last executing test programs: 5m51.959510066s ago: executing program 32 (id=1726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f27000000b7daaa51c50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='netlink_extack\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) 5m43.690915991s ago: executing program 1 (id=1761): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) truncate(&(0x7f0000000040)='./file2\x00', 0xfff) 5m42.746009707s ago: executing program 1 (id=1764): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x2, 0x0, 0xb, 0x96}, 0x20) 5m42.116097736s ago: executing program 1 (id=1768): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 5m41.216234338s ago: executing program 1 (id=1770): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xfe, 0x46c, &(0x7f0000001380)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0/../file0/file0\x00') lstat(&(0x7f0000000540)='./file0/../file0/../file0\x00', &(0x7f0000000580)) 5m40.113893574s ago: executing program 1 (id=1773): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r0, &(0x7f0000000040), 0x4000000000002ac, 0x0, 0x0) 5m36.096217271s ago: executing program 1 (id=1792): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) 5m34.288221925s ago: executing program 33 (id=1792): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) 5m22.428871057s ago: executing program 4 (id=1840): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x30, &(0x7f0000000500)={&(0x7f0000000cc0)={0x2c, r0, 0x1, 0x0, 0x2, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}}, 0x0) 5m21.588936977s ago: executing program 4 (id=1844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 5m20.630119138s ago: executing program 4 (id=1849): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000001380)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{}, @any, 0x0, 0x0, 0x2}) 5m19.96556661s ago: executing program 4 (id=1854): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x400}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x20) 5m19.084757521s ago: executing program 4 (id=1858): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x10) r1 = socket(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 5m18.594343616s ago: executing program 4 (id=1861): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 5m3.376355568s ago: executing program 34 (id=1861): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 2m2.154231977s ago: executing program 5 (id=2890): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000008, &(0x7f0000000000)={[{@errors_remount}, {@bsdgroups}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000500)='./bus\x00', 0x4, 0x0, 0x42, 0x0, &(0x7f0000000500)) renameat2(r0, &(0x7f0000000300)='./bus\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x4) 2m1.129916402s ago: executing program 5 (id=2896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) getrusage(0x0, &(0x7f0000000680)) 2m0.43406692s ago: executing program 5 (id=2901): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x54b9}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}}, 0x0) 1m59.73910147s ago: executing program 5 (id=2905): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000c00)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x2109491, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 1m58.380495172s ago: executing program 5 (id=2910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 1m57.673773071s ago: executing program 5 (id=2913): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="b8d3", 0x2}], 0x1, 0x0, 0x0, 0x40805}, 0x20004004) close(r1) 1m55.791507655s ago: executing program 35 (id=2913): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="b8d3", 0x2}], 0x1, 0x0, 0x0, 0x40805}, 0x20004004) close(r1) 1m39.532784534s ago: executing program 7 (id=2984): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 1m38.6525721s ago: executing program 7 (id=2987): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0xb}}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={0x2, 0xc, 0x0, 0x2, 0x2}, 0x10}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080), 0x81, 0x625, &(0x7f00000011c0)="$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") 1m36.980194813s ago: executing program 7 (id=2993): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0xba01, 0x0, 0x800}, 0x810) 1m35.837940111s ago: executing program 7 (id=2998): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x3, 0x18a, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 1m35.097484876s ago: executing program 7 (id=3001): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2840010300000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m34.27414007s ago: executing program 7 (id=3007): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 1m32.318800468s ago: executing program 36 (id=3007): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 59.462377926s ago: executing program 9 (id=3165): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 57.144734025s ago: executing program 9 (id=3180): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 56.395055579s ago: executing program 9 (id=3184): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}}, 0x0) 55.427618766s ago: executing program 9 (id=3189): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={[{@huge_within_size}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006e00)={0x2020}, 0x2020) 54.293955949s ago: executing program 9 (id=3196): r0 = io_uring_setup(0xc90, &(0x7f0000000080)) r1 = io_uring_setup(0x3d68, &(0x7f0000000000)={0x0, 0xef52, 0x40, 0x1, 0x2ae, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r1, 0x18, 0x0, 0x1f, 0x0, 0x0) 53.283036226s ago: executing program 9 (id=3202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000008d04"]) 51.293677588s ago: executing program 37 (id=3202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000008d04"]) 6.974043587s ago: executing program 8 (id=3450): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14010000", @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf251800000008000300", @ANYRES32=r2, @ANYBLOB="180030801400018005000200010000000800010001000000e0003080050002000000000030000180200003800c0004000202aaaaaaaaaaaa06000100ffff000006000300ffff00000c00050400000000e307000005000200010000001400040056aaa099372ee60ebc78e4ee701992490c000180080004006d000000140004004336b89775f5f975e6059892dc2aa09d050002000b000000240003004d052d4408ee07f832449647f11bbeae023431bf47edbecbca57dce3e36c63c43c0001800c000500000000550c00000008000100030000001400038006000300a0aa000006000300ffff0000050002"], 0x114}}, 0x404a894) 6.381608936s ago: executing program 8 (id=3455): mkdir(&(0x7f0000000000)='./file0\x00', 0x4f) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x4014, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 5.900099616s ago: executing program 8 (id=3458): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000080)="ab", 0x1, 0x4000815, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 5.605362621s ago: executing program 6 (id=3461): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000100), 0x2, 0x246, &(0x7f0000000ac0)="$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") close_range(r0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 4.791585812s ago: executing program 8 (id=3467): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000005c0)={0x0, 0x7ff, 0x0, 0x595f314d, 0x19, "00e40000ded0fffdab7923e56de8bd024af900"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 4.690923572s ago: executing program 6 (id=3468): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r1, @ANYRES8], 0x4c}}, 0x0) 4.55361543s ago: executing program 0 (id=3469): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 4.383306954s ago: executing program 3 (id=3470): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f000006b000)={{r1, r2+10000000}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f0000000040)) 4.104178288s ago: executing program 8 (id=3471): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, &(0x7f0000000180)=""/153, 0x99) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 4.059556171s ago: executing program 2 (id=3472): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=0000000000000000000\x00\x00\x00\x00,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") truncate(&(0x7f0000000200)='./file2\x00', 0x7) 3.783366342s ago: executing program 3 (id=3473): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 3.705127405s ago: executing program 6 (id=3474): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) 3.658088595s ago: executing program 0 (id=3475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltaction={0x24, 0x32, 0x9, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}]}]}, 0x24}}, 0x0) 3.407577938s ago: executing program 8 (id=3476): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10016, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYRES64], 0xff, 0x5a10, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) 2.400990213s ago: executing program 3 (id=3477): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000080)="ab", 0x1, 0x4000815, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 2.392744075s ago: executing program 0 (id=3478): move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x40], 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000040)) 2.390252526s ago: executing program 2 (id=3487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x1b, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 1.952961936s ago: executing program 0 (id=3479): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x4040011}, 0x890) 1.85785169s ago: executing program 2 (id=3480): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/65) 1.478352108s ago: executing program 6 (id=3481): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4) 1.420391727s ago: executing program 0 (id=3482): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000ac0)='I', 0x1}], 0x1}, 0x0) 1.355595709s ago: executing program 2 (id=3483): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0x6, 0x2, "58d5"}]}}}]}, 0x60}}, 0x0) 1.099565541s ago: executing program 3 (id=3484): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="070000000100"}) 955.501968ms ago: executing program 2 (id=3485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) fstat(r2, &(0x7f0000003280)) 837.782198ms ago: executing program 6 (id=3486): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@delneigh={0x30, 0x1a, 0x1, 0x200000, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 505.192278ms ago: executing program 3 (id=3488): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x7000018}, @TCA_FQ_FLOW_REFILL_DELAY={0x1027, 0x9, 0x3}]}}]}, 0xa2}}, 0x0) 325.824672ms ago: executing program 6 (id=3489): r0 = creat(&(0x7f0000000600)='./file0\x00', 0x12c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7, 0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2}}, 0x3c) 325.637452ms ago: executing program 2 (id=3490): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00a3bcfd45cf0c2e6365b91500000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 64.087687ms ago: executing program 0 (id=3491): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x1, 0x11, 0x0, @empty, @empty, {[@end]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xd, 0x100, @void}}}}}}}, 0x0) 0s ago: executing program 3 (id=3492): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x9}]}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 95 subj=unconfined pid=11315 comm="syz.2.2283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 693.312924][T11324] loop2: detected capacity change from 0 to 512 [ 693.366283][T11324] EXT4-fs (loop2): orphan cleanup on readonly fs [ 693.373201][T11324] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 693.401612][T11324] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 693.514116][T11324] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2287: attempt to clear invalid blocks 2 len 1 [ 693.565371][T11324] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2287: invalid indirect mapped block 1819239214 (level 0) [ 693.680833][T11324] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2287: invalid indirect mapped block 1819239214 (level 1) [ 693.798508][T11324] EXT4-fs (loop2): 1 truncate cleaned up [ 693.806215][T11324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 693.902992][T11324] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 693.974350][T11324] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.2287: Abort forced by user [ 694.015426][T11324] EXT4-fs (loop2): Remounting filesystem read-only [ 694.027543][T11324] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 694.240322][T10712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.461759][T11354] syz.6.2299: attempt to access beyond end of device [ 695.461759][T11354] loop13: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 695.476876][T11354] EXT4-fs (loop13): unable to read superblock [ 695.500376][T11351] IPVS: Scheduler module ip_vs_ not found [ 695.910932][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2300'. [ 696.103296][T11363] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2303'. [ 696.129244][T11363] bridge0: port 3(vlan2) entered blocking state [ 696.136324][T11363] bridge0: port 3(vlan2) entered disabled state [ 696.143392][T11363] vlan2: entered allmulticast mode [ 696.230605][T11363] vlan2: left allmulticast mode [ 696.721522][T11366] loop7: detected capacity change from 0 to 2048 [ 696.851501][T11366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.904254][T11366] EXT4-fs error (device loop7): ext4_find_extent:938: inode #2: comm syz.7.2304: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 696.955945][T11366] EXT4-fs (loop7): Remounting filesystem read-only [ 697.367159][T11379] loop3: detected capacity change from 0 to 512 [ 697.383618][T11379] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 697.401916][T10403] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.505803][ T29] audit: type=1326 audit(1739546037.312:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.2.2309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 697.528602][ T29] audit: type=1326 audit(1739546037.312:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.2.2309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 697.628513][T11379] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 697.730111][ T29] audit: type=1326 audit(1739546037.422:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.2.2309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 697.752789][ T29] audit: type=1326 audit(1739546037.422:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.2.2309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 697.769818][T11379] EXT4-fs (loop3): 1 truncate cleaned up [ 697.775309][ T29] audit: type=1326 audit(1739546037.422:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.2.2309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 697.782614][T11379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.803619][ T29] audit: type=1326 