last executing test programs: 11m10.096786156s ago: executing program 2 (id=208): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 11m9.781290665s ago: executing program 2 (id=210): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r0, 0x0, 0x0, 0x3000}]) 11m8.456440792s ago: executing program 2 (id=219): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001040)=@v1={0x0, @aes256, 0x18, @auto="2691e58961545ea5"}) 11m7.17764239s ago: executing program 2 (id=226): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x6, 0x229, &(0x7f00000005c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 11m6.394942268s ago: executing program 2 (id=231): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x15, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4080046}, 0x0) 11m5.712293991s ago: executing program 2 (id=235): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0xd, 0x4) 11m3.191996361s ago: executing program 32 (id=235): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0xd, 0x4) 10m48.557622722s ago: executing program 4 (id=302): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x3, 0x0) 10m47.709269287s ago: executing program 4 (id=307): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="94020000210001"], 0x294}}, 0x0) 10m46.881176451s ago: executing program 4 (id=311): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1f, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x8000003, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x1003, 0xe, 0x0, 0x71, 0x401, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x93, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x2, 0x3, 0x0, 0x7, 0x5, 0xcf, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x5, 0x7, 0x3, 0x9, 0x64c5b18b, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x7, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x100000, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0x8, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x2, 0x30b1d693, 0xa1f, 0x8, 0x7, 0xfffffffd, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 10m46.22114871s ago: executing program 4 (id=314): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) 10m44.768777745s ago: executing program 4 (id=319): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) 10m43.704817614s ago: executing program 4 (id=322): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r2, r0, 0x4, r0}, 0x10) 10m40.762613747s ago: executing program 33 (id=322): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r2, r0, 0x4, r0}, 0x10) 9m50.309017373s ago: executing program 0 (id=593): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 9m49.88869619s ago: executing program 0 (id=597): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r1, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) 9m49.392935652s ago: executing program 0 (id=600): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x68}], 0x2c) 9m48.759541566s ago: executing program 0 (id=604): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x6, 0x229, &(0x7f00000005c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 9m48.157199499s ago: executing program 0 (id=607): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007000044"], 0x28}}, 0x0) 9m47.637344066s ago: executing program 0 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d800400020004"], 0x2c}}, 0x0) 9m45.865484294s ago: executing program 34 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d800400020004"], 0x2c}}, 0x0) 5m4.864188936s ago: executing program 1 (id=2150): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 5m4.295624559s ago: executing program 1 (id=2155): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)='I', 0x0, 0x4}, 0xfffffd87) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 5m3.845151274s ago: executing program 1 (id=2158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'wlan1\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'pim6reg\x00', 0x600}) 5m3.1514938s ago: executing program 1 (id=2161): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 5m2.498896436s ago: executing program 1 (id=2164): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) 5m1.548626063s ago: executing program 1 (id=2169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 4m59.263741974s ago: executing program 35 (id=2169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3m41.601041528s ago: executing program 7 (id=2502): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 3m40.474782642s ago: executing program 7 (id=2505): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m39.420834723s ago: executing program 7 (id=2509): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a9, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x4, 0x0, 0x7, 0x2, 0x1}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 3m38.386374317s ago: executing program 7 (id=2527): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 3m37.586808072s ago: executing program 7 (id=2521): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000a4d000/0x1000)=nil, 0x20a4d000}}) 3m36.590285166s ago: executing program 7 (id=2526): r0 = socket$inet6(0xa, 0x803, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x14000014, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 3m34.443588222s ago: executing program 36 (id=2526): r0 = socket$inet6(0xa, 0x803, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x14000014, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 9.971639661s ago: executing program 3 (id=3602): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x12, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x9, 0xff, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.696740532s ago: executing program 3 (id=3606): io_uring_setup(0x2e15, &(0x7f0000000580)={0x0, 0x1, 0x1, 0x1, 0x1be}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@abort}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@nodelalloc}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)="591e78ffdb", 0x5}], 0x10000000000000ba, 0x0, 0x0) 7.039905325s ago: executing program 9 (id=3614): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x1, 0xd5ebd3b98ad6b24b, 0x3, 0x6, 0x801}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 6.06179098s ago: executing program 9 (id=3619): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x1000100, &(0x7f0000000140)=ANY=[], 0x1, 0xc11, &(0x7f0000000d00)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x82000000) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x80000000) 5.98730083s ago: executing program 3 (id=3620): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x257, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f00000000c0)={@desc={0x4091, 0x0, @desc3}}) 5.856097402s ago: executing program 8 (id=3621): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000200)={0x200, 0x1, &(0x7f0000000180)=[r1], 0x0, 0x0, 0x0}) 4.813201967s ago: executing program 8 (id=3625): r0 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0xc, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 4.664970524s ago: executing program 9 (id=3626): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './mnt'}, 0x9) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) 4.512384617s ago: executing program 5 (id=3627): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.087470946s ago: executing program 8 (id=3629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x4a6954c0}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb, {0x1, 0x1}}, {0xc, 0xa}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044014}, 0x0) 3.581187171s ago: executing program 6 (id=3630): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.49153501s ago: executing program 3 (id=3631): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)={[{@eas_no}, {@eas_no}, {@case_asis}, {@check_none}]}, 0x1, 0x9e18, &(0x7f000000a040)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/31, 0x1f) getdents(r0, 0x0, 0x58) 3.4517631s ago: executing program 5 (id=3632): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e21, 0xe5, @private2, 0x8}, 0x1c) 3.365728687s ago: executing program 8 (id=3633): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, "ed"}, @global=@item_4={0x3, 0x1, 0x2, "2a9aad4f"}]}}, 0x0}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 2.921482981s ago: executing program 6 (id=3634): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000780), 0x12) bind$x25(r0, &(0x7f0000000080), 0x12) 2.581920134s ago: executing program 5 (id=3635): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x2) 2.529446575s ago: executing program 9 (id=3636): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x2fa, &(0x7f0000000140)) 2.114674833s ago: executing program 6 (id=3637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 1.65321242s ago: executing program 9 (id=3638): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.606938403s ago: executing program 5 (id=3639): socket$inet(0x2, 0xa, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.298736534s ago: executing program 6 (id=3640): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x3c, r2, 0xa72704fd2dfb5147, 0xf0bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0x3c}}, 0x0) 1.249443417s ago: executing program 3 (id=3641): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000200)=[{r1, 0x3701}], 0x1, 0x0, 0x0, 0x0) tkill(r0, 0x7) 877.707498ms ago: executing program 5 (id=3642): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$x25(r0, 0x0, 0x0, 0x0) 820.607799ms ago: executing program 8 (id=3643): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x50) 690.925771ms ago: executing program 6 (id=3644): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x1) 287.90732ms ago: executing program 3 (id=3645): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x2124}, {r0, 0xb0c4}], 0x2, 0x11ff) shutdown(r0, 0x0) 243.412178ms ago: executing program 8 (id=3646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffdffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="100043"], 0x34}], 0x1}, 0x0) 165.113767ms ago: executing program 5 (id=3647): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) 90.079622ms ago: executing program 9 (id=3648): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xeafd}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x60}}, 0x0) 0s ago: executing program 6 (id=3649): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000001900), r1) kernel console output (not intermixed with test programs): 544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.616758][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2345'. [ 680.876691][T11546] loop5: detected capacity change from 0 to 16 [ 680.916416][T11545] loop7: detected capacity change from 0 to 256 [ 680.958449][T11546] erofs (device loop5): mounted with root inode @ nid 36. [ 680.997743][T11545] exfat: Deprecated parameter 'namecase' [ 681.144760][T11546] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 681.156755][T11546] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 681.176736][T11546] erofs (device loop5): readahead error at folio 7 @ nid 36 [ 681.184291][T11546] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 681.196227][T11546] erofs (device loop5): readahead error at folio 6 @ nid 36 [ 681.209762][T11546] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 681.220554][T11546] erofs (device loop5): readahead error at folio 5 @ nid 36 [ 681.233943][T11546] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 681.245860][T11546] erofs (device loop5): readahead error at folio 4 @ nid 36 [ 681.254385][T11546] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 681.273832][T11546] erofs (device loop5): readahead error at folio 3 @ nid 36 [ 681.282619][T11546] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 681.293434][T11546] erofs (device loop5): readahead error at folio 2 @ nid 36 [ 681.306932][T11546] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 681.317828][T11546] erofs (device loop5): readahead error at folio 1 @ nid 36 [ 681.325446][T11546] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 681.338752][T11545] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 681.356828][T11546] erofs (device loop5): readahead error at folio 0 @ nid 36 [ 681.367587][T11546] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 681.385059][T11546] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 681.396036][T11546] erofs (device loop5): read error -117 @ 0 of nid 36 [ 681.403185][T11546] erofs (device loop5): failed to readdir of logical block 0 of nid 36 [ 681.604828][T11551] loop8: detected capacity change from 0 to 512 [ 681.675685][T11551] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 681.851708][T11551] EXT4-fs (loop8): 1 truncate cleaned up [ 681.868774][T11551] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.462446][T11104] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.299345][T11584] @: renamed from vlan0 (while UP) [ 684.404539][T11581] loop7: detected capacity change from 0 to 32768 [ 684.418791][T11581] btrfs: Deprecated parameter 'usebackuproot' [ 684.426953][T11581] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 684.442053][T11581] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2364 (11581) [ 684.463082][T11581] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 684.473744][T11581] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 684.714711][T11581] BTRFS info (device loop7): rebuilding free space tree [ 684.778461][T11581] BTRFS info (device loop7): enabling ssd optimizations [ 684.785761][T11581] BTRFS info (device loop7): using spread ssd allocation scheme [ 684.793981][T11581] BTRFS info (device loop7): disabling tree log [ 684.800933][T11581] BTRFS info (device loop7): enabling free space tree [ 684.808020][T11581] BTRFS info (device loop7): force clearing of disk cache [ 684.815369][T11581] BTRFS info (device loop7): enabling auto defrag [ 684.827309][T11581] BTRFS info (device loop7): trying to use backup root at mount time [ 684.835633][T11581] BTRFS info (device loop7): max_inline set to 4096 [ 685.025369][ T7475] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 685.301097][T11607] blk_print_req_error: 5 callbacks suppressed [ 685.301189][T11607] I/O error, dev loop8, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 685.321886][T11607] gfs2: error -5 reading superblock [ 685.754917][T11617] macvlan0: left promiscuous mode [ 685.771062][T11617] netlink: 'syz.5.2374': attribute type 2 has an invalid length. [ 686.670045][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2379'. [ 686.679671][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2379'. [ 687.333075][T11638] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 688.158262][T11647] loop3: detected capacity change from 0 to 512 [ 688.280779][T11647] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 688.343997][T11653] bridge0: port 3(syz_tun) entered blocking state [ 688.351452][T11653] bridge0: port 3(syz_tun) entered disabled state [ 688.358847][T11653] syz_tun: entered allmulticast mode [ 688.368246][T11653] syz_tun: entered promiscuous mode [ 688.375930][T11653] bridge0: port 3(syz_tun) entered blocking state [ 688.383008][T11653] bridge0: port 3(syz_tun) entered forwarding state [ 688.475444][T11647] EXT4-fs (loop3): 1 truncate cleaned up [ 688.483721][T11647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.903189][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2391'. [ 689.306405][T11663] Falling back ldisc for