last executing test programs: 25m21.375229665s ago: executing program 32 (id=415): r0 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x400000008c403, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x22, 0x0, 0x6417, r1, 0x0, 0x0, 0x6ed}]) 46.462371387s ago: executing program 4 (id=6851): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x2084811, 0x0, 0xf9, 0x0, &(0x7f0000000240)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 46.453280851s ago: executing program 9 (id=6852): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0xe, 0x4a}) 45.952492638s ago: executing program 9 (id=6854): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x800800, &(0x7f0000000a40)=ANY=[@ANYBLOB="666d61736b3d30303030303030303030303030303030303030303030342c696f636861727365743d6d616363656e746575726f2c7379735f747a2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c696f636861727365743d6d6163726f6d616e2c756d61736b3d30303030303030303030303030303030303030303137372c6b6565705f6c6173745f646f74732c7a65726f5f73697a655f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303030303031312c6b6565705f6c6173745f646f74732c0056338c7da3f354dce83dea7425c2e88ef1147337680f55d7479343210fc866674e4f82847f6aafef03bff03d56724576f2cecd2305ea2d335ef1fef62bcda3c459861833478c0c370904fc31d0b5c3c1aee0186d6219d65575268a142d298056411641882b30919bad04656fc9b4bf65e5676d4e47060e571a2d06f09b7408b938efaf505cfbeda44539fc21edbe5468fa6029e46e5b3560ef2d936de9c41edc9d5c2756765c652da7729bc61c30ecfc7ef2be7c6ada"], 0x1, 0x153e, &(0x7f0000002080)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 45.015144088s ago: executing program 9 (id=6858): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 44.202438372s ago: executing program 9 (id=6862): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16], 0x20}}, 0x40000c4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000540), 0x41, 0x1) 41.49782748s ago: executing program 37 (id=6862): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16], 0x20}}, 0x40000c4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000540), 0x41, 0x1) 41.373840158s ago: executing program 4 (id=6868): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x7) 40.78492022s ago: executing program 4 (id=6870): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x800800, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x153e, &(0x7f0000002080)="$eJzs3AucTlW7APDnWWvtMSS9TXIZ1lrP5k0uyyRJLklySZIkSXJLSJrkk4TEkFvSkITkMiSXISSXiUnjfr9fEpKkSZKQ3JJ1flMcdeo7X9/Xd47zO/P8f7/3Zz3v2s/aa7/P3vblnZlvugyt2bhWtYZEBH8J/vJPEgDEAsBAALgGAAIAKBdXLi6rP6fEpL+2Evbv9VDqlZ4Bu5K4/tkb1z974/pnb1z/7I3rn71x/bM3rn/2xvVnLDvbPL3gtfzKvi9+/p+d8fn//5HM0mO/WFv6+q4AMX82heufvXH9/98K/sxCXP/sjeufXcVe6Qmw/wP4+M8OcvzdHq5/9sb1Zyw7u5LPnpP+5HJX/aX1yP+2HyLZ+zuQK73/McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLHs74yxQAXGpf6XkxxhhjjDHGGGPs38fnuNIzYIwxxhhjjDHG2P88BAESFAQQAzkgFnJCLhAAcDXkgWsgAtdCHFwHeeF6yAf5oQAUhHgoBIVBgwELBCEUgaIQhRugGNwIxaEElIRS4KA0JMBNUAZuhrJwC5SDW6E83AYVoCJUgspwO1SBO6Aq3AnV4C6oDjWgJtSCu6E23AN14F6oC/dBPbgf6sMD0AAehIbwEDSCh6ExPAJN4FFoCs2gObSAlv9S/gvQA16EntALkqA39IGXoC/0g/4wAAbCyzAIXoHB8CokwxAYCq/BMHgdhsMbMAJGwih4E0bDWzAGxsI4GA8pMAEmwtswCd6ByTAFpsI0SIXpMAPehZkwC2bDezAH3oe5MA/mwwJIgw9gISyCdPgQFsNHkAFLYCksg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yD7bADdsLHsAs+gd2wB/b+Z/3+mfzTv8r/FPZBVwQEFChQocIYjMFYjMVcmAtzY27Mg3kwghGMwzjMi3kxH+bDAlgA4zEeC2NhNGiQkLAIFsEoRrEYFsPiWBxLYkl06DABE7AM3oxlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78a7sTfWwTpYF+tiPax36fEUNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsBW2xtbYFttiO2yH7bE9JmIidsAO2BE7YifshJ2xM3bBLtgVu2G3zBdyAL6IL2IvrC56Yx/sg30xOUd/HIAD8GUchK/gK/gqJuMQHIqv4Wv4Og7HUzgCR+IoHIVVxFs4BsciifGYgik4ESfiJJyEk3EKTsFpmIrTcQbOwJk4C2fhezgH38f3cR7OwwWYhmm4EBdhOqbjYjyNGbgEl+IyXI4rcDmuwtW4CtfiOlyLG3ADbsJNuAW34DbchjtwB36MCgA/wT24B5NxH+7D/bgfD+ABPIgHMRMz8RAewsN4GI/gETyKR/EYHscTeBxP4kk8hafxDJ7Bc3gOz+Nz8V81+rjEmmQQWZRQIkbEiFgRK3KJXCK3yC3yiDwiIiIiTsSJvCKvyCfyiQKigIgX8aKwKCyMMIJEGAMAIiqiopgoJoqL4qKkKCmccCJBJIgyoowoK8qKcuJWUV7cJiqIiqKNqywqiyqirasq7hTVRDVRXdQQNUUtUUvUFrVFHVFH1BV1RT1RT9QXD4gGojf2x4dEVmUaiyHYRAzFpqKZkBePgFZiOLYWbURb8YQYiSOwvWjlEsXTooMYgx3F38RYfFZ0FuOxi3hedBXdRHfxgughWrueopeYjL1FHzEN+4p+or8YIGZiDfEezslZU7wqksUQMVS8Jhbg62K4eEOMECPFKPGmGC3eEmPEWDFOjBcpYoKYKN4Wk8Q7YrKYIqaKaSJVTBczxLtippglZov3xBzxvpgr5on5YoFIEx+IhWKRSBcfisXiI5EhloilYplYLlaIlWKVWC3WiLVinVgvNoiNYpPYLLaIrWKb2C52iJ3iY7FLfCJ2iz1ir/hU7BOfif3ic3FAfCEOii9FpvhKHBJfi8PiG3FEfCuOiu/EMXFcnBDfi5PiB3FKnBZnxFlxTvwozoufxAXhBUiUQkqpZCBjZA4ZK3PKXPIqmVsGFz/da2WcvE7mldfLfDK/LCALynhZSBaWWhppJclQFpFFZVTeIIvJG2VxWUKWlKWkk6VlgrxJlpE3y7LyFllO3irLy9tkBVlRVpKV5e2yirxDQuSXdVSXNWRNWUveLZPgHllH3ivryvtkPXm/rC8fkA3kg7KhfEg2kg/LxvIR2UQ+KpvKZrK5bCFbysdkK/m4bC3byLbyCdlOPinby6dkonxadpD+4i7yrOwsn5Nd5POyq+wmu8uf5AXpZU/ZS0JvkH3kS7Kv7Cf7ywFyoHxZDpKvyMHyVZksh8ih8jU5TL4uh8s35Ag5Uo6Sb8rR8i05Ro6V4+R4mSInyInybTlJviMnyylyqpwmU+V02f/iSLOl/If5b/86P+vUK6fLwT+vfZPcLLfIrXKb3C53yJ3yY7lL7pK75W65V+6V++Q+uV/ulwfkAXlQHpSZMlMekofkYXlYHpFH5FF5VB6Tx+VZ+b08KX+Qp+RpeVqelefkOXn+4mcACpVQUikVqBiVQ8WqnCqXukrlVlerPOoaFVHXqjh1ncqrrlf5VH5VQBVU8aqQKqy0MsoqUqEqooqqqLoBL+4wqqQqpZwqrRLUTf9MviqmblTFVYnf5F+aX9LfmV9L1VK1Uq1Ua9VatVVtVTvVTrVX7VWiSlQdVAfVUXVUnVQn1Vl1Vl1UF9VVdVXdVXfVQ/VQPVVPlaSSVB/1kuqr+qn+aoAaqF5Wg9QgNVgNVskqWQ1VQ9UwNUwNV8PVCDVCjVKj1Gg1Wo1RY9Q4NU6lqBQ1UU1Uk9QkNVlNVlPVVJWqUtUMNUPNVDPVbDVbzVFz1Fw1V81X81WaSlML1UKVrtLVYrVYZaglaolappapFWqFWqVWqTVqjVqn1qkNaoPKUJvVZrVVbVXb1Xa1U+1Uu9QutVvtVnvVXrVP7VP71X51QB1QB9VBlaky1SF1SB1Wh9URdUQdVUfVMXVMnVAn1El1Up1Sp9QZdUadU+fUeXVeXVAXFAQCRCACFaggJogJYoPYIA/kCnIHuYM8QZ4gEkSCuCAuyBtcH+QL8gcFgoJBfFAoKBzowAQ2EBeLHg1uCIoFNwbFgxJByaBU4ILSQUJwU1AmuDkoG9wSlAtuDcoHtwUVgopBpaBycHtQJbgjqBrcGVQL7gqqBzWCmkGt4O6gdnBPUCe4N6gb3BfUC+4P6gcPBA2CB4OGwUNBo+DhoHHwSNAkeDRoGjQLmgctgpZ/cfxcvxnf+1P5H3c9dS+dpHvrPvol3Vf30/31AD1Qv6wH6Vf0YP2qTtZD9FD9mh6mX9fD9Rt6hB6pR+k39Wj9lh6jx+pxerxO0RP0RP22nqTf0ZP1FD1VT9Operqeod/VM/UsPVu/p+fo9/VcPU/P1wt0mv5AL9SLdLr+UC/WH+kMvUQv1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/UH+td+hO9W+/Re/Wnep/+TO/Xn+sD+gt9UH+pM/VX+pD+Wh/W3+gj+lt9VH+nj+nj+oT+Xp/UP+hT+rQ+o8/qc/pHfV7/pC9on3Vxn3V6N8ooE2NiTKyJNblMLpPb5DZ5TB4TMRETZ+JMXpPX5DP5TAFTwMSbeFPYFDZZyJApYoqYqImaYqaYKW6Km5KmpHHGmQSTYMqYMqasKWvKmXKmvClvKpgKppKpZG43t5s7zB3mTnOnucvcZWqYGqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqapqa5aW5ampamlWllWpvWpq1pa9qZdqa9aW8STaLpYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6miSTZPqYPqav6Wv6m/5moBloBplBZrAZbJJNshlqhpphZpgZboabEWakGZV1oWreMmPMWDPOjDcpJsVMNBPNJDPJTDaTzVQz1aSaVDPDzDAzzUwz28w2c8wcM9fMNfPNfJNm0sxCs9Ckm3Sz2Cw2GSbDLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDloMk2mOWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJv/F86U3sTanzWWvsrnt1TaPvcb+17iALWjjbSFb2Gqbz+b/TWystcVtCVvSlrLOlrYJ9qbfxRVsRVvJVra32yr2Dlv1d3Fte4+tY++1de19tpa9+zdxPXu/rW8fsQ0QAWwz28i2sI3tI7aJfdQ2tc1sc9vCtrNP2vb2KZton7Yd7DO/ixfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbbIb+LR9k37Wj7lh1jx9pxdvzv4ql2mk210+0M+66daWf9Lk6zH9g5Nt3OtfPsfLvg5zhrTun2Q7vYfmQzbABL7TK73K6wK+2qi3PNulvfYDfaTXaX/cRutdvsdrvD7rx0IWz32L32U7vPfmYP2a/tAfuFPWiP2Ez71c9x1vYdsd/ao/Y7e8wetyfs9/ak/UFdys7a9u/tT/aC9RYICUiSooBiKAfFUk7KRVdRbrqa8tA1FKFrKY6uo7x0PeWj/FSAClI8FaLCpMmQJaKQilBRitINdGl6JakUOSpNCXQTlaGbqSzdQuXoVipPt1EFqkiVqDLdTlXoDqpKd1I1uouqUw2qSbXobqpN91Adupfq0n1Uj+6n+vQANaAHqSE9RI3oYWpMj1ATepSaUjNqTi2oJT1Grehxak1tqC09Qe3oSWpPT1EiPU0d6BnqSH+jTvQsdabnqAs9T12pG3WnF6gHvUg9qRclUW/qQy9RX+pH/WkADaSXaRC9QoPpVUqmITSUXqNh9DoNpzdoBI2kUfQmjaa3aAyNpXE0nlJoAk2kt2kSvUOTaQpNpWmUStNpBr1LM2kWzab3aA69T3NpHs2nBZRGH9BCWkTp9CEtpo8og5bQUlpGy2kFraRVtJrW0FpaR+tpA22kTbSZttBW2kbbaQftpI9pF31Cu2kP7aVPaR99RvvpczpAX9BB+pIy6Ss6RF/TYfqGjtC3vhd9R8foOJ2g7+kk/UCn6DSdobN0jn6k8/QTXSBPEGIoQhmqMAhjwhxhbJgzzBVeFeYOrw7zhNeEkfDaMC68LswbXh/mC/OHBcKCYXxYKCwc6tCENqQwDIuERcNoeENYLLwxLB6WCEuGpUIXlg4TwpvCMuHNYdnwlrBceGtYPrwtrBBWDB+5r3J4e1glvCOsGt4ZVgvvCquHNcKaYa3w7rB2eE9YJ7w3rBveF5YN7w/rhw+EDcIHw4bhQ2Gj8OGwcfhI2CR8NGwaNgubhy3CluFjYavw8bB12CZsGz4RtgufDNuHT4WJ4dNhh/CZn/vvX/T3+5PC3mGf8KXwpdD7e+X86IJoWvSD6MLoomh69MPo4uhH0YzokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kao97VygEMnnHTKBS7G5XCxLqfL5a5yud3VLo+7xkXctS7OXefyuutdPpffFXAFXbwr5Ao77YyzjlzoiriiLupucMXcja64K+FKulLOudIuwbVwLV1L18o97lq7Nq6te8I94Z50T7qn3FPuadfBPeM6ur+5Tu5Z19k9555zz7uurpvr7l5wPdyEPL8ck0muj+vj+rq+rr/r7wa6gW6QG+QGu8Eu2SW7oW6oG+aGueFuuBvhRrhRbpQb7Ua7MW6MG+fGuRSX4ia6iW6Sm+Qmu8luqpvqUl2qm+FmuJlupqsy65e1zHVz3Xw336W5NLfQZV0zprvFbrHLcBluqVvqlrvlbqVb6Va71W6tW+vWu/Vuo9voNrvNbqvb6ra77W6n2+l2uV1ut7/ml0HdPrff7XcH3AF30H3pMt1X7pD72h1237gj7lt31H3njrnj7oT73p10P7hT7rQ74866c+5Hd9795C4471IiEyITI29HJkXeiUyOTIlMjUyLpEamR2ZE3o3MjMyKzI68F5kTeT8yNzIvMj+yIJIW+SCyMLIokh75MLI48lEkI7IksjSyLLI8siLifaGtoS/ii/qov8EX8zf64r6EL+lLeedL+wR/ky/jb/Zl/S2+nL/Vl/e3+Qq+oq/kH/VNfTPf3LfwLf1jvpV/3Lf2bXxb/4Rv55/07f1TPtE/7Tv4Z3xH/zffyT/rO/vnfBf/vO/qu/nu/gXfw7/oe/pePsn39n38S76v7+f7+wF+oH/ZD/Kv+MH+VZ/sh/ih/jU/zL/uh/s3/Ag/0o+KedOPvnSLDON9ip/gJ/q3/ST/jp/sp/ipfppP9dP9DP+un+ln+dn+PT/Hv+/n+nl+vl/g0/wHfqFf5NP9h36x/8hn+CWXHkr6lX6VX+3X+LV+nV/vN/iNfpPf7Lf4rX6b3+53+J3+Y7/Lf+J3+z1+r//U7/Of+f3+c3/Af+EP+i99pv/KH/Jf+8P+G3/Ef+uP+u/8MX/cn/Df+5P+B3/Kn/Zn/Fl/zv/oz/uf/AX+nTXGGGOMsT9lwuWm+G3PL4/ze/9BjvjVwn0A4OptBTN/3Z91Rbk+3y/tfiK+XQQAnu7V5aFLr+rVk5KSLi6bISEoOg/g0jdBWWLgcrwE2sKTkAhtoMwfzr+f6HaO/sH40VsBcv0qJxYux5fH/xwAk/5g/MeeGLWwfHgm7r8Zfx5A8aKXc3LC5XgJtP35+UobKPt35p+/1T+Yf84vUgBa/yonN1yOL88/AR6HZyDxN0syxhhjjDHGGGO/6Ccqdbp0/3npJz7/6P48Xl3OyQGX4390f84YY4wxxhhjjLEr79lu3Z96LDGxTad/vlH1X8r6040m8D81Mjf+sOE9wKV3FAD8xQEBshryf3MrtvxRVw4A+LeuK/niofNfu5af9QH83yjlv94Y95/vXOH/mBhjjDHGGGP/dpev/n/7vrpSE2KMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxrKh/42/K3alt5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v4jAAD//5gO+aE=") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 39.443862305s ago: executing program 4 (id=6875): io_uring_setup(0x5f1e, &(0x7f0000000000)={0x0, 0xab92, 0x40}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 37.937926569s ago: executing program 4 (id=6877): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @null, @bcast, @null]}, 0x48) close(r0) 35.241076883s ago: executing program 38 (id=6877): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @null, @bcast, @null]}, 0x48) close(r0) 7.428594527s ago: executing program 6 (id=7000): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) 6.874828287s ago: executing program 6 (id=7006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 6.112686804s ago: executing program 6 (id=7010): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = getpid() kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 5.902868788s ago: executing program 1 (id=7012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp-reno\x00', 0xb) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x3, 0xf4b, @remote, 0x3}, 0x1b) 5.637885556s ago: executing program 3 (id=7013): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) msgsnd(0x0, 0x0, 0x0, 0x0) 5.52080611s ago: executing program 6 (id=7014): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 5.520538982s ago: executing program 8 (id=7015): mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5.162783026s ago: executing program 3 (id=7016): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000006442, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x0, r0, 0x0, 0xfe00}]) 5.105827435s ago: executing program 8 (id=7017): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 5.068543665s ago: executing program 1 (id=7019): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/2, 0x2) 4.995444889s ago: executing program 6 (id=7020): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000400)={[{@nodiscard}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@grpjquota}, {@errors_remount}, {@init_itable}, {@dax_inode}]}, 0x1, 0x4c5, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0xf8}}, {@abort}, {@nombcache}, {@noinit_itable}]}, 0x1, 0x465, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 4.632596472s ago: executing program 3 (id=7021): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.624296833s ago: executing program 0 (id=7022): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 4.488452406s ago: executing program 8 (id=7023): ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x1, 0x201) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000000c0)={0x2, 0x1, @start={0x1, 0x1}}) 4.386081659s ago: executing program 6 (id=7024): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x26004085, &(0x7f0000000840)={0x11, 0x4, r1, 0x1, 0xfe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) 4.212637144s ago: executing program 0 (id=7025): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x50, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x880) 4.196863616s ago: executing program 1 (id=7026): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x41) 4.047949807s ago: executing program 8 (id=7027): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000051118010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000064000000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) 2.572027372s ago: executing program 39 (id=7024): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x26004085, &(0x7f0000000840)={0x11, 0x4, r1, 0x1, 0xfe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) 2.528628568s ago: executing program 8 (id=7029): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1844, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x880, 0xe, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x81, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "8d826a6d"}]}}, 0x0}, 0x0) 2.51518897s ago: executing program 3 (id=7030): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000000000000a004e2100000000fc01000000000000000000000000000100000066ca4d4c58416d9d17f3dd4b54e54e99f4ad2a4e5b0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002438e2b9dc8f5b3b5386a681060000000000000000000000000000000001000000010000000a"], 0x110) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) pidfd_send_signal(r0, 0x40, &(0x7f0000000380)={0x3c, 0x3, 0x7f}, 0x0) 2.49291636s ago: executing program 1 (id=7031): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) 2.490595757s ago: executing program 0 (id=7032): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1d4, &(0x7f00000006c0)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff) 1.804861005s ago: executing program 3 (id=7033): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f0000003a00)=[{&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0) 1.804416218s ago: executing program 0 (id=7034): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) tee(r1, r1, 0x7, 0xa) 1.750194055s ago: executing program 1 (id=7035): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000400)={[{@nodiscard}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@grpjquota}, {@errors_remount}, {@init_itable}, {@dax_inode}]}, 0x1, 0x4c5, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0xf8}}, {@abort}, {@nombcache}, {@noinit_itable}]}, 0x1, 0x465, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.190078919s ago: executing program 3 (id=7036): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) 862.826389ms ago: executing program 0 (id=7037): r0 = socket$l2tp6(0xa, 0x2, 0x73) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0x4}, 0x20) 395.511816ms ago: executing program 0 (id=7038): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) recvmmsg(r0, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000000c0)=""/36, 0x24}, {0x0}], 0x2}, 0xd}], 0x1, 0x0, 0x0) 339.02944ms ago: executing program 1 (id=7039): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x23b, &(0x7f00000005c0)="$eJzs3TFoJFUcBvBvZnc9926RUxtBUEFENBDOTrA5G4UDCUFEUCEiYqMkQkywS6xsLLRWSWUTxM5oKWmCjSJYRU0RG0GDhcFCi5XZSSSa1Ygbd+Tm94PZndl9b/5vmPnebjNMgNa6nORqkk6SmSS9JMXJBnfVy+WjzY3+zkIyHD7+YzFqV2/XjvtdSrKe5MEk22WRF7vJ6tbT+z/vPnrvGyu9e97beqo/1YM8crC/99jhu3Ovf3jtgdXPv/x+rsjVDP5wXOevGPNZt0hu+S+K/U8U3aZHwD8x/+oHX1W5vzXJ3aP891KmPnlvLt+w3cv97/xV37d++OL2aY4VOH/DYa/6DVwfAq1TJhmkKGeT1OtlOTtb/4f/unOxfGlp+ZWZF5ZWFp9veqYCzssg2Xvk4wsfXfpT/r/r1PkHrl9V/p+Y3/ymWj/sND0aYJqq/M88u3Zf5B9aR/6hveQf2kv+ob3kH9pL/qG95B/aS/6hveQf2kv+ob1O5h8AaJfhhabvQAaa0vT8AwAAAAAAAAAAAAAAAAAAnLbR31k4XqZV89O3k4OHk3TH1e+Mnkec3Dh6vfhTUTX7XVF3m8gzd064g7/VP7PF+w3ffX3Tt83W/+yOZuuvLSbrryW50u2evv6Ko+vv37v5jO97z01YYEIPPdls/V83m61/bTf5pJp/roybf8rcNnofP/8MqvM3Yf2Xf5lwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEzNbwEAAP//0gZtMg==") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000540)={@desc={0x1, 0x0, @desc1}, 0x10, 0x0, '\x00', @d}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}}) 0s ago: executing program 8 (id=7040): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x12) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, 0x0) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.9.5644'. [ 