audit(1739546037.432:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.2.2309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 697.844804][ T29] audit: type=1326 audit(1739546037.432:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.2.2309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 697.867458][ T29] audit: type=1326 audit(1739546037.462:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.2.2309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 698.988408][T11387] syz.2.2313: attempt to access beyond end of device [ 698.988408][T11387] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 699.002044][T11387] EXT4-fs (loop5): unable to read superblock [ 699.088693][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.860654][T11397] loop7: detected capacity change from 0 to 64 [ 702.546241][T11367] Set syz1 is full, maxelem 65536 reached [ 702.596708][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 703.256570][T11421] loop6: detected capacity change from 0 to 256 [ 703.313637][T11421] exFAT-fs (loop6): failed to read sector(0x800000070) [ 703.321036][T11421] exFAT-fs (loop6): failed to load upcase table [ 703.327697][T11421] exFAT-fs (loop6): failed to recognize exfat type [ 703.991777][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2334'. [ 704.171903][T11436] loop5: detected capacity change from 0 to 1024 [ 704.250649][T11436] EXT4-fs: Ignoring removed nobh option [ 704.256644][T11436] EXT4-fs: Ignoring removed bh option [ 704.402005][T11436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.587418][ T9901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.008639][T11449] loop3: detected capacity change from 0 to 4096 [ 705.072270][T11449] NILFS (loop3): invalid segment: Checksum error in segment payload [ 705.083213][T11449] NILFS (loop3): trying rollback from an earlier position [ 705.168260][T11449] NILFS (loop3): recovery complete [ 705.187828][T11461] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 705.942909][T11468] loop5: detected capacity change from 0 to 64 [ 705.981415][T11469] loop6: detected capacity change from 0 to 16 [ 706.032486][ T5844] kernel write not supported for file /uhid (pid: 5844 comm: kworker/0:4) [ 706.035771][T11469] erofs (device loop6): rootino(nid 36) is not a directory(i_mode 142735) [ 706.495761][ T9901] hfs: node 4:3 still has 2 user(s)! [ 706.703489][T11482] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 706.743552][T11484] loop6: detected capacity change from 0 to 512 [ 706.852954][T11484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.866513][T11484] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.027956][T11484] EXT4-fs error (device loop6): ext4_get_first_dir_block:3541: inode #12: comm syz.6.2356: Attempting to read directory block (0) that is past i_size (3) [ 707.048608][T11484] EXT4-fs (loop6): Remounting filesystem read-only [ 707.248354][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.275571][ T1330] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 707.287875][ T1330] Quota error (device loop6): write_blk: dquota write failed [ 707.295578][ T1330] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 707.326132][T11491] usb usb1: usbfs: process 11491 (syz.7.2357) did not claim interface 0 before use [ 707.779183][T11499] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2361'. [ 707.804934][T11499] bridge0: port 3(vlan2) entered blocking state [ 707.812081][T11499] bridge0: port 3(vlan2) entered disabled state [ 707.819279][T11499] vlan2: entered allmulticast mode [ 707.870732][T11499] vlan2: left allmulticast mode [ 708.173105][T11501] loop5: detected capacity change from 0 to 4096 [ 708.325651][T11507] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 708.449194][ T29] audit: type=1800 audit(1739546048.282:220): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2362" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 708.700100][T11512] loop3: detected capacity change from 0 to 512 [ 708.802335][T11512] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2367: corrupted in-inode xattr: invalid ea_ino [ 708.893515][T11512] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2367: couldn't read orphan inode 15 (err -117) [ 708.999768][T11512] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.285477][ T29] audit: type=1326 audit(1739546049.112:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11519 comm="syz.5.2369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 709.390901][ T29] audit: type=1326 audit(1739546049.192:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11519 comm="syz.5.2369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 709.414328][ T29] audit: type=1326 audit(1739546049.202:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11519 comm="syz.5.2369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 709.440801][ T29] audit: type=1326 audit(1739546049.202:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11519 comm="syz.5.2369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 709.466331][ T29] audit: type=1326 audit(1739546049.202:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11519 comm="syz.5.2369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 709.493570][ T29] audit: type=1326 audit(1739546049.212:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11519 comm="syz.5.2369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 709.517755][ T29] audit: type=1326 audit(1739546049.222:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11519 comm="syz.5.2369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 709.572758][ T5797] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 710.471982][T11534] loop5: detected capacity change from 0 to 1024 [ 710.539259][T11536] loop3: detected capacity change from 0 to 128 [ 710.562551][T11534] hfsplus: xattr searching failed [ 710.599327][T11534] hfsplus: bad catalog folder thread [ 713.571429][T11578] loop2: detected capacity change from 0 to 512 [ 713.627404][T11578] EXT4-fs: Ignoring removed orlov option [ 713.633550][T11578] EXT4-fs: Ignoring removed nomblk_io_submit option [ 713.721077][T11578] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 713.729547][T11578] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 713.738854][T11578] System zones: 0-1, 15-15, 18-18, 34-34 [ 713.746709][T11578] EXT4-fs (loop2): orphan cleanup on readonly fs [ 713.753579][T11578] __quota_error: 14 callbacks suppressed [ 713.753647][T11578] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 713.769221][T11578] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 713.786561][T11578] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 713.832710][T11578] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2397: bg 0: block 40: padding at end of block bitmap is not set [ 713.875800][T11578] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 713.898594][T11578] EXT4-fs (loop2): 1 truncate cleaned up [ 713.906543][T11578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 713.943979][T11584] sctp: [Deprecated]: syz.5.2398 (pid 11584) Use of int in maxseg socket option. [ 713.943979][T11584] Use struct sctp_assoc_value instead [ 714.312137][T10712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.404367][T11600] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2405'. [ 715.710212][T11602] loop7: detected capacity change from 0 to 512 [ 715.771262][T11602] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 715.859597][T11602] EXT4-fs (loop7): 1 truncate cleaned up [ 715.895981][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 715.896226][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 715.919407][T11602] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.354958][T10403] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.090848][T11615] loop6: detected capacity change from 0 to 8192 [ 717.357818][T11628] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2417'. [ 717.871213][T11635] loop7: detected capacity change from 0 to 164 [ 718.257569][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 719.404033][T11656] loop6: detected capacity change from 0 to 512 [ 719.485649][T11656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.500449][T11656] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 719.661207][T11665] loop3: detected capacity change from 0 to 128 [ 719.876308][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.901872][T11667] loop5: detected capacity change from 0 to 1024 [ 720.022730][ T29] audit: type=1800 audit(1739546059.852:242): pid=11667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2433" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 720.762417][T11680] Set syz1 is full, maxelem 0 reached [ 721.297908][T11684] loop5: detected capacity change from 0 to 2048 [ 721.391874][T11684] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 721.434323][T11690] loop7: detected capacity change from 0 to 128 [ 721.457330][T11690] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 721.569199][T11690] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 721.917738][ T13] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 722.227742][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2447'. [ 722.294712][T11702] loop7: detected capacity change from 0 to 1024 [ 724.878142][T11740] loop7: detected capacity change from 0 to 1024 [ 725.604508][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2473'. [ 726.081331][T11760] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2477'. [ 726.409632][T11764] loop2: detected capacity change from 0 to 512 [ 726.532960][T11764] EXT4-fs (loop2): 1 orphan inode deleted [ 726.540986][T11764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.564584][T11764] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 726.576548][ T5029] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 726.588543][ T5029] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:22: Failed to release dquot type 1 [ 726.803847][T10712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.104277][T11773] loop7: detected capacity change from 0 to 128 [ 727.173074][T11776] loop2: detected capacity change from 0 to 128 [ 727.224673][T11780] loop5: detected capacity change from 0 to 64 [ 727.272362][ T29] audit: type=1800 audit(1739546067.102:243): pid=11773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2483" name="file1" dev="loop7" ino=79 res=0 errno=0 [ 727.380961][T11776] syz.2.2482: attempt to access beyond end of device [ 727.380961][T11776] loop2: rw=2051, sector=96, nr_sectors = 287 limit=128 [ 727.391946][T11773] syz.7.2483: attempt to access beyond end of device [ 727.391946][T11773] loop7: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 727.763708][T11783] loop3: detected capacity change from 0 to 512 [ 727.798675][T11783] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 727.907144][T11785] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2488'. [ 728.050860][ T29] audit: type=1800 audit(1739546067.892:244): pid=11791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2491" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 728.809485][T11803] program syz.2.2496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 729.135639][T11799] loop7: detected capacity change from 0 to 4096 [ 729.284885][T11799] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 730.096500][T11822] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2505'. [ 730.490137][T11826] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 732.398758][T11845] loop6: detected capacity change from 0 to 2048 [ 732.493114][T11845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.526331][T11845] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.2515: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 732.561900][T11845] EXT4-fs (loop6): Remounting filesystem read-only [ 732.655226][T11853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2517'. [ 732.723690][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.263224][T11860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2520'. [ 733.305889][ T5787] Bluetooth: hci5: command 0x0406 tx timeout [ 733.839076][T11868] loop3: detected capacity change from 0 to 64 [ 734.611279][T11870] loop6: detected capacity change from 0 to 8192 [ 736.158506][T11906] loop6: detected capacity change from 0 to 1024 [ 736.450522][T11911] loop5: detected capacity change from 0 to 128 [ 736.495903][T11911] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 736.523110][T11911] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 736.600849][ T1330] hfsplus: b-tree write err: -5, ino 4 [ 736.735260][ T9901] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 736.862219][T11917] loop7: detected capacity change from 0 to 256 [ 736.952836][T11917] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 737.085688][T11917] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000008) [ 737.125266][T11922] loop5: detected capacity change from 0 to 512 [ 737.202861][T11922] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 737.357635][T11922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.573917][T11922] EXT4-fs error (device loop5): ext4_readdir:261: inode #2: block 3: comm syz.5.2548: path /157/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 737.616154][T11922] EXT4-fs error (device loop5): ext4_readdir:261: inode #2: block 12: comm syz.5.2548: path /157/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 737.654949][T11922] EXT4-fs error (device loop5): ext4_readdir:261: inode #2: block 13: comm syz.5.2548: path /157/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 737.703731][T11932] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 737.722429][T11932] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.732302][T11932] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.766795][T11922] EXT4-fs error (device loop5): ext4_readdir:261: inode #2: block 14: comm syz.5.2548: path /157/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 738.164958][ T9901] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 738.260876][ T9901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.147529][T11949] loop7: detected capacity change from 0 to 2048 [ 739.239551][T11949] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 739.247778][T11949] UDF-fs: Scanning with blocksize 512 failed [ 739.319057][T11949] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 739.501093][T11949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 740.179210][T11963] loop6: detected capacity change from 0 to 4096 [ 740.366398][ T5838] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 740.611972][ T5838] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 740.621547][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.632699][ T5838] usb 3-1: Product: syz [ 740.637202][ T5838] usb 3-1: Manufacturer: syz [ 740.642028][ T5838] usb 3-1: SerialNumber: syz [ 740.721778][ T5838] usb 3-1: config 0 descriptor?? [ 740.762153][ T5838] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 008 [ 741.183094][ T5838] (null): failure reading functionality [ 741.215000][ T5838] i2c i2c-2: