last executing test programs: 33m26.257388974s ago: executing program 32 (id=565): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, @value=0x100a}) 15m49.208128407s ago: executing program 33 (id=7409): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{0x80000000}, {0x80000000}}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000200)={{r2, r3, 0x3, [0x6, 0xffffffff]}, {r1, r3, 0x1, [0xfffffff9, 0xc]}, 0x10000007, [0x4, 0x800]}) 15m44.595254551s ago: executing program 5 (id=7439): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{}]}, 0x2c, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/254, 0x145) 15m44.1268686s ago: executing program 5 (id=7441): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @local, @mcast2, 0x800000, 0xa, 0x0, 0x0, 0x7ffffffe, 0x140192, r1}) 15m43.66776457s ago: executing program 5 (id=7445): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast2, 0x4e20}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, {}, {0x0, 0x100000, 0x1}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xb6}}}, 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x2}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7ee643bd1282d893}}}, 0xf8}}, 0x0) 15m42.952224203s ago: executing program 5 (id=7450): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d6370313235302c6e6f626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',force,umask=000000005,\x00'/38], 0x3, 0x6a4, &(0x7f0000000100)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) 15m42.106196969s ago: executing program 5 (id=7452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, 0x0, 0x0, 0x4}, 0x20) 15m41.499597298s ago: executing program 5 (id=7456): futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, 0x0, 0x0, 0x5000000) setfsuid(0x0) 15m39.823522834s ago: executing program 34 (id=7456): futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, 0x0, 0x0, 0x5000000) setfsuid(0x0) 4m35.944239145s ago: executing program 7 (id=11513): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="28bba70d000000027f", 0x9}, {&(0x7f0000000340)='\f\t:', 0x3}, {&(0x7f0000001380)="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", 0x2a0}], 0x3, 0x8, 0x96) 4m35.108511488s ago: executing program 7 (id=11519): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) poll(&(0x7f0000000340)=[{r0, 0xe8}], 0x1, 0x8001) ioctl$int_in(r0, 0x5452, &(0x7f0000001840)=0x5d4) 4m34.238818538s ago: executing program 7 (id=11524): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r0, &(0x7f0000000080)=""/237, 0xed, 0x0) 4m33.203634828s ago: executing program 7 (id=11527): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x481, &(0x7f0000000480)={[{}, {@gid}, {@type={'type', 0x3d, "69759d7b"}}, {@nobarrier}, {@part={'part', 0x3d, 0x5}}, {@part}, {@gid}, {@uid}, {@nls={'nls', 0x3d, 'cp863'}}]}, 0x1, 0x6f8, &(0x7f0000002440)="$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") mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4m32.16466607s ago: executing program 7 (id=11531): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000500000000811274000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) 4m31.315242894s ago: executing program 7 (id=11535): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 4m29.264652223s ago: executing program 35 (id=11535): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 2m8.956561129s ago: executing program 1 (id=12356): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x2, 0x9}) 2m8.126760193s ago: executing program 1 (id=12370): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 2m7.596761277s ago: executing program 1 (id=12362): r0 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, &(0x7f0000000040)=0xfffffffffffffffe, r1, 0x0, 0xb, 0x1) 2m7.093197103s ago: executing program 1 (id=12364): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 2m5.738297627s ago: executing program 1 (id=12374): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3ff}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 2m4.622211237s ago: executing program 1 (id=12379): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000080)=""/1) 2m1.087758501s ago: executing program 36 (id=12379): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000080)=""/1) 1m57.758796328s ago: executing program 0 (id=12398): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @private2, 0x9}}, 0x0, 0xfffe}, 0x90) 1m56.171911132s ago: executing program 0 (id=12403): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x40000000) 1m54.985528357s ago: executing program 0 (id=12407): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) fsync(0xffffffffffffffff) 1m53.994967877s ago: executing program 0 (id=12411): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 1m53.486995415s ago: executing program 8 (id=12415): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a00000800000500"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000850) 1m52.621915089s ago: executing program 0 (id=12416): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x80) close(r0) 1m52.616793859s ago: executing program 8 (id=12418): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2d, &(0x7f0000000040)) 1m51.68777181s ago: executing program 8 (id=12421): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0xa5, &(0x7f00000000c0)}, 0x10) 1m51.307907783s ago: executing program 0 (id=12423): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000fec000/0x12000)=nil, 0x12000, 0x100000e, 0x11, r0, 0x0) 1m48.987611236s ago: executing program 37 (id=12423): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000fec000/0x12000)=nil, 0x12000, 0x100000e, 0x11, r0, 0x0) 1m48.89889017s ago: executing program 8 (id=12427): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 1m47.729791685s ago: executing program 8 (id=12429): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c00000000007646"], 0xa0}}, 0x0) 1m45.349562481s ago: executing program 8 (id=12435): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="27031c00160014000000002f1eafacf706e105000000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x40084) 1m42.908208034s ago: executing program 38 (id=12435): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="27031c00160014000000002f1eafacf706e105000000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x40084) 6.275250956s ago: executing program 6 (id=12922): socketpair$unix(0x1, 0x2, 0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) 5.885506423s ago: executing program 3 (id=12924): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000009b80)=ANY=[@ANYBLOB='iocharset=macromanian,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c757466382c646973636172642c6b6565705f6c6173745f646f74732c666d61736b3d30303030303030303030303030303030303030303331372c6e616d65636173653d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030342c696f636861727365743d69736f383835392d322c0036b31d821d64f6269a45f32df22d1ca8bb2f562a2c947b9b1642d15000b2bfe919b892a8b2deb4ead6027b0215761d101255ca823e3e5b3ad9d42af3944b48687df1b9"], 0x1, 0x1522, &(0x7f0000000280)="$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") r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x1d, r0, &(0x7f0000000300)=""/182, 0xb6) 5.294148264s ago: executing program 2 (id=12925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=cp737,umask=0\x00\x00\x00\x00\x00\x00\x00@0800d=', @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYBLOB=',quota,gid=', @ANYRES64, @ANYBLOB=',noquota,usrquota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,subj_type=+-]{.&Q.,fowner=', @ANYRESDEC, @ANYRES64], 0x5, 0x615b, &(0x7f0000008b40)="$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") 5.227780002s ago: executing program 6 (id=12926): syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200004c, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRES16], 0xfd, 0x147, &(0x7f0000000400)="$eJzs0D1L81AUB/D/JX17Hq1WrFAHq+BgMVTThLqJ1DcoWAOCu9BGEFordikupYNbP0IQRXAKGcTRoepUaUDql3AJCAqOkZtEg4OL8/lt93/OPfdlY9nKIAEI8KzVa0fHWqOhVWZ2HMdpXd/cjvA8CiD2o77i9ncLwIsAdEOA3QYqAB7iLewfVLWFcr3K13YByABYHYKbS/B6//Ms6WW54Aq4n/AyGVjnfZnZIFP8vZEYwBDMcy6AOT5v7Hse3gE0ddE0Hrf7vWJ2/mpKwGlRnB5nOOvoohny87TWkTcnL4dTAnb/8RmM73te7GXDMI2B1S9tqSXVUmR5SZFykpQf8FvmHfdTOOadw/xlBKl0FG8nX+8x3Lp9x+L8cecfam00mgTwepgAnvBbhTX18l4q3EZwCiGEEEIIIYQQ8jefAQAA//+c9WQF") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4084, 0xff4) 4.771663862s ago: executing program 3 (id=12931): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000007fa3d1aa000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 4.518982498s ago: executing program 3 (id=12932): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800010280000000fcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.93126965s ago: executing program 3 (id=12934): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2000800, &(0x7f0000003780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.448451846s ago: executing program 9 (id=12935): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x2, 0x4038a09, 0x4, @loopback={0xe0}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 3.448217738s ago: executing program 6 (id=12936): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000001600)={0x0, 0xea60}, 0x10) readv(r0, &(0x7f0000002c80)=[{&(0x7f0000001ac0)=""/133, 0x85}], 0x1) 3.448062508s ago: executing program 2 (id=12937): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) 2.900746971s ago: executing program 9 (id=12939): io_setup(0x5, &(0x7f0000000e80)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 2.74226907s ago: executing program 6 (id=12940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4048aec9, 0x0) 2.659578761s ago: executing program 4 (id=12941): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x418bb}) 2.465420321s ago: executing program 3 (id=12943): syz_usb_connect(0x0, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ceb4a84049198a0c69720102030109024400010006606f09040c0400ff5d81000a24070600040201020c240805603340fa755061c109240702060004f23b0a240109"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_settime(0xfffffffb, &(0x7f0000000140)) 2.306821054s ago: executing program 9 (id=12944): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.159651581s ago: executing program 4 (id=12945): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x7, 0x7ab0715dca68fed7, 0x0, {}, {0x77359400}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7f1593c0639bd084bba0bfd8db72f70e5b0e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf71890900"}}, 0x80}}, 0x40090) 2.141284778s ago: executing program 6 (id=12946): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fe27008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.947270349s ago: executing program 9 (id=12947): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) iopl(0x3) timer_create(0x7, 0x0, &(0x7f0000000180)) 1.655967331s ago: executing program 2 (id=12948): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xe24) 1.655715819s ago: executing program 4 (id=12949): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a140, 0x0) unshare(0x28000600) read$FUSE(r0, 0x0, 0x0) 1.536517415s ago: executing program 9 (id=12950): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 1.144587039s ago: executing program 2 (id=12951): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "9531fca40053bcb83a33b9264c0000000000006c7db58c799a99ec00"}) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f0000000040)) 923.965197ms ago: executing program 4 (id=12952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 531.730957ms ago: executing program 6 (id=12953): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) unshare(0x8000400) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r0, 0x38, 0x0}, 0x10) 516.143304ms ago: executing program 2 (id=12954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)={0x58, 0xb, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}}, 0x8000) 401.52425ms ago: executing program 4 (id=12955): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x6}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 371.002029ms ago: executing program 9 (id=12956): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20044005}, 0x4000010) 150.706488ms ago: executing program 3 (id=12957): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x1, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000003c0)={0x200, [0x0, 0x1, 0x800, 0x8, 0x2dc3, 0x443f, 0x7, 0x5, 0xd, 0x5, 0xaec, 0x8, 0x2, 0x9, 0x425, 0x22, 0x3, 0x6, 0x8, 0x1ff, 0x3, 0x5, 0x1, 0x3, 0x1ff, 0x2, 0x2, 0x9, 0x6, 0xe2d, 0xfff3, 0xa1a, 0x6, 0x2, 0xe, 0x6b1d, 0x3, 0x4, 0x1ff, 0x20ff, 0x3, 0x6, 0xfffe, 0x9, 0x2, 0xf, 0x2, 0xe], 0x5}) 209.222µs ago: executing program 2 (id=12958): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002c80), &(0x7f00000061c0)=0x4) 0s ago: executing program 4 (id=12959): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) semtimedop(0x0, &(0x7f0000001140)=[{0x0, 0x6, 0x800}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}) kernel console output (not intermixed with test programs): no inputs found [ 2180.629885][ T1895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2180.679755][ T3669] loop1: detected capacity change from 0 to 256 [ 2180.698870][ T3669] exfat: Deprecated parameter 'namecase' [ 2180.742977][T22244] usb 7-1: USB disconnect, device number 30 [ 2180.777574][ T3669] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2180.883037][ T3669] (unnamed net_device) (uninitialized): option mode: invalid value (48) [ 2181.335139][ T3693] loop3: detected capacity change from 0 to 64 [ 2181.441959][ T3693] hfs: bad catalog folder thread [ 2181.642941][ T3700] loop8: detected capacity change from 0 to 512 [ 2181.752734][ T3703] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11999'. [ 2181.766741][ T3703] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11999'. [ 2181.809427][ T3700] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2181.829617][ T3700] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2182.142858][ T3711] loop0: detected capacity change from 0 to 128 [ 2182.193122][ T3711] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 2182.277668][ T3711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2182.351819][ T1895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2182.848901][ T3726] loop8: detected capacity change from 0 to 1024 [ 2182.895447][ T3724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12006'. [ 2183.022509][ T3726] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2183.156142][ T3726] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #11: comm syz.8.12004: missing EA_INODE flag [ 2183.214979][ T3726] EXT4-fs (loop8): Remounting filesystem read-only [ 2183.498182][ T1895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2184.486687][ T3759] loop8: detected capacity change from 0 to 1024 [ 2184.527845][ T3759] EXT4-fs: Ignoring removed oldalloc option [ 2184.535017][ T3759] EXT4-fs: Ignoring removed orlov option [ 2184.590385][ T3759] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 2184.709050][ T3759] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2184.907344][ T3771] loop1: detected capacity change from 0 to 256 [ 2184.921418][ T3771] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2184.932877][ T3771] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 2184.986888][ T3759] EXT4-fs: Ignoring removed orlov option [ 2185.008352][ T3759] EXT4-fs (loop8): can't enable nombcache during remount [ 2185.033371][ T3771] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 2185.229916][ T1895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2186.230689][ T3791] loop3: detected capacity change from 0 to 16 [ 2186.268802][ T3791] erofs (device loop3): unsupported