1611.135082][T26812] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1611.141938][T26812] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1611.149397][T26812] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1611.160723][T26812] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1611.169666][T26812] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1611.176736][T26812] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1611.183803][T26812] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1611.190791][T26812] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1611.197672][T26812] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1611.204549][T26812] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1611.211262][T26812] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1611.218187][T26812] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1611.684942][T26824] netlink: 'syz.8.5665': attribute type 3 has an invalid length. [ 1611.693019][T26824] netlink: 'syz.8.5665': attribute type 1 has an invalid length. [ 1611.704949][T26824] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.5665'. [ 1611.978853][T14700] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1612.168893][T14700] usb 5-1: Using ep0 maxpacket: 8 [ 1612.240659][T14700] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1612.262255][T14700] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1612.271339][T14700] usb 5-1: can't read configurations, error -71 [ 1612.461265][T23584] Bluetooth: hci4: link tx timeout [ 1612.467221][T23584] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1612.567976][T26839] [U] S] [ 1613.198157][T26849] loop8: detected capacity change from 0 to 512 [ 1613.392728][T26849] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 1613.405744][T26849] System zones: 0-2, 18-18, 34-35 [ 1613.457907][T26849] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1613.473147][T26860] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1613.473360][T26860] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1613.473555][T26860] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1613.473743][T26860] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1613.473934][T26860] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1613.474119][T26860] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 1613.481045][T26849] ext4 filesystem being mounted at /502/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1613.488783][T26860] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1613.537646][T26860] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 1613.544617][T26860] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1613.552655][T26860] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1613.559730][T26860] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1613.567991][T26860] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1613.576472][T26860] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1613.583189][T26860] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1613.590360][T26860] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1613.595116][T14323] Bluetooth: hci4: link tx timeout [ 1613.597287][T26860] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 1613.602260][T14323] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1613.610594][T26860] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1613.628210][T26860] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1613.635616][T26860] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 1613.707689][T26849] EXT4-fs warning (device loop8): verify_group_input:156: Last group not full [ 1613.719622][T14323] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1613.719834][T14323] Bluetooth: hci4: Injecting HCI hardware error event [ 1614.174042][T16429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1614.517942][T14323] Bluetooth: hci4: command 0x0406 tx timeout [ 1614.527479][T23584] Bluetooth: hci4: hardware error 0x00 [ 1615.311846][T26891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5691'. [ 1615.321905][T26891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5691'. [ 1615.331410][T26891] netlink: 'syz.0.5691': attribute type 14 has an invalid length. [ 1615.339840][T26891] netlink: 'syz.0.5691': attribute type 13 has an invalid length. [ 1615.590991][T26894] loop4: detected capacity change from 0 to 512 [ 1615.644534][T26889] loop9: detected capacity change from 0 to 2048 [ 1615.688382][T26894] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1615.716515][T26894] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 1615.727922][T26894] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1615.738848][T26889] loop9: p1 p2 p3 p4 [ 1615.742551][T26889] loop9: p2 start 117440512 is beyond EOD, [ 1615.743192][T26894] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5692: Failed to acquire dquot type 1 [ 1615.749474][T26889] truncated [ 1615.819603][T26889] loop9: p4 start 2309 is beyond EOD, truncated [ 1615.858350][T26894] EXT4-fs (loop4): 1 truncate cleaned up [ 1615.871880][T26894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1616.310856][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1616.520001][T26914] loop0: detected capacity change from 0 to 512 [ 1616.559195][T26918] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5696'. [ 1616.598757][T23584] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1616.694665][T26914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1616.707989][T26914] ext4 filesystem being mounted at /1202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1617.266277][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1617.397775][T26934] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5703'. [ 1618.226243][T26932] loop9: detected capacity change from 0 to 32768 [ 1618.257443][T26932] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1618.266095][T26932] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1618.377373][T26938] loop6: detected capacity change from 0 to 4096 [ 1618.389888][T26932] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1618.697557][T26932] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1619.752809][T26967] loop4: detected capacity change from 0 to 256 [ 1619.929558][T26967] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1619.940324][T26967] FAT-fs (loop4): Filesystem has been set read-only [ 1619.947686][T26967] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1619.961199][T26967] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1619.999061][ T30] audit: type=1800 audit(1756235911.482:417): pid=26967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5714" name="file1" dev="loop4" ino=1049090 res=0 errno=0 [ 1620.249552][T26973] loop6: detected capacity change from 0 to 4096 [ 1620.387505][T26977] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1620.631092][T26981] loop0: detected capacity change from 0 to 1024 [ 1620.848463][T26988] loop9: detected capacity change from 0 to 512 [ 1620.924484][T26988] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1621.106856][T26988] EXT4-fs (loop9): 1 truncate cleaned up [ 1621.115822][T26988] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1621.134466][ T7344] hfsplus: b-tree write err: -5, ino 4 [ 1621.362916][T27001] loop8: detected capacity change from 0 to 128 [ 1621.633804][T24351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1622.758203][T27018] loop6: detected capacity change from 0 to 4096 [ 1622.797593][T27018] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1623.185243][T27018] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1623.678012][T27048] No buffer was provided with the request [ 1623.847723][T14700] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1623.983578][T27053] loop0: detected capacity change from 0 to 128 [ 1624.024569][T14700] usb 5-1: Using ep0 maxpacket: 32 [ 1624.064569][T14700] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1624.080906][T14700] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1624.087987][T14700] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1624.097548][T14700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.205653][T27058] batadv0: entered promiscuous mode [ 1624.226919][T27057] batadv0: left promiscuous mode [ 1624.229197][T14700] usb 5-1: config 0 descriptor?? [ 1624.757591][T14700] hid-retrode 0003:0403:97C1.002A: unknown main item tag 0x6 [ 1624.765586][T14700] hid-retrode 0003:0403:97C1.002A: item fetching failed at offset 4/5 [ 1624.806238][T14700] hid-retrode 0003:0403:97C1.002A: probe with driver hid-retrode failed with error -22 [ 1624.958741][T14700] usb 5-1: USB disconnect, device number 27 [ 1625.752849][T27096] loop6: detected capacity change from 0 to 512 [ 1625.849815][T27096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1626.008818][T27101] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5756'. [ 1626.095560][T27096] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.5754: Unimplemented hash flags: 0x0001 [ 1626.112251][T27096] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5754: Corrupt directory, running e2fsck is recommended [ 1626.155624][T27096] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.5754: path /568/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 1626.887877][T14690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1627.193895][T27127] vivid-000: ================= START STATUS ================= [ 1627.202360][T27127] vivid-000: Test Pattern: 75% Colorbar [ 1627.208543][T27127] vivid-000: Fill Percentage of Frame: 100 [ 1627.215118][T27127] vivid-000: Horizontal Movement: No Movement [ 1627.221514][T27127] vivid-000: Vertical Movement: No Movement [ 1627.227925][T27127] vivid-000: OSD Text Mode: Counters Only [ 1627.238990][T27127] vivid-000: Show Border: false [ 1627.246154][T27127] vivid-000: Show Square: false [ 1627.251343][T27127] vivid-000: Sensor Flipped Horizontally: false [ 1627.258817][T27127] vivid-000: Sensor Flipped Vertically: false [ 1627.265416][T27127] vivid-000: Insert SAV Code in Image: false [ 1627.271715][T27127] vivid-000: Insert EAV Code in Image: false [ 1627.278467][T27127] vivid-000: Insert Video Guard Band: false [ 1627.284883][T27127] vivid-000: Reduced Framerate: false [ 1627.290584][T27127] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1627.298776][T27127] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1627.307316][T27127] vivid-000: Enable Capture Cropping: true grabbed [ 1627.314399][T27127] vivid-000: Enable Capture Composing: true grabbed [ 1627.321420][T27127] vivid-000: Enable Capture Scaler: true grabbed [ 1627.328368][T27127] vivid-000: Timestamp Source: End of Frame [ 1627.339805][T27127] vivid-000: Colorspace: SMPTE 170M [ 1627.347008][T27127] vivid-000: Transfer Function: Default [ 1627.353098][T27127] vivid-000: Y'CbCr Encoding: Default [ 1627.359020][T27127] vivid-000: HSV Encoding: Hue 0-179 [ 1627.364966][T27127] vivid-000: Quantization: Default [ 1627.370435][T27127] vivid-000: Apply Alpha To Red Only: false [ 1627.376852][T27127] vivid-000: Standard Aspect Ratio: 4x3 [ 1627.382714][T27127] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1627.391027][T27127] vivid-000: DV Timings: 640x480p59 inactive [ 1627.397674][T27127] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1627.405524][T27127] vivid-000: Maximum EDID Blocks: 2 [ 1627.411279][T27127] vivid-000: Limited RGB Range (16-235): true [ 1627.417888][T27127] vivid-000: Rx RGB Quantization Range: Automatic [ 1627.425156][T27127] vivid-000: Power Present: 0x00000001 [ 1627.431007][T27127] tpg source WxH: 720x576 (R'G'B) [ 1627.440986][T27127] tpg field: 3 [ 1627.446178][T27127] tpg crop: (0,0)/720x576 [ 1627.450715][T27127] tpg compose: (0,0)/720x288 [ 1627.455814][T27127] tpg colorspace: 1 [ 1627.459782][T27127] tpg transfer function: 0/1 [ 1627.464853][T27127] tpg quantization: 0/2 [ 1627.469207][T27127] tpg RGB range: 0/1 [ 1627.473277][T27127] vivid-000: ================== END STATUS ================== [ 1627.681715][T27131] loop8: detected capacity change from 0 to 128 [ 1627.829133][T27131] syz.8.5766: attempt to access beyond end of device [ 1627.829133][T27131] loop8: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 1627.862208][T27134] loop0: detected capacity change from 0 to 8 [ 1627.987150][T27134] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1627.994026][T27134] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1629.523522][T27166] loop9: detected capacity change from 0 to 512 [ 1629.581078][T27166] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1629.720963][T27166] EXT4-fs (loop9): 1 truncate cleaned up [ 1629.729209][T27166] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1630.112568][T27177] sock: sock_timestamping_bind_phc: sock not bind to device [ 1630.572690][T24351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.699598][T27175] loop8: detected capacity change from 0 to 32768 [ 1630.716898][T27175] bcachefs: bch2_fs_parse_param() Error parsing option acl: option_value [ 1631.939998][T27200] loop9: detected capacity change from 0 to 256 [ 1633.131599][T27230] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5804'. [ 1633.150428][T27231] loop8: detected capacity change from 0 to 256 [ 1633.211972][T27231] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1633.671722][T27241] loop4: detected capacity change from 0 to 256 [ 1633.750635][T27239] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1633.811084][T27241] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1633.986965][T27245] loop8: detected capacity change from 0 to 256 [ 1634.142983][T27245] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1635.292299][T27256] loop6: detected capacity change from 0 to 32768 [ 1635.360313][T27256] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1635.673798][T27256] XFS (loop6): Ending clean mount [ 1635.697282][T27256] XFS (loop6): Quotacheck needed: Please wait. [ 1635.723439][T15620] XFS (loop6): Metadata corruption detected at xfs_dinode_verify+0x252/0x21a0, inode 0x1145 dinode [ 1635.743261][T15620] XFS (loop6): Unmount and run xfs_repair [ 1635.750920][T15620] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 1635.758702][T15620] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 1635.771056][T15620] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1635.780586][T15620] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 1635.789794][T15620] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 26 4.Xh...........& [ 1635.801828][T15620] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1635.811343][T15620] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ea b5 0d 00 ................ [ 1635.820662][T15620] 00000060: ff ff ff ff e4 ac 63 16 00 00 00 00 00 00 00 02 ......c......... [ 1635.833576][T15620] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 1635.976014][T27256] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1636.137503][T14690] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1636.200482][T14690] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 1636.992738][T27295] loop9: detected capacity change from 0 to 256 [ 1637.030291][T27295] exfat: Deprecated parameter 'namecase' [ 1637.121986][T27295] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 1638.821172][T27324] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5837'. [ 1641.072106][T27367] loop4: detected capacity change from 0 to 512 [ 1641.172528][T27367] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1641.215362][T27367] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.5855: casefold flag without casefold feature [ 1641.320225][T27367] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5855: couldn't read orphan inode 15 (err -117) [ 1641.420375][T27367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1642.274026][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1642.340960][T27380] loop6: detected capacity change from 0 to 1024 [ 1642.872109][ T48] hfsplus: b-tree write err: -5, ino 4 [ 1643.383705][T27398] loop6: detected capacity change from 0 to 1024 [ 1643.424570][T27398] EXT4-fs: Ignoring removed mblk_io_submit option [ 1643.459346][T27400] netlink: 'syz.8.5867': attribute type 5 has an invalid length. [ 1643.600490][T27398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1643.780620][T27398] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.5866: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1643.809383][T27398] EXT4-fs (loop6): Remounting filesystem read-only [ 1644.212238][T14690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.512572][T27422] loop0: detected capacity change from 0 to 512 [ 1645.753167][T27427] loop6: detected capacity change from 0 to 32768 [ 1645.763070][T27427] XFS: noattr2 mount option is deprecated. [ 1645.777542][T27427] XFS (loop6): no-recovery mounts must be read-only. [ 1647.360288][T27460] loop9: detected capacity change from 0 to 512 [ 1647.488109][T27460] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1647.501745][T27460] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1647.948497][T27460] Quota error (device loop9): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1647.970448][T27460] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1647.983055][T27460] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.5891: Failed to acquire dquot type 0 [ 1648.009721][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1648.715794][T27472] loop4: detected capacity change from 0 to 32768 [ 1648.740814][T27472] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5896 (27472) [ 1648.793114][T27472] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1648.804893][T27472] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 1648.817311][T27472] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1648.937392][T24351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1649.090319][T27472] BTRFS info (device loop4): rebuilding free space tree [ 1649.131736][T27472] BTRFS info (device loop4): disabling free space tree [ 1649.141889][T27472] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1649.156980][T27472] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1649.208005][T27472] BTRFS info (device loop4): setting nodatasum [ 1649.214551][T27472] BTRFS info (device loop4): setting nodatacow [ 1649.220930][T27472] BTRFS info (device loop4): enabling ssd optimizations [ 1649.231061][T27472] BTRFS info (device loop4): turning off barriers [ 1649.237947][T27472] BTRFS info (device loop4): enabling disk space caching [ 1649.245537][T27472] BTRFS info (device loop4): force clearing of disk cache [ 1649.257490][T27472] BTRFS info (device loop4): trying to use backup root at mount time [ 1649.463774][ T5816] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1649.817615][ T30] audit: type=1326 audit(1756235941.302:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27507 comm="syz.0.5903" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad96f8ebe9 code=0x0 [ 1650.493766][T27521] loop8: detected capacity change from 0 to 16 [ 1650.778221][T27524] bond_slave_0: entered promiscuous mode [ 1650.784361][T27524] bond_slave_1: entered promiscuous mode [ 1650.799441][T27524] vlan2: entered promiscuous mode [ 1650.804934][T27524] bond0: entered promiscuous mode [ 1651.248257][T27532] loop0: detected capacity change from 0 to 256 [ 1651.305695][T27532] exfat: Deprecated parameter 'utf8' [ 1651.311530][T27532] exfat: Deprecated parameter 'utf8' [ 1651.320621][T27532] exfat: Deprecated parameter 'utf8' [ 1651.448295][T27532] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d) [ 1652.288642][T27557] ipvlan3: entered promiscuous mode [ 1652.305676][T27557] bridge0: port 3(ipvlan3) entered blocking state [ 1652.312693][T27557] bridge0: port 3(ipvlan3) entered disabled state [ 1652.329930][T27557] ipvlan3: entered allmulticast mode [ 1652.338583][T27557] bridge0: entered allmulticast mode [ 1652.346842][T27557] ipvlan3: left allmulticast mode [ 1652.352093][T27557] bridge0: left allmulticast mode [ 1653.159355][T27573] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5922'. [ 1653.173469][T27574] loop6: detected capacity change from 0 to 256 [ 1653.223260][T27574] exfat: Deprecated parameter 'namecase' [ 1653.230081][T27574] exfat: Deprecated parameter 'utf8' [ 1653.365588][T27574] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 1654.087704][T14700] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1654.280698][T27592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5929'. [ 1654.314546][T14700] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.326169][T14700] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1654.339354][T14700] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1654.350619][T14700] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.488863][T14700] usb 9-1: config 0 descriptor?? [ 1654.552318][T14700] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1654.562558][T14700] dvb-usb: bulk message failed: -22 (3/0) [ 1654.601394][T14700] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1654.733573][T14700] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1654.741890][T14700] usb 9-1: media controller created [ 1654.743605][T27584] dibusb: i2c wr: len=61 is too big! [ 1654.743605][T27584] [ 1654.827436][T14700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1654.916482][T14700] dvb-usb: bulk message failed: -22 (6/0) [ 1654.922901][T14700] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1654.996951][T14700] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input24 [ 1655.035136][T14700] dvb-usb: schedule remote query interval to 150 msecs. [ 1655.043467][T14700] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1655.106228][T14700] usb 9-1: USB disconnect, device number 14 [ 1655.247984][T14700] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1655.761929][T27635] loop4: detected capacity change from 0 to 512 [ 1655.897851][T27635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1655.915867][T27635] ext4 filesystem being mounted at /1239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1656.123827][T27644] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5939'. [ 1656.136482][T27644] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5939'. [ 1656.246395][T27635] EXT4-fs (loop4): resizing filesystem from 128 to 1 blocks [ 1656.253957][T27635] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 1656.633388][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.649954][T27650] loop0: detected capacity change from 0 to 64 [ 1656.687988][T27650] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1656.810333][T27655] loop9: detected capacity change from 0 to 16 [ 1656.890479][T27655] erofs (device loop9): mounted with root inode @ nid 36. [ 1657.696580][T27672] loop9: detected capacity change from 0 to 1024 [ 1658.408921][T27688] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5956'. [ 1658.418441][T27688] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5956'. [ 1658.431458][T27688] netlink: 'syz.9.5956': attribute type 11 has an invalid length. [ 1659.550717][T27707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5964'. [ 1661.072652][T27724] loop9: detected capacity change from 0 to 1024 [ 1661.621373][ T4094] hfsplus: b-tree write err: -5, ino 4 [ 1661.626504][T27737] netlink: 'syz.0.5975': attribute type 3 has an invalid length. [ 1661.670401][T27736] affs: No valid root block on device nullb0 [ 1664.146208][T27763] loop0: detected capacity change from 0 to 4096 [ 1664.208484][T27763] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1666.048430][T27794] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6001'. [ 1666.061849][T27794] netlink: 'syz.8.6001': attribute type 6 has an invalid length. [ 1667.804011][T27819] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1667.815732][T27819] UDF-fs: Scanning with blocksize 512 failed [ 1667.855041][T27819] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1667.862949][T27819] UDF-fs: Scanning with blocksize 1024 failed [ 1667.968180][T27819] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1667.976291][T27819] UDF-fs: Scanning with blocksize 2048 failed [ 1668.020549][T27824] hub 8-0:1.0: USB hub found [ 1668.038174][T27819] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1668.046498][T27819] UDF-fs: Scanning with blocksize 4096 failed [ 1668.048981][T27824] hub 8-0:1.0: 1 port detected [ 1668.710089][T14700] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1668.937978][T14700] usb 10-1: Using ep0 maxpacket: 16 [ 1668.952124][T14700] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1668.963272][T14700] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1669.050864][T14700] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1669.060888][T14700] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1669.072228][T14700] usb 10-1: SerialNumber: syz [ 1669.357877][T14700] usb 10-1: USB disconnect, device number 3 [ 1669.393504][T27849] x_tables: ip6_tables: LOG.0 target: invalid size 32 (kernel) != (user) 40 [ 1670.174667][T22488] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1670.387896][T22488] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1670.399769][T22488] usb 7-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1670.412350][T22488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.431957][T27872] netlink: 165 bytes leftover after parsing attributes in process `syz.8.6032'. [ 1670.519933][T22488] usb 7-1: config 0 descriptor?? [ 1670.646819][T27878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6034'. [ 1670.933882][T27880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6035'. [ 1671.043251][T22488] hid_mf 0003:0079:1846.002B: unknown main item tag 0x1 [ 1671.073589][T27882] loop8: detected capacity change from 0 to 64 [ 1671.153009][T22488] hid_mf 0003:0079:1846.002B: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.6-1/input0 [ 1671.175121][T22488] hid_mf 0003:0079:1846.002B: Invalid report, this should never happen! [ 1671.183716][T22488] hid_mf 0003:0079:1846.002B: Force feedback init failed. [ 1671.191081][T27882] hfs: unable to read tree header [ 1671.192041][T27882] hfs: unable to open extent tree [ 1671.192229][T27882] hfs: can't find a HFS filesystem on dev loop8 [ 1671.328533][T22488] usb 7-1: USB disconnect, device number 14 [ 1671.836807][T27892] loop4: detected capacity change from 0 to 4096 [ 1671.853949][T27906] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6040'. [ 1672.012698][T27892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1672.539727][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1672.795118][T27919] loop8: detected capacity change from 0 to 2048 [ 1672.871435][T27919] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1672.881670][T27919] NILFS (loop8): mounting unchecked fs [ 1673.031835][T27919] NILFS (loop8): recovery complete [ 1673.094912][T27928] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1673.196598][T27918] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1673.203137][T27918] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1673.224013][T27917] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1673.233920][T27917] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1673.255124][T27918] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1673.266840][T27918] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1673.302881][T27917] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1673.309277][T27917] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1673.389356][T27917] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1673.397274][T27917] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1673.643376][T27941] tmpfs: Cannot change global quota limit on remount [ 1674.163672][T27937] loop9: detected capacity change from 0 to 4096 [ 1674.608569][T27956] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6055'. [ 1675.559163][T27968] loop0: detected capacity change from 0 to 1024 [ 1675.690368][T27968] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1675.850282][T27968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1675.892143][T27977] loop9: detected capacity change from 0 to 1024 [ 1675.912648][T27977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1676.007609][T27968] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.6060: missing EA_INODE flag [ 1676.069010][T27968] EXT4-fs (loop0): Remounting filesystem read-only [ 1676.143632][T27977] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1676.521741][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.549926][T24351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1677.459719][T28007] loop4: detected capacity change from 0 to 1024 [ 1679.722900][T28043] loop9: detected capacity change from 0 to 4096 [ 1679.850538][T28053] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1680.298069][T28059] loop0: detected capacity change from 0 to 128 [ 1680.328709][T28059] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1680.482884][T28059] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1680.954055][T28069] loop9: detected capacity change from 0 to 16 [ 1681.035785][T28069] erofs (device loop9): mounted with root inode @ nid 36. [ 1681.637369][T28082] netlink: 'syz.8.6101': attribute type 2 has an invalid length. [ 1681.645637][T28082] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.6101'. [ 1682.437491][T28096] netlink: 'syz.8.6108': attribute type 3 has an invalid length. [ 1683.397622][T28113] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1683.991461][T28120] program syz.4.6118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1684.689799][T28132] hugetlbfs: Bad value for 'nr_inodes' [ 1685.300941][T28137] loop0: detected capacity change from 0 to 1024 [ 1685.429751][T28141] loop4: detected capacity change from 0 to 512 [ 1685.432895][T28137] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1685.549677][T28141] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 1685.595020][T28141] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.6127: iget: bad i_size value: 12154757448730 [ 1685.707791][T28141] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6127: couldn't read orphan inode 13 (err -117) [ 1685.760202][T28141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1686.129724][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1687.006306][T28168] sg_write: data in/out 196608/32 bytes for SCSI command 0x2c-- guessing data in; [ 1687.006306][T28168] program syz.4.6137 not setting count and/or reply_len properly [ 1687.554555][T28174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6140'. [ 1688.168115][T28181] loop9: detected capacity change from 0 to 2048 [ 1688.320568][T28181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1688.338343][T28190] loop4: detected capacity change from 0 to 64 [ 1688.388527][T28187] loop0: detected capacity change from 0 to 1024 [ 1688.431355][T28187] EXT4-fs: Ignoring removed oldalloc option [ 1688.437819][T28187] EXT4-fs: Ignoring removed orlov option [ 1688.443719][T28187] EXT4-fs: Ignoring removed oldalloc option [ 1688.453285][T28187] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1688.625277][T28187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1689.174034][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.265569][T28207] loop9: detected capacity change from 0 to 64 [ 1689.840124][T28218] loop0: detected capacity change from 0 to 256 [ 1690.306010][T28225] loop8: detected capacity change from 0 to 512 [ 1690.866593][T28237] loop9: detected capacity change from 0 to 256 [ 1690.977892][T28237] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1691.101680][T28242] loop6: detected capacity change from 0 to 16 [ 1691.205881][T28242] erofs (device loop6): mounted with root inode @ nid 36. [ 1691.300309][T28242] overlay: filesystem on ./file0 is read-only [ 1691.364687][T28249] loop8: detected capacity change from 0 to 128 [ 1691.433436][T28249] hpfs: Bad value for 'uid' [ 1691.446952][T28249] hpfs: Bad value for 'uid' [ 1691.657540][T28248] loop4: detected capacity change from 0 to 2048 [ 1691.828425][T28262] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1692.277367][T28264] loop6: detected capacity change from 0 to 1024 [ 1692.300709][T28269] netlink: 1256 bytes leftover after parsing attributes in process `syz.8.6170'. [ 1692.310915][T28269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1692.430868][T28270] loop9: detected capacity change from 0 to 1024 [ 1692.963627][ T48] hfsplus: b-tree write err: -5, ino 4 [ 1693.019707][T28281] netlink: 'syz.8.6173': attribute type 4 has an invalid length. [ 1693.599307][T28291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6177'. [ 1694.811325][T28306] netlink: 'syz.8.6182': attribute type 1 has an invalid length. [ 1695.092262][T28310] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6184'. [ 1695.440255][T28304] loop9: detected capacity change from 0 to 32768 [ 1695.462527][T28304] gfs2: Invalid block size [ 1696.091452][T28317] loop8: detected capacity change from 0 to 256 [ 1696.130189][T28319] loop6: detected capacity change from 0 to 256 [ 