last executing test programs: 23.908103855s ago: executing program 1 (id=557): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x10, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6ff6bcf3f51b4b6513f07b3312abcba0"}]}}}}}}}, 0x0) 23.01620683s ago: executing program 1 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000a0a010800000000000000000a0000010900010073797a3100000000090002"], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) 22.800291777s ago: executing program 1 (id=575): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x5}, 0xa0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4) 22.613430352s ago: executing program 1 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) 22.453966836s ago: executing program 1 (id=580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x4b, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x3d, 0x66, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xf5b439e5fa041319, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "2b0a4c532395fc7786ead8d57a2231c4"}]}}, {';'}}}}}}, 0x0) 22.044039288s ago: executing program 1 (id=585): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noload}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x5b85, 0x75ea, 0x800004}) 21.731403807s ago: executing program 32 (id=585): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noload}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x5b85, 0x75ea, 0x800004}) 5.273950952s ago: executing program 3 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 5.188580104s ago: executing program 2 (id=663): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000000)='./file2\x00', 0x149) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)={0x0, 0xfb, 0x25, 0xa, 0xe, "096d09190066bd4ed2f4d6e79831f89a", "6b83288aa38d508b6c7d19e75f97a88c"}, 0x25, 0x2) 4.506129883s ago: executing program 0 (id=665): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8e, 0xfffa}, 0x1d, [0x5, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x4000022, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x20, 0x5, 0x7, 0xffffff01, 0xa6, 0x3, 0x1, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x104, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3c, 0x8f, 0x6, 0x10000008, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x4, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x1, 0x4, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x1, 0x8000, 0x400c, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x7, 0xe24, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x0, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x4002, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x444, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0x10000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0x7, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x80000002, 0x101, 0x10000, 0x3ff, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x10001, 0x8, 0x7ff, 0x2, 0x3, 0x4, 0x4, 0x0, 0xdd81, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.417703956s ago: executing program 3 (id=666): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x3, 0x1}, 0x10) 4.238164911s ago: executing program 2 (id=667): r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(r0, r0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 4.226928391s ago: executing program 0 (id=668): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 4.134894634s ago: executing program 3 (id=669): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0xc}, {0x3, 0x2}, {0xfff3, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x20008000) 3.941437679s ago: executing program 3 (id=670): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000180), 0x0, 0x0, 0x1) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) 3.523901081s ago: executing program 0 (id=679): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x14, 0x4, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 3.299959797s ago: executing program 0 (id=672): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 3.058323304s ago: executing program 2 (id=673): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000002240)=[{0x1, 0xc401, 0x4f, &(0x7f0000000440)="2fa4aaca555c80e980979899f7a2e96c76e007198cf35a3e86a08a361ab693d4b578c5ca80b3dcebae4a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286ddcf6b2cae2a5a1d1fe21d09d"}, {0x7fff, 0x1000, 0x0, 0x0}], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) 2.983727536s ago: executing program 0 (id=674): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f0000000100), 0x0, 0x559e, &(0x7f0000005680)="$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") 2.83624049s ago: executing program 4 (id=675): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.703652674s ago: executing program 3 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2.559033428s ago: executing program 4 (id=677): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x40c, &(0x7f0000000180)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 1.78117471s ago: executing program 4 (id=678): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1.294415944s ago: executing program 4 (id=680): r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 968.118983ms ago: executing program 4 (id=681): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000000000)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x83, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 724.22196ms ago: executing program 0 (id=682): r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(r0, r0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 724.12779ms ago: executing program 2 (id=683): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 517.424676ms ago: executing program 2 (id=684): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 502.730376ms ago: executing program 3 (id=685): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="03927c4d8e93edfd7f6393bb694608605c799d2077cf79b9cd45f8912f2c012841", 0x21}, {&(0x7f00000001c0)="143099acded7e369cf20c88b9f9787ea82e281a2811f7efb21f4a47cb2aa02906edb19314493a6d252d4cb65a71e5b4a252d6c9d77c393830ba383cb5f9b12ed6215050c84d9a648", 0x48}], 0x2}, 0x404a) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) 216.210014ms ago: executing program 2 (id=686): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x9}}, {@norecovery}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@inlinecrypt}, {@grpquota}, {@norecovery}]}, 0x3, 0x5a8, &(0x7f0000000a40)="$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") setxattr$security_ima(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000300)=ANY=[], 