last executing test programs: 3m52.731070286s ago: executing program 0 (id=631): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2043, 0x4004, 0x2, 0x3}, 0x10) 3m52.149610172s ago: executing program 0 (id=636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r1, r0, 0x4, r0}, 0x10) 3m51.470407331s ago: executing program 0 (id=640): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) preadv2(r0, 0x0, 0x0, 0x2, 0x40, 0x4) 3m51.020863289s ago: executing program 0 (id=643): syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0xff, 0x27f, &(0x7f00000002c0)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='mqueue\x00', 0x10001, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, 0x0) 3m50.256548563s ago: executing program 0 (id=648): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) 3m49.807986948s ago: executing program 0 (id=652): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 3m47.964443564s ago: executing program 32 (id=652): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1m56.624255252s ago: executing program 2 (id=1258): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x32, 0x800000000004, @tid=r0}, 0x0) 1m55.632347072s ago: executing program 2 (id=1265): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@delqdisc={0x24, 0x25, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0x7, 0xffff}, {0xfff2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) 1m54.975000976s ago: executing program 2 (id=1269): r0 = open$dir(&(0x7f0000000100)='./file1\x00', 0x40000400000002c2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81706}], 0x1000000000000013) lseek(r0, 0x28, 0x4) 1m54.170507813s ago: executing program 2 (id=1274): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) unshare(0x26020480) connect$ax25(r0, 0x0, 0x0) 1m53.47948197s ago: executing program 2 (id=1279): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1m52.525907537s ago: executing program 2 (id=1284): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b706000014000600b7030000000648638500000008000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001e40)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 1m37.12129296s ago: executing program 33 (id=1284): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b706000014000600b7030000000648638500000008000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001e40)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 35.73887943s ago: executing program 1 (id=1665): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0xfffffffd, 0x25dfdbfb, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000}}, 0x1c}}, 0x0) 34.977571451s ago: executing program 1 (id=1671): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='\b\x00\x00\x00', 0x4}], 0x1) 34.201269722s ago: executing program 1 (id=1676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010"], 0x5c}, 0x1, 0x0, 0x0, 0xc410}, 0x4000) 33.466407457s ago: executing program 1 (id=1681): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 32.546527714s ago: executing program 1 (id=1687): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) fstat(r0, &(0x7f0000003200)) 31.948746622s ago: executing program 1 (id=1692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x4c, r1, 0x1, 0x70bd28, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2000000}}, {0x8, 0xb, 0xfffffffc}, {0x6}}]}, 0x4c}}, 0x4040000) 24.785637103s ago: executing program 4 (id=1724): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.512176017s ago: executing program 4 (id=1730): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) 22.674740102s ago: executing program 4 (id=1735): capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) 21.882573824s ago: executing program 4 (id=1738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) set_mempolicy(0x4000, 0x0, 0x1) 21.152683959s ago: executing program 4 (id=1741): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20.11242009s ago: executing program 4 (id=1747): r0 = syz_usbip_server_init(0x1) unshare(0x400) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYRES8], 0x35) 16.391522179s ago: executing program 34 (id=1692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x4c, r1, 0x1, 0x70bd28, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2000000}}, {0x8, 0xb, 0xfffffffc}, {0x6}}]}, 0x4c}}, 0x4040000) 5.875164592s ago: executing program 6 (id=1789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000840085000000820000001801000020756c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.870345816s ago: executing program 3 (id=1790): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000680)=""/192, 0xc0}], 0x61) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) 5.721491909s ago: executing program 5 (id=1791): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000013c0)) 5.306381836s ago: executing program 3 (id=1792): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x8c4) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002300)=""/4068, 0xfe4}, {&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000080)=""/40, 0x28}], 0x3}, 0x12100) 4.610676695s ago: executing program 35 (id=1747): r0 = syz_usbip_server_init(0x1) unshare(0x400) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYRES8], 0x35) 4.566659659s ago: executing program 5 (id=1794): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) 4.533800571s ago: executing program 6 (id=1795): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001d4}, 0x0) 3.952040103s ago: executing program 5 (id=1796): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 3.87413259s ago: executing program 3 (id=1797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r1}) 3.838253422s ago: executing program 6 (id=1798): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00') 3.018210007s ago: executing program 5 (id=1799): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000240)={0x0, 0x3, r0}) 2.549618474s ago: executing program 3 (id=1800): r0 = socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70ee}, 0x0, &(0x7f0000000040)={0xb, 0xffffffffffffffff}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008000, &(0x7f0000007780)={0x2, 0x4e22, @remote}, 0x10) 2.253075074s ago: executing program 6 (id=1801): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.301526541s ago: executing program 6 (id=1802): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x400, 0x7, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "5c0a0551"}, 0x0, 0x1, {0x0}, 0x2, 0x20000000}) 1.222641212s ago: executing program 5 (id=1803): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000380)={[{@umask}, {@umask={'umask', 0x3d, 0xad460ad}}, {@nls={'nls', 0x3d, 'iso8859-9'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@uid}]}, 0x20, 0x6e7, &(0x7f0000000f40)="$eJzs3U1sG2kZAOB3bMeJu1LWu7S7BSE12ooKttAmMUuLhERBCOWwgkpc9ohp021UJ1slXpRWiGaBhSOcUA97WITCYU+IA9IiDojljITEvfdKHLhVHDCa8UxiO4njtHHSlueRxvPNzPfzzutvxj9p5QD+by28FRMbkcTC+TfX0+0Hm43Wg83GclGOiMmIKEVUuqtIViKSTyKuRHeJT6c78+6SvcZ54+HHH5y7/1Gju1XJl6x+aVi7bZ0hI2zkS8xERDlfbx0ZTWWv/q719pe7N3K3RczduNOEnS0SB8ets8PoV8xo1y3wtLsXUZ7YZX894kRETOXvA4rX09IRh3foDnSXAwAAgKdTeb8KLz6KR7Ee00cTDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwfku5vBib5UirKM5Hkv///3bxaplo93nD38cV9jr9/44gCAQAAAAAAAIDDN7FdPPMoHsV6TBfbnST7m/9r2cbJ7PGFeDfWYjFW40KsRzPa0Y7VmIuYmO7ps7rebLdX53a2/HWkLTudzr285XxE1He0nB/zOQMAAAAAAADA8+0nsRDTxx0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0SiLK3VW2nCzK9ShVImIqIqppvY2IPxflZ9lfjjsAAAAAGL9avp5O/tstdJLsM/8r2ef+qXg3VqIdS9GOVizG9ey7gO6n/tI/NhqtB5uN5XTZ2fE3/nWgOLIeI6Ic7+0x8mxW49RWi4X4dnwvzsdMXI3VWIofRjPasRgzUUtPIpqRRL3W/faiXsTZH2857+pKXyhXB2M7M7B9OoukFjdiKYvtQlyrFr2VshpJnO4Z7Y/ViIEMvZdmJ/l6bsQcXe95vn6Vfy+T67w4Yh/jUc/OfGIrI7Np7vNsvLR77gsHnCeDI81Faes7qJPbo6SbgyMVOf/BQXJ+Il+nuf55f84P2wG/ShvMxHyU8tkX8Up/zm9/7v7L/Y2/8M+/Xr1ZWrl188ba+TGe0uH4/u67J4rCYCYaPZl4dfjsyzPRSjOxMXomJgZ3TI3acryqeTa6N7bR7pbfykrNeK1nCr4T12MxLsVszMXlmI2vxnw0+mbYqb68VhrL/TnJrrXSzvtbbUjwZz+/fRLxi30qH600pJd68tp7p6tnx/I9V34Zsz1Zenn47HucV4HKZ/JCOsZPt15xngZ9mcjvzUV0xQvUHpn4TSd9XGut3Fq92bw94njn8nV62b7ff2/+7ROfzBNJ50t6x61kW1lOasV8SY99aiva/nxV87+4dNuVdhw7tXWsHtOxFN/Z80qt5u/hdvbUPfbqrsca2bHTPcf63uXEO9HK3oUMmDmarAIwshOvn6jWHtb+Xvuw9rPazdqbU9+cvDz52WpM/K3yp/LvS78rfS15PT6MH8f0cUcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPg7U7d281W63F1TEWqo85VpT2rbP5wmgdRj1i+FhJXqiOOxtPQeHfU0OzUYsxjf6HiBhSp/rEQyTjn8/pRD6UDosfTsv2dMoHaF4pWu1epxJrU3s9g5Pbz3vUbzVb/+n01alFt5CklwzwnLvYXr59ce3O3S8tLTffXnx7cWX+8qXLlxpfmfvyxRtLrcXZ7uNxRwmMw9qdu+XjjgEAAAAAAAAAAAA4mPxf/7cf+z8zVPapU11d233kM0d9qgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAzauGtmNiIJOZmL8ym2w82G610KcrbNSsRUYqI5EcRyScRV6K7RL2nu2Svcd54+PEH5+5/1Njuq1LULw1rN5qNfImZiCjn6/1N7tLNzv6u9fS38VjhJVtnmCbsbJE4OG7/CwAA//95tvX3") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) write$qrtrtun(r0, &(0x7f00000000c0)="f6", 0x1) 895.187627ms ago: executing program 3 (id=1804): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000380), &(0x7f00000003c0)='./file0/file0\x00', 0xa80004, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x5000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xc}}, {@default_permissions}, {@default_permissions}, {@default_permissions}, {@allow_other}], [{@smackfstransmute}, {@euid_eq}, {@appraise_type}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_type={'subj_type', 0x3d, '/dev/loop-control\x00'}}]}}, 0x1, 0x0, 0x0) 369.336995ms ago: executing program 6 (id=1805): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20044005}, 0x4000010) 91.607714ms ago: executing program 3 (id=1806): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x12c}}, 0x8800) 0s ago: executing program 5 (id=1807): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) kernel console output (not intermixed with test programs): bitmap size(need : 2, cur : 17179869186) [ 422.798250][ T30] audit: type=1800 audit(1751997428.333:17): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.743" name="file2" dev="loop2" ino=1048676 res=0 errno=0 [ 422.992708][ T5897] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 423.181060][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 423.205806][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.217916][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.228214][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 423.241911][ T5897] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 423.251405][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.384578][ T5897] usb 5-1: config 0 descriptor?? [ 423.735820][ T7730] loop2: detected capacity change from 0 to 1024 [ 423.774823][ T7730] EXT4-fs: Ignoring removed mblk_io_submit option [ 423.783067][ T7730] EXT4-fs: Ignoring removed nobh option [ 423.788956][ T7730] EXT4-fs: Ignoring removed bh option [ 423.845854][ T5897] microsoft 0003:045E:07DA.0006: item 0 4 0 8 parsing failed [ 423.883813][ T7730] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 423.886442][ T5897] microsoft 0003:045E:07DA.0006: parse failed [ 423.904865][ T5897] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 424.068106][ T5897] usb 5-1: USB disconnect, device number 7 [ 424.543717][ T7743] netlink: 32 bytes leftover after parsing attributes in process `syz.5.753'. [ 425.100109][ T7750] loop3: detected capacity change from 0 to 64 [ 425.292287][ T7752] loop4: detected capacity change from 0 to 256 [ 425.331354][ T7752] exfat: Deprecated parameter 'utf8' [ 425.341062][ T7752] exfat: Deprecated parameter 'namecase' [ 425.347637][ T7752] exfat: Deprecated parameter 'namecase' [ 425.354841][ T7752] exfat: Deprecated parameter 'utf8' [ 425.382344][ T7755] loop2: detected capacity change from 0 to 256 [ 425.474617][ T7752] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 425.630175][ T7752] PKCS8: Unsupported PKCS#8 version [ 426.620810][ T7774] netlink: 'syz.5.768': attribute type 18 has an invalid length. [ 426.647644][ T7774] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.656972][ T7774] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.670002][ T7774] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.679091][ T7774] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.118982][ T7781] loop3: detected capacity change from 0 to 256 [ 427.510236][ T7783] loop5: detected capacity change from 0 to 2048 [ 427.627559][ T7783] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.731952][ T7803] loop4: detected capacity change from 0 to 64 [ 430.355413][ T7827] loop5: detected capacity change from 0 to 128 [ 431.420961][ T5869] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 431.607619][ T5869] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 431.617354][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.672045][ T5869] usb 3-1: config 0 descriptor?? [ 431.840382][ T7847] loop5: detected capacity change from 0 to 164 [ 432.144570][ T5869] appleir 0003:05AC:8241.0007: item fetching failed at offset 2/5 [ 432.175524][ T5869] appleir 0003:05AC:8241.0007: parse failed [ 432.182878][ T5869] appleir 0003:05AC:8241.0007: probe with driver appleir failed with error -22 [ 432.397284][ T5869] usb 3-1: USB disconnect, device number 7 [ 432.664516][ T7859] netlink: 'syz.5.808': attribute type 8 has an invalid length. [ 432.797425][ T7855] loop4: detected capacity change from 0 to 4096 [ 432.900799][ T7861] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 433.238690][ T7863] loop5: detected capacity change from 0 to 1024 [ 433.317974][ T30] audit: type=1326 audit(1751997438.853:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7fc00000 [ 433.499624][ T5897] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 433.715838][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 433.727667][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.741184][ T5897] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 433.751742][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.814432][ T5897] usb 2-1: config 0 descriptor?? [ 434.306291][ T5897] elo 0003:04E7:0030.0008: unknown main item tag 0x1 [ 434.370446][ T5897] elo 