1696.286511][T28317] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1696.379541][T28319] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1697.100688][T28339] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6193'. [ 1697.348579][T22488] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1697.601796][T22488] usb 5-1: Using ep0 maxpacket: 16 [ 1697.639420][T22488] usb 5-1: config 103 has too many interfaces: 85, using maximum allowed: 32 [ 1697.651818][T22488] usb 5-1: config 103 has an invalid interface descriptor of length 3, skipping [ 1697.661838][T22488] usb 5-1: config 103 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.675505][T22488] usb 5-1: config 103 has 0 interfaces, different from the descriptor's value: 85 [ 1697.711932][T22488] usb 5-1: New USB device found, idVendor=33d8, idProduct=bbce, bcdDevice=3f.d1 [ 1697.727731][T22488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.736598][T22488] usb 5-1: Product: syz [ 1697.741076][T22488] usb 5-1: Manufacturer: syz [ 1697.748828][T22488] usb 5-1: SerialNumber: syz [ 1698.061241][T22488] usb 5-1: USB disconnect, device number 28 [ 1699.459643][T28366] loop0: detected capacity change from 0 to 32768 [ 1699.482694][T28366] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section journal_v2: journal bucket 255 past end of device (nbuckets 128) [ 1699.482694][T28366] journal_v2 (size 40): [ 1699.482694][T28366] Buckets: 249-256 24-25 [ 1699.482694][T28366] [ 1699.512003][T28366] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 1701.752566][T28398] loop6: detected capacity change from 0 to 1024 [ 1701.892893][T28386] loop4: detected capacity change from 0 to 32768 [ 1701.926259][T28386] gfs2: fsid=commit: Trying to join cluster "lock_nolock", "commit" [ 1701.937595][T28386] gfs2: fsid=commit: Now mounting FS (format 1801)... [ 1701.951696][T28386] gfs2: fsid=commit.s: fatal: invalid metadata block - bh = 2073 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 1701.970555][T28386] gfs2: fsid=commit.s: about to withdraw this file system [ 1701.979191][T28386] gfs2: fsid=commit.s: File system withdrawn [ 1701.995667][T28386] CPU: 1 UID: 0 PID: 28386 Comm: syz.4.6212 Not tainted syzkaller #0 PREEMPT(none) [ 1701.995838][T28386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1701.995962][T28386] Call Trace: [ 1701.996027][T28386] [ 1701.996092][T28386] __dump_stack+0x26/0x30 [ 1701.996315][T28386] dump_stack_lvl+0x1df/0x270 [ 1701.996532][T28386] dump_stack+0x1e/0x25 [ 1701.996710][T28386] gfs2_withdraw+0x1182/0x2050 [ 1701.996974][T28386] ? kmsan_get_metadata+0xfb/0x160 [ 1701.997179][T28386] gfs2_meta_check_ii+0xe0/0x120 [ 1701.997422][T28386] gfs2_meta_buffer+0x3a2/0x600 [ 1701.997632][T28386] inode_go_instantiate+0xda/0x1e90 [ 1701.997849][T28386] ? queue_delayed_work_on+0x21d/0x350 [ 1701.998025][T28386] ? kmsan_get_metadata+0xfb/0x160 [ 1701.998202][T28386] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1701.998365][T28386] ? kmsan_get_metadata+0xfb/0x160 [ 1701.998556][T28386] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1701.998745][T28386] ? __pfx_inode_go_instantiate+0x10/0x10 [ 1701.998963][T28386] gfs2_instantiate+0x24f/0x4b0 [ 1701.999130][T28386] gfs2_glock_wait+0x26a/0x3b0 [ 1701.999303][T28386] gfs2_glock_nq+0x28cf/0x34a0 [ 1701.999512][T28386] gfs2_lookupi+0x57e/0x990 [ 1701.999662][T28386] ? gfs2_lookup_meta+0x101/0x280 [ 1701.999848][T28386] gfs2_lookup_meta+0x101/0x280 [ 1702.000016][T28386] init_journal+0x1b5/0x3a30 [ 1702.000179][T28386] ? snprintf+0x1d2/0x210 [ 1702.000334][T28386] ? kmsan_get_metadata+0xfb/0x160 [ 1702.000504][T28386] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1702.000681][T28386] init_inodes+0x124/0x510 [ 1702.000834][T28386] gfs2_fill_super+0x384d/0x3f50 [ 1702.001059][T28386] ? init_locking+0xed/0x500 [ 1702.001240][T28386] get_tree_bdev_flags+0x6e3/0x920 [ 1702.001429][T28386] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1702.001643][T28386] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1702.001865][T28386] ? __pfx_gfs2_get_tree+0x10/0x10 [ 1702.002076][T28386] get_tree_bdev+0x38/0x50 [ 1702.002256][T28386] gfs2_get_tree+0x57/0x350 [ 1702.002492][T28386] ? __pfx_gfs2_get_tree+0x10/0x10 [ 1702.002708][T28386] vfs_get_tree+0xb0/0x5c0 [ 1702.002895][T28386] ? mount_capable+0x99/0x100 [ 1702.003062][T28386] do_new_mount+0x733/0x1420 [ 1702.003237][T28386] ? apparmor_capable+0x32d/0x410 [ 1702.003439][T28386] ? kmsan_get_metadata+0xfb/0x160 [ 1702.003644][T28386] path_mount+0x6db/0x1e90 [ 1702.003841][T28386] ? user_path_at+0x32d/0x3d0 [ 1702.004018][T28386] __se_sys_mount+0x6eb/0x7d0 [ 1702.004216][T28386] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1702.004486][T28386] __x64_sys_mount+0xe4/0x150 [ 1702.004689][T28386] x64_sys_call+0x3604/0x3e20 [ 1702.004931][T28386] do_syscall_64+0xd9/0x210 [ 1702.005120][T28386] ? irqentry_exit+0x16/0x60 [ 1702.005281][T28386] ? clear_bhb_loop+0x40/0x90 [ 1702.005449][T28386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.005616][T28386] RIP: 0033:0x7f186a59038a [ 1702.005741][T28386] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1702.005879][T28386] RSP: 002b:00007f186b3a8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1702.006028][T28386] RAX: ffffffffffffffda RBX: 00007f186b3a8ef0 RCX: 00007f186a59038a [ 1702.006136][T28386] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f186b3a8eb0 [ 1702.006245][T28386] RBP: 0000200000000400 R08: 00007f186b3a8ef0 R09: 0000000000000000 [ 1702.006350][T28386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 1702.006445][T28386] R13: 00007f186b3a8eb0 R14: 00000000000125ec R15: 0000200000000780 [ 1702.006586][T28386] [ 1702.364787][T28386] gfs2: fsid=commit.s: can't lookup journal index: 0 [ 1705.821257][T28460] netlink: 156 bytes leftover after parsing attributes in process `syz.9.6239'. [ 1706.020051][T28462] loop6: detected capacity change from 0 to 256 [ 1706.074877][T28465] loop0: detected capacity change from 0 to 256 [ 1706.214060][T28462] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1706.241110][T28465] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8c396dff, utbl_chksum : 0xe619d30d) [ 1707.198194][T28484] loop0: detected capacity change from 0 to 512 [ 1707.245825][T28484] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1707.258213][T28484] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1707.269463][T28484] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 1707.282540][T28484] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 1707.293544][T28484] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6248: Failed to acquire dquot type 1 [ 1707.335307][T28484] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6248: bg 0: block 40: padding at end of block bitmap is not set [ 1707.356612][T28484] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1707.387949][T28484] EXT4-fs (loop0): 1 truncate cleaned up [ 1707.396718][T28484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1707.517388][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1708.313836][T28505] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6256'. [ 1708.410187][T28504] loop6: detected capacity change from 0 to 1024 [ 1709.430915][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1709.575967][T28522] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6263'. [ 1709.851338][T28526] loop9: detected capacity change from 0 to 256 [ 1709.882927][T28526] exfat: Deprecated parameter 'namecase' [ 1710.045548][T28526] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1710.671590][T28544] loop8: detected capacity change from 0 to 512 [ 1710.764748][T22488] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1710.781196][T28544] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 1710.822469][T28544] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.6271: invalid indirect mapped block 8 (level 2) [ 1710.862475][T28544] EXT4-fs (loop8): Remounting filesystem read-only [ 1710.879148][T28544] EXT4-fs (loop8): 1 truncate cleaned up [ 1710.887685][T28544] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1710.987551][T28551] tipc: Enabling of bearer rejected, failed to enable media [ 1711.041667][T22488] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.053440][T22488] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.066786][T22488] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1711.080979][T22488] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1711.093514][T22488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.118935][T22488] usb 7-1: config 0 descriptor?? [ 1711.134291][T22488] hub 7-1:0.0: USB hub found [ 1711.370877][T22488] hub 7-1:0.0: 14 ports detected [ 1711.382863][T28544] EXT4-fs (loop8): changing journal_checksum during remount not supported; ignoring [ 1711.388586][T22488] hub 7-1:0.0: insufficient power available to use all downstream ports [ 1711.486142][T28544] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1712.167823][T16429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1712.303381][T28564] loop4: detected capacity change from 0 to 2048 [ 1712.622819][T28557] loop9: detected capacity change from 0 to 32768 [ 1712.652632][T28557] (syz.9.6275,28557,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1712.659821][T28569] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1712.688411][T28557] (syz.9.6275,28557,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1712.711418][T22488] usb 7-1: USB disconnect, device number 15 [ 1712.788325][T28557] (syz.9.6275,28557,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xd5db68cb, computed 0x14e4bbec. Applying ECC. [ 1712.815012][T28557] (syz.9.6275,28557,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xd5db68cb, computed 0x34010dbc [ 1712.825288][T28560] loop0: detected capacity change from 0 to 4096 [ 1712.835360][T28557] (syz.9.6275,28557,1):ocfs2_validate_inode_block:1455 ERROR: Checksum failed for dinode 22 [ 1712.835532][T28557] (syz.9.6275,28557,1):ocfs2_read_locked_inode:597 ERROR: status = -5 [ 1712.835804][T28557] (syz.9.6275,28557,1):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 1712.846670][T28557] (syz.9.6275,28557,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 1712.886395][T28557] (syz.9.6275,28557,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs? [ 1712.886589][T28557] (syz.9.6275,28557,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 1712.913746][T28557] (syz.9.6275,28557,1):ocfs2_initialize_super:2198 ERROR: status = -22 [ 1712.927091][T28557] (syz.9.6275,28557,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1713.095329][T28578] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6278'. [ 1713.977724][T28587] loop8: detected capacity change from 0 to 64 [ 1714.188128][T28591] loop9: detected capacity change from 0 to 1024 [ 1714.419483][T28593] loop6: detected capacity change from 0 to 2048 [ 1714.560553][T28593] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1714.576661][T28593] ext4 filesystem being mounted at /668/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1714.951939][T14690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.971503][T28607] block nbd0: not configured, cannot reconfigure [ 1715.547339][T14700] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1715.756199][T14700] usb 10-1: Using ep0 maxpacket: 32 [ 1715.785487][T14700] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.797252][T14700] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.815928][T14700] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1715.827044][T14700] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.882906][T14700] usb 10-1: config 0 descriptor?? [ 1715.994907][T10788] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1716.089417][T28633] loop8: detected capacity change from 0 to 256 [ 1716.142862][T28633] exfat: Deprecated parameter 'utf8' [ 1716.149734][T28633] exfat: Deprecated parameter 'namecase' [ 1716.201445][T10788] usb 5-1: too many endpoints for config 0 interface 0 altsetting 6: 137, using maximum allowed: 30 [ 1716.213194][T10788] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1716.232008][T10788] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1716.243999][T10788] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 137 [ 1716.261677][T10788] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1716.269237][T10788] usb 5-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 1716.279519][T10788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.469849][T14700] savu 0003:1E7D:2D5A.002C: unknown main item tag 0x0 [ 1716.480589][T14700] savu 0003:1E7D:2D5A.002C: unknown main item tag 0x0 [ 1716.488528][T14700] savu 0003:1E7D:2D5A.002C: unknown main item tag 0x0 [ 1716.495747][T14700] savu 0003:1E7D:2D5A.002C: unknown main item tag 0x0 [ 1716.502895][T14700] savu 0003:1E7D:2D5A.002C: unknown main item tag 0x0 [ 1716.512987][T14700] savu 0003:1E7D:2D5A.002C: unbalanced collection at end of report description [ 1716.531733][T10788] usb 5-1: config 0 descriptor?? [ 1716.598666][T28633] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1716.638828][T14700] savu 0003:1E7D:2D5A.002C: parse failed [ 1716.645629][T14700] savu 0003:1E7D:2D5A.002C: probe with driver savu failed with error -22 [ 1716.739937][T22488] usb 10-1: USB disconnect, device number 4 [ 1716.993992][T10788] holtek_mouse 0003:04D9:A0C2.002D: invalid report_size 26917 [ 1717.001985][T10788] holtek_mouse 0003:04D9:A0C2.002D: item 0 2 1 7 parsing failed [ 1717.074603][T10788] holtek_mouse 0003:04D9:A0C2.002D: hid parse failed: -22 [ 1717.082481][T10788] holtek_mouse 0003:04D9:A0C2.002D: probe with driver holtek_mouse failed with error -22 [ 1717.196686][T10788] usb 5-1: USB disconnect, device number 29 [ 1717.373396][T28668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1717.792929][T28674] loop0: detected capacity change from 0 to 256 [ 1717.872444][T28677] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6299'. [ 1718.010379][T28674] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1718.280750][T28683] loop4: detected capacity change from 0 to 64 [ 1719.601905][T28704] loop8: detected capacity change from 0 to 512 [ 1719.740164][T28704] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1719.755493][T28704] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 1719.766312][T28704] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6309: Corrupt directory, running e2fsck is recommended [ 1719.810377][T28704] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 1719.833800][T28704] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.6309: corrupted in-inode xattr: invalid ea_ino [ 1719.857020][T28704] EXT4-fs (loop8): Remounting filesystem read-only [ 1719.869271][T28704] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1720.002791][T28715] netlink: 92 bytes leftover after parsing attributes in process `syz.9.6312'. [ 1720.192632][T28716] loop6: detected capacity change from 0 to 1024 [ 1720.292248][T16429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1720.354858][T28716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1720.371316][T28716] ext4 filesystem being mounted at /675/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1720.963407][T14690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1721.212858][T28728] nvme_fabrics: missing parameter 'transport=%s' [ 1721.226297][T28728] nvme_fabrics: missing parameter 'nqn=%s' [ 1721.589519][T28741] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6320'. [ 1721.619884][T28741] veth2: entered allmulticast mode [ 1722.810498][T28763] loop6: detected capacity change from 0 to 4096 [ 1723.147278][T28766] loop4: detected capacity change from 0 to 4096 [ 1723.329107][T28763] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1723.484567][T28766] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1723.788188][T14690] ntfs3(loop6): ino=9, ntfs_sync_fs failed, -22. [ 1724.984894][T28786] loop9: detected capacity change from 0 to 32768 [ 1725.004857][T28786] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6334 (28786) [ 1725.063949][T28786] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1725.077937][T28786] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm [ 1725.087015][T28786] BTRFS error (device loop9): superblock checksum mismatch [ 1725.097840][T28786] BTRFS error (device loop9): open_ctree failed: -22 [ 1727.338692][T28827] loop8: detected capacity change from 0 to 256 [ 1727.349440][ T30] audit: type=1326 audit(1756236018.842:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28826 comm="syz.0.6351" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad96f8ebe9 code=0x0 [ 