last executing test programs: 2.038462325s ago: executing program 0 (id=276): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') exit(0xffffffffffffffa9) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.690828983s ago: executing program 1 (id=281): r0 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xed\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]}) fsetxattr(r0, &(0x7f0000000240)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) 1.61547328s ago: executing program 1 (id=282): mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mlock2(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) 1.459055672s ago: executing program 1 (id=284): mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x93031, 0xffffffffffffffff, 0x10000000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4005, &(0x7f0000000000)=0x6, 0x9, 0x2) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 1.28300188s ago: executing program 1 (id=288): creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='ub\xce\x00\x00\x00') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) 1.28280644s ago: executing program 2 (id=289): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1.208982177s ago: executing program 2 (id=290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 1.196514645s ago: executing program 3 (id=291): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x8) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x7) 1.086808905s ago: executing program 1 (id=292): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.05687007s ago: executing program 0 (id=293): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r0], 0x18}, 0x40c0) 1.050484108s ago: executing program 2 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)={0xe4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e09113fb5219a8d6c47193290f8fdbca00a8f06c8193b391467504d4fc11c8c6"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9a}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 907.059863ms ago: executing program 3 (id=295): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltgid=', @ANYRESDEC=r2, @ANYRESOCT=r0]) 887.009959ms ago: executing program 0 (id=296): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000280)="$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") symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') openat2$dir(0xffffff9c, &(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000180)={0x220000, 0x0, 0x28}, 0x18) 880.878208ms ago: executing program 2 (id=297): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4008840) r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3000, 0x0, 0xfffffffc}) io_uring_enter(r0, 0x0, 0xcb, 0xf, &(0x7f0000000000), 0x18) 735.013332ms ago: executing program 3 (id=298): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) 612.87997ms ago: executing program 2 (id=299): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x1}}]}, 0x38}}, 0x0) 551.415619ms ago: executing program 3 (id=300): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x8a401) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000600)={{0x1, 0x1, 0x7, 0x3}, 0x1, 0x405}) 416.176575ms ago: executing program 0 (id=301): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 380.526319ms ago: executing program 3 (id=302): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 340.568141ms ago: executing program 2 (id=303): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0186e86, &(0x7f00000001c0)={0x0, 0x1, 0x6, 0x1ffffffff, 0x121, 0x3, 0x2401}) 154.934238ms ago: executing program 3 (id=304): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./control\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x26, 0x362, &(0x7f0000000c00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0xa8) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 154.654378ms ago: executing program 0 (id=305): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 8.110592ms ago: executing program 0 (id=306): r0 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x6000) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000002000/0x3000)=nil, 0x3) 0s ago: executing program 1 (id=307): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) r1 = socket(0x10, 0x800000000080002, 0x6) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 64.045977][ T5750] cgroup: Unknown subsys name 'net' [ 64.181185][ T5750] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.509639][ T5750] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.872106][ T5765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.881867][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.891163][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.900121][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.907940][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.916284][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.924607][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.938562][ T5765] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.946840][ T5765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.952833][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.954240][ T5765] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.968110][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.976179][ T5765] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.983859][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.990956][ T5765] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.991896][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.006234][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.013526][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.021590][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.022012][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.029417][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.037728][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.044619][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.058089][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.389898][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 67.505486][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 67.552096][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 67.598509][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.606489][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.613745][ T5761] bridge_slave_0: entered allmulticast mode [ 67.620762][ T5761] bridge_slave_0: entered promiscuous mode [ 67.657356][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.666668][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.673995][ T5761] bridge_slave_1: entered allmulticast mode [ 67.681021][ T5761] bridge_slave_1: entered promiscuous mode [ 67.736619][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.761615][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.825569][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 67.845695][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.852869][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.860239][ T5764] bridge_slave_0: entered allmulticast mode [ 67.866978][ T5764] bridge_slave_0: entered promiscuous mode [ 67.874307][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.881569][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.888897][ T5764] bridge_slave_1: entered allmulticast mode [ 67.895689][ T5764] bridge_slave_1: entered promiscuous mode [ 67.902270][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.912331][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.919550][ T5763] bridge_slave_0: entered allmulticast mode [ 67.926884][ T5763] bridge_slave_0: entered promiscuous mode [ 67.942328][ T5761] team0: Port device team_slave_0 added [ 67.957462][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.966391][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.973511][ T5763] bridge_slave_1: entered allmulticast mode [ 67.980940][ T5763] bridge_slave_1: entered promiscuous mode [ 68.005437][ T5761] team0: Port device team_slave_1 added [ 68.050352][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.071857][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.086562][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.106417][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.113400][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.139886][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.153578][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.190328][ T5764] team0: Port device team_slave_0 added [ 68.197426][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.204438][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.230587][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.257935][ T5764] team0: Port device team_slave_1 added [ 68.280086][ T5763] team0: Port device team_slave_0 added [ 68.289526][ T5763] team0: Port device team_slave_1 added [ 68.313706][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.320867][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.347358][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.368154][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.376029][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.383266][ T5762] bridge_slave_0: entered allmulticast mode [ 68.390055][ T5762] bridge_slave_0: entered promiscuous mode [ 68.415690][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.422658][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.449102][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.478224][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.486475][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.493652][ T5762] bridge_slave_1: entered allmulticast mode [ 68.500644][ T5762] bridge_slave_1: entered promiscuous mode [ 68.560349][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.570219][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.579626][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.606400][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.633154][ T5764] hsr_slave_0: entered promiscuous mode [ 68.639469][ T5764] hsr_slave_1: entered promiscuous mode [ 68.649685][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.659651][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.669180][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.697624][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.711930][ T5761] hsr_slave_0: entered promiscuous mode [ 68.718913][ T5761] hsr_slave_1: entered promiscuous mode [ 68.725330][ T5761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.733074][ T5761] Cannot create hsr debugfs directory [ 68.777254][ T5762] team0: Port device team_slave_0 added [ 68.812530][ T5762] team0: Port device team_slave_1 added [ 68.912151][ T5763] hsr_slave_0: entered promiscuous mode [ 68.919017][ T5763] hsr_slave_1: entered promiscuous mode [ 68.925973][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.933544][ T5763] Cannot create hsr debugfs directory [ 68.955060][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.962029][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.988312][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.025535][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.032497][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.058730][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.075511][ T5774] Bluetooth: hci1: command tx timeout [ 69.155941][ T5774] Bluetooth: hci2: command tx timeout [ 69.161766][ T5771] Bluetooth: hci3: command tx timeout [ 69.161782][ T5773] Bluetooth: hci0: command tx timeout [ 69.231196][ T5762] hsr_slave_0: entered promiscuous mode [ 69.237732][ T5762] hsr_slave_1: entered promiscuous mode [ 69.243783][ T5762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.252218][ T5762] Cannot create hsr debugfs directory [ 69.353483][ T5761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.377914][ T5761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.412498][ T5761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.422574][ T5761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.498794][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.509325][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.543524][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.553473][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.632000][ T5763] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.645270][ T5763] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.670811][ T5763] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.680643][ T5763] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.768385][ T5762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.777833][ T5762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.799966][ T5762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.811716][ T5762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.880136][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.940695][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.962124][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.983964][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.008754][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.016054][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.042237][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.049403][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.063988][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.110699][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.129957][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.137077][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.154298][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.161481][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.197840][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.205020][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.231186][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.238381][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.272100][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.425299][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.454162][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.461382][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.512010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.519228][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.727565][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.868473][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.885840][ T5761] veth0_vlan: entered promiscuous mode [ 70.899802][ T5761] veth1_vlan: entered promiscuous mode [ 70.952639][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.975650][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.996269][ T5761] veth0_macvtap: entered promiscuous mode [ 71.040892][ T5761] veth1_macvtap: entered promiscuous mode [ 71.052830][ T5763] veth0_vlan: entered promiscuous mode [ 71.085385][ T5764] veth0_vlan: entered promiscuous mode [ 71.100042][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.112201][ T5763] veth1_vlan: entered promiscuous mode [ 71.130579][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.152495][ T5761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.163128][ T5761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.164958][ T5771] Bluetooth: hci1: command tx timeout [ 71.171945][ T5761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.187835][ T5761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.201236][ T5764] veth1_vlan: entered promiscuous mode [ 71.227258][ T5762] veth0_vlan: entered promiscuous mode [ 71.235208][ T5771] Bluetooth: hci3: command tx timeout [ 71.240657][ T5771] Bluetooth: hci2: command tx timeout [ 71.245229][ T5774] Bluetooth: hci0: command tx timeout [ 71.282977][ T5763] veth0_macvtap: entered promiscuous mode [ 71.293544][ T5763] veth1_macvtap: entered promiscuous mode [ 71.302458][ T5764] veth0_macvtap: entered promiscuous mode [ 71.333014][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.348655][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.361053][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.371412][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.382012][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.397127][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.413782][ T5762] veth1_vlan: entered promiscuous mode [ 71.423913][ T5764] veth1_macvtap: entered promiscuous mode [ 71.470388][ T5763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.480129][ T5763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.489517][ T5763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.498303][ T5763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.539391][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.550511][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.565079][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.569895][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.571551][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.581914][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.583453][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.630258][ T5762] veth0_macvtap: entered promiscuous mode [ 71.641871][ T5762] veth1_macvtap: entered promiscuous mode [ 