connected i2c-tiny-usb device [ 741.402648][ T5838] usb 3-1: USB disconnect, device number 8 [ 741.411821][T11982] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2575'. [ 741.998755][T11991] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 742.462945][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2583'. [ 742.735414][ T5838] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 742.925895][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 742.960047][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.971878][ T5838] usb 3-1: config 0 has no interfaces? [ 742.978302][ T5838] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 742.987851][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.087310][ T5838] usb 3-1: config 0 descriptor?? [ 743.810232][ T9987] usb 3-1: USB disconnect, device number 9 [ 744.893906][T12028] netlink: 'syz.5.2597': attribute type 1 has an invalid length. [ 744.902191][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2597'. [ 745.435609][T12036] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 745.488040][T12039] loop6: detected capacity change from 0 to 64 [ 745.862930][T12045] loop3: detected capacity change from 0 to 256 [ 746.050338][T12045] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 746.335501][ T29] audit: type=1326 audit(1739550180.168:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 746.359428][ T29] audit: type=1326 audit(1739550180.168:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 746.382207][ T29] audit: type=1326 audit(1739550180.198:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 746.509965][T12053] loop2: detected capacity change from 0 to 1024 [ 746.546812][ T29] audit: type=1326 audit(1739550180.358:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 746.570934][ T29] audit: type=1326 audit(1739550180.358:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 746.596133][ T29] audit: type=1326 audit(1739550180.378:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 746.619146][ T29] audit: type=1326 audit(1739550180.378:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 746.620585][T12053] EXT4-fs: Ignoring removed orlov option [ 746.641579][ T29] audit: type=1326 audit(1739550180.388:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 746.681823][T12053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 746.693500][ T29] audit: type=1326 audit(1739550180.538:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 746.716094][ T29] audit: type=1326 audit(1739550180.538:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.6.2607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 746.874815][T12051] loop7: detected capacity change from 0 to 4096 [ 746.931130][T12051] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 746.948351][T12053] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 747.040921][T12053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.540024][T10712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.047906][T12074] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2616'. [ 748.482350][T12082] loop2: detected capacity change from 0 to 64 [ 748.529688][T12077] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 749.685530][T12100] input: syz0 as /devices/virtual/input/input24 [ 749.836448][T12096] loop3: detected capacity change from 0 to 2048 [ 749.891070][T12096] hpfs: hpfs_map_sector(): read error [ 749.994432][T12104] bond1: entered promiscuous mode [ 749.999947][T12104] bond1: entered allmulticast mode [ 750.007193][T12104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 750.072557][T12104] bond1 (unregistering): Released all slaves [ 750.482482][T12112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.663963][T12112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.818611][T12112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.895842][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2636'. [ 750.978518][T12112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.148223][T12112] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.183865][T12112] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.211241][T12112] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.238614][T12112] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.289379][T12140] loop5: detected capacity change from 0 to 16 [ 752.347622][T12139] bridge0: port 3(vlan2) entered blocking state [ 752.354576][T12139] bridge0: port 3(vlan2) entered disabled state [ 752.361785][T12139] vlan2: entered allmulticast mode [ 752.367329][T12139] gretap0: entered allmulticast mode [ 752.375968][T12139] vlan2: entered promiscuous mode [ 752.381232][T12139] gretap0: entered promiscuous mode [ 752.391986][T12139] bridge0: port 3(vlan2) entered blocking state [ 752.398995][T12139] bridge0: port 3(vlan2) entered forwarding state [ 752.404827][T12140] erofs (device loop5): mounted with root inode @ nid 36. [ 752.442520][T12137] loop6: detected capacity change from 0 to 1024 [ 752.468642][T12137] EXT4-fs: Ignoring removed nobh option [ 752.474730][T12137] EXT4-fs: Ignoring removed bh option [ 752.621859][T12137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.899224][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.155523][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 753.155601][ T29] audit: type=1326 audit(1739550186.988:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12148 comm="syz.5.2659" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x0 [ 753.319039][T12157] loop6: detected capacity change from 0 to 64 [ 753.748686][T10071] hfs: node 4:3 still has 2 user(s)! [ 753.984161][T12165] loop7: detected capacity change from 0 to 256 [ 754.096937][T12165] exFAT-fs (loop7): failed to read sector(0x800000070) [ 754.104134][T12165] exFAT-fs (loop7): failed to load upcase table [ 754.111261][T12165] exFAT-fs (loop7): failed to recognize exfat type [ 754.375857][ T5844] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 754.396391][T12173] loop3: detected capacity change from 0 to 1024 [ 754.421077][T12173] EXT4-fs (loop3): Test dummy encryption mode enabled [ 754.452528][T12173] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 754.527537][T12173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.545807][ T5844] usb 6-1: Using ep0 maxpacket: 32 [ 754.560922][ T5844] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 754.569606][ T5844] usb 6-1: config 0 has no interface number 0 [ 754.576174][ T5844] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 754.587586][ T5844] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 754.643757][ T5844] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 754.653264][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.661703][ T5844] usb 6-1: Product: syz [ 754.666195][ T5844] usb 6-1: Manufacturer: syz [ 754.671008][ T5844] usb 6-1: SerialNumber: syz [ 754.686178][ T5844] usb 6-1: config 0 descriptor?? [ 754.719235][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2663'. [ 754.929230][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.937930][ T5844] radio-si470x 6-1:0.35: this is not a si470x device. [ 754.996269][ T5844] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 755.201819][ T5844] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 755.224002][ T5844] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 755.247758][ T5844] usb 6-1: USB disconnect, device number 5 [ 755.259856][ T5844] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 755.544720][T12187] loop3: detected capacity change from 0 to 2048 [ 755.600868][T12187] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 755.631293][T12189] loop7: detected capacity change from 0 to 1024 [ 755.649250][T12187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 755.790176][T12189] hfsplus: request for non-existent node 134217728 in B*Tree [ 755.797939][T12189] hfsplus: request for non-existent node 134217728 in B*Tree [ 756.848266][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2676'. [ 756.934015][T12205] loop6: detected capacity change from 0 to 4096 [ 757.113078][T12215] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 757.533335][ T5838] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 757.543482][ T5838] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=12) [ 757.576037][ T5838] Remounting filesystem read-only [ 757.581309][ T5838] NILFS (loop6): error -5 truncating bmap (ino=12) [ 758.145881][T12231] loop6: detected capacity change from 0 to 1024 [ 758.274974][T12231] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2684'. [ 758.284474][T12231] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 758.625778][ T5838] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 758.699349][T12243] loop7: detected capacity change from 0 to 256 [ 758.721277][T12243] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 758.733172][T12243] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 758.800283][T12243] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xdf21e5da, utbl_chksum : 0xe619d30d) [ 758.835836][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 758.858284][ T5838] usb 3-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config [ 758.869034][ T5838] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 758.918996][ T5838] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 758.928799][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.937414][ T5838] usb 3-1: Product: syz [ 758.943291][ T5838] usb 3-1: Manufacturer: syz [ 758.948476][ T5838] usb 3-1: SerialNumber: syz [ 759.000343][T12243] exFAT-fs (loop7): error, invalid access to FAT (entry 0xffffffff) [ 759.009012][T12243] exFAT-fs (loop7): Filesystem has been set read-only [ 759.214670][ T5838] usb 3-1: 0:2 : does not exist [ 759.286103][ T5838] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 759.385512][ T5838] usb 3-1: USB disconnect, device number 10 [ 759.785387][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 759.966096][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 759.986473][ T25] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.998087][ T25] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 760.011453][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 760.018552][ T25] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 760.028031][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.144937][ T25] usb 6-1: config 0 descriptor?? [ 760.616012][ T25] wacom 0003:056A:0331.0010: hidraw0: USB HID v4.13 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 760.786308][ T5844] usb 6-1: USB disconnect, device number 6 [ 761.156919][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2709'. [ 761.385514][ T5802] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 761.394122][ T5802] Bluetooth: hci0: Injecting HCI hardware error event [ 761.416129][ T5802] Bluetooth: hci0: hardware error 0x00 [ 761.828397][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2714'. [ 761.837909][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2714'. [ 761.921168][T12287] loop3: detected capacity change from 0 to 4096 [ 762.005933][T12287] NILFS (loop3): invalid segment: Checksum error in segment payload [ 762.018666][T12287] NILFS (loop3): trying rollback from an earlier position [ 762.086232][T12287] NILFS (loop3): recovery complete [ 762.097517][T12294] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 763.475730][ T5802] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 763.736197][T12320] netlink: 'syz.6.2728': attribute type 9 has an invalid length. [ 763.744344][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2728'. [ 764.356564][T12327] netlink: 45 bytes leftover after parsing attributes in process `syz.6.2731'. [ 765.874820][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2735'. [ 765.884231][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2735'. [ 767.077146][T12359] tun0: tun_chr_ioctl cmd 1074025677 [ 767.083255][T12359] tun0: linktype set to 784 [ 767.280905][T12361] loop3: detected capacity change from 0 to 1024 [ 768.015666][T12370] loop7: detected capacity change from 0 to 4096 [ 768.055082][ T1829] hfsplus: b-tree write err: -5, ino 4 [ 768.117806][T12370] NILFS (loop7): invalid segment: Checksum error in segment payload [ 768.126236][T12370] NILFS (loop7): trying rollback from an earlier position [ 768.212320][T12370] NILFS (loop7): recovery complete [ 768.243955][T12372] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 768.740947][T12379] loop3: detected capacity change from 0 to 512 [ 768.820345][T12379] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 768.829470][T12379] EXT4-fs (loop3): failed to open journal device unknown-block(7,75) -6 [ 769.169608][T12385] loop2: detected capacity change from 0 to 2048 [ 769.237897][T12385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 769.429094][T12389] loop5: detected capacity change from 0 to 8 [ 769.465966][T12389] squashfs image failed sanity check [ 769.627331][T10712] UDF-fs: warning (device loop2): udf_evict_inode: Inode 1416 (mode 100004) has inode size 9000 different from extent length 9216. Filesystem need not be standards compliant. [ 770.217051][ T3512] Bluetooth: hci2: Frame reassembly failed (-84) [ 770.241777][T12400] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 770.805570][ T29] audit: type=1326 audit(1739550204.628:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12394 comm="syz.5.2762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7fc00000 [ 771.014820][T12416] ALSA: mixer_oss: invalid index 100000 [ 771.161521][T12419] loop5: detected capacity change from 0 to 512 [ 771.250855][T12419] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2772: corrupted in-inode xattr: invalid ea_ino [ 771.275375][T12419] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2772: couldn't read orphan inode 15 (err -117) [ 771.352868][T12419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.667827][ T9901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.839157][T12431] loop3: detected capacity change from 0 to 1024 [ 771.859149][T12431] EXT4-fs: Ignoring removed nomblk_io_submit option [ 771.933537][T12431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.972925][T12435] loop6: detected capacity change from 0 to 64 [ 772.113569][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.265613][T12403] Bluetooth: hci2: command 0x1003 tx timeout [ 772.267279][ T5802] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 772.378067][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2779'. [ 772.735385][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'. [ 772.771372][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2780'. [ 772.956648][T12449] loop6: detected capacity change from 0 to 1024 [ 773.015764][T12449] EXT4-fs (loop6): Test dummy encryption mode enabled [ 773.045420][T12449] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 773.160031][T12449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.299020][T12449] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 773.587229][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.017866][T12469] loop2: detected capacity change from 0 to 64 [ 774.470913][T12477] loop6: detected capacity change from 0 to 512 [ 774.523301][T12477] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 774.618848][T12477] EXT4-fs (loop6): 1 truncate cleaned up [ 774.626746][T12477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.989056][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.059195][T12488] loop5: detected capacity change from 0 to 1764 [ 775.370940][T12494] loop6: detected capacity change from 0 to 1024 [ 775.390639][T12494] EXT4-fs: Ignoring removed orlov option [ 775.397164][T12494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 775.463395][T12494] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 775.497257][T12494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.804293][T12503] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2806'. [ 776.062727][T12508] loop3: detected capacity change from 0 to 256 [ 776.076410][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.110568][T12508] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 776.121711][T12508] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 776.227925][T12508] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdf21e5da, utbl_chksum : 0xe619d30d) [ 776.430698][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2809'. [ 776.440096][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2809'. [ 776.541178][T12508] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 776.550123][T12508] exFAT-fs (loop3): Filesystem has been set read-only [ 776.767013][T12507] loop2: detected capacity change from 0 to 8192 [ 777.333807][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.342639][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.596571][T12523] loop6: detected capacity change from 0 to 1024 [ 777.636934][T12523] EXT4-fs: Ignoring removed nobh option [ 777.642790][T12523] EXT4-fs: Ignoring removed bh option [ 777.708315][T12523] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.156389][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.181799][T12535] loop3: detected capacity change from 0 to 1024 [ 778.222085][T12535] EXT4-fs: Ignoring removed orlov option [ 778.228380][T12535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 778.393019][T12535] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 778.456464][T12535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.481032][T12543] loop2: detected capacity change from 0 to 128 [ 778.843322][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.181964][T12549] syz.2.2827 uses obsolete (PF_INET,SOCK_PACKET) [ 779.485380][ T5844] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 779.672415][ T5844] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.683346][ T5844] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 779.763771][ T5844] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 779.773421][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.787116][ T5844] usb 3-1: Product: syz [ 779.793507][ T5844] usb 3-1: Manufacturer: syz [ 779.798525][ T5844] usb 3-1: SerialNumber: syz [ 780.144822][ T5844] usb 3-1: 0:2 : does not exist [ 780.249725][ T5844] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 780.314860][ T5844] usb 3-1: USB disconnect, device number 11 [ 780.857716][T12573] bridge_slave_0: invalid flags given to default FDB implementation [ 781.515618][T12578] loop7: detected capacity change from 0 to 2048 [ 781.545930][T12585] bond0: entered promiscuous mode [ 781.551231][T12585] bond_slave_0: entered promiscuous mode [ 781.560855][T12585] bond_slave_1: entered promiscuous mode [ 781.605516][T12586] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 781.662613][T12578] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 781.667740][T12585] bond0: left promiscuous mode [ 781.682671][T12585] bond_slave_0: left promiscuous mode [ 781.700993][T12585] bond_slave_1: left promiscuous mode [ 781.710249][T12584] loop3: detected capacity change from 0 to 2048 [ 781.711648][T12578] Remounting filesystem read-only [ 781.728631][T12578] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 781.742429][T12584] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 781.774519][T12578] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 781.792988][T12587] NILFS error (device loop7): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 781.809455][T12587] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 781.834296][T12584] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 781.843779][T12584] UDF-fs: Scanning with blocksize 512 failed [ 781.925528][T12584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 782.692521][T12597] loop5: detected capacity change from 0 to 512 [ 782.808127][T12597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.824628][T12597] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.316196][T12597] EXT4-fs: Cannot change journaled quota options when quota turned on [ 783.365764][T12610] loop7: detected capacity change from 0 to 512 [ 783.383113][T12610] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 783.474688][T12610] EXT4-fs (loop7): 1 truncate cleaned up [ 783.483056][T12610] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.131961][ T9901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.299712][ T29] audit: type=1800 audit(1739550218.128:258): pid=12620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2853" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 784.688233][T10403] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.711076][T12626] loop6: detected capacity change from 0 to 64 [ 784.811643][T12625] loop3: detected capacity change from 0 to 1024 [ 784.827968][T12626] Trying to free block not in datazone [ 784.858595][T12626] minix_free_block (loop6:21): bit already cleared [ 784.866852][T12625] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 784.919088][T12625] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 784.966225][T12625] EXT4-fs (loop3): orphan cleanup on readonly fs [ 784.991543][T12625] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 785.003071][T12625] EXT4-fs (loop3): Remounting filesystem read-only [ 785.014396][T12625] Quota error (device loop3): write_blk: dquota write failed [ 785.022372][T12625] Quota error (device loop3): write_blk: dquota write failed [ 785.030641][T12625] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 785.043594][T12625] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 785.058123][T12625] EXT4-fs (loop3): 1 orphan inode deleted [ 785.098341][T12625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 785.310448][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.409994][ T5844] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 786.671783][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 786.812832][ T5844] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 786.825354][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.833628][ T5844] usb 3-1: Product: syz [ 786.838169][ T5844] usb 3-1: Manufacturer: syz [ 786.842986][ T5844] usb 3-1: SerialNumber: syz [ 786.940450][ T5844] usb 3-1: config 0 descriptor?? [ 786.962678][ T5844] gspca_main: sq905-2.14.0 probing 2770:9120 [ 787.262925][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2872'. [ 787.324714][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 787.337859][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 787.349766][T12661] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2874'. [ 787.572180][ T5844] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 787.583092][ T5844] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 787.618835][ T5844] usb 3-1: USB disconnect, device number 12 [ 788.472773][T12677] loop6: detected capacity change from 0 to 1024 [ 788.617675][T12677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.630593][T12677] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.705430][T12683] support for the xor transformation has been removed. [ 788.770176][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2885'. [ 788.786077][T12686] loop5: detected capacity change from 0 to 256 [ 788.856033][ T29] audit: type=1800 audit(1739550222.688:259): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2884" name="file1" dev="loop5" ino=92 res=0 errno=0 [ 789.047991][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.643775][T12700] loop5: detected capacity change from 0 to 512 [ 789.832898][T12700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.848899][T12700] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.025990][T12700] EXT4-fs error (device loop5): ext4_empty_dir:3094: inode #12: comm syz.5.2890: invalid size [ 790.060454][T12700] EXT4-fs (loop5): Remounting filesystem read-only [ 790.135647][T12710] loop7: detected capacity change from 0 to 16 [ 790.173267][T12710] erofs (device loop7): mounted with root inode @ nid 36. [ 790.314393][ T9901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.328696][ T3512] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 790.340470][ T3512] Quota error (device loop5): write_blk: dquota write failed [ 790.348795][ T3512] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 791.589930][T12726] loop7: detected capacity change from 0 to 1024 [ 792.196122][T12733] loop5: detected capacity change from 0 to 1024 [ 792.334525][T12733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.543562][T12737] loop2: detected capacity change from 0 to 1024 [ 792.600207][T12733] EXT4-fs error (device loop5): ext4_xattr_ibody_get:653: inode #2: comm syz.5.2905: corrupted in-inode xattr: bad e_name length [ 792.691678][T12733] EXT4-fs (loop5): Remounting filesystem read-only [ 792.700963][T12737] hfsplus: bad catalog entry type [ 792.735186][T12739] loop6: detected capacity change from 0 to 2048 [ 792.851046][T12739] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 792.859200][T12739] UDF-fs: Scanning with blocksize 512 failed [ 792.994367][ T13] hfsplus: b-tree write err: -5, ino 4 [ 793.009414][T12739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 793.318671][ T9901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.337170][ T1829] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 793.351088][ T1829] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 793.730210][ T1330] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.912884][ T1330] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.094009][ T1330] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.243440][ T1330] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.641778][T12753] loop3: detected capacity change from 0 to 2048 [ 794.654599][ T1330] bridge_slave_1: left allmulticast mode [ 794.660765][ T1330] bridge_slave_1: left promiscuous mode [ 794.667464][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.690557][ T1330] bridge_slave_0: left allmulticast mode [ 794.697070][ T1330] bridge_slave_0: left promiscuous mode [ 794.703778][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.752005][T12753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.785718][T12750] loop7: detected capacity change from 0 to 2048 [ 795.166815][T12750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.243820][ T1330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.261755][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.303118][ T1330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.348836][ T1330] bond0 (unregistering): Released all slaves [ 795.519531][T10403] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.896810][T12764] loop6: detected capacity change from 0 to 128 [ 796.052911][ T1330] hsr_slave_0: left promiscuous mode [ 796.078340][ T1330] hsr_slave_1: left promiscuous mode [ 796.086251][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.094104][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.146952][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.154868][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.241451][ T1330] veth1_macvtap: left promiscuous mode [ 796.247859][ T1330] veth0_macvtap: left promiscuous mode [ 796.253747][ T1330] veth1_vlan: left promiscuous mode [ 796.262216][ T1330] veth0_vlan: left promiscuous mode [ 796.770031][T12403] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 796.801959][T12403] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 796.826919][T12403] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 796.941443][ T1330] team0 (unregistering): Port device team_slave_1 removed [ 796.991814][T12403] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 797.003948][T12403] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 797.013870][T12403] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 797.055298][ T1330] team0 (unregistering): Port device team_slave_0 removed [ 798.791038][T12771] chnl_net:caif_netlink_parms(): no params data found [ 799.468102][T12403] Bluetooth: hci1: command tx timeout [ 800.138898][T12798] bond1: entered promiscuous mode [ 800.144203][T12798] bond1: entered allmulticast mode [ 800.156977][T12798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 800.290616][T12798] bond1 (unregistering): Released all slaves [ 800.945336][T12808] loop3: detected capacity change from 0 to 128 [ 800.968268][T12771] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.976656][T12771] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.979873][T12807] loop6: detected capacity change from 0 to 512 [ 800.984356][T12771] bridge_slave_0: entered allmulticast mode [ 801.000031][T12771] bridge_slave_0: entered promiscuous mode [ 801.015600][T12771] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.023310][T12771] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.031719][T12771] bridge_slave_1: entered allmulticast mode [ 801.040857][T12771] bridge_slave_1: entered promiscuous mode [ 801.084329][T12807] EXT4-fs: Ignoring removed mblk_io_submit option [ 801.094580][T12807] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 801.145972][T12807] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 801.154580][T12807] System zones: 1-12 [ 801.189922][T12771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.238346][T12807] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.2941: corrupted in-inode xattr: e_value size too large [ 801.271350][T12771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.292271][T12807] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2941: couldn't read orphan inode 15 (err -117) [ 801.362529][T12807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.463772][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2933'. [ 801.464388][T12771] team0: Port device team_slave_0 added [ 801.509790][T12771] team0: Port device team_slave_1 added [ 801.563898][T12403] Bluetooth: hci1: command tx timeout [ 801.653493][T12771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.660812][T12771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.688265][T12771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.776159][T12771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.783446][T12771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.810184][T12771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.922023][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.299964][T12771] hsr_slave_0: entered promiscuous mode [ 802.310142][T12771] hsr_slave_1: entered promiscuous mode [ 802.318903][T12771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 802.326789][T12771] Cannot create hsr debugfs directory [ 803.334304][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'. [ 803.389664][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'. [ 803.625749][T12403] Bluetooth: hci1: command tx timeout [ 803.986573][T12771] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 804.117443][T12771] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 804.188256][T12771] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 804.266881][T12771] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 804.443472][ T29] audit: type=1326 audit(1739550238.278:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.7.2945" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x0 [ 804.801005][T12843] loop6: detected capacity change from 0 to 1024 [ 805.390150][T12771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.501439][T12771] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.543874][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.551625][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.654608][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.662344][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.706698][T12403] Bluetooth: hci1: command tx timeout [ 806.081973][T12858] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2951'. [ 807.525653][T12880] loop6: detected capacity change from 0 to 256 [ 807.804411][T12880] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 807.810966][T12771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.153005][T12884] loop7: detected capacity change from 0 to 2048 [ 808.211296][T12884] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 808.285547][T12889] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 809.044091][T12900] netlink: 'syz.6.2967': attribute type 29 has an invalid length. [ 809.061718][T12900] netlink: 'syz.6.2967': attribute type 29 has an invalid length. [ 809.073218][T12900] netlink: 'syz.6.2967': attribute type 29 has an invalid length. [ 809.697256][T12904] loop2: detected capacity change from 0 to 4096 [ 809.752556][T12904] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 810.047468][T12771] veth0_vlan: entered promiscuous mode [ 810.148321][T12771] veth1_vlan: entered promiscuous mode [ 810.165732][T12904] ntfs3(loop2): ino=19, mi_enum_attr [ 810.171317][T12904] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 810.466277][T12771] veth0_macvtap: entered promiscuous mode [ 810.551894][T12771] veth1_macvtap: entered promiscuous mode [ 810.713224][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.724370][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.734570][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.746222][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.756835][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.768254][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.778515][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.789319][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.804384][T12771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.871256][T12919] Bluetooth: MGMT ver 1.23 [ 810.918596][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.929802][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.939990][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.950790][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.961527][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.972406][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.982593][T12771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.995400][T12771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.011707][T12771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.204545][T12923] tun0: tun_chr_ioctl cmd 1074812118 [ 811.333341][T12771] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.343774][T12771] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.353780][T12771] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.364275][T12771] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.953752][T12933] loop6: detected capacity change from 0 to 256 [ 812.180823][T12940] loop3: detected capacity change from 0 to 128 [ 812.191165][T12935] macsec1: entered promiscuous mode [ 812.191267][T12935] macvlan0: entered promiscuous mode [ 812.218304][T12938] netlink: 'syz.2.2982': attribute type 9 has an invalid length. [ 812.245431][T12935] macvlan0: left promiscuous mode [ 812.274396][T12940] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 812.608645][T12940] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 812.948995][T12945] loop6: detected capacity change from 0 to 1024 [ 813.021705][T12945] EXT4-fs: Ignoring removed bh option [ 813.173455][T12945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 813.354218][T12955] loop7: detected capacity change from 0 to 1024 [ 813.449303][T12955] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 813.462243][T12955] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 813.592818][T12955] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 813.632891][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 813.647671][T12962] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.699455][T12955] EXT4-fs (loop7): orphan cleanup on readonly fs [ 813.736158][T12955] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.2987: Inode bitmap for bg 0 marked uninitialized [ 813.858512][T12955] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 814.407619][T10403] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.028426][T12981] loop6: detected capacity change from 0 to 512 [ 815.080343][T12981] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 815.251757][T12981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.781655][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.909753][T13001] loop7: detected capacity change from 0 to 8 [ 815.936347][T13000] tap0: tun_chr_ioctl cmd 1074025677 [ 815.942313][T13000] tap0: linktype set to 512 [ 816.694447][T13011] loop3: detected capacity change from 0 to 128 [ 817.099035][ T1330] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.327842][ T1330] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.462826][ T1330] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.573975][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.582181][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.700332][ T1330] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.828669][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.839771][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.018432][ T1330] vlan2: left allmulticast mode [ 818.023537][ T1330] gretap0: left allmulticast mode [ 818.029495][ T1330] vlan2: left promiscuous mode [ 818.034471][ T1330] gretap0: left promiscuous mode [ 818.041105][ T1330] bridge0: port 3(vlan2) entered disabled state [ 818.066013][ T1330] bridge_slave_1: left allmulticast mode [ 818.071911][ T1330] bridge_slave_1: left promiscuous mode [ 818.078594][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.091993][ T1330] bridge_slave_0: left allmulticast mode [ 818.101172][ T1330] bridge_slave_0: left promiscuous mode [ 818.108356][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.668305][ T1330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.714020][ T1330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.734413][ T1330] bond0 (unregistering): Released all slaves [ 819.241424][ T1330] hsr_slave_0: left promiscuous mode [ 819.255726][ T1330] hsr_slave_1: left promiscuous mode [ 819.263396][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.271344][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.340624][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.348762][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.349592][T13028] loop6: detected capacity change from 0 to 64 [ 819.453975][ T1330] veth1_macvtap: left promiscuous mode [ 819.460853][ T1330] veth0_macvtap: left promiscuous mode [ 819.467007][ T1330] veth1_vlan: left promiscuous mode [ 819.472581][ T1330] veth0_vlan: left promiscuous mode [ 820.598750][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 820.623622][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 820.637311][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 820.652825][ T1330] team0 (unregistering): Port device team_slave_1 removed [ 820.693109][ T1330] team0 (unregistering): Port device team_slave_0 removed [ 820.830340][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 820.842234][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 820.851717][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 821.188234][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 822.104079][T13042] chnl_net:caif_netlink_parms(): no params data found [ 823.065883][ T5802] Bluetooth: hci2: command tx timeout [ 823.253663][T13075] loop6: detected capacity change from 0 to 512 [ 823.269050][T13073] loop3: detected capacity change from 0 to 2048 [ 823.363225][T13042] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.371334][T13042] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.382950][T13042] bridge_slave_0: entered allmulticast mode [ 823.397052][T13042] bridge_slave_0: entered promiscuous mode [ 823.445296][T13073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.455318][T13075] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.3027: corrupted in-inode xattr: invalid ea_ino [ 823.480870][T13042] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.488839][T13042] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.499350][T13042] bridge_slave_1: entered allmulticast mode [ 823.513770][T13042] bridge_slave_1: entered promiscuous mode [ 823.521781][T13075] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.3027: couldn't read orphan inode 15 (err -117) [ 823.572216][T13075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.637429][T13042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.666350][T13042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.716222][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.032852][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.060081][T13042] team0: Port device team_slave_0 added [ 824.086853][T13042] team0: Port device team_slave_1 added [ 824.249124][T13042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.259317][T13042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.293970][T13042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.437080][T13042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.444434][T13042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.476615][T13042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.155528][ T5802] Bluetooth: hci2: command tx timeout [ 825.504247][T13042] hsr_slave_0: entered promiscuous mode [ 825.514288][T13042] hsr_slave_1: entered promiscuous mode [ 826.873513][T13042] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 826.913388][T13104] trusted_key: syz.3.3038 sent an empty control message without MSG_MORE. [ 826.927551][T13042] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 827.017684][T13042] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 827.076971][T13042] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 827.159843][T13107] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 827.228568][ T5802] Bluetooth: hci2: command tx timeout [ 827.232891][T13109] loop6: detected capacity change from 0 to 164 [ 828.027385][T13117] loop9: detected capacity change from 0 to 8 [ 828.046879][T13042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.063686][T13117] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 828.069540][T13117] loop9: partition table partially beyond EOD, truncated [ 828.077297][T13117] loop9: p1 size 81768186 extends beyond EOD, truncated [ 828.164960][T13042] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.231731][ T1829] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.239500][ T1829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.342861][ T1829] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.350655][ T1829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.306534][ T5802] Bluetooth: hci2: command tx timeout [ 829.997986][T13143] loop2: detected capacity change from 0 to 256 [ 830.148253][T13143] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 830.174892][T13042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.010637][T13154] loop8: detected capacity change from 0 to 1024 [ 831.037990][T13154] EXT4-fs: Ignoring removed mblk_io_submit option [ 831.101722][T13154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.680447][T12771] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.060198][T13042] veth0_vlan: entered promiscuous mode [ 832.191738][T13042] veth1_vlan: entered promiscuous mode [ 832.552275][T13042] veth0_macvtap: entered promiscuous mode [ 832.658084][T13042] veth1_macvtap: entered promiscuous mode [ 832.861401][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.877254][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.888040][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.904079][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.915614][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.931963][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.944169][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.955686][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.979319][T13042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.012335][T13173] loop6: detected capacity change from 0 to 2048 [ 833.067449][T13175] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 833.108000][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.124135][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.138378][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.155334][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.165624][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.181581][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.193807][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.205273][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.228903][T13042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.333337][ T29] audit: type=1804 audit(1739550267.108:261): pid=13173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3064" name="/newroot/267/bus/bus" dev="loop6" ino=18 res=1 errno=0 [ 833.491488][T13042] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.500694][T13042] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.515125][T13042] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.534210][T13042] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.603224][T13175] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 833.620844][T13175] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 