0003:04E7:0030.0008: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.1-1/input0 [ 434.556405][ T5869] usb 2-1: USB disconnect, device number 4 [ 434.968398][ T7884] netlink: 168 bytes leftover after parsing attributes in process `syz.4.820'. [ 435.507057][ T7891] loop4: detected capacity change from 0 to 8 [ 435.583579][ T7891] SQUASHFS error: lzo decompression failed, data probably corrupt [ 435.594341][ T7891] SQUASHFS error: Failed to read block 0x91: -5 [ 435.601127][ T7891] SQUASHFS error: Unable to read metadata cache entry [8f] [ 435.608598][ T7891] SQUASHFS error: Unable to read inode 0x7 [ 435.695909][ T7893] loop3: detected capacity change from 0 to 256 [ 435.715685][ T7893] exfat: Deprecated parameter 'namecase' [ 435.722619][ T7893] exfat: Deprecated parameter 'namecase' [ 435.728769][ T7893] exfat: Deprecated parameter 'utf8' [ 435.766182][ T7891] loop4: detected capacity change from 0 to 256 [ 435.822679][ T7893] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 435.980736][ T7891] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 436.004982][ T7891] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 436.353598][ T7903] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 436.362380][ T7903] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 436.369711][ T7903] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 436.377015][ T7903] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 436.384073][ T7903] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 436.395536][ T7903] comedi comedi3: 8255: I/O port conflict (0x100010,4) [ 436.403861][ T7903] comedi comedi3: 8255: I/O port conflict (0x1000002,4) [ 436.411446][ T7903] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffbf,4) [ 436.420126][ T7903] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 436.426944][ T7903] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 436.434018][ T7903] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 436.441053][ T7903] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 436.447943][ T7903] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 436.455213][ T7903] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 436.462221][ T7903] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 436.469115][ T7903] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 436.476140][ T7903] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 436.483303][ T7903] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 436.490857][ T7903] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 436.500683][ T7903] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 436.508360][ T7903] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 436.515455][ T7903] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 436.522547][ T7903] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 436.531636][ T7903] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 437.046596][ T7911] loop2: detected capacity change from 0 to 512 [ 437.092510][ T7911] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 437.250192][ T5897] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 437.259959][ T7911] EXT4-fs (loop2): 1 truncate cleaned up [ 437.268352][ T7911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.424586][ T5897] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 437.436409][ T5897] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.468266][ T5897] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 437.478218][ T5897] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 437.487204][ T5897] usb 6-1: Product: syz [ 437.492029][ T5897] usb 6-1: Manufacturer: syz [ 437.540709][ T5897] hub 6-1:4.0: USB hub found [ 437.766182][ T5897] hub 6-1:4.0: 6 ports detected [ 437.782424][ T5897] hub 6-1:4.0: insufficient power available to use all downstream ports [ 438.119692][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.175157][ T5897] hub 6-1:4.0: set hub depth failed [ 438.220918][ T5897] usb 6-1: USB disconnect, device number 2 [ 438.233465][ T7925] loop1: detected capacity change from 0 to 1024 [ 438.425320][ T7930] loop3: detected capacity change from 0 to 64 [ 438.467360][ T7930] hfs: unable to locate alternate MDB [ 438.472992][ T7925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.486239][ T7930] hfs: continuing without an alternate MDB [ 438.561302][ T7925] EXT4-fs error (device loop1): ext4_lookup:1787: comm syz.1.838: inode #12: comm syz.1.838: iget: illegal inode # [ 438.633223][ T30] audit: type=1800 audit(1751997444.153:19): pid=7930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.840" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 438.686280][ T7925] EXT4-fs (loop1): Remounting filesystem read-only [ 438.986640][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.479983][ T5869] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 439.675164][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 439.688016][ T5869] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 439.697312][ T5869] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 439.708827][ T5869] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 439.720491][ T5869] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 439.731317][ T5869] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 439.744977][ T5869] usb 6-1: config 0 interface 0 has no altsetting 0 [ 439.817180][ T5869] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 439.826850][ T5869] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 439.835806][ T5869] usb 6-1: Product: syz [ 439.840451][ T5869] usb 6-1: Manufacturer: syz [ 439.845347][ T5869] usb 6-1: SerialNumber: syz [ 439.884278][ T5869] usb 6-1: config 0 descriptor?? [ 439.907824][ T5869] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 439.971617][ T5869] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 440.275557][ T7954] Bluetooth: MGMT ver 1.23 [ 441.529980][ T7971] loop2: detected capacity change from 0 to 256 [ 441.572352][ T7971] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 441.583618][ T7971] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 441.687009][ T7971] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 441.715939][ T5897] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 441.730882][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 441.940035][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 441.962206][ T5897] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.975881][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 441.983115][ T5897] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 441.992673][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.086887][ T5897] usb 5-1: config 0 descriptor?? [ 442.571105][ T5869] usb 6-1: USB disconnect, device number 3 [ 442.605641][ T5869] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 442.717617][ T5897] uclogic 0003:5543:0781.0009: ignoring exceeding usage max [ 442.746932][ T5897] uclogic 0003:5543:0781.0009: unbalanced collection at end of report description [ 442.872547][ T5897] uclogic 0003:5543:0781.0009: parse failed [ 442.879196][ T5897] uclogic 0003:5543:0781.0009: probe with driver uclogic failed with error -22 [ 442.928912][ T5897] usb 5-1: USB disconnect, device number 8 [ 443.089383][ T7989] loop5: detected capacity change from 0 to 256 [ 443.830612][ T7991] loop2: detected capacity change from 0 to 4096 [ 443.932343][ T8000] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 444.003198][ T7999] loop4: detected capacity change from 0 to 256 [ 444.517338][ T7999] FAT-fs (loop4): Directory bread(block 64) failed [ 444.524449][ T7999] FAT-fs (loop4): Directory bread(block 65) failed [ 444.532351][ T7999] FAT-fs (loop4): Directory bread(block 66) failed [ 444.539166][ T7999] FAT-fs (loop4): Directory bread(block 67) failed [ 444.546356][ T7999] FAT-fs (loop4): Directory bread(block 68) failed [ 444.553404][ T7999] FAT-fs (loop4): Directory bread(block 69) failed [ 444.560575][ T7999] FAT-fs (loop4): Directory bread(block 70) failed [ 444.567360][ T7999] FAT-fs (loop4): Directory bread(block 71) failed [ 444.574528][ T7999] FAT-fs (loop4): Directory bread(block 72) failed [ 444.581586][ T7999] FAT-fs (loop4): Directory bread(block 73) failed [ 444.900457][ T8008] openvswitch: netlink: Message has 1255 unknown bytes. [ 444.907790][ T8008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.026440][ T8010] loop1: detected capacity change from 0 to 16 [ 445.067615][ T8010] erofs (device loop1): mounted with root inode @ nid 36. [ 445.737713][ T8018] loop4: detected capacity change from 0 to 1024 [ 445.941990][ T8018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 445.954854][ T8018] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.967651][ T30] audit: type=1400 audit(1751997451.463:20): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="percpu_alloc_percpu" pid=8023 comm="syz.5.882" [ 446.160091][ T8018] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 446.216260][ T8018] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 446.237155][ T8018] EXT4-fs (loop4): This should not happen!! Data will be lost [ 446.237155][ T8018] [ 446.249667][ T8018] EXT4-fs (loop4): Total free blocks count 0 [ 446.256159][ T8018] EXT4-fs (loop4): Free/Dirty block details [ 446.262556][ T8018] EXT4-fs (loop4): free_blocks=4293918720 [ 446.268573][ T8018] EXT4-fs (loop4): dirty_blocks=80 [ 446.274499][ T8018] EXT4-fs (loop4): Block reservation details [ 446.281119][ T8018] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 446.499948][ T8034] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 446.513068][ T8034] CUSE: unknown device info "3ܟ,̘" [ 446.519239][ T8034] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 446.519239][ T8034] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 446.545177][ T8034] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 446.559680][ T8034] CUSE: DEVNAME unspecified [ 446.733788][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 447.173670][ T8038] loop4: detected capacity change from 0 to 512 [ 447.209625][ T8038] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 447.299043][ T8038] EXT4-fs (loop4): 1 truncate cleaned up [ 447.307766][ T8038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.857512][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.958728][ T8049] loop5: detected capacity change from 0 to 2048 [ 447.974837][ T7203] Bluetooth: hci0: command 0x0401 tx timeout [ 448.150964][ T8049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.266952][ T8049] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 448.347680][ T8049] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 448.732683][ T7484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.321204][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 449.331667][ T8073] tipc: Started in network mode [ 449.336898][ T8073] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 449.340287][ T8071] loop4: detected capacity change from 0 to 1024 [ 449.347006][ T8073] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 449.363723][ T8073] tipc: Enabled bearer , priority 10 [ 450.302493][ T8087] loop4: detected capacity change from 0 to 256 [ 450.440544][ T8078] loop5: detected capacity change from 0 to 4096 [ 450.476427][ T8087] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 450.499893][ T5869] tipc: Node number set to 1 [ 450.515635][ T8078] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 450.653737][ T8087] exFAT-fs (loop4): error, data size is invalid(10) [ 450.714696][ T8091] exFAT-fs (loop4): error, data size is invalid(10) [ 450.779578][ T8078] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 451.411644][ T8092] loop3: detected capacity change from 0 to 4096 [ 451.462917][ T8092] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 451.798575][ T8102] loop2: detected capacity change from 0 to 512 [ 451.900212][ T8102] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 451.972274][ T8092] ntfs3(loop3): ino=1f, "file2" failed to open parent directory r=5 to update [ 451.994327][ T8107] loop5: detected capacity change from 0 to 256 [ 452.004512][ T8107] exfat: Deprecated parameter 'utf8' [ 452.010355][ T8107] exfat: Deprecated parameter 'utf8' [ 452.016725][ T8107] exfat: Deprecated parameter 'utf8' [ 452.020826][ T8102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 452.120628][ T8102] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.917: corrupted in-inode xattr: e_value size too large [ 452.152585][ T8102] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.917: couldn't read orphan inode 15 (err -117) [ 452.187915][ T14] ntfs3(loop3): ino=1f, failed to open parent directory r=5 to update [ 452.222603][ T8102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.248217][ T8107] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 452.774013][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.931226][ T8115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.921'. [ 453.312197][ T8120] netlink: 'syz.5.925': attribute type 5 has an invalid length. [ 455.930067][ T8159] loop5: detected capacity change from 0 to 512 [ 456.174836][ T8159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.402390][ T8159] fs-verity: sha512 using implementation "sha512-generic" [ 456.444715][ T8159] EXT4-fs warning (device loop5): ext4_begin_enable_verity:135: inode #15: comm syz.5.941: verity is only allowed on extent-based files [ 456.486132][ T8166] loop3: detected capacity change from 0 to 2048 [ 456.533708][ T8166] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 456.602452][ T8170] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 456.831512][ T7484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.275653][ T8177] loop1: detected capacity change from 0 to 256 [ 457.540658][ T8181] netlink: 'syz.3.949': attribute type 10 has an invalid length. [ 457.549211][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.559666][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.586691][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.594541][ T8181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.603620][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.611455][ T8181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.644905][ T8181] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 457.675250][ T8183] bridge_slave_1: left allmulticast mode [ 457.681495][ T8183] bridge_slave_1: left promiscuous mode [ 457.688506][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.712198][ T8177] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 457.791902][ T8183] bridge_slave_0: left allmulticast mode [ 457.807840][ T8183] bridge_slave_0: left promiscuous mode [ 457.815052][ T8183] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.018422][ T8183] bond0: (slave bridge0): Releasing backup interface [ 458.487046][ T5897] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 458.706912][ T8194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.957'. [ 458.726146][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 458.738013][ T5897] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 458.747897][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.828125][ T5897] usb 6-1: config 0 descriptor?? [ 458.968550][ T8200] loop2: detected capacity change from 0 to 512 [ 459.101601][ T8200] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 459.115202][ T8200] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 459.134932][ T8200] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.960: Corrupt directory, running e2fsck is recommended [ 459.197479][ T8200] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 459.207703][ T8200] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.960: corrupted in-inode xattr: invalid ea_ino [ 459.224646][ T8200] EXT4-fs (loop2): Remounting filesystem read-only [ 459.237762][ T8200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.340665][ T8200] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 459.356798][ T5897] aquacomputer_d5next 0003:0C70:F0BD.000A: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.5-1/input0 [ 459.525186][ T8208] loop1: detected capacity change from 0 to 64 [ 459.544530][ T5897] usb 6-1: USB disconnect, device number 4 [ 459.567436][ T8208] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 459.665381][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.967697][ T8210] loop2: detected capacity change from 0 to 64 [ 460.053063][ T8210] hfs: bad catalog entry type 0 [ 460.387123][ T8216] loop1: detected capacity change from 0 to 1024 [ 460.537968][ T8216] hfsplus: bad catalog entry type [ 460.790260][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.980'. [ 460.831722][ T14] hfsplus: b-tree write err: -5, ino 4 [ 460.946672][ T30] audit: type=1804 audit(1751997466.483:21): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.970" name="/" dev="pidfs" ino=8224 res=1 errno=0 [ 460.966579][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.553426][ T8236] netlink: 'syz.2.974': attribute type 11 has an invalid length. [ 462.396552][ T5869] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 462.580151][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 462.632430][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 462.644467][ T5869] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 462.655131][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.707539][ T5869] usb 4-1: config 0 descriptor?? [ 462.835155][ T8254] loop2: detected capacity change from 0 to 1024 [ 462.947223][ T5869] usbhid 4-1:0.0: can't add hid device: -71 [ 462.954165][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 462.992620][ T5869] usb 4-1: USB disconnect, device number 7 [ 463.098971][ T8258] loop1: detected capacity change from 0 to 8 [ 463.782819][ T8264] loop1: detected capacity change from 0 to 1024 [ 464.345629][ T8271] loop4: detected capacity change from 0 to 512 [ 464.381009][ T8274] netlink: 'syz.2.993': attribute type 29 has an invalid length. [ 464.402946][ T8275] devtmpfs: Cannot retroactively limit inodes [ 464.428270][ T8271] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 464.445527][ T8274] netlink: 'syz.2.993': attribute type 29 has an invalid length. [ 464.585314][ T8271] EXT4-fs (loop4): 1 truncate cleaned up [ 464.593838][ T8271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.701194][ T5897] IPVS: starting estimator thread 0... [ 464.749697][ T30] audit: type=1800 audit(1751997470.273:22): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.991" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 464.829853][ T8282] IPVS: using max 192 ests per chain, 9600 per kthread [ 465.551565][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.458870][ T8296] loop3: detected capacity change from 0 to 512 [ 466.683371][ T8296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.699903][ T8296] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.526871][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.697015][ T8304] loop2: detected capacity change from 0 to 256 [ 467.738920][ T8304] exfat: Deprecated parameter 'utf8' [ 467.740049][ T5897] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 467.745287][ T8304] exfat: Deprecated parameter 'utf8' [ 467.848658][ T8304] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 467.939743][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 467.995850][ T5897] usb 6-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 468.005588][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.014298][ T5897] usb 6-1: Product: syz [ 468.014409][ T5897] usb 6-1: Manufacturer: syz [ 468.014529][ T5897] usb 6-1: SerialNumber: syz [ 468.050208][ T5897] usb 6-1: config 0 descriptor?? [ 468.093541][ T5897] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 468.316919][ T5897] gspca_sn9c2028: read1 error -32 [ 468.530499][ T5897] gspca_sn9c2028: read1 error -71 [ 468.536086][ T5897] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 468.601585][ T5897] usb 6-1: USB disconnect, device number 5 [ 468.667279][ T8313] veth1_macvtap: left promiscuous mode [ 468.673340][ T8313] macsec0: entered promiscuous mode [ 468.678934][ T8313] macsec0: entered allmulticast mode [ 468.774349][ T8313] veth1_macvtap: entered promiscuous mode [ 468.780689][ T8313] veth1_macvtap: entered allmulticast mode [ 468.788005][ T8313] macsec0: left promiscuous mode [ 468.794403][ T8313] macsec0: left allmulticast mode [ 468.799886][ T8313] veth1_macvtap: left allmulticast mode [ 468.813719][ T8315] netlink: 'syz.2.1009': attribute type 10 has an invalid length. [ 468.842933][ T8315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.873007][ T8315] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 468.946619][ T8319] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1010'. [ 469.551713][ T8321] loop2: detected capacity change from 0 to 512 [ 469.611116][ T8321] EXT4-fs: Ignoring removed orlov option [ 469.633597][ T8321] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 469.785442][ T8321] EXT4-fs (loop2): 1 orphan inode deleted [ 469.792063][ T8321] EXT4-fs (loop2): 1 truncate cleaned up [ 469.800649][ T8321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.899817][ T8321] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.2.1013: path /200/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 469.960029][ T8321] EXT4-fs (loop2): Remounting filesystem read-only [ 470.141769][ T8335] loop1: detected capacity change from 0 to 256 [ 470.256958][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.540359][ T8335] FAT-fs (loop1): Directory bread(block 64) failed [ 470.547509][ T8335] FAT-fs (loop1): Directory bread(block 65) failed [ 470.554940][ T8335] FAT-fs (loop1): Directory bread(block 66) failed [ 470.561978][ T8335] FAT-fs (loop1): Directory bread(block 67) failed [ 470.568945][ T8335] FAT-fs (loop1): Directory bread(block 68) failed [ 470.575933][ T8335] FAT-fs (loop1): Directory bread(block 69) failed [ 470.583177][ T8335] FAT-fs (loop1): Directory bread(block 70) failed [ 470.590147][ T8335] FAT-fs (loop1): Directory bread(block 71) failed [ 470.604302][ T8335] FAT-fs (loop1): Directory bread(block 72) failed [ 470.614111][ T8335] FAT-fs (loop1): Directory bread(block 73) failed [ 470.647985][ T8340] loop4: detected capacity change from 0 to 64 [ 470.678437][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'. [ 471.297205][ T8347] loop2: detected capacity change from 0 to 1024 [ 471.380279][ T8347] EXT4-fs: Ignoring removed i_version option [ 471.386871][ T8347] EXT4-fs: Ignoring removed mblk_io_submit option [ 471.394545][ T8347] EXT4-fs: Ignoring removed nobh option [ 471.400814][ T8347] EXT4-fs: Ignoring removed bh option [ 471.464284][ T8351] loop4: detected capacity change from 0 to 64 [ 471.543681][ T8347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.090662][ T8359] loop3: detected capacity change from 0 to 2048 [ 472.114001][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.196999][ T8359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.258119][ T8364] loop4: detected capacity change from 0 to 256 [ 472.382057][ T8364] exfat: Deprecated parameter 'utf8' [ 472.387672][ T8364] exfat: Deprecated parameter 'utf8' [ 472.401639][ T8359] EXT4-fs error (device loop3): ext4_ext_precache:649: inode #2: comm syz.3.1028: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 472.450235][ T8359] EXT4-fs (loop3): Remounting filesystem read-only [ 472.604499][ T8364] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 472.667789][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.740616][ T8364] exFAT-fs (loop4): error, in sector 160, dentry 12 should be unused, but 0x85 [ 472.825101][ T8372] exFAT-fs (loop4): error, in sector 160, dentry 12 should be unused, but 0x85 [ 474.596772][ T8399] loop1: detected capacity change from 0 to 256 [ 474.618191][ T8399] exfat: Deprecated parameter 'namecase' [ 474.624895][ T8399] exfat: Deprecated parameter 'utf8' [ 474.826172][ T8399] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 475.537828][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.545010][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.972240][ T30] audit: type=1326 audit(1751997481.503:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 475.994802][ T30] audit: type=1326 audit(1751997481.523:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 476.018047][ T30] audit: type=1326 audit(1751997481.533:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 476.046138][ T30] audit: type=1326 audit(1751997481.533:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 476.070810][ T30] audit: type=1326 audit(1751997481.533:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 476.527734][ T8427] loop2: detected capacity change from 0 to 128 [ 476.564228][ T8427] EXT4-fs: Ignoring removed nobh option [ 476.595053][ T8427] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 476.667523][ T8427] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 476.927604][ T5816] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 477.516541][ T8444] loop2: detected capacity change from 0 to 128 [ 478.261113][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'. [ 478.669927][ T8466] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 479.657845][ T8472] loop2: detected capacity change from 0 to 4096 [ 479.922394][ T8482] loop3: detected capacity change from 0 to 2048 [ 480.102278][ T8482] Alternate GPT is invalid, using primary GPT. [ 480.109901][ T8482] loop3: p1 p2 p3 [ 480.258892][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'. [ 480.496911][ T8488] loop5: detected capacity change from 0 to 16 [ 480.587121][ T8488] erofs (device loop5): unsupported datalayout 7 of nid 36 [ 481.948801][ T8512] loop5: detected capacity change from 0 to 64 [ 482.289138][ T8516] loop3: detected capacity change from 0 to 128 [ 482.346414][ T7484] hfs: node 4:3 still has 1 user(s)! [ 482.408489][ T8516] syz.3.1095: attempt to access beyond end of device [ 482.408489][ T8516] loop3: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 483.528936][ T8535] loop2: detected capacity change from 0 to 1024 [ 483.715856][ T8535] syz.2.1104: attempt to access beyond end of device [ 483.715856][ T8535] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 484.126662][ T8545] loop1: detected capacity change from 0 to 256 [ 484.431712][ T8543] loop3: detected capacity change from 0 to 4096 [ 484.484139][ T8543] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 485.673713][ T5822] Bluetooth: hci4: failed to read key size for handle 201 [ 485.681667][ T5822] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 485.830185][ T5897] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 485.897211][ T8570] loop2: detected capacity change from 0 to 1024 [ 486.052450][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 486.111802][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.123565][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.133992][ T5897] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 486.143658][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.249641][ T5897] usb 2-1: config 0 descriptor?? [ 486.778889][ T5897] hid-picolcd 0003:04D8:F002.000B: item fetching failed at offset 7/11 [ 486.815293][ T5897] hid-picolcd 0003:04D8:F002.000B: device report parse failed [ 486.823618][ T5897] hid-picolcd 0003:04D8:F002.000B: probe with driver hid-picolcd failed with error -22 [ 487.022232][ T5897] usb 2-1: USB disconnect, device number 5 [ 487.713512][ T8590] loop2: detected capacity change from 0 to 128 [ 487.783348][ T8590] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 487.811537][ T8590] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.233126][ T5816] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 489.379632][ T5869] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 489.580143][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 489.607899][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 