71.671190][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.684131][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.700393][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.717703][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.727874][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.738525][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.748429][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.759274][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.770314][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.787241][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.798821][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.811221][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.822027][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.833174][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.849751][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.860330][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.870484][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.881820][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.891918][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.902556][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.914014][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.926016][ T5764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.936217][ T5764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.945032][ T5764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.953731][ T5764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.986482][ T5762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.999676][ T5762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.010446][ T5762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.019238][ T5762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.070075][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.087687][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.135496][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.151775][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.219937][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.238486][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.263835][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.286709][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.472336][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.484807][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.495145][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.502991][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.553287][ T5834] syz.2.3[5834]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 72.583186][ T5834] loop2: detected capacity change from 0 to 64 [ 72.590503][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.626499][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.780215][ T5834] syz.2.3: attempt to access beyond end of device [ 72.780215][ T5834] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 72.844729][ T5834] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 72.984882][ T5842] capability: warning: `syz.0.7' uses 32-bit capabilities (legacy support in use) [ 73.164066][ T5848] ptrace attach of "./syz-executor exec"[5763] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[5848] [ 73.236214][ T5773] Bluetooth: hci1: command tx timeout [ 73.311864][ T5852] loop3: detected capacity change from 0 to 2048 [ 73.315332][ T5773] Bluetooth: hci0: command tx timeout [ 73.323732][ T5773] Bluetooth: hci2: command tx timeout [ 73.329349][ T5774] Bluetooth: hci3: command tx timeout [ 73.435807][ T5852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.811264][ T5850] loop0: detected capacity change from 0 to 40427 [ 73.839736][ T5850] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 73.864942][ T5850] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 73.884838][ T5850] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 73.903781][ T5850] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 73.935169][ T5850] F2FS-fs (loop0): Image doesn't support compression [ 73.964956][ T5850] F2FS-fs (loop0): invalid crc value [ 73.994434][ T5850] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.185882][ T5850] F2FS-fs (loop0): Start checkpoint disabled! [ 74.241109][ T5850] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 74.254798][ T5850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 74.262548][ T5861] pim6reg: entered allmulticast mode [ 74.287256][ T5861] pim6reg: left allmulticast mode [ 74.370310][ T5855] loop2: detected capacity change from 0 to 32768 [ 74.377062][ T28] audit: type=1800 audit(1772802719.294:2): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11" name="file2" dev="loop0" ino=10 res=0 errno=0 [ 74.418838][ T5855] XFS: attr2 mount option is deprecated. [ 74.487617][ T5855] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 74.572969][ T11] kworker/u4:0: attempt to access beyond end of device [ 74.572969][ T11] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 74.606050][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 74.639093][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 74.685844][ T5855] XFS (loop2): Ending clean mount [ 74.698149][ T5874] netlink: 'syz.1.17': attribute type 15 has an invalid length. [ 74.753910][ T5855] XFS (loop2): Quotacheck needed: Please wait. [ 74.904050][ T5855] XFS (loop2): Quotacheck: Done. [ 74.930451][ T5878] loop1: detected capacity change from 0 to 16 [ 74.999164][ T5878] erofs: (device loop1): mounted with root inode @ nid 36. [ 75.091543][ T5879] loop3: detected capacity change from 0 to 4096 [ 75.265858][ T5763] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 75.315645][ T5774] Bluetooth: hci1: command tx timeout [ 75.394766][ T5774] Bluetooth: hci3: command tx timeout [ 75.401483][ T5773] Bluetooth: hci2: command tx timeout [ 75.404458][ T5771] Bluetooth: hci0: command tx timeout [ 75.414607][ T5879] EXT4-fs (loop3): Test dummy encryption mode enabled [ 75.523174][ T5879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.556181][ T5889] loop0: detected capacity change from 0 to 2048 [ 75.611230][ T5889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.625592][ T5807] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.791493][ T5879] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 75.861164][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 75.878757][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.911827][ T5899] tipc: Started in network mode [ 75.917097][ T5899] tipc: Node identity ac14140f, cluster identity 4711 [ 75.928426][ T5899] tipc: New replicast peer: 255.255.255.255 [ 75.933239][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.935838][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.956993][ T5899] tipc: Enabled bearer , priority 10 [ 75.959410][ T5807] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.994210][ T5901] dummy0: entered promiscuous mode [ 76.001490][ T5807] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 76.015778][ T5901] vlan2: entered promiscuous mode [ 76.039633][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.082516][ T5807] usb 2-1: config 0 descriptor?? [ 76.244278][ T5905] pim6reg: entered allmulticast mode [ 76.314475][ T5905] pim6reg: left allmulticast mode [ 76.486577][ T5913] netlink: 68 bytes leftover after parsing attributes in process `syz.2.32'. [ 76.554356][ T5807] a4tech 0003:09DA:000A.0001: unknown main item tag 0x3 [ 76.584633][ T5807] a4tech 0003:09DA:000A.0001: unknown main item tag 0x5 [ 76.591661][ T5807] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 76.624557][ T5807] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 76.631581][ T5807] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 76.656694][ T5807] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 76.676589][ T5807] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 76.683772][ T5807] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 76.699508][ T5807] a4tech 0003:09DA:000A.0001: global environment stack underflow [ 76.720545][ T5807] a4tech 0003:09DA:000A.0001: item 0 0 1 11 parsing failed [ 76.756963][ T5807] a4tech 0003:09DA:000A.0001: parse failed [ 76.762966][ T5807] a4tech: probe of 0003:09DA:000A.0001 failed with error -22 [ 76.832255][ T5807] usb 2-1: USB disconnect, device number 2 [ 76.859572][ T5923] loop0: detected capacity change from 0 to 128 [ 76.891847][ T5923] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.086783][ T5802] tipc: Node number set to 2886997007 [ 77.396173][ T5919] loop2: detected capacity change from 0 to 32768 [ 77.430865][ T5919] (syz.2.35,5919,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 77.469754][ T5919] (syz.2.35,5919,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 77.580584][ T5919] JBD2: Ignoring recovery information on journal [ 77.750676][ T5921] loop3: detected capacity change from 0 to 40427 [ 77.790930][ T5919] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 77.829563][ T5921] F2FS-fs (loop3): invalid crc value [ 77.858307][ T5921] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.962215][ T5921] F2FS-fs (loop3): Start checkpoint disabled! [ 77.978771][ T5921] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 