datalayout 5 of nid 36 [ 2186.683935][ T3800] loop8: detected capacity change from 0 to 1024 [ 2187.261076][ T3808] loop6: detected capacity change from 0 to 512 [ 2187.391915][ T51] hfsplus: b-tree write err: -5, ino 4 [ 2187.458109][ T3802] loop1: detected capacity change from 0 to 32768 [ 2187.562778][ T3808] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2187.578427][ T3808] ext4 filesystem being mounted at /932/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2187.630388][ T3802] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 2187.665867][ T3802] XFS (loop1): Log size 624 blocks too small, minimum size is 816 blocks [ 2187.674993][ T3802] XFS (loop1): AAIEEE! Log failed size checks. Abort! [ 2187.687926][ T3802] XFS (loop1): log mount failed [ 2188.149384][ T3828] loop3: detected capacity change from 0 to 1764 [ 2188.206375][T22163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2188.341265][ T3830] loop8: detected capacity change from 0 to 2048 [ 2188.466217][ T3830] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2189.044873][ T3838] loop1: detected capacity change from 0 to 2048 [ 2189.163971][ T3838] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2189.354983][ T3834] loop0: detected capacity change from 0 to 32768 [ 2189.370426][ T3840] loop6: detected capacity change from 0 to 2048 [ 2189.376969][ T3834] bcachefs (/dev/loop0): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 1) [ 2189.377514][ T3834] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size [ 2189.414688][ T3847] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2189.808699][ T3853] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2190.031394][ T3855] netlink: 32 bytes leftover after parsing attributes in process `syz.8.12041'. [ 2190.474353][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2190.482017][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2191.592853][ T3870] loop0: detected capacity change from 0 to 32768 [ 2191.778894][ T3870] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=none,compression=lz4,str_hash=crc64,norecovery,reconstruct_alloc [ 2191.779063][ T3870] allowing incompatible features above 0.0: (unknown version) [ 2191.779164][ T3870] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 2191.831957][ T3870] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 2191.842340][ T3870] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: no devices in entry free: 0/0 [], fixing [ 2191.867601][ T3870] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 2191.877057][ T3870] bcachefs (loop0): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete [ 2191.877057][ T3870] Doing compatible version upgrade from 1.19: autofix_errors to 1.28: inode_has_case_insensitive [ 2191.877057][ T3870] running recovery passes: check_extents_to_backpointers,check_inodes [ 2191.914069][ T3870] bcachefs (loop0): dropping and reconstructing all alloc info [ 2191.927340][ T30] audit: type=1326 audit(1750932617.070:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3880 comm="syz.6.12049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2191.969866][ T3870] bcachefs (loop0): btree node read error at btree extents level 0/0 [ 2191.969963][ T3870] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 2191.970065][ T3870] loop0 node offset 0/16 bset u64s 0: invalid bkey format: incorrect key_u64s: got 0, should be 3 [ 2191.970151][ T3870] u64s 0 fields 64:0, 64:0, 32:0, 0:0, 0:0, 0:0 [ 2191.970227][ T3870] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 2191.970316][ T3870] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 2191.970405][ T3870] ret btree_node_read_validate_error [ 2192.059592][ T3870] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 2192.089582][ T3870] bcachefs (loop0): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 2192.110007][ T3870] bcachefs (loop0): btree node read error at btree xattrs level 0/0 [ 2192.110111][ T3870] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 2192.110227][ T3870] loop0 node offset 0/16: got wrong btree node: got [ 2192.110303][ T3870] btree=xattrs level=0 seq ded0abe32 1 [ 2192.110376][ T3870] min: POS_MIN [ 2192.110437][ T3870] max: SPOS_MAX [ 2192.110504][ T3870] ret btree_node_read_validate_error [ 2192.171639][ T3870] bcachefs (loop0): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 2192.174793][ T30] audit: type=1326 audit(1750932617.140:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3880 comm="syz.6.12049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2192.199197][ T3870] bcachefs (loop0): btree node read error at btree snapshots level 0/0 [ 2192.205460][ T30] audit: type=1326 audit(1750932617.160:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3880 comm="syz.6.12049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2192.205698][ T30] audit: type=1326 audit(1750932617.190:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3880 comm="syz.6.12049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2192.205929][ T30] audit: type=1326 audit(1750932617.200:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3880 comm="syz.6.12049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2192.302285][ T3870] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 2192.316356][ T3870] loop0 node offset 0/16: incorrect min_key: got 0:0:1023410176 should be POS_MIN [ 2192.331340][ T3870] flagging btree snapshots lost data [ 2192.337227][ T3870] running recovery pass reconstruct_snapshots (21), currently at recovery_pass_empty (0) [ 2192.347562][ T3870] ret btree_node_read_validate_error [ 2192.353916][ T3870] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 2192.379599][ T3870] bcachefs (loop0): check_topology... [ 2192.380051][ T3870] bcachefs (loop0): btree root extents unreadable, must recover from scan [ 2192.400399][ T3870] bcachefs (loop0): no nodes found for btree extents, continuing [ 2192.409572][ T3870] bcachefs (loop0): btree root dirents unreadable, must recover from scan [ 2192.418852][ T3870] bcachefs (loop0): no nodes found for btree dirents, continuing [ 2192.432807][ T3870] bcachefs (loop0): btree root xattrs unreadable, must recover from scan [ 2192.442058][ T3870] bcachefs (loop0): no nodes found for btree xattrs, continuing [ 2192.451885][ T3870] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 2192.466876][ T3870] bcachefs (loop0): no nodes found for btree snapshots, continuing [ 2192.480881][ T3870] done [ 2192.483851][ T3870] bcachefs (loop0): accounting_read... done [ 2192.498252][ T3870] bcachefs (loop0): alloc_read... done [ 2192.506513][ T3870] bcachefs (loop0): snapshots_read... done [ 2192.517919][ T3870] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 2192.532784][ T3870] bcachefs (loop0): done starting filesystem [ 2192.578050][ T3884] loop1: detected capacity change from 0 to 8 [ 2192.714024][ T3884] SQUASHFS error: zlib decompression failed, data probably corrupt [ 2192.727718][ T3884] SQUASHFS error: Failed to read block 0x9b: -5 [ 2192.734683][ T3884] SQUASHFS error: Unable to read metadata cache entry [99] [ 2192.742106][ T3884] SQUASHFS error: Unable to read inode 0x127 [ 2192.768223][ T5809] bcachefs (loop0): shutting down [ 2192.891024][ T5809] bcachefs (loop0): shutdown complete [ 2194.254063][ T3916] loop8: detected capacity change from 0 to 256 [ 2194.405071][ T3916] FAT-fs (loop8): Directory bread(block 64) failed [ 2194.415460][ T3916] FAT-fs (loop8): Directory bread(block 65) failed [ 2194.422459][ T3916] FAT-fs (loop8): Directory bread(block 66) failed [ 2194.430632][ T3916] FAT-fs (loop8): Directory bread(block 67) failed [ 2194.437694][ T3916] FAT-fs (loop8): Directory bread(block 68) failed [ 2194.444588][ T3916] FAT-fs (loop8): Directory bread(block 69) failed [ 2194.451524][ T3916] FAT-fs (loop8): Directory bread(block 70) failed [ 2194.458645][ T3916] FAT-fs (loop8): Directory bread(block 71) failed [ 2194.465907][ T3916] FAT-fs (loop8): Directory bread(block 72) failed [ 2194.472698][ T3916] FAT-fs (loop8): Directory bread(block 73) failed [ 2195.739877][ T3937] loop8: detected capacity change from 0 to 1024 [ 2195.882974][ T30] audit: type=1326 audit(1750932621.020:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3938 comm="syz.3.12071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2196.057896][ T30] audit: type=1326 audit(1750932621.070:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3938 comm="syz.3.12071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2196.081407][ T30] audit: type=1326 audit(1750932621.080:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3938 comm="syz.3.12071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2196.104344][ T30] audit: type=1326 audit(1750932621.080:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3938 comm="syz.3.12071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2196.127443][ T30] audit: type=1326 audit(1750932621.080:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3938 comm="syz.3.12071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2196.245518][ T3935] loop6: detected capacity change from 0 to 32768 [ 2196.265234][ T3935] (syz.6.12070,3935,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xd019cb8, computed 0xaee335. Applying ECC. [ 2196.279091][ T3935] (syz.6.12070,3935,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xd019cb8, computed 0xaee335 [ 2196.297636][ T3935] (syz.6.12070,3935,1):ocfs2_verify_volume:2331 ERROR: status = -5 [ 2196.305975][ T3935] (syz.6.12070,3935,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 2196.315060][ T3935] (syz.6.12070,3935,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 2196.556084][ T3540] hfsplus: b-tree write err: -5, ino 4 [ 2196.815208][ T3947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12083'. [ 2196.824751][ T3947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12083'. [ 2196.833997][ T3947] netlink: 'syz.1.12083': attribute type 7 has an invalid length. [ 2197.355926][ T3959] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2197.371204][ T3959] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 2197.379930][ T3959] overlayfs: missing 'lowerdir' [ 2198.457471][ T3975] loop6: detected capacity change from 0 to 512 [ 2198.479859][ T3975] EXT4-fs: Ignoring removed i_version option [ 2198.518078][ T3975] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2198.579921][ T3975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 2198.622183][ T3975] System zones: 1-12 [ 2198.640854][ T3975] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2198.697912][ T3975] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.12082: invalid indirect mapped block 12 (level 1) [ 2198.772497][ T3975] EXT4-fs (loop6): Remounting filesystem read-only [ 2198.811179][ T3975] EXT4-fs (loop6): 1 truncate cleaned up [ 2198.822066][ T3975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 2199.182511][T22163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 2200.087475][ T3995] loop6: detected capacity change from 0 to 4096 [ 2200.124946][ T3995] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 2200.506939][ T3995] ntfs3(loop6): ino=1a, mi_enum_attr [ 2200.512737][ T3995] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 2200.591797][ T3995] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 2200.639515][ T4013] tipc: Failed to obtain node identity [ 2200.645984][ T4013] tipc: Enabling of bearer rejected, failed to enable media [ 2201.028630][ T4018] loop1: detected capacity change from 0 to 512 [ 2201.126236][ T4024] loop8: detected capacity change from 0 to 256 [ 2201.210104][ T4018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2201.228911][ T4018] ext4 filesystem being mounted at /2494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2201.357543][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2201.361872][ T4024] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 2201.973161][ T4044] ptrace attach of "./syz-executor exec"[1895] was attempted by ""[4044] [ 2206.172556][ T4095] loop3: detected capacity change from 0 to 32768 [ 2206.183138][ T4095] XFS: attr2 mount option is deprecated. [ 2206.196613][ T4095] XFS (loop3): sunit and swidth options incompatible with the noalign option [ 2207.692217][ T4108] loop0: detected capacity change from 0 to 256 [ 2207.708595][ T4105] loop6: detected capacity change from 0 to 16 [ 2207.734243][ T4108] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2207.746645][ T4108] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 2207.782253][ T4108] exFAT-fs (loop0): Invalid exboot-signature(sector = 2): 0x1119abd0 [ 2207.815824][ T4108] exFAT-fs (loop0): Invalid exboot-signature(sector = 5): 0x1119abd0 [ 2207.838104][ T4108] exFAT-fs (loop0): Invalid exboot-signature(sector = 6): 0x00000000 [ 2207.858292][ T4108] exFAT-fs (loop0): Invalid exboot-signature(sector = 7): 0x00000000 [ 2207.867892][ T4108] exFAT-fs (loop0): Invalid exboot-signature(sector = 8): 0x00000000 [ 2207.877949][ T4105] erofs (device loop6): mounted with root inode @ nid 36. [ 2207.890106][ T4108] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x231e8b82) [ 2207.900854][ T4108] exFAT-fs (loop0): invalid boot region [ 2207.907326][ T4108] exFAT-fs (loop0): failed to recognize exfat type [ 2208.020372][ T4105] erofs (device loop6): inline data across blocks @ nid 36 [ 2208.028124][ T4105] syz.6.12134: attempt to access beyond end of device [ 2208.028124][ T4105] loop6: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 2208.479759][ T4121] loop0: detected capacity change from 0 to 1024 [ 2208.527467][ T4121] EXT4-fs: Ignoring removed oldalloc option [ 2208.533902][ T4121] EXT4-fs: Ignoring removed bh option [ 2208.688258][ T4121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2208.908305][ T4134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12141'. [ 2209.123783][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2209.416160][ T4139] xt_hashlimit: size too large, truncated to 1048576 [ 2210.853000][ T4151] loop0: detected capacity change from 0 to 32768 [ 2211.107284][ T4151] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 2211.107404][ T4151] allowing incompatible features above 0.0: (unknown version) [ 2211.107490][ T4151] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 2211.151741][ T4151] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 2211.164856][ T4151] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=usage in superblock: invalid journal entry usage: bad size, shutting down [ 2211.164979][ T4151] error not marked as autofix and not in fsck [ 2211.165060][ T4151] run fsck, and forward to devs so error can be marked for self-healing [ 2211.165154][ T4151] emergency read only at seq 0 [ 2211.211225][ T4151] bcachefs (loop0): error in recovery: fsck_errors_not_fixed [ 2211.222126][ T4151] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 2211.231966][ T4151] bcachefs (loop0): shutting down [ 2211.268069][ T4151] bcachefs (loop0): shutdown complete [ 2211.935514][ T4151] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 2212.079634][ T4171] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 2214.132610][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12171'. [ 2214.803851][ T4221] loop6: detected capacity change from 0 to 1024 [ 2214.843395][ T4221] EXT4-fs: Ignoring removed bh option [ 2214.852306][ T4221] EXT4-fs: inline encryption not supported [ 2214.922935][ T4221] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 2215.055656][ T4221] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 2215.245952][ T4221] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.12176: lblock 2 mapped to illegal pblock 2 (length 1) [ 2215.290964][ T4232] smc: net device