last executing test programs: 3m29.240090705s ago: executing program 3 (id=8753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pselect6(0x40, &(0x7f0000000080)={0x6, 0x9, 0x0, 0x2, 0x81, 0x8, 0x0, 0x5}, &(0x7f00000000c0)={0x1, 0x0, 0x8, 0x3, 0x8, 0x7, 0x0, 0xfffffffffffffff8}, 0x0, &(0x7f0000000180)={0x77359400}, 0x0) 3m29.065835855s ago: executing program 3 (id=8755): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000006c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_winnt}, {@shortname_win95}, {@shortname_mixed}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@uid}, {@shortname_winnt}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@shortname_mixed}, {@fat=@nfs_nostale_ro}]}, 0x1, 0x26c, &(0x7f0000000340)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x0, 0xc6) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000100)) 3m28.484652601s ago: executing program 3 (id=8758): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000340)={[{@nls={'nls', 0x3d, 'cp866'}}, {}, {@uid}, {@force}, {@nobarrier}, {@part={'part', 0x3d, 0x6}}]}, 0x20, 0x6de, &(0x7f0000001f80)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 3m27.547790584s ago: executing program 3 (id=8765): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x840, &(0x7f0000001640)=ANY=[@ANYBLOB='iocharset=maciceland,time_offset=0x0000000000000009,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000002000,dmask=0000000000000000004,fmask=00000000000000000000002,namecase=1,keep_last_dots,iocharset=cp932,keep_last_dots,\x00'], 0x1, 0x152c, &(0x7f0000001f80)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x12) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x10040, 0x0) 3m26.655138935s ago: executing program 3 (id=8774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a0f0400000000000000000a00fffd0900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000140000000010900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 3m26.02793888s ago: executing program 3 (id=8779): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000003"], 0x8) 3m24.386005851s ago: executing program 32 (id=8779): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000003"], 0x8) 2m50.400207855s ago: executing program 2 (id=8942): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x242, 0x18e) ftruncate(r0, 0x2) 2m49.111982325s ago: executing program 2 (id=8948): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0xff08, 0x0) 2m48.270547391s ago: executing program 2 (id=8955): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x23b) 2m47.68097907s ago: executing program 2 (id=8959): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000037c0)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x88000, 0x0) 2m46.592049744s ago: executing program 2 (id=8961): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB='\"'], 0x33) close(r0) 2m45.872245796s ago: executing program 2 (id=8966): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 2m42.47643077s ago: executing program 33 (id=8966): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 1m42.988841001s ago: executing program 5 (id=9302): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000019e40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f00000006c0)=""/55, 0x37}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000500)=""/162, 0xa2}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000000100)=""/62, 0x3e}], 0xa}, 0xe}], 0x1, 0x40000000, 0x0) 1m42.192943958s ago: executing program 5 (id=9308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) readv(r0, &(0x7f0000000140), 0x62) 1m41.418483206s ago: executing program 5 (id=9309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}], {0x14}}, 0xa0}}, 0x0) 1m40.847959222s ago: executing program 5 (id=9313): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nojournal_checksum}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x472, &(0x7f0000000900)="$eJzs28uPFMUfAPBvzz54/3Z/iA8QdRQfGx+77ILKwQtGEy4mJnqA47osBBlYw66JECKrBzwa/gL1aOJf4EkuRj1pvOrdmBDDRfRA2vRMzzDOy9nZHQaYzyfpnaru6un6dnfNVlfNBDC0itmfJGJ7RPwSERMRMdJYoFh5uXH94sJf1y8uJJGmb/2RZLvFn9cvLlSLJvnrtjwzVaitarJ8/sLp+VJp8Vyen1k5897M8vkLL5w6M39y8eTi2blDhw4emH35pbkXNyTOHVld93y4tHf3kWNX3lg4euWd77/KKrc9314fR8Xkuo9ZjGLbE/DUut/9zrIjf217wbkjZW19NCLGyu1/IkbKuYqJeP3jgVYO6Ks0TdNNTWtrPYDVFLiHJTHoGgCDUf1Hnz3/Vpfb2P0YuGuHKw9AWdw38qWyZTQKeZmxuufbjVaMiKOrf3+WLdFyHAIAYGN9k/V/nm/V/yvEA3Xl/pfPDU1GxP8jYmdE3BcRuyLi/kjKZR+MiIfWePxiQ765//PTlp4C69K1w5G8ks9t/bv/V+39xeRInttRjn8sOXGqtLg/PydTMbYpy892OMbV137+tN22+v5ftmTHr/YF83r8PtowQHd8fmV+PTHXu/ZReQzwUnP8SW0mIImI3RGxp4f33xwRp579cm/ThrqJos7xdzDaQ4UapF9EPFO5/qvREH99VTvMT85sjtLi/pnqXdHshx8vv9nu+P99/W85tgHxNsqu/9aW938t/smkfr52ee3HuPzrJ22faXq9/8eTt8vp8XzdB/MrK+dmI8aT1eb1c7f2rear5bP4p/a1bv87I25+nu/3cERkN/EjEfFoRDyW1/3xiHgiIvZ1iP+7V598t/f4+yuL//iarv/aEyOnv/263fG7u/4Hy6mpfE03n3/dVnA95w4AAADuFoXyd+CTwnQtXShMT1e+w78rthZKS8srz51Yev/s8cp35SdjrFAd6ZqoGw+dzceGq/m5hvyB8rhxmqbplnJ+emGp1K85daA729q0/8xvI4OuHdB3a5pX8gsvuKf0YV4ZuEto/zC8tH8YXto/DK9W7f9SxI0BVAW4zfz/h+Gl/cPw0v5heGn/MJTW87v+TomdR/r1zndj4mpEtCszMtAaPr2t192jMOiz2jIxHhFNm8byu722pnAnVLWa2BQR3Ra+FFniZpqm/a5Y58+NrbfjwwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAD/BMAAP//yWDnSQ==") mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0\x00') 1m39.537222903s ago: executing program 5 (id=9322): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) 1m38.574784536s ago: executing program 5 (id=9329): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000300)='./bus\x00', 0x800, &(0x7f0000000340)={[{@allow_utime={'allow_utime', 0x3d, 0x80000001}}, {@umask={'umask', 0x3d, 0x2}}, {@time_offset={'time_offset', 0x3d, 0x9}}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@namecase}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@errors_remount}]}, 0x1, 0x1539, &(0x7f0000002ec0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40880, 0x20) getdents64(r0, &(0x7f0000000080)=""/151, 0x97) 1m37.122181416s ago: executing program 34 (id=9329): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000300)='./bus\x00', 0x800, &(0x7f0000000340)={[{@allow_utime={'allow_utime', 0x3d, 0x80000001}}, {@umask={'umask', 0x3d, 0x2}}, {@time_offset={'time_offset', 0x3d, 0x9}}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@namecase}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@errors_remount}]}, 0x1, 0x1539, &(0x7f0000002ec0)="$eJzs3AucTtX6OPDnWWvtMSbxNsllWGs9mze5LJMkuSTJJUmSJMktIUlyJCExhCQNSUguQxJDSC4T0rjf75eEJkmTJCEhXdb/MzE/p1Pn3sn5n3m+n8/+zHrevZ+1197Pe9l7zft5v+w+vHbTOjUaExH8W/D8nyQAiAWAwQCQDwACAKgQXyE+a31uiUn/3k7Y7+ve1Es9AnYpcf1zNq5/zsb1z9m4/jkb1z9n4/rnbFz/nI3rz1hOtnVG4St4ybnL7zP/L/6vxfP//z/hz///IZllx3+6vuxVPQBi/tEUrn/OxvX/nxX8Ixtx/XM2rn9OFXupB8D+C/DrPyfI9VfXcP1zNq4/YznZpZ5/vtQLRP7LzsGx3OcL83+PBf/Z42eMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxv4AZ/1FCgCy25d6XIwxxhhjjDHGGPv9+FyXegSMMcYYY4wxxhj7z0MQIEFBADGQC2IhN8SBAIDLIS/kgwhcAfFwJeSHq6AAFIRCUBgSoAgUBQ0GLBCEUAyKQxSuhhJwDZSEUlAayoCDspAI10I5uA7Kw/VQAW6AinAjVILKUAWqwk1QDW6G6nAL1IBboSbUgtpQB26DunA71IM7oD7cCQ3gLmgId0MjuAcaw73QBO6DpnA/NIMHoDm0gJbQClr/S/lPQ294BvpAX0iCftAfnoUBMBAGwXMwGJ6HIfACDIUXIRmGwXB4CUbAyzASXoFRMBrGwKswFl6DcTAeJsBESIFJMBlehynwBkyFN2EaTIdUmAEz4S2YBbNhDrwNc+EdmAfzYQEshDR4FxbBYlgC78FSeB/SYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHHbATdsFu+AD2wIewF/bBfvgIMuDjv52fO7vG2fln/iK/BwICChSoUGEMxmAsxmIcxmEezIN5MS9GMILxGI/5MT8WwAJYCAthAiZgUSyKBg0SEhbDYhjFKJbAElgSS2JpLI0OHSZiIpbD67A8lscKWAErYkWshJWxMlbFqlgNq2F1rI41sAbWxJpYG2vjbXgb9sN6WA/rY31sgA2yp6ewMTbGJtgEm2JTbIbNsDk2x5bYEltja2yDbbAttsX22B47YAfsiB2xE3bCztgZu2AX7IpdsRt2w+7YHXtgT+yZ+XQuwGfwGeyLNUU/7I/9cQAm5xqEz+Fz+DwOwRfwBXwRk3EYDseX8CV8GUfiaRyFo3EMjsFq4jUch+ORxERMwRScjJNxCk7BrIG+idMxFWfgTJyJs3A2zsa3cS6+g+/gfJyPCzEN03ARLsYluASX4hlMx2W4HFfgSlyFK3ENrsU1uB434HrchJtwC27BbbgNd+AO3IW78ANUAPgh7sN9mIwZmIEH8AAexIN4CA9hJmbiYTyMR/AIHsWjeAyP4XE8gSfxBJ7CU3gaz6CX50/oD/hkwudNPii1LhlEFiWUiBExIlbEijgRJ/KIPCKvyCsiIiLiRbzIL/KLAqKAKCQKiQSRIIqKosIII0iEMQAgoiIqSogSoqQoKUqL0sIJJxJFoignyonyoryoIG4QFcWNopKoLNq5qqKqqCbau+riFlFD1BA1RS1RW9QRdURdUVfUE/Vi64v6ooFoIBqKu0Uj0Q8H4b0iqzJNxTBsJoZjc9FCXDgUaCNGYlvRTrQXD4vROAo7ijauk3hMdBbjsIv4kxiPT4huYiJ2F0+JHqKn6CWeFr1F20J9RF8xFfuJ/mI6DhADxSDxnJiFtcTbODd3bfGiSBbDxHDxkliIL4uR4hUxSowWY8SrYqx4TYwT48UEMVGkiElisnhdTBFviKniTTFNTBepYoaYKd4Ss8RsMUe8LeaKd8Q8MV8sEAtFmnhXLBKLxRLxnlgq3hfpYplYLlaIlWKVWC3WiLVinVgvNoiNYpPYLLaIrWKb2C52iJ1il9gtPhB7xIdir9gn9ouPRIb4WBwQn4iD4lNxSHwmMsXn4rD4QhwRX4qj4itxTHwtjosT4qT4RpwS34rT4ow4K74T58T34gfxo/hJeAESpZBSKhnIGJlLxsrcMk5eJvPI4MLZvULGyytlfnmVLCALykKysEyQRWRRqaWRVpIMZTFZXEbl1bKEvEaWlKVkaVlGOllWJsprZTl5nSwvr5cV5A2yorxRVpKVZRVZVd4kq8mbJUTO76OmrCVryzryNpkEt8t68g5ZX94pG8i7ZEN5t2wk75GN5b2yibxPNpX3y2byAdlctpAtZSvZWj4o28iHZFvZTraXD8sO8hHZUT4qO8nHZGeZ/Wx/QnaTT8ru8inZQ/aUveSP8ifpZR/ZV0I/kP3ls3KAHCgHxQKAfF4OkS/IofJFmSyHyeHyJTlCvixHylfkKDlajpGvyrHyNTlOjpcT5ESZIifJyfJ1OUW+IafKN+U0OV2myhlykBz8c09zpPy7+a//Rv7Qn/e+RW6V2+R2uUPulLvkbvmB3CP3yL1yr9wv98sMmSEPyAPyoDwoD8lDMlNmysPysDwij8ij8qjMgGPyuDwhv5PfyFPyW3lanpFn5HfynDwnf7hwDkChEkoqpQIVo3KpWJVbxanLVB51ucqr8qmIukLFqytVfnWVKqAKqkKqsEpQRVRRpZVRVpEKVTFVXEXV1XjhCaNKqzLKqbIqUV37z+SrEuoaVVKV+kV+9viS/sr4WqvWqo1qo9qqtqq9aq86qA6qo+qoOqlOqrPqrLqoLqqr6qq6qW6qu+queqgeqpfqpXqr3qqP6qOSVFL224gapJ5Tg9XzaogaooaqoSpZJavhargaoUaokWqkGqVGqTFqjBqrxqpxapyaoCaoFJWiJqvJaoqaoqaqqWqamqZSVaqaqWaqWWqWmqPmqLlqrpqn5qkFaoFKU2lqkVqklpzz3qulKl0tU8vUCrVCrVKr1Bq1Rq1T69QGtUFtUptUutqqtqrtarvaqXaq3Wq32qP2qL1qr9qv9qsMlaEOqAPqoDqoDqlDKlNlqsPqsDqijqij6qg6po6p4+q4OqlOqlPqlDqtTquz6qw6p86pH9QP6if1U9ZlXyACEahABTFBTBAbxAZxQVyQJ8gT5A3yBpEgEsQH8UH+4KqgQFAwKBQUDhKCIkHRQAcmsIG4cPKiwdVBieCaoGRQKigdlAlcUDZIDK4NygXXBeWD64MKwQ1BxeDGoFJQOagSVA1uCqoFNwfVg1uCGsGtQc2gVlA7qBPcFtQNbg/qBXcE9YM7gwbBXUHD4O6gUXBP0Di4N2gS3Bc0De4PmgUPBM2DFkHLoFXQ+nft3/vTBR9yfXRfnaT76f76WT1AD9SD9HN6sH5eD9Ev6KH6RZ2sh+nh+iU9Qr+sR+pX9Cg9Wo/Rr+qx+jU9To/XE/REnaIn6cn6dT1Fv6Gn6jf1ND1dp+oZeqZ+S8/Ss/Uc/baeq9/R8/R8vUAv1Gn6Xb1IL9ZL9Ht6qX5fp+tlerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbXq73qF36l16t/5A79Ef6r16n96vP9IZ+mN9QH+iD+pP9SH9mc7Un+vD+gt9RH+pj+qv9DH9tT6uT+iT+ht9Sn+rT+sz+qz+Tp/TsReq6bMu7rM+3o0yysSYGBNrYk2ciTN5TB6T1+Q1ERMx8Sbe5Df5TQFTwBQyhUyCSTBFTVGThQyZYqaYiZqoKWFKmJKmpCltShtnnEk0iaacKWfKm/KmgqlgKpqKppKpZKqYKuYmc5O52dxsbjG3mFvNraaWqWXqmDqmrqlr6pl6pr6pbxqYBqahaWgamUamsWlsmpgmpqlpapqZZqa5aW5ampamtWlt2pg2pq1pa9qb9qaD6WA6Gu9/+vnbzZ1NF9PFdDVdTTfTzXQ33U0P08P0Mr1Mb9Pb9DF9TJJJMv1NfzPADDCDzCAz2Aw2Q8wQM9QMNckm2Qw3w80IM8KMNCPNKDPajMm6UDWvmXFmvJlgJpoUk2Imm8lmiplippqpZpqZZlJNqplpZppZZpaZY+aYuWaumWfmmQVmgUkzaWaRWWSWmCVmqVlq0k26WW6Wm5VmpVltVpu1Zq1Zb9abjbDRbDabzVaz1Ww3281Os9PsNrvNHrPH7DV7zX6z32SYDHPAHDAHzUFzyBwymSbTHDaHzRFzxBw1R80xc8wcN8fNSXPSnDKnzGlz2pw1Z805U/DCe6E3sTa3jbOX2Tz2cpvX5rN/GReyhW2CLWKLWm0L2IK/iI21tqQtZUvbMtbZsjbRXvuruJKtbKvYqvYmW83ebKv/Kq5rb7f17B22vr3T1rG3/SJuYO+yDe39thEigG1hm9hWtqm93zazD9jmtoVtaVvZDvYR29E+ajvZx2xn+/iv4kV2sV1r19n1doPda/fZs/Y7e8R+ac/Z720f29cOts/bIfYFO9S+aJPtsF/FY+yrdqx9zY6z4+0EO/FX8TQ73abaGXamfcvOsrN/FafZd+1cu8TOs/PtArvw5zhrTEvse3apfd+m2wCW2xV2pV1lV9s12WP1+ewmu9lusXvsh3a73WF32l12d/YnmN1n99uPbIb92B62X9iD9lN7yB61mfbzn+Os4ztqv7LH7Nf2uD1hT9pv7Cn7rcrOzjr2b+yP9ifrLRASkCRFAcVQLoql3BRHl1EeupzyUj6K0BUUT1dSfrqKClBBKkSFKYGKUFHSZMgSUUjFqDhF6WrKHl5pKkOOylIiXUvl6DoqT9dTBbqBKtKNVIkqUxWqSjdRNbqZqtMtVINupZpUi2pTHbqN6tLtVI/uoPp0JzWgu6gh3U2N6B5qTPdSE7qPmtL91IweoObUglpSK2pND1IbeojaUjtqTw9TB3qEOtKj1Ikeo870OHWhP1FXeoK60ZPUnZ6iHtSTetHT1JueoT7Ul5KoH/WnZ2kADaRB9BwNpudpCL1AQ+lFSqZhNJxeohH0Mo2kV2gUjaYx9CqNpddoHI2nCTSRUmgSTabXaQq9QVPpTZpG0ymVZtBMeotm0WyaQ2/TXHqH5tF8WkALKY3epUW0mJbQe7SU3qd0WkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kXbSbPqA99CHtpX20nz6iDPqYDtAndJA+pUP0GWXS53SYvqAj9CUdpa98X/qajtMJOknf0Cn6lk5TxuXnK/Q9/UA/0k/kCUIMRShDFQZhTJgrjA1zh3HhZWGe8PIwb5gvjIRXhPHhlWH+8KqwQFgwLBQWDhPCImHRUIcmtCGFYVgsLB5Gw6vDEuE1YcmwVFg6LBO6sGyYGF4blguvC8uH14cVwhvCiuGNYaWwcnj/nVXDm8Jq4c1h9fCWsEZ4a1gzrBXWDuuEt4V1w9vDeuEdYf3wzrB8eFfYMLw7bBTeEzYO7w2bhPeFTcP7w2bhA2HzsEXYMmwVtg4fDNuED4Vtw3Zh+/DhsEP4SNgxfDTsFD4Wdg4f/3n9XYv/+vqksF/YP3w2fDb0/g65ILowmhZ9N7oouji6JPpedGn0/Wh6dFl0eXRFdGV0VXR1dE10bXRddH10Q3RjdFN0c3RL1Ps6ucChE0465QIX43K5WJfbxbnLXB53ucvr8rmIu8LFuytdfneVK+AKukKusEtwRVxRp51x1pELXTFX3EXd1a6Eu8aVdKVcaVfGOVfWJbpWrrVr7dq4h1xb1861dw+7h90j7hH3qHvUPeY6u8ddF/cn19U94bq5J92T7inXw/V0vdzTrreblPd8xZNcf9ffDXAD3CA3yA12g90QN8QNdUNdskt2w91wN8KNcCPdSDfKjXJj3Bg31o1149w4N8FNcCkuxU12k90UN8VNdVPdNDfNpbpUN9PNdLPcLFdt9vm9zHPz3AK3wKW5NLfIZV0zLnFL3VKX7tLdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O91ut9vtcXvcXp/vfKcuwx1wB9xBd9Adcp+5TPe5O+y+cEfcl+6o+8odc1+74+6EO+m+cafct+60O+POuu/cOfe9+8H96H5y3qVEJkUmR16PTIm8EZkaeTMyLTI9khqZEZkZeSsyKzI7MifydmRu5J3IvMj8yILIwkha5N3IosjiyJLIe5Glkfcj6ZFlkeWRFZGVkVUR74tsD30xX9xH/dW+hL/Gl/SlfGlfxjtf1if6a305f50v76/3FfwNvqK/0VfylX0V/4Bv7lv4lr6Vb+0f9G38Q76tb+fb+4d9B/+I7+gf9Z38Y76zf9x38X/yXf0Tvpt/0nf3T/kevqfv5Z/2vf0zvo/v65N8P9/fP+sH+IF+kH/OD/bP+yH+BT/Uv+iT/TA/3L/kR/iX/Uj/ih/lR/sxMa/6sdm3yDDRp/hJfrJ/3U/xb/ip/k0/zU/3qX6Gn+nf8rP8bD/Hv+3n+nf8PD/fL/ALfZp/1y/yi/0S/55f6t/36X5Z9oSjX+3X+LV+nV/vN/iNfpPf7Lf4rX6b3+53+J1+l9/tP/B7/Id+r9/n9/uPfIb/2B/wn/iD/lN/yH/mM/3n/rD/wh/xX/qj/it/zH/tj/sT/qT/xp/y3/rT/ow/67/z5/z3/gf/48/Xdf/S9DdjjDHGWA4z6WJT/HLN+en8fr+RI/5s4/4AcPmOwpkX1+aCrCvKjQXORwNFQocIADzWt/u92UvNmklJSRe2TpcQFJ8PkP2foCwxcDFeBu3hEegE7aDcb45/oOh5jv5O/9EbAOL+LCcWLsYX+/8EAJN+o/8HHx6zqGJ4Nv5v9D8foGTxizm54WK8DNr/PL/SDsr/lfEXbPN3xp/70xSAtn+WkwcuxhfHnwgPwePQ6Rdb/oavskt14Yce+v7tzRljjDHGGGOM/W8YKKp0zb7/zP7G52/dnyeoizm54GL89+7PGWOMMcYYY4wxduk90bPXow926tSu6z/fqP4vZf3DjWbwn+qZG7/Z8B4g+xEFAP9mhwBZDflHHsW2P2RfyRdeOn+5auV3PoD/jlL+Ho1L/MbEGGOMMcYY+91dvOj/5ePqUg2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLgf6InxO71MfIGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMXWr/LwAA///nZAAJ") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40880, 0x20) getdents64(r0, &(0x7f0000000080)=""/151, 0x97) 16.66328002s ago: executing program 1 (id=9826): r0 = syz_open_dev$loop(&(0x7f0000000800), 0x7fffffffffffffff, 0x20000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x8, 0x57, 0x1, 0xfffffffffffffffc, 0x5}) 16.056487395s ago: executing program 1 (id=9832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xd}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040842}, 0x0) 15.551736805s ago: executing program 1 (id=9834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 15.12220878s ago: executing program 1 (id=9839): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB='errors=continue,namecase=1,iocharset=none,errors=continue,fmask=00000000000000000000011,iocharset=cp950,gid=', @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000127435,gid=', @ANYRES64, @ANYBLOB=',\x00'], 0x5, 0x1510, &(0x7f0000000240)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 14.208836899s ago: executing program 1 (id=9844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000005900)='./file0\x00', 0x1, &(0x7f0000000180)={[{@shared_inode_numbers}, {@data_checksum={'data_checksum', 0x3d, 'crc32c'}}, {@direct_io}, {@no_data_io}, {@journal_flush_disabled}, {@recovery_pass_last={'recovery_pass_last', 0x3d, 'check_topology'}}, {@no_splitbrain_check}, {@compression={'compression', 0x3d, 'lz4'}}, {@shared_inode_numbers}, {@background_compression={'background_compression', 0x3d, 'gzip'}}, {@wide_macs}], [{@permit_directio}]}, 0x81, 0x58da, &(0x7f000000b200)="$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") 13.411537881s ago: executing program 1 (id=9851): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3a, 0xb763599953cb091d, {0x8, 0x6fd8e84b}, 0x3, 0xed}}) 11.726388147s ago: executing program 35 (id=9851): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3a, 0xb763599953cb091d, {0x8, 0x6fd8e84b}, 0x3, 0xed}}) 6.412148791s ago: executing program 7 (id=9878): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000001240)='ext4_writepages_result\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") 5.540880292s ago: executing program 7 (id=9881): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="c54bf6a98a", 0x5}], 0x1}}], 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, &(0x7f0000000300)) 5.025268989s ago: executing program 4 (id=9884): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 4.861691908s ago: executing program 6 (id=9885): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) 4.847438105s ago: executing program 7 (id=9886): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nojournal_checksum}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) fallocate(r0, 0x8, 0x3f00, 0x4000) 4.159001381s ago: executing program 4 (id=9888): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x80) listen(r0, 0x80000001) 3.362911278s ago: executing program 6 (id=9890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000610800024000000003080006400000000208000740000000080900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) 3.360962109s ago: executing program 4 (id=9891): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x3, 0x10fff9) lseek(r0, 0x802, 0x3) 3.305550702s ago: executing program 7 (id=9892): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x28, {0x5, 0xfffffffffffffff7}}, 0x513300) 3.287085472s ago: executing program 0 (id=9893): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 2.931260953s ago: executing program 0 (id=9894): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r1, 0x1, 0xffffff84, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) 2.698585822s ago: executing program 6 (id=9895): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a) 2.533339937s ago: executing program 4 (id=9896): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0x1003, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 2.38965378s ago: executing program 7 (id=9897): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) 2.304309978s ago: executing program 0 (id=9898): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@getlink={0x20, 0x12, 0x18efde40b3708357, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x58cd}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.936732726s ago: executing program 7 (id=9899): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) 1.93474515s ago: executing program 6 (id=9908): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) 1.91558031s ago: executing program 0 (id=9900): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/10, 0xa}, 0x2) 1.81475396s ago: executing program 4 (id=9901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 1.032584719s ago: executing program 6 (id=9902): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000140)=0x3, 0x4) getsockopt$MRT6(r0, 0x29, 0xcf, 0xffffffffffffffff, 0x0) 800.449697ms ago: executing program 0 (id=9903): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setsig(r0, 0xa, 0x2c) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 295.128841ms ago: executing program 6 (id=9904): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) 20.053078ms ago: executing program 4 (id=9905): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x7d}], 0x1) 0s ago: executing program 0 (id=9906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x0, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) kernel console output (not intermixed with test programs): g=0 arch=c000003e syscall=91 compat=0 ip=0x7f298318ebe9 code=0x7ffc0000 [ 1154.124329][ T30] audit: type=1326 audit(1756617685.035:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24180 comm="syz.2.