489.616034][ T5869] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 489.629538][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.645181][ T8614] loop3: detected capacity change from 0 to 4096 [ 489.669094][ T8614] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 489.706829][ T5869] usb 2-1: config 0 descriptor?? [ 489.734949][ T5822] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 489.752083][ T5822] Bluetooth: hci4: Injecting HCI hardware error event [ 489.773937][ T5822] Bluetooth: hci4: hardware error 0x00 [ 490.111089][ T8614] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 490.270147][ T5869] logitech 0003:046D:C623.000C: hidraw0: USB HID v0.07 Device [HID 046d:c623] on usb-dummy_hcd.1-1/input0 [ 490.394335][ T1311] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 490.415886][ T5821] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 490.422980][ T5821] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 490.430932][ T5821] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 490.489819][ T5869] usb 2-1: USB disconnect, device number 6 [ 490.515626][ T754] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 490.648721][ T8630] loop2: detected capacity change from 0 to 64 [ 491.054528][ T11] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 491.274817][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.291729][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.303009][ T11] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 491.312734][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.464899][ T11] usb 5-1: config 0 descriptor?? [ 491.810451][ T5822] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 492.070050][ T8640] loop1: detected capacity change from 0 to 1764 [ 492.130339][ T11] razer 0003:1532:010E.000D: failed to enable macro keys: -71 [ 492.188663][ T11] razer 0003:1532:010E.000D: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 492.247121][ T8640] isofs: isofs_export_get_parent(): child directory not normalized! [ 492.280958][ T11] usb 5-1: USB disconnect, device number 9 [ 492.473789][ T8646] loop5: detected capacity change from 0 to 1024 [ 492.513590][ T8646] EXT4-fs: inline encryption not supported [ 492.521069][ T8646] EXT4-fs: Ignoring removed bh option [ 492.646672][ T8646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.069102][ T7484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.250733][ T8657] [U] <]k@\_8-+LB'Fɣ`-b^ByKK (Xn` [ 493.258624][ T8657] [U] suyjRд41cx`Jq>>*sD&>EKSH?O1=5A [ 493.267573][ T8657] [U] L!:iˢ|zF&K',KRk1L3SՌz?+Q>W%F|OO2$u%+i<_BzJ۽Ջ+iO6M[ [ 493.281019][ T8657] [U] q &$O}8e^/ zyiO1٣ O(^iB7T:fSJ(#,Gl pgd^lkoq?%g;vǍp[ [ 493.294503][ T8657] [U] tI/>ᗧ>jI||QLY=?>:ɺٯ< [ 493.301079][ T8657] [U] mx{$R)gL U\[pF/ [ 493.306722][ T8657] [U] oMkюl"D'FAw[L.&|^?)xvy :0]CpPeMs@=^kE.Q n@%]K= [ 493.318896][ T8657] [U] %H>'\SwHŤ;;yJukp]n&F@%w$0zӀtj>R0gգ­jk,`<ĴO+R2kqQ!Z}A W{^3aTf [ 493.334226][ T8657] [U] yb*BU '2JgBfDGŀ#X˭']ؒ,cmǙnjsG <;dMՀԓbqv%९B [ 493.346050][ T8657] [U] S%X6L1pـ3(4y|=F^BGcgx;ESDQ\Wa冎8?!X [ 493.356357][ T8657] [U]  [ 493.359399][ T8657] [U] [ 493.362402][ T8657] [U] 7ѦR7eRk.}WIz.m2pvl'  Urm[jB74{!?ޗR/4tϰ⇙sGDS'>./J􅑕9U$@WpLfc|2~^'OLjzGX [ 493.380538][ T8657] [U] i.ĮcMRm [ 493.385019][ T8657] [U] r[AQ܃6ܲ\ň/"Az\}mTP#YE [ 493.392990][ T8657] [U] V* 3YGKW05]8-Q!o6,ZHnI\AGt; -J]NbQUteQ?blO&2Z' M)fknMy5gi =47f [ 493.443167][ T8657] [U]  [ 493.446486][ T8657] [U] jM70ؕT&h:wt/$iX@3hͳF<+,Xtd2#QxSg#cT7OT?ӾNTv8ƙ8͙%1 - [ 493.459953][ T8657] [U] @kq'(j˛%>w-(wlC_CθSwP+-e/k@n9Uft^tG@p,vhpd嚦.Idev#! [ 493.476352][ T8657] [U] .Qs6q\k&R- =Уis833V"`%R^[9 բ^bC$qZ]35xJ$aNe'o0;Ē[1XTre,E(g9.nďmdoQYD}YȂDHB7]#}P4]HAvG@i!ĖR,)I Bk8Pova)\WXqb Dn"[2IOf$8܏hQ8I?5?cxi|L2y [ 493.505397][ T8657] [U] 8Q"u(omGюډhz&Qd [ 493.524374][ T8657] [U] kvX&H`NnO\=L`kr'4tixg朋[ [ 493.531717][ T8657] [U] y/~+7;{lB0qHqSw3Nq<|јDsd8-=;k֔%00?lbSg gt(u0E2AV/z [ 493.544766][ T8657] [U] g\CL< [ 493.548844][ T8657] [U] qrU#ʇl5# #= PabY U[*7ugELp5A'몕֙XP>wl4O3 0b 90 48 8b 7d c0 4c 8b 37 e8 05 a7 e1 ff 48 8b 00 48 89 45 c8 [ 499.261929][ T8739] RSP: 0018:ffff8880527c3b90 EFLAGS: 00010283 [ 499.268845][ T8739] RAX: ffffffff82b579eb RBX: ffff88811932ccd8 RCX: 0000000000080000 [ 499.289544][ T8739] RDX: ffffc9001782a000 RSI: 0000000000000060 RDI: 0000000000000061 [ 499.301409][ T8739] RBP: ffff8880527c3bd0 R08: ffffea000000000f R09: 0000000000000003 [ 499.310010][ T8739] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000000 [ 499.318285][ T8739] R13: 0000000000000000 R14: ffff88814084d220 R15: 0000000000000000 [ 499.326781][ T8739] FS: 0000000000000000(0000) GS:ffff8881aa95d000(0063) knlGS:00000000f506eb40 [ 499.337035][ T8739] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 499.344160][ T8739] CR2: 000000000c2f3e18 CR3: 000000005562e000 CR4: 00000000003526f0 [ 499.352761][ T8739] Call Trace: [ 499.356378][ T8739] [ 499.359786][ T8739] do_mmap+0x1570/0x1d70 [ 499.364434][ T8739] vm_mmap_pgoff+0x48e/0x770 [ 499.376616][ T8739] ksys_mmap_pgoff+0x51b/0x7c0 [ 499.384284][ T8739] __ia32_sys_mmap_pgoff+0x11a/0x1d0 [ 499.390318][ T8739] ia32_sys_call+0x33d6/0x42c0 [ 499.395422][ T8739] __do_fast_syscall_32+0xb0/0x150 [ 499.401079][ T8739] do_fast_syscall_32+0x38/0x80 [ 499.406318][ T8739] do_SYSENTER_32+0x1f/0x30 [ 499.411603][ T8739] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 499.418351][ T8739] RIP: 0023:0xf707e539 [ 499.423993][ T8739] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 499.444402][ T8739] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 499.455179][ T8739] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000 [ 499.463732][ T8739] RDX: 000000000000000a RSI: 0000000000000011 RDI: 0000000000000003 [ 499.479988][ T8739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 499.488292][ T8739] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 499.499001][ T8739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.504983][ T8735] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 499.507516][ T8739] [ 499.507575][ T8739] ---[ end trace 0000000000000000 ]--- [ 499.692570][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 499.775301][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 500.165420][ T8746] loop5: detected capacity change from 0 to 64 [ 500.286219][ T8748] loop3: detected capacity change from 0 to 16 [ 500.372911][ T8748] erofs (device loop3): mounted with root inode @ nid 36. [ 500.412623][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 500.480502][ T30] audit: type=1800 audit(1751997505.993:28): pid=8748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1198" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 500.613251][ T8748] syz.3.1198: attempt to access beyond end of device [ 500.613251][ T8748] loop3: rw=34816, sector=34359738360, nr_sectors = 2048 limit=16 [ 500.960647][ T8756] ip6_vti0 speed is unknown, defaulting to 1000 [ 500.971473][ T8756] ip6_vti0 speed is unknown, defaulting to 1000 [ 500.979830][ T8756] ip6_vti0 speed is unknown, defaulting to 1000 [ 501.536228][ T8756] infiniband syz2: set active [ 501.541549][ T8756] infiniband syz2: added ip6_vti0 [ 501.548295][ T5869] ip6_vti0 speed is unknown, defaulting to 1000 [ 501.700742][ T8756] RDS/IB: syz2: added [ 501.705235][ T8756] smc: adding ib device syz2 with port count 1 [ 501.711997][ T8756] smc: ib device syz2 port 1 has pnetid [ 501.721007][ T8756] ip6_vti0 speed is unknown, defaulting to 1000 [ 502.289557][ T8756] ip6_vti0 speed is unknown, defaulting to 1000 [ 502.866496][ T8756] ip6_vti0 speed is unknown, defaulting to 1000 [ 503.426068][ T8756] ip6_vti0 speed is unknown, defaulting to 1000 [ 503.967345][ T8772] loop4: detected capacity change from 0 to 4096 [ 504.031674][ T8756] ip6_vti0 speed is unknown, defaulting to 1000 [ 504.053483][ T8772] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 504.585837][ T5869] ip6_vti0 speed is unknown, defaulting to 1000 [ 505.349618][ T5874] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 505.529972][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 505.564477][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 505.575457][ T5874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 505.648423][ T5874] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 505.658253][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.666888][ T5874] usb 2-1: Product: syz [ 505.671556][ T5874] usb 2-1: Manufacturer: syz [ 505.676441][ T5874] usb 2-1: SerialNumber: syz [ 505.697647][ T5874] usb 2-1: config 0 descriptor?? [ 506.205241][ T5869] usb 2-1: USB disconnect, device number 7 [ 506.390274][ T5874] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 506.502348][ T8803] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 506.514914][ T8803] CUSE: unknown device info "3ܟ,̘" [ 506.521351][ T8803] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 506.521351][ T8803] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 506.544146][ T8803] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 506.556639][ T8803] CUSE: DEVNAME unspecified [ 506.569926][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 506.587764][ T5874] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 506.596442][ T5874] usb 4-1: config 0 has no interface number 0 [ 506.655486][ T5874] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 506.665241][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.673798][ T5874] usb 4-1: Product: syz [ 506.678227][ T5874] usb 4-1: Manufacturer: syz [ 506.683302][ T5874] usb 4-1: SerialNumber: syz [ 506.720084][ T8801] loop5: detected capacity change from 0 to 4096 [ 506.736278][ T5874] usb 4-1: config 0 descriptor?? [ 506.759527][ T5874] smsc95xx v2.0.0 [ 507.378696][ T8810] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 507.520045][ T5874] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 507.536374][ T5874] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 507.639958][ T5874] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 507.653467][ T5874] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 507.759860][ T5874] usb 4-1: USB disconnect, device number 8 [ 509.181227][ T8834] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 510.652552][ T5874] IPVS: starting estimator thread 0... [ 510.743676][ T8857] IPVS: using max 240 ests per chain, 12000 per kthread [ 510.793733][ T8852] loop4: detected capacity change from 0 to 1024 [ 511.243980][ T1311] hfsplus: b-tree write err: -5, ino 4 [ 511.326605][ T8862] loop1: detected capacity change from 0 to 256 [ 511.364301][ T8863] loop2: detected capacity change from 0 to 512 [ 511.404119][ T8863] EXT4-fs: Ignoring removed mblk_io_submit option [ 511.414262][ T8863] EXT4-fs: Ignoring removed mblk_io_submit option [ 511.484557][ T8863] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 511.525862][ T8863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 511.550125][ T8863] System zones: 1-12 [ 511.586815][ T8863] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.1250: corrupted in-inode xattr: e_value size too large [ 511.673070][ T8863] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1250: couldn't read orphan inode 15 (err -117) [ 511.733189][ T8863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.143988][ T8873] loop3: detected capacity change from 0 to 512 [ 512.179638][ T8873] EXT4-fs: Ignoring removed i_version option [ 512.201249][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.232077][ T8873] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 512.376028][ T8873] EXT4-fs (loop3): 1 truncate cleaned up [ 512.384915][ T8873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.132202][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.820834][ T8901] netlink: 'syz.5.1267': attribute type 2 has an invalid length. [ 515.007450][ T8917] loop5: detected capacity change from 0 to 512 [ 515.073219][ T8917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 515.086676][ T8921] loop1: detected capacity change from 0 to 8 [ 515.178955][ T8917] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 515.187583][ T8917] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 515.253931][ T8917] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 515.264024][ T8917] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 515.275650][ T8917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 515.420906][ T8917] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1275: dx entry: limit 65535 != root limit 120 [ 515.433681][ T8917] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1275: Corrupt directory, running e2fsck is recommended [ 515.724585][ T8928] loop2: detected capacity change from 0 to 512 [ 515.787977][ T7484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.947548][ T8928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.964556][ T8928] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 516.140431][ T30] audit: type=1326 audit(1751997521.683:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7fc00000 [ 516.432562][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 516.539069][ T8938] loop5: detected capacity change from 0 to 1024 [ 516.650543][ T8941] usb usb1: check_ctrlrecip: process 8941 (syz.1.1285) requesting ep 01 but needs 81 [ 517.641103][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 517.718150][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 517.791137][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 518.356210][ T8956] loop1: detected capacity change from 0 to 1024 [ 518.400959][ T8956] EXT4-fs: Ignoring removed nobh option [ 518.407160][ T8956] EXT4-fs: Ignoring removed bh option [ 518.592457][ T8956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.647757][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 518.744734][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 518.802948][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 518.877269][ T8956] EXT4-fs: old and new quota format mixing [ 