ttyS3. [ 689.473099][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.884785][T11672] loop5: detected capacity change from 0 to 1024 [ 689.954615][T11672] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 690.061001][T11672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.238900][T11678] loop3: detected capacity change from 0 to 1024 [ 690.511578][ T30] audit: type=1800 audit(1758454381.441:48): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2398" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 690.541567][ T30] audit: type=1804 audit(1758454381.491:49): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2398" name="/newroot/393/file1/file1" dev="loop3" ino=20 res=1 errno=0 [ 690.570458][ T30] audit: type=1800 audit(1758454381.491:50): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2398" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 690.625431][ T6544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.194580][T11699] loop3: detected capacity change from 0 to 1024 [ 692.762695][T11708] loop6: detected capacity change from 0 to 64 [ 692.890738][T11710] loop8: detected capacity change from 0 to 1024 [ 692.909947][T11710] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 692.968577][T11708] Trying to free block not in datazone [ 692.974370][T11708] Trying to free block not in datazone [ 692.991200][T11708] Trying to free block not in datazone [ 693.049351][T11710] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.523921][T11104] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.779983][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2419'. [ 693.794501][T11718] loop6: detected capacity change from 0 to 1024 [ 693.984870][ T30] audit: type=1800 audit(1758454384.931:51): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2417" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 694.084518][ T30] audit: type=1804 audit(1758454384.981:52): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2417" name="/newroot/437/file1/file1" dev="loop6" ino=20 res=1 errno=0 [ 694.112942][ T30] audit: type=1800 audit(1758454384.981:53): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2417" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 694.463795][T11723] loop8: detected capacity change from 0 to 4096 [ 694.642345][T11727] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 694.734591][ T30] audit: type=1800 audit(1758454385.671:54): pid=11723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2418" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 695.277120][T11734] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 695.514258][T11736] loop8: detected capacity change from 0 to 256 [ 695.818829][T11739] loop7: detected capacity change from 0 to 7 [ 695.831930][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 695.841450][ C1] buffer_io_error: 5 callbacks suppressed [ 695.841529][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 695.867828][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 695.877358][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 695.961132][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 695.970879][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 696.014090][T11742] Invalid logical block size (6) [ 696.032599][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.042488][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 696.077789][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.087506][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 696.106201][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.115983][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 696.146998][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.157566][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 696.168061][T11739] ldm_validate_partition_table(): Disk read failed. [ 696.179392][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.189201][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 696.211517][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.221235][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 696.234430][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.244202][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 696.266997][T11739] Dev loop7: unable to read RDB block 0 [ 696.320408][T11739] loop7: unable to read partition table [ 696.367996][T11739] loop7: partition table beyond EOD, truncated [ 696.374684][T11739] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾Cêj̀–ă¢P=Ă½?ă}X‹ºĐ œëÜ%ơ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkƯ) failed (rc=-5) [ 696.953092][T11740] loop5: detected capacity change from 0 to 32768 [ 697.224129][T11740] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 697.395924][ T6544] ocfs2: Unmounting device (7,5) on (node local) [ 697.974358][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2435'. [ 698.554918][T11761] loop8: detected capacity change from 0 to 512 [ 698.715972][T11753] loop3: detected capacity change from 0 to 4096 [ 698.818002][T11753] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 699.165073][T11753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.835188][T11764] loop6: detected capacity change from 0 to 32768 [ 699.845049][T11764] btrfs: Deprecated parameter 'usebackuproot' [ 699.851685][T11764] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 699.865274][T11764] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2438 (11764) [ 699.910763][T11764] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 699.922659][T11764] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 699.954897][T11769] loop8: detected capacity change from 0 to 1024 [ 700.232851][ T30] audit: type=1800 audit(1758454391.171:55): pid=11769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2439" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 700.275772][T11764] BTRFS info (device loop6): rebuilding free space tree [ 700.317141][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.341352][T11764] BTRFS info (device loop6): enabling ssd optimizations [ 700.349633][T11764] BTRFS info (device loop6): using spread ssd allocation scheme [ 700.357732][T11764] BTRFS info (device loop6): disabling tree log [ 700.364276][T11764] BTRFS info (device loop6): enabling free space tree [ 700.371703][T11764] BTRFS info (device loop6): force clearing of disk cache [ 700.384307][T11764] BTRFS info (device loop6): enabling auto defrag [ 700.397627][T11764] BTRFS info (device loop6): trying to use backup root at mount time [ 700.405953][T11764] BTRFS info (device loop6): max_inline set to 4096 [ 700.470942][ T30] audit: type=1804 audit(1758454391.281:56): pid=11769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2439" name="/newroot/44/file1/file1" dev="loop8" ino=20 res=1 errno=0 [ 700.499972][ T30] audit: type=1800 audit(1758454391.281:57): pid=11769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2439" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 700.624641][ T6778] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 701.261321][T11791] loop7: detected capacity change from 0 to 512 [ 701.346098][T11791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 701.393852][T11791] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.2443: invalid block [ 701.465705][T11798] loop8: detected capacity change from 0 to 256 [ 701.527882][T11791] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2443: invalid indirect mapped block 4294967295 (level 1) [ 701.579482][T11791] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2443: invalid indirect mapped block 4294967295 (level 1) [ 701.644553][T11791] EXT4-fs (loop7): 2 truncates cleaned up [ 701.652931][T11791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.824068][T11791] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2443: bg 0: block 5: invalid block bitmap [ 702.177999][ T7475] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.555572][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 702.754817][ T24] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 702.764337][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.825617][ T24] usb 9-1: config 0 descriptor?? [ 703.098769][T11809] blk_print_req_error: 5 callbacks suppressed [ 703.098858][T11809] I/O error, dev loop5, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 703.121330][T11809] gfs2: error -5 reading superblock [ 703.127301][ T24] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 703.345821][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 703.409858][ T24] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 703.417888][ T24] [drm] Initialized udl on minor 2 [ 703.428005][ T24] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 703.439215][ T24] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 703.473140][ T5860] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 703.532598][ T5860] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 703.541384][ T5860] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 703.622611][ T24] usb 9-1: USB disconnect, device number 2 [ 703.875632][T11819] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2453'. [ 704.408862][T11826] netlink: 'syz.8.2456': attribute type 1 has an invalid length. [ 705.381558][T11822] loop3: detected capacity change from 0 to 4096 [ 705.497130][T11822] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 706.060680][T11822] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 706.227638][T11822] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 708.362075][T11853] loop8: detected capacity change from 0 to 32768 [ 708.371640][T11853] btrfs: Deprecated parameter 'usebackuproot' [ 708.385158][T11853] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 708.407996][T11853] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2468 (11853) [ 708.484265][T11853] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 708.495285][T11853] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 708.720595][ T5868] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 708.907037][T11853] BTRFS info (device loop8): rebuilding free space tree [ 708.939280][ T5868] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 708.945699][T11853] BTRFS info (device loop8): enabling ssd optimizations [ 708.949185][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.965151][T11853] BTRFS info (device loop8): using spread ssd allocation scheme [ 708.975569][T11853] BTRFS info (device loop8): disabling tree log [ 708.983081][T11853] BTRFS info (device loop8): enabling free space tree [ 708.985944][ T5868] usb 6-1: config 0 descriptor?? [ 708.996762][T11853] BTRFS info (device loop8): force clearing of disk cache [ 708.996890][T11853] BTRFS info (device loop8): enabling auto defrag [ 708.996999][T11853] BTRFS info (device loop8): trying to use backup root at mount time [ 708.997113][T11853] BTRFS info (device loop8): max_inline set to 4096 [ 709.301769][ T5868] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 709.463633][T11104] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 709.513907][ T5868] [drm:udl_init] *ERROR* Selecting channel failed [ 709.589039][ T5868] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 709.596143][ T5868] [drm] Initialized udl on minor 2 [ 709.622956][ T5868] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 709.643780][ T5868] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 709.656095][T11111] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 709.674574][T11111] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 709.683274][T11111] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 709.692961][ T5868] usb 6-1: USB disconnect, device number 17 [ 711.993453][T11897] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2482'. [ 713.157145][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 713.333391][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 713.345113][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 713.355641][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 713.365281][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.382214][T11907] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 713.409369][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 713.675476][ T24] usb 4-1: USB disconnect, device number 21 [ 716.105737][T11916] loop3: detected capacity change from 0 to 32768 [ 716.115425][T11916] btrfs: Deprecated parameter 'usebackuproot' [ 716.122010][T11916] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 716.135183][T11916] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2486 (11916) [ 716.227654][T11916] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 716.238990][T11916] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 716.413509][T11916] BTRFS info (device loop3): rebuilding free space tree [ 716.461986][T11916] BTRFS info (device loop3): enabling ssd optimizations [ 716.475761][T11916] BTRFS info (device loop3): using spread ssd allocation scheme [ 716.486714][T11916] BTRFS info (device loop3): disabling tree log [ 716.494737][T11916] BTRFS info (device loop3): enabling free space tree [ 716.502041][T11916] BTRFS info (device loop3): force clearing of disk cache [ 716.509578][T11916] BTRFS info (device loop3): enabling auto defrag [ 716.516274][T11916] BTRFS info (device loop3): trying to use backup root at mount time [ 716.524697][T11916] BTRFS info (device loop3): max_inline set to 4096 [ 716.701547][ T5809] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 717.070174][T11943] loop8: detected capacity change from 0 to 1024 [ 717.301871][T11943] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 717.315988][T11943] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.337686][ T5863] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 717.391539][T11943] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.2492: lblock 0 mapped to illegal pblock 0 (length 1) [ 717.466072][T11943] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 717.485535][T11943] EXT4-fs (loop8): This should not happen!! Data will be lost [ 717.485535][T11943] [ 717.520967][ T5863] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 717.530815][ T5863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.619300][ T5863] usb 8-1: config 0 descriptor?? [ 717.818659][T11104] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 717.885945][ T5863] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 718.113112][ T5863] [drm:udl_init] *ERROR* Selecting channel failed [ 718.197942][ T5863] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 718.211370][ T5863] [drm] Initialized udl on minor 2 [ 718.257593][ T5863] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 718.266998][ T5863] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 718.288810][ T24] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 718.313320][ T5868] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 718.322234][ T24] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 718.322846][ T24] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 718.345052][ T5863] usb 8-1: USB disconnect, device number 21 [ 718.594706][ T5868] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 718.615928][ T5868] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 718.627566][ T5868] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 718.643323][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.662991][T11956] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 718.751022][ T5868] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 719.052239][ T5863] usb 7-1: USB disconnect, device number 14 [ 721.844949][T11990] sctp: Trying to GSO but underlying device doesn't support it. [ 721.969371][T11995] loop8: detected capacity change from 0 to 128 [ 722.028350][T11995] EXT4-fs: Ignoring removed nobh option [ 722.093962][T11995] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 722.137328][T11995] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 722.292679][T11995] EXT4-fs (loop8): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 722.337787][T11995] EXT4-fs (loop8): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 722.728454][T11104] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 723.232436][T12009] bpf: Bad value for 'gid' [ 723.358209][T12011] loop8: detected capacity change from 0 to 1024 [ 723.390105][T12011] EXT4-fs: Ignoring removed orlov option [ 723.603493][T12011] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 723.612920][T12011] System zones: 0-1, 3-12 [ 723.629197][T12011] EXT4-fs (loop8): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.082580][T11104] EXT4-fs (loop8): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 724.492563][T12022] input: syz0 as /devices/virtual/input/input16 [ 724.495055][ T4291] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.644253][ T4291] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.753183][ T4291] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.855448][ T4291] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.136362][ T4291] bridge_slave_1: left allmulticast mode [ 725.145449][ T4291] bridge_slave_1: left promiscuous mode [ 725.152367][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.205281][ T4291] bridge_slave_0: left allmulticast mode [ 725.214274][ T4291] bridge_slave_0: left promiscuous mode [ 725.224990][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.772028][ T4291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.811356][ T4291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.842147][ T4291] bond0 (unregistering): Released all slaves [ 726.485547][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.492762][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.518923][ T4291] hsr_slave_0: left promiscuous mode [ 726.551668][ T4291] hsr_slave_1: left promiscuous mode [ 726.560663][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.568670][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.620722][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.630005][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.719450][ T4291] veth1_macvtap: left promiscuous mode [ 726.725348][ T4291] veth0_macvtap: left promiscuous mode [ 726.732772][ T4291] veth1_vlan: left promiscuous mode [ 726.738796][ T4291] veth0_vlan: left promiscuous mode [ 727.487748][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 727.582559][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 727.595899][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 727.595989][ T4291] team0 (unregistering): Port device team_slave_1 removed [ 727.644092][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 727.675886][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 727.699438][ T4291] team0 (unregistering): Port device team_slave_0 removed [ 729.067184][ T5863] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 729.287267][ T5863] usb 7-1: Using ep0 maxpacket: 8 [ 729.310585][T12037] chnl_net:caif_netlink_parms(): no params data found [ 729.360376][ T5863] usb 7-1: unable to get BOS descriptor or descriptor too short [ 729.368856][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2541'. [ 729.415071][ T5863] usb 7-1: config 2 has an invalid interface number: 153 but max is 1 [ 729.424035][ T5863] usb 7-1: config 2 has an invalid descriptor of length 131, skipping remainder of the config [ 729.435221][ T5863] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 729.445065][ T5863] usb 7-1: config 2 has no interface number 0 [ 729.451705][ T5863] usb 7-1: config 2 interface 153 has no altsetting 0 [ 729.607853][ T5863] usb 7-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=95.ac [ 729.617978][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.626233][ T5863] usb 7-1: Product: syz [ 729.630903][ T5863] usb 7-1: Manufacturer: syz [ 729.635719][ T5863] usb 7-1: SerialNumber: syz [ 729.897278][T11105] Bluetooth: hci1: command tx timeout [ 729.943940][ T5863] hub 7-1:2.153: bad descriptor, ignoring hub [ 729.950799][ T5863] hub 7-1:2.153: probe with driver hub failed with error -5 [ 729.963862][ T5863] sierra 7-1:2.153: Sierra USB modem converter detected [ 730.090563][ T5863] usb 7-1: USB disconnect, device number 15 [ 730.098201][ T5863] sierra 7-1:2.153: device disconnected [ 730.696267][T12037] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.705555][T12037] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.716703][T12037] bridge_slave_0: entered allmulticast mode [ 730.729595][T12037] bridge_slave_0: entered promiscuous mode [ 730.785279][T12037] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.794158][T12037] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.807170][T12037] bridge_slave_1: entered allmulticast mode [ 730.817341][T12037] bridge_slave_1: entered promiscuous mode [ 731.007888][T12037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.039100][T12037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.198565][T12037] team0: Port device team_slave_0 added [ 731.235919][T12037] team0: Port device team_slave_1 added [ 731.355988][T12037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.364508][T12037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.394070][T12037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.421017][T12037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.429092][T12037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.461012][T12037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.611575][T12037] hsr_slave_0: entered promiscuous mode [ 731.625967][T12037] hsr_slave_1: entered promiscuous mode [ 731.980993][T11105] Bluetooth: hci1: command tx timeout [ 732.125423][T12037] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 732.158929][T12037] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 732.186108][T12037] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 732.210838][T12037] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 732.654084][T12037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.721997][T12037] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.766299][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.774108][ T4291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.822488][ T4111] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.830279][ T4111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.574960][T12037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.059878][T11105] Bluetooth: hci1: command tx timeout [ 734.394164][T12037] veth0_vlan: entered promiscuous mode [ 734.435874][T12037] veth1_vlan: entered promiscuous mode [ 734.597702][T12037] veth0_macvtap: entered promiscuous mode [ 734.623661][T12037] veth1_macvtap: entered promiscuous mode [ 734.707748][T12037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.762924][T12037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.823569][ T4111] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.851263][ T4111] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.869828][ T4111] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.893896][ T4111] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.140568][T11105] Bluetooth: hci1: command tx timeout [ 736.936872][ T3912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.946092][ T3912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.045651][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.056281][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.384690][T12113] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2557'. [ 737.765966][T12111] loop9: detected capacity change from 0 to 4096 [ 737.792537][T12111] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 737.924482][T12111] ntfs3(loop9): ino=1d, mi_enum_attr [ 737.930502][T12111] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 737.939063][T12111] ntfs3(loop9): ino=1d, mi_enum_attr [ 737.945593][T12111] ntfs3(loop9): ino=1d, mi_enum_attr [ 739.395496][T12128] loop9: detected capacity change from 0 to 32768 [ 739.408206][T12128] btrfs: Deprecated parameter 'usebackuproot' [ 739.414550][T12128] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 739.431977][T12128] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2548 (12128) [ 739.473278][T12128] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 739.484036][T12128] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 739.758299][T12128] BTRFS info (device loop9): rebuilding free space tree [ 739.816865][T12128] BTRFS info (device loop9): enabling ssd optimizations [ 739.824341][T12128] BTRFS info (device loop9): using spread ssd allocation scheme [ 739.833397][T12128] BTRFS info (device loop9): disabling tree log [ 739.841367][T12128] BTRFS info (device loop9): enabling free space tree [ 739.848536][T12128] BTRFS info (device loop9): force clearing of disk cache [ 739.855869][T12128] BTRFS info (device loop9): enabling auto defrag [ 739.864009][T12128] BTRFS info (device loop9): trying to use backup root at mount time [ 739.872789][T12128] BTRFS info (device loop9): max_inline set to 4096 [ 740.056363][T12037] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 740.105581][T12132] syz.8.2554 (12132): drop_caches: 2 [ 740.165085][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2561'. [ 740.959817][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2568'. [ 743.255410][T12195] sctp: [Deprecated]: syz.5.2580 (pid 12195) Use of int in max_burst socket option. [ 743.255410][T12195] Use struct sctp_assoc_value instead [ 743.888902][T11085] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 744.031728][ T5863] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 744.107214][T11085] usb 4-1: Using ep0 maxpacket: 16 [ 744.170003][T11085] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.184570][T11085] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.194948][T11085] usb 4-1: config 0 interface 0 has no altsetting 0 [ 744.202762][T11085] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 744.215270][T11085] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.248839][T11085] usb 4-1: config 0 descriptor?? [ 744.281696][ T5863] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 744.291403][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.299846][ T5863] usb 6-1: Product: syz [ 744.304241][ T5863] usb 6-1: Manufacturer: syz [ 744.309286][ T5863] usb 6-1: SerialNumber: syz [ 744.449486][ T5863] usb 6-1: config 0 descriptor?? [ 744.688565][T12217] loop9: detected capacity change from 0 to 1024 [ 744.733622][T12219] loop6: detected capacity change from 0 to 128 [ 744.761170][ T5863] usb 6-1: ignoring: probably an ADSL modem [ 744.806105][T12219] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 744.838374][T11085] apple 0003:05AC:0247.0014: fixing up Magic Keyboard JIS report descriptor [ 744.847242][T12219] hpfs: filesystem error: improperly stopped [ 744.847428][T12219] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 744.847609][T12219] hpfs: You really don't want any checks? You are crazy... [ 744.848476][T12219] hpfs: hpfs_map_sector(): read error [ 744.878838][T12219] hpfs: code page support is disabled [ 744.906091][T11085] apple 0003:05AC:0247.0014: unknown main item tag 0x0 [ 744.914293][T11085] apple 0003:05AC:0247.0014: unknown main item tag 0x0 [ 744.924759][T11085] apple 0003:05AC:0247.0014: unknown main item tag 0x0 [ 744.933803][T11085] apple 0003:05AC:0247.0014: unknown main item tag 0x0 [ 744.941979][T11085] apple 0003:05AC:0247.0014: unknown main item tag 0x0 [ 744.952333][T11085] apple 0003:05AC:0247.0014: unknown main item tag 0x0 [ 744.962693][T11085] apple 0003:05AC:0247.0014: unknown main item tag 0x0 [ 744.970853][T11085] apple 0003:05AC:0247.0014: unknown main item tag 0x0 [ 744.981262][T11085] apple 0003:05AC:0247.0014: unknown main item tag 0x0 [ 744.990115][T11085] apple 0003:05AC:0247.0014: unknown main item tag 0x0 [ 745.062606][T11085] apple 0003:05AC:0247.0014: unexpected long global item [ 745.107395][T12219] hpfs: hpfs_map_4sectors(): unaligned read [ 745.113919][T12219] hpfs: hpfs_map_4sectors(): unaligned read [ 745.120368][T12219] hpfs: filesystem error: unable to find root dir [ 745.174674][T12221] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2592'. [ 745.276908][ T5863] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 745.304200][T12221] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2592'. [ 745.401047][T11085] apple 0003:05AC:0247.0014: parse failed [ 745.411140][T11085] apple 0003:05AC:0247.0014: probe with driver apple failed with error -22 [ 745.448839][T11085] usb 4-1: USB disconnect, device number 22 [ 745.508051][T12043] usb 6-1: USB disconnect, device number 18 [ 746.624537][T12243] ipvlan0: entered promiscuous mode [ 746.635507][T12243] ipvlan0: left promiscuous mode [ 746.711242][T11105] block nbd2: Receive control failed (result -32) [ 746.855477][T12245] netlink: 'syz.9.2603': attribute type 3 has an invalid length. [ 746.864482][T12245] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.2603'. [ 747.954912][T12257] loop5: detected capacity change from 0 to 256 [ 748.305778][T12257] FAT-fs (loop5): Directory bread(block 64) failed [ 748.314003][T12257] FAT-fs (loop5): Directory bread(block 65) failed [ 748.321581][T12257] FAT-fs (loop5): Directory bread(block 66) failed [ 748.331343][T12257] FAT-fs (loop5): Directory bread(block 67) failed [ 748.341115][T12257] FAT-fs (loop5): Directory bread(block 68) failed [ 748.348947][T12257] FAT-fs (loop5): Directory bread(block 69) failed [ 748.355892][T12257] FAT-fs (loop5): Directory bread(block 70) failed [ 748.366751][T12257] FAT-fs (loop5): Directory bread(block 71) failed [ 748.373893][T12257] FAT-fs (loop5): Directory bread(block 72) failed [ 748.381517][T12257] FAT-fs (loop5): Directory bread(block 73) failed [ 748.605037][ T30] audit: type=1800 audit(1758454439.541:58): pid=12257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2609" name="file1" dev="loop5" ino=1048780 res=0 errno=0 [ 748.648177][T12257] syz.5.2609: attempt to access beyond end of device [ 748.648177][T12257] loop5: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 748.893160][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2615'. [ 748.905633][T12270] netlink: 'syz.8.2615': attribute type 5 has an invalid length. [ 749.968620][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2622'. [ 750.127145][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2624'. [ 750.185738][T12290] netlink: 'syz.8.2624': attribute type 14 has an invalid length. [ 750.194023][T12290] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2624'. [ 750.477415][T12295] loop9: detected capacity change from 0 to 256 [ 750.604117][T12297] loop6: detected capacity change from 0 to 256 [ 750.692445][T12295] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 751.102200][T12297] FAT-fs (loop6): Directory bread(block 64) failed [ 751.106084][T12302] netlink: 1084 bytes leftover after parsing attributes in process `syz.5.2629'. [ 751.109273][T12297] FAT-fs (loop6): Directory bread(block 65) failed [ 751.127036][T12297] FAT-fs (loop6): Directory bread(block 66) failed [ 751.133979][T12297] FAT-fs (loop6): Directory bread(block 67) failed [ 751.141876][T12297] FAT-fs (loop6): Directory bread(block 68) failed [ 751.148813][T12297] FAT-fs (loop6): Directory bread(block 69) failed [ 751.155828][T12297] FAT-fs (loop6): Directory bread(block 70) failed [ 751.163018][T12297] FAT-fs (loop6): Directory bread(block 71) failed [ 751.170533][T12297] FAT-fs (loop6): Directory bread(block 72) failed [ 751.180362][T12297] FAT-fs (loop6): Directory bread(block 73) failed [ 751.397328][ T30] audit: type=1800 audit(1758454442.341:59): pid=12297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2627" name="file1" dev="loop6" ino=1048782 res=0 errno=0 [ 751.454193][T12297] syz.6.2627: attempt to access beyond end of device [ 751.454193][T12297] loop6: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 751.470287][T12297] syz.6.2627: attempt to access beyond end of device [ 751.470287][T12297] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 751.543354][T12297] syz.6.2627: attempt to access beyond end of device [ 751.543354][T12297] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 754.531291][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2648'. [ 755.089954][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2650'. [ 755.320365][T12353] pim6reg: tun_chr_ioctl cmd 2147767507 [ 755.433800][T12355] loop5: detected capacity change from 0 to 512 [ 755.493488][T12355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 755.699908][T12355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.721921][T12355] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.277246][ T5863] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 756.306336][ T6544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.609761][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 756.621955][ T5863] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 756.632979][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.699668][ T5863] usb 7-1: config 0 descriptor?? [ 757.248288][ T5863] hid_parser_main: 824 callbacks suppressed [ 757.248405][ T5863] samsung 0003:0419:0600.0015: unknown main item tag 0x2 [ 757.262754][ T5863] samsung 0003:0419:0600.0015: unknown main item tag 0x5 [ 757.281773][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2661'. [ 757.349795][ T5863] samsung 0003:0419:0600.0015: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.6-1/input0 [ 757.457213][ T5860] usb 7-1: USB disconnect, device number 16 [ 757.686794][ T5863] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 757.876813][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 757.926004][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 757.940668][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 758.021433][ T5863] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 758.031478][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.042340][ T5863] usb 4-1: Product: syz [ 758.047544][ T5863] usb 4-1: Manufacturer: syz [ 758.052356][ T5863] usb 4-1: SerialNumber: syz [ 758.150854][T12392] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.173617][ T5863] usb 4-1: config 0 descriptor?? [ 758.223538][ T5863] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 758.233519][ T5863] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 758.542179][T12397] loop9: detected capacity change from 0 to 1024 [ 758.609599][T12397] hfsplus: Unknown parameter 'decomzose' [ 758.766118][T12402] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 758.868602][ T5863] em28xx 4-1:0.0: chip ID is em2882/3 [ 759.087394][ T5863] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 759.109547][ T5863] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 759.120525][ T5863] em28xx 4-1:0.0: No AC97 audio processor [ 759.158165][ T5863] usb 4-1: USB disconnect, device number 23 [ 759.168598][ T5863] em28xx 4-1:0.0: Disconnecting em28xx [ 759.207441][ T5863] em28xx 4-1:0.0: Freeing device [ 759.290158][T12405] loop5: detected capacity change from 0 to 1024 [ 759.474058][ T30] audit: type=1800 audit(1758454450.421:60): pid=12405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2672" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 760.493791][T12428] loop8: detected capacity change from 0 to 256 [ 760.567773][T12428] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 760.579266][T12428] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 760.718001][T12428] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 761.916027][T12452] loop8: detected capacity change from 0 to 512 [ 762.517873][T12455] loop6: detected capacity change from 0 to 2048 [ 762.566357][T12455] EXT4-fs: Ignoring removed mblk_io_submit option [ 762.744676][T12455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.912855][T12455] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2694: bg 0: block 234: padding at end of block bitmap is not set [ 762.935292][T12455] EXT4-fs (loop6): Remounting filesystem read-only [ 762.967149][T12455] overlayfs: failed to verify upper root origin [ 763.268796][ T6778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.020304][T12043] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 765.224379][T12043] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 765.240917][T12043] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 765.251874][T12043] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 765.262645][T12043] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.410240][T12500] loop8: detected capacity change from 0 to 4096 [ 765.430533][T12500] ntfs3: Invalid value for dmask. [ 765.538014][T12510] loop9: detected capacity change from 0 to 1024 [ 765.580327][T12510] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 765.590981][T12510] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 765.601530][T12510] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 765.607752][T11085] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 765.632068][T12510] EXT4-fs error (device loop9): ext4_get_journal_inode:5800: inode #32: comm syz.9.2720: iget: special inode unallocated [ 765.662109][T12510] EXT4-fs (loop9): no journal found [ 765.669365][T12510] EXT4-fs (loop9): can't get journal size [ 765.749796][T12510] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 765.852192][T12510] EXT4-fs error (device loop9): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.9.2720: path /41/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 765.916030][T11085] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.927274][T11085] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 765.944272][T11085] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 765.955499][T11085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.982951][T11085] usb 6-1: config 0 descriptor?? [ 766.154912][T12037] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.388195][T12517] loop9: detected capacity change from 0 to 128 [ 766.403457][T12516] loop8: detected capacity change from 0 to 512 [ 766.428554][T12517] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 766.466098][T11085] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 766.477133][T11085] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 766.486302][T11085] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 766.494668][T11085] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 766.502534][T11085] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 766.531899][T12517] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 766.612679][T12043] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 766.624448][T12043] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input17 [ 766.670252][T12043] input: failed to attach handler kbd to device input17, error: -5 [ 766.683275][T11085] kovaplus 0003:1E7D:2D50.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 766.738237][T12043] usb 7-1: USB disconnect, device number 17 [ 767.000412][T11085] kovaplus 0003:1E7D:2D50.0016: couldn't init struct kovaplus_device [ 767.009193][T11085] kovaplus 0003:1E7D:2D50.0016: couldn't install mouse [ 767.045397][T11085] kovaplus 0003:1E7D:2D50.0016: probe with driver kovaplus failed with error -71 [ 767.096910][T11085] usb 6-1: USB disconnect, device number 19 [ 767.252600][T12519] loop3: detected capacity change from 0 to 512 [ 767.392069][T12519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.406994][T12519] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 767.476856][ T5863] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 767.678070][ T5863] usb 9-1: Using ep0 maxpacket: 8 [ 767.716215][ T5863] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 767.724930][ T5863] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 767.734421][ T5863] usb 9-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 767.745811][ T5863] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 767.755463][ T5863] usb 9-1: config 250 has no interface number 0 [ 767.763633][ T5863] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 767.779263][ T5863] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 767.792072][ T5863] usb 9-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 767.806816][ T5863] usb 9-1: config 250 interface 228 has no altsetting 0 [ 767.949461][T12532] vlan2: entered allmulticast mode [ 768.049690][ T5863] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 768.059375][ T5863] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 768.068443][ T5863] usb 9-1: Product: syz [ 768.077300][ T5863] usb 9-1: SerialNumber: syz [ 768.171414][ T5863] hub 9-1:250.228: bad descriptor, ignoring hub [ 768.181663][ T5863] hub 9-1:250.228: probe with driver hub failed with error -5 [ 768.435848][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.600751][T12540] input: syz0 as /devices/virtual/input/input18 [ 768.694149][ T5863] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 769.171109][ T5863] usb 9-1: failed to restore interface 228 altsetting 255 (error=-71) [ 769.225961][ T5863] usb 9-1: USB disconnect, device number 3 [ 769.268253][T12549] loop9: detected capacity change from 0 to 512 [ 769.352878][T12549] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 769.431988][T12549] EXT4-fs (loop9): invalid journal inode [ 769.438501][T12549] EXT4-fs (loop9): can't get journal size [ 769.493427][T12549] EXT4-fs (loop9): 1 truncate cleaned up [ 769.502391][T12549] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.577898][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 769.811170][T12549] EXT4-fs (loop9): shut down requested (1) [ 770.131547][T12550] loop6: detected capacity change from 0 to 32768 [ 770.215629][T12550] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 770.321804][T12037] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.842741][T12550] XFS (loop6): Ending clean mount [ 770.877563][T12550] XFS (loop6): Quotacheck needed: Please wait. [ 770.985017][T12550] XFS (loop6): Quotacheck: Done. [ 771.086703][T12575] loop5: detected capacity change from 0 to 128 [ 771.185501][ T6778] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 771.236747][T12575] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 771.297377][T12575] ext4 filesystem being mounted at /544/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 771.340510][T12574] loop3: detected capacity change from 0 to 64 [ 771.444743][T12580] loop9: detected capacity change from 0 to 256 [ 771.699454][ T6544] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 772.123108][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2750'. [ 772.396735][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2749'. [ 772.408651][T12588] IPVS: Error joining to the multicast group [ 772.972230][T12595] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2754'. [ 773.035686][T12597] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2755'. [ 773.461042][T12603] netlink: 'syz.3.2757': attribute type 1 has an invalid length. [ 773.469429][T12603] netlink: 'syz.3.2757': attribute type 2 has an invalid length. [ 773.477762][T12603] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.2757'. [ 773.605037][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2760'. [ 773.617684][T12612] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2760'. [ 775.052366][T12634] loop6: detected capacity change from 0 to 256 [ 775.154007][T12634] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 775.169188][T12634] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 775.246778][T12634] exFAT-fs (loop6): valid_size(150994954) is greater than size(10) [ 775.935587][T12647] input: syz1 as /devices/virtual/input/input19 [ 775.967548][T11085] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 776.147311][T11085] usb 9-1: Using ep0 maxpacket: 32 [ 776.168583][T11085] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 776.177707][T11085] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 776.191755][T11085] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 776.201940][T11085] usb 9-1: config 1 has no interface number 0 [ 776.208454][T11085] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 776.223434][T11085] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 776.237205][T11085] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 776.249708][T11085] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.348245][T11085] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 776.591641][T11085] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 776.902996][T12641] loop8: detected capacity change from 0 to 256 [ 776.977377][T12641] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 777.074846][T12641] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 777.403639][T12667] loop5: detected capacity change from 0 to 512 [ 777.444740][T11085] usb 9-1: USB disconnect, device number 4 [ 777.456351][T11085] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 777.545170][T12667] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 777.579791][T12667] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 777.633003][T12667] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2781: corrupted in-inode xattr: e_value size too large [ 777.667425][T12667] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2781: couldn't read orphan inode 15 (err -117) [ 777.697030][T12667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.312528][ T6544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.639177][T12670] loop3: detected capacity change from 0 to 4096 [ 778.891046][T12684] loop5: detected capacity change from 0 to 512 [ 778.918111][T12684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 778.970393][T12684] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 778.979943][T12684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 778.990553][T12684] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 779.001148][T12684] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 779.012269][T12684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 779.140295][T12670] ntfs3(loop3): ino=19, mi_enum_attr [ 779.146061][T12670] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 779.277557][T12684] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2788: dx entry: limit 65535 != root limit 120 [ 779.291383][T12684] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2788: Corrupt directory, running e2fsck is