1727.425572][T28827] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1727.444541][T28827] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1727.525727][T10788] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1727.598111][T28827] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1727.718647][T10788] usb 5-1: Using ep0 maxpacket: 16 [ 1727.750807][T10788] usb 5-1: config 0 has an invalid interface number: 24 but max is 0 [ 1727.759471][T10788] usb 5-1: config 0 has no interface number 0 [ 1727.767151][T10788] usb 5-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.781360][T10788] usb 5-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.797162][T10788] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1727.811445][T10788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.838757][T10788] usb 5-1: config 0 descriptor?? [ 1728.318983][T10788] hid (null): global environment stack underflow [ 1728.328756][T10788] hid (null): unknown global tag 0xd [ 1728.334935][T10788] hid (null): report_id 55891 is invalid [ 1728.797037][T28846] loop9: detected capacity change from 0 to 2048 [ 1728.945409][T28846] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1728.949140][T10788] usb 5-1: USB disconnect, device number 30 [ 1729.032007][T28846] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1729.241363][T28868] netlink: 642 bytes leftover after parsing attributes in process `syz.6.6360'. [ 1729.453642][T24351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1730.379444][T28892] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1730.393282][T28892] Error validating options; rc = [-22] [ 1730.701610][T28896] loop8: detected capacity change from 0 to 256 [ 1730.720039][T28897] loop9: detected capacity change from 0 to 256 [ 1730.741836][T28896] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1730.756355][T28896] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1730.875939][T28896] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1731.027977][T28897] FAT-fs (loop9): Directory bread(block 64) failed [ 1731.035147][T28897] FAT-fs (loop9): Directory bread(block 65) failed [ 1731.042081][T28897] FAT-fs (loop9): Directory bread(block 66) failed [ 1731.051994][T28897] FAT-fs (loop9): Directory bread(block 67) failed [ 1731.059133][T28897] FAT-fs (loop9): Directory bread(block 68) failed [ 1731.071622][T28897] FAT-fs (loop9): Directory bread(block 69) failed [ 1731.083820][T28897] FAT-fs (loop9): Directory bread(block 70) failed [ 1731.090772][T28897] FAT-fs (loop9): Directory bread(block 71) failed [ 1731.097823][T28897] FAT-fs (loop9): Directory bread(block 72) failed [ 1731.108301][T28897] FAT-fs (loop9): Directory bread(block 73) failed [ 1732.122305][T28920] loop9: detected capacity change from 0 to 256 [ 1732.172250][T28920] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1732.187367][T28920] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1732.387695][T28920] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1733.298511][T28939] loop9: detected capacity change from 0 to 128 [ 1733.406009][T28939] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1733.469712][T28939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1734.774806][T28949] loop0: detected capacity change from 0 to 32768 [ 1734.816048][T28949] (syz.0.6390,28949,1):ocfs2_verify_volume:2303 ERROR: found superblock with bad version: found 0.0, should be 0.90 [ 1734.831888][T28949] (syz.0.6390,28949,1):ocfs2_verify_volume:2331 ERROR: status = -22 [ 1734.840677][T28949] (syz.0.6390,28949,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1734.857413][T28949] (syz.0.6390,28949,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1736.300656][T28976] loop8: detected capacity change from 0 to 64 [ 1736.383543][T28976] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing [ 1737.288201][T28974] syz.9.6400 (28974): drop_caches: 2 [ 1737.289311][T28995] loop4: detected capacity change from 0 to 512 [ 1737.396591][T28995] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1737.405335][T28995] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1737.463425][T28995] EXT4-fs (loop4): 1 truncate cleaned up [ 1737.475256][T28995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1737.671328][T29001] loop8: detected capacity change from 0 to 64 [ 1737.734403][T28995] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1737.791651][T29004] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1737.799876][T29004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1738.007568][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1738.528213][T10788] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1738.727648][T10788] usb 5-1: Using ep0 maxpacket: 16 [ 1738.766231][T10788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.778030][T10788] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1738.791391][T10788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.838341][T29023] hub 1-0:1.0: USB hub found [ 1738.860630][T29023] hub 1-0:1.0: 1 port detected [ 1738.890466][T10788] usb 5-1: config 0 descriptor?? [ 1739.178929][T14700] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1739.390689][T14700] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 1739.406398][T14700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.418084][T14700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.428861][T14700] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1739.445851][T14700] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a18, bcdDevice= 0.00 [ 1739.455511][T14700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.533569][T10788] aquacomputer_d5next 0003:0C70:F0B6.002F: unknown main item tag 0x0 [ 1739.545424][T10788] aquacomputer_d5next 0003:0C70:F0B6.002F: unknown main item tag 0x0 [ 1739.553923][T10788] aquacomputer_d5next 0003:0C70:F0B6.002F: unknown main item tag 0x0 [ 1739.569612][T10788] aquacomputer_d5next 0003:0C70:F0B6.002F: unknown main item tag 0x0 [ 1739.583093][T10788] aquacomputer_d5next 0003:0C70:F0B6.002F: unknown main item tag 0x0 [ 1739.668880][T14700] usb 1-1: config 0 descriptor?? [ 1739.715637][T10788] aquacomputer_d5next 0003:0C70:F0B6.002F: hidraw0: USB HID v0.05 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 1739.879323][T10788] usb 5-1: USB disconnect, device number 31 [ 1740.110077][T29054] loop9: detected capacity change from 0 to 512 [ 1740.159941][T14700] hid-corsair-void 0003:1B1C:0A18.0030: unknown main item tag 0x0 [ 1740.190544][T14700] hid-corsair-void 0003:1B1C:0A18.0030: hidraw0: USB HID v0.00 Device [HID 1b1c:0a18] on usb-dummy_hcd.0-1/input0 [ 1740.217181][T29054] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1740.339089][T29054] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1740.353076][T29054] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1740.369155][T22488] usb 1-1: USB disconnect, device number 5 [ 1740.375705][T10788] hid-corsair-void 0003:1B1C:0A18.0030: failed to request battery (reason: -71) [ 1740.403063][T14700] hid-corsair-void 0003:1B1C:0A18.0030: failed to request firmware (reason: -71) [ 1740.478183][T29054] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.6421: corrupted xattr block 19: overlapping e_value [ 1740.560785][T29078] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.6421: corrupted xattr block 19: overlapping e_value [ 1741.065204][T24351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1741.136217][T29085] netlink: 'syz.8.6426': attribute type 64 has an invalid length. [ 1741.147466][T29085] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6426'. [ 1742.345647][T29104] loop9: detected capacity change from 0 to 1024 [ 1742.618964][T29108] hfsplus: invalid xattr key length: 0 [ 1742.882289][T29115] loop8: detected capacity change from 0 to 8 [ 1743.094849][T29115] SQUASHFS error: zstd decompression error: 10 [ 1743.101464][T29115] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1743.112719][T29115] SQUASHFS error: Failed to read block 0x60: -5 [ 1743.120054][T29115] SQUASHFS error: zstd decompression error: 10 [ 1743.130063][T29115] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1743.138596][T29115] SQUASHFS error: Failed to read block 0x60: -5 [ 1743.682955][T29125] loop4: detected capacity change from 0 to 1024 [ 1743.791790][T29125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1743.933782][T29125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1743.995308][T29138] loop8: detected capacity change from 0 to 64 [ 1744.020451][T29138] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing [ 1744.518861][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1744.801413][T29148] support for the xor transformation has been removed. [ 1744.857682][T29150] loop8: detected capacity change from 0 to 512 [ 1744.947447][T29150] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1745.088129][T29150] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1745.106233][T29150] ext4 filesystem being mounted at /667/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1745.467272][T16429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1746.003284][T29180] loop0: detected capacity change from 0 to 16 [ 1746.065365][T29180] erofs (device loop0): mounted with root inode @ nid 36. [ 1746.104540][T22488] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1746.339855][T22488] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1746.351836][T22488] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1746.368409][T22488] usb 9-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1746.377878][T22488] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.511443][T22488] usb 9-1: config 0 descriptor?? [ 1746.523274][T29172] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1746.802095][T29193] /dev/nullb0: Can't open blockdev [ 1746.992371][T29195] netlink: 'syz.4.6462': attribute type 7 has an invalid length. [ 1747.003854][T29195] netlink: 'syz.4.6462': attribute type 8 has an invalid length. [ 1747.022654][T22488] logitech 0003:046D:C298.0031: collection stack underflow [ 1747.030706][T22488] logitech 0003:046D:C298.0031: item 0 4 0 12 parsing failed [ 1747.112762][T22488] logitech 0003:046D:C298.0031: parse failed [ 1747.122681][T22488] logitech 0003:046D:C298.0031: probe with driver logitech failed with error -22 [ 1747.299713][T14700] usb 9-1: USB disconnect, device number 15 [ 1747.807320][T29214] loop4: detected capacity change from 0 to 2048 [ 1747.885549][T29214] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1747.911888][T29214] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1748.001563][T29214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1750.450768][T29257] loop6: detected capacity change from 0 to 512 [ 1750.857610][T29251] loop0: detected capacity change from 0 to 32768 [ 1750.919029][T29257] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1751.088888][T29257] EXT4-fs (loop6): 1 truncate cleaned up [ 1751.097544][T29257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1751.167886][T29251] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,data_checksum=none,compression=lz4,fsck,recovery_pass_last=snapshots_read,nojournal_transaction_names,noexcl,read_only [ 1751.168037][T29251] allowing incompatible features above 0.0: (unknown version) [ 1751.168132][T29251] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1751.220158][T29251] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 1751.230053][T29251] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing [ 1751.248714][T29251] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 1751.266549][T29251] bcachefs (loop0): Version upgrade required: [ 1751.266549][T29251] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1751.266549][T29251] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 1751.266549][T29251] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 1751.492248][T29251] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 1751.592982][T29251] bcachefs (loop0): check_topology... done [ 1751.630620][T29251] bcachefs (loop0): accounting_read... done [ 1751.669706][T29251] bcachefs (loop0): alloc_read... [ 1751.687231][T29281] loop4: detected capacity change from 0 to 128 [ 1751.724900][T29251] done [ 1751.731606][T29251] bcachefs (loop0): snapshots_read... done [ 1751.777075][T29251] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 1751.817680][T29251] bcachefs (loop0): done starting filesystem [ 1751.974968][ T5813] bcachefs (loop0): shutting down [ 1751.997686][T29286] loop9: detected capacity change from 0 to 128 [ 1752.118194][ T5813] bcachefs (loop0): shutdown complete [ 1752.163126][T14690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1753.157459][T14700] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1753.375534][T14700] usb 5-1: Using ep0 maxpacket: 16 [ 1753.411775][T14700] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1753.423283][T14700] usb 5-1: config 0 has no interface number 0 [ 1753.433453][T29310] loop6: detected capacity change from 0 to 764 [ 1753.469218][T14700] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1753.482056][T14700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.494675][T14700] usb 5-1: Product: syz [ 1753.499058][T14700] usb 5-1: Manufacturer: syz [ 1753.503860][T14700] usb 5-1: SerialNumber: syz [ 1753.577996][T29310] Symlink component flag not implemented [ 1753.583915][T29310] Symlink component flag not implemented [ 1753.593154][T29310] Symlink component flag not implemented (128) [ 1753.602628][T14700] usb 5-1: config 0 descriptor?? [ 1753.609525][T29310] Symlink component flag not implemented (122) [ 1753.621156][T14700] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1754.263694][T14700] gspca_spca1528: reg_w err -71 [ 1754.318794][T14700] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 1754.375964][T14700] usb 5-1: USB disconnect, device number 32 [ 1755.563594][T29331] loop8: detected capacity change from 0 to 32768 [ 1755.592066][T29331] bcachefs (/dev/loop8): error validating superblock: Invalid superblock section journal_v2: duplicate journal buckets in ranges 9-16, 12-13 [ 1755.592066][T29331] journal_v2 (size 40): [ 1755.592066][T29331] Buckets: 9-16 12-13 [ 1755.592066][T29331] [ 1755.620561][T29331] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 1757.192398][T29357] loop4: detected capacity change from 0 to 512 [ 1757.370095][T29357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1757.388803][T29357] ext4 filesystem being mounted at /1348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1757.607099][T29366] loop9: detected capacity change from 0 to 512 [ 1757.647041][T29366] EXT4-fs: Ignoring removed i_version option [ 1757.653710][T29366] EXT4-fs: Ignoring removed nobh option [ 1757.663733][T29366] ext4: Unknown parameter 'dont_appraise' [ 1757.863633][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1758.944835][T29390] usb usb8: usbfs: process 29390 (syz.6.6522) did not claim interface 0 before use [ 1759.220707][T29393] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6523'. [ 1759.239193][T29393] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6523'. [ 1759.461070][T29395] loop4: detected capacity change from 0 to 128 [ 1759.578863][T29395] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1759.657178][T29395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1760.440495][T29413] loop0: detected capacity change from 0 to 256 [ 1760.586938][T29415] loop4: detected capacity change from 0 to 512 [ 1760.632412][T29413] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 1760.647632][T29415] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1760.704933][T29415] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1760.744476][T29415] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 1760.757713][T29415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1761.241403][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1763.494529][T22488] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1763.677255][T29464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1763.723093][T29461] loop4: detected capacity change from 0 to 4096 [ 1763.755395][T22488] usb 10-1: Using ep0 maxpacket: 8 [ 1763.780421][T22488] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1763.802307][T22488] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1763.816559][T22488] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.825177][T22488] usb 10-1: Product: syz [ 1763.829775][T22488] usb 10-1: Manufacturer: syz [ 1763.841884][T22488] usb 10-1: SerialNumber: syz [ 1763.872999][T29461] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 1763.881939][T29461] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 