519.215162][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.516826][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 519.597005][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 519.611707][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 519.793572][ T8974] sd 0:0:1:0: device reset [ 520.029975][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1301'. [ 520.039416][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1301'. [ 520.048690][ T8978] netlink: 'syz.5.1301': attribute type 13 has an invalid length. [ 520.547609][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 520.627142][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 520.688361][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 520.715825][ T8986] loop4: detected capacity change from 0 to 16 [ 520.797815][ T8988] sp0: Synchronizing with TNC [ 521.675937][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 521.725053][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 521.738931][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 522.645612][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 522.730069][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 522.765648][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 522.769456][ T9007] loop4: detected capacity change from 0 to 512 [ 522.855073][ T9007] EXT4-fs: Ignoring removed i_version option [ 522.887033][ T9007] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 523.015159][ T9007] EXT4-fs (loop4): 1 truncate cleaned up [ 523.025010][ T9007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.060164][ T5874] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 523.134150][ T9004] loop1: detected capacity change from 0 to 4096 [ 523.272089][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 523.307410][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 523.317185][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.330097][ T5874] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 523.345661][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.355954][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 523.411873][ T5874] usb 6-1: config 0 descriptor?? [ 523.506318][ T9004] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 523.752247][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.011637][ T5874] dragonrise 0003:0079:0006.000F: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.5-1/input0 [ 524.025141][ T5874] dragonrise 0003:0079:0006.000F: no inputs found [ 524.033114][ T5874] dragonrise 0003:0079:0006.000F: force feedback init failed [ 524.188437][ T5897] usb 6-1: USB disconnect, device number 6 [ 524.249048][ T9018] cifs: Bad value for 'port' [ 524.450571][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 524.495845][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 524.515670][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 524.905882][ T9024] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 525.080501][ T9026] loop1: detected capacity change from 0 to 128 [ 525.284211][ T9028] loop5: detected capacity change from 0 to 64 [ 525.284467][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 525.323288][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 525.342127][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 525.428614][ T9029] Trying to free block not in datazone [ 525.717481][ T9032] loop4: detected capacity change from 0 to 736 [ 526.428029][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 526.634389][ T9041] loop1: detected capacity change from 0 to 512 [ 526.682427][ T9041] EXT4-fs: Ignoring removed i_version option [ 526.770310][ T9041] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 526.903339][ T9045] loop4: detected capacity change from 0 to 1024 [ 526.910517][ T9041] EXT4-fs (loop1): 1 truncate cleaned up [ 526.923146][ T9041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.040107][ T9047] sg_write: data in/out 2008/14 bytes for SCSI command 0x0-- guessing data in; [ 527.040107][ T9047] program syz.5.1333 not setting count and/or reply_len properly [ 527.415387][ T3730] hfsplus: b-tree write err: -5, ino 4 [ 527.470012][ T5816] EXT4-fs error: 2 callbacks suppressed [ 527.470089][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 527.557361][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.578284][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 527.611885][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 527.800843][ T9051] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1335'. [ 527.810507][ T9051] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1335'. [ 527.819187][ T9049] loop3: detected capacity change from 0 to 4096 [ 527.832392][ T9049] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 527.889192][ T9053] pim6reg: entered allmulticast mode [ 527.954320][ T9053] pim6reg: left allmulticast mode [ 528.642084][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 528.740222][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 528.780893][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 529.472852][ T9069] loop1: detected capacity change from 0 to 16 [ 529.565139][ T9069] erofs (device loop1): mounted with root inode @ nid 36. [ 529.754591][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 529.795401][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 529.821076][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 529.900060][ T9073] loop5: detected capacity change from 0 to 1024 [ 530.189131][ T5897] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 530.326337][ T1311] hfsplus: b-tree write err: -5, ino 4 [ 530.382199][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 530.393920][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.406862][ T5897] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 530.417802][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.524110][ T5897] usb 5-1: config 0 descriptor?? [ 530.641378][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 530.729988][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 530.784196][ T5816] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /256/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 531.044507][ T5897] elo 0003:04E7:0030.0010: unknown main item tag 0x0 [ 531.051876][ T5897] elo 0003:04E7:0030.0010: item fetching failed at offset 1/3 [ 531.104327][ T5897] elo 0003:04E7:0030.0010: parse failed [ 531.110867][ T5897] elo 0003:04E7:0030.0010: probe with driver elo failed with error -22 [ 531.286376][ T5897] usb 5-1: USB disconnect, device number 10 [ 531.622515][ T5816] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 531.710270][ T5816] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 532.336853][ T9095] loop1: detected capacity change from 0 to 64 [ 532.460939][ T5874] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 532.475916][ T6282] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.518453][ T9095] syz.1.1357: attempt to access beyond end of device [ 532.518453][ T9095] loop1: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 532.532447][ T9095] Buffer I/O error on dev loop1, logical block 1295, async page read [ 532.584199][ T9095] syz.1.1357: attempt to access beyond end of device [ 532.584199][ T9095] loop1: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 532.598023][ T9095] Buffer I/O error on dev loop1, logical block 1295, async page read [ 532.631167][ T30] audit: type=1800 audit(1751997538.143:30): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1357" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 532.666547][ T5874] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 532.677479][ T9095] Trying to free block not in datazone [ 532.678286][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 532.683664][ T9095] minix_free_block (loop1:21): bit already cleared [ 532.694977][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.695132][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 532.695367][ T5874] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 532.737530][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.787770][ T5874] usb 4-1: config 0 descriptor?? [ 532.808875][ T7203] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 532.832790][ T7203] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 532.848033][ T7203] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 532.876455][ T7203] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 532.891920][ T7203] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 533.158708][ T9098] ip6_vti0 speed is unknown, defaulting to 1000 [ 533.763299][ T5874] usb 4-1: USB disconnect, device number 9 [ 533.998301][ T9107] pimreg3: entered allmulticast mode [ 534.931853][ T7203] Bluetooth: hci5: command tx timeout [ 534.966867][ T9098] chnl_net:caif_netlink_parms(): no params data found [ 535.256257][ T9122] loop5: detected capacity change from 0 to 512 [ 535.316177][ T9122] EXT4-fs: Ignoring removed i_version option [ 535.385122][ T9122] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 535.571625][ T9122] EXT4-fs (loop5): 1 truncate cleaned up [ 535.580414][ T9122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.940731][ T9133] loop4: detected capacity change from 0 to 64 [ 535.965940][ T9130] loop3: detected capacity change from 0 to 1024 [ 536.365857][ T7484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.489447][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.497198][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.511356][ T9098] bridge_slave_0: entered allmulticast mode [ 536.521454][ T9098] bridge_slave_0: entered promiscuous mode [ 536.639529][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.651533][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.660346][ T9098] bridge_slave_1: entered allmulticast mode [ 536.670414][ T9098] bridge_slave_1: entered promiscuous mode [ 536.917595][ T9136] loop1: detected capacity change from 0 to 1024 [ 536.983762][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.990772][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.013370][ T7203] Bluetooth: hci5: command tx timeout [ 537.029011][ T9136] EXT4-fs: Ignoring removed orlov option [ 537.084179][ T9136] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 537.181424][ T9136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.183975][ T9138] loop5: detected capacity change from 0 to 512 [ 537.231005][ T9138] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 537.273102][ T9098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.350591][ T4392] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.355355][ T9138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.385391][ T9138] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.439047][ T9098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.546086][ T4392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.575326][ T5874] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 537.651032][ T9098] team0: Port device team_slave_0 added [ 537.692377][ T9143] loop4: detected capacity change from 0 to 4096 [ 537.742894][ T4392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.759927][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 537.826927][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.838525][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.848802][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 537.862532][ T5874] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 537.878541][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.900670][ T9098] team0: Port device team_slave_1 added [ 537.905401][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.966090][ T7484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.045175][ T9143] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 538.051039][ T5874] usb 4-1: config 0 descriptor?? [ 538.126097][ T4392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.246596][ T30] audit: type=1800 audit(1751997543.773:31): pid=9143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1373" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 538.265651][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.274897][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.309906][ T9098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.563580][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.571045][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.607013][ T9098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.654746][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1375'. [ 538.663480][ T5874] hid-multitouch 0003:0457:07DA.0012: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 538.683795][ T4392] bridge_slave_1: left allmulticast mode [ 538.703881][ T4392] bridge_slave_1: left promiscuous mode [ 538.711182][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.741488][ T4392] bridge_slave_0: left allmulticast mode [ 538.750067][ T4392] bridge_slave_0: left promiscuous mode [ 538.756839][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.776563][ T5897] usb 4-1: USB disconnect, device number 10 [ 539.092118][ T7203] Bluetooth: hci5: command tx timeout [ 539.484380][ T4392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.565274][ T4392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.665334][ T4392] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 539.741047][ T4392] bond0 (unregistering): Released all slaves [ 540.214458][ T9098] hsr_slave_0: entered promiscuous mode [ 540.225351][ T9098] hsr_slave_1: entered promiscuous mode [ 540.245359][ T9098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.253441][ T9098] Cannot create hsr debugfs directory [ 540.267569][ T4392] IPVS: stopping master sync thread 8682 ... [ 540.538675][ T9165] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 541.190080][ T7203] Bluetooth: hci5: command tx timeout [ 541.402808][ T4392] hsr_slave_0: left promiscuous mode [ 541.491067][ T4392] hsr_slave_1: left promiscuous mode [ 