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298318ebe9 code=0x7ffc0000 [ 1154.147240][ T30] audit: type=1326 audit(1756617685.035:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24180 comm="syz.2.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298318ebe9 code=0x7ffc0000 [ 1156.131356][T24234] loop2: detected capacity change from 0 to 2048 [ 1156.173148][T24234] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27485, location=27485 [ 1156.223683][T24234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1157.008674][T24264] loop1: detected capacity change from 0 to 512 [ 1157.178939][T24264] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8423: bg 0: block 393: padding at end of block bitmap is not set [ 1157.243946][T24264] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1157.336261][T24264] EXT4-fs (loop1): 2 truncates cleaned up [ 1157.347644][T24264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.580832][T24264] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.8423: Logical block already allocated [ 1157.950757][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.072064][T24287] loop2: detected capacity change from 0 to 1024 [ 1158.281790][T24287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1158.305450][T24287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.883664][T24315] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8439'. [ 1158.944434][T24316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8441'. [ 1159.045838][T24321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8440'. [ 1159.638015][T24336] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 1159.648953][T24336] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1160.575999][T24358] loop2: detected capacity change from 0 to 2048 [ 1160.643247][T24365] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1160.765532][ T30] audit: type=1800 audit(1756617691.705:134): pid=24358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8456" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 1160.772107][T24358] NILFS (loop2): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 1160.797021][T24358] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1160.843196][T24358] Remounting filesystem read-only [ 1160.848385][T24358] NILFS (loop2): error -5 truncating bmap (ino=16) [ 1161.125331][T24376] overlayfs: missing 'workdir' [ 1161.194658][ T5816] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 1161.742192][T24390] netlink: 'syz.3.8467': attribute type 10 has an invalid length. [ 1161.750430][T24390] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8467'. [ 1162.588047][ T1614] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1162.793704][ T1614] usb 5-1: Using ep0 maxpacket: 32 [ 1162.811292][ T1614] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1162.820221][ T1614] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1162.829254][ T1614] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.839693][ T1614] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1162.850772][ T1614] usb 5-1: config 1 has no interface number 0 [ 1162.857215][ T1614] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1162.866588][ T1614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.083939][ T1614] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1163.292541][ T1614] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 1163.303053][ T1614] snd_usb_pod 5-1:1.1: invalid control EP [ 1163.308966][ T1614] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1163.316004][ T1614] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1163.325636][ T1614] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1163.522085][ T1614] usb 5-1: USB disconnect, device number 26 [ 1163.708692][T24444] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1164.208127][T24458] loop1: detected capacity change from 0 to 64 [ 1166.049411][T24508] netlink: 'syz.2.8505': attribute type 32 has an invalid length. [ 1167.574096][T24549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8520'. [ 1168.024654][T24558] tmpfs: Bad value for 'mpol' [ 1168.843753][T24581] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8532'. [ 1169.387304][T24595] ip6gre1: entered allmulticast mode [ 1170.543944][T24629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8550'. [ 1171.028660][T24642] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1171.506743][ T1614] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1171.701632][T24663] netlink: 'syz.0.8562': attribute type 6 has an invalid length. [ 1171.710166][T24663] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.8562'. [ 1171.796555][ T1614] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1171.806128][ T1614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.814633][ T1614] usb 4-1: Product: syz [ 1171.818960][ T1614] usb 4-1: Manufacturer: syz [ 1171.825029][ T1614] usb 4-1: SerialNumber: syz [ 1171.970183][ T1614] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1172.039875][T24670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8563'. [ 1172.046280][T17074] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1172.049346][T24670] netlink: 'syz.4.8563': attribute type 1 has an invalid length. [ 1172.608394][ T1614] usb 4-1: USB disconnect, device number 27 [ 1172.728235][T24682] netlink: 'syz.2.8566': attribute type 1 has an invalid length. [ 1173.152997][T17074] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1173.166438][T17074] ath9k_htc: Failed to initialize the device [ 1173.232993][ T1614] usb 4-1: ath9k_htc: USB layer deinitialized [ 1173.250728][T24693] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1173.586050][T24706] netlink: 'syz.3.8575': attribute type 1 has an invalid length. [ 1173.594239][T24706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8575'. [ 1174.533103][ T1614] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1174.725741][ T1614] usb 3-1: Using ep0 maxpacket: 8 [ 1174.764716][ T1614] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.843590][ T1614] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1174.853341][ T1614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.861910][ T1614] usb 3-1: Product: syz [ 1174.866441][ T1614] usb 3-1: Manufacturer: syz [ 1174.871204][ T1614] usb 3-1: SerialNumber: syz [ 1174.956244][ T1614] usb 3-1: config 0 descriptor?? [ 1175.021299][ T1614] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1175.029530][ T1614] usb 3-1: selecting invalid altsetting 1 [ 1175.226369][ T1614] gspca_stk014: init reg: 0x00 [ 1175.231541][ T1614] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 1175.430088][T17308] usb 3-1: USB disconnect, device number 29 [ 1175.703076][ T1614] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1175.899472][ T1614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1175.910511][ T1614] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1175.920761][ T1614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1175.930721][ T1614] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1175.970786][ T1614] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1175.981001][ T1614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.989502][ T1614] usb 4-1: Product: syz [ 1175.993951][ T1614] usb 4-1: Manufacturer: syz [ 1175.998728][ T1614] usb 4-1: SerialNumber: syz [ 1176.014529][ T1614] usb 4-1: config 0 descriptor?? [ 1176.046934][ T1614] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1176.093393][T24437] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1176.254221][T24437] usb 2-1: Using ep0 maxpacket: 32 [ 1176.296181][T24437] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1176.305719][T24437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.337879][ T1614] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1176.377423][T24437] usb 2-1: config 0 descriptor?? [ 1176.411641][T24437] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1176.451876][T24793] netlink: 'syz.2.8599': attribute type 5 has an invalid length. [ 1176.461045][T24793] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8599'. [ 1176.523244][T17308] usb 4-1: USB disconnect, device number 28 [ 1176.848354][T24437] gspca_nw80x: reg_r err -71 [ 1176.853460][T24437] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 1176.900855][T24437] usb 2-1: USB disconnect, device number 23 [ 1177.970580][T24837] loop1: detected capacity change from 0 to 512 [ 1178.066929][T24837] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1178.177670][T24837] EXT4-fs (loop1): 1 truncate cleaned up [ 1178.185710][T24837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1178.284883][T24833] loop2: detected capacity change from 0 to 4096 [ 1178.329140][T24837] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.8610: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 1178.367229][T24833] ntfs3(loop2): It is recommened to use chkdsk. [ 1178.448260][T24833] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 1178.456608][T24833] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 1178.464974][T24833] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 1178.473441][T24833] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 1178.481570][T24833] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00 [ 1178.490394][T24833] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00 [ 1178.498669][T24833] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00 [ 1178.503608][T24854] netdevsim netdevsim4 ªªªªªª: renamed from netdevsim0 [ 1178.506989][T24833] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00 [ 1178.521756][T24833] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00 [ 1178.604885][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.495750][T24875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8624'. [ 1179.505447][T24875] netlink: 'syz.3.8624': attribute type 1 has an invalid length. [ 1180.219131][T24897] netlink: 'syz.2.8631': attribute type 1 has an invalid length. [ 1181.001384][T24915] usb usb1: usbfs: process 24915 (syz.1.8638) did not claim interface 0 before use [ 1181.183086][T14667] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1181.520323][T24933] netlink: 'syz.1.8643': attribute type 5 has an invalid length. [ 1182.988868][T24971] loop3: detected capacity change from 0 to 2048 [ 1183.494155][T24971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1183.496149][T24971] ext4 filesystem being mounted at /1759/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.521286][T24971] EXT4-fs error (device loop3): __ext4_new_inode:1073: comm syz.3.8656: reserved inode found cleared - inode=1 [ 1183.629834][ T5815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.664213][T24437] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1183.863947][T24437] usb 2-1: Using ep0 maxpacket: 16 [ 1183.877826][T24437] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1183.891777][T24437] usb 2-1: config 2 has an invalid interface number: 139 but max is 0 [ 1183.900541][T24437] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.917572][T24437] usb 2-1: config 2 has no interface number 0 [ 1183.924170][T24437] usb 2-1: config 2 interface 139 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1183.941279][T24437] usb 2-1: config 2 interface 139 has no altsetting 0 [ 1184.074469][T24437] usb 2-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=81.f5 [ 1184.084466][T24437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.093423][T24437] usb 2-1: Product: syz [ 1184.097764][T24437] usb 2-1: Manufacturer: syz [ 1184.102531][T24437] usb 2-1: SerialNumber: syz [ 1184.337756][T17308] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1184.408494][T24437] cxacru 2-1:2.139: cxacru_bind: interface has incorrect endpoints [ 1184.419013][T24437] cxacru 2-1:2.139: usbatm_usb_probe: bind failed: -19! [ 1184.506962][T24437] usb 2-1: USB disconnect, device number 24 [ 1184.523703][T17308] usb 3-1: Using ep0 maxpacket: 8 [ 1184.563444][T17308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1184.607110][T17308] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1184.616923][T17308] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1184.626216][T17308] usb 3-1: Product: syz [ 1184.630537][T17308] usb 3-1: Manufacturer: syz [ 1184.635985][T17308] usb 3-1: SerialNumber: syz [ 1184.873880][T17308] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1184.888216][T17308] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1184.896506][T17308] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1184.904762][T17308] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1185.074427][T17308] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 1185.083384][T17308] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1185.133235][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1185.195160][T17308] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1185.274572][T17308] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1185.344907][T17308] usb 3-1: USB disconnect, device number 30 [ 1185.385143][T17308] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1185.525132][T17308] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1185.537577][T17308] visor 3-1:1.0: device disconnected [ 1185.936273][T25067] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8676'. [ 1185.945771][T25067] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8676'. [ 1185.955333][T25067] netlink: 13 bytes leftover after parsing attributes in process `syz.3.8676'. [ 1188.934193][T25151] loop2: detected capacity change from 0 to 164 [ 1189.182014][T25151] Unsupported NM flag settings (8) [ 1189.712130][T25173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8712'. [ 1191.106708][T25211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8727'. [ 1191.116334][T25211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8727'. [ 1191.128572][T25211] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1191.200239][T14628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.208865][T14628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.286730][T25217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.930977][T25236] loop3: detected capacity change from 0 to 256 [ 1192.061606][T25236] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 1192.265040][T25242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8737'. [ 1192.276107][T25242] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1192.525968][T25250] loop1: detected capacity change from 0 to 256 [ 1192.545512][T25250] exfat: Deprecated parameter 'utf8' [ 1192.731774][T25251] sit0: left promiscuous mode [ 1192.736669][T25250] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1192.957222][T25251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1192.974624][ T5865] lo speed is unknown, defaulting to 1000 [ 1192.980520][ T5865] syz2: Port: 1 Link ACTIVE [ 1192.998260][T24762] lo speed is unknown, defaulting to 1000 [ 1193.437120][T24762] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1193.453230][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1193.655819][T24762] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.667112][T24762] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1193.677089][T24762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.754728][T25276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8747'. [ 1193.801866][T24762] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1194.094261][T25282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8748'. [ 1194.647607][T25300] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8754'. [ 1194.655436][T25299] loop3: detected capacity change from 0 to 256 [ 1194.824423][T24762] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1194.833110][T24762] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1194.870296][T24762] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1194.879000][T24762] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 1194.937810][T24762] usb 5-1: USB disconnect, device number 27 [ 1195.323812][T25319] vivid-000: ================= START STATUS ================= [ 1195.331758][T25319] vivid-000: Test Pattern: 75% Colorbar [ 1195.337875][T25319] vivid-000: Fill Percentage of Frame: 100 [ 1195.344251][T25319] vivid-000: Horizontal Movement: Move Right Fast [ 1195.350953][T25319] vivid-000: Vertical Movement: Move Up [ 1195.357302][T25319] vivid-000: OSD Text Mode: All [ 1195.362427][T25319] vivid-000: Show Border: true [ 1195.367685][T25319] vivid-000: Show Square: false [ 1195.373621][T25319] vivid-000: Sensor Flipped Horizontally: false [ 1195.386619][T25319] vivid-000: Sensor Flipped Vertically: false [ 1195.393279][T25319] vivid-000: Insert SAV Code in Image: false [ 1195.399535][T25319] vivid-000: Insert EAV Code in Image: true [ 1195.405981][T25319] vivid-000: Insert Video Guard Band: true [ 1195.414171][T25319] vivid-000: Reduced Framerate: true [ 1195.419788][T25319] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1195.427958][T25319] vivid-000: S-Video 000-0 Is Connected To: None [ 1195.434701][T25319] vivid-000: Enable Capture Cropping: true [ 1195.440784][T25319] vivid-000: Enable Capture Composing: true [ 1195.447202][T25319] vivid-000: Enable Capture Scaler: true [ 1195.453628][T25319] vivid-000: Timestamp Source: Start of Exposure [ 1195.460227][T25319] vivid-000: Colorspace: sRGB [ 1195.465288][T25319] vivid-000: Transfer Function: Default [ 1195.471111][T25319] vivid-000: Y'CbCr Encoding: Default [ 1195.476845][T25319] vivid-000: HSV Encoding: Hue 0-179 [ 1195.482402][T25319] vivid-000: Quantization: Default [ 1195.488028][T25319] vivid-000: Apply Alpha To Red Only: false [ 1195.494344][T25319] vivid-000: Standard Aspect Ratio: 4x3 [ 1195.495254][T25320] loop3: detected capacity change from 0 to 1024 [ 1195.500149][T25319] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1195.514770][T25319] vivid-000: DV Timings: 640x480p59 inactive [ 1195.521074][T25319] vivid-000: DV Timings Aspect Ratio: 14x9 [ 1195.527324][T25319] vivid-000: Maximum EDID Blocks: 1 [ 1195.532945][T25319] vivid-000: Limited RGB Range (16-235): false [ 1195.539380][T25319] vivid-000: Rx RGB Quantization Range: Automatic [ 1195.546842][T25319] vivid-000: Power Present: 0x00000001 [ 1195.552907][T25319] tpg source WxH: 320x180 (Y'CbCr) [ 1195.558168][T25319] tpg field: 1 [ 1195.561661][T25319] tpg crop: (0,0)/320x180 [ 1195.566308][T25319] tpg compose: (0,0)/320x180 [ 1195.571060][T25319] tpg colorspace: 12 [ 1195.575277][T25319] tpg transfer function: 0/0 [ 1195.580027][T25319] tpg Y'CbCr encoding: 0/0 [ 1195.584698][T25319] tpg quantization: 2/0 [ 1195.588992][T25319] tpg RGB range: 0/2 [ 1195.593122][T25319] vivid-000: ================== END STATUS ================== [ 1195.990139][T14667] hfsplus: b-tree write err: -5, ino 4 [ 1196.099894][T25336] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 1196.233529][T25338] loop3: detected capacity change from 0 to 256 [ 1196.291610][T25338] exfat: Deprecated parameter 'namecase' [ 1196.531736][T25338] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1197.425406][T14669] bridge0: port 4(netdevsim3) entered disabled state [ 1197.501257][T14669] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 1197.510619][T14669] netdevsim netdevsim3 netdevsim3 (unregistering): left promiscuous mode [ 1197.519739][T14669] bridge0: port 4(netdevsim3) entered disabled state [ 1197.621973][T14669] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.755616][T14669] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.938246][T14669] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.052020][T14669] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.385490][T14669] bridge_slave_1: left allmulticast mode [ 1198.391459][T14669] bridge_slave_1: left promiscuous mode [ 1198.399180][T14669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.463627][T14669] bridge_slave_0: left allmulticast mode [ 1198.469470][T14669] bridge_slave_0: left promiscuous mode [ 1198.476859][T14669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.339301][T14669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.412158][T14669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.466378][T14669] bond0 (unregistering): Released all slaves [ 1199.488074][T14669] bond1 (unregistering): Released all slaves [ 1199.509315][T14669] bond2 (unregistering): Released all slaves [ 1199.531152][T14669] bond3 (unregistering): Released all slaves [ 1200.817878][T25431] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1200.834342][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1200.848104][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1200.861481][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1200.876057][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1201.122051][T14669] hsr_slave_0: left promiscuous mode [ 1201.145897][T14669] hsr_slave_1: left promiscuous mode [ 1201.153936][T14669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.185930][T14669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1201.193766][T14669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.289119][T14669] veth1_macvtap: left promiscuous mode [ 1201.296058][T14669] veth0_macvtap: left promiscuous mode [ 1201.302030][T14669] veth1_vlan: left promiscuous mode [ 1202.308587][T25465] loop2: detected capacity change from 0 to 128 [ 1202.610188][ T30] audit: type=1326 audit(1756617733.545:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25469 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2049b8ebe9 code=0x7ffc0000 [ 1202.712490][ T30] audit: type=1326 audit(1756617733.605:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25469 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2049b8ebe9 code=0x7ffc0000 [ 1202.735688][ T30] audit: type=1326 audit(1756617733.605:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25469 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2049b8ebe9 code=0x7ffc0000 [ 1202.758635][ T30] audit: type=1326 audit(1756617733.605:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25469 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2049b8ebe9 code=0x7ffc0000 [ 1202.781996][ T30] audit: type=1326 audit(1756617733.635:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25469 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f2049b8ebe9 code=0x7ffc0000 [ 1202.804834][ T30] audit: type=1326 audit(1756617733.635:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25469 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2049b8ebe9 code=0x7ffc0000 [ 1202.827705][ T30] audit: type=1326 audit(1756617733.635:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25469 comm="syz.1.8800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2049b8ebe9 code=0x7ffc0000 [ 1203.036232][ T5825] Bluetooth: hci0: command tx timeout [ 1203.228106][T14669] team0 (unregistering): Port device team_slave_1 removed [ 1203.346375][T14669] team0 (unregistering): Port device team_slave_0 removed [ 1203.720853][T25425] lo speed is unknown, defaulting to 1000 [ 1204.770753][T25425] xfrm0 speed is unknown, defaulting to 1000 [ 1205.071518][ T5825] Bluetooth: hci0: command tx timeout [ 1206.172016][T25619] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:2726x16 (0x38414261, 6, 0, 0, 0) [ 1206.319026][T25425] chnl_net:caif_netlink_parms(): no params data found [ 1207.133566][ T5825] Bluetooth: hci0: command tx timeout [ 1207.585890][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.592496][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.967692][T25425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.975708][T25425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.983556][T25425] bridge_slave_0: entered allmulticast mode [ 1208.047171][T25425] bridge_slave_0: entered promiscuous mode [ 1208.121276][T25425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.129194][T25425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.137050][T25425] bridge_slave_1: entered allmulticast mode [ 1208.146464][T25425] bridge_slave_1: entered promiscuous mode [ 1208.514988][T25425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.621949][T25425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.849510][T25750] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.8827'. [ 1209.009995][T25425] team0: Port device team_slave_0 added [ 1209.080060][T25765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8828'. [ 1209.093036][T25425] team0: Port device team_slave_1 added [ 1209.233428][ T5825] Bluetooth: hci0: command tx timeout [ 1209.311224][T25780] loop2: detected capacity change from 0 to 4096 [ 1209.325453][T25780] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1209.338898][T25780] ntfs3(loop2): This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 1209.338898][T25780] Volume contains 64 bits run: vcn 0, lcn ffff000000000103, len 40. [ 1209.338898][T25780] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 1209.365169][T25780] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1209.372320][T25780] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 1209.383013][T25780] ntfs3(loop2): Failed to load $LogFile (-95). [ 1209.390173][T25780] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 1209.551330][T25425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.558762][T25425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1209.589186][T25425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.710402][T25425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.717803][T25425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1209.744307][T25425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.093130][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1210.419578][T25425] hsr_slave_0: entered promiscuous mode [ 1210.431145][T25425] hsr_slave_1: entered promiscuous mode [ 1210.439913][T25425] debugfs: 'hsr0' already exists in 'hsr' [ 1210.445930][T25425] Cannot create hsr debugfs directory [ 1211.100470][T25888] tipc: Enabling of bearer rejected, failed to enable media [ 1211.776147][T25930] loop2: detected capacity change from 0 to 128 [ 1211.934448][T24437] Process accounting resumed [ 1212.047260][T25425] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1212.128261][T25425] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1212.199051][T25425] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1212.256224][T25950] loop1: detected capacity change from 0 to 512 [ 1212.294811][T25425] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1212.423426][T25950] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.8845: casefold flag without casefold feature [ 1212.449594][T25950] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8845: couldn't read orphan inode 15 (err -117) [ 1212.572001][T25950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1212.934931][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.512872][T25425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.667753][T25425] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.787109][T21293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.794701][T21293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.873615][ T5865] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1213.898159][T21293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.905835][T21293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.073681][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 1214.110523][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.121571][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.133046][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.143616][ T5865] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1214.153057][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.212010][ T5865] usb 3-1: config 0 descriptor?? [ 1214.707807][ T5865] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0 [ 1214.716926][ T5865] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0 [ 1214.724734][ T5865] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0 [ 1214.732380][ T5865] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0 [ 1214.740556][ T5865] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0 [ 1214.983278][ T5865] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf3 found [ 1214.991322][ T5865] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf4 found [ 1215.081904][ T5865] usb 3-1: USB disconnect, device number 31 [ 1215.603048][T17308] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1215.792981][T17308] usb 2-1: Using ep0 maxpacket: 8 [ 1215.855503][T17308] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 1215.867191][T17308] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1215.879312][T17308] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.890652][T17308] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 1215.904146][T17308] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1215.910996][T17308] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1215.920349][T17308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.938624][T17308] usb 2-1: config 0 descriptor?? [ 1216.070393][T26041] loop2: detected capacity change from 0 to 256 [ 1216.386996][T25425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.434775][T17308] microsoft 0003:045E:00F9.0002: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.1-1/input0 [ 1216.446948][T17308] microsoft 0003:045E:00F9.0002: no inputs found [ 1216.454968][T17308] microsoft 0003:045E:00F9.0002: could not initialize ff, continuing anyway [ 1216.601124][T17308] usb 2-1: USB disconnect, device number 25 [ 1216.725806][T26041] FAT-fs (loop2): Directory bread(block 64) failed [ 1216.732550][T26041] FAT-fs (loop2): Directory bread(block 65) failed [ 1216.741448][T26041] FAT-fs (loop2): Directory bread(block 66) failed [ 1216.749310][T26041] FAT-fs (loop2): Directory bread(block 67) failed [ 1216.757219][T26041] FAT-fs (loop2): Directory bread(block 68) failed [ 1216.764151][T26041] FAT-fs (loop2): Directory bread(block 69) failed [ 1216.770986][T26041] FAT-fs (loop2): Directory bread(block 70) failed [ 1216.778014][T26041] FAT-fs (loop2): Directory bread(block 71) failed [ 1216.784976][T26041] FAT-fs (loop2): Directory bread(block 72) failed [ 1216.791682][T26041] FAT-fs (loop2): Directory bread(block 73) failed [ 1217.313843][T26054] fido_id[26054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1217.748310][T26077] comedi comedi3: dac02: I/O port conflict (0x4f27,8) [ 1218.515524][T26096] loop2: detected capacity change from 0 to 256 [ 1218.545859][T26096] exfat: Deprecated parameter 'namecase' [ 1218.752146][T26096] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1219.121635][T25425] veth0_vlan: entered promiscuous mode [ 1219.191287][T25425] veth1_vlan: entered promiscuous mode [ 1219.606556][T25425] veth0_macvtap: entered promiscuous mode [ 1219.643160][T26114] program syz.1.8872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1219.670830][T25425] veth1_macvtap: entered promiscuous mode [ 1219.772246][T26118] loop2: detected capacity change from 0 to 512 [ 1219.871481][T25425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1219.936366][T25425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.950160][T26118] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1220.016260][T26118] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1220.069719][T26118] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 1220.083117][T14669] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.097560][T14628] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.170377][T26118] System zones: 0-2, 18-18, 34-34 [ 1220.185590][T14628] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.218054][T26118] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.8873: iget: bad i_size value: 360287970189639680 [ 1220.249518][T14628] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.291519][T26118] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8873: couldn't read orphan inode 15 (err -117) [ 1220.344057][T26118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1220.771574][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.964074][ T30] audit: type=1326 audit(1756617752.895:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26160 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298318ebe9 code=0x7ffc0000 [ 1221.987368][ T30] audit: type=1326 audit(1756617752.895:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26160 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298318ebe9 code=0x7ffc0000 [ 1222.208182][ T30] audit: type=1326 audit(1756617752.965:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26160 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f298318ebe9 code=0x7ffc0000 [ 1222.231299][ T30] audit: type=1326 audit(1756617752.975:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26160 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298318ebe9 code=0x7ffc0000 [ 1222.254428][ T30] audit: type=1326 audit(1756617752.975:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26160 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f298318ebe9 code=0x7ffc0000 [ 1222.277254][ T30] audit: type=1326 audit(1756617752.975:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26160 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298318ebe9 code=0x7ffc0000 [ 1222.300130][ T30] audit: type=1326 audit(1756617752.975:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26160 comm="syz.2.