0x700, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') 0s ago: executing program 4 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x800}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x0) kernel console output (not intermixed with test programs): th: 249 > 9 [ 81.635266][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.642631][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.653589][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.662985][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.663044][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.670984][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.684822][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.686027][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.695647][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.702823][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.709059][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.720149][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.732922][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.732938][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.748935][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.757454][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.774025][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.781555][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.260492][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 82.348394][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 82.410866][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 82.491813][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.500240][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.508103][ T5771] bridge_slave_0: entered allmulticast mode [ 82.515606][ T5771] bridge_slave_0: entered promiscuous mode [ 82.563029][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.570376][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.577776][ T5771] bridge_slave_1: entered allmulticast mode [ 82.587047][ T5771] bridge_slave_1: entered promiscuous mode [ 82.594619][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 82.614078][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.621704][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.629218][ T5775] bridge_slave_0: entered allmulticast mode [ 82.636855][ T5775] bridge_slave_0: entered promiscuous mode [ 82.699353][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.707400][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.714844][ T5775] bridge_slave_1: entered allmulticast mode [ 82.722450][ T5775] bridge_slave_1: entered promiscuous mode [ 82.731813][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.745819][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.852159][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.865257][ T5771] team0: Port device team_slave_0 added [ 82.883499][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.890772][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.898459][ T5770] bridge_slave_0: entered allmulticast mode [ 82.905995][ T5770] bridge_slave_0: entered promiscuous mode [ 82.917329][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.931479][ T5771] team0: Port device team_slave_1 added [ 82.950995][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.958505][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.966020][ T5770] bridge_slave_1: entered allmulticast mode [ 82.973734][ T5770] bridge_slave_1: entered promiscuous mode [ 83.012106][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.019800][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.027133][ T5774] bridge_slave_0: entered allmulticast mode [ 83.034926][ T5774] bridge_slave_0: entered promiscuous mode [ 83.065074][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.072205][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.099687][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.116760][ T5775] team0: Port device team_slave_0 added [ 83.123046][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.132654][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.140236][ T5774] bridge_slave_1: entered allmulticast mode [ 83.147876][ T5774] bridge_slave_1: entered promiscuous mode [ 83.169351][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.179133][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.186198][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.212858][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.234149][ T5775] team0: Port device team_slave_1 added [ 83.270509][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.315362][ T5770] team0: Port device team_slave_0 added [ 83.337450][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.344743][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.370834][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.387937][ T5770] team0: Port device team_slave_1 added [ 83.397876][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.414578][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.421600][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.448273][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.490488][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.530279][ T5771] hsr_slave_0: entered promiscuous mode [ 83.537402][ T5771] hsr_slave_1: entered promiscuous mode [ 83.571915][ T5774] team0: Port device team_slave_0 added [ 83.580735][ T5774] team0: Port device team_slave_1 added [ 83.588198][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.595817][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.622527][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.635337][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.642414][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.668482][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.735748][ T5775] hsr_slave_0: entered promiscuous mode [ 83.742502][ T5775] hsr_slave_1: entered promiscuous mode [ 83.749711][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.758327][ T5775] Cannot create hsr debugfs directory [ 83.800899][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.808350][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.808960][ T51] Bluetooth: hci3: command tx timeout [ 83.841296][ T51] Bluetooth: hci0: command tx timeout [ 83.846378][ T5773] Bluetooth: hci1: command tx timeout [ 83.848659][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.853002][ T5779] Bluetooth: hci2: command tx timeout [ 83.869272][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.876589][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.903000][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.989690][ T5770] hsr_slave_0: entered promiscuous mode [ 83.996762][ T5770] hsr_slave_1: entered promiscuous mode [ 84.003276][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.011105][ T5770] Cannot create hsr debugfs directory [ 84.144228][ T5774] hsr_slave_0: entered promiscuous mode [ 84.150728][ T5774] hsr_slave_1: entered promiscuous mode [ 84.157625][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.165314][ T5774] Cannot create hsr debugfs directory [ 84.485607][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.506393][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.519460][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.531899][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.616897][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.629967][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.641496][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.668131][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.757096][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.772599][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.784409][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.797399][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.871550][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.882789][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.908632][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.921289][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.950285][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.022445][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.046802][ T4092] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.054283][ T4092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.091881][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.099586][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.210937][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.258094][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.276911][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.310274][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.325836][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.333047][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.351513][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.400491][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.407785][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.435215][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.442437][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.488964][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.496728][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.519179][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.541986][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.549278][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.635260][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.642502][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.819500][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.884378][ T5779] Bluetooth: hci2: command tx timeout [ 85.885193][ T5783] Bluetooth: hci1: command tx timeout [ 85.889918][ T5773] Bluetooth: hci0: command tx timeout [ 85.900517][ T5783] Bluetooth: hci3: command tx timeout [ 85.956718][ T5771] veth0_vlan: entered promiscuous mode [ 85.994622][ T5771] veth1_vlan: entered promiscuous mode [ 86.077186][ T5771] veth0_macvtap: entered promiscuous mode [ 86.106197][ T5771] veth1_macvtap: entered promiscuous mode [ 86.172592][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.240209][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.270408][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.285996][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.299055][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.308422][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.393247][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.437740][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.464267][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.609107][ T4092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.627982][ T4092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.640732][ T5774] veth0_vlan: entered promiscuous mode [ 86.679003][ T5770] veth0_vlan: entered promiscuous mode [ 86.688423][ T5775] veth0_vlan: entered promiscuous mode [ 86.722440][ T4092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.731592][ T4092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.740150][ T5774] veth1_vlan: entered promiscuous mode [ 86.769942][ T5775] veth1_vlan: entered promiscuous mode [ 86.787193][ T5770] veth1_vlan: entered promiscuous mode [ 86.879431][ T5775] veth0_macvtap: entered promiscuous mode [ 86.910106][ T5774] veth0_macvtap: entered promiscuous mode [ 86.920514][ T5770] veth0_macvtap: entered promiscuous mode [ 86.945428][ T5775] veth1_macvtap: entered promiscuous mode [ 86.977731][ T5770] veth1_macvtap: entered promiscuous mode [ 87.005192][ T5774] veth1_macvtap: entered promiscuous mode [ 87.020636][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.036607][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.051788][ T5834] syz.0.1[5834]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.060724][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.091733][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.106357][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.118359][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.149489][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.161168][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.172795][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.184854][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.197282][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.209358][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.226456][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.237995][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.251526][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.277382][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.292309][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.306436][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.317449][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