Directory bread(block 69) failed [ 210.988496][ T6129] FAT-fs (loop4): Directory bread(block 70) failed [ 211.004941][ T6129] FAT-fs (loop4): Directory bread(block 71) failed [ 211.006584][ T6129] FAT-fs (loop4): Directory bread(block 72) failed [ 211.008070][ T6129] FAT-fs (loop4): Directory bread(block 73) failed [ 212.374145][ T6144] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 213.672409][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 213.707527][ T6166] IPVS: stopping backup sync thread 6172 ... [ 214.507234][ T6174] loop2: detected capacity change from 0 to 1024 [ 215.882077][ T4350] hfsplus: b-tree write err: -5, ino 4 [ 218.029299][ T6193] netlink: 80 bytes leftover after parsing attributes in process `syz.2.597'. [ 218.080507][ T6193] loop2: detected capacity change from 0 to 8192 [ 218.102211][ T6197] loop4: detected capacity change from 0 to 128 [ 218.142522][ T6197] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 218.148209][ T6193] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 218.150601][ T6193] REISERFS (device loop2): using ordered data mode [ 218.152071][ T6193] reiserfs: using flush barriers [ 218.153963][ T6193] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 218.157858][ T6193] REISERFS (device loop2): checking transaction log (loop2) [ 218.177157][ T6197] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 218.188748][ T6193] REISERFS (device loop2): Using rupasov hash to sort names [ 218.190529][ T6193] REISERFS (device loop2): using 3.5.x disk format [ 219.489658][ T6203] device veth0_vlan left promiscuous mode [ 219.491824][ T6203] device veth0_vlan entered promiscuous mode [ 219.496894][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.499717][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.509442][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.069468][ T6211] netlink: 144 bytes leftover after parsing attributes in process `syz.2.601'. [ 220.588494][ T6225] loop4: detected capacity change from 0 to 2048 [ 221.721581][ T6225] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.811478][ T6241] netlink: 120 bytes leftover after parsing attributes in process `syz.2.611'. [ 221.847819][ T6241] xt_TPROXY: Can be used only with -p tcp or -p udp [ 222.897730][ T153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 223.093408][ T6244] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 223.272299][ T6241] bridge0: port 3(erspan0) entered disabled state [ 223.596155][ T6259] loop4: detected capacity change from 0 to 128 [ 224.581668][ T6259] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.631964][ T6259] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 226.123768][ T6276] device veth0_vlan left promiscuous mode [ 226.125721][ T6276] device veth0_vlan entered promiscuous mode [ 226.170177][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.173642][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.175815][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.229496][ T6277] binder: 6267:6277 tried to acquire reference to desc 0, got 1 instead [ 226.242896][ T6277] binder: 6277 RLIMIT_NICE not set [ 226.244147][ T6277] binder: undelivered transaction 35, fd fixups failed [ 226.245784][ T6277] binder: 6267:6277 async transaction 35 fd fixups failed 29201/-12, line 4507 [ 226.364778][ T4067] binder: undelivered TRANSACTION_COMPLETE [ 226.932540][ T6295] loop2: detected capacity change from 0 to 512 [ 227.324413][ T6297] loop3: detected capacity change from 0 to 2048 [ 227.498968][ T6295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.545403][ T6295] EXT4-fs (loop2): 1 truncate cleaned up [ 227.546712][ T6295] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 227.685368][ T6303] loop4: detected capacity change from 0 to 256 [ 228.569773][ T6297] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.218939][ T6308] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none. [ 231.441524][ T6312] loop2: detected capacity change from 0 to 128 [ 231.927341][ T6312] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.038791][ T6319] loop3: detected capacity change from 0 to 16 [ 232.376684][ T6323] netlink: 44 bytes leftover after parsing attributes in process `syz.4.632'. [ 232.378718][ T6323] netlink: 43 bytes leftover after parsing attributes in process `syz.4.632'. [ 232.405505][ T6323] netlink: 'syz.4.632': attribute type 6 has an invalid length. [ 232.407201][ T6323] netlink: 'syz.4.632': attribute type 5 has an invalid length. [ 232.408838][ T6323] netlink: 43 bytes leftover after parsing attributes in process `syz.4.632'. [ 232.504423][ T6319] erofs: (device loop3): mounted with root inode @ nid 36. [ 232.541040][ T6324] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 234.084962][ T6332] device veth0_vlan left promiscuous mode [ 234.087493][ T6332] device veth0_vlan entered promiscuous mode [ 234.176221][ T6338] loop4: detected capacity change from 0 to 1024 [ 234.179839][ T4071] libceph: connect (1)[c::]:6789 error -101 [ 234.181532][ T4071] libceph: mon0 (1)[c::]:6789 connect error [ 234.185662][ T4071] libceph: connect (1)[c::]:6789 error -101 [ 234.187295][ T4071] libceph: mon0 (1)[c::]:6789 connect error [ 234.948064][ T4071] libceph: connect (1)[c::]:6789 error -101 [ 234.949686][ T4071] libceph: mon0 (1)[c::]:6789 connect error [ 234.971132][ T6340] ceph: No mds server is up or the cluster is laggy [ 235.004323][ T6338] udc-core: couldn't find an available UDC or it's busy [ 235.006143][ T6338] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 235.018454][ T6349] syz.1.639 (6349): drop_caches: 2 [ 235.019522][ T6349] syz.1.639 (6349): drop_caches: 2 [ 235.039376][ T6349] syz.1.639 (6349): drop_caches: 2 [ 235.041237][ T6349] syz.1.639 (6349): drop_caches: 2 [ 235.046460][ T6349] syz.1.639 (6349): drop_caches: 2 [ 235.048554][ T6349] syz.1.639 (6349): drop_caches: 2 [ 235.293775][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 235.326671][ T6356] tipc: Enabling of bearer rejected, failed to enable media [ 238.073903][ T6390] loop4: detected capacity change from 0 to 512 [ 239.362117][ T6390] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.405830][ T6399] syz.3.652 (6399): drop_caches: 2 [ 239.422802][ T6399] syz.3.652 (6399): drop_caches: 2 [ 239.432923][ T6390] EXT4-fs (loop4): 1 truncate cleaned up [ 239.434360][ T6390] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 239.444298][ T6399] syz.3.652 (6399): drop_caches: 2 [ 239.446192][ T6399] syz.3.652 (6399): drop_caches: 2 [ 239.455337][ T6399] syz.3.652 (6399): drop_caches: 2 [ 239.457351][ T6399] syz.3.652 (6399): drop_caches: 2 [ 240.104979][ T6413] loop2: detected capacity change from 0 to 2048 [ 241.948090][ T6413] UDF-fs: bad mount option "uid>00000000000000000000" or missing value [ 246.750673][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.306778][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.689078][ T6492] loop3: detected capacity change from 0 to 128 [ 249.738579][ T6492] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.780610][ T6492] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 250.013946][ T6497] device veth0_vlan left promiscuous mode [ 250.014415][ T6497] device veth0_vlan entered promiscuous mode [ 250.016056][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.017041][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.017484][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.282330][ T6494] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 250.358308][ T6495] netlink: 'syz.0.676': attribute type 32 has an invalid length. [ 251.508128][ T6508] udc-core: couldn't find an available UDC or it's busy [ 251.518503][ T6508] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 251.564527][ T6508] udc-core: couldn't find an available UDC or it's busy [ 251.566246][ T6508] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 253.961369][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.962930][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.043052][ T6542] loop4: detected capacity change from 0 to 1024 [ 256.702063][ T4350] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 257.161989][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.209961][ T6565] loop4: detected capacity change from 0 to 1024 [ 258.343031][ T6581] udc-core: couldn't find an available UDC or it's busy [ 258.344721][ T6581] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 258.354427][ T6581] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20003 [ 258.634525][ T6587] loop4: detected capacity change from 0 to 1024 [ 258.757638][ T6593] loop3: detected capacity change from 0 to 512 [ 258.925683][ T6593] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 258.937054][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 259.028001][ T6593] EXT4-fs (loop3): 1 truncate cleaned up [ 259.029346][ T6593] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 259.063140][ T6587] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 259.478301][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 259.478316][ T26] audit: type=1326 audit(515.420:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.0.705" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x0 [ 260.707329][ T6616] loop4: detected capacity change from 0 to 1024 [ 263.074218][ T6634] loop2: detected capacity change from 0 to 1024 [ 263.556069][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 263.558290][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 264.194195][ T6651] "syz.1.718" (6651) uses obsolete ecb(arc4) skcipher [ 266.971847][ T6664] 9pnet: Insufficient options for proto=fd [ 267.426988][ T6685] loop2: detected capacity change from 0 to 1024 [ 267.526402][ T6689] loop3: detected capacity change from 0 to 128 [ 268.519878][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'. [ 268.558681][ T6689] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 268.561056][ T6689] vxfs: unsupported VxFS version (-1232326277) [ 268.696260][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.732'. [ 268.698595][ T6699] netlink: 52 bytes leftover after parsing attributes in process `syz.4.732'. [ 268.700811][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.732'. [ 272.864268][ T6738] loop3: detected capacity change from 0 to 128 [ 272.894316][ T6738] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.905400][ T6738] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 273.104307][ T6744] device veth0_vlan left promiscuous mode [ 273.106291][ T6744] device veth0_vlan entered promiscuous mode [ 273.109489][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.114105][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.117393][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.121466][ T6747] loop2: detected capacity change from 0 to 1024 [ 274.455075][ T6747] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 274.485112][ T6766] netlink: 56 bytes leftover after parsing attributes in process `syz.0.747'. [ 275.762606][ T6780] udc-core: couldn't find an available UDC or it's busy [ 275.765707][ T6780] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 276.128202][ T6789] loop2: detected capacity change from 0 to 1024 [ 277.036725][ T6800] netlink: 64 bytes leftover after parsing attributes in process `syz.0.753'. [ 277.038930][ T6800] netlink: 64 bytes leftover after parsing attributes in process `syz.0.753'. [ 277.080167][ T4070] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 277.082659][ T4070] Bluetooth: hci3: Injecting HCI hardware error event [ 277.094052][ T144] Bluetooth: hci3: hardware error 0x00 [ 279.919138][ T6809] loop4: detected capacity change from 0 to 512 [ 279.996703][ T6814] loop3: detected capacity change from 0 to 128 [ 280.029461][ T6809] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 280.031885][ T6809] EXT4-fs (loop4): failed to open journal device unknown-block(7,75) -6 [ 280.035098][ T6814] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.060586][ T6814] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 280.208436][ T6819] binder: BINDER_SET_CONTEXT_MGR already set [ 280.209892][ T6819] binder: 6817:6819 ioctl 4018620d 20000300 returned -16 [ 280.226706][ T6809] loop4: detected capacity change from 0 to 2048 [ 280.259585][ T6819] binder: BINDER_SET_CONTEXT_MGR already set [ 280.278588][ T6819] binder: 6817:6819 ioctl 4018620d 20000040 returned -16 [ 280.286983][ T6819] binder: tried to use weak ref as strong ref [ 280.288520][ T6819] binder: 6817:6819 Acquire 1 refcount change on invalid ref 0 ret -22 [ 280.328278][ T6814] device veth0_vlan left promiscuous mode [ 280.331780][ T6814] device veth0_vlan entered promiscuous mode [ 280.334993][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.337693][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.339984][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.373759][ T6823] binder: 6817:6823 got transaction to invalid handle, 1 [ 280.375412][ T6823] binder: 6817:6823 transaction failed 29201/-22, size 0-0 line 2917 [ 280.400300][ T6819] binder: 6817:6819 got transaction to invalid handle, 1 [ 280.403908][ T6809] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 280.420604][ T6819] binder: 6817:6819 transaction failed 29201/-22, size 0-0 line 2917 [ 280.446392][ T6809] EXT4-fs error (device loop4): __ext4_new_inode:1076: comm syz.4.756: reserved inode found cleared - inode=1 [ 280.448204][ T6824] loop2: detected capacity change from 0 to 1024 [ 280.457573][ T6809] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 280.469345][ T4454] hid (null): unknown global tag 0xc [ 280.471387][ T4454] hid (null): report_id 43916 is invalid [ 280.473446][ T4454] hid (null): unknown global tag 0xc [ 280.482432][ T4454] hid-generic 0006:00FF:0005.0001: unknown main item tag 0x2 [ 280.484517][ T4454] hid-generic 0006:00FF:0005.0001: unknown main item tag 0x1 [ 280.486446][ T4454] hid-generic 0006:00FF:0005.0001: ignoring exceeding usage max [ 280.489306][ T4454] hid-generic 0006:00FF:0005.0001: unknown main item tag 0x1 [ 280.491688][ T4454] hid-generic 0006:00FF:0005.0001: unknown global tag 0xc [ 280.493411][ T4454] hid-generic 0006:00FF:0005.0001: item 0 4 1 12 parsing failed [ 280.495496][ T4454] hid-generic: probe of 0006:00FF:0005.0001 failed with error -22 [ 280.877714][ T6819] binder: tried to use weak ref as strong ref [ 280.879330][ T6819] binder: 6817:6819 Acquire 1 refcount change on invalid ref 0 ret -22 [ 280.881853][ T6819] binder: 6817:6819 got transaction to invalid handle, 1 [ 280.883533][ T6819] binder: 6817:6819 transaction failed 29201/-22, size 0-0 line 2917 [ 281.023520][ T4070] binder: undelivered TRANSACTION_ERROR: 29201 [ 281.025003][ T4070] binder: undelivered TRANSACTION_ERROR: 29201 [ 281.026804][ T4070] binder: undelivered TRANSACTION_ERROR: 29201 [ 282.476331][ T6835] netlink: 'syz.4.759': attribute type 10 has an invalid length. [ 282.478268][ T6835] netlink: 40 bytes leftover after parsing attributes in process `syz.4.759'. [ 282.481276][ T6835] device bond0 entered promiscuous mode [ 282.482511][ T6835] device bond_slave_0 entered promiscuous mode [ 282.483943][ T6835] device bond_slave_1 entered promiscuous mode [ 282.485931][ T6835] bridge0: port 3(bond0) entered blocking state [ 282.487426][ T6835] bridge0: port 3(bond0) entered disabled state [ 282.494614][ T6835] bridge0: port 3(bond0) entered blocking state [ 282.496278][ T6835] bridge0: port 3(bond0) entered forwarding state [ 282.522471][ T6839] loop3: detected capacity change from 0 to 256 [ 282.607813][ T6835] netlink: 40 bytes leftover after parsing attributes in process `syz.4.759'. [ 283.009518][ T6854] Device name cannot be null; rc = [-22] [ 285.002804][ T6866] loop2: detected capacity change from 0 to 128 [ 285.061181][ T6866] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 285.095630][ T6866] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.254952][ T6871] device veth0_vlan left promiscuous mode [ 285.257213][ T6871] device veth0_vlan entered promiscuous mode [ 285.261864][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.277801][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.331622][ T6873] loop4: detected capacity change from 0 to 1024 [ 286.504580][ T6883] loop3: detected capacity change from 0 to 1024 [ 287.968025][ T6895] netlink: 56 bytes leftover after parsing attributes in process `syz.2.783'. [ 287.986628][ T6899] loop4: detected capacity change from 0 to 1024 [ 289.723034][ T4400] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 289.733567][ T6911] netlink: 64 bytes leftover after parsing attributes in process `syz.2.787'. [ 289.735695][ T6911] netlink: 64 bytes leftover after parsing attributes in process `syz.2.787'. [ 291.234783][ T6920] loop3: detected capacity change from 0 to 1024 [ 291.330363][ T6929] loop2: detected capacity change from 0 to 512 [ 291.561480][ T6929] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 291.627225][ T6937] loop4: detected capacity change from 0 to 1024 [ 291.627576][ T6929] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 291.644329][ T6929] EXT2-fs (loop2): error: ext2_get_inode: bad inode number: 18 [ 291.852979][ T6929] EXT2-fs (loop2): error: ext2_fsync: detected IO error when writing metadata buffers [ 291.893424][ T6939] EXT2-fs (loop2): error: ext2_free_branches: Read failure, inode=18, block=547 [ 292.320276][ T6939] EXT2-fs (loop2): error: ext2_free_branches: Read failure, inode=18, block=131072 [ 292.378748][ T6939] EXT2-fs (loop2): error: ext2_free_blocks: Freeing blocks not in datazone - block = 3, count = 1 [ 292.456849][ T6939] EXT2-fs (loop2): error: ext2_free_blocks: Freeing blocks not in datazone - block = 2, count = 1 [ 292.471385][ T6939] EXT2-fs (loop2): error: ext2_free_blocks: Freeing blocks not in datazone - block = 1, count = 1 [ 292.488459][ T6929] netlink: 36 bytes leftover after parsing attributes in process `syz.2.792'. [ 292.499410][ T6939] EXT2-fs (loop2): error: ext2_get_inode: bad inode number: 18 [ 292.548436][ T1815] EXT2-fs (loop2): error: ext2_get_inode: bad inode number: 2 [ 292.550625][ T1815] EXT2-fs (loop2): error: ext2_get_inode: bad inode number: 18 [ 292.858158][ T6947] loop3: detected capacity change from 0 to 1024 [ 294.236647][ T1815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.101244][ T6988] netlink: 'syz.0.809': attribute type 3 has an invalid length. [ 295.103114][ T6988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.809'. [ 295.174428][ T6993] PKCS8: Unsupported PKCS#8 version [ 295.904180][ T6999] loop4: detected capacity change