78.220154][ T5763] ocfs2: Unmounting device (7,2) on (node local) [ 78.305316][ T11] kworker/u4:0: attempt to access beyond end of device [ 78.305316][ T11] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 78.344622][ T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 78.351778][ T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 78.682924][ T5939] team_slave_0: entered promiscuous mode [ 78.688962][ T5939] team_slave_1: entered promiscuous mode [ 78.697431][ T5939] macsec1: entered promiscuous mode [ 78.702667][ T5939] team0: entered promiscuous mode [ 78.708843][ T5939] macsec1: entered allmulticast mode [ 78.714169][ T5939] team0: entered allmulticast mode [ 78.720015][ T5939] team_slave_0: entered allmulticast mode [ 78.726058][ T5939] team_slave_1: entered allmulticast mode [ 78.734094][ T5939] team0: Device macsec1 is already an upper device of the team interface [ 78.749069][ T5939] team0: left allmulticast mode [ 78.756784][ T5939] team_slave_0: left allmulticast mode [ 78.762448][ T5939] team_slave_1: left allmulticast mode [ 78.771726][ T5939] team0: left promiscuous mode [ 78.776912][ T5937] loop1: detected capacity change from 0 to 32768 [ 78.778660][ T5939] team_slave_0: left promiscuous mode [ 78.788929][ T5939] team_slave_1: left promiscuous mode [ 78.812651][ T5937] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 78.884127][ T5937] XFS (loop1): Ending clean mount [ 78.993716][ T5762] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.179093][ T5953] loop3: detected capacity change from 0 to 128 [ 79.212341][ T5953] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.268330][ T5955] pim6reg: entered allmulticast mode [ 79.314920][ T5958] pim6reg: left allmulticast mode [ 79.859982][ T5950] loop0: detected capacity change from 0 to 32768 [ 79.872075][ T5950] (syz.0.51,5950,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 79.874627][ T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.893542][ T5950] (syz.0.51,5950,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 79.979132][ T5950] JBD2: Ignoring recovery information on journal [ 80.075204][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 80.086888][ T5950] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 80.093418][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.109720][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.121090][ T787] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.134295][ T787] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 80.158403][ T5971] syz.1.60 (5971) used greatest stack depth: 20688 bytes left [ 80.184473][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.229571][ T787] usb 4-1: config 0 descriptor?? [ 80.386412][ T5761] ocfs2: Unmounting device (7,0) on (node local) [ 80.410872][ T5977] loop1: detected capacity change from 0 to 128 [ 80.498307][ T5977] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 80.531364][ T5977] FAT-fs (loop1): Filesystem has been set read-only [ 80.642573][ T5979] team_slave_0: entered promiscuous mode [ 80.648359][ T5979] team_slave_1: entered promiscuous mode [ 80.689640][ T787] a4tech 0003:09DA:000A.0002: unknown main item tag 0x3 [ 80.696889][ T5979] macsec1: entered promiscuous mode [ 80.702230][ T5979] team0: entered promiscuous mode [ 80.708813][ T787] a4tech 0003:09DA:000A.0002: unknown main item tag 0x5 [ 80.724901][ T787] a4tech 0003:09DA:000A.0002: unknown main item tag 0x0 [ 80.731915][ T787] a4tech 0003:09DA:000A.0002: unknown main item tag 0x0 [ 80.733990][ T5979] macsec1: entered allmulticast mode [ 80.748628][ T787] a4tech 0003:09DA:000A.0002: unknown main item tag 0x0 [ 80.764566][ T787] a4tech 0003:09DA:000A.0002: unknown main item tag 0x0 [ 80.775057][ T787] a4tech 0003:09DA:000A.0002: unknown main item tag 0x0 [ 80.777879][ T5979] team0: entered allmulticast mode [ 80.792705][ T787] a4tech 0003:09DA:000A.0002: unknown main item tag 0x0 [ 80.804695][ T787] a4tech 0003:09DA:000A.0002: global environment stack underflow [ 80.814427][ T5979] team_slave_0: entered allmulticast mode [ 80.822753][ T787] a4tech 0003:09DA:000A.0002: item 0 0 1 11 parsing failed [ 80.830412][ T5979] team_slave_1: entered allmulticast mode [ 80.836514][ T787] a4tech 0003:09DA:000A.0002: parse failed [ 80.858985][ T787] a4tech: probe of 0003:09DA:000A.0002 failed with error -22 [ 80.867150][ T5979] team0: Device macsec1 is already an upper device of the team interface [ 80.890219][ T5979] team0: left allmulticast mode [ 80.913144][ T5979] team_slave_0: left allmulticast mode [ 80.918056][ T787] usb 4-1: USB disconnect, device number 2 [ 80.932797][ T5979] team_slave_1: left allmulticast mode [ 80.945673][ T5979] team0: left promiscuous mode [ 80.950950][ T5979] team_slave_0: left promiscuous mode [ 80.956482][ T5979] team_slave_1: left promiscuous mode [ 81.204079][ T5987] loop1: detected capacity change from 0 to 128 [ 81.223361][ T5976] loop2: detected capacity change from 0 to 32768 [ 81.227041][ T5987] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.282398][ T5988] pim6reg: entered allmulticast mode [ 81.293323][ T5976] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.302247][ T5994] pim6reg: left allmulticast mode [ 81.385679][ T5976] XFS (loop2): Ending clean mount [ 81.515103][ T5763] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.792631][ T6003] loop0: detected capacity change from 0 to 4096 [ 81.800421][ T9] cfg80211: failed to load regulatory.db [ 81.839329][ T6003] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 82.163728][ T28] audit: type=1800 audit(1772802727.094:3): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.63" name="file3" dev="loop0" ino=31 res=0 errno=0 [ 82.190430][ T6012] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.198569][ T6012] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.206545][ T6012] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.214498][ T6012] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.222391][ T6012] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.230322][ T6012] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.238242][ T6012] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.246209][ T6012] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.254119][ T6012] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.262041][ T6012] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 82.508662][ T6005] loop1: detected capacity change from 0 to 32768 [ 82.571723][ T6005] (syz.1.65,6005,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 82.624486][ T6005] (syz.1.65,6005,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 82.697771][ T6005] JBD2: Ignoring recovery information on journal [ 82.841499][ T6005] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 83.167160][ T5762] ocfs2: Unmounting device (7,1) on (node local) [ 83.566442][ T6028] loop2: detected capacity change from 0 to 40427 [ 83.589092][ T6041] pim6reg: entered allmulticast mode [ 83.615384][ T6028] F2FS-fs (loop2): invalid crc value [ 83.654030][ T6041] pim6reg: left allmulticast mode [ 83.668641][ T6028] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.749228][ T6031] loop3: detected capacity change from 0 to 32768 [ 83.794605][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.835799][ T6031] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 83.862806][ T6028] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 84.014841][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 84.040417][ T6031] XFS (loop3): Ending clean mount [ 84.046052][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.074099][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.108649][ T5763] syz-executor: attempt to access beyond end of device [ 84.108649][ T5763] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 84.124749][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.162447][ T5763] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 84.171186][ T9] usb 1-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 84.189295][ T5764] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.195897][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.234256][ T9] usb 1-1: config 0 descriptor?? [ 84.514905][ T967] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.697643][ T9] a4tech 0003:09DA:000A.0003: unknown main item tag 0x3 [ 84.715579][ T967] usb 2-1: Using ep0 maxpacket: 16 [ 84.719135][ T9] a4tech 0003:09DA:000A.0003: unknown main item tag 0x5 [ 84.736017][ T9] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 84.736847][ T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.743163][ T9] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 84.762830][ T9] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 84.771180][ T9] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 84.776990][ T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.779521][ T9] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 84.795848][ T9] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 84.802901][ T9] a4tech 0003:09DA:000A.0003: global environment stack underflow [ 84.803051][ T967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.811272][ T9] a4tech 0003:09DA:000A.0003: item 0 0 1 11 parsing failed [ 84.838804][ T9] a4tech 0003:09DA:000A.0003: parse failed [ 84.844885][ T9] a4tech: probe of 0003:09DA:000A.0003 failed with error -22 [ 84.845527][ T967] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.872502][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.884528][ T967] usb 2-1: config 0 descriptor?? [ 84.954696][ T9] usb 1-1: USB disconnect, device number 2 [ 85.088308][ T6073] team0: Device ipip0 is of different type [ 85.316477][ T967] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 85.358477][ T967] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 85.376288][ T967] microsoft 0003:045E:07DA.0004: no inputs found [ 85.386200][ T967] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 85.632103][ T6082] loop0: detected capacity change from 0 to 512 [ 85.657289][ T6082] EXT4-fs: Ignoring removed bh option [ 85.664674][ T9] usb 2-1: USB disconnect, device number 3 [ 85.703923][ T6082] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 85.743917][ T6082] EXT4-fs (loop0): 1 truncate cleaned up [ 85.756616][ T6082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.790911][ T6077] loop3: detected capacity change from 0 to 32768 [ 85.817915][ T6077] (syz.3.79,6077,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 85.842459][ T6077] (syz.3.79,6077,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 85.889942][ T6077] JBD2: Ignoring recovery information on journal [ 85.940828][ T6077] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 85.947701][ T5761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.261112][ T6090] loop0: detected capacity change from 0 to 4096 [ 86.342801][ T6090] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 86.358904][ T5764] ocfs2: Unmounting device (7,3) on (node local) [ 86.370463][ T28] audit: type=1326 audit(1772802731.284:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d579c799 code=0x7ffc0000 [ 86.441731][ T28] audit: type=1326 audit(1772802731.294:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d579c799 code=0x7ffc0000 [ 86.534492][ T28] audit: type=1326 audit(1772802731.304:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb4d579c799 code=0x7ffc0000 [ 86.634478][ T28] audit: type=1326 audit(1772802731.304:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb4d579c502 code=0x7ffc0000 [ 86.653921][ T6095] team0: Device ipip0 is of different type [ 86.724726][ T28] audit: type=1326 audit(1772802731.304:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb4d579c502 code=0x7ffc0000 [ 86.784509][ T28] audit: type=1326 audit(1772802731.304:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d579c799 code=0x7ffc0000 [ 86.812849][ T6088] loop2: detected capacity change from 0 to 32768 [ 86.840339][ T6088] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.83 (6088) [ 86.864035][ T28] audit: type=1326 audit(1772802731.304:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d579c799 code=0x7ffc0000 [ 86.931433][ T6088] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.944843][ T28] audit: type=1326 audit(1772802731.304:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb4d579c799 code=0x7ffc0000 [ 86.984710][ T6088] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 86.993486][ T6088] BTRFS info (device loop2): setting nodatacow, compression disabled [ 87.014567][ T28] audit: type=1326 audit(1772802731.304:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d579c799 code=0x7ffc0000 [ 87.055292][ T6088] BTRFS info (device loop2): turning on flush-on-commit [ 87.062663][ T6088] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 87.099618][ T6088] BTRFS info (device loop2): use lzo compression, level 0 [ 87.108210][ T6088] BTRFS info (device loop2): setting nodatasum [ 87.115697][ T6088] BTRFS info (device loop2): use no compression [ 87.122044][ T6088] BTRFS info (device loop2): trying to use backup root at mount time [ 87.131282][ T6104] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.149289][ T6088] BTRFS info (device loop2): max_inline at 0 [ 87.169205][ T6088] BTRFS info (device loop2): using free space tree [ 87.243835][ T1083] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 87.259126][ T6088] BTRFS warning (device loop2): couldn't read tree root [ 87.269398][ T6088] BTRFS warning (device loop2): try to load backup roots slot 1 [ 87.279369][ T59] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 87.315931][ T6122] vim2m vim2m.0: vidioc_s_fmt queue busy [ 87.325840][ T6088] BTRFS warning (device loop2): couldn't read tree root [ 87.332832][ T6088] BTRFS warning (device loop2): try to load backup roots slot 2 [ 87.343819][ T42] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 87.361780][ T6088] BTRFS warning (device loop2): couldn't read tree root [ 87.369181][ T6088] BTRFS warning (device loop2): try to load backup roots slot 3 [ 87.487204][ T6088] BTRFS info (device loop2): enabling ssd optimizations [ 87.501213][ T6125] loop3: detected capacity change from 0 to 256 [ 87.503363][ T6088] BTRFS info (device loop2): auto enabling async discard [ 87.516931][ T6088] BTRFS info (device loop2): rebuilding free space tree [ 87.567838][ T6125] FAT-fs (loop3): Directory bread(block 64) failed [ 87.585835][ T6125] FAT-fs (loop3): Directory bread(block 65) failed [ 87.599845][ T6125] FAT-fs (loop3): Directory bread(block 66) failed [ 87.620719][ T6125] FAT-fs (loop3): Directory bread(block 67) failed [ 87.623365][ T6088] BTRFS info (device loop2): checking UUID tree [ 87.638745][ T6125] FAT-fs (loop3): Directory bread(block 68) failed [ 87.661541][ T6125] FAT-fs (loop3): Directory bread(block 69) failed [ 87.691074][ T6125] FAT-fs (loop3): Directory bread(block 70) failed [ 87.708243][ T6125] FAT-fs (loop3): Directory bread(block 71) failed [ 87.719116][ T6125] FAT-fs (loop3): Directory bread(block 72) failed [ 87.732435][ T6125] FAT-fs (loop3): Directory bread(block 73) failed [ 87.930859][ T5763] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.695619][ T6131] loop1: detected capacity change from 0 to 32768 [ 88.716291][ T6131] (syz.1.93,6131,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.776220][ T6131] (syz.1.93,6131,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.797574][ T6132] loop0: detected capacity change from 0 to 32768 [ 88.851309][ T6131] JBD2: Ignoring recovery information on journal [ 88.881029][ T6132] [ 88.881029][ T6132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.881029][ T6132] [ 89.022499][ T6131] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 89.041116][ T6132] jfs_create: dtInsert returned -EIO [ 89.063430][ T6132] ERROR: (device loop0): jfs_create: [ 89.063430][ T6132] [ 89.148700][ T5761] [ 89.148700][ T5761] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.148700][ T5761] [ 89.164697][ T5761] [ 89.164697][ T5761] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.164697][ T5761] [ 89.331338][ T6155] team0: Device ipip0 is of different type [ 89.384087][ T6147] loop3: detected capacity change from 0 to 32768 [ 89.443532][ T6147] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 89.458100][ T5762] ocfs2: Unmounting device (7,1) on (node local) [ 89.563079][ T6147] XFS (loop3): Ending clean mount [ 89.571831][ T6147] XFS (loop3): Quotacheck needed: Please wait. [ 89.653077][ T6147] XFS (loop3): Quotacheck: Done. [ 89.774866][ T5764] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 90.176037][ T6175] nftables ruleset with unbound set [ 90.178555][ T6177] loop2: detected capacity change from 0 to 1024 [ 90.308746][ T59] hfsplus: b-tree write err: -5, ino 25 [ 90.333190][ T59] hfsplus: b-tree write err: -5, ino 4 [ 90.341701][ T59] hfsplus: b-tree write err: -5, ino 2 [ 90.351141][ T59] hfsplus: b-tree write err: -5, ino 20 [ 90.722575][ T6168] loop1: detected capacity change from 0 to 32768 [ 90.749159][ T6168] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.101 (6168) [ 90.801528][ T6168] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.826633][ T6168] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 90.849345][ T6168] BTRFS info (device loop1): setting nodatacow, compression disabled [ 90.884559][ T6168] BTRFS info (device loop1): turning on flush-on-commit [ 90.891558][ T6168] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 90.930188][ T6168] BTRFS info (device loop1): use lzo compression, level 0 [ 90.956790][ T6168] BTRFS info (device loop1): setting nodatasum [ 90.971707][ T6168] BTRFS info (device loop1): use