833.664129][T13175] Remounting filesystem read-only [ 833.720516][T10071] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 834.135232][T13182] loop3: detected capacity change from 0 to 256 [ 834.313824][T13182] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 834.444772][ T29] audit: type=1326 audit(1739550268.238:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.6.3067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 834.477253][ T29] audit: type=1326 audit(1739550268.238:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.6.3067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 834.506238][ T29] audit: type=1326 audit(1739550268.268:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.6.3067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 834.536350][ T29] audit: type=1326 audit(1739550268.268:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.6.3067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 834.565269][ T29] audit: type=1326 audit(1739550268.268:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.6.3067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 834.594595][ T29] audit: type=1326 audit(1739550268.278:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.6.3067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=184 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 834.624328][ T29] audit: type=1326 audit(1739550268.278:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.6.3067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 835.033847][T13194] loop2: detected capacity change from 0 to 128 [ 835.849263][T13209] lo: entered promiscuous mode [ 836.363224][T13215] loop6: detected capacity change from 0 to 128 [ 836.435312][T13215] EXT4-fs (loop6): Test dummy encryption mode enabled [ 836.526834][T13215] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 836.544331][T13215] ext4 filesystem being mounted at /271/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 836.558231][T13219] loop3: detected capacity change from 0 to 128 [ 836.678957][T13222] netem: incorrect gi model size [ 836.684296][T13222] netem: change failed [ 837.009802][T10071] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 837.099965][T13225] loop2: detected capacity change from 0 to 1024 [ 837.443427][ T63] hfsplus: b-tree write err: -5, ino 4 [ 838.373763][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.382094][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.487234][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.495517][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.647855][ T29] audit: type=1326 audit(1739550272.458:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.2.3089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 838.774689][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.781806][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 838.814467][ T29] audit: type=1326 audit(1739550272.518:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.2.3089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 838.843565][ T29] audit: type=1326 audit(1739550272.528:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.2.3089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 838.880228][ T29] audit: type=1326 audit(1739550272.538:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.2.3089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 838.909031][ T29] audit: type=1326 audit(1739550272.538:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.2.3089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 838.913115][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3088'. [ 838.932953][ T29] audit: type=1326 audit(1739550272.558:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.2.3089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 838.972637][ T29] audit: type=1326 audit(1739550272.558:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.2.3089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 839.001964][ T29] audit: type=1326 audit(1739550272.558:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.2.3089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=165 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 839.026881][ T29] audit: type=1326 audit(1739550272.558:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.2.3089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 839.055509][ T29] audit: type=1326 audit(1739550272.568:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13246 comm="syz.2.3089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7faf579 code=0x7ffc0000 [ 840.343505][T13260] loop6: detected capacity change from 0 to 512 [ 840.385701][T13260] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 840.490847][T13260] EXT4-fs (loop6): 1 truncate cleaned up [ 840.498835][T13260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 841.010010][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.055605][ T5838] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 841.282711][T13278] loop9: detected capacity change from 0 to 128 [ 841.299371][ T5838] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 841.311510][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.322959][ T5838] usb 3-1: Product: syz [ 841.328941][ T5838] usb 3-1: Manufacturer: syz [ 841.333770][ T5838] usb 3-1: SerialNumber: syz [ 841.398787][T13276] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 841.407204][T13276] FAT-fs (loop9): Filesystem has been set read-only [ 841.414044][T13276] syz.9.3100: attempt to access beyond end of device [ 841.414044][T13276] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 841.430079][T13276] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 841.438845][T13276] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 841.466950][ T5838] usb 3-1: config 0 descriptor?? [ 841.487768][ T5838] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 842.021390][T13285] loop8: detected capacity change from 0 to 256 [ 842.059993][T13286] hsr0: entered promiscuous mode [ 842.148543][T13285] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 842.310393][T13290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3106'. [ 842.317508][ T5838] usb 3-1: USB disconnect, device number 13 [ 842.887304][ T5838] kernel write not supported for file /amidi2 (pid: 5838 comm: kworker/1:3) [ 844.266314][T13317] tap0: tun_chr_ioctl cmd 1074025681 [ 844.416314][T13311] loop3: detected capacity change from 0 to 4096 [ 844.470953][T13311] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 844.795986][T13311] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 844.820062][T13311] ntfs3(loop3): Failed to load $Extend (-22). [ 844.826680][T13311] ntfs3(loop3): Failed to initialize $Extend. [ 846.357403][T13343] loop8: detected capacity change from 0 to 2048 [ 846.438437][T13343] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 846.447625][T13343] UDF-fs: Scanning with blocksize 512 failed [ 846.590699][T13343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 847.548847][T13364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.625923][T13364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.675882][T13364] bond0 (unregistering): Released all slaves [ 847.955401][ T5838] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 848.160783][ T5838] usb 10-1: unable to get BOS descriptor or descriptor too short [ 848.215714][ T5838] usb 10-1: not running at top speed; connect to a high speed hub [ 848.265489][ T5838] usb 10-1: config 17 has an invalid interface number: 8 but max is 1 [ 848.273970][ T5838] usb 10-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 848.284043][ T5838] usb 10-1: config 17 has no interface number 0 [ 848.293009][ T5838] usb 10-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 848.304028][ T5838] usb 10-1: config 17 interface 8 has no altsetting 0 [ 848.364715][ T5838] usb 10-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 848.375204][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.383545][ T5838] usb 10-1: Product: syz [ 848.388124][ T5838] usb 10-1: Manufacturer: syz [ 848.395368][ T5838] usb 10-1: SerialNumber: syz [ 848.634140][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3148'. [ 848.805539][T13367] loop9: detected capacity change from 0 to 512 [ 848.944616][T13367] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.966070][T13367] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 849.019634][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 849.019708][ T29] audit: type=1800 audit(1739550282.858:290): pid=13386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3151" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 849.082354][ T5838] usb 10-1: selecting invalid altsetting 0 [ 849.250553][ T5838] usb 10-1: USB disconnect, device number 2 [ 849.451085][T13390] loop8: detected capacity change from 0 to 256 [ 849.496675][T13390] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 849.579669][T13390] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 849.593506][T13390] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 849.605623][T13390] UDF-fs: Scanning with blocksize 512 failed [ 849.697713][T13390] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 849.760000][T13390] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 849.788082][T13042] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.033934][T13405] loop8: detected capacity change from 0 to 256 [ 851.152220][T13405] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 851.242993][T13405] exFAT-fs (loop8): valid_size(150994954) is greater than size(10) [ 851.275417][ T29] audit: type=1800 audit(1739550285.088:291): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3158" name="file1" dev="loop8" ino=108 res=0 errno=0 [ 852.034139][T13418] loop2: detected capacity change from 0 to 164 [ 852.141426][T13418] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 852.236856][T13418] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 852.665543][ T5841] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 852.774393][T13427] loop2: detected capacity change from 0 to 8 [ 852.865532][ T5841] usb 10-1: Using ep0 maxpacket: 32 [ 852.879922][ T5841] usb 10-1: config 4 has an invalid interface number: 128 but max is 0 [ 852.895935][ T5841] usb 10-1: config 4 has no interface number 0 [ 852.902374][ T5841] usb 10-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.914383][ T5841] usb 10-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.930232][ T5841] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 852.939864][ T5841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.063849][ T5841] hub 10-1:4.128: USB hub found [ 853.312852][ T5841] hub 10-1:4.128: 2 ports detected [ 853.323919][ T5841] hub 10-1:4.128: Using single TT (err -22) [ 853.655833][ T5841] hub 10-1:4.128: hub_hub_status failed (err = -71) [ 853.665786][ T5841] hub 10-1:4.128: config failed, can't get hub status (err -71) [ 853.742221][ T5841] usb 10-1: USB disconnect, device number 3 [ 854.655491][ T5841] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 854.835556][ T5841] usb 7-1: Using ep0 maxpacket: 16 [ 854.856550][ T5841] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 854.867141][ T5841] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 854.883728][ T5841] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 854.894256][ T5841] usb 7-1: config 0 interface 0 has no altsetting 0 [ 855.076975][ T5841] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 855.094849][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.108985][ T5841] usb 7-1: Product: syz [ 855.113489][ T5841] usb 7-1: Manufacturer: syz [ 855.123736][ T5841] usb 7-1: SerialNumber: syz [ 855.212758][T13456] input: syz0 as /devices/virtual/input/input29 [ 855.230849][ T5841] usb 7-1: config 0 descriptor?? [ 855.489127][ T5841] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input30 [ 855.501850][ T5129] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 855.542076][ T5129] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 855.553194][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3184'. [ 855.588766][T13460] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 855.602208][T13460] team0: Port device batadv1 added [ 855.666378][ T5129] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 855.696178][ T5841] usb 7-1: USB disconnect, device number 4 [ 855.696209][ T5129] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 856.030467][T13467] netlink: 'syz.2.3188': attribute type 10 has an invalid length. [ 856.272030][T13469] loop9: detected capacity change from 0 to 512 [ 856.365811][T13469] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 856.459324][T13469] EXT4-fs (loop9): orphan cleanup on readonly fs [ 856.524301][T13469] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.3189: Block bitmap for bg 0 marked uninitialized [ 856.632061][T13469] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 856.686846][T13469] EXT4-fs (loop9): 1 orphan inode deleted [ 856.694439][T13469] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 857.059310][T13042] EXT4-fs error (device loop9): ext4_readdir:261: inode #2: block 13: comm syz-executor: path /17/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 857.204693][T13042] EXT4-fs error (device loop9): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 857.277327][T13477] loop3: detected capacity change from 0 to 4096 [ 857.292141][T13477] ntfs3: Unknown parameter 'ÿÿÿÿÙͽœ…X*¶”‚}íÚ8(æÐ9x*VÑÄï^6Y9žŸàM×Ðݱatå¬*󀦹Ñ÷' [ 857.311636][T13042] EXT4-fs error (device loop9): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 857.731643][T13488] loop8: detected capacity change from 0 to 1024 [ 857.738877][ T5838] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 857.761838][T13488] EXT4-fs: Ignoring removed nobh option [ 857.783568][T13488] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 857.902717][T13042] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.919361][T13488] EXT4-fs error (device loop8): ext4_ext_check_inode:524: inode #11: comm syz.8.3199: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 857.924313][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 857.950351][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.961591][ T5838] usb 3-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.00 [ 857.971048][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.983520][ T5838] usb 3-1: config 0 descriptor?? [ 857.996892][ T77] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.018650][T13488] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.3199: couldn't read orphan inode 11 (err -117) [ 858.064827][T13488] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.200181][ T77] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.283800][T13488] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3199: Invalid block bitmap block 0 in block_group 0 [ 858.362182][T13488] Quota error (device loop8): write_blk: dquota write failed [ 858.368463][ T77] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.371124][T13488] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 