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298318ebe9 code=0x7ffc0000 [ 1222.500206][T26172] program syz.4.8885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1224.347507][T26202] loop1: detected capacity change from 0 to 64 [ 1224.538548][T26205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8896'. [ 1226.706290][T26240] loop1: detected capacity change from 0 to 32768 [ 1226.723870][T26240] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section [ 1226.723870][T26240] clean (size 2912): [ 1226.723870][T26240] flags: 0 [ 1226.723870][T26240] journal_seq: 10 [ 1226.723870][T26240] usage: type=inodes v=8 [ 1226.723870][T26240] usage: type=key_version v=0 [ 1226.723870][T26240] usage: type=reserved v=0 [ 1226.723870][T26240] usage: type=reserved v=0 [ 1226.723870][T26240] usage: type=reserved v=0 [ 1226.723870][T26240] usage: type=reserved v=0 [ 1226.723870][T26240] data_usage: btree: 1/1 [0]=2816 [ 1226.723870][T26240] (unknown jset_entry_type 14) [ 1226.723870][T26240] data_usage: user: 1/1 [0]=16 [ 1226.723870][T26240] dev_usage: dev=0 [ 1226.723870][T26240] free: buckets=83 sectors=0 fragmented=0 [ 1226.723870][T26240] sb: buckets=25 sectors=6152 fragmented=248 [ 1226.723870][T26240] journal: buckets=8 sectors=2048 fragmented=0 [ 1226.723870][T26240] btree: buckets=11 sectors=2816 fragmented=0 [ 1226.723870][T26240] user: buckets=1 sectors=16 fragmented=240 [ 1226.723870][T26240] cached: buckets=0 sectors=0 fragmented=0 [ 1226.723870][T26240] parity: buckets=0 sectors=0 fragmented=0 [ 1226.723870][T26240] stripe: buckets=0 sectors=0 fragmented=0 [ 1226.723870][T26240] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 1226.723870][T26240] need_discard: buckets=0 sectors=0 fragmented=0 [ 1226.723870][T26240] clock: read=0 [ 1226.723870][T26240] clock: write=1280 [ 1226.723870][T26240] blacklist_v2: start=1179915 end=0 [ 1226.723870][T26240] (unknown jset_entry_type 255) [ 1226.723870][T26240] [ 1226.877250][T26240] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 1227.363355][ T3645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.371459][ T3645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.662946][T14649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.671068][T14649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.572962][ T1614] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1228.761572][ T1614] usb 6-1: Using ep0 maxpacket: 8 [ 1228.838753][ T1614] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1228.911383][ T1614] usb 6-1: config 4 has an invalid interface number: 30 but max is 0 [ 1228.920535][ T1614] usb 6-1: config 4 has no interface number 0 [ 1228.927176][ T1614] usb 6-1: config 4 interface 30 has no altsetting 0 [ 1228.928302][T26298] netlink: 'syz.2.8919': attribute type 1 has an invalid length. [ 1228.989861][T26302] loop1: detected capacity change from 0 to 64 [ 1229.073596][ T1614] usb 6-1: string descriptor 0 read error: -22 [ 1229.080450][ T1614] usb 6-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1229.090114][ T1614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.215932][ T1614] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1229.223427][ T1614] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1229.229670][ T1614] dvb-usb: bulk message failed: -22 (2/0) [ 1229.337578][ T1614] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1229.360725][ T1614] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1229.368728][ T1614] usb 6-1: media controller created [ 1229.375134][ T1614] dvb-usb: bulk message failed: -22 (6/0) [ 1229.381023][ T1614] dw2102: i2c transfer failed. [ 1229.389470][ T1614] dvb-usb: bulk message failed: -22 (6/0) [ 1229.395669][ T1614] dw2102: i2c transfer failed. [ 1229.402759][ T1614] dvb-usb: bulk message failed: -22 (6/0) [ 1229.408658][ T1614] dw2102: i2c transfer failed. [ 1229.414411][ T1614] dvb-usb: bulk message failed: -22 (6/0) [ 1229.420304][ T1614] dw2102: i2c transfer failed. [ 1229.427571][ T1614] dvb-usb: bulk message failed: -22 (6/0) [ 1229.433570][ T1614] dw2102: i2c transfer failed. [ 1229.438470][ T1614] dvb-usb: bulk message failed: -22 (6/0) [ 1229.444507][ T1614] dw2102: i2c transfer failed. [ 1229.449391][ T1614] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1229.460344][T26283] dvb-usb: bulk message failed: -22 (4/0) [ 1229.466809][T26283] dw2102: i2c transfer failed. [ 1229.471816][T26283] dvb-usb: bulk message failed: -22 (3/0) [ 1229.477832][T26283] dw2102: i2c transfer failed. [ 1229.815012][ T1614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1229.820815][ T5168] udevd[5168]: worker [6115] terminated by signal 33 (Unknown signal 33) [ 1229.864713][ T5168] udevd[5168]: worker [6115] failed while handling '/devices/virtual/block/loop1' [ 1230.724220][T26322] loop1: detected capacity change from 0 to 40427 [ 1230.738856][T26322] F2FS-fs (loop1): LFS is not compatible with ATGC [ 1230.935759][ T1614] dvb-usb: bulk message failed: -22 (3/0) [ 1230.944047][ T1614] dw2102: command 0x0e transfer failed. [ 1230.949755][ T1614] dvb-usb: bulk message failed: -22 (3/0) [ 1230.956843][ T1614] dw2102: command 0x0e transfer failed. [ 1231.227152][T26346] Bluetooth: MGMT ver 1.23 [ 1231.263078][ T1614] dvb-usb: bulk message failed: -22 (3/0) [ 1231.269009][ T1614] dw2102: command 0x0e transfer failed. [ 1231.275007][ T1614] dvb-usb: bulk message failed: -22 (3/0) [ 1231.280873][ T1614] dw2102: command 0x0e transfer failed. [ 1231.286722][ T1614] dvb-usb: bulk message failed: -22 (1/0) [ 1231.294217][ T1614] dw2102: command 0x51 transfer failed. [ 1231.299912][ T1614] dvb-usb: bulk message failed: -22 (5/0) [ 1231.305935][ T1614] dw2102: i2c probe for address 0x68 failed. [ 1231.312057][ T1614] dvb-usb: bulk message failed: -22 (5/0) [ 1231.318857][ T1614] dw2102: i2c probe for address 0x69 failed. [ 1231.325143][ T1614] dvb-usb: bulk message failed: -22 (5/0) [ 1231.331008][ T1614] dw2102: i2c probe for address 0x6a failed. [ 1231.337297][ T1614] dw2102: probing for demodulator failed. Is the external power switched on? [ 1231.348947][ T1614] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1232.263611][T26368] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8935'. [ 1232.267411][ T1614] rc_core: IR keymap rc-tt-1500 not found [ 1232.282750][ T1614] Registered IR keymap rc-empty [ 1232.290332][ T1614] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1232.303656][ T1614] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input23 [ 1232.535144][ T1614] dvb-usb: schedule remote query interval to 250 msecs. [ 1232.542267][ T1614] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1232.549545][ T1614] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1232.704155][ T1614] usb 6-1: USB disconnect, device number 2 [ 1232.892026][T26388] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8939'. [ 1232.981336][T26387] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8939'. [ 1233.266976][ T1614] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1233.750413][T26406] loop2: detected capacity change from 0 to 1024 [ 1233.955643][T26406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.968338][T26406] ext4 filesystem being mounted at /1778/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1234.557025][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.125930][T26462] loop2: detected capacity change from 0 to 256 [ 1236.163444][T26462] exfat: Deprecated parameter 'namecase' [ 1236.409211][T26468] program syz.0.8957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1236.443894][T26462] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1236.619091][T26452] loop1: detected capacity change from 0 to 8192 [ 1237.582132][T14667] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.829005][T14667] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.069715][T14667] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.237407][T14667] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.897255][T14667] bond0 (unregistering): Released all slaves [ 1239.919035][T14667] bond1 (unregistering): Released all slaves [ 1239.949125][T14667] bond2 (unregistering): Released all slaves [ 1239.970954][T14667] bond3 (unregistering): Released all slaves [ 1240.145950][T17308] xfrm0 speed is unknown, defaulting to 1000 [ 1240.152142][T17308] infiniband syz1: ib_query_port failed (-19) [ 1240.458819][T14667] IPVS: stopping backup sync thread 10847 ... [ 1240.813208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.258731][T14667] hsr_slave_0: left promiscuous mode [ 1241.319863][T14667] hsr_slave_1: left promiscuous mode [ 1241.389747][T14667] veth1_macvtap: left promiscuous mode [ 1241.395857][T14667] veth0_macvtap: left promiscuous mode [ 1241.401709][T14667] veth1_vlan: left promiscuous mode [ 1241.407425][T14667] veth0_vlan: left promiscuous mode [ 1242.786715][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1242.814909][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1242.828861][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1242.873923][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1242.925801][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1243.560630][T26574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8977'. [ 1243.780381][T26555] netlink: 'syz.5.8973': attribute type 1 has an invalid length. [ 1243.990975][T26566] lo speed is unknown, defaulting to 1000 [ 1244.681790][T26612] program syz.5.8981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1245.123495][ T5824] Bluetooth: hci1: command tx timeout [ 1245.390662][T26624] loop5: detected capacity change from 0 to 512 [ 1245.454969][T26624] EXT4-fs: Ignoring removed nobh option [ 1245.856741][T26618] loop1: detected capacity change from 0 to 32768 [ 1245.908012][T26618] gfs2: Invalid block size [ 1246.010861][T26624] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.8984: corrupted inode contents [ 1246.153174][T26624] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.8984: mark_inode_dirty error [ 1246.305679][T26624] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.8984: corrupted inode contents [ 1246.406842][T26624] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.8984: mark_inode_dirty error [ 1246.530706][T26624] Quota error (device loop5): write_blk: dquota write failed [ 1246.539034][T26624] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1246.549445][T26624] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.8984: Failed to acquire dquot type 0 [ 1246.622374][T26624] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8984: corrupted inode contents [ 1246.733668][T26624] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.8984: mark_inode_dirty error [ 1246.786023][T26624] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8984: corrupted inode contents [ 1246.819261][T26624] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.8984: mark_inode_dirty error [ 1246.833375][T26624] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8984: corrupted inode contents [ 1246.847317][T26566] chnl_net:caif_netlink_parms(): no params data found [ 1246.891387][T26624] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 1246.960428][T26624] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8984: corrupted inode contents [ 1247.045360][T26624] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.8984: mark_inode_dirty error [ 1247.078527][T26624] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 1247.153783][ T5824] Bluetooth: hci1: command tx timeout [ 1247.226936][T26624] EXT4-fs (loop5): 1 truncate cleaned up [ 1247.234976][T26624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1247.248074][T26624] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1247.404365][T26624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.080107][T26766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8993'. [ 1248.357315][T26566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.366311][T26566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.374289][T26566] bridge_slave_0: entered allmulticast mode [ 1248.383573][T26566] bridge_slave_0: entered promiscuous mode [ 1248.468085][T26566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.475799][T26566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.484047][T26566] bridge_slave_1: entered allmulticast mode [ 1248.494939][T26566] bridge_slave_1: entered promiscuous mode [ 1248.845876][T26566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.912204][T26566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.986038][T26828] sp0: Synchronizing with TNC [ 1249.233340][ T5824] Bluetooth: hci1: command tx timeout [ 1249.261252][T26566] team0: Port device team_slave_0 added [ 1249.341990][T26839] loop1: detected capacity change from 0 to 1024 [ 1249.381797][T26566] team0: Port device team_slave_1 added [ 1249.552366][T26839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1249.566180][T26839] ext4 filesystem being mounted at /1782/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1249.706154][ T30] audit: type=1800 audit(1756617780.625:149): pid=26839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8999" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 1249.725038][T26839] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1249.752350][T26566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.759920][T26566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.788040][T26566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.051615][T26566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.059012][T26566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.086270][T26566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.223622][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1250.613720][T26566] hsr_slave_0: entered promiscuous mode [ 1250.623620][T26566] hsr_slave_1: entered promiscuous mode [ 1250.755945][T26944] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9005'. [ 1251.293510][ T5824] Bluetooth: hci1: command tx timeout [ 1252.075449][T27019] loop1: detected capacity change from 0 to 1024 [ 1252.235032][T26566] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1252.322515][T26566] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1252.368500][T27044] loop5: detected capacity change from 0 to 64 [ 1252.436030][T26566] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1252.537147][T26566] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1252.888846][T14669] hfsplus: b-tree write err: -5, ino 4 [ 1253.629239][T26566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.449167][T27075] loop1: detected capacity change from 0 to 32768 [ 1254.476993][T26566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.576814][T14669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.584623][T14669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.592744][T27075] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=snapshots_read,nojournal_transaction_names,noexcl,read_only,no_data_io [ 1254.592891][T27075] allowing incompatible features above 0.0: (unknown version) [ 1254.592976][T27075] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1254.637562][T27075] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 1254.647183][T27075] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing [ 1254.661130][T27075] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: no devices in entry free: 0/0 [], fixing [ 1254.679347][T27075] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 1254.688911][T27075] bcachefs (loop1): Version upgrade required: [ 1254.688911][T27075] Version upgrade from 0.27: fragmentation_lru to 1.7: mi_btree_bitmap incomplete [ 1254.688911][T27075] Doing incompatible version upgrade from 0.27: fragmentation_lru to 1.28: inode_has_case_insensitive [ 1254.688911][T27075] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 1254.829046][T14669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.836693][T14669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.870625][T27084] loop5: detected capacity change from 0 to 1024 [ 1254.963778][T26566] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1254.974455][T26566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1255.122452][T27075] bcachefs (loop1): btree node read error at btree backpointers level 0/0 [ 1255.122552][T27075] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 1255.122906][T27075] loop1 node offset 0/24 bset u64s 0: checksum error, type none: got should be [ 1255.122988][T27075] loop1 btree validate error [ 1255.123052][T27075] flagging btree backpointers lost data [ 1255.123122][T27075] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 1255.123201][T27075] ret fsck_errors_not_fixed [ 1255.188233][T27075] bcachefs (loop1): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 1255.211794][T27075] bcachefs (loop1): check_topology... done [ 1255.270968][T27075] bcachefs (loop1): accounting_read... done [ 1255.283722][T27075] bcachefs (loop1): alloc_read... done [ 1255.293866][T27075] bcachefs (loop1): snapshots_read... done [ 1255.306077][T27075] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 1255.324291][T27075] bcachefs (loop1): done starting filesystem [ 1255.355346][T27084] hfsplus: bad catalog entry type [ 1255.511897][ T5828] bcachefs (loop1): shutting down [ 1255.710179][ T5828] bcachefs (loop1): shutdown complete [ 1255.874700][T14664] hfsplus: b-tree write err: -5, ino 4 [ 1257.059404][T26566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1257.540346][T27126] loop5: detected capacity change from 0 to 64 [ 1259.179520][T27155] loop1: detected capacity change from 0 to 4096 [ 1259.283794][T27164] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1259.355007][T26566] veth0_vlan: entered promiscuous mode [ 1259.400275][T26566] veth1_vlan: entered promiscuous mode [ 1259.667069][T26566] veth0_macvtap: entered promiscuous mode [ 1259.713043][T26566] veth1_macvtap: entered promiscuous mode [ 