1763.894413][T29461] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 1763.902647][T29461] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 1763.911072][T29461] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00 [ 1763.922598][T29461] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00 [ 1763.930958][T29461] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00 [ 1763.944587][T29461] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00 [ 1763.952803][T29461] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00 [ 1763.966055][T29461] ntfs3(loop4): try to read out of volume at offset 0x3fffffe0c00 [ 1764.000557][T22488] usb 10-1: config 0 descriptor?? [ 1764.026953][T22488] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1764.038651][T22488] usb 10-1: setting power ON [ 1764.043479][T22488] dvb-usb: bulk message failed: -22 (2/0) [ 1764.068489][T22488] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1764.107433][T22488] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1764.119857][T22488] usb 10-1: media controller created [ 1764.230799][T22488] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1764.286170][T29465] dvb-usb: bulk message failed: -22 (3/0) [ 1764.483210][T22488] usb 10-1: selecting invalid altsetting 6 [ 1764.489548][T22488] usb 10-1: digital interface selection failed (-22) [ 1764.499911][T22488] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1764.685369][T22488] usb 10-1: setting power OFF [ 1764.690391][T22488] dvb-usb: bulk message failed: -22 (2/0) [ 1764.699523][T22488] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1764.709296][T22488] (NULL device *): no alternate interface [ 1765.200671][T22488] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1765.322038][T22488] usb 10-1: USB disconnect, device number 5 [ 1766.846357][T29524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1767.530708][T29535] loop8: detected capacity change from 0 to 64 [ 1767.868863][T29542] loop6: detected capacity change from 0 to 64 [ 1767.922265][T29542] hfs: Unknown parameter 'i' [ 1768.511461][T29557] loop6: detected capacity change from 0 to 128 [ 1768.530063][T29557] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1768.638921][T29557] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1769.155629][ T3580] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1769.652595][T29566] loop8: detected capacity change from 0 to 4096 [ 1769.707235][T29576] vlan2: entered promiscuous mode [ 1769.761518][T29566] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1770.861179][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1771.578002][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6603'. [ 1773.653869][T29635] loop0: detected capacity change from 0 to 4096 [ 1773.718237][T29635] ntfs3(loop0): ino=3, Correct links count -> 2. [ 1773.830522][T29647] loop8: detected capacity change from 0 to 128 [ 1773.902621][T29647] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1773.988355][T29647] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1774.289236][T29652] loop6: detected capacity change from 0 to 512 [ 1774.548475][T29652] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6618: bg 0: block 288: padding at end of block bitmap is not set [ 1774.678500][T29652] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1774.777942][T29652] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.6618: attempt to clear invalid blocks 1024 len 1 [ 1774.822001][T20802] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1774.870122][T29652] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6618: invalid indirect mapped block 1819239214 (level 0) [ 1774.971598][T29652] EXT4-fs (loop6): 1 truncate cleaned up [ 1774.980030][T29652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1775.370858][T29671] loop4: detected capacity change from 0 to 256 [ 1775.533136][T14690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1776.360960][T29693] loop0: detected capacity change from 0 to 64 [ 1776.418610][T29691] loop4: detected capacity change from 0 to 1024 [ 1776.588173][T29685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.733412][T29699] loop9: detected capacity change from 0 to 128 [ 1776.798313][T29699] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1776.856078][T29699] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1777.279147][T29707] loop6: detected capacity change from 0 to 512 [ 1777.395872][T29707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1777.433458][ T14] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1777.440898][T29707] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.6635: Unimplemented hash flags: 0x0001 [ 1777.462985][T29707] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6635: Corrupt directory, running e2fsck is recommended [ 1777.769832][T14690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1778.409125][T29732] loop0: detected capacity change from 0 to 64 [ 1778.456970][T29732] hfs: Unknown parameter 'i' [ 1778.513730][T29735] loop8: detected capacity change from 0 to 256 [ 1778.605301][T29739] loop9: detected capacity change from 0 to 128 [ 1778.730565][T29739] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1778.760759][T29739] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1778.963707][T24351] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1781.250132][T29783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6662'. [ 1781.280713][T29783] veth2: entered allmulticast mode [ 1781.607878][T29799] loop9: detected capacity change from 0 to 512 [ 1781.746523][T29804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6665'. [ 1781.786309][T29799] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6664: bg 0: block 288: padding at end of block bitmap is not set [ 1781.877167][T29799] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1781.968336][T29799] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.6664: attempt to clear invalid blocks 1024 len 1 [ 1782.072700][T29799] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.6664: invalid indirect mapped block 1819239214 (level 0) [ 1782.154026][T29799] EXT4-fs (loop9): 1 truncate cleaned up [ 1782.169122][T29799] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1782.417423][T29809] loop8: detected capacity change from 0 to 2048 [ 1782.619368][T29809] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1782.635354][T29809] ext4 filesystem being mounted at /710/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1782.708875][T24351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1783.100652][T29826] loop0: detected capacity change from 0 to 1024 [ 1783.122616][T29826] hfsplus: Unknown parameter 'R`ý barrie' [ 1783.286770][T16429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1783.319574][T29826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6673'. [ 1783.921867][T29841] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6678'. [ 1784.432532][T29849] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1784.640021][T29853] loop6: detected capacity change from 0 to 256 [ 1784.762709][T29856] loop9: detected capacity change from 0 to 256 [ 1784.862897][T29852] loop0: detected capacity change from 0 to 1024 [ 1784.910932][T29852] EXT4-fs: inline encryption not supported [ 1784.918667][T29852] EXT4-fs: Ignoring removed i_version option [ 1785.012846][T29852] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1785.211333][T29852] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.6683: lblock 2 mapped to illegal pblock 2 (length 1) [ 1785.298734][T14700] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1785.321985][T29852] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1785.334790][T29852] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.6683: lblock 0 mapped to illegal pblock 48 (length 1) [ 1785.393373][T29874] loop4: detected capacity change from 0 to 256 [ 1785.401884][T29852] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1785.402003][T29852] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6683: Failed to acquire dquot type 0 [ 1785.402996][T29852] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1785.404027][T29852] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.6683: mark_inode_dirty error [ 1785.486015][T14700] usb 9-1: Using ep0 maxpacket: 32 [ 1785.505590][T14700] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1785.517493][T14700] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1785.522060][T29852] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1785.531004][T14700] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1785.541990][T29852] EXT4-fs (loop0): 1 orphan inode deleted [ 1785.552559][T14700] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.565875][T29852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1785.595153][ T7344] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1785.658070][ T7344] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1785.669791][ T7344] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 1785.676505][T14700] usb 9-1: config 0 descriptor?? [ 1785.724410][T29874] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1785.860150][T29874] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 1785.975228][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1786.074729][ T5813] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1786.112244][ T5813] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1786.153864][T14700] savu 0003:1E7D:2D5A.0032: unknown main item tag 0x0 [ 1786.171620][T14700] savu 0003:1E7D:2D5A.0032: unknown main item tag 0x0 [ 1786.180701][T14700] savu 0003:1E7D:2D5A.0032: unknown main item tag 0x0 [ 1786.191182][T14700] savu 0003:1E7D:2D5A.0032: unknown main item tag 0x0 [ 1786.203170][T14700] savu 0003:1E7D:2D5A.0032: unknown main item tag 0x0 [ 1786.208266][ T5813] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 1786.211967][T14700] savu 0003:1E7D:2D5A.0032: unbalanced collection at end of report description [ 1786.424939][T14700] savu 0003:1E7D:2D5A.0032: parse failed [ 1786.431176][T14700] savu 0003:1E7D:2D5A.0032: probe with driver savu failed with error -22 [ 1786.519951][T14700] usb 9-1: USB disconnect, device number 16 [ 1788.255756][T14700] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1788.489811][T14700] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.501731][T14700] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.516354][T14700] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1788.535052][T14700] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1788.544631][T14700] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.589782][T29926] loop4: detected capacity change from 0 to 1024 [ 1788.641271][T29926] EXT4-fs: inline encryption not supported [ 1788.647170][T14700] usb 10-1: config 0 descriptor?? [ 1788.651388][T29926] EXT4-fs: Ignoring removed i_version option [ 1788.692170][T14700] hub 10-1:0.0: USB hub found [ 1788.740917][T29926] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1788.763784][T29930] loop6: detected capacity change from 0 to 1024 [ 1788.823827][T29930] hfsplus: Unknown parameter 'R`ý barrie' [ 1788.898242][T14700] hub 10-1:0.0: 14 ports detected [ 1788.913675][T14700] hub 10-1:0.0: insufficient power available to use all downstream ports [ 1788.967801][T29926] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.6702: lblock 2 mapped to illegal pblock 2 (length 1) [ 1788.990757][T29930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6703'. [ 1789.015944][T29926] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 1789.033864][T29926] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.6702: lblock 0 mapped to illegal pblock 48 (length 1) [ 1789.068623][T29926] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1789.079165][T29926] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6702: Failed to acquire dquot type 0 [ 1789.096983][T29926] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1789.154719][T29926] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.6702: mark_inode_dirty error [ 1789.178047][T29926] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1789.189281][T29926] EXT4-fs (loop4): 1 orphan inode deleted [ 1789.199197][T29926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1789.216438][T20802] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 1789.298463][T20802] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1789.310510][T20802] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 1789.401476][T14700] usb 10-1: USB disconnect, device number 6 [ 1789.692243][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1789.788577][ T5816] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1789.813648][ T5816] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1789.814492][T29955] loop6: detected capacity change from 0 to 256 [ 1789.840246][ T5816] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 1789.884733][T29955] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1789.899043][T29955] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1790.314871][T29955] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1791.438851][T29979] loop0: detected capacity change from 0 to 256 [ 1792.175898][T29977] loop6: detected capacity change from 0 to 32768 [ 1792.188844][T29977] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value [ 1793.287612][T30001] loop6: detected capacity change from 0 to 512 [ 1793.353230][T30005] netlink: 642 bytes leftover after parsing attributes in process `syz.8.6726'. [ 1793.411370][T30001] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1793.499111][T30001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e11c, mo2=0002] [ 1793.577839][T30009] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1793.594731][T30009] Error validating options; rc = [-22] [ 1793.728083][T30001] System zones: 1-12 [ 1793.768046][T30001] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1793.847552][T30001] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6736: bg 0: block 361: padding at end of block bitmap is not set [ 1793.895227][T30001] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1793.964034][T30001] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6736: invalid indirect mapped block 12 (level 1) [ 1793.995939][T30001] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6736: invalid indirect mapped block 2 (level 2) [ 1794.018508][T30001] EXT4-fs (loop6): 1 truncate cleaned up [ 1794.026724][T30001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1794.410868][T14690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1795.401480][T30037] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1795.415507][T30037] Error validating options; rc = [-22] [ 1795.538906][T30039] loop6: detected capacity change from 0 to 16 [ 1795.635712][T30039] erofs (device loop6): mounted with root inode @ nid 36. [ 1795.779227][T30044] netlink: 642 bytes leftover after parsing attributes in process `syz.9.6744'. [ 1796.667406][ T30] audit: type=1326 audit(1756236089.150:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30057 comm="syz.6.6748" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bd5b8ebe9 code=0x0 [ 1797.068933][T30067] loop8: detected capacity change from 0 to 256 [ 1797.108489][T30067] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1797.124411][T30067] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1797.273681][T30067] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1797.811383][T30078] loop4: detected capacity change from 0 to 128 [ 1797.880582][T30078] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1797.984571][T30078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1798.933094][T30097] loop0: detected capacity change from 0 to 8 [ 1799.010465][T30097] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1799.022710][T30097] SQUASHFS error: Failed to read block 0x9b: -5 [ 1799.029367][T30097] SQUASHFS error: Unable to read metadata cache entry [99] [ 1799.039924][T30097] SQUASHFS error: Unable to read inode 0x127 [ 1799.600149][ T30] audit: type=1326 audit(1756236093.091:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.4.6768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f186a58ebe9 code=0x0 [ 1799.849384][T14700] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1800.051469][T14700] usb 10-1: Using ep0 maxpacket: 16 [ 1800.110082][T14700] usb 10-1: config 0 has an invalid interface number: 24 but max is 0 [ 1800.119505][T14700] usb 10-1: config 0 has no interface number 0 [ 1800.129122][T14700] usb 10-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.140756][T14700] usb 