from 0 to 164 [ 297.881855][ T6996] Unsupported NM flag settings (8) [ 298.245947][ T7029] loop2: detected capacity change from 0 to 128 [ 298.382109][ T7029] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 298.452085][ T7029] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 299.051164][ T7037] netlink: 64 bytes leftover after parsing attributes in process `syz.3.819'. [ 299.053326][ T7037] netlink: 64 bytes leftover after parsing attributes in process `syz.3.819'. [ 299.142239][ T7040] device veth0_vlan left promiscuous mode [ 299.144283][ T7040] device veth0_vlan entered promiscuous mode [ 299.154748][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.157411][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.886530][ T7067] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.073078][ T7062] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 301.097572][ T7062] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 301.159295][ T7062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.172008][ T7062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.181159][ T7062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.189936][ T7062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.212505][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.214185][ T7062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.314420][ T7062] device vlan0 left promiscuous mode [ 301.644458][ T7085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.835'. [ 302.754516][ T7095] loop2: detected capacity change from 0 to 1024 [ 305.038548][ T7117] loop2: detected capacity change from 0 to 256 [ 305.148936][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.844'. [ 305.251898][ T7122] netlink: 'syz.4.844': attribute type 2 has an invalid length. [ 305.255125][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 306.369890][ T7117] exfat: Bad value for 'dmask' [ 306.490286][ T7128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.845'. [ 309.354778][ T7164] loop3: detected capacity change from 0 to 1024 [ 309.388749][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 309.643781][ T7167] netlink: 64 bytes leftover after parsing attributes in process `syz.4.854'. [ 309.646072][ T7167] netlink: 64 bytes leftover after parsing attributes in process `syz.4.854'. [ 311.194597][ T7175] loop3: detected capacity change from 0 to 1024 [ 311.235710][ T144] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 311.267552][ T7177] loop2: detected capacity change from 0 to 1024 [ 311.507948][ T7177] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 311.677220][ T7177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.861'. [ 311.686812][ T7177] loop2: detected capacity change from 0 to 512 [ 311.770379][ T7177] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 311.772526][ T7177] EXT4-fs (loop2): DAX unsupported by block device. [ 312.687121][ T7193] loop3: detected capacity change from 0 to 128 [ 312.716999][ T7193] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 312.742573][ T7193] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.154278][ T7193] device veth0_vlan left promiscuous mode [ 314.156399][ T7193] device veth0_vlan entered promiscuous mode [ 314.159590][ T1815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.162359][ T1815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.164576][ T1815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.302403][ T7215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.871'. [ 314.304510][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 315.996728][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.998325][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.047552][ T7231] loop2: detected capacity change from 0 to 1024 [ 316.051414][ T4032] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 316.053236][ T4032] Bluetooth: hci1: Injecting HCI hardware error event [ 316.055140][ T144] Bluetooth: hci1: hardware error 0x00 [ 316.287304][ T7234] loop4: detected capacity change from 0 to 1024 [ 317.776582][ T7251] loop4: detected capacity change from 0 to 128 [ 317.778960][ T7251] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.888551][ T7251] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 318.384973][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.388624][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.861181][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 320.900195][ T7273] device veth0_vlan left promiscuous mode [ 321.154586][ T7285] loop2: detected capacity change from 0 to 128 [ 322.389327][ T7285] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 322.484976][ T7281] device team0 entered promiscuous mode [ 322.486469][ T7281] device team_slave_0 entered promiscuous mode [ 322.487864][ T7281] device team_slave_1 entered promiscuous mode [ 322.489443][ T7281] device virt_wifi0 entered promiscuous mode [ 322.569913][ T7281] device team0 left promiscuous mode [ 322.571295][ T7281] device team_slave_0 left promiscuous mode [ 322.572726][ T7281] device team_slave_1 left promiscuous mode [ 322.574221][ T7281] device virt_wifi0 left promiscuous mode [ 322.585249][ T7304] binder: BINDER_SET_CONTEXT_MGR already set [ 322.600677][ T7304] binder: 7300:7304 ioctl 4018620d 20000040 returned -16 [ 322.609274][ T7304] binder: 7300:7304 got transaction to invalid handle, 1 [ 322.640256][ T7304] binder: 7300:7304 transaction failed 29201/-22, size 12288-0 line 2917 [ 322.674780][ T7304] syz.3.893 (7304): drop_caches: 2 [ 323.756353][ T1960] binder: undelivered TRANSACTION_ERROR: 29201 [ 323.933296][ T4350] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 324.065418][ T7328] loop4: detected capacity change from 0 to 1024 [ 325.201962][ T7338] loop3: detected capacity change from 0 to 1024 [ 327.351703][ T7353] nvme_fabrics: missing parameter 'transport=%s' [ 327.353155][ T7353] nvme_fabrics: missing parameter 'nqn=%s' [ 327.379995][ T7361] Cannot find del_set index 0 as target [ 327.387940][ T7361] netlink: 'syz.4.909': attribute type 2 has an invalid length. [ 329.500813][ T7381] udc-core: couldn't find an available UDC or it's busy [ 329.502381][ T7381] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 329.552954][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 329.568047][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.915'. [ 329.811398][ T7384] udc-core: couldn't find an available UDC or it's busy [ 329.813171][ T7384] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 329.948003][ T7386] loop4: detected capacity change from 0 to 1024 [ 331.146678][ T7392] loop4: detected capacity change from 0 to 1024 [ 331.345465][ T7394] device syzkaller0 entered promiscuous mode [ 331.378624][ T7394] futex_wake_op: syz.1.920 tries to shift op by -1; fix this program [ 331.410832][ T7394] netlink: 228 bytes leftover after parsing attributes in process `syz.1.920'. [ 331.412857][ T7394] netlink: 32 bytes leftover after parsing attributes in process `syz.1.920'. [ 331.443577][ T7396] loop4: detected capacity change from 0 to 1024 [ 331.507461][ T7394] netlink: 76 bytes leftover after parsing attributes in process `syz.1.920'. [ 332.696665][ T26] audit: type=1326 audit(588.640:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 332.707157][ T26] audit: type=1326 audit(588.650:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 332.725955][ T26] audit: type=1326 audit(588.660:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=85 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 334.563997][ T26] audit: type=1326 audit(588.660:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 334.589535][ T26] audit: type=1326 audit(588.660:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 334.626715][ T26] audit: type=1326 audit(588.660:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=87 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 334.652769][ T26] audit: type=1326 audit(588.660:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 334.681641][ T26] audit: type=1326 audit(588.660:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 334.702883][ T26] audit: type=1326 audit(588.660:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 334.719048][ T26] audit: type=1326 audit(588.660:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 335.773672][ T7438] loop2: detected capacity change from 0 to 2048 [ 336.048468][ T7438] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 336.352771][ T7452] capability: warning: `syz.2.930' uses 32-bit capabilities (legacy support in use) [ 337.854527][ T7457] fs-verity: sha512 using implementation "sha512-arm64" [ 338.746916][ T7469] loop3: detected capacity change from 0 to 512 [ 338.922927][ T7478] loop4: detected capacity change from 0 to 128 [ 338.970530][ T7476] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 339.014147][ T7478] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 339.029871][ T7469] EXT4-fs (loop3): Ignoring removed nobh option [ 339.031559][ T7469] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 339.060865][ T7478] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 339.085782][ T7469] EXT4-fs (loop3): 1 truncate cleaned up [ 339.087622][ T7469] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 339.697342][ T7491] vhci_hcd: invalid