541.499823][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.507738][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.621746][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.629759][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.754797][ T4392] veth1_macvtap: left promiscuous mode [ 541.767633][ T4392] veth0_macvtap: left promiscuous mode [ 541.774017][ T4392] veth1_vlan: left promiscuous mode [ 541.779876][ T4392] veth0_vlan: left promiscuous mode [ 542.678619][ T4392] team0 (unregistering): Port device team_slave_1 removed [ 542.783836][ T4392] team0 (unregistering): Port device team_slave_0 removed [ 542.862157][ T9191] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1391'. [ 543.186342][ T9188] sp0: Synchronizing with TNC [ 543.672226][ T4392] IPVS: stop unused estimator thread 0... [ 543.942790][ T9098] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 544.044690][ T9098] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 544.103932][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'. [ 544.130946][ T9098] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 544.191370][ T9098] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 544.238387][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1396'. [ 544.786606][ T9209] loop1: detected capacity change from 0 to 64 [ 544.981736][ T9212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1401'. [ 545.057246][ T9210] loop4: detected capacity change from 0 to 2048 [ 545.121824][ T9210] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 545.189935][ T9210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.253523][ T9098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.376663][ T9098] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.421071][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.428768][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.515555][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.523336][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.512905][ T9224] nbd: must specify at least one socket [ 547.591127][ T9098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.227328][ T9253] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1417'. [ 549.668990][ T9257] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1416'. [ 552.351330][ T30] audit: type=1400 audit(1751997557.873:32): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A646D615F636D pid=9274 comm="syz.3.1424" [ 552.382737][ T9098] veth0_vlan: entered promiscuous mode [ 552.512570][ T9098] veth1_vlan: entered promiscuous mode [ 552.512679][ T9277] loop5: detected capacity change from 0 to 256 [ 552.857247][ T9098] veth0_macvtap: entered promiscuous mode [ 552.947888][ T9098] veth1_macvtap: entered promiscuous mode [ 553.056049][ T9281] loop4: detected capacity change from 0 to 64 [ 553.125285][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.248129][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.280040][ T9285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1429'. [ 553.357692][ T9098] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.367039][ T9098] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.376652][ T9098] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.385904][ T9098] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.716960][ T5897] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 554.924403][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 554.941106][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.951514][ T5897] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 554.962051][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.041881][ T5897] usb 6-1: config 0 descriptor?? [ 555.458770][ T9309] sctp: [Deprecated]: syz.1.1437 (pid 9309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 555.458770][ T9309] Use struct sctp_sack_info instead [ 555.545269][ T5897] hid-multitouch 0003:0EEF:72C4.0013: unknown main item tag 0x0 [ 555.583581][ T5897] hid-multitouch 0003:0EEF:72C4.0013: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 555.810590][ T5822] Bluetooth: hci5: command 0x0405 tx timeout [ 555.818288][ T5897] usb 6-1: USB disconnect, device number 7 [ 557.052846][ T9332] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 557.085299][ T9327] loop4: detected capacity change from 0 to 2048 [ 557.190321][ T9327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 557.754325][ T9338] IPVS: dh: FWM 3 0x00000003 - no destination available [ 557.957269][ T9344] loop3: detected capacity change from 0 to 256 [ 558.533244][ T9350] loop5: detected capacity change from 0 to 256 [ 558.544240][ T9351] loop1: detected capacity change from 0 to 512 [ 558.655768][ T9351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.675258][ T9351] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.213072][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.053112][ T9374] tipc: Enabled bearer , priority 10 [ 560.073082][ T3891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.082630][ T3891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.318910][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.328461][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.745603][ T9381] loop1: detected capacity change from 0 to 256 [ 560.861198][ T9381] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 560.998816][ T9384] trusted_key: encrypted_key: key user:syz not found [ 561.217124][ T9389] block nbd6: NBD_DISCONNECT [ 561.712633][ T9392] loop4: detected capacity change from 0 to 1024 [ 561.794208][ T9392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.914684][ T30] audit: type=1800 audit(1751997567.453:33): pid=9392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1467" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 562.233368][ T9406] overlayfs: failed to resolve '/b [ 562.233368][ T9406] tbF?! 4eUzS0voI/@B@_b./file0': -2 [ 562.350012][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.984473][ T9417] loop3: detected capacity change from 0 to 24 [ 563.121219][ T5869] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 563.258309][ T9420] loop6: detected capacity change from 0 to 8 [ 563.316433][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 563.328241][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.339141][ T5869] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 563.353224][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.415134][ T9420] SQUASHFS error: zstd decompression error: 10 [ 563.422133][ T9420] SQUASHFS error: zstd decompression failed, data probably corrupt [ 563.430664][ T9420] SQUASHFS error: Failed to read block 0x4ec: -5 [ 563.437268][ T9420] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 563.445097][ T9420] SQUASHFS error: Unable to read inode 0x2011f [ 563.502346][ T5869] usb 5-1: config 0 descriptor?? [ 564.038116][ T5869] kye 0003:0458:5005.0014: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 564.134615][ T5869] kye 0003:0458:5005.0014: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.4-1/input0 [ 564.148195][ T5869] kye 0003:0458:5005.0014: tablet-enabling feature report not found [ 564.159525][ T5869] kye 0003:0458:5005.0014: tablet enabling failed [ 564.310741][ T5897] usb 5-1: USB disconnect, device number 11 [ 565.002853][ T9442] loop6: detected capacity change from 0 to 512 [ 565.069775][ T9442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 565.201315][ T9442] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1491: invalid block [ 565.293445][ T9442] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1491: invalid indirect mapped block 4294967295 (level 1) [ 565.330619][ T9442] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1491: invalid indirect mapped block 4294967295 (level 1) [ 565.347743][ T9442] EXT4-fs (loop6): 2 truncates cleaned up [ 565.356577][ T9442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.473862][ T9446] loop3: detected capacity change from 0 to 1024 [ 565.711704][ T9098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.379729][ T9458] loop6: detected capacity change from 0 to 1024 [ 566.482105][ T9458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.688567][ T9458] EXT4-fs: Ignoring sb option on remount [ 566.694977][ T9458] EXT4-fs: Ignoring removed orlov option [ 566.701716][ T9458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 566.708749][ T9458] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 566.718651][ T9458] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 566.726848][ T9458] EXT4-fs: can't change dax mount option while remounting [ 567.123680][ T9098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.510321][ T5897] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 569.709901][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 569.730584][ T5822] Bluetooth: hci0: command 0x0401 tx timeout [ 569.759745][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.771242][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.781660][ T5897] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 569.791685][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.865466][ T5897] usb 6-1: config 0 descriptor?? [ 569.982236][ T9513] loop4: detected capacity change from 0 to 256 [ 570.376784][ T5897] hid-picolcd 0003:04D8:F002.0015: unknown main item tag 0x0 [ 570.416497][ T9520] loop1: detected capacity change from 0 to 512 [ 570.510417][ T5897] hid-picolcd 0003:04D8:F002.0015: No report with id 0xf3 found [ 570.518459][ T5897] hid-picolcd 0003:04D8:F002.0015: No report with id 0xf4 found [ 570.562372][ T9520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.575858][ T9520] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 570.679797][ T5869] usb 6-1: USB disconnect, device number 8 [ 570.801629][ T9520] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1524: corrupted inode contents [ 570.849743][ T9520] EXT4-fs (loop1): Remounting filesystem read-only [ 571.126605][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.148163][ T3590] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 571.775113][ T9539] loop1: detected capacity change from 0 to 128 [ 571.941820][ T9538] loop5: detected capacity change from 0 to 2048 [ 572.010267][ T9541] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 572.122524][ T9541] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 572.134913][ T9541] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 572.168728][ T9541] Remounting filesystem read-only [ 572.918722][ T9551] loop3: detected capacity change from 0 to 1024 [ 572.985324][ T9556] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1537'. [ 573.471791][ T754] hfsplus: b-tree write err: -5, ino 4 [ 574.913846][ T9583] team_slave_0: entered promiscuous mode [ 574.920144][ T9583] team_slave_1: entered promiscuous mode [ 574.931990][ T9583] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 574.950502][ T9583] team0: Device macvtap1 is already an upper device of the team interface [ 575.011612][ T9583] team_slave_0: left promiscuous mode [ 575.017367][ T9583] team_slave_1: left promiscuous mode [ 575.390362][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1556'. [ 575.443655][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1556'. [ 575.526143][ T9590] loop6: detected capacity change from 0 to 1024 [ 575.566793][ T9590] EXT4-fs: Ignoring removed nobh option [ 575.577932][ T9590] EXT4-fs: Ignoring removed bh option [ 575.682257][ T9590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.784631][ T9590] EXT4-fs warning (device loop6): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 575.800404][ T9596] netlink: 'syz.1.1557': attribute type 4 has an invalid length. [ 575.808481][ T9596] netlink: 'syz.1.1557': attribute type 2 has an invalid length. [ 576.208486][ T9098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.691406][ T9608] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 577.370093][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1567'. [ 577.424179][ T9621] loop4: detected capacity change from 0 to 64 [ 577.488502][ T9624] loop1: detected capacity change from 0 to 256 [ 578.192356][ T9629] loop6: detected capacity change from 0 to 2048 [ 578.214312][ T9629] ext2: Unknown parameter 'smackfsroot' [ 578.260168][ T9631] loop1: detected capacity change from 0 to 128 [ 578.433732][ T9635] loop5: detected capacity change from 0 to 64 [ 578.973345][ T9641] loop1: detected capacity change from 0 to 256 [ 579.069950][ T5897] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 579.258010][ T5897] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.269720][ T5897] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.272373][ T9641] FAT-fs (loop1): Directory bread(block 64) failed [ 579.279939][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 579.280132][ T5897] usb 5-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 579.286636][ T9641] FAT-fs (loop1): Directory bread(block 65) failed [ 579.293574][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.303224][ T9641] FAT-fs (loop1): Directory bread(block 66) failed [ 579.327762][ T9641] FAT-fs (loop1): Directory bread(block 67) failed [ 579.336311][ T9641] FAT-fs (loop1): Directory bread(block 68) failed [ 579.349099][ T9641] FAT-fs (loop1): Directory bread(block 69) failed [ 579.357713][ T9641] FAT-fs (loop1): Directory bread(block 70) failed [ 579.364755][ T9641] FAT-fs (loop1): Directory bread(block 71) failed [ 579.372061][ T9641] FAT-fs (loop1): Directory bread(block 72) failed [ 579.378899][ T9641] FAT-fs (loop1): Directory bread(block 73) failed [ 579.390696][ T5897] usb 5-1: config 0 descriptor?? [ 579.490266][ T11] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 579.692107][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.704090][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.714715][ T11] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 579.724286][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.813947][ T11] usb 6-1: config 0 descriptor?? [ 579.939029][ T5897] a4tech 0003:09DA:001A.0016: hidraw0: USB HID