858.371437][T13488] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.3199: Failed to acquire dquot type 0 [ 858.414904][T13495] loop3: detected capacity change from 0 to 64 [ 858.446424][T13496] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.3199: Invalid inode bitmap blk 137438953472 in block_group 0 [ 858.546832][ T5838] wacom 0003:056A:010F.0011: unbalanced collection at end of report description [ 858.597595][ T77] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.606162][ T5838] wacom 0003:056A:010F.0011: parse failed [ 858.614740][ T5838] wacom 0003:056A:010F.0011: probe with driver wacom failed with error -22 [ 858.795347][ T5838] usb 3-1: USB disconnect, device number 14 [ 859.002281][ T77] bridge_slave_1: left allmulticast mode [ 859.011156][ T77] bridge_slave_1: left promiscuous mode [ 859.020106][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.044687][ T4169] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm kworker/u8:20: Invalid inode table block 8589934593 in block_group 0 [ 859.084647][ T77] bridge_slave_0: left allmulticast mode [ 859.098830][ T77] bridge_slave_0: left promiscuous mode [ 859.105558][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.133737][T12771] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.676444][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.723656][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.749649][ T77] bond0 (unregistering): Released all slaves [ 860.173614][ T77] hsr_slave_0: left promiscuous mode [ 860.196220][ T77] hsr_slave_1: left promiscuous mode [ 860.204214][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.214299][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.226111][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.233798][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.276280][ T77] veth1_macvtap: left promiscuous mode [ 860.282057][ T77] veth0_macvtap: left promiscuous mode [ 860.288729][ T77] veth1_vlan: left promiscuous mode [ 860.294333][ T77] veth0_vlan: left promiscuous mode [ 860.938298][ T77] team0 (unregistering): Port device batadv1 removed [ 861.360546][T12403] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 861.381668][T12403] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 861.381933][ T77] team0 (unregistering): Port device team_slave_1 removed [ 861.415622][T12403] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 861.434852][T12403] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 861.452568][T12403] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 861.506123][T12403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 861.557982][ T77] team0 (unregistering): Port device team_slave_0 removed [ 861.958278][T13516] dccp_invalid_packet: P.Data Offset(10) too large [ 862.689986][T13512] chnl_net:caif_netlink_parms(): no params data found [ 863.007470][T13526] loop6: detected capacity change from 0 to 764 [ 863.117452][T13526] Symlink component flag not implemented [ 863.130235][T13526] Symlink component flag not implemented (129) [ 863.161193][T13526] rock: directory entry would overflow storage [ 863.168405][T13526] rock: sig=0x4f50, size=4, remaining=3 [ 863.174146][T13526] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 863.555309][T12403] Bluetooth: hci2: command tx timeout [ 864.033919][T13512] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.041982][T13512] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.049868][T13512] bridge_slave_0: entered allmulticast mode [ 864.061249][T13512] bridge_slave_0: entered promiscuous mode [ 864.120107][T13535] loop6: detected capacity change from 0 to 256 [ 864.138960][T13512] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.146895][T13512] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.154814][T13512] bridge_slave_1: entered allmulticast mode [ 864.165545][T13512] bridge_slave_1: entered promiscuous mode [ 864.250516][T13535] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 864.528373][T13512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.614723][T13512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.959736][T13512] team0: Port device team_slave_0 added [ 865.004519][T13543] loop3: detected capacity change from 0 to 256 [ 865.054736][T13512] team0: Port device team_slave_1 added [ 865.339560][T13549] loop6: detected capacity change from 0 to 64 [ 865.354282][T13512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.365566][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.392919][T13512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.517359][T13512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.524706][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.552009][T13512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.651725][T12403] Bluetooth: hci2: command tx timeout [ 865.938881][T13512] hsr_slave_0: entered promiscuous mode [ 865.958389][T13512] hsr_slave_1: entered promiscuous mode [ 866.164805][T13553] loop6: detected capacity change from 0 to 2048 [ 866.383734][T13553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.675550][T13563] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 866.731633][T13563] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 866.747621][T13563] EXT4-fs (loop6): This should not happen!! Data will be lost [ 866.747621][T13563] [ 866.758422][T13563] EXT4-fs (loop6): Total free blocks count 0 [ 866.764623][T13563] EXT4-fs (loop6): Free/Dirty block details [ 866.771428][T13563] EXT4-fs (loop6): free_blocks=2415919504 [ 866.777511][T13563] EXT4-fs (loop6): dirty_blocks=64 [ 866.782837][T13563] EXT4-fs (loop6): Block reservation details [ 866.789234][T13563] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 867.269551][ T1330] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 144 with error 28 [ 867.510158][T13512] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 867.550550][T13573] loop2: detected capacity change from 0 to 256 [ 867.552491][T13512] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 867.660737][T13573] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 867.666802][T13512] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 867.708313][T12403] Bluetooth: hci2: command tx timeout [ 867.739995][T13512] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 868.518826][T13581] loop8: detected capacity change from 0 to 256 [ 868.927656][T13512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.059155][T13512] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.147138][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.154797][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.332145][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.339866][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.358386][T13595] loop8: detected capacity change from 0 to 64 [ 869.376553][T13591] loop2: detected capacity change from 0 to 256 [ 869.795573][T12403] Bluetooth: hci2: command tx timeout [ 870.510149][T13605] loop2: detected capacity change from 0 to 512 [ 870.695855][T13605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.714698][T13605] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.845502][ T29] audit: type=1800 audit(1739550304.678:292): pid=13615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3247" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 870.873036][ T29] audit: type=1800 audit(1739550304.678:293): pid=13605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3247" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 871.015741][T13512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.282941][T10712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.514764][T13512] veth0_vlan: entered promiscuous mode [ 871.654910][T13512] veth1_vlan: entered promiscuous mode [ 871.978156][T13512] veth0_macvtap: entered promiscuous mode [ 872.059775][T13512] veth1_macvtap: entered promiscuous mode [ 872.219994][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.233541][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.248111][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.260266][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.273334][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.286973][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.300519][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.311341][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.331912][T13512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.456058][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.470461][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.483372][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.494234][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.510504][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.521328][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.531604][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.547735][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.563935][T13512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.612569][T13512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.623471][T13512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.638074][T13512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.647257][T13512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.752068][T13628] loop3: detected capacity change from 0 to 4096 [ 873.129479][T13639] loop2: detected capacity change from 0 to 128 [ 873.180880][T13637] loop6: detected capacity change from 0 to 512 [ 873.212912][T13639] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 873.280918][T13639] ext4 filesystem being mounted at /241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 873.350448][T13637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.672811][T10071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.793883][T10712] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 873.804584][T13646] random: crng reseeded on system resumption [ 875.434749][T13672] loop8: detected capacity change from 0 to 128 [ 875.502432][T13672] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 875.572511][T13672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 875.618439][T13674] loop6: detected capacity change from 0 to 128 [ 875.673717][T13674] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 875.740401][T13672] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only [ 875.753317][T13672] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null. [ 875.783493][T13674] UDF-fs: error (device loop6): udf_read_inode: (ino 93) failed !bh [ 875.794767][T13674] UDF-fs: Scanning with blocksize 512 failed [ 875.810682][T13674] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 875.881694][T13674] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 875.891891][T13674] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 875.904599][T13674] UDF-fs: Scanning with blocksize 1024 failed [ 875.959912][T13674] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 876.020282][T13674] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 876.034007][T13674] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 876.043026][T13674] UDF-fs: Scanning with blocksize 2048 failed [ 876.106433][T13674] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 876.133174][T13674] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 876.144515][T13674] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 876.152894][T13674] UDF-fs: Scanning with blocksize 4096 failed [ 876.164630][T13674] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 876.390442][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'. [ 877.491145][T13700] tun0: tun_chr_ioctl cmd 1074025681 [ 878.251820][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.260710][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.551667][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.560012][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.236947][T13715] loop3: detected capacity change from 0 to 4096 [ 879.250438][T13715] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 879.494817][T13715] ntfs3(loop3): ino=19, mi_enum_attr [ 879.500763][T13715] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 879.586695][T13721] loop2: detected capacity change from 0 to 512 [ 879.637625][T13721] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 879.645557][T13721] UDF-fs: Scanning with blocksize 512 failed [ 879.700397][T13721] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 879.711318][T13721] UDF-fs: Scanning with blocksize 1024 failed [ 879.764582][T13721] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 879.773035][T13721] UDF-fs: Scanning with blocksize 2048 failed [ 879.840585][T13721] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 879.931372][T13721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 880.638132][T13737] loop2: detected capacity change from 0 to 512 [ 880.670877][T13737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 880.753008][T13737] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.3294: corrupted in-inode xattr: invalid ea_ino [ 880.805830][T13737] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.3294: couldn't read orphan inode 15 (err -117) [ 880.843907][T13737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.105267][T13735] loop3: detected capacity change from 0 to 4096 [ 881.350332][T10712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.921416][T13765] loop8: detected capacity change from 0 to 1024 [ 883.395995][ T5029] hfsplus: b-tree write err: -5, ino 4 [ 883.749501][T13778] loop3: detected capacity change from 0 to 64 [ 883.998101][ T29] audit: type=1800 audit(1739550317.828:294): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3310" name="bus" dev="loop3" ino=21 res=0 errno=0 [ 884.283191][T13785] mmap: syz.0.3313 (13785): VmData 37507072 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 886.067361][T13808] loop9: detected capacity change from 512 to 511 [ 886.204493][T13811] loop0: detected capacity change from 0 to 1024 [ 886.263066][T13814] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3328'. [ 886.272504][T13814] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 888.647995][T13851] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3346'. [ 888.737799][T12777] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 888.913040][T12777] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 888.922407][T12777] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 888.932941][T12777] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 888.944588][T12777] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 888.956781][T12777] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 889.068842][T12777] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 889.080597][T12777] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 889.089220][T12777] usb 7-1: Product: syz [ 889.094088][T12777] usb 7-1: Manufacturer: syz [ 889.105671][T13847] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 889.186467][T12777] cdc_wdm 7-1:1.0: skipping garbage [ 889.192073][T12777] cdc_wdm 7-1:1.0: skipping garbage [ 