port number 245 [ 339.698744][ T7491] vhci_hcd: default hub control req: 1f16 v4092 i00f5 l1093 [ 340.067723][ T7491] team0: Port device virt_wifi0 added [ 343.471391][ T7516] loop2: detected capacity change from 0 to 8 [ 343.658406][ T7516] squashfs: Unknown parameter 'filter' [ 343.677373][ T7529] syz.0.952 (7529): drop_caches: 2 [ 343.699686][ T7529] syz.0.952 (7529): drop_caches: 2 [ 343.732530][ T7529] syz.0.952 (7529): drop_caches: 2 [ 343.735289][ T7529] syz.0.952 (7529): drop_caches: 2 [ 343.772485][ T7529] syz.0.952 (7529): drop_caches: 2 [ 343.774557][ T7529] syz.0.952 (7529): drop_caches: 2 [ 343.850942][ T7533] syz.4.953 (7533): drop_caches: 2 [ 343.861914][ T7533] syz.4.953 (7533): drop_caches: 2 [ 343.970412][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 343.970425][ T26] audit: type=1326 audit(599.920:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 343.990388][ T26] audit: type=1326 audit(599.920:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 343.999622][ T7537] loop4: detected capacity change from 0 to 1024 [ 344.036239][ T26] audit: type=1326 audit(599.950:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 344.096240][ T26] audit: type=1326 audit(599.950:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 344.120157][ T26] audit: type=1326 audit(599.950:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 344.125404][ T26] audit: type=1326 audit(599.970:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 344.157960][ T26] audit: type=1326 audit(599.970:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 344.181755][ T26] audit: type=1326 audit(599.970:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 344.186677][ T26] audit: type=1326 audit(599.970:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 344.211136][ T26] audit: type=1326 audit(599.970:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb40472a8 code=0x7ffc0000 [ 344.475438][ T7541] loop2: detected capacity change from 0 to 4096 [ 345.372082][ T7541] ntfs3: Unknown parameter '/dev/nbd#' [ 346.999891][ T7570] syz.4.966 (7570): drop_caches: 2 [ 347.541312][ T7570] syz.4.966 (7570): drop_caches: 2 [ 347.755437][ T7574] syz.4.966 (7574): drop_caches: 2 [ 347.757628][ T7574] syz.4.966 (7574): drop_caches: 2 [ 347.785458][ T7570] syz.4.966 (7570): drop_caches: 2 [ 347.787724][ T7570] syz.4.966 (7570): drop_caches: 2 [ 348.516219][ T7584] syz.0.968 (7584): drop_caches: 2 [ 348.518571][ T7584] syz.0.968 (7584): drop_caches: 2 [ 348.565172][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.635070][ T7587] loop3: detected capacity change from 0 to 1024 [ 349.768358][ T7589] usb usb8: check_ctrlrecip: process 7589 (syz.2.970) requesting ep 01 but needs 81 [ 349.770594][ T7589] usb usb8: usbfs: process 7589 (syz.2.970) did not claim interface 0 before use [ 349.773767][ T7589] vhci_hcd: default hub control req: 0200 v0000 i0001 l0 [ 352.304582][ T7616] loop4: detected capacity change from 0 to 512 [ 353.252452][ T7616] EXT4-fs (loop4): Ignoring removed bh option [ 353.254045][ T7616] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 353.255860][ T7616] EXT4-fs (loop4): Test dummy encryption mode enabled [ 353.327113][ T7616] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 353.369508][ T7616] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.981: attempt to clear invalid blocks 2 len 1 [ 353.403566][ T7616] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 353.407910][ T7616] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.981: invalid indirect mapped block 1819239214 (level 0) [ 353.461440][ T7616] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.981: invalid indirect mapped block 1819239214 (level 1) [ 353.500941][ T7616] EXT4-fs (loop4): 1 truncate cleaned up [ 353.502318][ T7616] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,bh,mblk_io_submit,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 353.545520][ T7627] fuse: Bad value for 'fd' [ 353.604933][ T7614] netlink: 1096 bytes leftover after parsing attributes in process `syz.4.981'. [ 353.664802][ T7616] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.981: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 353.707292][ T7631] loop3: detected capacity change from 0 to 1024 [ 354.131043][ T7640] vhci_hcd: invalid port number 245 [ 354.132305][ T7640] vhci_hcd: default hub control req: 1f16 v4092 i00f5 l1093 [ 355.354670][ T7644] syz.1.989 (7644): drop_caches: 2 [ 355.356808][ T7644] syz.1.989 (7644): drop_caches: 2 [ 355.361197][ T7644] syz.1.989 (7644): drop_caches: 2 [ 355.362630][ T7644] syz.1.989 (7644): drop_caches: 2 [ 356.735566][ T7658] syz.0.993 (7658): drop_caches: 2 [ 356.747566][ T7658] syz.0.993 (7658): drop_caches: 2 [ 357.860443][ T4368] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 357.999031][ T7680] loop2: detected capacity change from 0 to 1024 [ 358.202151][ T7683] nvme_fabrics: missing parameter 'transport=%s' [ 358.203682][ T7683] nvme_fabrics: missing parameter 'nqn=%s' [ 358.853923][ T7693] netlink: 'syz.3.1002': attribute type 2 has an invalid length. [ 359.175299][ T7697] loop4: detected capacity change from 0 to 1024 [ 359.215441][ T7699] loop2: detected capacity change from 0 to 1024 [ 361.041453][ T7741] netlink: 1096 bytes leftover after parsing attributes in process `syz.1.1016'. [ 361.507897][ T7754] loop2: detected capacity change from 0 to 1024 [ 361.552914][ T7755] loop4: detected capacity change from 0 to 1024 [ 362.019202][ T7761] loop3: detected capacity change from 0 to 512 [ 362.755715][ T7761] EXT4-fs (loop3): Ignoring removed bh option [ 362.757418][ T7761] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 362.759267][ T7761] EXT4-fs (loop3): Test dummy encryption mode enabled [ 362.827788][ T7761] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 362.831785][ T7761] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1022: attempt to clear invalid blocks 2 len 1 [ 362.835593][ T7761] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 362.842245][ T7761] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1022: invalid indirect mapped block 1819239214 (level 0) [ 362.846518][ T7761] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1022: invalid indirect mapped block 1819239214 (level 1) [ 362.854037][ T7761] EXT4-fs (loop3): 1 truncate cleaned up [ 362.855375][ T7761] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,bh,mblk_io_submit,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 362.938110][ T7759] netlink: 1096 bytes leftover after parsing attributes in process `syz.3.1022'. [ 363.116032][ T7790] syz.1.1030 (7790): drop_caches: 2 [ 363.118436][ T7790] syz.1.1030 (7790): drop_caches: 2 [ 363.638814][ T7780] loop4: detected capacity change from 0 to 1024 [ 364.581848][ T7803] syz.1.1034 (7803): drop_caches: 2 [ 364.583325][ T7803] syz.1.1034 (7803): drop_caches: 2 [ 364.617547][ T7805] loop3: detected capacity change from 0 to 512 [ 364.627294][ T7803] syz.1.1034 (7803): drop_caches: 2 [ 364.629175][ T7803] syz.1.1034 (7803): drop_caches: 2 [ 364.766290][ T7805] EXT4-fs (loop3): Ignoring removed bh option [ 364.771107][ T7805] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 364.773104][ T7805] EXT4-fs (loop3): Test dummy encryption mode enabled [ 365.039105][ T7814] loop2: detected capacity change from 0 to 1024 [ 365.144295][ T7805] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 365.340251][ T7805] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1033: attempt to clear invalid blocks 2 len 1 [ 365.362157][ T7805] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 365.367163][ T7805] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1033: invalid indirect mapped block 1819239214 (level 0) [ 366.174239][ T7805] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1033: invalid indirect mapped block 1819239214 (level 1) [ 366.178801][ T7805] EXT4-fs (loop3): 1 truncate cleaned up [ 366.182103][ T7805] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,bh,mblk_io_submit,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 367.228350][ T7801] netlink: 1096 bytes leftover after parsing attributes in process `syz.3.1033'. [ 367.604432][ T7839] loop4: detected capacity change from 0 to 128 [ 367.763148][ T7841] syz.1.1047 (7841): drop_caches: 2 [ 367.770641][ T7841] syz.1.1047 (7841): drop_caches: 2 [ 367.779733][ T7841] syz.1.1047 (7841): drop_caches: 2 [ 367.782274][ T7841] syz.1.1047 (7841): drop_caches: 2 [ 367.786648][ T7841] syz.1.1047 (7841): drop_caches: 2 [ 367.788641][ T7841] syz.1.1047 (7841): drop_caches: 2 [ 368.966704][ T7839] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 369.059142][ T7839] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 370.012795][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 370.016072][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.247925][ T7882] syz.4.1059 (7882): drop_caches: 2 [ 371.262119][ T7882] syz.4.1059 (7882): drop_caches: 2 [ 371.285171][ T7882] syz.4.1059 (7882): drop_caches: 2 [ 371.286553][ T7882] syz.4.1059 (7882): drop_caches: 2 [ 371.307477][ T7882] syz.4.1059 (7882): drop_caches: 2 [ 371.592301][ T7882] syz.4.1059 (7882): drop_caches: 2 [ 371.859192][ T7897] loop2: detected capacity change from 0 to 1024 [ 372.711558][ T7908] loop4: detected capacity change