.332302][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.344905][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.358536][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.376141][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.387757][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.398221][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.418574][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.439120][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.463093][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.477408][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.489841][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.502163][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.513137][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.524316][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.536434][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.563279][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.586211][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.600160][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.609708][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.644354][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.653177][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.670764][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.680730][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.855141][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.863140][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.964330][ T5783] Bluetooth: hci2: command tx timeout [ 87.969935][ T5783] Bluetooth: hci0: command tx timeout [ 87.975863][ T51] Bluetooth: hci1: command tx timeout [ 87.976006][ T5779] Bluetooth: hci3: command tx timeout [ 88.142356][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.152599][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.276071][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.295756][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.307750][ T4092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.330286][ T4092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.396561][ T5834] loop0: detected capacity change from 0 to 32768 [ 88.437109][ T5834] XFS (loop0): Invalid device [./bus], error=-15 [ 88.536491][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.561613][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.598802][ T4092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.644908][ T4092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.984273][ T5847] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4'. [ 89.000402][ T5843] loop2: detected capacity change from 0 to 1024 [ 89.009174][ T5845] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 89.096847][ T5843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.457061][ T5849] loop0: detected capacity change from 0 to 8192 [ 89.530923][ T5849] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 89.547997][ T5849] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 89.558563][ T5849] REISERFS (device loop0): using ordered data mode [ 89.565934][ T5849] reiserfs: using flush barriers [ 89.576509][ T5849] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.595452][ T5849] REISERFS (device loop0): checking transaction log (loop0) [ 89.619756][ T5857] pim6reg: entered allmulticast mode [ 89.716913][ T5857] pim6reg: left allmulticast mode [ 89.815869][ T5849] REISERFS (device loop0): Using tea hash to sort names [ 89.855360][ T5849] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 89.881965][ T5861] loop2: detected capacity change from 0 to 2048 [ 89.984372][ T5861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.047920][ T5779] Bluetooth: hci0: command tx timeout [ 90.049962][ T5773] Bluetooth: hci1: command tx timeout [ 90.053443][ T5783] Bluetooth: hci2: command tx timeout [ 90.053488][ T5783] Bluetooth: hci3: command tx timeout [ 90.135544][ T5861] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 90.190241][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.190572][ T5849] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 90.248150][ T5849] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 91.106970][ T5813] kernel write not supported for file /vcs (pid: 5813 comm: kworker/1:3) [ 91.221884][ T5898] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.361097][ T5904] loop2: detected capacity change from 0 to 128 [ 91.396522][ T5904] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.414551][ T5904] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.472231][ T5904] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 18: comm syz.2.27: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 91.494399][ T5904] EXT4-fs (loop2): Remounting filesystem read-only [ 91.541976][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.648284][ T5837] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.872316][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 91.889605][ T5837] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 91.914092][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.944521][ T5837] usb 2-1: config 0 descriptor?? [ 92.193750][ T5837] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 92.217999][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.245904][ T5837] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 92.264043][ T5837] usb 2-1: media controller created [ 92.291637][ T5909] loop3: detected capacity change from 0 to 32768 [ 92.302074][ T8] cfg80211: failed to load regulatory.db [ 92.336986][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.365453][ T5909] (syz.3.29,5909,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.405842][ T5909] (syz.3.29,5909,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.456772][ T5837] az6027: usb out operation failed. (-71) [ 92.475031][ T5837] az6027: usb out operation failed. (-71) [ 92.487858][ T5837] stb0899_attach: Driver disabled by Kconfig [ 92.505678][ T5837] az6027: no front-end attached [ 92.505678][ T5837] [ 92.518308][ T5837] az6027: usb out operation failed. (-71) [ 92.533470][ T5837] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 92.544525][ T5837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 92.558269][ T5909] JBD2: Ignoring recovery information on journal [ 92.567419][ T5837] dvb-usb: schedule remote query interval to 400 msecs. [ 92.574606][ T5837] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 92.590263][ T5837] usb 2-1: USB disconnect, device number 2 [ 92.777553][ T5909] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 92.842119][ T5837] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 93.067974][ T5917] loop0: detected capacity change from 0 to 40427 [ 93.105733][ T5917] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 93.117742][ T5917] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 93.151324][ T5923] warning: `syz.2.