no compression [ 91.008756][ T6168] BTRFS info (device loop1): trying to use backup root at mount time [ 91.039265][ T6168] BTRFS info (device loop1): max_inline at 0 [ 91.062053][ T6168] BTRFS info (device loop1): using free space tree [ 91.159773][ T42] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 91.178442][ T6215] loop3: detected capacity change from 0 to 512 [ 91.191062][ T6215] EXT4-fs: Ignoring removed bh option [ 91.200349][ T6168] BTRFS warning (device loop1): couldn't read tree root [ 91.213934][ T6215] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 91.244735][ T6168] BTRFS warning (device loop1): try to load backup roots slot 1 [ 91.256234][ T11] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 91.280525][ T6168] BTRFS warning (device loop1): couldn't read tree root [ 91.299617][ T6168] BTRFS warning (device loop1): try to load backup roots slot 2 [ 91.326462][ T6215] EXT4-fs (loop3): 1 truncate cleaned up [ 91.349351][ T6215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.369636][ T6220] loop0: detected capacity change from 0 to 512 [ 91.370497][ T6223] netlink: 156 bytes leftover after parsing attributes in process `syz.2.120'. [ 91.389125][ T6223] tipc: Enabling of bearer rejected, failed to enable media [ 91.389375][ T59] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 91.441344][ T6220] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 91.464886][ T6168] BTRFS warning (device loop1): couldn't read tree root [ 91.472022][ T6168] BTRFS warning (device loop1): try to load backup roots slot 3 [ 91.576612][ T6168] BTRFS info (device loop1): enabling ssd optimizations [ 91.593914][ T6168] BTRFS info (device loop1): auto enabling async discard [ 91.618985][ T6168] BTRFS info (device loop1): rebuilding free space tree [ 91.660785][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.706431][ T6168] BTRFS info (device loop1): checking UUID tree [ 91.947136][ T5762] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.083629][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 92.341572][ T6247] loop1: detected capacity change from 0 to 16 [ 92.356218][ T6247] erofs: (device loop1): mounted with root inode @ nid 36. [ 92.424724][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 92.424739][ T28] audit: type=1800 audit(1772802737.354:14): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.126" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 92.487998][ T28] audit: type=1800 audit(1772802737.354:15): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.126" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 92.801526][ T6265] vivid-000: disconnect [ 92.814339][ T6260] vivid-000: reconnect [ 92.834197][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 93.443210][ T6287] binder: 6286:6287 ioctl c0306201 0 returned -14 [ 93.452287][ T6287] binder: 6286:6287 ioctl c00c6211 0 returned -14 [ 93.528739][ T6270] loop3: detected capacity change from 0 to 32768 [ 93.560562][ T6270] (syz.3.140,6270,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 93.593458][ T6270] (syz.3.140,6270,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 93.598828][ T6291] loop1: detected capacity change from 0 to 1024 [ 93.657650][ T6270] JBD2: Ignoring recovery information on journal [ 93.730339][ T6291] hfsplus: bad catalog entry type [ 93.748926][ T6270] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 93.883939][ T1083] hfsplus: b-tree write err: -5, ino 25 [ 93.884146][ T1083] hfsplus: b-tree write err: -5, ino 4 [ 93.884222][ T1083] hfsplus: b-tree write err: -5, ino 2 [ 94.139811][ T5764] ocfs2: Unmounting device (7,3) on (node local) [ 94.533125][ T6316] sp0: Synchronizing with TNC [ 94.554893][ T5803] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.587181][ T6319] capability: warning: `syz.2.163' uses deprecated v2 capabilities in a way that may be insecure [ 94.754909][ T5803] usb 1-1: Using ep0 maxpacket: 16 [ 94.768181][ T5803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.790218][ T5803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.810590][ T5803] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.821955][ T6323] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 94.864869][ T5803] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.884824][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.915260][ T5803] usb 1-1: config 0 descriptor?? [ 95.150495][ T6321] loop2: detected capacity change from 0 to 32768 [ 95.183647][ T6321] (syz.2.164,6321,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.201787][ T6321] (syz.2.164,6321,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.225604][ T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.243808][ T6321] JBD2: Ignoring recovery information on journal [ 95.319298][ T6321] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 95.342393][ T5803] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 95.372167][ T5803] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 95.408782][ T5803] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 95.428726][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 95.436869][ T5803] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 95.444235][ T5803] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 95.449227][ T787] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 95.471183][ T787] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 95.479876][ T787] usb 2-1: Product: syz [ 95.487268][ T787] usb 2-1: Manufacturer: syz [ 95.492061][ T787] usb 2-1: SerialNumber: syz [ 95.499391][ T5803] microsoft 0003:045E:07DA.0005: unbalanced collection at end of report description [ 95.522065][ T787] usb 2-1: config 0 descriptor?? [ 95.542764][ T787] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 95.546699][ T5803] microsoft 0003:045E:07DA.0005: parse failed [ 95.570300][ T5803] microsoft: probe of 0003:045E:07DA.0005 failed with error -22 [ 95.599212][ T5803] usb 1-1: USB disconnect, device number 3 [ 95.635563][ T5763] ocfs2: Unmounting device (7,2) on (node local) [ 96.147680][ T787] gspca_zc3xx: reg_w_i err -71 [ 96.152565][ T787] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 96.167937][ T787] usb 2-1: USB disconnect, device number 4 [ 96.255917][ T6354] loop2: detected capacity change from 0 to 64 [ 96.310256][ T6354] Trying to free block not in datazone [ 96.396394][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.606256][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 96.632987][ T9] usb 4-1: config 0 has no interface number 0 [ 96.645121][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.674663][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.694417][ T9] usb 4-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.714532][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 96.762939][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.791740][ T9] usb 4-1: config 0 descriptor?? [ 97.038740][ T6358] loop0: detected capacity change from 0 to 32768 [ 97.063105][ T6358] (syz.0.181,6358,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 97.085200][ T6358] (syz.0.181,6358,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 97.158375][ T6358] JBD2: Ignoring recovery information on journal [ 97.229175][ T6358] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 97.269668][ T9] uclogic 0003:28BD:0042.0006: interface is invalid, ignoring [ 97.477539][ T967] usb 4-1: USB disconnect, device number 3 [ 97.541844][ T5761] ocfs2: Unmounting device (7,0) on (node local) [ 97.698087][ T6373] loop2: detected capacity change from 0 to 32768 [ 97.803646][ T6373] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 97.888869][ T6373] XFS (loop2): Ending clean mount [ 98.152385][ T5763] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 98.315476][ T6407] loop1: detected capacity change from 0 to 1024 [ 98.506392][ T6410] loop0: detected capacity change from 0 to 4096 [ 98.524028][ T1083] hfsplus: b-tree write err: -5, ino 25 [ 98.534252][ T1083] hfsplus: b-tree write err: -5, ino 4 [ 98.550711][ T1083] hfsplus: b-tree write err: -5, ino 2 [ 98.619124][ T6413] loop2: detected capacity change from 0 to 64 [ 98.680917][ T6415] loop3: detected capacity change from 0 to 128 [ 98.690339][ T6417] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.701375][ T6413] overlayfs: upper fs needs to support d_type. [ 98.746242][ T6413] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 98.763983][ T6413] overlayfs: failed to set xattr on upper [ 98.778648][ T6413] overlayfs: ...falling back to redirect_dir=nofollow. [ 98.791875][ T6413] overlayfs: ...falling back to index=off. [ 98.799410][ T6415] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.824419][ T28] audit: type=1800 audit(1772802743.754:16): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.202" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 