from 0 to 128 [ 372.771289][ T7908] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 372.865682][ T7908] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 373.285777][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 373.289332][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.704145][ T7925] syz.2.1074 (7925): drop_caches: 2 [ 373.738800][ T7925] syz.2.1074 (7925): drop_caches: 2 [ 373.756673][ T7925] syz.2.1074 (7925): drop_caches: 2 [ 373.762038][ T7925] syz.2.1074 (7925): drop_caches: 2 [ 373.773248][ T7925] syz.2.1074 (7925): drop_caches: 2 [ 373.775123][ T7925] syz.2.1074 (7925): drop_caches: 2 [ 375.826918][ T7960] loop4: detected capacity change from 0 to 512 [ 376.092660][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 376.116341][ T7968] syz.2.1086 (7968): drop_caches: 2 [ 376.135929][ T7968] syz.2.1086 (7968): drop_caches: 2 [ 376.220042][ T7968] syz.2.1086 (7968): drop_caches: 2 [ 376.225569][ T7968] syz.2.1086 (7968): drop_caches: 2 [ 376.241170][ T7968] syz.2.1086 (7968): drop_caches: 2 [ 376.255389][ T7968] syz.2.1086 (7968): drop_caches: 2 [ 376.884252][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.885694][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.003507][ T7960] EXT4-fs (loop4): Ignoring removed bh option [ 378.005199][ T7960] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 378.007554][ T7960] EXT4-fs (loop4): Test dummy encryption mode enabled [ 378.128841][ T7960] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 378.180282][ T7960] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1083: attempt to clear invalid blocks 2 len 1 [ 379.097431][ T7960] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 379.116361][ T7960] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1083: invalid indirect mapped block 1819239214 (level 0) [ 379.132279][ T7960] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1083: invalid indirect mapped block 1819239214 (level 1) [ 379.142836][ T7960] EXT4-fs (loop4): 1 truncate cleaned up [ 379.144297][ T7960] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,bh,mblk_io_submit,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 380.266918][ T8018] PKCS8: Unsupported PKCS#8 version [ 381.051268][ T8030] block nbd0: shutting down sockets [ 381.076165][ T8037] loop2: detected capacity change from 0 to 1024 [ 381.962078][ T8055] loop3: detected capacity change from 0 to 512 [ 382.181734][ T8055] EXT4-fs (loop3): Ignoring removed bh option [ 382.183107][ T8055] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 382.184954][ T8055] EXT4-fs (loop3): Test dummy encryption mode enabled [ 383.066310][ T8055] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 383.069231][ T8055] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1108: attempt to clear invalid blocks 2 len 1 [ 383.075529][ T8055] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 383.111033][ T8055] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1108: invalid indirect mapped block 1819239214 (level 0) [ 383.115683][ T8055] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1108: invalid indirect mapped block 1819239214 (level 1) [ 383.288664][ T8055] EXT4-fs (loop3): 1 truncate cleaned up [ 383.290146][ T8055] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,bh,mblk_io_submit,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 383.306277][ T8053] netlink: 1096 bytes leftover after parsing attributes in process `syz.3.1108'. [ 384.415775][ T8074] syz.0.1114 (8074): drop_caches: 2 [ 384.496475][ T8073] syz.0.1114 (8073): drop_caches: 2 [ 384.497223][ T8074] syz.0.1114 (8074): drop_caches: 2 [ 384.498683][ T8073] syz.0.1114 (8073): drop_caches: 2 [ 384.522314][ T8073] syz.0.1114 (8073): drop_caches: 2 [ 384.524150][ T8073] syz.0.1114 (8073): drop_caches: 2 [ 384.535282][ T8077] syz.1.1115 (8077): drop_caches: 2 [ 384.537134][ T8077] syz.1.1115 (8077): drop_caches: 2 [ 384.579062][ T8077] syz.1.1115 (8077): drop_caches: 2 [ 384.588978][ T8077] syz.1.1115 (8077): drop_caches: 2 [ 384.599186][ T8077] syz.1.1115 (8077): drop_caches: 2 [ 384.610857][ T8077] syz.1.1115 (8077): drop_caches: 2 [ 389.251262][ T8122] loop3: detected capacity change from 0 to 512 [ 389.318416][ T8124] syz.2.1128 (8124): drop_caches: 2 [ 389.322198][ T8124] syz.2.1128 (8124): drop_caches: 2 [ 389.328508][ T8124] syz.2.1128 (8124): drop_caches: 2 [ 389.335122][ T8124] syz.2.1128 (8124): drop_caches: 2 [ 389.339329][ T8124] syz.2.1128 (8124): drop_caches: 2 [ 389.344005][ T8124] syz.2.1128 (8124): drop_caches: 2 [ 389.419543][ T8126] loop2: detected capacity change from 0 to 1024 [ 389.697024][ T8122] EXT4-fs (loop3): Ignoring removed bh option [ 389.698575][ T8122] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 389.704266][ T8122] EXT4-fs (loop3): Test dummy encryption mode enabled [ 390.215110][ T8122] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 390.253930][ T8122] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1127: attempt to clear invalid blocks 2 len 1 [ 390.272188][ T8122] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 390.290290][ T8122] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1127: invalid indirect mapped block 1819239214 (level 0) [ 390.330299][ T8122] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1127: invalid indirect mapped block 1819239214 (level 1) [ 390.334866][ T8122] EXT4-fs (loop3): 1 truncate cleaned up [ 390.336177][ T8122] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,bh,mblk_io_submit,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 390.586955][ T8135] loop4: detected capacity change from 0 to 1024 [ 390.620693][ T153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 392.917914][ T8166] loop4: detected capacity change from 0 to 256 [ 392.957345][ T8169] loop3: detected capacity change from 0 to 1024 [ 393.222163][ T8173] loop2: detected capacity change from 0 to 16 [ 393.410086][ T8174] Device name cannot be null; rc = [-22] [ 395.003987][ T8173] erofs: (device loop2): mounted with root inode @ nid 36. [ 395.550920][ T8178] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 395.563595][ T8178] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -7 in[50, 4046] out[1851] [ 395.567920][ T8178] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 395.722821][ T8178] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 395.725172][ T8178] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -7 in[50, 4046] out[1851] [ 395.729559][ T8178] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 396.220269][ T8180] syz.1.1145 (8180): drop_caches: 2 [ 396.223746][ T8180] syz.1.1145 (8180): drop_caches: 2 [ 396.230170][ T8180] syz.1.1145 (8180): drop_caches: 2 [ 396.231657][ T8180] syz.1.1145 (8180): drop_caches: 2 [ 396.235789][ T8180] syz.1.1145 (8180): drop_caches: 2 [ 396.237439][ T8180] syz.1.1145 (8180): drop_caches: 2 [ 396.330733][ T8184] syz.3.1142 (8184): drop_caches: 2 [ 396.332816][ T8184] syz.3.1142 (8184): drop_caches: 2 [ 396.373277][ T8184] syz.3.1142 (8184): drop_caches: 2 [ 396.374740][ T8184] syz.3.1142 (8184): drop_caches: 2 [ 396.382143][ T8184] syz.3.1142 (8184): drop_caches: 2 [ 396.383561][ T8184] syz.3.1142 (8184): drop_caches: 2 [ 397.274334][ T8203] loop4: detected capacity change from 0 to 128 [ 397.844004][ T8203] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 398.248696][ T8203] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 399.130904][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 399.167870][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 399.257621][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1161'. [ 400.278505][ T8257] loop2: detected capacity change from 0 to 16 [ 400.496175][ T8257] erofs: (device loop2): mounted with root inode @ nid 36. [ 401.469583][ T8264] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 401.592985][ T8264] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -7 in[50, 4046] out[1851] [ 401.597488][ T8264] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 401.813208][ T8264] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 401.815599][ T8264] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -7 in[50, 4046] out[1851] [ 401.819918][ T8264] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 402.478159][ T8273] loop2: detected capacity change from 0 to 512 [ 402.514847][ T8273] EXT4-fs (loop2): Ignoring removed bh option [ 402.516405][ T8273] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 402.636471][ T8273] EXT4-fs (loop2): Test dummy encryption mode enabled [ 403.354048][ T8273] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 403.361348][ T8273] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1170: attempt to clear invalid blocks 2 len 1 [ 403.365149][ T8273] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 403.371242][ T8273] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1170: invalid indirect mapped block 1819239214 (level 0) [ 403.385051][ T8283] device veth0_vlan left promiscuous mode [ 403.387249][ T8283] device veth0_vlan entered promiscuous mode [ 403.399122][ T8282] loop4: detected capacity change from 0 to 1024 [ 403.402518][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 403.406260][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 