bond0 applied user defined pnetid SYZ2 [ 2215.300026][ T4221] __quota_error: 3 callbacks suppressed [ 2215.300102][ T4221] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 2215.321635][ T4221] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.12176: lblock 0 mapped to illegal pblock 48 (length 1) [ 2215.380724][ T4221] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 2215.390216][ T4221] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.12176: Failed to acquire dquot type 0 [ 2215.425610][ T4221] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 2215.454783][ T4221] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.12176: mark_inode_dirty error [ 2215.518897][ T4234] loop1: detected capacity change from 0 to 1024 [ 2215.525530][ T4221] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 2215.525738][ T4221] EXT4-fs (loop6): 1 orphan inode deleted [ 2215.528037][ T4221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2215.575733][ T723] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 2215.635320][ T723] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 2215.644198][ T723] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 2215.703470][ T4237] trusted_key: encrypted_key: insufficient parameters specified [ 2215.732392][ T4234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2215.792253][ T4221] EXT4-fs: Cannot change journaled quota options when quota turned on [ 2215.882563][ T4234] EXT4-fs error (device loop1): ext4_lookup:1787: comm syz.1.12181: inode #12: comm syz.1.12181: iget: illegal inode # [ 2215.904768][ T4234] EXT4-fs (loop1): Remounting filesystem read-only [ 2215.910233][T22163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2215.991054][T22163] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 2216.044617][T22163] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 2216.132718][T22163] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 2216.209489][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2216.784918][ T4256] loop6: detected capacity change from 0 to 512 [ 2217.095113][ T4256] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 2217.103421][ T4256] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 2217.126837][ T4256] System zones: 0-1, 15-15, 18-18, 34-34 [ 2217.225463][ T4256] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2217.232342][ T4256] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 2217.247601][ T4256] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 2217.266742][ T4256] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 2217.395834][ T4256] EXT4-fs (loop6): 1 truncate cleaned up [ 2217.403940][ T4256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2217.617161][T22163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2219.387730][ T4296] loop3: detected capacity change from 0 to 1024 [ 2219.497095][ T4296] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 2219.706432][ T4292] loop8: detected capacity change from 0 to 40427 [ 2219.723140][ T4296] hfsplus: filesystem is marked journaled, leaving read-only. [ 2219.789977][ T4292] F2FS-fs (loop8): Wrong secs_per_zone / total_sections (2048, 24) [ 2219.804285][ T4292] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 2219.845955][ T4292] F2FS-fs (loop8): invalid crc value [ 2220.185927][ T4308] loop0: detected capacity change from 0 to 256 [ 2220.287484][ T4292] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 2220.300103][ T4292] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2220.559192][ T4308] FAT-fs (loop0): Directory bread(block 64) failed [ 2220.566158][ T4308] FAT-fs (loop0): Directory bread(block 65) failed [ 2220.573109][ T4308] FAT-fs (loop0): Directory bread(block 66) failed [ 2220.585867][ T4308] FAT-fs (loop0): Directory bread(block 67) failed [ 2220.596677][ T4308] FAT-fs (loop0): Directory bread(block 68) failed [ 2220.603500][ T4308] FAT-fs (loop0): Directory bread(block 69) failed [ 2220.613559][ T4308] FAT-fs (loop0): Directory bread(block 70) failed [ 2220.623479][ T4308] FAT-fs (loop0): Directory bread(block 71) failed [ 2220.631579][ T4308] FAT-fs (loop0): Directory bread(block 72) failed [ 2220.641354][ T4308] FAT-fs (loop0): Directory bread(block 73) failed [ 2221.441935][ T4326] program syz.3.12215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2221.815226][ T30] audit: type=1326 audit(1750932646.960:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.0.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc612b8e929 code=0x7ffc0000 [ 2221.838959][ T30] audit: type=1326 audit(1750932646.960:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.0.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc612b8e929 code=0x7ffc0000 [ 2222.013942][ T30] audit: type=1326 audit(1750932647.040:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.0.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fc612b8e929 code=0x7ffc0000 [ 2222.037809][ T30] audit: type=1326 audit(1750932647.040:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.0.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc612b8e929 code=0x7ffc0000 [ 2222.063219][ T30] audit: type=1326 audit(1750932647.040:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.0.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc612b8e929 code=0x7ffc0000 [ 2222.355145][ T4340] loop3: detected capacity change from 0 to 2048 [ 2222.403480][ T4340] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2222.502711][ T4340] syz.3.12220: attempt to access beyond end of device [ 2222.502711][ T4340] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 2222.535775][ T4344] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2222.856918][ T4351] loop8: detected capacity change from 0 to 512 [ 2222.893295][ T4351] EXT4-fs: Ignoring removed mblk_io_submit option [ 2222.901092][ T4351] EXT4-fs: Ignoring removed mblk_io_submit option [ 2222.928935][ T4351] EXT4-fs (loop8): Test dummy encryption mode enabled [ 2222.936345][ T4351] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 2223.014657][ T4351] EXT4-fs (loop8): 1 truncate cleaned up [ 2223.022925][ T4351] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2223.307629][ T1895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2223.599914][ T30] audit: type=1326 audit(1750932648.740:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.3.12225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2223.692537][ T30] audit: type=1326 audit(1750932648.800:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.3.12225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2223.767230][ T4369] loop8: detected capacity change from 0 to 64 [ 2223.815662][ T30] audit: type=1326 audit(1750932648.870:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.3.12225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2223.838936][ T30] audit: type=1326 audit(1750932648.870:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.3.12225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2223.862066][ T30] audit: type=1326 audit(1750932648.870:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.3.12225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2225.853991][ T4391] loop8: detected capacity change from 0 to 32768 [ 2225.965115][ T4391] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,gc_reserve_percent=15,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,no_data_io [ 2225.965291][ T4391] allowing incompatible features above 0.0: (unknown version) [ 2225.965392][ T4391] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 2225.965558][ T4391] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0 [ 2225.966345][ T4391] bcachefs (loop8): recovering from clean shutdown, journal seq 10 [ 2225.967698][ T4391] bcachefs (loop8): Version upgrade required: [ 2225.967698][ T4391] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 2225.967698][ T4391] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 2225.967698][ T4391] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 2226.141207][ T4391] bcachefs (loop8): accounting_read... done [ 2226.144155][ T4391] bcachefs (loop8): alloc_read... done [ 2226.146936][ T4391] bcachefs (loop8): snapshots_read... done [ 2226.151438][ T4391] bcachefs (loop8): done starting filesystem [ 2226.369836][ T1895] bcachefs (loop8): shutting down [ 2226.523758][ T1895] bcachefs (loop8): shutdown complete [ 2226.738220][ C0] vkms_vblank_simulate: vblank timer overrun [ 2227.548478][T22244] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2227.695440][T22244] usb 2-1: Using ep0 maxpacket: 32 [ 2227.746255][T22244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2227.758044][T22244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2227.768534][T22244] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 2227.778132][T22244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.803869][ T4428] blktrace: Concurrent blktraces are not allowed on sg0 [ 2227.823268][T22244] usb 2-1: config 0 descriptor?? [ 2228.282431][T22244] macally 0003:060B:0001.0032: unknown main item tag 0x0 [ 2228.290179][T22244] macally 0003:060B:0001.0032: unknown main item tag 0x0 [ 2228.297909][T22244] macally 0003:060B:0001.0032: unknown main item tag 0x0 [ 2228.305480][T22244] macally 0003:060B:0001.0032: unknown main item tag 0x0 [ 2228.317183][T22244] macally 0003:060B:0001.0032: unknown main item tag 0x0 [ 2228.433446][T22244] macally 0003:060B:0001.0032: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.1-1/input0 [ 2228.529193][T22244] usb 2-1: USB disconnect, device number 46 [ 2228.548344][ T4439] loop0: detected capacity change from 0 to 64 [ 2228.636341][ T4439] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 2229.388528][ T4466] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 2231.845124][T29032] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2231.974097][ T4515] loop3: detected capacity change from 0 to 256 [ 2232.064873][T29032] usb 2-1: Using ep0 maxpacket: 16 [ 2232.111926][T29032] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 2232.120546][T29032] usb 2-1: config 8 has no interface number 0 [ 2232.127125][T29032] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2232.144696][T29032] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2232.154935][T29032] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 2232.167853][T29032] usb 2-1: config 8 interface 39 has no altsetting 0 [ 2232.346812][T29032] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2232.361937][T29032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.370417][T29032] usb 2-1: Product: syz [ 2232.374979][T29032] usb 2-1: Manufacturer: syz [ 2232.379841][T29032] usb 2-1: SerialNumber: syz [ 2232.865311][ T4530] block nbd8: NBD_DISCONNECT [ 2233.251589][T29032] ipheth 2-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 2233.274823][T22244] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 2233.278253][T29032] ipheth 2-1:8.39: Apple iPhone USB Ethernet device attached [ 2233.406272][T29032] usb 2-1: USB disconnect, device number 47 [ 2233.501543][T22244] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2233.513043][T22244] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2233.520379][T22244] usb 7-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 2233.532578][T22244] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.556660][T29032] ipheth 2-1:8.39: Apple iPhone USB Ethernet now disconnected [ 2233.602671][T22244] usb 7-1: config 0 descriptor?? [ 2233.615880][ T4533] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2234.434324][T22244] uclogic 0003:28BD:0078.0033: interface is invalid, ignoring [ 2234.598977][T22244] usb 7-1: USB disconnect, device number 31 [ 2235.180362][ T4590] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12291'. [ 2235.549682][ T4596] x_tables: ip_tables: udp match: only valid for protocol 17 [ 2237.070160][ T4624] loop1: detected capacity change from 0 to 512 [ 2237.123826][ T4624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2237.237055][ T4624] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 2237.245844][ T4624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 2237.273706][ T4624] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 2237.283763][ T4624] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 2237.301180][ T4624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 2237.371283][ T4630] tipc: Enabled bearer , priority 10 [ 2237.859184][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2238.364965][T29032] tipc: Node number set to 4278190081 [ 2238.597169][T19034] Bluetooth: hci1: command 0x0406 tx timeout [ 2239.016353][T22244] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2239.089632][ T4664] blktrace: Concurrent blktraces are not allowed on sg0 [ 2239.207589][T22244] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2239.219135][T22244] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2239.229844][T22244] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2239.243637][T22244] usb 7-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 2239.254053][T22244] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2239.335690][T22244] usb 7-1: config 0 descriptor?? [ 2239.859375][T22244] dragonrise 0003:0079:0011.0034: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.6-1/input0 [ 2240.041873][T22244] usb 7-1: USB disconnect, device number 32 [ 2240.279961][ T4675] loop3: detected capacity change from 0 to 4096 [ 2240.384899][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2240.384984][ T30] audit: type=1804 audit(1750932665.530:452): pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.12330" name="/newroot/150/bus" dev="tmpfs" ino=793 res=1 errno=0 [ 2240.416827][ T30] audit: type=1800 audit(1750932665.530:453): pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.12330" name="bus" dev="tmpfs" ino=793 res=0 errno=0 [ 2240.506273][ T4703] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2240.597541][ T30] audit: type=1800 audit(1750932665.700:454): pid=4675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12326" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 2240.618300][ C0] vkms_vblank_simulate: vblank timer overrun [ 2241.474170][ T4717] loop8: detected capacity change from 0 to 256 [ 2241.520794][ T4717] exfat: Deprecated parameter 'utf8' [ 2241.527015][ T4717] exfat: Deprecated parameter 'namecase' [ 2241.674257][ T4717] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 2242.742623][ T30] audit: type=1326 audit(1750932667.870:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.8.12346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8e929 code=0x7ffc0000 [ 2242.773047][ T30] audit: type=1326 audit(1750932667.900:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.8.12346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0ee4b8e929 code=0x7ffc0000 [ 2242.797155][ T30] audit: type=1326 audit(1750932667.900:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.8.12346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4b8e929 code=0x7ffc0000 [ 2243.130617][ T4746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12349'. [ 2243.845803][ T4753] loop0: detected capacity change from 0 to 2048 [ 2244.015247][ T4753] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2244.115050][ T30] audit: type=1800 audit(1750932669.250:458): pid=4753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12352" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 2244.374883][T22244] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2244.576892][T22244] usb 9-1: Using ep0 maxpacket: 16 [ 2244.621245][T22244] usb 9-1: config 8 has an invalid interface number: 39 but max is 0 [ 2244.630092][T22244] usb 9-1: config 8 has no interface number 0 [ 