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.152169][ T5917] F2FS-fs (loop0): invalid crc value [ 93.299513][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 93.421196][ T5928] netlink: 104 bytes leftover after parsing attributes in process `syz.2.36'. [ 93.524023][ T5917] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 93.531452][ T5917] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.852682][ T5771] syz-executor: attempt to access beyond end of device [ 93.852682][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.888454][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 94.378435][ T5813] kernel read not supported for file /dsp1 (pid: 5813 comm: kworker/1:3) [ 95.086630][ T5965] loop3: detected capacity change from 0 to 1024 [ 95.316352][ T5970] ALSA: mixer_oss: invalid OSS volume ':' [ 95.335213][ T5970] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 95.363934][ T5970] ALSA: mixer_oss: invalid OSS volume '5' [ 95.380206][ T5970] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 95.403031][ T5965] hfsplus: extend alloc file! (8192,512,16777719) [ 95.410829][ T5970] ALSA: mixer_oss: invalid OSS volume '6' [ 95.435673][ T5970] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 95.452382][ T5970] ALSA: mixer_oss: invalid OSS volume '7' [ 95.492715][ T5974] loop2: detected capacity change from 0 to 512 [ 95.514525][ T5974] ======================================================= [ 95.514525][ T5974] WARNING: The mand mount option has been deprecated and [ 95.514525][ T5974] and is ignored by this kernel. Remove the mand [ 95.514525][ T5974] option from the mount to silence this warning. [ 95.514525][ T5974] ======================================================= [ 95.563857][ T5974] EXT4-fs: Ignoring removed nobh option [ 95.594143][ T4092] hfsplus: b-tree write err: -5, ino 8 [ 95.878066][ T5974] EXT4-fs (loop2): Test dummy encryption mode enabled [ 95.931752][ T5974] EXT4-fs error (device loop2): __ext4_iget:5078: inode #11: block 1: comm syz.2.55: invalid block [ 95.969531][ T5974] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.55: couldn't read orphan inode 11 (err -117) [ 96.012425][ T5974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.019074][ T5989] loop0: detected capacity change from 0 to 4096 [ 96.232772][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.453449][ T5837] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.663399][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 96.680296][ T5837] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 96.704355][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.727096][ T5837] usb 2-1: Product: syz [ 96.731448][ T5837] usb 2-1: Manufacturer: syz [ 96.741773][ T5837] usb 2-1: SerialNumber: syz [ 96.780140][ T5837] usb 2-1: config 0 descriptor?? [ 96.801571][ T5837] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 96.814727][ T28] audit: type=1326 audit(1777569414.779:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.0.64" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe8099cdd9 code=0x0 [ 97.075896][ T6011] netlink: 64 bytes leftover after parsing attributes in process `syz.2.67'. [ 97.521580][ T6021] loop2: detected capacity change from 0 to 4096 [ 97.765583][ T6023] loop0: detected capacity change from 0 to 4096 [ 97.831007][ T5837] ssu100: probe of 2-1:0.0 failed with error -71 [ 97.881019][ T5837] usb 2-1: USB disconnect, device number 3 [ 97.930264][ T6023] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 98.183184][ T6029] loop2: detected capacity change from 0 to 2048 [ 98.272718][ T6032] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.603327][ C1] sched: RT throttling activated [ 99.812966][ T6038] loop2: detected capacity change from 0 to 131072 [ 99.846591][ T6038] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.905774][ T6038] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.010256][ T6038] F2FS-fs (loop2): recover xattr in inode (7), error(0) [ 100.017851][ T6038] F2FS-fs (loop2): set inode (7) has corrupted xattr [ 100.059113][ T6038] F2FS-fs (loop2): set inode (7) has corrupted xattr [ 100.068773][ T6034] loop0: detected capacity change from 0 to 40427 [ 100.125229][ T6034] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 100.160977][ T6034] F2FS-fs (loop0): invalid crc value [ 100.194601][ T6034] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.425484][ T6034] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.494140][ T4092] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.530997][ T6068] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 100.592589][ T6034] syz.0.77: attempt to access beyond end of device [ 100.592589][ T6034] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 100.697488][ T5771] syz-executor: attempt to access beyond end of device [ 100.697488][ T5771] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 100.733511][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.384893][ T6075] loop1: detected capacity change from 0 to 40427 [ 101.423948][ T6075] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 101.440876][ T6075] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 101.472184][ T6075] F2FS-fs (loop1): invalid crc value [ 101.739835][ T6075] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 101.753666][ T6075] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.435367][ T6085] loop2: detected capacity change from 0 to 32768 [ 102.475477][ T6085] (syz.2.88,6085,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.492823][ T6085] (syz.2.88,6085,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.525648][ T5773] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.568130][ T6085] JBD2: Ignoring recovery information on journal [ 102.726080][ T6085] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 102.974311][ T6107] loop1: detected capacity change from 0 to 512 [ 103.001427][ T6107] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.028088][ T6107] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.043917][ T28] audit: type=1800 