1259.867472][T26566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1259.958204][T26566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.057502][T27170] tipc: Failed to obtain node identity [ 1260.064542][T27170] tipc: Enabling of bearer rejected, failed to enable media [ 1260.086306][T14628] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.120106][T14628] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.195197][T14628] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.238857][T14628] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.546597][T27201] Zero length message leads to an empty skb [ 1262.033806][ T30] audit: type=1326 audit(1756617792.975:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.5.9052" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bf258ebe9 code=0x0 [ 1262.569417][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1262.763798][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1262.779591][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.793757][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.804600][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1262.818070][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1262.827448][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.065334][ T9] usb 2-1: config 0 descriptor?? [ 1263.504674][T27245] program syz.0.9060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1263.560876][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1263.568750][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1263.576499][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1263.584132][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1263.591603][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1263.599385][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1263.610984][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1263.619939][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1263.628084][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1263.635651][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1263.970470][ T9] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1263.982464][ T9] microsoft 0003:045E:07DA.0003: no inputs found [ 1263.991073][ T9] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 1264.077999][ T9] usb 2-1: USB disconnect, device number 26 [ 1264.358998][ T5168] udevd[5168]: worker [5986] terminated by signal 33 (Unknown signal 33) [ 1264.398350][ T5168] udevd[5168]: worker [5986] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/hidraw/hidraw0' [ 1264.627140][T27277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9064'. [ 1265.708141][T27300] loop1: detected capacity change from 0 to 512 [ 1265.766394][T25612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.775385][T25612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.834512][T27300] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1265.971176][T27300] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 1266.034440][T27300] System zones: 0-2, 18-18, 34-34 [ 1266.057742][T26608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.068243][T26608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.131018][T27300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1266.144405][T27300] ext4 filesystem being mounted at /1794/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1266.539780][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.161854][T27335] usb usb6: usbfs: process 27335 (syz.6.9078) did not claim interface 63 before use [ 1269.006539][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1269.013441][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1269.067391][T27376] loop1: detected capacity change from 0 to 256 [ 1269.133841][T27380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1269.600772][T27376] FAT-fs (loop1): Directory bread(block 64) failed [ 1269.608468][T27376] FAT-fs (loop1): Directory bread(block 65) failed [ 1269.616211][T27376] FAT-fs (loop1): Directory bread(block 66) failed [ 1269.623833][T27376] FAT-fs (loop1): Directory bread(block 67) failed [ 1269.630678][T27376] FAT-fs (loop1): Directory bread(block 68) failed [ 1269.637584][T27376] FAT-fs (loop1): Directory bread(block 69) failed [ 1269.644617][T27376] FAT-fs (loop1): Directory bread(block 70) failed [ 1269.651308][T27376] FAT-fs (loop1): Directory bread(block 71) failed [ 1269.658335][T27376] FAT-fs (loop1): Directory bread(block 72) failed [ 1269.665151][T27376] FAT-fs (loop1): Directory bread(block 73) failed [ 1270.285310][T27403] netlink: 6 bytes leftover after parsing attributes in process `syz.1.9102'. [ 1270.516699][T27410] loop6: detected capacity change from 0 to 1024 [ 1272.848149][T27469] loop6: detected capacity change from 0 to 256 [ 1272.862261][T27469] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1272.873401][T27469] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1272.916385][T27469] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd02de565, utbl_chksum : 0xe619d30d) [ 1272.929702][T27469] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 0) [ 1272.938030][T27469] exFAT-fs (loop6): failed to load alloc-bitmap [ 1272.944524][T27469] exFAT-fs (loop6): failed to recognize exfat type [ 1273.035112][T27473] netem: incorrect gi model size [ 1273.040462][T27473] netem: change failed [ 1273.454640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.087711][T27484] loop5: detected capacity change from 0 to 32768 [ 1274.108820][T27484] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section journal_seq_blacklist: entry 0 start >= end (16981954538416098692 >= 16981954538416098692) [ 1274.108820][T27484] journal_seq_blacklist (size 64): [ 1274.108820][T27484] 16981954538416098692-16981954538416098692 128-34376515584 1714681267-1611530240 [ 1274.108820][T27484] [ 1274.143969][T27484] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal_seq_blacklist [ 1274.258894][T27494] loop1: detected capacity change from 0 to 256 [ 1274.326913][T27494] exfat: Deprecated parameter 'utf8' [ 1274.435900][T27498] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1274.539663][T27494] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d) [ 1276.174708][T27524] loop1: detected capacity change from 0 to 40427 [ 1276.184179][T27524] F2FS-fs: heap/no_heap options were deprecated [ 1276.194185][T27524] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 1276.201609][T27524] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1276.213970][T27524] F2FS-fs (loop1): Image doesn't support compression [ 1276.220848][T27524] F2FS-fs (loop1): journaled quota format not specified [ 1277.460456][T27554] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9149'. [ 1278.916219][T27587] /dev/loop4: Can't open blockdev [ 1279.552069][ T30] audit: type=1326 audit(1756617810.495:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.5.9167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf258ebe9 code=0x7ffc0000 [ 1279.575534][ T30] audit: type=1326 audit(1756617810.505:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.5.9167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf258ebe9 code=0x7ffc0000 [ 1279.598413][ T30] audit: type=1326 audit(1756617810.505:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.5.9167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7bf258ebe9 code=0x7ffc0000 [ 1279.621824][ T30] audit: type=1326 audit(1756617810.565:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.5.9167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf258ebe9 code=0x7ffc0000 [ 1279.881680][ T30] audit: type=1326 audit(1756617810.635:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.5.9167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf258ebe9 code=0x7ffc0000 [ 1279.905255][ T30] audit: type=1326 audit(1756617810.635:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.5.9167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7bf258ebe9 code=0x7ffc0000 [ 1279.928334][ T30] audit: type=1326 audit(1756617810.635:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.5.9167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7bf258ebe9 code=0x7ffc0000 [ 1280.342165][T27614] loop5: detected capacity change from 0 to 1024 [ 1281.399106][T27631] loop1: detected capacity change from 0 to 1024 [ 1281.565903][T27631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1281.578737][T27631] ext4 filesystem being mounted at /1816/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1281.823357][T27631] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks [ 1281.830894][T27631] EXT4-fs warning (device loop1): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 1281.972805][T27647] loop5: detected capacity change from 0 to 256 [ 1282.005970][T27647] exfat: Deprecated parameter 'namecase' [ 1282.129408][T27647] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1282.206132][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.215288][T27651] loop6: detected capacity change from 0 to 65 [ 1282.226974][T27651] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1282.760081][T27662] loop1: detected capacity change from 0 to 128 [ 1282.906471][T27662] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1283.088556][T27662] ext4 filesystem being mounted at /1817/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1283.238237][T27662] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 1283.366019][T27676] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9187'. [ 1283.527321][ T5828] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1283.577156][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1283.757567][T27686] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 1283.769611][T27686] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 1283.775910][T27686] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 1283.775910][T27686] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 1283.795031][T27686] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 1283.806698][T27686] CUSE: DEVNAME unspecified [ 1283.820733][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1283.848013][ T9] usb 7-1: config 8 has an invalid interface number: 160 but max is 0 [ 1283.856708][ T9] usb 7-1: config 8 has no interface number 0 [ 1283.863197][ T9] usb 7-1: config 8 interface 160 has no altsetting 0 [ 1283.923877][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 3.11 [ 1283.936525][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.944932][ T9] usb 7-1: Product: syz [ 1283.949279][ T9] usb 7-1: Manufacturer: syz [ 1283.954332][ T9] usb 7-1: SerialNumber: syz [ 1284.339006][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1284.417344][ T9] usb 7-1: Found UVC 0.00 device syz (046d:0821) [ 1284.424493][ T9] usb 7-1: No valid video chain found. [ 1284.491555][ T9] usb 7-1: USB disconnect, device number 2 [ 1285.229987][T27723] loop6: detected capacity change from 0 to 256 [ 1285.397672][T27723] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1285.640816][T27732] loop1: detected capacity change from 0 to 256 [ 1286.526901][T27755] loop5: detected capacity change from 0 to 1024 [ 1286.639039][ T9] IPVS: starting estimator thread 0... [ 1286.674499][T27759] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 1286.679804][T27755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1286.751605][T27762] IPVS: using max 240 ests per chain, 12000 per kthread [ 1287.065690][T25425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.231396][T27823] vlan2: entered promiscuous mode [ 1289.236953][T27823] macvtap0: entered promiscuous mode [ 1290.512295][T27853] loop5: detected capacity change from 0 to 128 [ 1290.833481][T27858] geneve0: entered allmulticast mode [ 1291.591423][T27873] loop5: detected capacity change from 0 to 1024 [ 1291.617990][T27873] EXT4-fs: inline encryption not supported [ 1291.624674][T27873] EXT4-fs: Ignoring removed i_version option [ 1291.667001][T27873] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1291.774432][T27873] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.9239: lblock 2 mapped to illegal pblock 2 (length 1) [ 1291.801101][T27882] loop1: detected capacity change from 0 to 64 [ 1291.815867][T27873] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1291.824548][T27873] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.9239: lblock 0 mapped to illegal pblock 48 (length 1) [ 1291.885577][T27873] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1291.895834][T27873] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.9239: Failed to acquire dquot type 0 [ 1291.908519][T27873] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1291.987372][T27873] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.9239: mark_inode_dirty error [ 1292.044745][T27873] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1292.055821][T27873] EXT4-fs (loop5): 1 orphan inode deleted [ 1292.078029][T14649] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 1292.108950][T27873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1292.146002][T14649] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1292.155427][T14649] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:11: Failed to release dquot type 0 [ 1292.638367][T25425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.688062][T25425] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1292.731312][T25425] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1292.766674][T25425] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 1293.359496][T27919] loop6: detected capacity change from 0 to 256 [ 1293.465985][T27919] exfat: Deprecated parameter 'utf8' [ 1293.603130][T27919] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 1294.893079][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1295.077943][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1295.086632][ T9] usb 6-1: config 0 has no interface number 0 [ 1295.093269][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1295.103511][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.201114][ T9] usb 6-1: config 0 descriptor?? [ 1295.295286][ T9] usb 6-1: selecting invalid altsetting 1 [ 1295.301665][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 1295.308592][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1295.733488][ T9] DVB: Unable to find symbol cx22700_attach() [ 1295.796637][T27987] netlink: 'syz.6.9270': attribute type 29 has an invalid length. [ 1295.841130][T27987] netlink: 'syz.6.9270': attribute type 29 has an invalid length. [ 1295.967621][ T9] DVB: Unable to find symbol tda10046_attach() [ 1295.974196][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1296.014306][ T9] usb 6-1: USB disconnect, device number 3 [ 1296.983732][T28020] mkiss: ax0: crc mode is auto. [ 1297.901430][T28050] tipc: Started in network mode [ 1297.907479][T28050] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 1297.918055][T28050] tipc: Enabled bearer , priority 10 [ 1297.995976][T28040] loop5: detected capacity change from 0 to 4096 [ 1298.321216][T28057] Bluetooth: MGMT ver 1.23 [ 1299.044041][ T5865] tipc: Node number set to 10398378 [ 1299.611292][T28071] loop6: detected capacity change from 0 to 4096 [ 1301.608103][T28103] loop1: detected capacity change from 0 to 32768 [ 1301.639506][T28103] OCFS2: ERROR (device loop1): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 66 has an invalid extent (next_free_rec 255, count 19) [ 1301.661851][T28103] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1301.673586][T28103] OCFS2: File system is now read-only. [ 1301.679220][T28103] (syz.1.9304,28103,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 1301.687376][T28103] (syz.1.9304,28103,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 1301.696306][T28103] (syz.1.9304,28103,1):ocfs2_read_virt_blocks:997 ERROR: status = -30 [ 1301.704862][T28103] (syz.1.9304,28103,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 1301.713694][T28103] (syz.1.9304,28103,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30 [ 1301.723090][T28103] (syz.1.9304,28103,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 1301.723258][T28103] (syz.1.9304,28103,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30 [ 1301.745279][T28103] (syz.1.9304,28103,1):ocfs2_initialize_super:2198 ERROR: status = -30 [ 1301.754247][T28103] (syz.1.9304,28103,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 1301.842454][T28111] : entered promiscuous mode [ 1302.253244][ T5825] Bluetooth: hci1: command 0x0405 tx timeout [ 1302.776047][T28120] loop6: detected capacity change from 0 to 4096 [ 1303.017186][T28136] loop5: detected capacity change from 0 to 512 [ 1303.041370][T28120] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1303.155709][T28136] EXT4-fs: Ignoring removed nobh option [ 1303.238445][T28136] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1303.286627][T28120] ntfs3(loop6): Failed to load $Extend (-22). [ 1303.293181][T28120] ntfs3(loop6): Failed to initialize $Extend. [ 1303.297974][T28136] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9313: invalid indirect mapped block 256 (level 1) [ 1303.406308][T28136] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9313: invalid indirect mapped block 2683928664 (level 1) [ 1303.504447][T28136] EXT4-fs (loop5): 1 truncate cleaned up [ 1303.512377][T28136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1303.702041][T28149] binder: 28148:28149 ioctl c00c620f 200000000100 returned -22 [ 1304.000225][T25425] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1304.072329][T25425] EXT4-fs error (device loop5): __ext4_iget:5464: inode #11: block 65557: comm syz-executor: invalid block [ 1304.158270][T25425] EXT4-fs error (device loop5): __ext4_iget:5464: inode #11: block 65557: comm syz-executor: invalid block [ 1304.718312][T14649] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.748624][T25425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.861578][T14649] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.006324][T14649] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.227790][T14649] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.677980][T14649] bridge_slave_1: left allmulticast mode [ 1305.685267][T14649] bridge_slave_1: left promiscuous mode [ 1305.691705][T14649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.709068][T14649] bridge_slave_0: left allmulticast mode [ 1305.716462][T14649] bridge_slave_0: left promiscuous mode [ 1305.723271][T14649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.344341][T14649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1306.384518][T14649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1306.408522][T14649] bond0 (unregistering): Released all slaves [ 1307.404701][T28223] loop6: detected capacity change from 0 to 256 [ 1307.587401][T14649] hsr_slave_0: left promiscuous mode [ 1307.654613][T14649] hsr_slave_1: left promiscuous mode [ 1307.662460][T14649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.670221][T14649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.715792][T14649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.724209][T14649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.742378][T25431] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1307.752967][T25431] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1307.762046][T25431] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1307.776220][T25431] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1307.787114][T25431] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1307.844507][T14649] veth1_macvtap: left promiscuous mode [ 1307.852743][T14649] veth0_macvtap: left promiscuous mode [ 1307.858881][T14649] veth1_vlan: left promiscuous mode [ 1307.866050][T14649] veth0_vlan: left promiscuous mode [ 1309.853881][T25431] Bluetooth: hci0: command tx timeout [ 1309.914547][T28257] loop1: detected capacity change from 0 to 4096 [ 1309.998155][T28257] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 1310.238312][T14649] team0 (unregistering): Port device team_slave_1 removed [ 1310.316787][T14649] team0 (unregistering): Port device team_slave_0 removed [ 1310.547901][T28257] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1310.791836][T28228] lo speed is unknown, defaulting to 1000 [ 1311.646100][T28298] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9355'. [ 1311.659599][T28285] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9355'. [ 1311.942858][T25431] Bluetooth: hci0: command tx timeout [ 1312.221037][T28318] loop6: detected capacity change from 0 to 1024 [ 1312.311584][T28318] EXT4-fs: Ignoring removed nobh option [ 1312.317559][T28318] EXT4-fs: Ignoring removed bh option [ 1312.452292][T28318] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1312.693582][T28228] chnl_net:caif_netlink_parms(): no params data found [ 1312.817898][T26566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.536628][T28438] loop6: detected capacity change from 0 to 4096 [ 1313.631824][T28450] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1313.662986][T17074] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1313.855750][T28228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.863494][T28228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.871159][T28228] bridge_slave_0: entered allmulticast mode [ 1313.882471][T28228] bridge_slave_0: entered promiscuous mode [ 1313.902273][T17074] usb 2-1: Using ep0 maxpacket: 16 [ 1313.920216][T17074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1313.932895][T17074] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1313.947025][T17074] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1313.956497][T17074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.980483][T17074] usb 2-1: config 0 descriptor?? [ 1314.013162][T28228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.020872][T28228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.023757][T25431] Bluetooth: hci0: command tx timeout [ 1314.030591][T28228] bridge_slave_1: entered allmulticast mode [ 1314.050604][T28228] bridge_slave_1: entered promiscuous mode [ 1314.237427][T28228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.286912][T28228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.539888][T17074] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 1314.601190][T28228] team0: Port device team_slave_0 added [ 1314.654692][T28228] team0: Port device team_slave_1 added [ 1314.703625][T17074] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 9: -71 [ 1314.713919][T17074] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -71 [ 1314.724097][T17074] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense [ 1314.733215][T17074] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 1314.834932][T17074] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -71 [ 1314.890076][T17074] usb 2-1: USB disconnect, device number 27 [ 1314.969245][T28228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.977553][T28228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.005120][T28228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.099046][T28228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.106972][T28228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.133705][T28228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.287374][T28547] fido_id[28547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1315.658572][T28228] hsr_slave_0: entered promiscuous mode [ 1315.668496][T28228] hsr_slave_1: entered promiscuous mode [ 1315.677160][T28228] debugfs: 'hsr0' already exists in 'hsr' [ 1315.683226][T28228] Cannot create hsr debugfs directory [ 1316.096181][T25431] Bluetooth: hci0: command tx timeout [ 1317.096056][T28677] loop6: detected capacity change from 0 to 4096 [ 1317.210412][T28704] trusted_key: encrypted_key: insufficient parameters specified [ 1317.245025][T28228] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1317.280007][T28228] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1317.388647][T28228] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1317.488509][T28677] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1317.502088][T28228] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1317.931426][T26566] ntfs3(loop6): ino=9, ntfs_sync_fs failed, -22. [ 1318.217905][T28722] pim6reg9: entered allmulticast mode [ 1318.955847][T28228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.325117][T28228] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.501910][T26608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.509586][T26608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.637179][T28740] loop1: detected capacity change from 0 to 32768 [ 1319.658939][T26608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.666576][T26608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.736211][T28740] (syz.1.9398,28740,0):ocfs2_verify_heartbeat:818 ERROR: Cannot heartbeat on a locally mounted device. [ 1319.749984][T28740] (syz.1.9398,28740,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1320.453113][T28761] loop6: detected capacity change from 0 to 256 [ 1320.904337][T28761] FAT-fs (loop6): Directory bread(block 64) failed [ 1320.911176][T28761] FAT-fs (loop6): Directory bread(block 65) failed [ 1320.918688][T28761] FAT-fs (loop6): Directory bread(block 66) failed [ 1320.925613][T28761] FAT-fs (loop6): Directory bread(block 67) failed [ 1320.932487][T28761] FAT-fs (loop6): Directory bread(block 68) failed [ 1320.939374][T28761] FAT-fs (loop6): Directory bread(block 69) failed [ 1320.946390][T28761] FAT-fs (loop6): Directory bread(block 70) failed [ 1320.953207][T28761] FAT-fs (loop6): Directory bread(block 71) failed [ 1320.960042][T28761] FAT-fs (loop6): Directory bread(block 72) failed [ 1320.966866][T28761] FAT-fs (loop6): Directory bread(block 73) failed [ 1321.898291][T28228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.968182][T28792] netlink: 802 bytes leftover after parsing attributes in process `syz.4.9413'. [ 1322.921778][T28807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9417'. [ 1322.931130][T28807] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9417'. [ 1323.027252][T28813] loop6: detected capacity change from 0 to 8 [ 1323.204040][T28813] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1323.212209][T28813] SQUASHFS error: Failed to read block 0x202: -5 [ 1323.219425][T28813] SQUASHFS error: Unable to read metadata cache entry [200] [ 1323.867324][T28817] loop1: detected capacity change from 0 to 32768 [ 1323.932436][T28817] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1324.020495][T28825] loop6: detected capacity change from 0 to 256 [ 1324.160708][T28817] XFS (loop1): Metadata corruption detected at xfs_inode_buf_verify+0x613/0x6b0, xfs_inode block 0x2280 xfs_inode_buf_verify [ 1324.175977][T28817] XFS (loop1): Unmount and run xfs_repair [ 1324.181892][T28817] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1324.189673][T28817] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 1324.198867][T28817] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1324.208157][T28817] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1324.217270][T28817] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1324.228938][T28817] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1324.238183][T28817] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1324.241858][T28825] exfat: Deprecated parameter 'utf8' [ 1324.247285][T28817] 00000060: 40 00 00 00 cc f1 e3 c7 00 00 00 00 00 00 00 00 @............... [ 1324.247395][T28817] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1324.247495][T28817] XFS (loop1): metadata I/O error in "xfs_imap_to_bp+0x128/0x2e0" at daddr 0x2280 len 64 error 117 [ 1324.282198][T28817] XFS (loop1): Failed to read root inode 0x1140, error 117 [ 1324.289915][T28817] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 1324.347011][T28840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9424'. [ 1324.357080][T28840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9424'. [ 1324.367239][T28840] netlink: 'syz.0.9424': attribute type 1 has an invalid length. [ 1324.376136][T28840] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9424'. [ 1324.508126][T28825] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1325.246076][T28857] loop6: detected capacity change from 0 to 256 [ 1325.364514][T28228] veth0_vlan: entered promiscuous mode [ 1325.404249][T28228] veth1_vlan: entered promiscuous mode [ 1325.694740][T28857] FAT-fs (loop6): Directory bread(block 64) failed [ 1325.698509][T28228] veth0_macvtap: entered promiscuous mode [ 1325.701452][T28857] FAT-fs (loop6): Directory bread(block 65) failed [ 1325.718644][T28857] FAT-fs (loop6): Directory bread(block 66) failed [ 1325.725510][T28857] FAT-fs (loop6): Directory bread(block 67) failed [ 1325.732348][T28857] FAT-fs (loop6): Directory bread(block 68) failed [ 1325.739405][T28857] FAT-fs (loop6): Directory bread(block 69) failed [ 1325.746363][T28857] FAT-fs (loop6): Directory bread(block 70) failed [ 1325.756344][T28857] FAT-fs (loop6): Directory bread(block 71) failed [ 1325.765119][T28857] FAT-fs (loop6): Directory bread(block 72) failed [ 1325.771834][T28857] FAT-fs (loop6): Directory bread(block 73) failed [ 1325.851866][T28228] veth1_macvtap: entered promiscuous mode [ 1326.090761][T28228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1326.216228][T28228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1326.315853][T14653] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.350479][T14653] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.429088][T14653] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.469765][T14653] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.576025][T28873] program syz.0.9434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1330.110389][T28944] loop1: detected capacity change from 0 to 256 [ 1330.225919][T28944] exfat: Deprecated parameter 'utf8' [ 1330.231673][T28944] exfat: Deprecated parameter 'utf8' [ 1330.237642][T28944] exfat: Deprecated parameter 'utf8' [ 1330.241703][T28947] loop6: detected capacity change from 0 to 256 [ 1330.313553][T28947] FAT-fs (loop6): Directory bread(block 1285) failed [ 1330.422988][T28947] FAT-fs (loop6): Directory bread(block 1285) failed [ 1330.430149][T28947] FAT-fs (loop6): Directory bread(block 1285) failed [ 1330.437411][T28947] FAT-fs (loop6): Directory bread(block 1285) failed [ 1330.464478][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.472936][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1330.559788][T28944] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d) [ 1331.571303][T28973] loop6: detected capacity change from 0 to 64 [ 1331.677424][T28973] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 1333.514536][T14628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.522536][T14628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.893385][T25612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.901552][T25612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.284651][T29046] loop1: detected capacity change from 0 to 64 [ 1334.381723][T29047] loop6: detected capacity change from 0 to 512 [ 1334.490258][T29047] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1334.571295][T29047] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 1334.583449][T29047] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1334.594290][T29047] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.9483: Failed to acquire dquot type 1 [ 1334.693790][T29047] EXT4-fs (loop6): 1 truncate cleaned up [ 1334.739998][T29047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1335.216563][T26566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.601037][T29077] netlink: 204 bytes leftover after parsing attributes in process `syz.7.9493'. [ 1335.610743][T29077] netlink: 'syz.7.9493': attribute type 3 has an invalid length. [ 1336.448510][T29095] loop7: detected capacity change from 0 to 512 [ 1336.643210][T29095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1336.657290][T29095] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1337.095867][T28228] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.289718][T29189] Bluetooth: MGMT ver 1.23 [ 1340.660182][T29179] loop6: detected capacity change from 0 to 40427 [ 1340.707443][T29179] F2FS-fs (loop6): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 1340.721398][T29179] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1340.734025][T29179] F2FS-fs (loop6): Image doesn't support compression [ 1340.740898][T29179] F2FS-fs (loop6): journaled quota format not specified [ 1342.613645][T29249] sp0: Synchronizing with TNC [ 1342.909147][T29261] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1342.917652][T29261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1343.476824][T29275] loop6: detected capacity change from 0 to 24 [ 1343.558222][T29275] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1344.431850][T29299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9559'. [ 1344.497039][T29297] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9559'. [ 1344.871319][T25431] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 1345.114871][T29312] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9566'. [ 1345.124420][T29312] netlink: 172 bytes leftover after parsing attributes in process `syz.7.9566'. [ 1345.224240][T29314] loop1: detected capacity change from 0 to 256 [ 1345.345418][T29314] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1346.474703][T29342] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1346.727584][T29347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9577'. [ 1346.795655][ T30] audit: type=1326 audit(1756617877.725:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29346 comm="syz.6.9578" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09f6b8ebe9 code=0x0 [ 1347.051465][T29353] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1347.062494][T29353] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1347.117131][T29359] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1347.128379][T29359] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1347.584238][T29367] loop1: detected capacity change from 0 to 16 [ 1347.630569][T29367] erofs (device loop1): mounted with root inode @ nid 36. [ 1348.049693][T29380] netlink: 'syz.6.9587': attribute type 322 has an invalid length. [ 1348.937394][T25431] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1348.946088][T25431] Bluetooth: hci1: Injecting HCI hardware error event [ 1348.955306][T25431] Bluetooth: hci1: hardware error 0x00 [ 1349.181733][T29401] loop1: detected capacity change from 0 to 1024 [ 1349.701463][T29400] loop7: detected capacity change from 0 to 40427 [ 1349.714410][T29400] F2FS-fs (loop7): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 1349.723925][T29400] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1349.747068][T29400] F2FS-fs (loop7): Image doesn't support compression [ 1349.755277][T29400] F2FS-fs (loop7): build fault injection rate: 690 [ 1349.761980][T29400] F2FS-fs (loop7): build fault injection type: 0x35f7 [ 1349.796701][T29400] F2FS-fs (loop7): invalid crc value [ 1349.877608][T29400] F2FS-fs (loop7): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 1349.920774][T29400] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-117) [ 1350.180656][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9597'. [ 