2244.637028][T22244] usb 9-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2244.649222][T22244] usb 9-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2244.659611][T22244] usb 9-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 2244.670018][T22244] usb 9-1: config 8 interface 39 has no altsetting 0 [ 2244.835303][T22244] usb 9-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2244.845009][T22244] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.853321][T22244] usb 9-1: Product: syz [ 2244.857955][T22244] usb 9-1: Manufacturer: syz [ 2244.862841][T22244] usb 9-1: SerialNumber: syz [ 2245.599220][T22244] ipheth 9-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 2245.630268][T22244] ipheth 9-1:8.39: Apple iPhone USB Ethernet device attached [ 2245.682991][T22244] usb 9-1: USB disconnect, device number 2 [ 2245.812356][T22244] ipheth 9-1:8.39: Apple iPhone USB Ethernet now disconnected [ 2245.847549][ T4800] loop1: detected capacity change from 0 to 1024 [ 2245.977998][ T4800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2246.899258][ T5808] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 2246.976619][ T5808] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 2247.004147][ T4827] loop0: detected capacity change from 0 to 512 [ 2247.106097][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12375'. [ 2247.121945][ T4831] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12375'. [ 2247.159132][ T4827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2247.172555][ T4827] ext4 filesystem being mounted at /2489/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2247.636799][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2247.818065][ T723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.828938][ T723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2248.000205][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2248.062113][ T723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.076997][ T723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2248.296884][ T723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.307707][ T723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2248.539723][ T723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.550548][ T723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 2249.586263][ T723] bridge_slave_0: left allmulticast mode [ 2249.592181][ T723] bridge_slave_0: left promiscuous mode [ 2249.608339][ T723] bridge0: port 1(bridge_slave_0) entered disabled state [ 2250.861295][ T4852] Invalid ELF header magic: != ELF [ 2251.720885][ T723] dvmrp0 (unregistering): left allmulticast mode [ 2251.915022][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2251.921831][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2252.566099][ T723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2252.682545][ T723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2252.726978][ T723] bond0 (unregistering): Released all slaves [ 2252.750481][ T723] bond1 (unregistering): Released all slaves [ 2252.772955][ T723] bond2 (unregistering): Released all slaves [ 2252.837411][ T723] bond3 (unregistering): Released all slaves [ 2252.858175][ T4883] loop6: detected capacity change from 0 to 2048 [ 2252.876473][ T723] bond4 (unregistering): Released all slaves [ 2252.908145][ T723] bond5 (unregistering): Released all slaves [ 2252.948604][ T723] bond6 (unregistering): Released all slaves [ 2253.109111][ T4883] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2253.347191][T23839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2253.356684][T23839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2253.391307][T23839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2253.510122][ T4895] loop8: detected capacity change from 0 to 256 [ 2253.518855][T23839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2253.532696][T23839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2253.545571][ T4895] exfat: Deprecated parameter 'namecase' [ 2253.738113][ T4895] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2253.773436][ T723] IPVS: stopping backup sync thread 3187 ... [ 2254.122837][ T4895] (unnamed net_device) (uninitialized): option mode: invalid value (48) [ 2254.221736][ T4930] loop6: detected capacity change from 0 to 128 [ 2254.321303][ T4930] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2254.343099][ T4930] ext4 filesystem being mounted at /1000/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2254.465833][ T723] hsr_slave_0: left promiscuous mode [ 2254.495234][ T723] hsr_slave_1: left promiscuous mode [ 2254.503225][ T723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2254.517150][ T723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2254.580765][ T723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2254.588928][ T723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2254.740093][ T723] veth1_macvtap: left promiscuous mode [ 2254.746064][ T723] veth0_macvtap: left promiscuous mode [ 2254.752025][ T723] veth1_vlan: left promiscuous mode [ 2254.854945][T22163] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2255.635477][T23839] Bluetooth: hci2: command tx timeout [ 2256.051008][ T723] team0 (unregistering): Port device team_slave_1 removed [ 2256.105646][ T723] team0 (unregistering): Port device team_slave_0 removed [ 2256.514895][ T4948] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12396'. [ 2256.524233][ T4948] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12396'. [ 2256.769824][ T4967] loop0: detected capacity change from 0 to 2048 [ 2257.001286][ T723] IPVS: stop unused estimator thread 0... [ 2257.073140][ T4967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2257.089165][ T4967] ext4 filesystem being mounted at /2497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2257.443134][ T4890] chnl_net:caif_netlink_parms(): no params data found [ 2257.482962][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2257.640663][ T4899] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 2257.715350][T23839] Bluetooth: hci2: command tx timeout [ 2257.827109][ T4899] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2257.837804][ T4899] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2257.853574][ T4899] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2257.863233][ T4899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.914726][ T4899] usb 9-1: config 0 descriptor?? [ 2257.953875][ T4899] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2257.966977][ T4899] dvb-usb: bulk message failed: -22 (3/0) [ 2258.029527][ T4899] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2258.066820][ T4899] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2258.074293][ T4899] usb 9-1: media controller created [ 2258.127768][ T4899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2258.239872][ T4899] dvb-usb: bulk message failed: -22 (6/0) [ 2258.246456][ T4899] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2258.305178][ T4899] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input44 [ 2258.360840][ T4899] dvb-usb: schedule remote query interval to 150 msecs. [ 2258.368362][ T4899] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2258.406659][ T4899] usb 9-1: USB disconnect, device number 3 [ 2258.576526][ T4899] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2258.913856][ T5124] loop0: detected capacity change from 0 to 1024 [ 2259.068735][ T4890] bridge0: port 1(bridge_slave_0) entered blocking state [ 2259.078170][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state [ 2259.091655][ T4890] bridge_slave_0: entered allmulticast mode [ 2259.101405][ T4890] bridge_slave_0: entered promiscuous mode [ 2259.112316][ T5124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2259.118295][ T4890] bridge0: port 2(bridge_slave_1) entered blocking state [ 2259.139556][ T4890] bridge0: port 2(bridge_slave_1) entered disabled state [ 2259.149338][ T4890] bridge_slave_1: entered allmulticast mode [ 2259.165093][ T4890] bridge_slave_1: entered promiscuous mode [ 2259.367585][ T4890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2259.398049][ T4890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2259.521205][ T5202] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12415'. [ 2259.583681][ T4890] team0: Port device team_slave_0 added [ 2259.685838][ T4890] team0: Port device team_slave_1 added [ 2259.801320][T23839] Bluetooth: hci2: command tx timeout [ 2259.946620][ T4890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2259.956813][ T4890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2259.984706][ T4890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2260.022914][ T5809] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 2260.055490][ T5809] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 2260.092863][ T4890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2260.100407][ T4890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2260.127633][ T4890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2260.474065][ T4890] hsr_slave_0: entered promiscuous mode [ 2260.493389][ T4890] hsr_slave_1: entered promiscuous mode [ 2260.501973][ T4890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2260.510333][ T4890] Cannot create hsr debugfs directory [ 2260.571580][ T5269] loop3: detected capacity change from 0 to 256 [ 2260.742108][ T5269] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb75ad3fb, utbl_chksum : 0xe619d30d) [ 2260.927195][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2260.971007][ T4327] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2261.031865][ T5292] loop6: detected capacity change from 0 to 1024 [ 2261.233605][ T5292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2261.247018][ T5292] ext4 filesystem being mounted at /1008/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2261.400862][ T4327] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2261.570642][ T4327] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2261.713057][ T4327] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2261.724623][T27975] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 2261.737618][T22163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2261.875619][T23839] Bluetooth: hci2: command tx timeout [ 2261.887780][T27975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2261.901922][T27975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2261.913187][T27975] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2261.922878][T27975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.977313][T27975] usb 4-1: config 0 descriptor?? [ 2262.476867][T27975] zydacron 0003:13EC:0006.0035: item fetching failed at offset 1/5 [ 2262.490652][T27975] zydacron 0003:13EC:0006.0035: parse failed [ 2262.500910][T27975] zydacron 0003:13EC:0006.0035: probe with driver zydacron failed with error -22 [ 2262.557094][ T4327] tipc: Resetting bearer [ 2262.835004][ T4899] usb 4-1: USB disconnect, device number 56 [ 2263.232834][ T4327] batman_adv: batadv0: Removing interface: gretap2 [ 2263.263420][ T4327] tipc: Disabling bearer [ 2263.317206][ T4327] dvmrp1 (unregistering): left allmulticast mode [ 2263.606069][ T4327] bond0 (unregistering): (slave 4): Releasing backup interface [ 2263.658855][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2263.724724][ T4327] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2263.770637][ T4327] bond0 (unregistering): Released all slaves [ 2263.793666][ T4327] bond1 (unregistering): Released all slaves [ 2263.817434][ T4327] bond2 (unregistering): Released all slaves [ 2263.860025][ T5388] loop8: detected capacity change from 0 to 1024 [ 2264.048515][ T4890] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2264.060895][ T5388] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2264.179674][ T4327] tipc: Disabling bearer [ 2264.185566][ T4327] tipc: Disabling bearer [ 2264.201214][ T4327] tipc: Left network mode [ 2264.233035][ T4890] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2264.350846][ T4890] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2264.429103][ T4890] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2264.736538][ T4327] hsr_slave_0: left promiscuous mode [ 2264.775180][ T4327] hsr_slave_1: left promiscuous mode [ 2264.783237][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2264.792474][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2264.891981][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2264.897714][ T1895] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 2264.900200][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2264.929922][T19034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2264.970574][T19034] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2264.983969][T19034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2264.991846][ T1895] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 2265.023085][ T4327] veth1_macvtap: left promiscuous mode [ 2265.029463][ T4327] veth1_vlan: left promiscuous mode [ 2265.167026][T19034] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2265.286404][T19034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2265.829814][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 2265.867238][ T4327] team0 (unregistering): Port device team_slave_0 removed [ 2265.966792][ T5413] loop6: detected capacity change from 0 to 4096 [ 2265.986533][ T5420] loop3: detected capacity change from 0 to 64 [ 2266.044838][ T5413] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 2266.229297][ T5413] ntfs3(loop6): ino=1a, mi_enum_attr [ 2266.240574][ T5413] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 2266.292809][ T5413] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 2266.798882][ T1895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2266.897060][ T4327] IPVS: stop unused estimator thread 0... [ 2267.106390][ T5459] netlink: 92 bytes leftover after parsing attributes in process `syz.6.12433'. [ 2267.490454][ T4327] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.568013][T19034] Bluetooth: hci3: command tx timeout [ 2267.790179][ T4327] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.881483][ T30] audit: type=1326 audit(1750932693.030:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5535 comm="syz.6.12436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2267.904769][ T30] audit: type=1326 audit(1750932693.030:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5535 comm="syz.6.12436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2267.927791][ T30] audit: type=1326 audit(1750932693.060:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5535 comm="syz.6.12436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2267.959081][ T30] audit: type=1326 audit(1750932693.060:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5535 comm="syz.6.12436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2267.984977][ T4890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2267.995432][ T30] audit: type=1326 audit(1750932693.060:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5535 comm="syz.6.12436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2268.023885][ T30] audit: type=1326 audit(1750932693.070:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5535 comm="syz.6.12436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2268.053542][ T30] audit: type=1326 audit(1750932693.070:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5535 comm="syz.6.12436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2268.132544][ T4327] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2268.330373][ T4327] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2268.453918][ T4890] 8021q: adding VLAN 0 to