recommended [ 779.357402][T12684] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.2788: path /553/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 779.709917][ T6544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.148498][T12696] loop9: detected capacity change from 0 to 2048 [ 780.242894][T12696] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 780.367364][T12696] UDF-fs: error (device loop9): udf_verify_fi: directory (ino 1376) has entry where CRC length (0) does not match entry length (44) [ 780.532571][ T5863] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 780.810365][ T5863] usb 9-1: unable to get BOS descriptor or descriptor too short [ 780.842187][ T5863] usb 9-1: no configurations [ 780.847368][ T5863] usb 9-1: can't read configurations, error -22 [ 781.471707][T12718] netlink: 'syz.5.2805': attribute type 1 has an invalid length. [ 782.901412][T12745] veth0_to_bond: entered allmulticast mode [ 783.047043][T11085] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 783.267600][T11085] usb 4-1: Using ep0 maxpacket: 32 [ 783.309166][T11085] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 783.321574][T11085] usb 4-1: config 0 has no interface number 0 [ 783.328731][T11085] usb 4-1: config 0 interface 2 has no altsetting 0 [ 783.397325][T11085] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 783.407483][T11085] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.415893][T11085] usb 4-1: Product: syz [ 783.423413][T11085] usb 4-1: Manufacturer: syz [ 783.428427][T11085] usb 4-1: SerialNumber: syz [ 783.534986][T12043] kernel write not supported for file /comedi4 (pid: 12043 comm: kworker/0:6) [ 783.619931][T11085] usb 4-1: config 0 descriptor?? [ 783.907574][T11085] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 784.111787][T11085] usb 4-1: USB disconnect, device number 24 [ 785.376002][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2832'. [ 785.472772][T12778] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2832'. [ 785.487957][T12778] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2832'. [ 786.447486][T11085] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 786.508413][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2838'. [ 786.607068][T11085] usb 7-1: Using ep0 maxpacket: 16 [ 786.668654][T11085] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.682984][T11085] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.693441][T11085] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 786.703287][T11085] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.791954][T11085] usb 7-1: config 0 descriptor?? [ 787.377664][T11085] hid (null): report_id 0 is invalid [ 787.571522][T12043] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 787.588915][T11085] usb 7-1: string descriptor 0 read error: -71 [ 787.725348][T11085] usb 7-1: Max retries (5) exceeded reading string descriptor 200 [ 787.737398][T11085] letsketch 0003:6161:4D15.0017: probe with driver letsketch failed with error -32 [ 787.763017][T11085] usb 7-1: USB disconnect, device number 18 [ 787.790359][T12043] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.803973][T12043] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 787.845971][T12043] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 787.855526][T12043] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 787.868896][T12043] usb 10-1: SerialNumber: syz [ 787.943978][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 787.951479][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 788.234337][T12043] usb 10-1: 0:2 : does not exist [ 788.336184][T12043] usb 10-1: USB disconnect, device number 2 [ 788.420793][T12807] usb usb8: usbfs: process 12807 (syz.5.2845) did not claim interface 0 before use [ 788.541987][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2844'. [ 788.910404][T12043] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 789.085337][T12043] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 789.148930][T12043] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 789.159025][T12043] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.170532][T12043] usb 7-1: Product: syz [ 789.174946][T12043] usb 7-1: Manufacturer: syz [ 789.181695][T12043] usb 7-1: SerialNumber: syz [ 789.292491][T12043] usb 7-1: config 0 descriptor?? [ 789.313396][T12821] loop8: detected capacity change from 0 to 128 [ 789.548444][T12821] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 789.582365][T12821] hpfs: filesystem error: improperly stopped [ 789.589005][T12821] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 789.597452][T12821] hpfs: You really don't want any checks? You are crazy... [ 789.714395][T12821] hpfs: hpfs_map_sector(): read error [ 789.720536][T12821] hpfs: code page support is disabled [ 789.800625][T12821] hpfs: hpfs_map_4sectors(): unaligned read [ 789.864676][T12821] hpfs: hpfs_map_4sectors(): unaligned read [ 789.871208][T12821] hpfs: filesystem error: unable to find root dir [ 790.611724][T12824] loop5: detected capacity change from 0 to 32768 [ 790.750055][T12824] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 790.855927][T12043] usb 7-1: USB disconnect, device number 19 [ 791.176165][T12841] loop9: detected capacity change from 0 to 256 [ 791.202576][T12839] loop8: detected capacity change from 0 to 1024 [ 791.344952][ T30] audit: type=1800 audit(1758454482.291:61): pid=12839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2854" name=3A1B dev="loop8" ino=26 res=0 errno=0 [ 791.375647][T12841] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 791.389483][T12841] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 791.433528][T12824] XFS (loop5): Ending clean mount [ 791.450219][T12824] XFS (loop5): Quotacheck needed: Please wait. [ 791.504658][T12824] XFS (loop5): Quotacheck: Done. [ 791.515587][T12841] exFAT-fs (loop9): valid_size(150994954) is greater than size(10) [ 791.665174][ T6544] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 791.697213][ T5023] hfsplus: b-tree write err: -5, ino 4 [ 791.825332][T12843] loop3: detected capacity change from 0 to 1024 [ 792.527618][T12607] hfsplus: b-tree write err: -5, ino 4 [ 792.543724][T12850] loop9: detected capacity change from 0 to 2048 [ 792.707892][T12854] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 792.727873][T12848] loop8: detected capacity change from 0 to 4096 [ 792.880969][T12850] NILFS error (device loop9): nilfs_dotdot: directory #12 missing '.' [ 792.914989][T12856] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 792.965702][T12850] Remounting filesystem read-only [ 793.454186][T12037] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 794.217082][T12860] loop3: detected capacity change from 0 to 32768 [ 794.280968][T12860] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 794.384131][T12869] loop5: detected capacity change from 0 to 256 [ 794.420546][T12869] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 794.432200][T12869] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 794.689308][T12869] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 794.985542][T12869] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 794.994239][T12869] exFAT-fs (loop5): Filesystem has been set read-only [ 795.208516][T12860] XFS (loop3): Ending clean mount [ 795.229387][T12860] XFS (loop3): Quotacheck needed: Please wait. [ 795.433768][T12860] XFS (loop3): Quotacheck: Done. [ 795.723076][ T5809] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 796.174180][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2870'. [ 796.242010][T12894] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2870'. [ 796.255320][T12894] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2870'. [ 796.628839][T12890] loop8: detected capacity change from 0 to 4096 [ 797.118054][ T30] audit: type=1800 audit(1758454488.051:62): pid=12890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2873" name="file1" dev="loop8" ino=33 res=0 errno=0 [ 798.716848][T12912] loop9: detected capacity change from 0 to 2048 [ 798.827825][T12917] loop3: detected capacity change from 0 to 256 [ 798.857024][T12912] UDF-fs: warning (device loop9): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 799.385517][T12917] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 799.399258][T12917] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 799.456619][T12915] loop5: detected capacity change from 0 to 32768 [ 799.530249][T12912] loop9: detected capacity change from 0 to 1024 [ 799.557102][T12915] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 799.601951][T12917] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 799.742586][T12912] hfsplus: request for non-existent node 211 in B*Tree [ 799.750097][T12912] hfsplus: request for non-existent node 211 in B*Tree [ 800.132521][T12915] XFS (loop5): Ending clean mount [ 800.152699][T12915] XFS (loop5): Quotacheck needed: Please wait. [ 800.246146][T12915] XFS (loop5): Quotacheck: Done. [ 800.450316][ T6544] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 801.108050][T12946] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2891'. [ 801.300956][T12950] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 802.139877][T12961] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2899'. [ 803.490308][T12971] loop9: detected capacity change from 0 to 4096 [ 803.597331][T12971] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 804.692828][T12991] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2915'. [ 804.703125][T12991] bridge0: port 3(syz_tun) entered disabled state [ 804.711358][T12991] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.958977][T12993] loop5: detected capacity change from 0 to 512 [ 806.367806][T13022] loop5: detected capacity change from 0 to 256 [ 806.464684][T13022] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 806.479961][T13022] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 806.495430][T13024] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2930'. [ 806.701442][T13022] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 806.817010][ T30] audit: type=1800 audit(1758454497.761:63): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2929" name="file1" dev="loop5" ino=1048789 res=0 errno=0 [ 807.720045][T13039] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2937'. [ 807.990788][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2939'. [ 808.024093][T13043] sch_fq: defrate 0 ignored. [ 808.355292][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2941'. [ 808.893667][T13056] loop9: detected capacity change from 0 to 8 [ 808.897403][ T30] audit: type=1326 audit(1758454499.841:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13054 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 808.960287][T13056] SQUASHFS error: lzo decompression failed, data probably corrupt [ 808.968890][T13056] SQUASHFS error: Failed to read block 0x91: -5 [ 808.975411][T13056] SQUASHFS error: Unable to read metadata cache entry [8f] [ 808.987377][T13056] SQUASHFS error: Unable to read inode 0x11f [ 809.019444][T13059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.041394][ T30] audit: type=1326 audit(1758454499.961:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13054 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 809.065960][ T30] audit: type=1326 audit(1758454499.971:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13054 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 809.089162][ T30] audit: type=1326 audit(1758454499.971:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13054 comm="syz.3.2944" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000 [ 810.072738][T13056] loop9: detected capacity change from 0 to 32768 [ 810.085476][T13056] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2945 (13056) [ 810.108963][T13056] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 810.119732][T13056] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 810.420180][T13056] BTRFS info (device loop9): enabling ssd optimizations [ 810.427812][T13056] BTRFS info (device loop9): enabling free space tree [ 810.539891][T12037] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 810.589192][T13087] netlink: 'syz.6.2952': attribute type 11 has an invalid length. [ 810.602620][T13087] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2952'. [ 810.952815][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2956'. [ 811.159625][T13095] macvlan2: entered promiscuous mode [ 811.165328][T13095] macvlan2: entered allmulticast mode [ 811.171253][T13095] gretap0: entered allmulticast mode [ 811.555480][T13099] netlink: 'syz.8.2959': attribute type 10 has an invalid length. [ 811.640220][T13099] syz_tun: left allmulticast mode [ 811.648595][T13099] bridge0: port 3(syz_tun) entered disabled state [ 811.729015][T13099] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 812.360634][T13110] loop9: detected capacity change from 0 to 128 [ 812.390816][T13110] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 812.409604][T13110] hpfs: filesystem error: improperly stopped [ 812.417219][T13110] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 812.428616][T13110] hpfs: You really don't want any checks? You are crazy... [ 812.457395][T13110] hpfs: hpfs_map_sector(): read error [ 812.464239][T13110] hpfs: code page support is disabled [ 812.483072][T13110] hpfs: hpfs_map_4sectors(): unaligned read [ 812.490424][T13110] hpfs: hpfs_map_4sectors(): unaligned read [ 812.499803][T13110] hpfs: filesystem error: unable to find root dir [ 812.873257][T13103] loop3: detected capacity change from 0 to 4096 [ 813.204987][T13123] loop8: detected capacity change from 0 to 256 [ 813.300581][T13123] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 813.416028][ T30] audit: type=1800 audit(1758454504.351:68): pid=13123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2969" name="file1" dev="loop8" ino=1048790 res=0 errno=0 [ 815.393690][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2982'. [ 816.685047][T13159] loop6: detected capacity change from 0 to 2048 [ 817.290769][T13174] loop5: detected capacity change from 0 to 1024 [ 817.472066][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2993'. [ 817.735830][T13184] pimreg3: entered allmulticast mode [ 817.830997][T13183] pimreg3: left allmulticast mode [ 818.049209][T13188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2996'. [ 818.287327][ T5860] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 818.488617][ T5860] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 818.498340][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.565835][ T5860] usb 7-1: config 0 descriptor?? [ 818.598958][ T5860] cp210x 7-1:0.0: cp210x converter detected [ 818.635412][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3002'. [ 818.792008][T13194] loop9: detected capacity change from 0 to 4096 [ 818.829214][T13194] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 819.022666][ T5860] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 819.045150][ T5860] usb 7-1: cp210x converter now attached to ttyUSB0 [ 819.108505][T13194] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 819.253149][T12043] usb 7-1: USB disconnect, device number 20 [ 819.302671][T12043] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 819.338486][T12043] cp210x 7-1:0.0: device disconnected [ 819.370858][T13205] loop8: detected capacity change from 0 to 2048 [ 819.398381][T13205] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 