1350.464320][ T5865] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1350.661532][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.673731][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.683998][ T5865] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1350.693408][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.725312][ T5865] usb 7-1: config 0 descriptor?? [ 1351.056396][T25431] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1351.206539][ T5865] hid_parser_main: 5 callbacks suppressed [ 1351.206640][ T5865] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 1351.222203][ T5865] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 1351.230301][ T5865] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 1351.238346][ T5865] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 1351.246448][ T5865] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 1351.323285][ T5865] hid-multitouch 0003:0EEF:72C4.0005: hidraw0: USB HID v1.01 Device [HID 0eef:72c4] on usb-dummy_hcd.6-1/input0 [ 1351.407115][ T5865] usb 7-1: USB disconnect, device number 3 [ 1352.171250][T29461] fido_id[29461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1352.408702][T29474] loop1: detected capacity change from 0 to 512 [ 1352.824155][T17074] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1353.030014][T17074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1353.040459][T17074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 218, changing to 7 [ 1353.051945][T17074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 32945, setting to 1024 [ 1353.119414][T17074] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1353.129303][T17074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.137873][T17074] usb 2-1: Product: syz [ 1353.142213][T17074] usb 2-1: Manufacturer: syz [ 1353.147135][T17074] usb 2-1: SerialNumber: syz [ 1353.216312][T17074] usb 2-1: config 0 descriptor?? [ 1353.257994][T17074] usb 2-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 2f [ 1353.620490][T17074] usb 2-1: USB disconnect, device number 28 [ 1353.957062][T29533] loop6: detected capacity change from 0 to 256 [ 1354.202998][T29537] sock: sock_set_timeout: `syz.4.9621' (pid 29537) tries to set negative timeout [ 1354.467644][T29540] netlink: 332 bytes leftover after parsing attributes in process `syz.0.9622'. [ 1354.477144][T29540] netlink: 160 bytes leftover after parsing attributes in process `syz.0.9622'. [ 1355.089874][T29542] loop7: detected capacity change from 0 to 32768 [ 1355.141980][T29542] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section journal_seq_blacklist: entry 1 start >= end (16981954538416098692 >= 128) [ 1355.141980][T29542] journal_seq_blacklist (size 152): [ 1355.141980][T29542] 136-6431665835172427386 16981954538416098692-128 34376515584-1714681267 1611530240-0 0-0 0-0 0-0 0-0 42-4538035601408 [ 1355.141980][T29542] [ 1355.183493][T29542] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal_seq_blacklist [ 1356.111892][T29563] binder_alloc: binder_alloc_mmap_handler: 29557 200000ffd000-200001000000 already mapped failed -16 [ 1356.769460][T29574] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9632'. [ 1356.833622][T29571] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9632'. [ 1357.923548][T29586] loop7: detected capacity change from 0 to 32768 [ 1358.154622][T29586] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=snapshots_read,nojournal_transaction_names,noexcl,read_only,no_data_io [ 1358.154767][T29586] allowing incompatible features above 0.0: (unknown version) [ 1358.154852][T29586] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1358.200844][T29586] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 1358.210493][T29586] bcachefs (loop7): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing [ 1358.227694][T29586] bcachefs (loop7): recovering from clean shutdown, journal seq 10 [ 1358.237285][T29586] bcachefs (loop7): Version upgrade required: [ 1358.237285][T29586] Version upgrade from 0.27: fragmentation_lru to 1.7: mi_btree_bitmap incomplete [ 1358.237285][T29586] Doing incompatible version upgrade from 0.27: fragmentation_lru to 1.28: inode_has_case_insensitive [ 1358.237285][T29586] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 1358.395055][T29586] bcachefs (loop7): btree node read error at btree extents level 0/0 [ 1358.395154][T29586] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 26 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 1358.395254][T29586] loop7 node offset 16/26: btree node data missing: expected 26 sectors, found 16 [ 1358.395331][T29586] loop7 btree validate error [ 1358.395392][T29586] repair success (rewriting node) [ 1358.581444][T29586] bcachefs (loop7): btree node read error at btree backpointers level 0/0 [ 1358.581543][T29586] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 1358.581646][T29586] loop7 node offset 0/24 bset u64s 0: checksum error, type none: got should be [ 1358.581726][T29586] loop7 btree validate error [ 1358.581788][T29586] flagging btree backpointers lost data [ 1358.581860][T29586] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 1358.581936][T29586] ret fsck_errors_not_fixed [ 1358.647993][T29586] bcachefs (loop7): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 1358.669453][T29586] bcachefs (loop7): check_topology... done [ 1358.690173][T29586] bcachefs (loop7): accounting_read... done [ 1358.740051][T29586] bcachefs (loop7): alloc_read... done [ 1358.770857][T29586] bcachefs (loop7): snapshots_read... done [ 1358.791585][T29586] bcachefs (loop7): Fixed errors, running fsck a second time to verify fs is clean [ 1358.856126][T29586] bcachefs (loop7): done starting filesystem [ 1358.940898][T28228] bcachefs (loop7): shutting down [ 1359.079807][T28228] bcachefs (loop7): shutdown complete [ 1359.658917][T29630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9649'. [ 1359.680745][T29627] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9649'. [ 1361.865292][T17074] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1362.002008][T29683] loop1: detected capacity change from 0 to 256 [ 1362.045766][T17074] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.056483][T17074] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1362.129176][T17074] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1362.138911][T17074] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1362.147543][T17074] usb 7-1: SerialNumber: syz [ 1362.446550][T17074] usb 7-1: 0:2 : does not exist [ 1362.451843][T17074] usb 7-1: unit 48 not found! [ 1362.568567][T17074] usb 7-1: USB disconnect, device number 4 [ 1362.802518][T29715] block nbd1: NBD_DISCONNECT [ 1362.898999][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1363.101309][ T5865] kernel write not supported for file /input/mouse0 (pid: 5865 comm: kworker/1:4) [ 1366.831544][T29779] loop6: detected capacity change from 0 to 40427 [ 1366.847227][T29779] F2FS-fs (loop6): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 1366.856738][T29779] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1366.870069][T29779] F2FS-fs (loop6): Image doesn't support compression [ 1366.876950][T29779] F2FS-fs (loop6): build fault injection rate: 690 [ 1366.883899][T29779] F2FS-fs (loop6): build fault injection type: 0x35f7 [ 1366.902774][T29779] F2FS-fs (loop6): invalid crc value [ 1366.934871][T29779] F2FS-fs (loop6): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 1366.982035][T29779] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-117) [ 1368.248918][T29811] loop1: detected capacity change from 0 to 1024 [ 1368.494698][T29811] hfsplus: bad catalog entry type [ 1368.893268][T29582] hfsplus: b-tree write err: -5, ino 4 [ 1371.488238][T29881] loop6: detected capacity change from 0 to 256 [ 1371.575044][T29881] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 1372.054665][T29885] loop1: detected capacity change from 0 to 4096 [ 1372.270943][T29894] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1374.531111][T29923] loop1: detected capacity change from 0 to 764 [ 1374.598341][T29929] netlink: 'syz.6.9737': attribute type 8 has an invalid length. [ 1374.633836][T29923] rock: directory entry would overflow storage [ 1374.640858][T29923] rock: sig=0x5850, size=36, remaining=22 [ 1374.792251][T29933] loop7: detected capacity change from 0 to 256 [ 1374.991714][T29933] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 1376.586285][T29971] netlink: 802 bytes leftover after parsing attributes in process `syz.1.9752'. [ 1377.058946][T29983] loop1: detected capacity change from 0 to 256 [ 1377.230404][T29983] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 1379.119213][T30028] loop7: detected capacity change from 0 to 128 [ 1379.141063][T30027] sp0: Synchronizing with TNC [ 1379.962165][T30028] FAT-fs (loop7): Directory bread(block 11554) failed [ 1379.969560][T30028] FAT-fs (loop7): Directory bread(block 11555) failed [ 1379.976861][T30028] FAT-fs (loop7): Directory bread(block 11556) failed [ 1379.983956][T30028] FAT-fs (loop7): Directory bread(block 11557) failed [ 1379.990925][T30028] FAT-fs (loop7): Directory bread(block 11558) failed [ 1379.998914][T30028] FAT-fs (loop7): Directory bread(block 11559) failed [ 1380.007076][T30028] FAT-fs (loop7): Directory bread(block 11560) failed [ 1380.014412][T30028] FAT-fs (loop7): Directory bread(block 11561) failed [ 1380.021620][T30028] FAT-fs (loop7): Directory bread(block 11562) failed [ 1380.030955][T30028] FAT-fs (loop7): Directory bread(block 11563) failed [ 1381.141972][T30067] loop7: detected capacity change from 0 to 1024 [ 1381.460366][ T9] IPVS: starting estimator thread 0... [ 1381.550050][T30063] IPVS: using max 240 ests per chain, 12000 per kthread [ 1381.721262][ T3645] hfsplus: b-tree write err: -5, ino 4 [ 1382.092474][T30086] loop7: detected capacity change from 0 to 512 [ 1382.174875][T30086] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 1382.175390][T30086] System zones: 1-12 [ 1382.196280][T30086] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.9785: corrupted in-inode xattr: e_value size too large [ 1382.199796][T30086] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.9785: couldn't read orphan inode 15 (err -117) [ 1382.204234][T30086] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1382.547306][T28228] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.869953][T30106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9791'. [ 1383.769850][T30127] openvswitch: netlink: nsh attr 0 has unexpected len 16380 expected 0 [ 1383.779291][T30127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1384.243525][T30135] tipc: Enabling of bearer rejected, failed to enable media [ 1385.183484][T30161] blktrace: Concurrent blktraces are not allowed on loop7 [ 1385.969963][T30179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9818'. [ 1385.979782][T30179] smc: net device bond0 applied user defined pnetid SYZ [ 1385.980160][T30180] loop7: detected capacity change from 0 to 256 [ 1386.045249][T30180] exfat: Deprecated parameter 'utf8' [ 1386.051083][T30180] exfat: Deprecated parameter 'utf8' [ 1386.057655][T30180] exfat: Deprecated parameter 'utf8' [ 1386.220862][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-diskseq/935.tmp-b7:7' failed: Read-only file system [ 1386.267684][T30180] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d) [ 1386.319787][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-uuid/1234-1234.tmp-b7:7' failed: Read-only file system [ 1386.677417][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-diskseq/935.tmp-b7:7' failed: Read-only file system [ 1386.818098][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-diskseq/935.tmp-b7:7' failed: Read-only file system [ 1387.148382][T30213] blktrace: Concurrent blktraces are not allowed on loop7 [ 1387.200228][T30208] loop6: detected capacity change from 0 to 1024 [ 1387.263091][ T6084] udevd[6084]: symlink '../../loop7' '/dev/disk/by-diskseq/936.tmp-b7:7' failed: Read-only file system [ 1387.280205][T30208] hfsplus: Filesystem is marked locked, mounting read-only. [ 1387.432014][T30208] hfsplus: invalid catalog entry type in lookup [ 1387.443990][ T6006] udevd[6006]: symlink '../../loop6' '/dev/disk/by-diskseq/937.tmp-b7:6' failed: Read-only file system [ 1387.496639][ T6006] udevd[6006]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system [ 1387.558099][ T6006] udevd[6006]: symlink '../../loop6' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:6' failed: Read-only file system [ 1387.666549][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-diskseq/936.tmp-b7:7' failed: Read-only file system [ 1387.693358][T30222] loop7: detected capacity change from 0 to 64 [ 1387.847301][ T6168] udevd[6168]: symlink '../../loop6' '/dev/disk/by-diskseq/937.tmp-b7:6' failed: Read-only file system [ 1388.669986][T30250] loop1: detected capacity change from 0 to 256 [ 1388.721019][T30250] exfat: Deprecated parameter 'namecase' [ 1388.897624][T30250] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1389.693267][T30272] loop6: detected capacity change from 0 to 512 [ 1389.737047][T30272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1389.918763][T30272] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.9843: invalid indirect mapped block 4294967295 (level 1) [ 1389.945899][T30272] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.9843: invalid indirect mapped block 4294967295 (level 1) [ 1389.968621][ T3645] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.028109][T30272] EXT4-fs (loop6): 2 truncates cleaned up [ 1390.036739][T30272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1390.161532][T30281] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1390.175231][ T3645] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.196840][T30272] EXT4-fs error (device loop6): ext4_get_parent:1834: inode #11: comm syz.6.9843: bad parent inode number: 3 [ 1390.312568][ T3645] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.400265][ T3645] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.481016][T26566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1390.859359][ T3645] bridge_slave_1: left allmulticast mode [ 1390.865325][ T3645] bridge_slave_1: left promiscuous mode [ 1390.873600][ T3645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.893840][ T3645] bridge_slave_0: left allmulticast mode [ 1390.900477][ T3645] bridge_slave_0: left promiscuous mode [ 1390.907419][ T3645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.489969][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.499002][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1391.870899][ T3645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.903833][ T3645] bond_slave_0: left allmulticast mode [ 1391.940710][ T3645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1391.984122][ T3645] bond_slave_1: left allmulticast mode [ 1392.046992][ T3645] bond0 (unregistering): Released all slaves [ 1392.068444][ T3645] bond1 (unregistering): Released all slaves [ 1392.092098][ T3645] bond2 (unregistering): Released all slaves [ 1392.113297][ T3645] bond3 (unregistering): Released all slaves [ 1392.602524][ T6168] udevd[6168]: symlink '../../loop6' '/dev/disk/by-diskseq/943.tmp-b7:6' failed: Read-only file system [ 1392.655881][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1392.675890][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1392.686010][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1392.729506][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1392.743731][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1392.843269][ T6006] udevd[6006]: symlink '../../loop7' '/dev/disk/by-diskseq/940.tmp-b7:7' failed: Read-only file system [ 1392.997598][T30325] lo speed is unknown, defaulting to 1000 [ 1393.719691][T30367] loop7: detected capacity change from 0 to 1024 [ 1393.749803][ T6084] udevd[6084]: symlink '../../loop6' '/dev/disk/by-diskseq/943.tmp-b7:6' failed: Read-only file system [ 1393.760338][T30367] EXT4-fs: Ignoring removed orlov option [ 1393.767852][T30367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1393.928804][ T6170] udevd[6170]: symlink '../../loop7' '/dev/disk/by-diskseq/940.tmp-b7:7' failed: Read-only file system [ 1393.951283][ T6170] udevd[6170]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1394.000809][T30367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1394.434853][ T3645] hsr_slave_0: left promiscuous mode [ 1394.460907][ T3645] hsr_slave_1: left promiscuous mode [ 1394.478634][ T3645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1394.489040][ T3645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1394.514698][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-diskseq/940.tmp-b7:7' failed: Read-only file system [ 1394.533597][ T3645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1394.541227][ T3645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.628902][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1394.666721][ T3645] veth0_macvtap: left promiscuous mode [ 1394.672998][ T3645] veth1_vlan: left promiscuous mode [ 1394.709566][ T6084] udevd[6084]: symlink '../../loop6' '/dev/disk/by-diskseq/943.tmp-b7:6' failed: Read-only file system [ 1394.748135][T28228] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.791798][ T5825] Bluetooth: hci4: command tx timeout [ 1394.924615][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-diskseq/944.tmp-b7:7' failed: Read-only file system [ 1394.996783][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1395.717281][ T3645] team0 (unregistering): Port device