98.836142][ T6415] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.894531][ T6413] overlayfs: ...falling back to uuid=null. [ 98.948601][ T5764] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.015034][ T5763] Trying to free block not in datazone [ 99.280876][ T6434] bridge0: entered promiscuous mode [ 99.415930][ T6439] overlayfs: missing 'workdir' [ 99.444787][ T967] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.601108][ T6443] loop0: detected capacity change from 0 to 4096 [ 99.636732][ T6443] ======================================================= [ 99.636732][ T6443] WARNING: The mand mount option has been deprecated and [ 99.636732][ T6443] and is ignored by this kernel. Remove the mand [ 99.636732][ T6443] option from the mount to silence this warning. [ 99.636732][ T6443] ======================================================= [ 99.654518][ T967] usb 2-1: Using ep0 maxpacket: 32 [ 99.688554][ T6449] loop2: detected capacity change from 0 to 1024 [ 99.699330][ T6443] ntfs3: Bad value for 'gid' [ 99.705030][ T967] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 99.717035][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.739044][ T967] usb 2-1: config 0 descriptor?? [ 99.764820][ T967] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 100.223017][ T6463] netlink: 'syz.0.225': attribute type 2 has an invalid length. [ 100.369155][ T967] gspca_vc032x: reg_w err -71 [ 100.394278][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.415223][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.420585][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.454252][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.471338][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.484922][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.500531][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.516470][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.532036][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.542160][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.560248][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.581893][ T6459] loop2: detected capacity change from 0 to 32768 [ 100.582498][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.607606][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.622738][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.626788][ T6459] (syz.2.224,6459,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.630165][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.647009][ T6467] loop0: detected capacity change from 0 to 4096 [ 100.666668][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.680525][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.686026][ T6459] (syz.2.224,6459,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.687908][ T967] gspca_vc032x: I2c Bus Busy Wait 00 [ 100.711389][ T967] gspca_vc032x: Unknown sensor... [ 100.731812][ T967] vc032x: probe of 2-1:0.0 failed with error -22 [ 100.766289][ T6459] JBD2: Ignoring recovery information on journal [ 100.790702][ T967] usb 2-1: USB disconnect, device number 5 [ 100.931415][ T6459] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 100.986451][ T6477] mmap: syz.3.230 (6477): VmData 54235136 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 101.313668][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 101.456695][ T5763] ocfs2: Unmounting device (7,2) on (node local) [ 101.552543][ T6493] loop3: detected capacity change from 0 to 4096 [ 101.654734][ T6496] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.672564][ T6498] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.694996][ T5807] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.827380][ T6500] loop1: detected capacity change from 0 to 128 [ 101.884484][ T5807] usb 1-1: Using ep0 maxpacket: 32 [ 101.906433][ T5807] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 101.925264][ T5807] usb 1-1: config 0 has no interface number 0 [ 101.944491][ T5807] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.975582][ T5807] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.986524][ T5807] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 101.996392][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.021266][ T5807] usb 1-1: config 0 descriptor?? [ 102.292445][ T6509] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 102.387563][ T6509] Zero length message leads to an empty skb [ 102.582524][ T6506] loop3: detected capacity change from 0 to 65536 [ 102.636492][ T6506] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 102.711848][ T6525] loop2: detected capacity change from 0 to 1024 [ 102.723159][ T6506] XFS (loop3): Internal error !xlog_verify_bno(log, 0, nbblks) at line 81 of file fs/xfs/xfs_log_recover.c. Caller xlog_alloc_buffer+0x118/0x200 [ 102.738169][ T6506] CPU: 0 PID: 6506 Comm: syz.3.242 Not tainted syzkaller #0 [ 102.745480][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.755576][ T6506] Call Trace: [ 102.758893][ T6506] [ 102.761842][ T6506] dump_stack_lvl+0x18c/0x250 [ 102.766566][ T6506] ? show_regs_print_info+0x20/0x20 [ 102.771820][ T6506] ? __phys_addr+0xba/0x170 [ 102.776363][ T6506] ? __kasan_kmalloc_large+0x8b/0xa0 [ 102.781675][ T6506] xfs_corruption_error+0x122/0x170 [ 102.786880][ T6506] ? xlog_alloc_buffer+0x118/0x200 [ 102.791998][ T6506] xlog_alloc_buffer+0x159/0x200 [ 102.796936][ T6506] ? xlog_alloc_buffer+0x118/0x200 [ 102.802043][ T6506] xlog_do_recovery_pass+0x1de/0xdb0 [ 102.807336][ T6506] ? lock_chain_count+0x20/0x20 [ 102.812268][ T6506] ? xlog_do_io+0x360/0x360 [ 102.816870][ T6506] ? xlog_verify_head+0xea/0x430 [ 102.822148][ T6506] ? __kmem_cache_free+0xba/0x1e0 [ 102.827176][ T6506] xlog_verify_head+0x137/0x430 [ 102.832041][ T6506] xlog_find_tail+0x6c4/0xa00 [ 102.836723][ T6506] xlog_recover+0x4c/0x440 [ 102.841141][ T6506] xfs_log_mount+0x2c2/0x470 [ 102.845733][ T6506] xfs_mountfs+0xc58/0x1d40 [ 102.850238][ T6506] ? lockdep_softirqs_off+0x430/0x430 [ 102.855618][ T6506] ? xfs_default_resblks+0x70/0x70 [ 102.860732][ T6506] ? init_timer_key+0x161/0x2a0 [ 102.865605][ T6506] ? rcu_is_watching+0x15/0xb0 [ 102.870380][ T6506] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 102.876628][ T6506] xfs_fs_fill_super+0x112f/0x13a0 [ 102.881750][ T6506] get_tree_bdev+0x3f3/0x520 [ 102.886337][ T6506] ? vfs_parse_fs_string+0x170/0x170 [ 102.891624][ T6506] ? xfs_mount_set_dax_mode+0x100/0x100 [ 102.897162][ T6506] ? setup_bdev_super+0x660/0x660 [ 102.902178][ T6506] ? apparmor_capable+0x137/0x1a0 [ 102.907209][ T6506] ? bpf_lsm_capable+0x9/0x10 [ 102.911887][ T6506] ? security_capable+0x89/0xb0 [ 102.916745][ T6506] vfs_get_tree+0x8c/0x280 [ 102.921169][ T6506] do_new_mount+0x24b/0xa40 [ 102.925680][ T6506] __se_sys_mount+0x2e7/0x3d0 [ 102.930365][ T6506] ? __x64_sys_mount+0xc0/0xc0 [ 102.935127][ T6506] ? lockdep_hardirqs_on+0x98/0x150 [ 102.940319][ T6506] ? __x64_sys_mount+0x20/0xc0 [ 102.945099][ T6506] do_syscall_64+0x55/0xa0 [ 102.949534][ T6506] ? clear_bhb_loop+0x40/0x90 [ 102.954214][ T6506] ? clear_bhb_loop+0x40/0x90 [ 102.958897][ T6506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.964794][ T6506] RIP: 0033:0x7f342c59da0a [ 102.969215][ T6506] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.988989][ T6506] RSP: 002b:00007f342d532e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.997396][ T6506] RAX: ffffffffffffffda RBX: 00007f342d532ee0 RCX: 00007f342c59da0a [ 103.005368][ T6506] RDX: 0000200000000800 RSI: 0000200000000000 RDI: 00007f342d532ea0 [ 103.013330][ T6506] RBP: 0000200000000800 R08: 00007f342d532ee0 R09: 0000000003000010 [ 103.021292][ T6506] R10: 0000000003000010 R11: 0000000000000246 R12: 0000200000000000 [ 103.029254][ T6506] R13: 00007f342d532ea0 R14: 000000000000b9aa R15: 0000200000000040 [ 103.037229][ T6506] [ 103.043974][ T6506] XFS (loop3): Corruption detected. Unmount and run xfs_repair [ 103.051599][ T6506] XFS (loop3): Invalid block length (0x20040) for buffer [ 103.061432][ T6506] XFS (loop3): failed to locate log tail [ 103.067138][ T6506] XFS (loop3): log mount/recovery failed: error -12 [ 103.080513][ T9] usb 1-1: USB disconnect, device number 4 [ 103.092749][ T6506] XFS (loop3): log mount failed [ 103.323879][ T6527] loop1: detected capacity change from 0 to 8192 [ 103.331893][ T59] hfsplus: b-tree write err: -5, ino 25 [ 103.353654][ T59] hfsplus: b-tree write err: -5, ino 4 [ 103.367110][ T59] hfsplus: b-tree write err: -5, ino 2 [ 103.390849][ T59] hfsplus: b-tree write err: -5, ino 26 [ 103.393712][ T6527] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 103.502259][ T6527] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 103.544741][ T6527] REISERFS (device loop1): using ordered data mode [ 103.551300][ T6527] reiserfs: using flush barriers [ 103.622596][ T6527] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.691222][ T6527] REISERFS (device loop1): checking transaction log (loop1) [ 103.716124][ T6527] REISERFS (device loop1): Using r5 hash to sort names [ 103.737078][ T6527] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 104.168182][ T6543] netlink: 'syz.1.252': attribute type 8 has an invalid length. [ 104.228411][ T6530] loop3: detected capacity change from 0 to 32768 [ 104.264535][ T6530] (syz.3.248,6530,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.278057][ T6545] loop2: detected capacity change from 0 to 4096 [ 104.309418][ T6545] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.316979][ T6530] (syz.3.248,6530,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.361786][ T6545] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 104.395834][ T6545] System zones: 0-5 [ 104.427094][ T6545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.502031][ T6530] JBD2: Ignoring recovery information on journal [ 104.546808][ T6530] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 104.608883][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.042613][ T5764] ocfs2: Unmounting device (7,3) on (node local) [ 105.612263][ T6583] netlink: 'syz.3.271': attribute type 1 has an invalid length. [ 105.696198][ T6585] loop2: detected capacity change from 0 to 8 [ 105.817654][ T6571] loop0: detected capacity change from 0 to 32768 [ 105.852898][ T6585] SQUASHFS error: zlib decompression failed, data probably corrupt [ 105.874449][ T6585] SQUASHFS error: Failed to read block 0x185: -5 [ 105.880828][ T6585] SQUASHFS error: Unable to read metadata cache entry [183] [ 106.571607][ T6610] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 106.704060][ T6616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.286'. [ 107.195868][ T6629] loop1: detected capacity change from 0 to 8192 [ 107.223826][ T6629] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 107.271496][ T6629] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 107.306478][ T6640] loop0: detected capacity change from 0 to 1024 [ 107.314961][ T6629] REISERFS (device loop1): using ordered data mode [ 107.321504][ T6629] reiserfs: using flush barriers [ 107.329438][ T6629] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.346577][ T6629] REISERFS (device loop1): checking transaction log (loop1) [ 107.372414][ T6629] REISERFS (device loop1): Using r5 hash to sort names [ 107.405012][ T6629] reiserfs: enabling write barrier flush mode [ 107.454759][ T6629] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 107.524555][ T6629] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 107.559316][ T6629] REISERFS (device loop1): Remounting filesystem read-only [ 107.582242][ T6629] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 107.634579][ T6629] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 107.704708][ T6629] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 107.734492][ T6629] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 107.742987][ T6629] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 107.799933][ T6629] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 107.834505][ T6629] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 107.844229][ T6652] loop2: detected capacity change from 0 to 2048 [ 107.869566][ T6629] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 107.886611][ T6652] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.912714][ T6652] NILFS (loop2): mounting unchecked fs [ 107.951210][ T5755] udevd[5755]: incorrect nilfs2 checksum on /dev/loop2 [ 107.980039][ T6655] loop3: detected capacity change from 0 to 256 [ 107.985593][ T6652] NILFS (loop2): recovery complete [ 107.995651][ T6657] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.071497][ T5762] ------------[ cut here ]------------ [ 108.077804][ T5762] kernel BUG at fs/reiserfs/journal.c:1916! [ 108.103949][ T5762] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 108.110048][ T5762] CPU: 1 PID: 5762 Comm: syz-executor Not tainted syzkaller #0 [ 108.117601][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.127664][ T5762] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 108.133494][ T5762] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 dc b5 ff e9 f9 fc ff ff e8 8a ad 5d ff <0f> 0b e8 83 ad 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 108.153109][ T5762] RSP: 0018:ffffc900049ffb00 EFLAGS: 00010293 [ 108.159202][ T5762] RAX: ffffffff82296ed6 RBX: 1ffff9200093ff64 RCX: ffff888023dcda00 [ 108.167165][ T5762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.175123][ T5762] RBP: ffffc900049ffbf8 R08: ffffc900049ffb77 R09: 0000000000000000 [ 108.183081][ T5762] R10: ffffc900049ffb40 R11: fffff5200093ff6f R12: ffffc90003399000 [ 108.191055][ T5762] R13: dffffc0000000000 R14: ffff888059354630 R15: 0000000000000000 [ 108.199016][ T5762] FS: 000055555e0c6500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 108.208194][ T5762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.214766][ T5762] CR2: 0000555558bc4a28 CR3: 0000000061eab000 CR4: 00000000003506e0 [ 108.222730][ T5762] Call Trace: [ 108.225998][ T5762] [ 108.228954][ T5762] ? journal_release+0x30/0x30 [ 108.233722][ T5762] journal_release+0x1f/0x30 [ 108.238314][ T5762] reiserfs_put_super+0x26b/0x510 [ 108.243330][ T5762] ? hook_inode_free_security+0xb0/0xb0 [ 108.248864][ T5762] ? evict_inodes+0x63c/0x6a0 [ 108.253530][ T5762] ? reiserfs_dirty_inode+0x270/0x270 [ 108.258897][ T5762] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 108.264524][ T5762] ? reiserfs_dirty_inode+0x270/0x270 [ 108.269891][ T5762] generic_shutdown_super+0x134/0x2b0 [ 108.275249][ T5762] kill_block_super+0x44/0x90 [ 108.279912][ T5762] deactivate_locked_super+0x97/0x100 [ 108.285271][ T5762] cleanup_mnt+0x43b/0x4d0 [ 108.289677][ T5762] task_work_run+0x1d4/0x260 [ 108.294293][ T5762] ? task_work_cancel+0x220/0x220 [ 108.299323][ T5762] ? exit_to_user_mode_loop+0x3b/0x110 [ 108.304784][ T5762] exit_to_user_mode_loop+0xe6/0x110 [ 108.310083][ T5762] exit_to_user_mode_prepare+0xee/0x180 [ 108.315628][ T5762] syscall_exit_to_user_mode+0x1a/0x50 [ 108.321082][ T5762] do_syscall_64+0x61/0xa0 [ 108.325493][ T5762] ? clear_bhb_loop+0x40/0x90 [ 108.330162][ T5762] ? clear_bhb_loop+0x40/0x90 [ 108.334827][ T5762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.340799][ T5762] RIP: 0033:0x7fb4d579d9d7 [ 108.345204][ T5762] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 108.364805][ T5762] RSP: 002b:00007ffc4a79bb78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.373216][ T5762] RAX: 0000000000000000 RBX: 00007fb4d5831f90 RCX: 00007fb4d579d9d7 [ 108.381202][ T5762] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4a79bc30 [ 108.389162][ T5762] RBP: 00007ffc4a79bc30 R08: 00007ffc4a79cc30 R09: 00000000ffffffff [ 108.397121][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4a79ccc0 [ 108.405081][ T5762] R13: 00007fb4d5831f90 R14: 000000000001a5d4 R15: 00007ffc4a79cd00 [ 108.413068][ T5762] [ 108.416076][ T5762] Modules linked in: [ 108.442421][ T6655] FAT-fs (loop3): Directory bread(block 64) failed [ 108.449119][ T6655] FAT-fs (loop3): Directory bread(block 65) failed [ 108.456046][ T5762] ---[ end trace 0000000000000000 ]--- [ 108.466772][ T6655] FAT-fs (loop3): Directory bread(block 66) failed [ 108.475365][ T5762] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 108.479627][ T6655] FAT-fs (loop3): Directory bread(block 67) failed [ 108.489724][ T6655] FAT-fs (loop3): Directory bread(block 68) failed [ 108.491875][ T5762] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 dc b5 ff e9 f9 fc ff ff e8 8a ad 5d ff <0f> 0b e8 83 ad 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 108.499514][ T6655] FAT-fs (loop3): Directory bread(block 69) failed [ 108.517685][ T5762] RSP: 0018:ffffc900049ffb00 EFLAGS: 00010293 [ 108.529434][ T5762] RAX: ffffffff82296ed6 RBX: 1ffff9200093ff64 RCX: ffff888023dcda00 [ 108.529990][ T6655] FAT-fs (loop3): Directory bread(block 70) failed [ 108.542278][ T5762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.552506][ T5762] RBP: ffffc900049ffbf8 R08: ffffc900049ffb77 R09: 0000000000000000 [ 108.562144][ T5762] R10: ffffc900049ffb40 R11: fffff5200093ff6f R12: ffffc90003399000 [ 108.565626][ T6655] FAT-fs (loop3): Directory bread(block 71) failed [ 108.576687][ T5762] R13: dffffc0000000000 R14: ffff888059354630 R15: 0000000000000000 [ 108.582499][ T6655] FAT-fs (loop3): Directory bread(block 72) failed [ 108.591488][ T5762] FS: 000055555e0c6500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 108.591509][ T5762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.591521][ T5762] CR2: 00007fb7a59456b8 CR3: 0000000061eab000 CR4: 00000000003506f0 [ 108.591538][ T5762] Kernel panic - not syncing: Fatal exception [ 108.591858][ T5762] Kernel Offset: disabled