403.410760][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 403.425680][ T8273] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1170: invalid indirect mapped block 1819239214 (level 1) [ 403.438428][ T8273] EXT4-fs (loop2): 1 truncate cleaned up [ 403.439927][ T8273] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,bh,mblk_io_submit,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 404.665338][ T8294] loop2: detected capacity change from 0 to 1024 [ 404.938094][ T8298] syz.4.1177 (8298): drop_caches: 2 [ 404.940904][ T8298] syz.4.1177 (8298): drop_caches: 2 [ 404.964243][ T8298] syz.4.1177 (8298): drop_caches: 2 [ 405.710713][ T8298] syz.4.1177 (8298): drop_caches: 2 [ 405.882379][ T8307] loop4: detected capacity change from 0 to 256 [ 406.421711][ T8325] "syz.4.1181" (8325) uses obsolete ecb(arc4) skcipher [ 407.287451][ T8327] loop2: detected capacity change from 0 to 1024 [ 410.120326][ T148] wlan1: Trigger new scan to find an IBSS to join [ 410.435722][ T8344] syz.4.1194 (8344): drop_caches: 2 [ 410.437897][ T8344] syz.4.1194 (8344): drop_caches: 2 [ 410.444527][ T8344] syz.4.1194 (8344): drop_caches: 2 [ 410.445964][ T8344] syz.4.1194 (8344): drop_caches: 2 [ 410.461600][ T8346] syz.2.1190 (8346): drop_caches: 2 [ 410.465529][ T8346] syz.2.1190 (8346): drop_caches: 2 [ 410.473388][ T8346] syz.2.1190 (8346): drop_caches: 2 [ 410.485499][ T8346] syz.2.1190 (8346): drop_caches: 2 [ 411.453428][ T8361] loop2: detected capacity change from 0 to 1024 [ 412.227236][ T8369] loop3: detected capacity change from 0 to 512 [ 412.463719][ T8369] EXT4-fs (loop3): Ignoring removed bh option [ 412.465473][ T8369] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 412.467589][ T8369] EXT4-fs (loop3): Test dummy encryption mode enabled [ 412.506484][ T8369] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 412.524608][ T8369] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1202: attempt to clear invalid blocks 2 len 1 [ 412.549220][ T8369] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 412.559769][ T8369] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1202: invalid indirect mapped block 1819239214 (level 0) [ 412.631742][ T8369] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1202: invalid indirect mapped block 1819239214 (level 1) [ 413.373040][ T8369] EXT4-fs (loop3): 1 truncate cleaned up [ 413.374484][ T8369] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,bh,mblk_io_submit,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 414.632907][ T8395] loop3: detected capacity change from 0 to 512 [ 414.711829][ T8399] syz.0.1208 (8399): drop_caches: 2 [ 414.720763][ T8399] syz.0.1208 (8399): drop_caches: 2 [ 414.798724][ T8399] syz.0.1208 (8399): drop_caches: 2 [ 414.800958][ T8399] syz.0.1208 (8399): drop_caches: 2 [ 414.913563][ T8404] syz.4.1211 (8404): drop_caches: 2 [ 414.916014][ T8404] syz.4.1211 (8404): drop_caches: 2 [ 414.931111][ T8404] syz.4.1211 (8404): drop_caches: 2 [ 414.933020][ T8404] syz.4.1211 (8404): drop_caches: 2 [ 415.048142][ T8409] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1213'. [ 416.120485][ T148] wlan1: Trigger new scan to find an IBSS to join [ 417.136490][ T8395] EXT4-fs (loop3): Ignoring removed bh option [ 417.138098][ T8395] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 417.139989][ T8395] EXT4-fs (loop3): Test dummy encryption mode enabled [ 417.237739][ T8434] syz.0.1221 (8434): drop_caches: 2 [ 417.240849][ T8434] syz.0.1221 (8434): drop_caches: 2 [ 417.246726][ T8434] syz.0.1221 (8434): drop_caches: 2 [ 417.248681][ T8434] syz.0.1221 (8434): drop_caches: 2 [ 418.268964][ T8395] EXT4-fs: error -4 creating inode table initialization thread [ 418.279490][ T8395] EXT4-fs (loop3): mount failed [ 418.668485][ T8447] loop2: detected capacity change from 0 to 1024 [ 418.695903][ T8448] syz.4.1225 (8448): drop_caches: 2 [ 418.706632][ T8448] syz.4.1225 (8448): drop_caches: 2 [ 418.738967][ T8448] syz.4.1225 (8448): drop_caches: 2 [ 418.761051][ T8448] syz.4.1225 (8448): drop_caches: 2 [ 419.249702][ T8454] loop4: detected capacity change from 0 to 1024 [ 421.220225][ T8475] syz.0.1233 (8475): drop_caches: 2 [ 421.222314][ T8475] syz.0.1233 (8475): drop_caches: 2 [ 421.264524][ T8475] syz.0.1233 (8475): drop_caches: 2 [ 421.266716][ T8475] syz.0.1233 (8475): drop_caches: 2 [ 421.538541][ T8479] loop2: detected capacity change from 0 to 16 [ 422.579305][ T148] wlan1: Creating new IBSS network, BSSID 7e:6b:f0:44:ed:bc [ 423.258027][ T8492] syz.0.1237 (8492): drop_caches: 2 [ 423.265172][ T8492] syz.0.1237 (8492): drop_caches: 2 [ 423.273580][ T8492] syz.0.1237 (8492): drop_caches: 2 [ 423.276107][ T8492] syz.0.1237 (8492): drop_caches: 2 [ 423.533343][ T4119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 423.771170][ T8506] loop3: detected capacity change from 0 to 1024 [ 425.346971][ T8513] syz.0.1246 (8513): drop_caches: 2 [ 425.349848][ T8513] syz.0.1246 (8513): drop_caches: 2 [ 425.366468][ T8513] syz.0.1246 (8513): drop_caches: 2 [ 425.369345][ T8513] syz.0.1246 (8513): drop_caches: 2 [ 426.951917][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 427.101238][ T8525] tipc: Enabling of bearer rejected, failed to enable media [ 427.342639][ T8528] syz.2.1251 (8528): drop_caches: 2 [ 427.387195][ T8528] syz.2.1251 (8528): drop_caches: 2 [ 427.440484][ T8528] syz.2.1251 (8528): drop_caches: 2 [ 427.442131][ T8528] syz.2.1251 (8528): drop_caches: 2 [ 430.632016][ T8559] loop4: detected capacity change from 0 to 128 [ 430.647480][ T8559] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 430.677913][ T8559] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 431.512759][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.521133][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.734925][ T8575] loop3: detected capacity change from 0 to 256 [ 431.854278][ T8576] binder: 8564:8576 tried to acquire reference to desc 0, got 1 instead [ 431.869810][ T8576] binder: 8576 RLIMIT_NICE not set [ 431.871513][ T8576] binder: undelivered transaction 49, fd fixups failed [ 431.873571][ T8576] binder: 8564:8576 async transaction 49 fd fixups failed 29201/-12, line 4507 [ 432.589443][ T4071] binder: undelivered TRANSACTION_COMPLETE [ 432.816869][ T8577] syz.2.1264 (8577): drop_caches: 2 [ 432.819269][ T8577] syz.2.1264 (8577): drop_caches: 2 [ 432.827924][ T8571] syz.2.1264 (8571): drop_caches: 2 [ 432.841660][ T8571] syz.2.1264 (8571): drop_caches: 2 [ 437.147198][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 437.153088][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 437.153266][ T8604] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 437.153295][ T8604] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (11) [ 437.236068][ T8604] loop4: detected capacity change from 0 to 8192 [ 438.839416][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.840952][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.842780][ T8604] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 438.845205][ T8604] REISERFS (device loop4): using writeback data mode [ 438.848665][ T8604] REISERFS warning (device loop4): sh-457 journal_init_dev: journal_init_dev: Cannot open './cgroup': -15 [ 438.851404][ T8604] REISERFS warning (device loop4): sh-462 journal_init: unable to initialize journal device [ 438.975631][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 439.956535][ T8618] syz.4.1277 (8618): drop_caches: 2 [ 439.959105][ T8618] syz.4.1277 (8618): drop_caches: 2 [ 439.983948][ T8618] syz.4.1277 (8618): drop_caches: 2 [ 439.986763][ T8618] syz.4.1277 (8618): drop_caches: 2 [ 440.125760][ T8622] loop4: detected capacity change from 0 to 256 [ 443.376114][ T8643] netlink: 1224 bytes leftover after parsing attributes in process `syz.2.1285'. [ 444.631458][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 444.749351][ T8650] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 444.841228][ T8652] netlink: 'syz.4.1286': attribute type 32 has an invalid length. [ 445.014613][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 445.026593][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 446.088588][ T8662] syz.2.1289 (8662): drop_caches: 2 [ 446.107766][ T8662] syz.2.1289 (8662): drop_caches: 2 [ 446.127273][ T8662] syz.2.1289 (8662): drop_caches: 2 [ 446.129075][ T8662] syz.2.1289 (8662): drop_caches: 2 [ 448.193689][ T8681] loop4: detected capacity change from 0 to 16 [ 448.393773][ T8689] netlink: 1224 bytes leftover after parsing attributes in process `syz.1.1298'. [ 449.872612][ T8681] erofs: (device loop4): mounted with root inode @ nid 36. [ 451.646660][ T8703] syz.0.1300 (8703): drop_caches: 2 [ 451.649721][ T8703] syz.0.1300 (8703): drop_caches: 2 [ 451.841595][ T8703] syz.0.1300 (8703): drop_caches: 2 [ 451.843961][ T8703] syz.0.1300 (8703): drop_caches: 2 [ 453.228741][ T4119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 455.512448][ T8738] loop2: detected capacity change from 0 to 8192 [ 455.515490][ T8744] loop3: detected capacity change from 0 to 1024 [ 455.635533][ T8738] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 455.637893][ T8738] REISERFS (device loop2): using ordered data mode [ 455.639310][ T8738] reiserfs: using flush barriers [ 455.646321][ T8738] REISERFS (device loop2): journal params: device ram0, size 2, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 455.650596][ T8738] REISERFS (device loop2): checking transaction log (ram0) [ 455.683012][ T8738] REISERFS warning: reiserfs-5090 is_tree_node: node level 1 does not match to the expected one 127 [ 455.685503][ T8738] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 455.687863][ T8738] REISERFS (device loop2): Remounting filesystem read-only [ 455.689604][ T8738] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 455.773366][ T8749] netlink: 1096 bytes leftover after parsing attributes in process `syz.1.1314'. [ 456.084823][ T8755] syz.1.1315 (8755): drop_caches: 2 [ 456.087454][ T8755] syz.1.1315 (8755): drop_caches: 2 [ 456.107737][ T8755] syz.1.1315 (8755): drop_caches: 2 [ 456.109903][ T8755] syz.1.1315 (8755): drop_caches: 2 [ 456.531769][ T8766] loop3: detected capacity change from 0 to 16 [ 456.709982][ T8766] erofs: (device loop3): mounted with root inode @ nid 36. [ 457.181616][ T8777] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 457.204782][ T8777] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -7 in[50, 4046] out[1851] [ 457.209153][ T8777] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 457.227698][ T8777] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 457.227801][ T8777] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -7 in[50, 4046] out[1851] [ 457.230349][ T8777] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 458.028658][ T550] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.068673][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 459.288418][ T8798] loop4: detected capacity change from 0 to 1024 [ 459.325474][ T8796] netlink: 1096 bytes leftover after parsing attributes in process `syz.0.1325'. [ 459.594633][ T8805] syz.0.1330 (8805): drop_caches: 2 [ 459.599298][ T8805] syz.0.1330 (8805): drop_caches: 2 [ 459.627087][ T8805] syz.0.1330 (8805): drop_caches: 2 [ 459.628876][ T8805] syz.0.1330 (8805): drop_caches: 2 [ 461.029568][ T8827] syz.3.1323 (8827): drop_caches: 2 [ 461.034025][ T8827] syz.3.1323 (8827): drop_caches: 2 [ 461.057112][ T8827] syz.3.1323 (8827): drop_caches: 2 [ 461.058862][ T8827] syz.3.1323 (8827): drop_caches: 2 [ 461.177183][ T8835] netlink: 1096 bytes leftover after parsing attributes in process `syz.1.1343'. [ 463.850440][ T8851] syz.0.1346 (8851): drop_caches: 2 [ 464.002781][ T8851] syz.0.1346 (8851): drop_caches: 2 [ 464.091580][ T8851] syz.0.1346 (8851): drop_caches: 2 [ 464.093686][ T8851] syz.0.1346 (8851): drop_caches: 2 [ 464.095849][ T8857] loop4: detected capacity change from 0 to 1024 [ 464.197924][ T8864] loop3: detected capacity change from 0 to 1024 [ 465.387404][ T8871] syz.0.1354 (8871): drop_caches: 2 [ 465.389587][ T8871] syz.0.1354 (8871): drop_caches: 2 [ 465.402139][ T8871] syz.0.1354 (8871): drop_caches: 2 [ 465.404448][ T8871] syz.0.1354 (8871): drop_caches: 2 [ 466.738808][ T8884] fuse: Unknown parameter 'ÿÿÿÿ' [ 468.375138][ T8900] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.1364'. [ 468.626463][ T8915] syz.0.1368 (8915): drop_caches: 2 [ 468.629896][ T8915] syz.0.1368 (8915): drop_caches: 2 [ 468.634907][ T8915] syz.0.1368 (8915): drop_caches: 2 [ 468.636837][ T8915] syz.0.1368 (8915): drop_caches: 2 [ 468.641336][ T8915] syz.0.1368 (8915): drop_caches: 2 [ 468.643280][ T8915] syz.0.1368 (8915): drop_caches: 2 [ 470.728426][ T8929] loop2: detected capacity change from 0 to 512 [ 471.842230][ T8936] fuse: Unknown parameter 'ÿÿÿÿ' [ 471.845140][ T8936] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 472.052145][ T8940] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.1376'. [ 472.193898][ T8947] syz.1.1380 (8947): drop_caches: 2 [ 472.196263][ T8947] syz.1.1380 (8947): drop_caches: 2 [ 472.201781][ T8949] loop4: detected capacity change from 0 to 1024 [ 472.209265][ T8947] syz.1.1380 (8947): drop_caches: 2 [ 472.212926][ T8947] syz.1.1380 (8947): drop_caches: 2 [ 472.219806][ T8947] syz.1.1380 (8947): drop_caches: 2 [ 472.239573][ T8947] syz.1.1380 (8947): drop_caches: 2 [ 474.499662][ T8972] loop3: detected capacity change from 0 to 512 [ 475.647891][ T8981] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.1392'. [ 476.407420][ T8988] fuse: Unknown parameter 'ÿÿÿÿ' [ 478.310481][ T8995] loop4: detected capacity change from 0 to 2048 [ 478.606361][ T9005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1397'. [ 478.662901][ T9005] ebt_among: dst integrity fail: 101 [ 478.684568][ T9008] syz.2.1398 (9008): drop_caches: 2 [ 478.686741][ T9008] syz.2.1398 (9008): drop_caches: 2 [ 478.709335][ T9008] syz.2.1398 (9008): drop_caches: 2 [ 478.712661][ T9008] syz.2.1398 (9008): drop_caches: 2 [ 478.717230][ T9008] syz.2.1398 (9008): drop_caches: 2 [ 478.719356][ T9008] syz.2.1398 (9008): drop_caches: 2 [ 480.448923][ T9030] fuse: Unknown parameter 'ÿÿÿÿ' [ 482.109439][ T9029] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1404'. [ 482.210096][ T9029] loop2: detected capacity change from 0 to 2048 [ 482.483836][ T9045] loop3: detected capacity change from 0 to 1024 [ 483.129650][ T9029] NILFS (loop2): error -4 creating segctord thread [ 486.788139][ T550] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 486.827124][ T9072] loop4: detected capacity change from 0 to 1024 [ 486.948720][ T9065] loop2: detected capacity change from 0 to 8192 [ 487.204412][ T9083] fuse: Unknown parameter 'ÿÿÿÿ' [ 487.927633][ T9092] udc-core: couldn't find an available UDC or it's busy [ 487.929402][ T9092] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 487.974537][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 487.991338][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'. [ 488.181393][ T9099] udc-core: couldn't find an available UDC or it's busy [ 488.183160][ T9099] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 488.368448][ T9101] loop4: detected capacity change from 0 to 4096 [ 489.375738][ T9101] __ntfs_error: 9 callbacks suppressed [ 489.375754][ T9101] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 489.396964][ T9101] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 489.401369][ T9101] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 489.404069][ T9101] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 489.406955][ T9101] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 489.519432][ T9101] ntfs: volume version 3.1. [ 489.535129][ T9101] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 489.539646][ T9101] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 489.544574][ T9101] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 489.547345][ T9101] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 489.553716][ T9101] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 490.069547][ T9118] loop4: detected capacity change from 0 to 512 [ 490.329225][ T9123] fuse: Unknown parameter 'ÿÿÿÿ' [ 490.396967][ T9125] loop2: detected capacity change from 0 to 64 [ 491.115370][ T9130] loop3: detected capacity change from 0 to 1024 [ 491.228695][ T9136] netlink: 1096 bytes leftover after parsing attributes in process `syz.0.1443'. [ 495.294060][ T9176] loop4: detected capacity change from 0 to 16 [ 496.114378][ T9176] erofs: (device loop4): mounted with root inode @ nid 36. [ 496.417851][ T9189] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 496.637032][ T9189] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -7 in[50, 4046] out[1851] [ 496.641695][ T9189] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 496.794327][ T9189] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 496.796742][ T9189] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -7 in[50, 4046] out[1851] [ 496.801073][ T9189] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 497.330513][ T4350] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 499.153413][ T9210] loop2: detected capacity change from 0 to 2048 [ 499.206876][ T9203] loop3: detected capacity change from 0 to 4096 [ 499.250574][ T9203] __ntfs_error: 4 callbacks suppressed [ 499.250589][ T9203] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 499.253933][ T9203] ntfs: (device loop3): ntfs_read_inode_mount(): ntfs_mapping_pairs_decompress() failed with error code -5. $MFT is corrupt. [ 499.256832][ T9203] ntfs: (device loop3): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 500.360308][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.363047][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.109144][ T9239] loop3: detected capacity change from 0 to 4096 [ 509.299621][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 509.523958][ T9276] loop4: detected capacity change from 0 to 2048 [ 509.619027][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'. [ 509.808937][ T9289] loop3: detected capacity change from 0 to 128 [ 510.311829][ T9289] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 510.317484][ T9289] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 510.365361][ T9276] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 510.386747][ T9276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.577514][ T9311] loop2: detected capacity change from 0 to 2048 [ 510.581798][ T9306] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1501'. [ 510.584198][ T9307] device veth0_vlan left promiscuous mode [ 510.586161][ T9307] device veth0_vlan entered