v0.00 Device [HID 09da:001a] on usb-dummy_hcd.4-1/input0 [ 580.167544][ T5897] usb 5-1: USB disconnect, device number 12 [ 580.467415][ T11] razer 0003:1532:010E.0017: failed to enable macro keys: -71 [ 580.502015][ T11] razer 0003:1532:010E.0017: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 580.559471][ T11] usb 6-1: USB disconnect, device number 9 [ 581.138655][ T9663] loop6: detected capacity change from 0 to 64 [ 581.633034][ T9669] xt_socket: unknown flags 0xd0 [ 582.069556][ T9674] loop6: detected capacity change from 0 to 1024 [ 582.079844][ T9674] EXT4-fs: Ignoring removed nobh option [ 582.085741][ T9674] EXT4-fs: Ignoring removed mblk_io_submit option [ 582.094882][ T9677] loop1: detected capacity change from 0 to 256 [ 582.175053][ T9677] exfat: Deprecated parameter 'namecase' [ 582.261220][ T9674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.388697][ T9677] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf764d861, utbl_chksum : 0xe619d30d) [ 582.697094][ T9098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.037452][ T9685] loop4: detected capacity change from 0 to 4096 [ 583.071827][ T9685] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 583.087541][ T9687] loop3: detected capacity change from 0 to 4096 [ 583.167538][ T9691] loop1: detected capacity change from 0 to 64 [ 583.241699][ T9694] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 583.381055][ T9685] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 583.797277][ T9693] loop6: detected capacity change from 0 to 4096 [ 583.840621][ T9693] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 585.781298][ T9725] sch_fq: defrate 4294967295 ignored. [ 587.604439][ T9749] loop5: detected capacity change from 0 to 512 [ 587.654209][ T9750] loop1: detected capacity change from 0 to 256 [ 587.667841][ T9752] loop3: detected capacity change from 0 to 16 [ 587.710637][ T9749] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 587.751948][ T9752] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 587.764643][ T9752] erofs (device loop3): mounted with root inode @ nid 36. [ 587.847358][ T9750] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 587.862298][ T9749] EXT4-fs (loop5): 1 truncate cleaned up [ 587.870659][ T9749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.032865][ T9749] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.1628: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 588.115212][ T9749] EXT4-fs (loop5): Remounting filesystem read-only [ 588.122247][ T9749] EXT4-fs warning (device loop5): ext4_rename_delete:3726: inode #2: comm syz.5.1628: Deleting old file: nlink 5, error=-117 [ 588.522087][ T7484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.233609][ T9774] loop6: detected capacity change from 0 to 256 [ 589.389718][ T9774] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 589.475779][ T9777] loop4: detected capacity change from 0 to 512 [ 589.631163][ T9777] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1641: bg 0: block 5: invalid block bitmap [ 589.721505][ T9777] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 589.760399][ T9777] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1641: invalid indirect mapped block 3 (level 2) [ 589.786197][ T9777] EXT4-fs (loop4): 2 truncates cleaned up [ 589.802163][ T9777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.843597][ T9778] loop1: detected capacity change from 0 to 4096 [ 589.945812][ T9785] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 590.272205][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.398822][ T9805] loop4: detected capacity change from 0 to 256 [ 591.743229][ T9805] FAT-fs (loop4): Directory bread(block 64) failed [ 591.750457][ T9805] FAT-fs (loop4): Directory bread(block 65) failed [ 591.757649][ T9805] FAT-fs (loop4): Directory bread(block 66) failed [ 591.764947][ T9805] FAT-fs (loop4): Directory bread(block 67) failed [ 591.772095][ T9805] FAT-fs (loop4): Directory bread(block 68) failed [ 591.778966][ T9805] FAT-fs (loop4): Directory bread(block 69) failed [ 591.786298][ T9805] FAT-fs (loop4): Directory bread(block 70) failed [ 591.793305][ T9805] FAT-fs (loop4): Directory bread(block 71) failed [ 591.800516][ T9805] FAT-fs (loop4): Directory bread(block 72) failed [ 591.807334][ T9805] FAT-fs (loop4): Directory bread(block 73) failed [ 592.824621][ T9823] loop1: detected capacity change from 0 to 256 [ 593.355826][ T9831] loop4: detected capacity change from 0 to 1024 [ 593.460801][ T9831] hfsplus: bad catalog entry type [ 593.733643][ T3590] hfsplus: b-tree write err: -5, ino 4 [ 593.982870][ T9840] loop3: detected capacity change from 0 to 1024 [ 594.266384][ T5869] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 594.309573][ T5869] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 594.853404][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1674'. [ 594.938437][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 594.948054][ T9856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1676'. [ 595.330512][ T9862] loop4: detected capacity change from 0 to 128 [ 595.448108][ T9862] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 595.516003][ T9862] ext4 filesystem being mounted at /339/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 595.905832][ T5824] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 595.911980][ T9871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1681'. [ 595.926106][ T9871] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1681'. [ 595.993498][ T9872] loop5: detected capacity change from 0 to 1024 [ 596.455573][ T3590] hfsplus: b-tree write err: -5, ino 4 [ 598.134199][ T9899] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1697'. [ 598.403117][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.410150][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 599.080165][ T9910] loop4: detected capacity change from 0 to 1024 [ 600.510030][ T9921] loop4: detected capacity change from 0 to 512 [ 600.589085][ T9921] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 600.719797][ T5869] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 600.733189][ T9921] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.1707: bad orphan inode 16 [ 600.762478][ T9921] ext4_test_bit(bit=15, block=4) = 0 [ 600.768093][ T9921] EXT4-fs (loop4): 1 orphan inode deleted [ 600.776540][ T9921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.890733][ T9921] EXT4-fs error (device loop4): __ext4_new_inode:1073: comm syz.4.1707: reserved inode found cleared - inode=9 [ 600.920180][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 600.961846][ T5869] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.974010][ T5869] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 33252, setting to 1024 [ 600.985822][ T5869] usb 6-1: config 0 interface 0 has no altsetting 0 [ 600.992906][ T5869] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 601.002589][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.129626][ T5869] usb 6-1: config 0 descriptor?? [ 601.317060][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.638444][ T5869] lenovo 0003:17EF:60EE.0019: unknown main item tag 0x0 [ 601.646139][ T5869] lenovo 0003:17EF:60EE.0019: unknown main item tag 0x0 [ 601.654641][ T5869] lenovo 0003:17EF:60EE.0019: unknown main item tag 0x0 [ 601.662354][ T5869] lenovo 0003:17EF:60EE.0019: unknown main item tag 0x0 [ 601.676487][ T5869] lenovo 0003:17EF:60EE.0019: unknown main item tag 0x0 [ 601.685877][ T5869] lenovo 0003:17EF:60EE.0019: unknown main item tag 0x0 [ 601.693498][ T5869] lenovo 0003:17EF:60EE.0019: unknown main item tag 0x0 [ 601.700902][ T5869] lenovo 0003:17EF:60EE.0019: unknown main item tag 0x0 [ 601.805805][ T5869] lenovo 0003:17EF:60EE.0019: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.5-1/input0 [ 601.917438][ T5869] usb 6-1: USB disconnect, device number 10 [ 603.248226][ T9945] loop3: detected capacity change from 0 to 1764 [ 603.728455][ T9951] loop5: detected capacity change from 0 to 2048 [ 603.784571][ T9951] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 604.190245][ T9957] loop3: detected capacity change from 0 to 64 [ 604.442460][ T9959] loop4: detected capacity change from 0 to 512 [ 604.559884][ T9961] bridge1: entered promiscuous mode [ 604.565418][ T9961] bridge1: entered allmulticast mode [ 604.586063][ T9961] team0: Port device bridge1 added [ 604.712802][ T9959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.727376][ T9959] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.873450][ T9959] EXT4-fs (loop4): resizing filesystem from 128 to 1 blocks [ 604.881566][ T9959] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 605.381375][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.737338][ T9984] syz.6.1734 (9984): drop_caches: 2 [ 607.978154][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1740'. [ 608.113381][T10001] loop4: detected capacity change from 0 to 512 [ 608.311427][T10001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.330273][T10001] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 608.790303][ T30] audit: type=1326 audit(1751997614.313:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 608.813454][ T30] audit: type=1326 audit(1751997614.313:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 608.868572][ T5824] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /355/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 608.990652][ T30] audit: type=1326 audit(1751997614.443:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 609.013439][ T30] audit: type=1326 audit(1751997614.443:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 609.036211][ T30] audit: type=1326 audit(1751997614.443:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 609.062886][ T30] audit: type=1326 audit(1751997614.453:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=157 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 609.086975][ T30] audit: type=1326 audit(1751997614.453:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 609.109832][ T30] audit: type=1326 audit(1751997614.453:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.5.1744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 609.898795][ T5824] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 610.017048][ T5824] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 610.049926][ T5824] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /355/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 610.257259][T10022] loop5: detected capacity change from 0 to 256 [ 610.410764][T10022] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 610.932542][ T5824] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 611.000913][ T5824] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 611.035502][ T5824] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /355/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 611.072313][T10028] loop6: detected capacity change from 0 to 512 [ 611.154842][T10028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 611.255958][T10028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.269982][T10028] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.339563][T10033] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 611.652323][ T9098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.025391][ T5824] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 612.127822][ T5824] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 612.176514][ T5824] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /355/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 613.083932][T10047] loop6: detected capacity change from 0 to 128 [ 613.188359][T10047] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 613.305742][T10047] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 613.411675][ T30] audit: type=1400 audit(1751997618.933:42): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26FEA175E41F pid=10045 comm="syz.6.1762" [ 613.413283][ T5824] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 613.510078][ T5824] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 613.571697][ T5824] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /355/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 613.670608][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 613.691884][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 613.703574][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 613.717717][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 613.740243][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 613.901924][ T9098] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 613.925041][T10052] ip6_vti0 speed is unknown, defaulting to 1000 [ 615.347787][ T5824] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 615.352715][T10052] chnl_net:caif_netlink_parms(): no params data found [ 615.424208][ T5824] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 615.475993][ T5824] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /355/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 615.546296][T10064] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 615.906833][ T5822] Bluetooth: hci1: command tx timeout [ 616.655655][ T5824] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 616.761582][ T5824] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 616.842203][ T5824] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /355/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 617.073661][T10077] team_slave_0: entered promiscuous mode [ 617.079892][T10077] team_slave_1: entered promiscuous mode [ 617.340317][T10052] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.347973][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.358485][T10052] bridge_slave_0: entered allmulticast mode [ 617.373831][T10052] bridge_slave_0: entered promiscuous mode [ 617.407631][T10080] sp0: Synchronizing with TNC [ 617.454737][T10079] [U] [ 