10-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1800.151421][T14700] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1800.163908][T14700] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.206651][T14700] usb 10-1: config 0 descriptor?? [ 1800.676773][T14700] hid (null): global environment stack underflow [ 1800.683521][T14700] hid (null): unknown global tag 0xd [ 1800.692458][T14700] hid (null): report_id 55891 is invalid [ 1800.978396][T14700] usb 10-1: USB disconnect, device number 7 [ 1802.066626][T30159] loop9: detected capacity change from 0 to 8 [ 1802.099469][T30159] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1802.110868][T30159] SQUASHFS error: Failed to read block 0x9b: -5 [ 1802.117535][T30159] SQUASHFS error: Unable to read metadata cache entry [99] [ 1802.125073][T30159] SQUASHFS error: Unable to read inode 0x127 [ 1802.884629][T30174] loop9: detected capacity change from 0 to 16 [ 1802.908834][T30174] erofs (device loop9): mounted with root inode @ nid 36. [ 1803.823126][T30192] loop0: detected capacity change from 0 to 64 [ 1803.858663][T30181] loop8: detected capacity change from 0 to 4096 [ 1803.885450][T30192] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1803.906888][T30181] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1804.159208][T30181] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1806.051553][T30225] loop4: detected capacity change from 0 to 1024 [ 1806.280084][T30225] hfsplus: invalid xattr key length: 0 [ 1807.283493][T30247] support for the xor transformation has been removed. [ 1807.513615][T30250] loop4: detected capacity change from 0 to 16 [ 1807.578771][T30250] erofs (device loop4): mounted with root inode @ nid 36. [ 1807.682315][T30251] loop0: detected capacity change from 0 to 1024 [ 1807.743937][T30251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1807.861464][T30251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1808.349092][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1808.394480][T14700] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1808.588927][T14700] usb 10-1: Using ep0 maxpacket: 16 [ 1808.639899][T14700] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.651708][T14700] usb 10-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1808.661583][T14700] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.707734][T14700] usb 10-1: config 0 descriptor?? [ 1809.240754][T14700] aquacomputer_d5next 0003:0C70:F0B6.0034: unknown main item tag 0x0 [ 1809.249374][T14700] aquacomputer_d5next 0003:0C70:F0B6.0034: unknown main item tag 0x0 [ 1809.260768][T14700] aquacomputer_d5next 0003:0C70:F0B6.0034: unknown main item tag 0x0 [ 1809.269337][T14700] aquacomputer_d5next 0003:0C70:F0B6.0034: unknown main item tag 0x0 [ 1809.278499][T14700] aquacomputer_d5next 0003:0C70:F0B6.0034: unknown main item tag 0x0 [ 1809.512118][T14700] aquacomputer_d5next 0003:0C70:F0B6.0034: hidraw0: USB HID v0.05 Device [HID 0c70:f0b6] on usb-dummy_hcd.9-1/input0 [ 1809.636217][T14700] usb 10-1: USB disconnect, device number 8 [ 1811.473414][T30318] loop6: detected capacity change from 0 to 8192 [ 1812.292181][T30342] loop0: detected capacity change from 0 to 1024 [ 1813.259149][T30345] loop8: detected capacity change from 0 to 8192 [ 1813.319914][T30360] program syz.9.6852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1813.793590][T30366] loop0: detected capacity change from 0 to 8 [ 1813.860509][T30362] loop4: detected capacity change from 0 to 4096 [ 1813.911261][T30366] SQUASHFS error: zstd decompression error: 10 [ 1813.921883][T30371] loop9: detected capacity change from 0 to 256 [ 1813.929610][T30366] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1813.940936][T30366] SQUASHFS error: Failed to read block 0x60: -5 [ 1813.948314][T30366] SQUASHFS error: zstd decompression error: 10 [ 1813.957813][T30366] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1813.966253][T30366] SQUASHFS error: Failed to read block 0x60: -5 [ 1813.992711][T30362] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1814.058053][T30362] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1814.079056][T30362] System zones: 0-5 [ 1814.093357][T30371] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x08fbab18, utbl_chksum : 0xe619d30d) [ 1814.140053][T30362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1814.541560][T30381] loop8: detected capacity change from 0 to 1024 [ 1815.048664][ T14] hfsplus: b-tree write err: -5, ino 4 [ 1815.189948][ T14] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.310803][T30362] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 1815.425307][ T14] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.622717][T30362] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1815.686070][T30396] loop0: detected capacity change from 0 to 2048 [ 1815.724566][ T14] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.746341][T30362] overlayfs: upper fs does not support tmpfile. [ 1815.837076][T30362] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1815.936492][T30396] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1816.062457][T30396] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1816.083155][ T14] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.207333][T30396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1816.608137][ T14] bridge_slave_1: left allmulticast mode [ 1816.614032][ T14] bridge_slave_1: left promiscuous mode [ 1816.624836][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.646034][ T14] bridge_slave_0: left allmulticast mode [ 1816.651923][ T14] bridge_slave_0: left promiscuous mode [ 1816.661616][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.729188][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1817.472471][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1817.507336][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1817.550453][ T14] bond0 (unregistering): Released all slaves [ 1818.167373][ T14] hsr_slave_0: left promiscuous mode [ 1818.198618][ T14] hsr_slave_1: left promiscuous mode [ 1818.215329][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1818.223081][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1818.289984][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1818.298209][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1818.458459][ T14] veth1_macvtap: left promiscuous mode [ 1818.467412][ T14] veth0_macvtap: left promiscuous mode [ 1818.473378][ T14] veth1_vlan: left promiscuous mode [ 1818.479250][ T14] veth0_vlan: left promiscuous mode [ 1818.494295][T30438] loop8: detected capacity change from 0 to 764 [ 1818.619257][T30438] Symlink component flag not implemented [ 1818.629571][T30438] Symlink component flag not implemented [ 1818.635920][T30438] Symlink component flag not implemented (128) [ 1818.642267][T30438] Symlink component flag not implemented (122) [ 1819.278662][T30447] loop4: detected capacity change from 0 to 256 [ 1819.488821][T30454] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1819.488997][T30447] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x08fbab18, utbl_chksum : 0xe619d30d) [ 1819.521518][T30454] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1819.532112][T30454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1819.559214][T30454] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1819.580179][T30454] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1819.600498][T23584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1819.614249][T23584] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1819.624322][T23584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1819.647517][T23584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1819.659644][T23584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1820.278483][T30470] loop8: detected capacity change from 0 to 128 [ 1820.441532][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1820.506798][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1821.192200][T30475] loop6: detected capacity change from 0 to 1024 [ 1821.203438][T30475] hfsplus: Unexpected value for 'barrier' [ 1821.261850][T30475] kAFS: unable to lookup cell 'sYSAٸ?hrF5=X$jӋZ^ۺ2׳Hq=VJtd琎zhD A[stL}Zv݌̥ϳ܏y 43ۣ#989?\?mGiXR~Eڟ[_r/Wnn޸qOPML{2/D#DkLL~8@<T4lݬo\ŵX1q)+T_^dZiV/T>Vz;ղc˿,<@' [ 1821.717887][T30454] Bluetooth: hci4: command tx timeout [ 1821.854015][ T1853] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.322462][ T1853] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.520332][ T1853] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.553173][T30515] loop6: detected capacity change from 0 to 4096 [ 1822.599596][T30515] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1822.642041][T30515] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1822.650534][ T1853] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.680223][T30515] System zones: 0-5 [ 1822.753923][T30515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1822.779136][T30453] chnl_net:caif_netlink_parms(): no params data found [ 1823.144785][ T1853] bridge_slave_1: left allmulticast mode [ 1823.150806][ T1853] bridge_slave_1: left promiscuous mode [ 1823.157667][ T1853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.171535][T30515] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1823.182957][ T1853] bridge_slave_0: left allmulticast mode [ 1823.191515][ T1853] bridge_slave_0: left promiscuous mode [ 1823.198685][ T1853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.208067][T30515] overlayfs: upper fs does not support tmpfile. [ 1823.218598][T30515] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1823.797992][T30454] Bluetooth: hci4: command tx timeout [ 1823.846611][T14690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1824.310065][ T1853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1824.340798][ T1853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1824.369371][ T1853] bond0 (unregistering): Released all slaves [ 1824.395500][ T1853] bond1 (unregistering): Released all slaves [ 1824.646581][ T1853] tipc: Disabling bearer [ 1824.652594][ T1853] tipc: Left network mode [ 1824.922013][T30641] loop8: detected capacity change from 0 to 4096 [ 1825.014313][T30641] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1825.127546][T30641] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1825.208789][T30641] System zones: 0-5 [ 1825.254961][T30641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1825.355032][T30653] loop0: detected capacity change from 0 to 764 [ 1825.519989][T30653] Symlink component flag not implemented [ 1825.526204][T30653] Symlink component flag not implemented [ 1825.532347][T30653] Symlink component flag not implemented (128) [ 1825.538952][T30653] Symlink component flag not implemented (122) [ 1825.645774][T30641] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1825.659053][T23584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1825.702641][T23584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1825.713053][T23584] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1825.750235][ T1853] hsr_slave_0: left promiscuous mode [ 1825.788118][T30641] overlayfs: upper fs does not support tmpfile. [ 1825.795808][ T1853] hsr_slave_1: left promiscuous mode [ 1825.803829][T23584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1825.803916][ T1853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1825.804010][ T1853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1825.827711][T30641] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1825.841220][ T1853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1825.849161][ T1853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1825.863861][T23584] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1825.880050][T23584] Bluetooth: hci4: command tx timeout [ 1826.004809][ T1853] veth1_macvtap: left promiscuous mode [ 1826.010752][ T1853] veth1_vlan: left promiscuous mode [ 1826.018564][ T1853] veth0_vlan: left promiscuous mode [ 1826.190412][T16429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1826.664669][T30705] program syz.6.6888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1826.829247][T30708] loop0: detected capacity change from 0 to 256 [ 1826.965084][T30708] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1827.421194][ T1853] team0 (unregistering): Port device team_slave_1 removed [ 1827.452934][ T1853] team0 (unregistering): Port device team_slave_0 removed [ 1827.792980][T30453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.801695][T30453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1827.810253][T30453] bridge_slave_0: entered allmulticast mode [ 1827.820093][T30453] bridge_slave_0: entered promiscuous mode [ 1827.871118][T30453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1827.882498][T30453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1827.892535][T30453] bridge_slave_1: entered allmulticast mode [ 1827.908914][T30453] bridge_slave_1: entered promiscuous mode [ 1828.018753][T30692] Bluetooth: hci2: command tx timeout [ 1828.024879][T30692] Bluetooth: hci4: command tx timeout [ 1828.442819][T30453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1828.465741][ T1853] IPVS: stop unused estimator thread 0... [ 1828.497553][T30453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1828.698448][T30453] team0: Port device team_slave_0 added [ 1828.732117][T30453] team0: Port device team_slave_1 added [ 1828.999022][T30453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1829.006459][T30453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1829.032860][T30453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1829.068784][T30453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1829.077086][T30453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1829.106151][T30453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1829.339690][T30453] hsr_slave_0: entered promiscuous mode [ 1829.351683][T30453] hsr_slave_1: entered promiscuous mode [ 1829.360896][T30453] debugfs: 'hsr0' already exists in 'hsr' [ 1829.367006][T30453] Cannot create hsr debugfs directory [ 1829.448030][T30677] chnl_net:caif_netlink_parms(): no params data found [ 1830.036580][T30454] Bluetooth: hci2: command tx timeout [ 1830.372263][T30677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.380452][T30677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.388396][T30677] bridge_slave_0: entered allmulticast mode [ 1830.404398][T30677] bridge_slave_0: entered promiscuous mode [ 1830.419702][T30677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.427540][T30677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.436423][T30677] bridge_slave_1: entered allmulticast mode [ 1830.446092][T30677] bridge_slave_1: entered promiscuous mode [ 1830.575096][T30677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1830.608198][T30677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1830.782177][T30677] team0: Port device team_slave_0 added [ 1830.812338][T30677] team0: Port device team_slave_1 added [ 1830.962333][T30453] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1830.994964][T30677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1831.002109][T30677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1831.033913][T30677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1831.052824][T30677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1831.060251][T30677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1831.088978][T30677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1831.102673][T30453] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1831.152527][T30453] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1831.248109][T30453] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1831.406219][T30677] hsr_slave_0: entered promiscuous mode [ 1831.421504][T30677] hsr_slave_1: entered promiscuous mode [ 1831.431757][T30677] debugfs: 'hsr0' already exists in 'hsr' [ 1831.438059][T30677] Cannot create hsr debugfs directory [ 1832.115849][T30454] Bluetooth: hci2: command tx timeout [ 1832.225284][T30453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1832.300666][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1832.443104][T30677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1832.485344][T30453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1832.498633][T30677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1832.524846][T30677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1832.569323][T30409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.577010][T30409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1832.587501][T30677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1832.649669][T30410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.657340][T30410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.349964][T30677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1833.453966][T30677] 