HW filter on device team0 [ 2268.543678][ T3934] bridge0: port 1(bridge_slave_0) entered blocking state [ 2268.551447][ T3934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2268.584904][ T5408] chnl_net:caif_netlink_parms(): no params data found [ 2268.696075][ T3934] bridge0: port 2(bridge_slave_1) entered blocking state [ 2268.703721][ T3934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2268.925543][ T4327] bridge_slave_1: left allmulticast mode [ 2268.931563][ T4327] bridge_slave_1: left promiscuous mode [ 2268.938520][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 2269.001431][ T4327] bridge_slave_0: left allmulticast mode [ 2269.009266][ T4327] bridge_slave_0: left promiscuous mode [ 2269.016116][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 2269.522743][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2269.556687][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2269.571783][ T4327] bond0 (unregistering): Released all slaves [ 2269.654543][T19034] Bluetooth: hci3: command tx timeout [ 2269.926465][ T4327] IPVS: stopping master sync thread 4466 ... [ 2270.527633][ T4327] hsr_slave_0: left promiscuous mode [ 2270.564770][ T4327] hsr_slave_1: left promiscuous mode [ 2270.573080][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2270.581446][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2270.680460][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2270.689913][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2270.773163][ T4327] veth1_macvtap: left promiscuous mode [ 2270.779226][ T4327] veth0_macvtap: left promiscuous mode [ 2270.787053][ T4327] veth1_vlan: left promiscuous mode [ 2270.792710][ T4327] veth0_vlan: left promiscuous mode [ 2270.986096][T23839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2270.996994][T23839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2271.024033][T23839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2271.039506][T23839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2271.168696][T23839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2271.473753][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 2271.542559][ T4327] team0 (unregistering): Port device team_slave_0 removed [ 2271.735174][T19034] Bluetooth: hci3: command tx timeout [ 2272.341074][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state [ 2272.348759][ T5408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2272.356789][ T5408] bridge_slave_0: entered allmulticast mode [ 2272.366244][ T5408] bridge_slave_0: entered promiscuous mode [ 2272.585412][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state [ 2272.593067][ T5408] bridge0: port 2(bridge_slave_1) entered disabled state [ 2272.602040][ T5408] bridge_slave_1: entered allmulticast mode [ 2272.611517][ T5408] bridge_slave_1: entered promiscuous mode [ 2273.090556][ T5408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2273.166147][ T5408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2273.269908][ T4890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2273.327465][T23839] Bluetooth: hci1: command tx timeout [ 2273.638067][ T5408] team0: Port device team_slave_0 added [ 2273.658940][ T5790] netlink: 520 bytes leftover after parsing attributes in process `syz.6.12444'. [ 2273.703874][ T5408] team0: Port device team_slave_1 added [ 2273.817862][T23839] Bluetooth: hci3: command tx timeout [ 2274.120330][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2274.132270][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2274.164806][ T5408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2274.187169][ T5596] chnl_net:caif_netlink_parms(): no params data found [ 2274.287602][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2274.295024][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2274.328210][ T5408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2274.843460][ T5408] hsr_slave_0: entered promiscuous mode [ 2274.853983][ T5408] hsr_slave_1: entered promiscuous mode [ 2274.862946][ T5408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2274.870960][ T5408] Cannot create hsr debugfs directory [ 2275.421401][T23839] Bluetooth: hci1: command tx timeout [ 2275.589567][ T5932] loop3: detected capacity change from 0 to 64 [ 2275.713123][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.729049][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.737067][ T5596] bridge_slave_0: entered allmulticast mode [ 2275.746805][ T5596] bridge_slave_0: entered promiscuous mode [ 2275.936566][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.944125][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.956396][ T5596] bridge_slave_1: entered allmulticast mode [ 2275.966397][ T5596] bridge_slave_1: entered promiscuous mode [ 2276.379387][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2276.445668][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2276.494237][ T4890] veth0_vlan: entered promiscuous mode [ 2277.035327][ T5596] team0: Port device team_slave_0 added [ 2277.174769][ T6013] loop3: detected capacity change from 0 to 4096 [ 2277.187537][ T4890] veth1_vlan: entered promiscuous mode [ 2277.212287][ T5596] team0: Port device team_slave_1 added [ 2277.404538][ T6013] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 2277.476134][T23839] Bluetooth: hci1: command tx timeout [ 2277.599302][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2277.607337][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2277.635519][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2277.669987][ T6013] ntfs3(loop3): Failed to load $Extend (-22). [ 2277.682027][ T6013] ntfs3(loop3): Failed to initialize $Extend. [ 2277.749914][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2277.757369][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2277.785941][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2277.984018][ T4890] veth0_macvtap: entered promiscuous mode [ 2278.056104][ T4890] veth1_macvtap: entered promiscuous mode [ 2278.181280][ T5408] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2278.313273][ T5408] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2278.396085][ T5596] hsr_slave_0: entered promiscuous mode [ 2278.406721][ T5596] hsr_slave_1: entered promiscuous mode [ 2278.418784][ T5596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2278.426794][ T5596] Cannot create hsr debugfs directory [ 2278.464548][ T4890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2278.510575][ T4890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2278.539080][ T5408] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2278.573972][ T6141] random: crng reseeded on system resumption [ 2278.602520][ T4890] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.611770][ T4890] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.621149][ T4890] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.630363][ T4890] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.700197][ T5408] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2278.838961][ T6141] Unrecognized hibernate image header format! [ 2278.845695][ T6141] PM: hibernation: Image mismatch: architecture specific data [ 2279.566148][T23839] Bluetooth: hci1: command tx timeout [ 2280.076949][ T5408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2280.230408][ T5408] 8021q: adding VLAN 0 to HW filter on device team0 [ 2280.392385][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 2280.400070][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2280.500335][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2280.566438][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 2280.574118][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2280.613556][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2280.698466][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2280.740533][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2281.993667][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2282.112578][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 2282.194797][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 2282.202402][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2282.293916][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 2282.301601][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2282.795092][ T6252] loop3: detected capacity change from 0 to 4096 [ 2282.861638][ T6252] NILFS (loop3): invalid segment: Checksum error in segment payload [ 2282.873361][ T6252] NILFS (loop3): trying rollback from an earlier position [ 2282.939933][ T5408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2283.022431][ T6252] NILFS (loop3): recovery complete [ 2284.493863][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2284.923078][ T5596] veth0_vlan: entered promiscuous mode [ 2285.025809][ T5596] veth1_vlan: entered promiscuous mode [ 2285.113386][T27975] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 2285.309793][ T5596] veth0_macvtap: entered promiscuous mode [ 2285.345880][T27975] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2285.356631][T27975] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2285.366197][T27975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2285.405729][ T5596] veth1_macvtap: entered promiscuous mode [ 2285.445109][T27975] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2285.509610][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2285.553743][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2285.649458][ T5596] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.660045][ T5596] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.669632][ T5596] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.678737][ T5596] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.760712][ T5408] veth0_vlan: entered promiscuous mode [ 2285.857128][ T5408] veth1_vlan: entered promiscuous mode [ 2286.154917][ T5408] veth0_macvtap: entered promiscuous mode [ 2286.284466][ T5408] veth1_macvtap: entered promiscuous mode [ 2286.391554][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2286.433804][ T723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2286.443824][ T723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2286.508239][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2286.540994][T27975] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 2286.552468][T27975] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 2286.582288][ T723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2286.591185][ T723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2286.656793][T27975] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 2286.661824][ T5408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2286.682178][ T5408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2286.692710][ T5408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2286.702267][ T5408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2286.787329][T27975] usb 7-1: USB disconnect, device number 33 [ 2287.280419][ T6324] loop9: detected capacity change from 0 to 16 [ 2289.602877][ T6356] loop3: detected capacity change from 0 to 4096 [ 2289.804957][ T6370] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2289.881699][ T6356] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 2289.991751][ T6374] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 2291.221456][ T6381] loop9: detected capacity change from 0 to 32768 [ 2291.232862][ T6381] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.12491 (6381) [ 2291.300632][ T6391] loop3: detected capacity change from 0 to 8 [ 2291.335041][ T6381] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2291.351155][ T6381] BTRFS info (device loop9): using crc32c (crc32c-x86_64) checksum algorithm [ 2291.362068][ T6381] BTRFS error (device loop9): cannot disable free-space-tree [ 2291.369899][ T6381] BTRFS info (device loop9): disk space caching is enabled [ 2291.384102][ T6381] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2291.405045][ T6381] BTRFS error (device loop9): open_ctree failed: -22 [ 2292.276139][ T6406] loop3: detected capacity change from 0 to 128 [ 2292.377617][ T6406] vfat: Unknown parameter 'rscard' [ 2293.625624][ T6432] loop9: detected capacity change from 0 to 1024 [ 2293.657590][ T6432] EXT4-fs: Ignoring removed nobh option [ 2293.663608][ T6432] EXT4-fs: Ignoring removed bh option [ 2293.710798][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2293.719735][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2293.952864][ T6432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2293.991617][ T3934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2294.000142][ T3934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2294.390312][ T4890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2294.451713][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2294.464758][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2294.497499][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12504'. [ 2294.587231][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12504'. [ 2294.633815][T22261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2294.649492][T22261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2295.283286][ T6479] nbd: must specify a size in bytes for the device [ 2296.120275][ T6490] loop2: detected capacity change from 0 to 256 [ 2296.501932][ T6490] FAT-fs (loop2): Directory bread(block 64) failed [ 2296.502077][ T6490] FAT-fs (loop2): Directory bread(block 65) failed [ 2296.502354][ T6490] FAT-fs (loop2): Directory bread(block 66) failed [ 2296.502482][ T6490] FAT-fs (loop2): Directory bread(block 67) failed [ 2296.502748][ T6490] FAT-fs (loop2): Directory bread(block 68) failed [ 2296.502873][ T6490] FAT-fs (loop2): Directory bread(block 69) failed [ 2296.503148][ T6490] FAT-fs (loop2): Directory bread(block 70) failed [ 2296.503274][ T6490] FAT-fs (loop2): Directory bread(block 71) failed [ 2296.503540][ T6490] FAT-fs (loop2): Directory bread(block 72) failed [ 2296.503675][ T6490] FAT-fs (loop2): Directory bread(block 73) failed [ 2297.115292][ T6495] loop4: detected capacity change from 0 to 32768 [ 2297.280994][ T6495] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,background_compression=gzip,degraded=yes,journal_flush_disabled,recovery_pass_last=set_may_go_rw,reconstruct_alloc [ 2297.281147][ T6495] allowing incompatible features above 0.0: (unknown version) [ 2297.281224][ T6495] features: lz4 [ 2297.281333][ T6495] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 2297.282139][ T6495] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 2297.282220][ T6495] bcachefs (loop4): feature new_extent_overwrite not set, filesystem no longer supported [ 2297.282727][ T6495] bcachefs (loop4): error in recovery: EINVALemergency read only at seq 0 [ 2297.282933][ T6495] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINVAL [ 2297.283027][ T6495] bcachefs (loop4): shutting down [ 2297.312419][ T6495] bcachefs (loop4): shutdown complete [ 2298.046717][ T6495] bcachefs: bch2_fs_get_tree() error: EINVAL [ 2298.968039][ T6522] loop3: detected capacity change from 0 to 512 [ 2299.098967][ T6522] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 2299.099067][ T6522] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 2299.099410][ T6522] System zones: 0-1, 15-15, 18-18, 34-34 [ 2299.100365][ T6522] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2299.100555][ T6522] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 2299.100721][ T6522] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 2299.100881][ T6522] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 2299.109530][ T6522] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.12522: bad orphan inode 16 [ 2299.115042][ T6522] ext4_test_bit(bit=15, block=18) = 1 [ 2299.115128][ T6522] is_bad_inode(inode)=0 [ 2299.115189][ T6522] NEXT_ORPHAN(inode)=0 [ 2299.115247][ T6522] max_ino=32 [ 2299.115302][ T6522] i_nlink=2 [ 2299.117526][ T6522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2299.188226][ T6522] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 2299.214320][ T30] audit: type=1800 audit(1750932724.360:466): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12525" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2299.341996][ T6531] tmpfs: Bad value for 'mpol' [ 2299.508188][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2299.896476][ T6540] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12529'. [ 2299.896649][ T6540] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12529'. [ 2299.959426][ T30] audit: type=1326 audit(1750932725.110:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.12528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2299.994631][ T30] audit: type=1326 audit(1750932725.130:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.12528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2300.000910][ T30] audit: type=1326 audit(1750932725.150:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.12528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2300.001170][ T30] audit: type=1326 audit(1750932725.150:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.12528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2300.001418][ T30] audit: type=1326 audit(1750932725.150:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.12528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2300.008002][ T30] audit: type=1326 audit(1750932725.150:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.12528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2300.008281][ T30] audit: type=1326 audit(1750932725.150:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.12528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2300.017612][ T30] audit: type=1326 audit(1750932725.170:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.12528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac5f8e929 code=0x7ffc0000 [ 2301.189622][ T6551] loop2: detected capacity change from 0 to 4096 [ 2301.206131][ T6551] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 2301.229017][ T6551] ntfs3(loop2): It is recommened to use chkdsk. [ 2301.499411][ T6551] ntfs3(loop2): failed to convert "076c" to iso8859-1 [ 2301.654881][ T6560] IPVS: Error connecting to the multicast addr [ 2302.217861][ T6569] CUSE: info not properly terminated [ 2302.587651][ T6576] loop3: detected capacity change from 0 to 64 [ 2302.733370][ T6576] hfs: bad catalog entry type 0 [ 2303.267952][ T6574] loop9: detected capacity change from 0 to 32768 [ 2303.286268][ T6574] bcachefs (/dev/loop9): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 2303.286268][ T6574] clean (size 2912): [ 2303.286268][ T6574] flags: 0 [ 2303.286268][ T6574] journal_seq: 10 [ 2303.286268][ T6574] usage: type=inodes v=8 [ 2303.286268][ T6574] usage: type=key_version v=0 [ 2303.286268][ T6574] usage: type=reserved v=0 [ 2303.286268][ T6574] usage: type=reserved v=0 [ 2303.286268][ T6574] usage: type=reserved v=0 [ 2303.286268][ T6574] usage: type=reserved v=0 [ 2303.286268][ T6574] log: [ 2303.286268][ T6574] data_usage: journal: 1/1 [0]=0 [ 2303.286268][ T6574] data_usage: user: 1/1 [0]=16 [ 2303.286268][ T6574] dev_usage: dev=0 [ 2303.286268][ T6574] free: buckets=83 sectors=0 fragmented=0 [ 2303.286268][ T6574] sb: buckets=25 sectors=4502500115748872 fragmented=248 [ 2303.286268][ T6574] journal: buckets=8 sectors=2048 fragmented=0 [ 2303.286268][ T6574] btree: buckets=11 sectors=2816 fragmented=0 [ 2303.286268][ T6574] user: buckets=1 sectors=16 fragmented=240 [ 2303.286268][ T6574] cached: buckets=0 sectors=0 fragmented=0 [ 2303.286268][ T6574] parity: buckets=0 sectors=0 fragmented=0 [ 2303.286268][ T6574] stripe: buckets=0 sectors=0 fragmented=0 [ 2303.286268][ T6574] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 2303.286268][ T6574] need_discard: buckets=0 sectors=0 fragmented=0 [ 2303.286268][ T6574] clock: read=0 [ 2303.286268][ T6574] clock: write=1280 [ 2303.286268][ T6574] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 [ 2303.287316][ T6574] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 2304.385727][ T6597] loop4: detected capacity change from 0 to 256 [ 2304.453207][ T6593] loop2: detected capacity change from 0 to 2048 [ 2304.489367][ T6600] loop9: detected capacity change from 0 to 64 [ 2304.531082][ T6593] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2304.622514][ T6604] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2304.641406][ T6597] FAT-fs (loop4): Directory bread(block 64) failed [ 2304.648933][ T6597] FAT-fs (loop4): Directory bread(block 65) failed [ 2304.656129][ T6597] FAT-fs (loop4): Directory bread(block 66) failed [ 2304.662942][ T6597] FAT-fs (loop4): Directory bread(block 67) failed [ 2304.670273][ T6597] FAT-fs (loop4): Directory bread(block 68) failed [ 2304.677314][ T6597] FAT-fs (loop4): Directory bread(block 69) failed [ 2304.684217][ T6597] FAT-fs (loop4): Directory bread(block 70) failed [ 2304.691279][ T6597] FAT-fs (loop4): Directory bread(block 71) failed [ 2304.702991][ T6597] FAT-fs (loop4): Directory bread(block 72) failed [ 2304.711310][ T6597] FAT-fs (loop4): Directory bread(block 73) failed [ 2304.760683][ T6593] syz.2.12549: attempt to access beyond end of device [ 2304.760683][ T6593] loop2: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 2304.780996][ T6593] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 2304.867003][ T6607] /dev/loop2: Can't open blockdev [ 2305.299404][ T6614] loop9: detected capacity change from 0 to 64 [ 2305.430023][ T6614] hfs: bad catalog entry type 0 [ 2306.997592][ T6633] loop9: detected capacity change from 0 to 32768 [ 2307.144182][ T6633] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 1791,journal_flush_disabled,fsck,fix_errors=no,norecovery,version_upgrade=incompatible [ 2307.144616][ T6633] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 2307.144793][ T6633] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0 [ 2307.145710][ T6633] bcachefs (loop9): recovering from clean shutdown, journal seq 10 [ 2307.146341][ T6633] bcachefs (loop9): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 2307.146341][ T6633] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 2307.146836][ T6633] bcachefs (loop9): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 1.7: mi_btree_bitmap [ 2307.146836][ T6633] [ 2307.252096][ T6633] bcachefs (loop9): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 2307.321120][ T6633] bcachefs (loop9): btree node read error at btree freespace level 0/0 [ 2307.321228][ T6633] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 4398046511104: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 2307.321369][ T6633] loop9 node offset 0/32 bset u64s 0: checksum error, type none: got should be [ 2307.321464][ T6633] flagging btree freespace lost data [ 2307.321539][ T6633] ret fsck_errors_not_fixed [ 2307.322206][ T6633] bcachefs (loop9): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 2307.366922][ T6633] bcachefs (loop9): check_topology... done [ 2307.373569][ T6633] bcachefs (loop9): accounting_read... done [ 2307.383380][ T6633] bcachefs (loop9): alloc_read... done [ 2307.386470][ T6633] bcachefs (loop9): snapshots_read... done [ 2307.389116][ T6633] bcachefs (loop9): Fixed errors, running fsck a second time to verify fs is clean [ 2307.391428][ T6633] bcachefs (loop9): done starting filesystem [ 2307.529141][ T4890] bcachefs (loop9): shutting down [ 2307.661958][ T4890] bcachefs (loop9): shutdown complete [ 2308.206407][ T6654] loop6: detected capacity change from 0 to 1024 [ 2308.879252][ T6669] sp0: Synchronizing with TNC [ 2308.937846][ T6669] sp0: Found TNC [ 2310.319826][ T6684] loop3: detected capacity change from 0 to 32768 [ 2310.499960][ T6684] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,background_compression=gzip,degraded=yes,journal_flush_disabled,recovery_pass_last=set_may_go_rw,reconstruct_alloc [ 2310.500140][ T6684] allowing incompatible features above 0.0: (unknown version) [ 2310.500228][ T6684] features: lz4 [ 2310.544311][ T6684] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 2310.553753][ T6684] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 2310.568091][ T6684] bcachefs (loop3): feature new_extent_overwrite not set, filesystem no longer supported [ 2310.578784][ T6684] bcachefs (loop3): error in recovery: EINVALemergency read only at seq 0 [ 2310.588032][ T6684] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINVAL [ 2310.604252][ T6684] bcachefs (loop3): shutting down [ 2310.639974][ T6684] bcachefs (loop3): shutdown complete [ 2310.830767][ T6698] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 2311.324853][ T6684] bcachefs: bch2_fs_get_tree() error: EINVAL [ 2312.098554][ T6713] loop2: detected capacity change from 0 to 512 [ 2312.138549][ T6713] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2312.244994][ T6713] EXT4-fs (loop2): 1 truncate cleaned up [ 2312.253096][ T6713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2312.484041][ T6723] loop9: detected capacity change from 0 to 64 [ 2312.539678][ T5596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2312.683314][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12587'. [ 2313.341789][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2313.348739][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2313.721627][ T6730] loop4: detected capacity change from 0 to 40427 [ 2313.736191][ T6730] F2FS-fs (loop4): Image doesn't support compression [ 2313.781404][ T6738] tipc: Started in network mode [ 2313.787515][ T6738] tipc: Node identity , cluster identity 4711 [ 2313.793822][ T6738] tipc: Failed to obtain node identity [ 2313.805664][ T6738] tipc: Enabling of bearer rejected, failed to enable media [ 2313.919983][ T6744] netlink: 'syz.2.12589': attribute type 3 has an invalid length. [ 2316.016067][ T6772] loop6: detected capacity change from 0 to 8 [ 2316.129244][ T6772] cramfs: Error -3 while decompressing! [ 2316.135457][ T6772] cramfs: ffffffff95524098(16)->ffff8880ae816000(4096) [ 2316.143018][ T6772] cramfs: Error -3 while decompressing! [ 2316.149976][ T6772] cramfs: ffffffff95524098(16)->ffff8880ae816000(4096) [ 2316.159461][ T30] audit: type=1800 audit(1750932741.310:475): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.12605" name="file0" dev="loop6" ino=244 res=0 errno=0 [ 2316.672293][ T6778] loop3: detected capacity change from 0 to 4096 [ 2316.944773][ T6778] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 2317.010817][ T6798] loop6: detected capacity change from 0 to 1024 [ 2317.025228][ T6778] ntfs3(loop3): Failed to load $Extend (-22). [ 2317.031808][ T6778] ntfs3(loop3): Failed to initialize $Extend. [ 2317.132801][ T6799] loop9: detected capacity change from 0 to 2048 [ 2317.217510][ T6798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2317.249797][ T6799] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2317.425926][ T6809] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2317.570285][ T6799] syz.9.12611: attempt to access beyond end of device [ 2317.570285][ T6799] loop9: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 2317.571775][ T6814] /dev/loop9: Can't open blockdev [ 2317.587775][ T6799] NILFS (loop9): I/O error reading meta-data file (ino=6, block-offset=1) [ 2317.734247][T22163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2318.040996][ T6820] loop3: detected capacity change from 0 to 256 [ 2318.153632][ T6820] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 2318.162219][ T6820] FAT-fs (loop3): Filesystem has been set read-only [ 2318.251335][ T6824] loop6: detected capacity change from 0 to 1024 [ 2318.628870][ T6839] usb usb8: usbfs: process 6839 (syz.2.12623) did not claim interface 0 before use [ 2318.774293][ T3934] hfsplus: b-tree write err: -5, ino 4 [ 2319.565446][ T6843] loop3: detected capacity change from 0 to 32768 [ 2319.656712][ T6843] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 1791,journal_flush_disabled,fsck,fix_errors=no,norecovery,version_upgrade=incompatible [ 2319.656888][ T6843] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 2319.694995][ T6843] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 2319.704287][ T6843] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 2319.713323][ T6843] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 2319.713323][ T6843] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 2319.736033][ T6843] bcachefs (loop3): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 1.7: mi_btree_bitmap [ 2319.736033][ T6843] [ 2319.847701][ T6843] bcachefs (loop3): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 2319.893319][ T6843] bcachefs (loop3): btree node read error at btree freespace level 0/0 [ 2319.893439][ T6843] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 4398046511104: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 2319.893576][ T6843] loop3 node offset 0/32 bset u64s 0: checksum error, type none: got should be [ 2319.893686][ T6843] flagging btree freespace lost data [ 2319.893762][ T6843] ret fsck_errors_not_fixed [ 2319.938584][ T6843] bcachefs (loop3): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 2319.967802][ T6843] bcachefs (loop3): check_topology... done [ 2319.980529][ T6843] bcachefs (loop3): accounting_read... done [ 2319.990067][ T6843] bcachefs (loop3): alloc_read... done [ 2319.998563][ T6843] bcachefs (loop3): snapshots_read... done [ 2320.007509][ T6843] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 2320.019336][ T6843] bcachefs (loop3): done starting filesystem [ 2320.174044][ T5798] bcachefs (loop3): shutting down [ 2320.283571][ T5798] bcachefs (loop3): shutdown complete [ 2321.002669][ T6873] loop4: detected capacity change from 0 to 1024 [ 2321.119833][ T6873] syz.4.12633: attempt to access beyond end of device [ 2321.119833][ T6873] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 2321.459217][ T6876] loop9: detected capacity change from 0 to 4096 [ 2321.535229][ T6876] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 2322.784675][ T6897] program syz.6.12643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2323.051723][ T6895] loop4: detected capacity change from 0 to 32768 [ 2323.203540][ T6895] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 1791,journal_flush_disabled,fsck,fix_errors=no,norecovery,version_upgrade=incompatible [ 2323.203733][ T6895] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 2323.246220][ T6895] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 2323.257198][ T6895] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 2323.266114][ T6895] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 2323.266114][ T6895] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 2323.288920][ T6895] bcachefs (loop4): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 1.7: mi_btree_bitmap [ 2323.288920][ T6895] [ 2323.380760][ T6895] bcachefs (loop4): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 2323.429493][ T6895] bcachefs (loop4): btree node read error at btree freespace level 0/0 [ 2323.429598][ T6895] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 4398046511104: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 2323.429703][ T6895] loop4 node offset 0/32 bset u64s 0: checksum error, type none: got should be [ 2323.429784][ T6895] flagging btree freespace lost data [ 2323.429850][ T6895] ret fsck_errors_not_fixed [ 2323.483161][ T6895] bcachefs (loop4): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 2323.506042][ T6895] bcachefs (loop4): check_topology... done [ 2323.518885][ T6895] bcachefs (loop4): accounting_read... done [ 2323.529076][ T6895] bcachefs (loop4): alloc_read... done [ 2323.537142][ T6895] bcachefs (loop4): snapshots_read... done [ 2323.552765][ T6895] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 2323.565111][ T6895] bcachefs (loop4): done starting filesystem [ 2323.737785][ T5408] bcachefs (loop4): shutting down [ 2323.895664][ T5408] bcachefs (loop4): shutdown complete [ 2324.059345][ T6914] netlink: 'syz.2.12647': attribute type 1 has an invalid length. [ 2325.174953][T27975] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 2325.395079][T27975] usb 7-1: Using ep0 maxpacket: 8 [ 2325.421994][T27975] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2325.433565][T27975] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2325.444642][T27975] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2325.458020][T27975] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2325.465118][T27975] usb 7-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 2325.477573][T27975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2325.603882][ T6941] loop9: detected capacity change from 0 to 512 [ 2325.696161][ T6941] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 2325.788723][ T6941] EXT4-fs (loop9): 1 truncate cleaned up [ 2325.801934][ T6941] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2325.851638][T27975] usb 7-1: config 0 descriptor?? [ 2326.293266][ T6939] loop2: detected capacity change from 0 to 32768 [ 2326.386442][T27975] waltop 0003:172F:0500.0036: unknown main item tag 0x0 [ 2326.393836][T27975] waltop 0003:172F:0500.0036: unknown main item tag 0x0 [ 2326.401575][T27975] waltop 0003:172F:0500.0036: unknown main item tag 0x0 [ 2326.415767][T27975] waltop 0003:172F:0500.0036: unknown main item tag 0x0 [ 2326.423123][T27975] waltop 0003:172F:0500.0036: unknown main item tag 0x0 [ 2326.482530][ T6939] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 1791,journal_flush_disabled,fsck,fix_errors=no,norecovery,version_upgrade=incompatible [ 2326.482714][ T6939] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 2326.528941][ T6939] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 2326.543768][ T6939] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 2326.552868][ T6939] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 2326.552868][ T6939] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 2326.581070][ T6939] bcachefs (loop2): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 1.7: mi_btree_bitmap [ 2326.581070][ T6939] [ 2326.694842][ T6939] bcachefs (loop2): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 2326.697558][ T4890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2326.720190][T27975] waltop 0003:172F:0500.0036: hidraw0: USB HID v7.10 Device [HID 172f:0500] on usb-dummy_hcd.6-1/input0 [ 2326.742613][ T6939] bcachefs (loop2): btree node read error at btree freespace level 0/0 [ 2326.742729][ T6939] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 4398046511104: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 2326.742859][ T6939] loop2 node offset 0/32 bset u64s 0: checksum error, type none: got should be [ 2326.742956][ T6939] flagging btree freespace lost data [ 2326.743037][ T6939] ret fsck_errors_not_fixed [ 2326.792758][T27975] usb 7-1: USB disconnect, device number 34 [ 2326.794259][ T6939] bcachefs (loop2): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 2326.849879][ T6939] bcachefs (loop2): check_topology... done [ 2326.862393][ T6939] bcachefs (loop2): accounting_read... done [ 2326.871769][ T6939] bcachefs (loop2): alloc_read... done [ 2326.885739][ T6939] bcachefs (loop2): snapshots_read... done [ 2326.894637][ T6939] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 2326.906499][ T6939] bcachefs (loop2): done starting filesystem [ 2327.090797][ T5596] bcachefs (loop2): shutting down [ 2327.248858][ T5596] bcachefs (loop2): shutdown complete [ 2327.801358][ T6983] loop3: detected capacity change from 0 to 256 [ 2328.193427][ T6991] loop4: detected capacity change from 0 to 512 [ 2328.225596][ T6991] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2328.302369][ T6991] EXT4-fs (loop4): 1 truncate cleaned up [ 2328.316744][ T6991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2328.394880][T11196] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2328.611722][T11196] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2328.628803][T11196] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2328.639151][T11196] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2328.652629][T11196] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2328.669886][T11196] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.797748][T11196] usb 10-1: config 0 descriptor?? [ 2328.894110][ T5408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2329.271322][T11196] plantronics 0003:047F:FFFF.0037: unbalanced collection at end of report description [ 2329.326257][T11196] plantronics 0003:047F:FFFF.0037: parse failed [ 2329.333308][T11196] plantronics 0003:047F:FFFF.0037: probe with driver plantronics failed with error -22 [ 2329.475000][T11196] usb 10-1: USB disconnect, device number 2 [ 2330.648088][ T7044] loop3: detected capacity change from 0 to 8 [ 2330.677206][ T30] audit: type=1326 audit(1750932755.820:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.6.12677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2330.700390][T27975] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2330.854063][ T7044] SQUASHFS error: xz decompression failed, data probably corrupt [ 2330.865046][T27975] usb 10-1: Using ep0 maxpacket: 8 [ 2330.870605][ T7044] SQUASHFS error: Failed to read block 0x60: -5 [ 2330.872812][T27975] usb 10-1: config 1 has an invalid interface number: 85 but max is 0 [ 2330.886082][T27975] usb 10-1: config 1 has no interface number 0 [ 2330.922946][ T7044] SQUASHFS error: xz decompression failed, data probably corrupt [ 2330.934245][ T7044] SQUASHFS error: Failed to read block 0x60: -5 [ 2330.940277][T27975] usb 10-1: New USB device found, idVendor=07c9, idProduct=b010, bcdDevice=fc.3f [ 2330.946367][ T30] audit: type=1326 audit(1750932755.870:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.6.12677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2330.954930][T27975] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2330.983901][ T30] audit: type=1326 audit(1750932755.880:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.6.12677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2330.985838][T27975] usb 10-1: Product: syz [ 2330.985951][T27975] usb 10-1: Manufacturer: syz [ 2330.986060][T27975] usb 10-1: SerialNumber: syz [ 2331.031904][ T30] audit: type=1800 audit(1750932756.100:479): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12678" name="file0" dev="loop3" ino=1 res=0 errno=0 [ 2331.698025][T27975] kaweth 10-1:1.85: Firmware present in device. [ 2331.928615][T27975] kaweth 10-1:1.85: Error reading configuration (-71), no net device created [ 2331.945496][T27975] kaweth 10-1:1.85: probe with driver kaweth failed with error -5 [ 2332.015487][T27975] usb 10-1: USB disconnect, device number 3 [ 2332.057927][ T7065] loop2: detected capacity change from 0 to 64 [ 2333.104858][ T7093] loop9: detected capacity change from 0 to 1024 [ 2333.993440][ T7109] loop6: detected capacity change from 0 to 2048 [ 2334.135491][ T7109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2334.326886][ T7109] EXT4-fs error (device loop6): ext4_ext_precache:649: inode #2: comm syz.6.12699: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 2334.447046][ T7109] EXT4-fs (loop6): Remounting filesystem read-only [ 2334.488647][ T7123] loop2: detected capacity change from 0 to 1024 [ 2334.571417][ T7123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2334.584504][ T7123] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2334.721888][T22163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2335.059797][ T5596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2335.225559][ T7138] netlink: 36 bytes leftover after parsing attributes in process `syz.9.12711'. [ 2335.263850][ T7139] loop6: detected capacity change from 0 to 512 [ 2335.311960][ T7139] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 2335.510019][ T7139] overlayfs: workdir and upperdir must be separate subtrees [ 2335.799832][ T7152] loop9: detected capacity change from 0 to 512 [ 2335.866592][ T7152] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 2335.961301][ T7152] EXT4-fs (loop9): 1 truncate cleaned up [ 2335.970086][ T7152] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2336.471848][ T30] audit: type=1326 audit(1750932761.610:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.4.12714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765118e929 code=0x7fc00000 [ 2336.688001][T23839] Bluetooth: hci1: link tx timeout [ 2336.693419][T23839] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 2336.928331][ T4890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2337.163459][T11196] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2337.290763][ T30] audit: type=1326 audit(1750932762.440:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.6.12724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2337.320144][ T30] audit: type=1326 audit(1750932762.450:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.6.12724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2337.343166][ T30] audit: type=1326 audit(1750932762.450:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.6.12724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b58e929 code=0x7ffc0000 [ 2337.424175][T11196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2337.441462][T11196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2337.452601][T11196] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2337.473781][T11196] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2337.484235][T11196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2337.506559][T11196] usb 3-1: config 0 descriptor?? [ 2337.995257][T11196] plantronics 0003:047F:FFFF.0038: unbalanced collection at end of report description [ 2338.053336][T11196] plantronics 0003:047F:FFFF.0038: parse failed [ 2338.060768][T11196] plantronics 0003:047F:FFFF.0038: probe with driver plantronics failed with error -22 [ 2338.171926][ T7193] loop3: detected capacity change from 0 to 512 [ 2338.216471][T27975] usb 3-1: USB disconnect, device number 31 [ 2338.336947][ T7193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2338.350497][ T7193] ext4 filesystem being mounted at /2563/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2338.530045][ T7193] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #12: comm syz.3.12728: invalid size [ 2338.757999][T19034] Bluetooth: hci1: command 0x0406 tx timeout [ 2338.909464][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2339.022020][ T7217] loop6: detected capacity change from 0 to 512 [ 2339.125558][ T7217] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2339.235837][ T7217] EXT4-fs (loop6): 1 truncate cleaned up [ 2339.244072][ T7217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2339.323521][ T7228] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 2339.975113][T10412] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2340.136473][T22163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2340.278309][T10412] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2340.287975][T10412] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.296683][T10412] usb 10-1: Product: syz [ 2340.301287][T10412] usb 10-1: Manufacturer: syz [ 2340.306447][T10412] usb 10-1: SerialNumber: syz [ 2340.480568][T10412] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2340.585921][T27975] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2340.662651][ T7249] loop4: detected capacity change from 0 to 256 [ 2340.680915][ T7249] exfat: Deprecated parameter 'utf8' [ 2340.687965][ T7249] exfat: Deprecated parameter 'utf8' [ 2340.782147][ T7249] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d) [ 2340.983398][T10412] usb 10-1: USB disconnect, device number 4 [ 2341.716129][T27975] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 2341.724269][T27975] ath9k_htc: Failed to initialize the device [ 2341.806295][T10412] usb 10-1: ath9k_htc: USB layer deinitialized [ 2342.067713][ T7279] ipvlan2: entered promiscuous mode [ 2342.082015][ T7279] ipvlan2: entered allmulticast mode [ 2342.087744][ T7279] hsr0: entered allmulticast mode [ 2342.093032][ T7279] hsr_slave_0: entered allmulticast mode [ 2342.099065][ T7279] hsr_slave_1: entered allmulticast mode [ 2342.284289][ T7284] loop2: detected capacity change from 0 to 64 [ 2342.830884][ T7300] loop3: detected capacity change from 0 to 512 [ 2342.900472][ T7300] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2343.022663][ T7300] EXT4-fs (loop3): 1 truncate cleaned up [ 2343.031383][ T7300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2343.446991][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2343.677660][ T7315] loop9: detected capacity change from 0 to 1024 [ 2343.750045][ T7315] EXT4-fs (loop9): Test dummy encryption mode enabled [ 2343.768863][ T7315] EXT4-fs (loop9): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 2343.841973][ T7315] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2344.010667][ T4890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2344.170374][ T7327] loop6: detected capacity change from 0 to 1024 [ 2344.472618][T11196] kernel write not supported for file /5300/net/sockstat6 (pid: 11196 comm: kworker/1:0) [ 2344.785580][T22261] hfsplus: b-tree write err: -5, ino 4 [ 2345.582391][T11196] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2345.645436][T11196] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2346.569693][ T7386] program syz.2.12787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2346.712075][ T7388] netlink: 252 bytes leftover after parsing attributes in process `syz.3.12786'. [ 2347.030087][ T7390] loop9: detected capacity change from 0 to 1024 [ 2347.617073][ T7409] tipc: Started in network mode [ 2347.622404][ T7409] tipc: Node identity ac141412, cluster identity 4711 [ 2347.636420][ T7409] tipc: New replicast peer: 255.255.255.255 [ 2347.645343][ T7409] tipc: Enabled bearer , priority 10 [ 2348.765300][T11196] tipc: Node number set to 2886997010 [ 2349.403879][ T7434] loop6: detected capacity change from 0 to 128 [ 2349.465394][ T7434] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 2349.875240][ T7444] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 2349.882091][ T7444] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2349.896324][ T7444] vhci_hcd vhci_hcd.0: Device attached [ 2350.168779][T11196] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 2350.294077][ T51] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 2350.824726][T10412] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 2351.037816][T10412] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 2351.046527][T10412] usb 7-1: config 0 has no interface number 0 [ 2351.052939][T10412] usb 7-1: config 0 interface 41 has no altsetting 0 [ 2351.135103][T10412] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2351.144818][T10412] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.153156][T10412] usb 7-1: Product: syz [ 2351.157969][T10412] usb 7-1: Manufacturer: syz [ 2351.162844][T10412] usb 7-1: SerialNumber: syz [ 2351.257289][T10412] usb 7-1: config 0 descriptor?? [ 