617.535552][T10052] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.554463][T10052] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.567476][T10052] bridge_slave_1: entered allmulticast mode [ 617.582427][T10052] bridge_slave_1: entered promiscuous mode [ 617.652921][ T754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.769158][ T5824] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 617.868941][ T5824] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 617.897077][ T5824] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /355/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 617.969698][ T5822] Bluetooth: hci1: command tx timeout [ 617.977111][T10081] loop3: detected capacity change from 0 to 4096 [ 618.004076][T10084] netlink: 'syz.5.1775': attribute type 3 has an invalid length. [ 618.025675][ T754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.026932][T10081] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 618.279443][ T754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.337143][T10052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.473895][ T754] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.553707][T10052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.928030][ T5824] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 618.977584][T10052] team0: Port device team_slave_0 added [ 619.021000][T10052] team0: Port device team_slave_1 added [ 619.049755][ T5824] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 619.101084][ T5824] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /355/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 619.133029][ T754] bridge_slave_1: left allmulticast mode [ 619.138987][ T754] bridge_slave_1: left promiscuous mode [ 619.145976][ T754] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.163883][ T754] bridge_slave_0: left allmulticast mode [ 619.172016][ T754] bridge_slave_0: left promiscuous mode [ 619.186771][ T754] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.942529][ T754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.991488][ T754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.044383][ T754] bond0 (unregistering): Released all slaves [ 620.050051][ T5822] Bluetooth: hci1: command tx timeout [ 620.201056][T10097] loop6: detected capacity change from 0 to 2048 [ 620.353342][ T5824] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 620.415021][T10052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.422450][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.423576][T10097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 620.450098][T10052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.490280][ T754] tipc: Disabling bearer [ 620.496271][ T754] tipc: Left network mode [ 620.514591][ T5824] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 620.549074][ T5824] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /355/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 620.770855][T10052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.778196][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.804980][T10052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.723770][T10052] hsr_slave_0: entered promiscuous mode [ 621.734609][T10052] hsr_slave_1: entered promiscuous mode [ 621.873843][ T754] hsr_slave_0: left promiscuous mode [ 621.919691][ T754] hsr_slave_1: left promiscuous mode [ 621.927996][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.938090][ T754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.961574][ T5824] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 622.028444][ T5824] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 622.049913][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.057761][ T754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.090375][ T5824] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /355/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 622.130512][ T5822] Bluetooth: hci1: command tx timeout [ 622.154660][ T754] veth1_macvtap: left promiscuous mode [ 622.162408][ T754] veth0_macvtap: left promiscuous mode [ 622.168441][ T754] veth1_vlan: left promiscuous mode [ 622.174377][ T754] veth0_vlan: left promiscuous mode [ 622.182535][T10109] loop5: detected capacity change from 0 to 512 [ 622.503664][ T754] pimreg3 (unregistering): left allmulticast mode [ 622.530360][T10109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.544009][T10109] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.952650][ T754] team0 (unregistering): Port device team_slave_1 removed [ 623.058095][ T754] team0 (unregistering): Port device team_slave_0 removed [ 623.095253][ T7484] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.703326][ T5824] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 623.820083][ T5824] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 623.857553][ T5824] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /355/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 624.028986][ T754] IPVS: stop unused estimator thread 0... [ 624.834988][T10052] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 624.966595][T10052] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 625.101282][T10052] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 625.181438][T10052] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 625.331808][ T7203] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 625.361269][ T7203] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 625.374912][ T7203] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 625.395425][ T7203] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 625.409450][ T7203] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 625.552253][T10133] ip6_vti0 speed is unknown, defaulting to 1000 [ 625.672449][ T30] audit: type=1326 audit(1751997631.183:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10136 comm="syz.6.1798" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd3539 code=0x0 [ 626.826630][T10052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.088542][T10052] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.174820][ T30] audit: type=1326 audit(1751997632.713:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.5.1799" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7fc00000 [ 627.237479][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.245433][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.315798][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.323614][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.490413][ T7203] Bluetooth: hci3: command tx timeout [ 627.855923][T10133] chnl_net:caif_netlink_parms(): no params data found [ 628.230146][ T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.250455][T10156] loop5: detected capacity change from 0 to 1024 [ 628.282722][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.438450][ T30] audit: type=1800 audit(1751997633.973:45): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1803" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 628.471656][ T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.707826][ T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.842227][ T4392] hfsplus: b-tree write err: -5, ino 4 [ 628.955396][ T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.973420][T10165] ===================================================== [ 628.981460][T10165] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9ac/0xa30 [ 628.989489][T10165] ieee802154_hdr_push+0x9ac/0xa30 [ 628.994868][T10165] ieee802154_header_create+0x854/0xb90 [ 629.001078][T10165] dgram_sendmsg+0xb40/0x16d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 629.005986][T10165] ieee802154_sock_sendmsg+0x8f/0xd0 [ 629.015952][T10165] __sock_sendmsg+0x333/0x3d0 [ 629.022450][T10165] ____sys_sendmsg+0x7e0/0xd80 [ 629.027529][T10165] ___sys_sendmsg+0x271/0x3b0 [ 629.032759][T10165] __sys_sendmsg+0x1aa/0x300 [ 629.037627][T10165] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 629.043693][T10165] ia32_sys_call+0x3692/0x42c0 [ 629.048679][T10165] __do_fast_syscall_32+0xb0/0x150 [ 629.054295][T10165] do_fast_syscall_32+0x38/0x80 [ 629.059684][T10165] do_SYSENTER_32+0x1f/0x30 [ 629.064471][T10165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 629.071319][T10165] [ 629.073783][T10165] Uninit was stored to memory at: [ 629.079109][T10165] ieee802154_hdr_push+0x9a5/0xa30 [ 629.084708][T10165] ieee802154_header_create+0x854/0xb90 [ 629.091808][T10165] dgram_sendmsg+0xb40/0x16d0 [ 629.099648][T10165] ieee802154_sock_sendmsg+0x8f/0xd0 [ 629.105209][T10165] __sock_sendmsg+0x333/0x3d0 [ 629.114381][T10165] ____sys_sendmsg+0x7e0/0xd80 [ 629.121226][T10165] ___sys_sendmsg+0x271/0x3b0 [ 629.126211][T10165] __sys_sendmsg+0x1aa/0x300 [ 629.131398][T10165] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 629.137262][T10165] ia32_sys_call+0x3692/0x42c0 [ 629.142472][T10165] __do_fast_syscall_32+0xb0/0x150 [ 629.147879][T10165] do_fast_syscall_32+0x38/0x80 [ 629.153315][T10165] do_SYSENTER_32+0x1f/0x30 [ 629.158102][T10165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 629.164923][T10165] [ 629.167399][T10165] Local variable hdr created at: [ 629.172719][T10165] ieee802154_header_create+0x4e/0xb90 [ 629.178516][T10165] dgram_sendmsg+0xb40/0x16d0 [ 629.183619][T10165] [ 629.186131][T10165] CPU: 0 UID: 0 PID: 10165 Comm: syz.6.1805 Tainted: G W 6.16.0-rc5-syzkaller #0 PREEMPT(none) [ 629.198503][T10165] Tainted: [W]=WARN [ 629.202623][T10165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.217509][T10165] ===================================================== [ 629.226111][T10165] Disabling lock debugging due to kernel taint [ 629.232636][T10165] Kernel panic - not syncing: kmsan.panic set ... [ 629.239275][T10165] CPU: 0 UID: 0 PID: 10165 Comm: syz.6.1805 Tainted: G B W 6.16.0-rc5-syzkaller #0 PREEMPT(none) [ 629.251556][T10165] Tainted: [B]=BAD_PAGE, [W]=WARN [ 629.256760][T10165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.267005][T10165] Call Trace: [ 629.270429][T10165] [ 629.273495][T10165] __dump_stack+0x26/0x30 [ 629.278071][T10165] dump_stack_lvl+0x53/0x270 [ 629.282886][T10165] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 629.288965][T10165] dump_stack+0x1e/0x25 [ 629.293347][T10165] panic+0x4bd/0xd50 [ 629.297526][T10165] kmsan_report+0x31c/0x320 [ 629.302275][T10165] ? stack_depot_save+0x12/0x20 [ 629.307356][T10165] ? __msan_warning+0x1b/0x30 [ 629.312255][T10165] ? ieee802154_hdr_push+0x9ac/0xa30 [ 629.317782][T10165] ? ieee802154_header_create+0x854/0xb90 [ 629.323781][T10165] ? dgram_sendmsg+0xb40/0x16d0 [ 629.328841][T10165] ? ieee802154_sock_sendmsg+0x8f/0xd0 [ 629.334531][T10165] ? __sock_sendmsg+0x333/0x3d0 [ 629.339609][T10165] ? ____sys_sendmsg+0x7e0/0xd80 [ 629.344853][T10165] ? ___sys_sendmsg+0x271/0x3b0 [ 629.349944][T10165] ? __sys_sendmsg+0x1aa/0x300 [ 629.354941][T10165] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 629.360937][T10165] ? ia32_sys_call+0x3692/0x42c0 [ 629.366067][T10165] ? __do_fast_syscall_32+0xb0/0x150 [ 629.371599][T10165] ? do_fast_syscall_32+0x38/0x80 [ 629.376881][T10165] ? do_SYSENTER_32+0x1f/0x30 [ 629.381816][T10165] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 629.388579][T10165] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 629.395338][T10165] ? kmsan_get_metadata+0xfb/0x160 [ 629.400711][T10165] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 629.407293][T10165] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 629.413714][T10165] ? kmsan_get_metadata+0xfb/0x160 [ 629.419101][T10165] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 629.425605][T10165] ? kmsan_get_metadata+0xfb/0x160 [ 629.430973][T10165] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 629.437638][T10165] ? kmsan_get_metadata+0xfb/0x160 [ 629.443031][T10165] __msan_warning+0x1b/0x30 [ 629.447781][T10165] ieee802154_hdr_push+0x9ac/0xa30 [ 629.453167][T10165] ? __msan_memcpy+0x108/0x1c0 [ 629.458162][T10165] ieee802154_header_create+0x854/0xb90 [ 629.464004][T10165] ? kmsan_get_metadata+0xfb/0x160 [ 629.469380][T10165] ? __pfx_ieee802154_header_create+0x10/0x10 [ 629.475734][T10165] dgram_sendmsg+0xb40/0x16d0 [ 629.480668][T10165] ? __pfx_dgram_sendmsg+0x10/0x10 [ 629.485990][T10165] ieee802154_sock_sendmsg+0x8f/0xd0 [ 629.491504][T10165] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 629.497713][T10165] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 629.503925][T10165] __sock_sendmsg+0x333/0x3d0 [ 629.508818][T10165] ____sys_sendmsg+0x7e0/0xd80 [ 629.513865][T10165] ___sys_sendmsg+0x271/0x3b0 [ 629.518802][T10165] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 629.524896][T10165] ? __rcu_read_unlock+0x6d/0xd0 [ 629.530084][T10165] ? __fget_files+0x3b4/0x4a0 [ 629.535058][T10165] ? __fget_files+0x3b9/0x4a0 [ 629.539996][T10165] ? kmsan_get_metadata+0xfb/0x160 [ 629.545376][T10165] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 629.551459][T10165] __sys_sendmsg+0x1aa/0x300 [ 629.556339][T10165] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 629.562180][T10165] ia32_sys_call+0x3692/0x42c0 [ 629.567158][T10165] __do_fast_syscall_32+0xb0/0x150 [ 629.572531][T10165] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 629.578507][T10165] do_fast_syscall_32+0x38/0x80 [ 629.583607][T10165] do_SYSENTER_32+0x1f/0x30 [ 629.588358][T10165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 629.594939][T10165] RIP: 0023:0xf7fd3539 [ 629.599199][T10165] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 629.619062][T10165] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 629.627712][T10165] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 629.635870][T10165] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 629.644023][T10165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 629.652332][T10165] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 629.660485][T10165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.668662][T10165] [ 629.672222][T10165] Kernel Offset: disabled [ 629.676655][T10165] Rebooting in 86400 seconds..