889.211885][T12777] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 889.218149][T12777] cdc_wdm 7-1:1.0: Unknown control protocol [ 891.467588][T13890] netlink: 'syz.8.3364': attribute type 298 has an invalid length. [ 891.678888][ T5841] usb 7-1: USB disconnect, device number 5 [ 892.994557][T13912] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3374'. [ 893.174668][T13918] loop3: detected capacity change from 0 to 64 [ 894.322231][T13939] netlink: 888 bytes leftover after parsing attributes in process `syz.2.3385'. [ 894.332089][T13939] netlink: 137 bytes leftover after parsing attributes in process `syz.2.3385'. [ 894.347561][T13939] sch_tbf: burst 720 is lower than device lo mtu (65550) ! [ 894.765923][T13932] loop6: detected capacity change from 0 to 8192 [ 895.072127][T13947] input: syz1 as /devices/virtual/input/input31 [ 895.459628][T13952] loop0: detected capacity change from 0 to 512 [ 896.048042][T13961] loop3: detected capacity change from 0 to 256 [ 896.069816][T13961] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 896.304069][T13961] FAT-fs (loop3): Directory bread(block 64) failed [ 896.311116][T13961] FAT-fs (loop3): Directory bread(block 65) failed [ 896.321021][T13961] FAT-fs (loop3): Directory bread(block 66) failed [ 896.328804][T13961] FAT-fs (loop3): Directory bread(block 67) failed [ 896.335978][T13961] FAT-fs (loop3): Directory bread(block 68) failed [ 896.342794][T13961] FAT-fs (loop3): Directory bread(block 69) failed [ 896.346759][T13966] loop0: detected capacity change from 0 to 512 [ 896.352544][T13961] FAT-fs (loop3): Directory bread(block 70) failed [ 896.364071][T13961] FAT-fs (loop3): Directory bread(block 71) failed [ 896.371708][T13961] FAT-fs (loop3): Directory bread(block 72) failed [ 896.378719][T13961] FAT-fs (loop3): Directory bread(block 73) failed [ 896.448710][T13966] EXT4-fs: Ignoring removed mblk_io_submit option [ 896.514409][T13966] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3398: corrupted in-inode xattr: invalid ea_ino [ 896.607682][T13966] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3398: couldn't read orphan inode 15 (err -117) [ 896.642146][T13966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.709015][T13974] block device autoloading is deprecated and will be removed. [ 897.042584][T13512] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.039181][T13989] loop3: detected capacity change from 0 to 4096 [ 898.075553][T13989] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 898.149733][T13994] netdevsim netdevsim6 : renamed from netdevsim3 (while UP) [ 898.334376][T13989] ntfs3(loop3): ino=19, mi_enum_attr [ 898.342777][T13989] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 898.461107][ T29] audit: type=1800 audit(1739550332.288:295): pid=13989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3408" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 899.774459][T14011] loop8: detected capacity change from 0 to 2048 [ 899.843669][T14011] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 899.864677][T14011] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 899.873113][T14011] UDF-fs: Scanning with blocksize 512 failed [ 899.925902][T14011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 900.054643][T14018] loop2: detected capacity change from 0 to 1024 [ 900.095681][T14018] EXT4-fs: Ignoring removed nobh option [ 900.102469][T14018] EXT4-fs: Ignoring removed bh option [ 900.221611][T14018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.224122][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.241270][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.402752][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3421'. [ 900.529944][T10712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.783496][T14028] loop8: detected capacity change from 0 to 1024 [ 900.831471][T14028] EXT4-fs: Ignoring removed i_version option [ 900.944046][T14028] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 901.006769][T14028] EXT4-fs error (device loop8): ext4_xattr_inode_iget:440: inode #11: comm syz.8.3422: missing EA_INODE flag [ 901.082945][T14028] EXT4-fs error (device loop8): ext4_xattr_inode_iget:445: comm syz.8.3422: error while reading EA inode 11 err=-117 [ 901.231312][T14041] loop3: detected capacity change from 0 to 512 [ 901.294493][T14041] EXT4-fs: Ignoring removed i_version option [ 901.352821][T14041] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 901.507382][T12771] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.958929][T14049] loop8: detected capacity change from 0 to 128 [ 902.031380][T14049] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 902.085887][T14049] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 902.175231][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3433'. [ 902.424291][T12771] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 903.000374][T14067] loop0: detected capacity change from 0 to 2048 [ 903.076149][T14067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 903.795606][T14076] loop8: detected capacity change from 0 to 4096 [ 904.853378][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3450'. [ 905.382557][T14103] loop0: detected capacity change from 0 to 512 [ 905.580583][T14103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.596843][T14103] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 905.936697][T13512] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.087661][T14119] loop6: detected capacity change from 0 to 128 [ 906.158475][T14119] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 906.235379][T14119] ext4 filesystem being mounted at /355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 906.600067][T14125] loop0: detected capacity change from 0 to 2048 [ 906.696504][T14125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 906.770480][T10071] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 906.874101][ T5029] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 906.922021][ T5029] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 906.935548][ T5029] EXT4-fs (loop0): This should not happen!! Data will be lost [ 906.935548][ T5029] [ 906.945757][ T5029] EXT4-fs (loop0): Total free blocks count 0 [ 906.945849][ T5029] EXT4-fs (loop0): Free/Dirty block details [ 906.945927][ T5029] EXT4-fs (loop0): free_blocks=2415919504 [ 906.946015][ T5029] EXT4-fs (loop0): dirty_blocks=32 [ 906.946108][ T5029] EXT4-fs (loop0): Block reservation details [ 906.946184][ T5029] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 906.953499][ T5029] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2 with error 28 [ 907.361301][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3468'. [ 907.378542][T14140] hsr0: left promiscuous mode [ 907.402015][T14140] vlan2: entered promiscuous mode [ 907.410380][T14140] vlan2: entered allmulticast mode [ 907.810459][T14145] loop2: detected capacity change from 0 to 2048 [ 907.906215][T14145] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 910.820467][T14154] loop8: detected capacity change from 0 to 32768 [ 910.831635][T14179] netlink: 'syz.6.3486': attribute type 1 has an invalid length. [ 911.144906][T14154] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names [ 911.171153][T14154] bcachefs (loop8): initializing new filesystem [ 911.278342][T14154] bcachefs (loop8): going read-write [ 911.319100][T14190] ref_ctr_offset mismatch. inode: 0x762 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 911.332336][T14154] bcachefs (loop8): marking superblocks [ 911.494289][ T5029] ===================================================== [ 911.504528][ T5029] BUG: KMSAN: uninit-value in bch2_alloc_v4_validate+0x73f/0x1c10 [ 911.512811][ T5029] bch2_alloc_v4_validate+0x73f/0x1c10 [ 911.519171][ T5029] bch2_bkey_val_validate+0x357/0x530 [ 911.524723][ T5029] validate_bset_keys+0x20e3/0x2350 [ 911.533000][ T5029] validate_bset_for_write+0x2b3/0x410 [ 911.538798][ T5029] __bch2_btree_node_write+0x5436/0x6870 [ 911.544625][ T5029] bch2_btree_node_write_trans+0x2fd/0x890 [ 911.550998][ T5029] btree_interior_update_work+0x3c02/0x48c0 [ 911.557500][ T5029] process_scheduled_works+0xc1a/0x1e80 [ 911.566173][ T5029] worker_thread+0xea7/0x14f0 [ 911.571968][ T5029] kthread+0x6b9/0xef0 [ 911.576610][ T5029] ret_from_fork+0x6d/0x90 [ 911.581216][ T5029] ret_from_fork_asm+0x1a/0x30 [ 911.586387][ T5029] [ 911.588808][ T5029] Uninit was stored to memory at: [ 911.594118][ T5029] bch2_alloc_v4_validate+0x215/0x1c10 [ 911.602510][ T5029] bch2_bkey_val_validate+0x357/0x530 [ 911.609615][ T5029] validate_bset_keys+0x20e3/0x2350 [ 911.615347][ T5029] validate_bset_for_write+0x2b3/0x410 [ 911.621543][ T5029] __bch2_btree_node_write+0x5436/0x6870 [ 911.630407][ T5029] bch2_btree_node_write_trans+0x2fd/0x890 [ 911.636522][ T5029] btree_interior_update_work+0x3c02/0x48c0 [ 911.636717][T12777] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 911.642553][ T5029] process_scheduled_works+0xc1a/0x1e80 [ 911.642701][ T5029] worker_thread+0xea7/0x14f0 [ 911.663869][ T5029] kthread+0x6b9/0xef0 [ 911.668260][ T5029] ret_from_fork+0x6d/0x90 [ 911.673865][ T5029] ret_from_fork_asm+0x1a/0x30 [ 911.679301][ T5029] [ 911.681804][ T5029] Uninit was stored to memory at: [ 911.689948][ T5029] bch2_sort_keys_keep_unwritten_whiteouts+0x14ab/0x1840 [ 911.697329][ T5029] __bch2_btree_node_write+0x3b3f/0x6870 [ 911.703169][ T5029] bch2_btree_node_write_trans+0x2fd/0x890 [ 911.709314][ T5029] btree_interior_update_work+0x3c02/0x48c0 [ 911.718174][ T5029] process_scheduled_works+0xc1a/0x1e80 [ 911.724505][ T5029] worker_thread+0xea7/0x14f0 [ 911.729512][ T5029] kthread+0x6b9/0xef0 [ 911.733755][ T5029] ret_from_fork+0x6d/0x90 [ 911.738504][ T5029] ret_from_fork_asm+0x1a/0x30 [ 911.743444][ T5029] [ 911.748694][ T5029] Uninit was created at: [ 911.753180][ T5029] ___kmalloc_large_node+0x22c/0x370 [ 911.758759][ T5029] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 911.764673][ T5029] __kmalloc_node_noprof+0xc96/0x1250 [ 911.770390][ T5029] __kvmalloc_node_noprof+0xc0/0x2d0 [ 911.779443][ T5029] __bch2_btree_node_mem_alloc+0x2be/0xa80 [ 911.786021][ T5029] bch2_fs_btree_cache_init+0x4f0/0xb60 [ 911.791818][ T5029] bch2_fs_open+0x4d84/0x5ba0 [ 911.796889][ T5029] bch2_fs_get_tree+0x98a/0x24e0 [ 911.802056][ T5029] vfs_get_tree+0xb1/0x5a0 [ 911.809684][ T5029] do_new_mount+0x71f/0x15e0 [ 911.814476][ T5029] path_mount+0x742/0x1f10 [ 911.819276][ T5029] __se_sys_mount+0x71f/0x800 [ 911.824681][ T5029] __ia32_sys_mount+0xe3/0x150 [ 911.829797][ T5029] ia32_sys_call+0x260e/0x4180 [ 911.834748][ T5029] __do_fast_syscall_32+0xb0/0x110 [ 911.842876][ T5029] do_fast_syscall_32+0x38/0x80 [ 911.848054][ T5029] do_SYSENTER_32+0x1f/0x30 [ 911.852729][ T5029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 911.859411][ T5029] [ 911.861843][ T5029] CPU: 0 UID: 0 PID: 5029 Comm: kworker/u8:22 Tainted: G W 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 911.877335][ T5029] Tainted: [W]=WARN [ 911.881264][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 911.892496][ T5029] Workqueue: btree_update btree_interior_update_work [ 911.899971][ T5029] ===================================================== [ 911.907521][T12777] usb 3-1: Using ep0 maxpacket: 16 [ 911.914904][ T5029] Disabling lock debugging due to kernel taint [ 911.921296][ T5029] Kernel panic - not syncing: kmsan.panic set ... [ 911.927849][ T5029] CPU: 0 UID: 0 PID: 5029 Comm: kworker/u8:22 Tainted: G B W 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 911.940475][ T5029] Tainted: [B]=BAD_PAGE, [W]=WARN [ 911.945614][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 911.956180][ T5029] Workqueue: btree_update btree_interior_update_work [ 911.963117][ T5029] Call Trace: [ 911.966512][ T5029] [ 911.969560][ T5029] dump_stack_lvl+0x216/0x2d0 [ 911.974422][ T5029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 911.980467][ T5029] dump_stack+0x1e/0x24 [ 911.984786][ T5029] panic+0x4e2/0xcf0 [ 911.988890][ T5029] ? kmsan_get_metadata+0x121/0x1c0 [ 911.994310][ T5029] kmsan_report+0x2c7/0x2d0 [ 911.998997][ T5029] ? __msan_memcpy+0x108/0x1c0 [ 912.003938][ T5029] ? btree_interior_update_work+0x3c02/0x48c0 [ 912.010205][ T5029] ? ret_from_fork+0x6d/0x90 [ 912.014971][ T5029] ? ret_from_fork_asm+0x1a/0x30 [ 912.020088][ T5029] ? __msan_warning+0x95/0x120 [ 912.025032][ T5029] ? bch2_alloc_v4_validate+0x73f/0x1c10 [ 912.030880][ T5029] ? bch2_bkey_val_validate+0x357/0x530 [ 912.036588][ T5029] ? validate_bset_keys+0x20e3/0x2350 [ 912.042125][ T5029] ? validate_bset_for_write+0x2b3/0x410 [ 912.047929][ T5029] ? __bch2_btree_node_write+0x5436/0x6870 [ 912.053911][ T5029] ? bch2_btree_node_write_trans+0x2fd/0x890 [ 912.060060][ T5029] ? btree_interior_update_work+0x3c02/0x48c0 [ 912.066319][ T5029] ? process_scheduled_works+0xc1a/0x1e80 [ 912.072247][ T5029] ? worker_thread+0xea7/0x14f0 [ 912.077253][ T5029] ? kthread+0x6b9/0xef0 [ 912.081650][ T5029] ? ret_from_fork+0x6d/0x90 [ 912.086414][ T5029] ? ret_from_fork_asm+0x1a/0x30 [ 912.091525][ T5029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 912.097532][ T5029] ? kmsan_get_metadata+0x13e/0x1c0 [ 912.102923][ T5029] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 912.109440][ T5029] ? kmsan_get_metadata+0x13e/0x1c0 [ 912.114831][ T5029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 912.120843][ T5029] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 912.126860][ T5029] ? kmsan_get_metadata+0x13e/0x1c0 [ 912.132259][ T5029] ? kmsan_internal_memmove_metadata+0x17b/0x230 [ 912.138776][ T5029] ? kmsan_get_metadata+0x13e/0x1c0 [ 912.144166][ T5029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 912.150171][ T5029] __msan_warning+0x95/0x120 [ 912.154936][ T5029] bch2_alloc_v4_validate+0x73f/0x1c10 [ 912.160640][ T5029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 912.166660][ T5029] ? __pfx_bch2_alloc_v4_validate+0x10/0x10 [ 912.172778][ T5029] bch2_bkey_val_validate+0x357/0x530 [ 912.178340][ T5029] validate_bset_keys+0x20e3/0x2350 [ 912.183794][ T5029] validate_bset_for_write+0x2b3/0x410 [ 912.189444][ T5029] __bch2_btree_node_write+0x5436/0x6870 [ 912.195256][ T5029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 912.201266][ T5029] ? kmsan_get_metadata+0x13e/0x1c0 [ 912.206704][ T5029] bch2_btree_node_write_trans+0x2fd/0x890 [ 912.212707][ T5029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 912.218820][ T5029] btree_interior_update_work+0x3c02/0x48c0 [ 912.224956][ T5029] ? btree_interior_update_work+0x39b6/0x48c0 [ 912.231222][ T5029] ? __pfx_btree_interior_update_work+0x10/0x10 [ 912.237757][ T5029] process_scheduled_works+0xc1a/0x1e80 [ 912.243570][ T5029] worker_thread+0xea7/0x14f0 [ 912.248422][ T5029] kthread+0x6b9/0xef0 [ 912.252670][ T5029] ? __pfx_worker_thread+0x10/0x10 [ 912.257977][ T5029] ? __pfx_kthread+0x10/0x10 [ 912.262753][ T5029] ret_from_fork+0x6d/0x90 [ 912.267356][ T5029] ? __pfx_kthread+0x10/0x10 [ 912.272119][ T5029] ret_from_fork_asm+0x1a/0x30 [ 912.277073][ T5029] [ 912.280366][ T5029] Kernel Offset: disabled [ 912.284764][ T5029] Rebooting in 86400 seconds..