8021q: adding VLAN 0 to HW filter on device team0 [ 1833.505675][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.513220][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1833.555064][ T4094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.562612][ T4094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.945865][T30453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1834.196488][T30454] Bluetooth: hci2: command tx timeout [ 1834.232571][T30453] veth0_vlan: entered promiscuous mode [ 1834.315616][T30453] veth1_vlan: entered promiscuous mode [ 1834.515860][T30453] veth0_macvtap: entered promiscuous mode [ 1834.562355][T30453] veth1_macvtap: entered promiscuous mode [ 1834.651982][T30453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1834.680392][T30453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1834.764830][T30410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1834.779349][T30410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1834.827423][ T7344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1834.850067][ T7344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1834.993353][T30677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1835.298113][T30677] veth0_vlan: entered promiscuous mode [ 1835.375785][T30677] veth1_vlan: entered promiscuous mode [ 1835.600765][T30677] veth0_macvtap: entered promiscuous mode [ 1835.667004][T30677] veth1_macvtap: entered promiscuous mode [ 1835.792236][T30677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1835.880590][T30677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.963633][ T7344] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.035061][ T7344] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.064923][ T7344] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.075641][ T7344] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.348859][ T1853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.357319][ T1853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.463250][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.471528][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1839.255859][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1839.264009][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1839.335810][T31303] loop3: detected capacity change from 0 to 764 [ 1839.482745][T31303] Symlink component flag not implemented [ 1839.488841][T31303] Symlink component flag not implemented [ 1839.499441][T31303] Symlink component flag not implemented (128) [ 1839.510819][T31303] Symlink component flag not implemented (122) [ 1839.544461][ T4094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1839.552514][ T4094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1840.077378][T31326] netlink: 'syz.0.6902': attribute type 6 has an invalid length. [ 1843.818774][T31393] loop3: detected capacity change from 0 to 2048 [ 1843.889358][T31399] netlink: 1268 bytes leftover after parsing attributes in process `syz.8.6936'. [ 1843.903573][T31399] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1844.004959][T31393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1844.069928][T31393] EXT4-fs error (device loop3): ext4_ext_precache:649: inode #2: comm syz.3.6934: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1844.471771][T30453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1846.085489][T31437] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.6950'. [ 1846.095270][T31437] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1846.554629][T31436] loop8: detected capacity change from 0 to 4096 [ 1846.624466][T31436] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1847.032170][T31436] ntfs3(loop8): ino=19, mi_enum_attr [ 1847.037969][T31436] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1847.826062][T31461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1848.346047][T31467] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6965'. [ 1848.355794][T31467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1849.840013][T31494] loop6: detected capacity change from 0 to 1024 [ 1849.898032][T31494] EXT4-fs: Ignoring removed orlov option [ 1849.904419][T31494] EXT4-fs: Ignoring removed mblk_io_submit option [ 1849.937021][T31494] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1850.086438][T31494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1850.273987][T31506] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6981'. [ 1850.283618][T31506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1850.628827][T14690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1851.830137][T31537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6995'. [ 1852.106260][T31545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1852.749697][T31561] loop3: detected capacity change from 0 to 1024 [ 1852.765475][T14700] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1852.782363][T31561] EXT4-fs: Ignoring removed bh option [ 1852.830263][T31561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1852.969979][T14700] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1852.977174][T14700] usb 1-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 1852.986651][T14700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.006210][T14700] usb 1-1: config 0 descriptor?? [ 1853.352264][T30453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1853.526453][T14700] hid_mf 0003:0079:1844.0035: hidraw0: USB HID v8.80 Device [HID 0079:1844] on usb-dummy_hcd.0-1/input0 [ 1853.544519][T14700] hid_mf 0003:0079:1844.0035: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 1853.708917][T22488] usb 1-1: USB disconnect, device number 6 [ 1854.786592][T31620] loop1: detected capacity change from 0 to 1024 [ 1854.796592][T31620] EXT4-fs: Ignoring removed bh option [ 1854.903237][T31620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1855.199311][T30410] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.436346][T30410] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.477690][T30677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1855.588158][T30410] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.768531][T30410] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.120138][T30410] bridge_slave_1: left allmulticast mode [ 1856.126222][T30410] bridge_slave_1: left promiscuous mode [ 1856.132907][T30410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1856.152995][T30410] bridge_slave_0: left allmulticast mode [ 1856.159181][T30410] bridge_slave_0: left promiscuous mode [ 1856.166292][T30410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.786098][T30410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1856.819641][T30410] bond_slave_0: left promiscuous mode [ 1856.865411][T30410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1856.883083][T30410] bond_slave_1: left promiscuous mode [ 1856.896124][T30410] bond0 (unregistering): Released all slaves [ 1856.923022][T30410] bond1 (unregistering): Released all slaves [ 1857.310044][T31666] loop0: detected capacity change from 0 to 64 [ 1857.327500][T31665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7031'. [ 1857.337325][T31665] netlink: 'syz.1.7031': attribute type 2 has an invalid length. [ 1857.345429][T31665] netlink: 'syz.1.7031': attribute type 1 has an invalid length. [ 1857.353343][T31665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7031'. [ 1857.499938][T22488] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1857.611423][T30410] hsr_slave_0: left promiscuous mode [ 1857.628456][T30410] hsr_slave_1: left promiscuous mode [ 1857.642632][T30410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1857.650625][T30410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1857.716942][T30410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1857.729012][T30410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1857.768467][T22488] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1857.775705][T22488] usb 9-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 1857.788628][T22488] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.851047][T30410] veth1_macvtap: left promiscuous mode [ 1857.858235][T30410] veth0_macvtap: left promiscuous mode [ 1857.864344][T30410] veth1_vlan: left promiscuous mode [ 1857.869934][T30410] veth0_vlan: left promiscuous mode [ 1857.898982][T22488] usb 9-1: config 0 descriptor?? [ 1858.238160][T30692] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1858.253562][T30692] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1858.289280][T30692] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1858.323843][T30692] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1858.336696][T31686] loop1: detected capacity change from 0 to 512 [ 1858.350855][T30692] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1858.413153][T31686] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1858.462384][T22488] hid_mf 0003:0079:1844.0036: hidraw0: USB HID v8.80 Device [HID 0079:1844] on usb-dummy_hcd.8-1/input0 [ 1858.474011][T22488] hid_mf 0003:0079:1844.0036: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 1858.561153][T31686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1858.574733][T31686] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1858.618149][T14700] usb 9-1: USB disconnect, device number 17 [ 1858.801311][T31686] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1858.837184][T31686] EXT4-fs (loop1): can't enable nombcache during remount [ 1859.276103][T30677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1859.308867][T30410] team0 (unregistering): Port device team_slave_1 removed [ 1859.339805][T30410] team0 (unregistering): Port device team_slave_0 removed [ 1859.870424][T31716] ===================================================== [ 1859.879255][T31716] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x4e4/0x33f0 [ 1859.889084][T31716] _copy_to_iter+0x4e4/0x33f0 [ 1859.894969][T31716] __skb_datagram_iter+0x196/0x12c0 [ 1859.900399][T31716] skb_copy_datagram_iter+0x5b/0x1e0 [ 1859.906160][T31716] packet_recvmsg+0xe2b/0x24e0 [ 1859.911165][T31716] sock_recvmsg+0x2dc/0x390 [ 1859.916120][T31716] ____sys_recvmsg+0x193/0x610 [ 1859.921099][T31716] ___sys_recvmsg+0x20b/0x850 [ 1859.926238][T31716] do_recvmmsg+0x40e/0xdf0 [ 1859.933969][T31716] __x64_sys_recvmmsg+0x383/0x500 [ 1859.940227][T31716] x64_sys_call+0x2f74/0x3e20 [ 1859.945337][T31716] do_syscall_64+0xd9/0x210 [ 1859.950068][T31716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.956495][T31716] [ 1859.958928][T31716] Uninit was created at: [ 1859.963449][T31716] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 1859.969739][T31716] kmalloc_reserve+0x13c/0x4b0 [ 1859.974949][T31716] __alloc_skb+0x347/0x7d0 [ 1859.979637][T31716] tipc_buf_acquire+0x4c/0x230 [ 1859.984953][T31716] tipc_disc_create+0x12f/0x870 [ 1859.990057][T31716] __tipc_nl_bearer_enable+0x1f61/0x2a00 [ 1859.999149][T31716] tipc_nl_bearer_enable+0x3d/0x70 [ 1860.005734][T31716] genl_family_rcv_msg_doit+0x338/0x3f0 [ 1860.011548][T31716] genl_rcv_msg+0xacf/0xc10 [ 1860.018200][T31716] netlink_rcv_skb+0x54d/0x680 [ 1860.023178][T31716] genl_rcv+0x41/0x60 [ 1860.029404][T31716] netlink_unicast+0xf01/0x12b0 [ 1860.038141][T31716] netlink_sendmsg+0x10b3/0x1250 [ 1860.043391][T31716] __sock_sendmsg+0x333/0x3d0 [ 1860.050129][T31716] ____sys_sendmsg+0x7e0/0xd80 [ 1860.055759][T31716] ___sys_sendmsg+0x271/0x3b0 [ 1860.060646][T31716] __x64_sys_sendmsg+0x211/0x3e0 [ 1860.066520][T31716] x64_sys_call+0x1dfd/0x3e20 [ 1860.071541][T31716] do_syscall_64+0xd9/0x210 [ 1860.076960][T31716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.083082][T31716] [ 1860.086178][T31716] Bytes 4-5 of 26 are uninitialized [ 1860.095284][T31716] Memory access of size 26 starts at ffff8881191600a4 [ 1860.102195][T31716] Data copied to user address 00002000000000ca [ 1860.109269][T31716] [ 1860.111714][T31716] CPU: 1 UID: 0 PID: 31716 Comm: syz.0.7038 Not tainted syzkaller #0 PREEMPT(none) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1860.122011][T31716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1860.132930][T31716] ===================================================== [ 1860.143636][T31716] Disabling lock debugging due to kernel taint [ 1860.151676][T31716] Kernel panic - not syncing: kmsan.panic set ... [ 1860.158322][T31716] CPU: 1 UID: 0 PID: 31716 Comm: syz.0.7038 Tainted: G B syzkaller #0 PREEMPT(none) [ 1860.169514][T31716] Tainted: [B]=BAD_PAGE [ 1860.173792][T31716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1860.184280][T31716] Call Trace: [ 1860.187780][T31716] [ 1860.191349][T31716] __dump_stack+0x26/0x30 [ 1860.195910][T31716] dump_stack_lvl+0x53/0x270 [ 1860.200780][T31716] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1860.206862][T31716] dump_stack+0x1e/0x25 [ 1860.211236][T31716] vpanic+0x361/0xc50 [ 1860.215451][T31716] panic+0x15d/0x160 [ 1860.219607][T31716] kmsan_report+0x31c/0x320 [ 1860.224311][T31716] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1860.230344][T31716] ? kmsan_internal_check_memory+0x16c/0x230 [ 1860.236597][T31716] ? kmsan_copy_to_user+0xf1/0x190 [ 1860.241907][T31716] ? _copy_to_iter+0x4e4/0x33f0 [ 1860.247174][T31716] ? __skb_datagram_iter+0x196/0x12c0 [ 1860.252749][T31716] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 1860.258414][T31716] ? packet_recvmsg+0xe2b/0x24e0 [ 1860.263582][T31716] ? sock_recvmsg+0x2dc/0x390 [ 1860.268486][T31716] ? ____sys_recvmsg+0x193/0x610 [ 1860.273614][T31716] ? ___sys_recvmsg+0x20b/0x850 [ 1860.278655][T31716] ? do_recvmmsg+0x40e/0xdf0 [ 1860.283433][T31716] ? __x64_sys_recvmmsg+0x383/0x500 [ 1860.288849][T31716] ? x64_sys_call+0x2f74/0x3e20 [ 1860.293988][T31716] ? do_syscall_64+0xd9/0x210 [ 1860.298903][T31716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.305173][T31716] ? kmsan_get_metadata+0xfb/0x160 [ 1860.310480][T31716] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1860.316523][T31716] ? kmsan_get_metadata+0xfb/0x160 [ 1860.321825][T31716] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1860.328330][T31716] ? kmsan_get_metadata+0xfb/0x160 [ 1860.333667][T31716] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1860.339675][T31716] kmsan_internal_check_memory+0x16c/0x230 [ 1860.345683][T31716] kmsan_copy_to_user+0xf1/0x190 [ 1860.350824][T31716] _copy_to_iter+0x4e4/0x33f0 [ 1860.355801][T31716] __skb_datagram_iter+0x196/0x12c0 [ 1860.361199][T31716] ? filter_irq_stacks+0x49/0x190 [ 1860.366454][T31716] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1860.372328][T31716] skb_copy_datagram_iter+0x5b/0x1e0 [ 1860.377814][T31716] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1860.383907][T31716] packet_recvmsg+0xe2b/0x24e0 [ 1860.388954][T31716] ? __pfx_packet_recvmsg+0x10/0x10 [ 1860.394399][T31716] sock_recvmsg+0x2dc/0x390 [ 1860.399163][T31716] ____sys_recvmsg+0x193/0x610 [ 1860.404197][T31716] ___sys_recvmsg+0x20b/0x850 [ 1860.409126][T31716] ? kmsan_get_metadata+0xfb/0x160 [ 1860.414426][T31716] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1860.420438][T31716] do_recvmmsg+0x40e/0xdf0 [ 1860.425079][T31716] ? stack_depot_save_flags+0x35/0x7b0 [ 1860.430759][T31716] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1860.436752][T31716] ? kmsan_get_metadata+0xfb/0x160 [ 1860.442092][T31716] __x64_sys_recvmmsg+0x383/0x500 [ 1860.447348][T31716] x64_sys_call+0x2f74/0x3e20 [ 1860.452250][T31716] do_syscall_64+0xd9/0x210 [ 1860.456966][T31716] ? irqentry_exit+0x16/0x60 [ 1860.461765][T31716] ? clear_bhb_loop+0x40/0x90 [ 1860.466641][T31716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.472798][T31716] RIP: 0033:0x7fad96f8ebe9 [ 1860.477342][T31716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1860.497232][T31716] RSP: 002b:00007fad97e70038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1860.505852][T31716] RAX: ffffffffffffffda RBX: 00007fad971b5fa0 RCX: 00007fad96f8ebe9 [ 1860.513975][T31716] RDX: 0000000000000001 RSI: 0000200000005940 RDI: 0000000000000003 [ 1860.522100][T31716] RBP: 00007fad97011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1860.530197][T31716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1860.538288][T31716] R13: 00007fad971b6038 R14: 00007fad971b5fa0 R15: 00007ffd5e67a6d8 [ 1860.546436][T31716] [ 1860.549939][T31716] Kernel Offset: disabled [ 1860.554353][T31716] Rebooting in 86400 seconds..