2351.424024][ T7480] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 2351.932357][T10412] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 2351.992446][T10412] usb 7-1: USB disconnect, device number 35 [ 2352.208818][ T7487] loop2: detected capacity change from 0 to 4096 [ 2353.072155][ T7445] vhci_hcd: connection reset by peer [ 2353.081572][ T7511] loop6: detected capacity change from 0 to 512 [ 2353.090398][T22261] vhci_hcd: stop threads [ 2353.100661][T22261] vhci_hcd: release socket [ 2353.105561][T22261] vhci_hcd: disconnect device [ 2353.174898][ T7511] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2353.291595][ T7511] EXT4-fs (loop6): 1 truncate cleaned up [ 2353.299787][ T7511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2353.478390][ T7522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2353.485957][ T7522] IPv6: NLM_F_CREATE should be set when creating new route [ 2353.493433][ T7522] IPv6: NLM_F_CREATE should be set when creating new route [ 2353.501043][ T7522] IPv6: NLM_F_CREATE should be set when creating new route [ 2353.537450][ T7524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2353.578625][ T4899] kernel write not supported for file /sg0 (pid: 4899 comm: kworker/1:5) [ 2353.873274][T22163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2353.933724][ T7527] loop3: detected capacity change from 0 to 2048 [ 2354.048466][ T7527] loop3: p1[EZD] p4 [ 2354.051315][ T7534] loop9: detected capacity change from 0 to 256 [ 2354.079961][ T7534] exfat: Deprecated parameter 'namecase' [ 2354.095577][ T7534] exfat: Deprecated parameter 'utf8' [ 2354.104689][ T7527] loop3: p4 size 8388608 extends beyond EOD, truncated [ 2354.261566][ T7534] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 2355.320738][T11196] vhci_hcd: vhci_device speed not set [ 2356.050426][ T30] audit: type=1326 audit(1750932781.190:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.9.12854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5ff8e929 code=0x7ffc0000 [ 2356.079937][ T30] audit: type=1326 audit(1750932781.190:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.9.12854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5ff8e929 code=0x7ffc0000 [ 2356.103060][ T30] audit: type=1326 audit(1750932781.200:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.9.12854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f7a5ff8e929 code=0x7ffc0000 [ 2356.134012][ T30] audit: type=1326 audit(1750932781.200:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.9.12854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5ff8e929 code=0x7ffc0000 [ 2356.163731][ T30] audit: type=1326 audit(1750932781.200:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.9.12854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5ff8e929 code=0x7ffc0000 [ 2356.189160][ T4899] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 2356.321260][ T30] audit: type=1326 audit(1750932781.370:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.9.12854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f7a5ff8e929 code=0x7ffc0000 [ 2356.344479][ T30] audit: type=1326 audit(1750932781.370:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.9.12854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5ff8e929 code=0x7ffc0000 [ 2356.374691][ T30] audit: type=1326 audit(1750932781.370:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.9.12854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5ff8e929 code=0x7ffc0000 [ 2356.515651][ T4899] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 2356.530723][ T4899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2356.539309][ T4899] usb 7-1: Product: syz [ 2356.543748][ T4899] usb 7-1: Manufacturer: syz [ 2356.548719][ T4899] usb 7-1: SerialNumber: syz [ 2356.591504][ T4899] usb 7-1: config 0 descriptor?? [ 2356.609917][ T7584] netlink: 40 bytes leftover after parsing attributes in process `syz.9.12857'. [ 2356.659852][ T7584] netlink: 40 bytes leftover after parsing attributes in process `syz.9.12857'. [ 2356.834847][ T4899] usb 7-1: ignoring: probably an ADSL modem [ 2357.262874][ T4899] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2357.335301][ T4899] usb 7-1: USB disconnect, device number 36 [ 2357.631717][ T7601] loop2: detected capacity change from 0 to 512 [ 2357.693741][ T7601] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 2357.713518][ T7601] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 2357.724878][ T7601] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #13: comm syz.2.12861: iget: bad i_size value: 12154757448730 [ 2357.752986][ T7601] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.12861: couldn't read orphan inode 13 (err -117) [ 2357.775178][ T7601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2357.819647][ T7608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12862'. [ 2358.043739][ T5596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2358.341535][ T7618] lo speed is unknown, defaulting to 1000 [ 2358.353356][ T7618] lo speed is unknown, defaulting to 1000 [ 2358.363938][ T7618] lo speed is unknown, defaulting to 1000 [ 2358.383519][ T7618] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2358.432682][ T7618] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2358.594726][ T7618] lo speed is unknown, defaulting to 1000 [ 2358.603726][ T7618] lo speed is unknown, defaulting to 1000 [ 2358.618438][ T7618] lo speed is unknown, defaulting to 1000 [ 2358.627328][ T7618] lo speed is unknown, defaulting to 1000 [ 2358.639325][ T7618] lo speed is unknown, defaulting to 1000 [ 2359.016141][ T7634] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.12869'. [ 2359.036325][ T7630] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.12869'. [ 2359.085797][ T7636] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12871'. [ 2359.097939][ T7633] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12871'. [ 2359.821932][ T7647] loop3: detected capacity change from 0 to 64 [ 2360.769885][ T7666] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 2361.103622][ T7663] loop9: detected capacity change from 0 to 4096 [ 2361.185107][ T7672] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2361.440867][ T7675] loop3: detected capacity change from 0 to 1024 [ 2361.587504][ T7675] hfsplus: bad catalog entry type [ 2361.657938][ T4890] NILFS (loop9): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 2361.668057][ T4890] NILFS error (device loop9): nilfs_bmap_truncate: broken bmap (inode number=12) [ 2361.725085][ T4890] Remounting filesystem read-only [ 2361.730507][ T4890] NILFS (loop9): error -5 truncating bmap (ino=12) [ 2361.781539][ T4890] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 2361.949003][ T3934] hfsplus: b-tree write err: -5, ino 4 [ 2362.412316][ T7697] loop6: detected capacity change from 0 to 64 [ 2363.916746][ T7724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12907'. [ 2364.699310][ T7733] loop6: detected capacity change from 0 to 512 [ 2364.782582][ T7733] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2364.901720][ T7733] EXT4-fs (loop6): 1 truncate cleaned up [ 2364.916550][ T7733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2364.947408][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12912'. [ 2364.956840][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12912'. [ 2365.262737][ T7746] loop2: detected capacity change from 0 to 64 [ 2365.361873][T22163] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2365.901054][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12919'. [ 2365.913203][ T7760] sp0: Synchronizing with TNC [ 2365.965764][ T7760] sp0: Found TNC [ 2367.008805][ T7777] loop3: detected capacity change from 0 to 256 [ 2367.076442][ T7771] loop4: detected capacity change from 0 to 32768 [ 2367.080868][ T7777] exfat: Deprecated parameter 'utf8' [ 2367.090403][ T7771] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.12921 (7771) [ 2367.113079][ T7777] exfat: Deprecated parameter 'namecase' [ 2367.143982][ T7771] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2367.154816][ T7771] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 2367.170011][ T7771] BTRFS info (device loop4): disk space caching is enabled [ 2367.177724][ T7771] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2367.285026][ T7777] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d) [ 2367.505221][ T7797] loop6: detected capacity change from 0 to 8 [ 2368.073327][ T7806] netlink: 60 bytes leftover after parsing attributes in process `syz.9.12942'. [ 2368.122571][ T7808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2368.130241][ T7808] IPv6: NLM_F_CREATE should be set when creating new route [ 2368.137858][ T7808] IPv6: NLM_F_CREATE should be set when creating new route [ 2368.145432][ T7808] IPv6: NLM_F_CREATE should be set when creating new route [ 2368.204191][ T7808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2368.362581][ T4110] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x16636aeb level 0 [ 2368.381886][ T7771] BTRFS warning (device loop4): couldn't read tree root [ 2368.445557][ T7793] loop2: detected capacity change from 0 to 32768 [ 2368.561113][ T7771] BTRFS error (device loop4): open_ctree failed: -5 [ 2369.975878][ T7837] program syz.4.12941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2370.675141][ T4899] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2370.882014][ T4899] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 2370.896422][ T4899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2370.907075][ T4899] usb 4-1: config 0 has no interface number 0 [ 2370.913441][ T4899] usb 4-1: config 0 interface 12 has no altsetting 0 [ 2371.161634][ T4899] usb 4-1: New USB device found, idVendor=1949, idProduct=0c8a, bcdDevice=72.69 [ 2371.177589][ T4899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2371.186882][ T4899] usb 4-1: Product: syz [ 2371.191288][ T4899] usb 4-1: Manufacturer: syz [ 2371.198922][ T4899] usb 4-1: SerialNumber: syz [ 2371.299337][ T4899] usb 4-1: config 0 descriptor?? [ 2371.560812][ T4899] usb 4-1: USB disconnect, device number 57 [ 2371.580375][ T7864] loop9: detected capacity change from 0 to 1024 [ 2371.661679][ T7864] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2372.113734][ T4890] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2372.505021][ T7890] ===================================================== [ 2372.512425][ T7890] BUG: KMSAN: uninit-value in ieee802154_max_payload+0x399/0x3c0 [ 2372.521269][ T7890] ieee802154_max_payload+0x399/0x3c0 [ 2372.527057][ T7890] ieee802154_header_create+0x99b/0xb90 [ 2372.532835][ T7890] dgram_sendmsg+0xb3d/0x16d0 [ 2372.537915][ T7890] ieee802154_sock_sendmsg+0x92/0xd0 [ 2372.543447][ T7890] __sock_sendmsg+0x330/0x3d0 [ 2372.548672][ T7890] ____sys_sendmsg+0x7e0/0xd80 [ 2372.553643][ T7890] ___sys_sendmsg+0x271/0x3b0 [ 2372.559411][ T7890] __x64_sys_sendmsg+0x211/0x3e0 [ 2372.564833][ T7890] x64_sys_call+0x32fb/0x3db0 [ 2372.569755][ T7890] do_syscall_64+0xd9/0x210 [ 2372.574620][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2372.580746][ T7890] [ 2372.583212][ T7890] Local variable hdr created at: [ 2372.592752][ T7890] ieee802154_header_create+0x4e/0xb90 [ 2372.599879][ T7890] dgram_sendmsg+0xb3d/0x16d0 [ 2372.604968][ T7890] [ 2372.607435][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: syz.9.12956 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(undef) [ 2372.619998][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2372.630455][ T7890] ===================================================== [ 2372.637707][ T7890] Disabling lock debugging due to kernel taint [ 2372.643997][ T7890] Kernel panic - not syncing: kmsan.panic set ... [ 2372.650615][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: syz.9.12956 Tainted: G B 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(undef) [ 2372.664655][ T7890] Tainted: [B]=BAD_PAGE [ 2372.668950][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2372.679264][ T7890] Call Trace: [ 2372.682696][ T7890] [ 2372.685784][ T7890] __dump_stack+0x26/0x30 [ 2372.690338][ T7890] dump_stack_lvl+0x53/0x270 [ 2372.695165][ T7890] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2372.701262][ T7890] dump_stack+0x1e/0x25 [ 2372.705675][ T7890] panic+0x4bd/0xd50 [ 2372.709868][ T7890] kmsan_report+0x31c/0x320 [ 2372.714721][ T7890] ? ____sys_sendmsg+0x7e0/0xd80 [ 2372.719869][ T7890] ? __msan_warning+0x1b/0x30 [ 2372.724751][ T7890] ? ieee802154_max_payload+0x399/0x3c0 [ 2372.730558][ T7890] ? ieee802154_header_create+0x99b/0xb90 [ 2372.736484][ T7890] ? dgram_sendmsg+0xb3d/0x16d0 [ 2372.741557][ T7890] ? ieee802154_sock_sendmsg+0x92/0xd0 [ 2372.747253][ T7890] ? __sock_sendmsg+0x330/0x3d0 [ 2372.752339][ T7890] ? ____sys_sendmsg+0x7e0/0xd80 [ 2372.757490][ T7890] ? ___sys_sendmsg+0x271/0x3b0 [ 2372.762521][ T7890] ? __x64_sys_sendmsg+0x211/0x3e0 [ 2372.767831][ T7890] ? x64_sys_call+0x32fb/0x3db0 [ 2372.772913][ T7890] ? do_syscall_64+0xd9/0x210 [ 2372.777785][ T7890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2372.784049][ T7890] ? ieee802154_hdr_push+0x31/0xa30 [ 2372.789475][ T7890] ? filter_irq_stacks+0x49/0x190 [ 2372.794689][ T7890] ? kmsan_get_metadata+0xfb/0x160 [ 2372.800047][ T7890] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 2372.806504][ T7890] ? kmsan_get_metadata+0xfb/0x160 [ 2372.811849][ T7890] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 2372.818427][ T7890] ? __msan_memcpy+0x108/0x1c0 [ 2372.823417][ T7890] ? kmsan_get_metadata+0xfb/0x160 [ 2372.828791][ T7890] __msan_warning+0x1b/0x30 [ 2372.833526][ T7890] ieee802154_max_payload+0x399/0x3c0 [ 2372.839262][ T7890] ieee802154_header_create+0x99b/0xb90 [ 2372.845048][ T7890] ? kmsan_get_metadata+0xfb/0x160 [ 2372.850437][ T7890] ? __pfx_ieee802154_header_create+0x10/0x10 [ 2372.856732][ T7890] dgram_sendmsg+0xb3d/0x16d0 [ 2372.861647][ T7890] ? __pfx_dgram_sendmsg+0x10/0x10 [ 2372.866985][ T7890] ieee802154_sock_sendmsg+0x92/0xd0 [ 2372.872524][ T7890] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 2372.878752][ T7890] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 2372.884969][ T7890] __sock_sendmsg+0x330/0x3d0 [ 2372.889859][ T7890] ____sys_sendmsg+0x7e0/0xd80 [ 2372.894869][ T7890] ___sys_sendmsg+0x271/0x3b0 [ 2372.899793][ T7890] ? __rcu_read_unlock+0x6d/0xd0 [ 2372.904952][ T7890] ? __fget_files+0x3b4/0x4a0 [ 2372.909816][ T7890] ? __fget_files+0x3b9/0x4a0 [ 2372.914665][ T7890] ? kmsan_get_metadata+0xfb/0x160 [ 2372.920004][ T7890] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2372.926039][ T7890] __x64_sys_sendmsg+0x211/0x3e0 [ 2372.931184][ T7890] ? kmsan_get_metadata+0xfb/0x160 [ 2372.936550][ T7890] x64_sys_call+0x32fb/0x3db0 [ 2372.941454][ T7890] do_syscall_64+0xd9/0x210 [ 2372.946181][ T7890] ? irqentry_exit+0x16/0x60 [ 2372.950938][ T7890] ? clear_bhb_loop+0x40/0x90 [ 2372.955805][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2372.961894][ T7890] RIP: 0033:0x7f7a5ff8e929 [ 2372.966466][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2372.986305][ T7890] RSP: 002b:00007f7a60e99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2372.994951][ T7890] RAX: ffffffffffffffda RBX: 00007f7a601b5fa0 RCX: 00007f7a5ff8e929 [ 2373.003125][ T7890] RDX: 0000000004000010 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2373.011273][ T7890] RBP: 00007f7a60010b39 R08: 0000000000000000 R09: 0000000000000000 [ 2373.019393][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2373.027538][ T7890] R13: 0000000000000000 R14: 00007f7a601b5fa0 R15: 00007ffe454e3228 [ 2373.035701][ T7890] [ 2373.039217][ T7890] Kernel Offset: disabled [ 2373.043647][ T7890] Rebooting in 86400 seconds..