veth1_macvtap removed [ 1396.055929][ T3645] team0 (unregistering): Port device team_slave_1 removed [ 1396.081488][ T3645] team0 (unregistering): Port device team_slave_0 removed [ 1396.479251][T30406] ipvlan2: entered promiscuous mode [ 1396.496124][T30406] bridge0: port 3(ipvlan2) entered blocking state [ 1396.503004][T30406] bridge0: port 3(ipvlan2) entered disabled state [ 1396.510213][T30406] ipvlan2: entered allmulticast mode [ 1396.515994][T30406] bridge0: entered allmulticast mode [ 1396.523722][T30406] ipvlan2: left allmulticast mode [ 1396.528898][T30406] bridge0: left allmulticast mode [ 1396.854579][ T5825] Bluetooth: hci4: command tx timeout [ 1397.435794][T30519] loop7: detected capacity change from 0 to 512 [ 1397.514630][T30519] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1397.527428][T30519] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1397.540187][T30325] chnl_net:caif_netlink_parms(): no params data found [ 1397.645902][T30519] EXT4-fs (loop7): 1 truncate cleaned up [ 1397.654555][T30519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1397.948244][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-diskseq/946.tmp-b7:7' failed: Read-only file system [ 1398.002682][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-label/\x86\x5b.tmp-b7:7' failed: Read-only file system [ 1398.028736][T28228] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1398.223655][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-diskseq/946.tmp-b7:7' failed: Read-only file system [ 1398.326061][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-diskseq/946.tmp-b7:7' failed: Read-only file system [ 1398.412129][T30518] syz.6.9877 (30518): drop_caches: 2 [ 1398.505474][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-diskseq/946.tmp-b7:7' failed: Read-only file system [ 1398.854353][ T6168] udevd[6168]: symlink '../../loop6' '/dev/disk/by-diskseq/943.tmp-b7:6' failed: Read-only file system [ 1398.928194][ T5825] Bluetooth: hci4: command tx timeout [ 1399.017737][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-diskseq/947.tmp-b7:7' failed: Read-only file system [ 1399.171490][T30564] loop7: detected capacity change from 0 to 1024 [ 1399.304103][T30564] EXT4-fs: Ignoring removed nobh option [ 1399.310209][T30564] EXT4-fs: Ignoring removed bh option [ 1399.525043][T30564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1399.595704][T30325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.603332][T30325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.611181][T30325] bridge_slave_0: entered allmulticast mode [ 1399.620466][T30325] bridge_slave_0: entered promiscuous mode [ 1399.754076][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-diskseq/948.tmp-b7:7' failed: Read-only file system [ 1399.866596][T30325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.874413][T30325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.882069][T30325] bridge_slave_1: entered allmulticast mode [ 1399.891533][T30325] bridge_slave_1: entered promiscuous mode [ 1399.930296][ T6168] udevd[6168]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1400.349600][ T6168] udevd[6168]: symlink '../../loop6' '/dev/disk/by-diskseq/943.tmp-b7:6' failed: Read-only file system [ 1400.404085][T28228] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.532042][T30325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.552377][T30325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.789956][T30325] team0: Port device team_slave_0 added [ 1400.843868][T30325] team0: Port device team_slave_1 added [ 1401.002244][ T5825] Bluetooth: hci4: command tx timeout [ 1401.201146][T30325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.208272][T30325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.234743][T30325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.352880][T30325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.360172][T30325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.386614][T30325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.833406][T30325] hsr_slave_0: entered promiscuous mode [ 1401.843171][T30325] hsr_slave_1: entered promiscuous mode [ 1401.851719][T30325] debugfs: 'hsr0' already exists in 'hsr' [ 1401.857616][T30325] Cannot create hsr debugfs directory [ 1403.559353][ T6168] udevd[6168]: symlink '../../loop6' '/dev/disk/by-diskseq/943.tmp-b7:6' failed: Read-only file system [ 1403.785498][T30729] ===================================================== [ 1403.792760][T30729] BUG: KMSAN: uninit-value in aes_encrypt+0x1239/0x1960 [ 1403.799858][T30729] aes_encrypt+0x1239/0x1960 [ 1403.804696][T30729] aesti_encrypt+0x7d/0xf0 [ 1403.809378][T30729] cipher_crypt_one+0x120/0x2e0 [ 1403.814385][T30729] crypto_cipher_encrypt_one+0x33/0x40 [ 1403.820015][T30729] drbg_ctr_update+0x19a9/0x3700 [ 1403.825138][T30729] drbg_seed+0xb1b/0xe20 [ 1403.829572][T30729] drbg_kcapi_seed+0x19b2/0x1e40 [ 1403.834681][T30729] crypto_rng_reset+0x193/0x250 [ 1403.839725][T30729] rng_setkey+0x52/0x70 [ 1403.844031][T30729] alg_setkey+0x265/0x3b0 [ 1403.848493][T30729] alg_setsockopt+0x503/0x760 [ 1403.853317][T30729] __sys_setsockopt+0x43b/0x580 [ 1403.858331][T30729] __x64_sys_setsockopt+0xf4/0x1a0 [ 1403.863635][T30729] x64_sys_call+0x27c9/0x3e20 [ 1403.868497][T30729] do_syscall_64+0xd9/0x210 [ 1403.873186][T30729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.879240][T30729] [ 1403.881645][T30729] [ 1403.881645][T30729] [ 1403.890483][T30729] Uninit was stored to memory at: [ 1403.895744][T30729] crypto_sha3_finup+0x136/0xe00 [ 1403.900875][T30729] crypto_shash_finup+0x327/0xe80 [ 1403.906097][T30729] jent_hash_time+0x247/0x590 [ 1403.910952][T30729] jent_condition_data+0x4f0/0x510 [ 1403.916329][T30729] jent_measure_jitter+0x547/0x770 [ 1403.921626][T30729] jent_gen_entropy+0x209/0x450 [ 1403.926653][T30729] jent_read_entropy+0x353/0xeb0 [ 1403.931848][T30729] jent_kcapi_random+0x6c/0x250 [ 1403.936893][T30729] drbg_seed+0x3f5/0xe20 [ 1403.941301][T30729] drbg_kcapi_seed+0x19b2/0x1e40 [ 1403.946403][T30729] crypto_rng_reset+0x193/0x250 [ 1403.951418][T30729] rng_setkey+0x52/0x70 [ 1403.955716][T30729] alg_setkey+0x265/0x3b0 [ 1403.960173][T30729] alg_setsockopt+0x503/0x760 [ 1403.964986][T30729] __sys_setsockopt+0x43b/0x580 [ 1403.969998][T30729] __x64_sys_setsockopt+0xf4/0x1a0 [ 1403.975275][T30729] x64_sys_call+0x27c9/0x3e20 [ 1403.980137][T30729] do_syscall_64+0xd9/0x210 [ 1403.984824][T30729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.990888][T30729] [ 1403.993286][T30729] Uninit was stored to memory at: [ 1403.998561][T30729] crypto_shash_finup+0xc5a/0xe80 [ 1404.003780][T30729] jent_hash_time+0x1de/0x590 [ 1404.008646][T30729] jent_condition_data+0x4f0/0x510 [ 1404.013940][T30729] jent_measure_jitter+0x547/0x770 [ 1404.019233][T30729] jent_gen_entropy+0x209/0x450 [ 1404.024264][T30729] jent_read_entropy+0x353/0xeb0 [ 1404.029376][T30729] jent_kcapi_random+0x6c/0x250 [ 1404.034415][T30729] drbg_seed+0x3f5/0xe20 [ 1404.038910][T30729] drbg_kcapi_seed+0x19b2/0x1e40 [ 1404.044022][T30729] crypto_rng_reset+0x193/0x250 [ 1404.049034][T30729] rng_setkey+0x52/0x70 [ 1404.053337][T30729] alg_setkey+0x265/0x3b0 [ 1404.057802][T30729] alg_setsockopt+0x503/0x760 [ 1404.062621][T30729] __sys_setsockopt+0x43b/0x580 [ 1404.067724][T30729] __x64_sys_setsockopt+0xf4/0x1a0 [ 1404.073018][T30729] x64_sys_call+0x27c9/0x3e20 [ 1404.077899][T30729] do_syscall_64+0xd9/0x210 [ 1404.082591][T30729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.088651][T30729] [ 1404.091141][T30729] Uninit was stored to memory at: [ 1404.096373][T30729] crypto_sha3_finup+0xc98/0xe00 [ 1404.101479][T30729] crypto_shash_finup+0x327/0xe80 [ 1404.106703][T30729] jent_hash_time+0x247/0x590 [ 1404.111565][T30729] jent_condition_data+0x4f0/0x510 [ 1404.116855][T30729] jent_measure_jitter+0x547/0x770 [ 1404.122161][T30729] jent_gen_entropy+0x209/0x450 [ 1404.127181][T30729] jent_read_entropy+0x353/0xeb0 [ 1404.132293][T30729] jent_kcapi_random+0x6c/0x250 [ 1404.137305][T30729] drbg_seed+0x3f5/0xe20 [ 1404.141700][T30729] drbg_kcapi_seed+0x19b2/0x1e40 [ 1404.146809][T30729] crypto_rng_reset+0x193/0x250 [ 1404.151819][T30729] rng_setkey+0x52/0x70 [ 1404.156120][T30729] alg_setkey+0x265/0x3b0 [ 1404.160599][T30729] alg_setsockopt+0x503/0x760 [ 1404.165405][T30729] __sys_setsockopt+0x43b/0x580 [ 1404.170421][T30729] __x64_sys_setsockopt+0xf4/0x1a0 [ 1404.175699][T30729] x64_sys_call+0x27c9/0x3e20 [ 1404.180552][T30729] do_syscall_64+0xd9/0x210 [ 1404.185321][T30729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.191370][T30729] [ 1404.193935][T30729] Uninit was stored to memory at: [ 1404.199132][T30729] keccakf+0x1efb/0x2110 [ 1404.203633][T30729] crypto_sha3_finup+0x772/0xe00 [ 1404.208746][T30729] crypto_shash_finup+0x327/0xe80 [ 1404.214051][T30729] jent_hash_time+0x247/0x590 [ 1404.218930][T30729] jent_condition_data+0x4f0/0x510 [ 1404.224230][T30729] jent_measure_jitter+0x547/0x770 [ 1404.229530][T30729] jent_gen_entropy+0x209/0x450 [ 1404.234563][T30729] jent_read_entropy+0x353/0xeb0 [ 1404.239712][T30729] jent_kcapi_random+0x6c/0x250 [ 1404.244743][T30729] drbg_seed+0x3f5/0xe20 [ 1404.249146][T30729] drbg_kcapi_seed+0x19b2/0x1e40 [ 1404.254260][T30729] crypto_rng_reset+0x193/0x250 [ 1404.259271][T30729] rng_setkey+0x52/0x70 [ 1404.263574][T30729] alg_setkey+0x265/0x3b0 [ 1404.268212][T30729] alg_setsockopt+0x503/0x760 [ 1404.273042][T30729] __sys_setsockopt+0x43b/0x580 [ 1404.278069][T30729] __x64_sys_setsockopt+0xf4/0x1a0 [ 1404.283377][T30729] x64_sys_call+0x27c9/0x3e20 [ 1404.288262][T30729] do_syscall_64+0xd9/0x210 [ 1404.292955][T30729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.299028][T30729] [ 1404.301428][T30729] Uninit was stored to memory at: [ 1404.306641][T30729] crypto_sha3_finup+0x5be/0xe00 [ 1404.311745][T30729] crypto_shash_finup+0x327/0xe80 [ 1404.316970][T30729] jent_hash_time+0x247/0x590 [ 1404.321833][T30729] jent_condition_data+0x4f0/0x510 [ 1404.327162][T30729] jent_measure_jitter+0x547/0x770 [ 1404.332460][T30729] jent_gen_entropy+0x209/0x450 [ 1404.337500][T30729] jent_read_entropy+0x353/0xeb0 [ 1404.342623][T30729] jent_kcapi_random+0x6c/0x250 [ 1404.347653][T30729] drbg_seed+0x3f5/0xe20 [ 1404.352051][T30729] drbg_kcapi_seed+0x19b2/0x1e40 [ 1404.357157][T30729] crypto_rng_reset+0x193/0x250 [ 1404.362167][T30729] rng_setkey+0x52/0x70 [ 1404.366454][T30729] alg_setkey+0x265/0x3b0 [ 1404.370908][T30729] alg_setsockopt+0x503/0x760 [ 1404.375711][T30729] __sys_setsockopt+0x43b/0x580 [ 1404.380757][T30729] __x64_sys_setsockopt+0xf4/0x1a0 [ 1404.386038][T30729] x64_sys_call+0x27c9/0x3e20 [ 1404.390897][T30729] do_syscall_64+0xd9/0x210 [ 1404.395574][T30729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.401621][T30729] [ 1404.404019][T30729] Uninit was stored to memory at: [ 1404.409256][T30729] crypto_sha3_finup+0x136/0xe00 [ 1404.414373][T30729] crypto_shash_finup+0x327/0xe80 [ 1404.419605][T30729] jent_hash_time+0x247/0x590 [ 1404.424455][T30729] jent_condition_data+0x4f0/0x510 [ 1404.429745][T30729] jent_measure_jitter+0x547/0x770 [ 1404.435030][T30729] jent_gen_entropy+0x209/0x450 [ 1404.440050][T30729] jent_read_entropy+0x353/0xeb0 [ 1404.445151][T30729] jent_kcapi_random+0x6c/0x250 [ 1404.450189][T30729] drbg_seed+0x3f5/0xe20 [ 1404.454579][T30729] drbg_kcapi_seed+0x19b2/0x1e40 [ 1404.459692][T30729] crypto_rng_reset+0x193/0x250 [ 1404.464694][T30729] rng_setkey+0x52/0x70 [ 1404.468982][T30729] alg_setkey+0x265/0x3b0 [ 1404.473435][T30729] alg_setsockopt+0x503/0x760 [ 1404.478242][T30729] __sys_setsockopt+0x43b/0x580 [ 1404.483251][T30729] __x64_sys_setsockopt+0xf4/0x1a0 [ 1404.488528][T30729] x64_sys_call+0x27c9/0x3e20 [ 1404.493392][T30729] do_syscall_64+0xd9/0x210 [ 1404.498077][T30729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.504124][T30729] [ 1404.506516][T30729] Uninit was stored to memory at: [ 1404.511754][T30729] crypto_shash_finup+0xc5a/0xe80 [ 1404.516969][T30729] jent_hash_time+0x1de/0x590 [ 1404.521826][T30729] jent_condition_data+0x4f0/0x510 [ 1404.527110][T30729] jent_measure_jitter+0x547/0x770 [ 1404.532412][T30729] jent_gen_entropy+0x209/0x450 [ 1404.537519][T30729] jent_read_entropy+0x353/0xeb0 [ 1404.542627][T30729] jent_kcapi_random+0x6c/0x250 [ 1404.547671][T30729] drbg_seed+0x3f5/0xe20 [ 1404.552079][T30729] drbg_kcapi_seed+0x19b2/0x1e40 [ 1404.557177][T30729] crypto_rng_reset+0x193/0x250 [ 1404.562177][T30729] rng_setkey+0x52/0x70 [ 1404.566461][T30729] alg_setkey+0x265/0x3b0 [ 1404.570919][T30729] alg_setsockopt+0x503/0x760 [ 1404.575725][T30729] __sys_setsockopt+0x43b/0x580 [ 1404.580747][T30729] __x64_sys_setsockopt+0xf4/0x1a0 [ 1404.586034][T30729] x64_sys_call+0x27c9/0x3e20 [ 1404.590899][T30729] do_syscall_64+0xd9/0x210 [ 1404.595580][T30729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.601634][T30729] [ 1404.604029][T30729] Local variable intermediary created at: [ 1404.609832][T30729] jent_hash_time+0x9b/0x590 [ 1404.614607][T30729] jent_condition_data+0x4f0/0x510 [ 1404.619920][T30729] [ 1404.622329][T30729] CPU: 0 UID: 0 PID: 30729 Comm: syz.7.9899 Not tainted syzkaller #0 PREEMPT(none) [ 1404.631860][T30729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1404.642029][T30729] ===================================================== [ 1404.649052][T30729] Disabling lock debugging due to kernel taint [ 1404.655318][T30729] Kernel panic - not syncing: kmsan.panic set ... [ 1404.661876][T30729] CPU: 0 UID: 0 PID: 30729 Comm: syz.7.9899 Tainted: G B syzkaller #0 PREEMPT(none) [ 1404.673007][T30729] Tainted: [B]=BAD_PAGE [ 1404.677252][T30729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1404.687430][T30729] Call Trace: [ 1404.690809][T30729] [ 1404.693837][T30729] __dump_stack+0x26/0x30 [ 1404.698346][T30729] dump_stack_lvl+0x53/0x270 [ 1404.703119][T30729] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1404.709118][T30729] dump_stack+0x1e/0x25 [ 1404.713449][T30729] vpanic+0x361/0xc50 [ 1404.717655][T30729] panic+0x15d/0x160 [ 1404.721771][T30729] kmsan_report+0x31c/0x320 [ 1404.726451][T30729] ? __msan_warning+0x1b/0x30 [ 1404.731283][T30729] ? aes_encrypt+0x1239/0x1960 [ 1404.736210][T30729] ? aesti_encrypt+0x7d/0xf0 [ 1404.740991][T30729] ? cipher_crypt_one+0x120/0x2e0 [ 1404.746185][T30729] ? crypto_cipher_encrypt_one+0x33/0x40 [ 1404.751988][T30729] ? drbg_ctr_update+0x19a9/0x3700 [ 1404.757286][T30729] ? drbg_seed+0xb1b/0xe20 [ 1404.761881][T30729] ? drbg_kcapi_seed+0x19b2/0x1e40 [ 1404.767190][T30729] ? crypto_rng_reset+0x193/0x250 [ 1404.772404][T30729] ? rng_setkey+0x52/0x70 [ 1404.776898][T30729] ? alg_setkey+0x265/0x3b0 [ 1404.781551][T30729] ? alg_setsockopt+0x503/0x760 [ 1404.786543][T30729] ? __sys_setsockopt+0x43b/0x580 [ 1404.791747][T30729] ? __x64_sys_setsockopt+0xf4/0x1a0 [ 1404.797209][T30729] ? x64_sys_call+0x27c9/0x3e20 [ 1404.802248][T30729] ? do_syscall_64+0xd9/0x210 [ 1404.807117][T30729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.813376][T30729] ? crypto_sha3_finup+0xd11/0xe00 [ 1404.818694][T30729] ? kmsan_get_metadata+0xfb/0x160 [ 1404.824031][T30729] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 1404.830547][T30729] ? kmsan_get_metadata+0xfb/0x160 [ 1404.835861][T30729] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1404.841873][T30729] ? kmsan_get_metadata+0xfb/0x160 [ 1404.847190][T30729] __msan_warning+0x1b/0x30 [ 1404.851867][T30729] aes_encrypt+0x1239/0x1960 [ 1404.856627][T30729] ? kmsan_get_metadata+0xfb/0x160 [ 1404.861946][T30729] aesti_encrypt+0x7d/0xf0 [ 1404.866528][T30729] cipher_crypt_one+0x120/0x2e0 [ 1404.871546][T30729] ? __pfx_aesti_encrypt+0x10/0x10 [ 1404.876862][T30729] ? crypto_cipher_setkey+0x380/0x430 [ 1404.882407][T30729] ? kmsan_get_metadata+0xfb/0x160 [ 1404.887703][T30729] crypto_cipher_encrypt_one+0x33/0x40 [ 1404.893344][T30729] drbg_ctr_update+0x19a9/0x3700 [ 1404.898559][T30729] ? __pfx_drbg_ctr_update+0x10/0x10 [ 1404.904067][T30729] drbg_seed+0xb1b/0xe20 [ 1404.908518][T30729] ? __pfx_jent_kcapi_random+0x10/0x10 [ 1404.914188][T30729] ? kmsan_get_metadata+0xfb/0x160 [ 1404.919480][T30729] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1404.925491][T30729] drbg_kcapi_seed+0x19b2/0x1e40 [ 1404.930653][T30729] ? __pfx_drbg_kcapi_seed+0x10/0x10 [ 1404.936135][T30729] crypto_rng_reset+0x193/0x250 [ 1404.941184][T30729] rng_setkey+0x52/0x70 [ 1404.945499][T30729] ? __pfx_rng_setkey+0x10/0x10 [ 1404.950520][T30729] alg_setkey+0x265/0x3b0 [ 1404.955020][T30729] alg_setsockopt+0x503/0x760 [ 1404.959956][T30729] ? __pfx_alg_setsockopt+0x10/0x10 [ 1404.965503][T30729] __sys_setsockopt+0x43b/0x580 [ 1404.970567][T30729] __x64_sys_setsockopt+0xf4/0x1a0 [ 1404.975909][T30729] x64_sys_call+0x27c9/0x3e20 [ 1404.980789][T30729] do_syscall_64+0xd9/0x210 [ 1404.985585][T30729] ? irqentry_exit+0x16/0x60 [ 1404.990366][T30729] ? clear_bhb_loop+0x40/0x90 [ 1404.995215][T30729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.001290][T30729] RIP: 0033:0x7fc5b2f8ebe9 [ 1405.005822][T30729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1405.025591][T30729] RSP: 002b:00007fc5b3dae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1405.034178][T30729] RAX: ffffffffffffffda RBX: 00007fc5b31c5fa0 RCX: 00007fc5b2f8ebe9 [ 1405.042308][T30729] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 1405.050411][T30729] RBP: 00007fc5b3011e19 R08: 0000000000000001 R09: 0000000000000000 [ 1405.058604][T30729] R10: 0000200000c18000 R11: 0000000000000246 R12: 0000000000000000 [ 1405.066704][T30729] R13: 00007fc5b31c6038 R14: 00007fc5b31c5fa0 R15: 00007fffda948a48 [ 1405.074859][T30729] [ 1405.078282][T30729] Kernel Offset: disabled [ 1405.082660][T30729] Rebooting in 86400 seconds..