promiscuous mode [ 510.597738][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 510.601274][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 510.607684][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 510.691548][ T9317] loop4: detected capacity change from 0 to 256 [ 510.796108][ T9317] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9e99708d, utbl_chksum : 0xe619d30d) [ 511.022787][ T9332] netlink: 'syz.1.1514': attribute type 4 has an invalid length. [ 511.025166][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'. [ 512.370639][ T9311] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 512.494112][ T9343] device veth0_vlan left promiscuous mode [ 512.496057][ T9343] device veth0_vlan entered promiscuous mode [ 512.499127][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 512.541349][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 512.559031][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 512.684746][ T9351] loop4: detected capacity change from 0 to 1024 [ 512.819407][ T9356] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 512.875818][ T9336] loop3: detected capacity change from 0 to 32768 [ 512.964416][ T9336] (syz.3.1513,9336,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 512.977577][ T9336] (syz.3.1513,9336,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 513.014505][ T9336] JBD2: Ignoring recovery information on journal [ 513.132489][ T9336] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 513.275684][ T4030] ocfs2: Unmounting device (7,3) on (node local) [ 513.361984][ T9368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1529'. [ 513.364096][ T9368] netlink: 'syz.1.1529': attribute type 1 has an invalid length. [ 513.594267][ T9370] netlink: 'syz.1.1531': attribute type 15 has an invalid length. [ 513.744469][ T9375] netlink: 'syz.3.1527': attribute type 1 has an invalid length. [ 514.057950][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 515.272124][ T9396] loop2: detected capacity change from 0 to 128 [ 517.393714][ T9396] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 517.503221][ T9396] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 517.711904][ T9432] device veth0_vlan left promiscuous mode [ 517.713855][ T9432] device veth0_vlan entered promiscuous mode [ 517.721406][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 517.730906][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 517.879900][ T9438] loop3: detected capacity change from 0 to 512 [ 517.896810][ T9438] EXT4-fs (loop3): Ignoring removed bh option [ 517.898405][ T9438] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 517.913468][ T9438] EXT4-fs (loop3): Test dummy encryption mode enabled [ 517.941374][ T9438] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 517.948366][ T9438] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1554: attempt to clear invalid blocks 2 len 1 [ 517.958545][ T9438] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 517.969549][ T9438] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1554: invalid indirect mapped block 1819239214 (level 0) [ 517.976080][ T9438] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1554: invalid indirect mapped block 1819239214 (level 1) [ 517.988475][ T9438] EXT4-fs (loop3): 1 truncate cleaned up [ 517.989959][ T9438] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,bh,mblk_io_submit,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 518.074728][ T9435] netlink: 1096 bytes leftover after parsing attributes in process `syz.3.1554'. [ 518.278361][ T9457] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 518.731469][ T4350] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 518.877239][ T9472] loop4: detected capacity change from 0 to 512 [ 518.885342][ T9468] syz.1.1563 (9468): drop_caches: 2 [ 518.886809][ T9468] syz.1.1563 (9468): drop_caches: 2 [ 519.300566][ T9484] netlink: 1096 bytes leftover after parsing attributes in process `syz.0.1569'. [ 519.407635][ T9472] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 519.729116][ T9499] syz.0.1577 (9499): drop_caches: 2 [ 519.729335][ T9499] syz.0.1577 (9499): drop_caches: 2 [ 519.979816][ T9508] netlink: 1096 bytes leftover after parsing attributes in process `syz.0.1581'. [ 520.220438][ T9518] loop4: detected capacity change from 0 to 1024 [ 520.605062][ T9527] loop3: detected capacity change from 0 to 256 [ 520.916296][ T9514] loop2: detected capacity change from 0 to 32768 [ 521.015112][ T9533] syz.1.1591 (9533): drop_caches: 2 [ 521.018019][ T9533] syz.1.1591 (9533): drop_caches: 2 [ 521.028105][ T9514] JBD2: Ignoring recovery information on journal [ 521.029564][ T9514] JBD2: corrupted journal superblock [ 521.031278][ T9514] JBD2: error -117 scanning journal [ 521.032541][ T9514] (syz.2.1583,9514,0):ocfs2_journal_wipe:1132 ERROR: status = -117 [ 521.034331][ T9514] (syz.2.1583,9514,0):ocfs2_check_volume:2416 ERROR: status = -117 [ 521.045420][ T9514] (syz.2.1583,9514,0):ocfs2_check_volume:2485 ERROR: status = -117 [ 521.049751][ T9514] (syz.2.1583,9514,0):ocfs2_mount_volume:1824 ERROR: status = -117 [ 521.073765][ T9514] (syz.2.1583,9514,0):ocfs2_fill_super:1177 ERROR: status = -117 [ 521.146276][ T9540] netlink: 1096 bytes leftover after parsing attributes in process `syz.0.1592'. [ 521.347913][ T9545] loop2: detected capacity change from 0 to 128 [ 522.110727][ T9545] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 522.166466][ T9545] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 522.293546][ T9564] device veth0_vlan left promiscuous mode [ 522.295696][ T9564] device veth0_vlan entered promiscuous mode [ 522.320192][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 522.322793][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 522.329949][ T9563] loop4: detected capacity change from 0 to 2048 [ 522.439011][ T9568] loop3: detected capacity change from 0 to 1024 [ 522.446749][ T9563] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1602: bad orphan inode 8192 [ 522.449702][ T9563] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 522.639058][ T9579] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1610'. [ 522.686286][ T9577] netlink: 'syz.1.1609': attribute type 1 has an invalid length. [ 522.686339][ T9577] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1609'. [ 522.932937][ T9584] syz.2.1606 (9584): drop_caches: 2 [ 522.937322][ T9589] netlink: 'syz.4.1608': attribute type 1 has an invalid length. [ 522.939793][ T9584] syz.2.1606 (9584): drop_caches: 2 [ 523.026297][ T9593] loop4: detected capacity change from 0 to 256 [ 523.091550][ T9597] loop2: detected capacity change from 0 to 128 [ 523.139420][ T9597] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 523.162842][ T9597] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 523.531482][ T9593] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 523.672527][ T9607] device veth0_vlan left promiscuous mode [ 523.674577][ T9607] device veth0_vlan entered promiscuous mode [ 523.677030][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 523.680478][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.198430][ T9642] loop4: detected capacity change from 0 to 2048 [ 525.257686][ T9642] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 525.276085][ T9642] UDF-fs: unknown compression code (0) [ 525.389993][ T9657] xt_time: unknown flags 0x18 [ 526.171159][ T9647] loop3: detected capacity change from 0 to 32768 [ 526.208418][ T9662] tunl0 speed is unknown, defaulting to 1000 [ 526.448176][ T9647] (syz.3.1635,9647,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 526.451592][ T9647] (syz.3.1635,9647,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 526.461150][ T9674] loop2: detected capacity change from 0 to 128 [ 526.493257][ T9674] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 526.508372][ T9647] JBD2: Ignoring recovery information on journal [ 526.727755][ T9674] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 526.739841][ T9674] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.1646: checksumming directory block 0 [ 526.802536][ T9647] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 527.017612][ T9647] (syz.3.1635,9647,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x5b86c303. Applying ECC. [ 527.039396][ T9647] (syz.3.1635,9647,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x4bf4182b [ 527.043142][ T9647] (syz.3.1635,9647,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 527.050271][ T9647] (syz.3.1635,9647,0):ocfs2_quota_read:201 ERROR: status = -5 [ 527.052334][ T9647] Quota error (device loop3): find_block_dqentry: Can't read quota tree block 6 [ 527.062723][ T9647] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 527.062789][ T9647] (syz.3.1635,9647,0):ocfs2_acquire_dquot:873 ERROR: status = -5 [ 527.062983][ T9647] (syz.3.1635,9647,0):ocfs2_mknod:312 ERROR: status = -5 [ 527.063018][ T9647] (syz.3.1635,9647,0):ocfs2_mknod:500 ERROR: status = -5 [ 527.063082][ T9647] (syz.3.1635,9647,0):ocfs2_create:674 ERROR: status = -5 [ 527.188450][ T4030] ocfs2: Unmounting device (7,3) on (node local) [ 527.199510][ T4030] VFS: Busy inodes after unmount of loop3. Self-destruct in 5 seconds. Have a nice day... [ 533.145117][ T4350] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)