819.455101][T13206] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 820.213621][T13215] loop5: detected capacity change from 0 to 256 [ 820.489360][T13219] macvlan0: entered promiscuous mode [ 820.511269][T13219] macvlan1: entered promiscuous mode [ 820.522759][T13219] hsr1: entered promiscuous mode [ 821.208563][T13231] binder: 13230:13231 ioctl 541b 0 returned -22 [ 823.125638][T13252] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3026'. [ 823.289963][T12043] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 823.367214][T13257] loop8: detected capacity change from 0 to 1024 [ 823.407815][ T5860] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 823.440833][T13257] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 823.474187][T12043] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.485761][T12043] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.501010][T12043] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 823.511380][T12043] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.539170][T13257] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.606985][ T5860] usb 6-1: Using ep0 maxpacket: 16 [ 823.614806][T13257] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #11: comm syz.8.3029: missing EA_INODE flag [ 823.626196][ T5860] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.626624][ T5860] usb 6-1: config 0 interface 0 has no altsetting 0 [ 823.626797][ T5860] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 823.626956][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.634089][ T5860] usb 6-1: config 0 descriptor?? [ 823.687867][T12043] usb 7-1: config 0 descriptor?? [ 823.745789][T13257] EXT4-fs (loop8): Remounting filesystem read-only [ 824.162545][ T5860] stadia 0003:18D1:9400.0018: unknown main item tag 0x0 [ 824.170905][ T5860] stadia 0003:18D1:9400.0018: unknown main item tag 0x0 [ 824.178996][ T5860] stadia 0003:18D1:9400.0018: item fetching failed at offset 2/5 [ 824.250378][T12043] logitech 0003:046D:C29C.0019: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.6-1/input0 [ 824.271174][T13267] loop9: detected capacity change from 0 to 256 [ 824.282291][ T5860] stadia 0003:18D1:9400.0018: parse failed [ 824.289221][ T5860] stadia 0003:18D1:9400.0018: probe with driver stadia failed with error -22 [ 824.304365][T11104] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.344293][ T5860] usb 6-1: USB disconnect, device number 20 [ 824.619842][T12043] logitech 0003:046D:C29C.0019: no inputs found [ 824.636792][T13267] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 824.706996][T12043] usb 7-1: USB disconnect, device number 21 [ 824.740734][T13264] syz.3.3031 (13264): drop_caches: 2 [ 825.398262][T13274] sctp: [Deprecated]: syz.8.3035 (pid 13274) Use of int in max_burst socket option deprecated. [ 825.398262][T13274] Use struct sctp_assoc_value instead [ 826.201895][T13291] loop9: detected capacity change from 0 to 64 [ 826.806899][T12043] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 826.981858][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3046'. [ 827.026572][T12043] usb 6-1: Using ep0 maxpacket: 16 [ 827.053616][T12043] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.066212][T12043] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.079725][T12043] usb 6-1: config 0 interface 0 has no altsetting 0 [ 827.088636][T12043] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 827.099413][T12043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.121754][T12043] usb 6-1: config 0 descriptor?? [ 827.178200][T13303] netlink: 'syz.8.3048': attribute type 3 has an invalid length. [ 827.189169][T13303] netlink: 'syz.8.3048': attribute type 3 has an invalid length. [ 827.578386][T12043] hid (null): unknown global tag 0xc [ 827.878755][T12043] cougar 0003:060B:500A.001A: usage count exceeds max: fixing up report descriptor [ 827.915701][T12043] cougar 0003:060B:500A.001A: unexpected long global item [ 827.988965][T12043] cougar 0003:060B:500A.001A: parse failed [ 827.996222][T12043] cougar 0003:060B:500A.001A: probe with driver cougar failed with error -22 [ 828.055920][T12043] usb 6-1: USB disconnect, device number 21 [ 828.110886][T13317] loop9: detected capacity change from 0 to 64 [ 828.154633][T13317] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing [ 828.931790][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3057'. [ 829.290222][T13327] loop9: detected capacity change from 0 to 512 [ 829.344128][T13327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 829.389651][T13327] EXT4-fs (loop9): Test dummy encryption mode enabled [ 829.469707][T13327] EXT4-fs (loop9): 1 truncate cleaned up [ 829.478087][T13327] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.659202][T12037] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.269383][T13363] loop6: detected capacity change from 0 to 8 [ 832.165659][T13365] loop9: detected capacity change from 0 to 8192 [ 832.195957][T13365] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 832.205222][T13365] UDF-fs: Scanning with blocksize 512 failed [ 832.250157][T13365] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 832.258304][T13365] UDF-fs: Scanning with blocksize 1024 failed [ 832.284927][T13365] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 832.293390][T13365] UDF-fs: Scanning with blocksize 2048 failed [ 832.388518][T13365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 832.714458][ T30] audit: type=1326 audit(1758454523.661:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.8.3081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 832.855731][T13380] loop5: detected capacity change from 0 to 1024 [ 832.865637][T13380] EXT4-fs: inline encryption not supported [ 832.871991][T13380] EXT4-fs: Ignoring removed i_version option [ 832.905140][ T30] audit: type=1326 audit(1758454523.701:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.8.3081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 832.927489][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.939619][ T30] audit: type=1326 audit(1758454523.701:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.8.3081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 832.966740][ T30] audit: type=1326 audit(1758454523.701:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.8.3081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 832.989149][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.999914][ T30] audit: type=1326 audit(1758454523.701:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.8.3081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 833.027523][ T30] audit: type=1326 audit(1758454523.721:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.8.3081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 833.054546][ T30] audit: type=1326 audit(1758454523.721:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.8.3081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 833.076996][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.086963][ T30] audit: type=1326 audit(1758454523.721:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.8.3081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=234 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 833.109089][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.119815][ T30] audit: type=1326 audit(1758454523.721:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13376 comm="syz.8.3081" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 833.142145][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.250963][T13380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.478096][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'. [ 833.735415][ T6544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.236762][ T5860] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 834.309128][T13401] loop6: detected capacity change from 0 to 512 [ 834.377089][T13401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 834.385744][T13401] System zones: 1-12 [ 834.416854][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 834.433917][T13406] loop3: detected capacity change from 0 to 2048 [ 834.446713][ T5860] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 834.457265][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.487987][ T5860] pvrusb2: Hardware description: Terratec Grabster AV400 [ 834.495238][ T5860] pvrusb2: ********** [ 834.499720][ T5860] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 834.510176][ T5860] pvrusb2: Important functionality might not be entirely working. [ 834.518379][ T5860] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 834.530042][ T5860] pvrusb2: ********** [ 834.542650][T13401] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.3090: Directory hole found for htree index block 0 [ 834.565354][T13401] EXT4-fs (loop6): Remounting filesystem read-only [ 834.575891][T13401] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 834.598464][T13401] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 834.610953][T13401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.666820][T13410] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 834.768413][ T2332] pvrusb2: Invalid write control endpoint [ 834.973164][ T6778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.001862][T12043] usb 6-1: USB disconnect, device number 22 [ 835.130360][ T2332] pvrusb2: Invalid write control endpoint [ 835.136289][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 835.149190][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 835.158129][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 835.168624][ T2332] pvrusb2: Device being rendered inoperable [ 835.176211][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 835.184180][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 835.195178][ T2332] pvrusb2: Attached sub-driver cx25840 [ 835.202120][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 835.213066][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 835.378026][T13410] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 835.389426][T13410] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 835.441507][T13410] Remounting filesystem read-only [ 835.464607][ T5809] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 835.567010][ T5863] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 835.767374][ T5863] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 835.775832][ T5863] usb 7-1: config 0 has no interface number 0 [ 835.829701][ T5863] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 835.839311][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.848034][ T5863] usb 7-1: Product: syz [ 835.852411][ T5863] usb 7-1: Manufacturer: syz [ 835.857511][ T5863] usb 7-1: SerialNumber: syz [ 835.958836][T12043] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 835.960359][ T5863] usb 7-1: config 0 descriptor?? [ 835.968379][T12043] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 835.968607][T12043] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 835.968902][T12043] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 835.969114][T12043] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 835.969293][T12043] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 835.969467][T12043] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 835.969720][T12043] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 835.969880][T12043] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 836.050076][T12043] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 836.143650][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3097'. [ 836.205179][T12043] hid-generic 0003:0004:0000.001B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 836.439226][ T5863] usb 7-1: Firmware: major: 0, minor: 84, hardware type: UNKNOWN (103) [ 836.667065][ T5863] usb 7-1: failed to fetch extended address, random address set [ 836.674978][ T5863] usb 7-1: atusb_probe: initialization failed, error = -524 [ 836.690357][ T5863] atusb 7-1:0.128: probe with driver atusb failed with error -524 [ 836.746719][ T5863] usb 7-1: USB disconnect, device number 22 [ 836.917344][T12043] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 837.135471][T12043] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 837.146577][T12043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.171716][T12043] usb 6-1: config 0 descriptor?? [ 837.195372][T12043] cp210x 6-1:0.0: cp210x converter detected [ 837.402127][T12043] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 837.410359][T12043] cp210x 6-1:0.0: querying part number failed [ 837.441638][T12043] usb 6-1: cp210x converter now attached to ttyUSB0 [ 837.615040][ T5863] usb 6-1: USB disconnect, device number 23 [ 837.661060][ T5863] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 837.671767][ T5863] cp210x 6-1:0.0: device disconnected [ 837.699618][T13437] loop9: detected capacity change from 0 to 4096 [ 837.770744][T13442] loop8: detected capacity change from 0 to 1764 [ 837.801304][T13444] loop6: detected capacity change from 0 to 1024 [ 837.884236][T13444] hfsplus: bad catalog entry type [ 838.087903][T12607] hfsplus: b-tree write err: -5, ino 4 [ 838.764512][T13451] veth0_vlan: entered allmulticast mode [ 839.013735][T13451] veth0_vlan: left promiscuous mode [ 839.023342][T13451] veth0_vlan: entered promiscuous mode [ 839.559451][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3116'. [ 839.601497][T13460] netlink: 'syz.8.3116': attribute type 2 has an invalid length. [ 839.920027][ T5863] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 840.117169][ T5863] usb 10-1: Using ep0 maxpacket: 32 [ 840.150947][ T5863] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 840.159743][ T5863] usb 10-1: config 0 has no interface number 0 [ 840.168622][ T5863] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 840.180803][ T5863] usb 10-1: config 0 interface 85 has no altsetting 0 [ 840.288977][ T5863] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 840.299931][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.308518][ T5863] usb 10-1: Product: syz [ 840.312980][ T5863] usb 10-1: Manufacturer: syz [ 840.319652][ T5863] usb 10-1: SerialNumber: syz [ 840.379138][ T5863] usb 10-1: config 0 descriptor?? [ 840.911025][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3123'. [ 841.040875][ T5863] appletouch 10-1:0.85: Geyser mode initialized. [ 841.050824][ T5863] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input20 [ 841.141602][T13481] loop6: detected capacity change from 0 to 1024 [ 841.192741][T13481] EXT4-fs: Ignoring removed orlov option [ 841.237471][T13481] EXT4-fs (loop6): Test dummy encryption mode enabled [ 841.283595][ T5863] usb 10-1: USB disconnect, device number 3 [ 841.296760][T13481] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 841.333754][ T5863] appletouch 10-1:0.85: input: appletouch disconnected [ 841.414684][T13481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.914215][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3129'. [ 841.924069][T13493] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3129'. [ 842.304325][T13481] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 842.696314][ T6778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.245521][T13515] ipvlan2: entered promiscuous mode [ 843.260530][T13515] bridge0: port 3(ipvlan2) entered blocking state [ 843.267844][T13515] bridge0: port 3(ipvlan2) entered disabled state [ 843.275170][T13515] ipvlan2: entered allmulticast mode [ 843.281012][T13515] gretap0: entered allmulticast mode [ 843.290719][T13515] ipvlan2: left allmulticast mode [ 843.295988][T13515] gretap0: left allmulticast mode [ 844.367849][T13535] loop8: detected capacity change from 0 to 64 [ 844.791562][T13539] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3150'. [ 845.074099][T13542] loop6: detected capacity change from 0 to 2048 [ 845.140524][T13545] loop8: detected capacity change from 0 to 512 [ 845.163897][T13545] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 845.207984][T13542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.326046][T13545] EXT4-fs (loop8): 1 truncate cleaned up [ 845.335397][T13545] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.382020][ T6778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.455286][T13545] syz.8.3153 (pid 13545) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 845.880360][T11104] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.183074][T13564] loop8: detected capacity change from 0 to 64 [ 846.217154][ T5819] Bluetooth: hci1: command 0x0405 tx timeout [ 846.982619][ T30] audit: type=1326 audit(1758454537.921:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13576 comm="syz.9.3166" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x0 [ 847.965322][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3173'. [ 848.302391][ T5819] Bluetooth: hci1: command 0x0405 tx timeout [ 848.348576][T13590] loop5: detected capacity change from 0 to 8192 [ 848.715699][T13608] loop9: detected capacity change from 0 to 8 [ 848.815695][T13606] loop3: detected capacity change from 0 to 1024 [ 848.836303][T13606] EXT4-fs: inline encryption not supported [ 848.968605][T13606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.984342][T13606] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 849.146649][ T30] audit: type=1800 audit(1758454540.081:79): pid=13606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3176" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 849.190407][T13606] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.3176: lblock 1 mapped to illegal pblock 1 (length 1) [ 849.277989][T13606] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.3176: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 849.378615][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 849.386114][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 849.833147][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 850.024920][T13624] loop8: detected capacity change from 0 to 512 [ 850.166325][T13624] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.180445][T13624] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 850.220024][ T5863] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 850.413600][ T5863] usb 7-1: Using ep0 maxpacket: 32 [ 850.466280][ T5863] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 850.475520][ T5863] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 850.484632][ T5863] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 850.494339][ T5863] usb 7-1: config 1 has no interface number 0 [ 850.500821][ T5863] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 850.513762][ T5863] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 850.525841][ T5863] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 850.540433][ T5863] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 850.550276][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.743247][T13625] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 850.766135][ T5863] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 850.854557][T11104] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.986233][T13625] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 851.033745][ T5863] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 851.354144][ T5863] usb 7-1: USB disconnect, device number 23 [ 851.362430][ T5863] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 854.577240][ T5863] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 854.624768][T13700] loop5: detected capacity change from 0 to 1024 [ 854.680435][T13700] EXT4-fs: Ignoring removed nobh option [ 854.687023][T13700] EXT4-fs: Ignoring removed bh option [ 854.777233][ T5863] usb 9-1: Using ep0 maxpacket: 16 [ 854.810683][ T5863] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.821717][ T5863] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.833970][ T5863] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.844591][ T5863] usb 9-1: config 0 interface 0 has no altsetting 0 [ 854.852064][ T5863] usb 9-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 854.863291][ T5863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.893722][T13700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.109133][ T5863] usb 9-1: config 0 descriptor?? [ 855.193588][ T6544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.614008][T13696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.624196][T13696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.714110][ T5863] hid_parser_main: 8 callbacks suppressed [ 855.714217][ T5863] kye 0003:0458:0153.001C: unknown main item tag 0x0 [ 855.733698][ T5863] kye 0003:0458:0153.001C: unknown main item tag 0x0 [ 855.742776][ T5863] kye 0003:0458:0153.001C: unknown main item tag 0x0 [ 855.750035][ T5863] kye 0003:0458:0153.001C: unknown main item tag 0x0 [ 855.758798][ T5863] kye 0003:0458:0153.001C: unknown main item tag 0x0 [ 855.765983][ T5863] kye 0003:0458:0153.001C: unknown main item tag 0x0 [ 855.773848][ T5863] kye 0003:0458:0153.001C: unknown main item tag 0x0 [ 855.783759][ T5863] kye 0003:0458:0153.001C: unknown main item tag 0x0 [ 855.793830][ T5863] kye 0003:0458:0153.001C: unknown main item tag 0x0 [ 855.801211][ T5863] kye 0003:0458:0153.001C: unknown main item tag 0x0 [ 855.811563][ T5863] kye 0003:0458:0153.001C: unexpected long global item [ 855.834840][ T5863] kye 0003:0458:0153.001C: parse failed [ 855.842797][ T5863] kye 0003:0458:0153.001C: probe with driver kye failed with error -22 [ 855.933956][T11111] usb 9-1: USB disconnect, device number 7 [ 856.000079][ T5819] block nbd3: Receive control failed (result -32) [ 856.000585][T11105] block nbd3: Receive control failed (result -32) [ 856.639162][T13722] loop5: detected capacity change from 0 to 2048 [ 856.729813][T13722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 857.340606][T13736] loop3: detected capacity change from 0 to 64 [ 857.732840][T13740] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input21 [ 858.679918][T13755] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3241'. [ 858.933064][T13762] loop8: detected capacity change from 0 to 128 [ 859.081656][T13766] loop9: detected capacity change from 0 to 512 [ 859.201381][T13766] EXT4-fs (loop9): orphan cleanup on readonly fs [ 859.262902][T13766] EXT4-fs error (device loop9): ext4_quota_enable:7128: comm syz.9.3245: inode #218103808: comm syz.9.3245: iget: illegal inode # [ 859.321600][T13766] EXT4-fs error (device loop9): ext4_quota_enable:7131: comm syz.9.3245: Bad quota inode: 218103808, type: 2 [ 859.368184][T13766] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 859.396297][T13766] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 859.405774][T13766] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 859.454834][T13766] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 859.544625][T13766] EXT4-fs error (device loop9): ext4_quota_enable:7128: comm syz.9.3245: inode #218103808: comm syz.9.3245: iget: illegal inode # [ 859.637110][T13766] EXT4-fs error (device loop9): ext4_quota_enable:7131: comm syz.9.3245: Bad quota inode: 218103808, type: 2 [ 859.728757][T13766] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 859.826952][T13769] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 859.888808][T13769] EXT4-fs error (device loop9): ext4_quota_enable:7128: comm syz.9.3245: inode #218103808: comm syz.9.3245: iget: illegal inode # [ 859.927819][T13769] EXT4-fs error (device loop9): ext4_quota_enable:7131: comm syz.9.3245: Bad quota inode: 218103808, type: 2 [ 859.991107][T13769] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 860.587439][T13786] loop6: detected capacity change from 0 to 1024 [ 860.807197][T13786] hfsplus: can't free extent [ 860.855253][T12037] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.940901][T13789] tc_dump_action: action bad kind [ 862.070914][T13810] loop3: detected capacity change from 0 to 1024 [ 862.093051][T13810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 862.145006][T13810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 862.315410][T13810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.978048][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.591807][T13839] loop5: detected capacity change from 0 to 64 [ 863.760127][T13842] loop9: detected capacity change from 0 to 128 [ 863.977062][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 864.858980][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3283'. [ 865.496773][T13867] loop8: detected capacity change from 0 to 512 [ 865.584739][T13867] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 865.707058][T13867] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.3287: invalid indirect mapped block 4294967295 (level 0) [ 865.796725][T13867] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.3287: invalid indirect mapped block 4294967295 (level 1) [ 865.915680][T13874] loop9: detected capacity change from 0 to 1024 [ 865.932425][T13867] EXT4-fs (loop8): 1 orphan inode deleted [ 865.938655][T13867] EXT4-fs (loop8): 1 truncate cleaned up [ 865.947014][T13867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.053695][T13874] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 866.066792][T13874] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 866.321901][T13817] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 866.475193][T11104] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.801851][T12037] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 867.437997][T13899] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3300'. [ 868.979480][T13926] geneve2: entered promiscuous mode [ 868.990070][T13926] geneve2: entered allmulticast mode [ 870.193461][T13941] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3319'. [ 870.972502][T13952] RDS: rds_bind could not find a transport for ::c001:80:0:0, load rds_tcp or rds_rdma? [ 871.889363][T13954] loop3: detected capacity change from 0 to 2048 [ 872.308787][T13971] loop6: detected capacity change from 0 to 256 [ 872.344005][T13954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 872.538908][T13971] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 872.989499][T13975] netlink: 'syz.9.3333': attribute type 16 has an invalid length. [ 873.381515][T13978] loop5: detected capacity change from 0 to 128 [ 873.475968][T13978] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 873.510858][T13978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 876.009505][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3348'. [ 876.032491][T14010] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3348'. [ 876.855495][T14018] trusted_key: encrypted_key: keyword '5pdate' not recognized [ 877.939717][T14027] loop5: detected capacity change from 0 to 1764 [ 878.774633][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3362'. [ 879.556307][T14048] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3365'. [ 879.565980][T14048] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3365'. [ 879.803677][T14051] netlink: 'syz.8.3367': attribute type 2 has an invalid length. [ 880.383253][T14056] overlayfs: upper fs does not support file handles, falling back to index=off. [ 880.401197][T14056] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 881.424993][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3375'. [ 881.441356][T14069] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3375'. [ 881.526169][T14069] ip6gretap1: entered allmulticast mode [ 881.700339][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3376'. [ 881.709924][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3376'. [ 882.505092][T14079] loop8: detected capacity change from 0 to 1024 [ 882.523208][T14079] EXT4-fs: Ignoring removed bh option [ 882.788828][T14079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.325865][T11104] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.235002][T14123] loop7: detected capacity change from 0 to 524255232 [ 887.675486][T14134] loop8: detected capacity change from 0 to 512 [ 887.775634][T14134] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 887.789313][T14134] EXT4-fs (loop8): group descriptors corrupted! [ 887.799218][T14136] loop6: detected capacity change from 0 to 256 [ 888.074810][T14136] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 889.474613][T14154] program syz.5.3413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 890.250147][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3415'. [ 890.975612][T14166] loop6: detected capacity change from 0 to 1024 [ 892.356855][T14184] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3424'. [ 892.366691][T14184] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3424'. [ 893.303268][T14193] loop8: detected capacity change from 0 to 2048 [ 893.473410][T14193] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 894.884888][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3441'. [ 896.292023][T14229] loop6: detected capacity change from 0 to 512 [ 896.464584][T14229] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.3446: casefold flag without casefold feature [ 896.542319][T14229] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3446: couldn't read orphan inode 15 (err -117) [ 896.597190][T14229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.491856][ T6778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.794619][T14244] loop8: detected capacity change from 0 to 1024 [ 898.010439][T14249] team0: Device gtp1 is of different type [ 899.515451][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3460'. [ 901.358888][T14286] loop5: detected capacity change from 0 to 256 [ 901.415216][T14286] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 901.445700][T14286] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 901.622272][T14286] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 902.345473][T14297] netlink: 'syz.8.3474': attribute type 3 has an invalid length. [ 903.634323][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3481'. [ 905.241717][T14329] sock: sock_set_timeout: `syz.5.3488' (pid 14329) tries to set negative timeout [ 907.746241][T14351] tap0: tun_chr_ioctl cmd 35111 [ 908.343123][T14359] loop9: detected capacity change from 0 to 256 [ 908.414320][T14359] exfat: Deprecated parameter 'namecase' [ 908.757663][T14359] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 909.021994][ T30] audit: type=1800 audit(1758455111.971:80): pid=14359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3503" name="bus" dev="loop9" ino=1048798 res=0 errno=0 [ 909.142772][T14367] loop5: detected capacity change from 0 to 512 [ 909.230476][T14367] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 909.489546][T14367] EXT4-fs (loop5): 1 truncate cleaned up [ 909.518375][T14367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.668857][T14367] EXT4-fs (loop5): shut down requested (2) [ 909.972882][T14383] loop9: detected capacity change from 0 to 8 [ 910.102220][T14383] SQUASHFS error: lzo decompression failed, data probably corrupt [ 910.110925][T14383] SQUASHFS error: Failed to read block 0x91: -5 [ 910.117380][T14383] SQUASHFS error: Unable to read metadata cache entry [8f] [ 910.126446][T14383] SQUASHFS error: Unable to read inode 0x11f [ 910.208381][ T6544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.802117][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.808793][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 912.002743][ C1] sd 0:0:1:0: [sda] tag#6973 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 912.014074][ C1] sd 0:0:1:0: [sda] tag#6973 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 00 00 [ 912.400079][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3520'. [ 913.511139][T14397] loop3: detected capacity change from 0 to 4096 [ 913.664801][T14397] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 913.733326][T14411] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 913.753959][T14411] syzkaller0: linktype set to 1 [ 914.458283][ T5860] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 914.570500][T14397] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 914.669649][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 914.716455][ T5860] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.728202][ T5860] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 914.738333][ T5860] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 914.748144][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.945180][ T5860] usb 6-1: config 0 descriptor?? [ 915.314605][T11085] usb 6-1: USB disconnect, device number 24 [ 917.990403][T14453] batman_adv: batadv0: Adding interface: ipvlan2 [ 917.997297][T14453] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 918.024779][T14453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.039607][T14453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.056797][T14453] batman_adv: batadv0: Interface activated: ipvlan2 [ 918.103629][T14454] mkiss: ax0: crc mode is auto. [ 919.292540][T14460] loop6: detected capacity change from 0 to 4096 [ 919.354388][T14460] ntfs3: Unknown parameter 'io¸charset' [ 919.499882][ T30] audit: type=1800 audit(1758455122.466:81): pid=14469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3551" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 919.794639][T14462] loop8: detected capacity change from 0 to 4096 [ 919.838324][T14462] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 920.227496][T14462] ntfs3(loop8): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 920.963455][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3554'. [ 920.978338][T11105] block nbd4: Receive control failed (result -107) [ 921.434325][T14482] loop5: detected capacity change from 0 to 2048 [ 921.601999][T14482] NILFS (loop5): invalid segment: Magic number mismatch [ 921.610376][T14482] NILFS (loop5): trying rollback from an earlier position [ 921.730186][T14482] NILFS (loop5): recovery complete [ 921.754416][T14490] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 922.069569][T14489] loop6: detected capacity change from 0 to 1024 [ 922.199393][T14489] EXT4-fs: Ignoring removed orlov option [ 922.222018][T14489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 922.247102][T14495] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 922.469519][T14489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 923.100453][ T6778] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.171349][T14506] loop5: detected capacity change from 0 to 1024 [ 923.242753][T14506] EXT4-fs: Ignoring removed oldalloc option [ 923.257698][T14506] EXT4-fs: Ignoring removed bh option [ 923.548584][T14506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.871854][ T30] audit: type=1800 audit(1758455126.818:82): pid=14519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3568" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 924.381935][ T6544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.629669][T14537] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 925.839075][T14541] loop3: detected capacity change from 0 to 256 [ 925.997562][T14541] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 926.529228][T14548] netlink: 'syz.5.3581': attribute type 1 has an invalid length. [ 927.484691][T14559] loop9: detected capacity change from 0 to 256 [ 927.961700][T14559] FAT-fs (loop9): Directory bread(block 64) failed [ 927.968588][T14559] FAT-fs (loop9): Directory bread(block 65) failed [ 927.975914][T14559] FAT-fs (loop9): Directory bread(block 66) failed [ 927.983021][T14559] FAT-fs (loop9): Directory bread(block 67) failed [ 927.990025][T14559] FAT-fs (loop9): Directory bread(block 68) failed [ 927.997201][T14559] FAT-fs (loop9): Directory bread(block 69) failed [ 928.004473][T14559] FAT-fs (loop9): Directory bread(block 70) failed [ 928.013043][T14559] FAT-fs (loop9): Directory bread(block 71) failed [ 928.019987][T14559] FAT-fs (loop9): Directory bread(block 72) failed [ 928.027372][T14559] FAT-fs (loop9): Directory bread(block 73) failed [ 928.536004][T14568] mkiss: ax0: crc mode is auto. [ 931.129554][ T5860] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 931.333459][ T5860] usb 7-1: Using ep0 maxpacket: 32 [ 931.390301][ T5860] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 931.402477][ T5860] usb 7-1: config 0 has no interface number 0 [ 931.502519][ T5860] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 931.513099][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.522501][ T5860] usb 7-1: Product: syz [ 931.526972][ T5860] usb 7-1: Manufacturer: syz [ 931.532310][ T5860] usb 7-1: SerialNumber: syz [ 931.646943][ T5860] usb 7-1: config 0 descriptor?? [ 931.688207][ T5860] smsc95xx v2.0.0 [ 932.385632][ T5860] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 932.396949][ T5860] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 932.487093][ T5860] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 932.499670][ T5860] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 932.583658][ T5860] usb 7-1: USB disconnect, device number 24 [ 932.657735][T14612] loop8: detected capacity change from 0 to 64 [ 932.786220][T14610] loop3: detected capacity change from 0 to 1024 [ 932.843298][T14610] EXT4-fs: Ignoring removed oldalloc option [ 932.850211][T14610] EXT4-fs: Ignoring removed bh option [ 933.179927][T14610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.211915][T14620] loop5: detected capacity change from 0 to 256 [ 933.611733][T14620] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 933.853518][T14625] loop8: detected capacity change from 0 to 512 [ 934.085533][T14625] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 934.102028][T14625] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 934.532856][T14634] loop6: detected capacity change from 0 to 16 [ 934.623258][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.776365][T11104] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 935.053111][T14638] loop9: detected capacity change from 0 to 2048 [ 935.331787][T14638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 935.622490][T14647] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96 [ 935.772337][T14645] loop3: detected capacity change from 0 to 128 [ 935.921447][T14645] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 935.949729][T14645] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.095500][T14652] netlink: 'syz.8.3625': attribute type 1 has an invalid length. [ 936.104077][T14652] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3625'. [ 936.378071][ T30] audit: type=1804 audit(1758455139.344:83): pid=14653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3620" name="/newroot/563/file1/file0" dev="loop3" ino=12 res=1 errno=0 [ 937.200678][ T5809] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 937.686934][ T5860] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 937.908670][ T5860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.919134][ T5860] usb 9-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 937.929077][ T5860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.083189][ T5860] usb 9-1: config 0 descriptor?? [ 938.101424][T14672] loop3: detected capacity change from 0 to 128 [ 938.259317][T14672] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 938.281775][T14672] hpfs: filesystem error: improperly stopped [ 938.301516][T14672] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 938.315284][T14672] hpfs: You really don't want any checks? You are crazy... [ 938.391155][T14672] hpfs: hpfs_map_sector(): read error [ 938.400742][T14672] hpfs: code page support is disabled [ 938.548020][T14672] hpfs: hpfs_map_4sectors(): unaligned read [ 938.605962][T14672] hpfs: hpfs_map_4sectors(): unaligned read [ 938.612249][T14672] hpfs: filesystem error: unable to find root dir [ 938.678252][ T5860] greenasia 0003:0E8F:0012.001D: hidraw0: USB HID v0.07 Device [HID 0e8f:0012] on usb-dummy_hcd.8-1/input0 [ 938.690415][ T5860] greenasia 0003:0E8F:0012.001D: no inputs found [ 938.842741][ T5860] usb 9-1: USB disconnect, device number 8 [ 939.232130][T14684] syz.5.3639 uses obsolete (PF_INET,SOCK_PACKET) [ 940.771378][T14702] ===================================================== [ 940.792248][T14702] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9ac/0xa30 [ 940.806614][T14702] ieee802154_hdr_push+0x9ac/0xa30 [ 940.812002][T14702] ieee802154_header_create+0x854/0xb90 [ 940.832078][T14702] dgram_sendmsg+0xb3d/0x16d0 [ 940.844619][T14702] ieee802154_sock_sendmsg+0x92/0xd0 [ 940.850161][T14702] __sock_sendmsg+0x333/0x3d0 [ 940.863945][T14702] __sys_sendto+0x593/0x720 [ 940.874220][T14702] __ia32_compat_sys_socketcall+0xa89/0x1af0 [ 940.899758][T14702] ia32_sys_call+0x2942/0x4310 [ 940.911256][T14702] __do_fast_syscall_32+0xb0/0x150 [ 940.922611][T14702] do_fast_syscall_32+0x38/0x80 [ 940.943090][T14702] do_SYSENTER_32+0x1f/0x30 [ 940.953849][T14702] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 940.968991][T14702] [ 940.971454][T14702] Uninit was stored to memory at: [ 940.982276][T14702] ieee802154_hdr_push+0x9a5/0xa30 [ 940.992976][T14702] ieee802154_header_create+0x854/0xb90 [ 941.007869][T14702] dgram_sendmsg+0xb3d/0x16d0 [ 941.012771][T14702] ieee802154_sock_sendmsg+0x92/0xd0 [ 941.020329][T14702] __sock_sendmsg+0x333/0x3d0 [ 941.026399][T14702] __sys_sendto+0x593/0x720 [ 941.033205][T14702] __ia32_compat_sys_socketcall+0xa89/0x1af0 [ 941.043157][T14702] ia32_sys_call+0x2942/0x4310 [ 941.053441][T14702] __do_fast_syscall_32+0xb0/0x150 [ 941.064693][T14702] do_fast_syscall_32+0x38/0x80 [ 941.069751][T14702] do_SYSENTER_32+0x1f/0x30 [ 941.082677][T14702] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 941.095071][T14702] [ 941.097544][T14702] Local variable hdr created at: [ 941.102592][T14702] ieee802154_header_create+0x4e/0xb90 [ 941.123030][T14702] dgram_sendmsg+0xb3d/0x16d0 [ 941.133660][T14702] [ 941.143400][T14702] CPU: 0 UID: 0 PID: 14702 Comm: syz.6.3649 Not tainted syzkaller #0 PREEMPT(none) [ 941.161875][T14702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 941.177598][T14702] ===================================================== [ 941.192937][T14702] Disabling lock debugging due to kernel taint [ 941.204917][T14702] Kernel panic - not syncing: kmsan.panic set ... [ 941.211536][T14702] CPU: 0 UID: 0 PID: 14702 Comm: syz.6.3649 Tainted: G B syzkaller #0 PREEMPT(none) [ 941.222723][T14702] Tainted: [B]=BAD_PAGE [ 941.226994][T14702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 941.237225][T14702] Call Trace: [ 941.240811][T14702] [ 941.243869][T14702] __dump_stack+0x26/0x30 [ 941.248446][T14702] dump_stack_lvl+0x53/0x270 [ 941.253354][T14702] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 941.259495][T14702] dump_stack+0x1e/0x25 [ 941.263887][T14702] vpanic+0x361/0xc50 [ 941.268108][T14702] panic+0x15d/0x160 [ 941.272283][T14702] kmsan_report+0x31c/0x320 [ 941.277133][T14702] ? stack_depot_save+0x12/0x20 [ 941.282174][T14702] ? __msan_warning+0x1b/0x30 [ 941.287062][T14702] ? ieee802154_hdr_push+0x9ac/0xa30 [ 941.292594][T14702] ? ieee802154_header_create+0x854/0xb90 [ 941.298611][T14702] ? dgram_sendmsg+0xb3d/0x16d0 [ 941.303664][T14702] ? ieee802154_sock_sendmsg+0x92/0xd0 [ 941.309384][T14702] ? __sock_sendmsg+0x333/0x3d0 [ 941.314439][T14702] ? __sys_sendto+0x593/0x720 [ 941.319329][T14702] ? __ia32_compat_sys_socketcall+0xa89/0x1af0 [ 941.325751][T14702] ? ia32_sys_call+0x2942/0x4310 [ 941.330881][T14702] ? __do_fast_syscall_32+0xb0/0x150 [ 941.336375][T14702] ? do_fast_syscall_32+0x38/0x80 [ 941.341590][T14702] ? do_SYSENTER_32+0x1f/0x30 [ 941.346470][T14702] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 941.353202][T14702] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 941.359944][T14702] ? __ia32_compat_sys_socketcall+0xa89/0x1af0 [ 941.366378][T14702] ? ia32_sys_call+0x2942/0x4310 [ 941.371603][T14702] ? kmsan_get_metadata+0xfb/0x160 [ 941.377037][T14702] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 941.383702][T14702] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 941.390020][T14702] ? kmsan_get_metadata+0xfb/0x160 [ 941.395376][T14702] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 941.401873][T14702] ? kmsan_get_metadata+0xfb/0x160 [ 941.407236][T14702] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 941.413817][T14702] ? kmsan_get_metadata+0xfb/0x160 [ 941.419173][T14702] __msan_warning+0x1b/0x30 [ 941.423897][T14702] ieee802154_hdr_push+0x9ac/0xa30 [ 941.429267][T14702] ? __msan_memcpy+0x108/0x1c0 [ 941.434242][T14702] ieee802154_header_create+0x854/0xb90 [ 941.440038][T14702] ? kmsan_get_metadata+0xfb/0x160 [ 941.445387][T14702] ? __pfx_ieee802154_header_create+0x10/0x10 [ 941.451661][T14702] dgram_sendmsg+0xb3d/0x16d0 [ 941.456572][T14702] ? __pfx_dgram_sendmsg+0x10/0x10 [ 941.461887][T14702] ieee802154_sock_sendmsg+0x92/0xd0 [ 941.467407][T14702] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 941.473870][T14702] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 941.480080][T14702] __sock_sendmsg+0x333/0x3d0 [ 941.484963][T14702] __sys_sendto+0x593/0x720 [ 941.489701][T14702] ? stack_depot_save_flags+0x35/0x7b0 [ 941.495413][T14702] __ia32_compat_sys_socketcall+0xa89/0x1af0 [ 941.501689][T14702] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 941.508243][T14702] ia32_sys_call+0x2942/0x4310 [ 941.513209][T14702] __do_fast_syscall_32+0xb0/0x150 [ 941.518532][T14702] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 941.524518][T14702] do_fast_syscall_32+0x38/0x80 [ 941.529582][T14702] do_SYSENTER_32+0x1f/0x30 [ 941.534281][T14702] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 941.540865][T14702] RIP: 0023:0xf7fd1539 [ 941.545100][T14702] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 941.564915][T14702] RSP: 002b:00000000f54d5430 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 941.573542][T14702] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54d5444 [ 941.581692][T14702] RDX: 0000000000000000 RSI: 00000000f54d5560 RDI: 00000000f7464ff4 [ 941.590101][T14702] RBP: 00000000f54d5560 R08: 0000000000000000 R09: 0000000000000000 [ 941.598417][T14702] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 941.606546][T14702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 941.614719][T14702] [ 941.618413][T14702] Kernel Offset: disabled [ 941.622818][T14702] Rebooting in 86400 seconds..