audit(1777569420.999:3): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.88" name="file1" dev="loop2" ino=16979 res=0 errno=0 [ 103.075464][ T6085] syz.2.88 (6085) used greatest stack depth: 18768 bytes left [ 103.084404][ T6107] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.104: inode has both inline data and extents flags [ 103.115289][ T6107] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.104: couldn't read orphan inode 15 (err -117) [ 103.158910][ T6107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.229554][ T6107] EXT4-fs error (device loop1): ext4_read_inline_dir:1591: inode #12: block 7: comm syz.1.104: path /25/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 103.255697][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 103.321009][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.913472][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.100607][ T6129] loop2: detected capacity change from 0 to 256 [ 104.123474][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 104.134680][ T6129] exfat: Deprecated parameter 'utf8' [ 104.140205][ T6129] exfat: Deprecated parameter 'utf8' [ 104.152188][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.162263][ T8] usb 1-1: config 0 has no interface number 0 [ 104.180621][ T8] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 104.193776][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.202289][ T8] usb 1-1: Product: syz [ 104.206674][ T8] usb 1-1: Manufacturer: syz [ 104.212226][ T8] usb 1-1: SerialNumber: syz [ 104.220751][ T6129] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 104.249356][ T8] usb 1-1: config 0 descriptor?? [ 104.281885][ T8] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 104.394178][ T6131] Illegal XDP return value 4294967274 on prog (id 10) dev syz_tun, expect packet loss! [ 104.714970][ T27] IPVS: starting estimator thread 0... [ 104.803611][ T6140] IPVS: using max 17 ests per chain, 40800 per kthread [ 105.273125][ T6135] loop1: detected capacity change from 0 to 32768 [ 105.329886][ T8] gspca_spca1528: reg_w err -71 [ 105.337407][ T8] spca1528: probe of 1-1:0.1 failed with error -71 [ 105.410877][ T8] usb 1-1: USB disconnect, device number 2 [ 105.596663][ T6143] syz.1.116: attempt to access beyond end of device [ 105.596663][ T6143] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 105.653473][ T6143] metapage_write_end_io: I/O error [ 105.665822][ T113] blkno = 8ed2c, nblocks = 1 [ 105.670532][ T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 105.670532][ T113] [ 105.703251][ T6143] blkno = 8ed2c, nblocks = 1 [ 105.724884][ T6143] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 105.724884][ T6143] [ 105.754793][ T113] ERROR: (device loop1): remounting filesystem as read-only [ 105.772529][ T6143] ERROR: (device loop1): remounting filesystem as read-only [ 105.805434][ T6143] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt [ 105.805434][ T6143] [ 105.844893][ T6143] jfs_mkdir: dtSearch returned -5 [ 105.955011][ T6135] ERROR: (device loop1): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 105.955011][ T6135] [ 105.993010][ T6135] jfs_readdir: unexpected rc = -5 from dtReadNext [ 106.070275][ T6142] loop2: detected capacity change from 0 to 131072 [ 106.079275][ T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.086969][ T6142] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 106.093967][ T6142] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 106.105729][ T6142] F2FS-fs (loop2): invalid crc value [ 106.127135][ T6142] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.202983][ T5774] syz-executor: attempt to access beyond end of device [ 106.202983][ T5774] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 106.218732][ T5774] metapage_write_end_io: I/O error [ 106.224782][ T6142] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 106.231974][ T6142] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 106.245020][ T5774] JFS: metapage_get_blocks failed [ 106.250241][ T5774] JFS: metapage_get_blocks failed [ 106.273580][ T5774] JFS: metapage_get_blocks failed [ 106.278901][ T5774] JFS: metapage_get_blocks failed [ 106.306349][ T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.326104][ T787] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.340971][ T6148] loop0: detected capacity change from 0 to 4096 [ 106.342636][ T787] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.379078][ T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.391730][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.400875][ T787] usb 4-1: Product: syz [ 106.405887][ T787] usb 4-1: Manufacturer: syz [ 106.411217][ T787] usb 4-1: SerialNumber: syz [ 106.433534][ T6148] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 106.467667][ T787] cdc_ncm 4-1:1.0: skipping garbage [ 106.691749][ T28] audit: type=1800 audit(1777569424.639:4): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.120" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 107.511450][ T787] cdc_ncm 4-1:1.0: bind() failure [ 107.533677][ T787] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 107.552230][ T787] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 107.575932][ T787] usbtest: probe of 4-1:1.1 failed with error -71 [ 107.599481][ T787] usb 4-1: USB disconnect, device number 2 [ 108.002725][ T6156] loop0: detected capacity change from 0 to 40427 [ 108.045628][ T6156] F2FS-fs (loop0): invalid crc value [ 108.072638][ T6156] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.254161][ T6156] F2FS-fs (loop0): Start checkpoint disabled! [ 108.287588][ T6156] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 108.616283][ T6174] loop2: detected capacity change from 0 to 64 [ 108.948817][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 108.983462][ T6178] netlink: 4676 bytes leftover after parsing attributes in process `syz.3.133'. [ 109.053093][ T6168] loop1: detected capacity change from 0 to 32768 [ 109.123692][ T6168] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 109.272444][ T6168] (syz.1.128,6168,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 109.292596][ T6168] (syz.1.128,6168,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 109.402937][ T6184] syzkaller1: entered promiscuous mode [ 109.425769][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 109.432688][ T6184] syzkaller1: entered allmulticast mode [ 109.572309][ T6192] loop0: detected capacity change from 0 to 512 [ 109.666038][ T6192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.699896][ T6199] loop2: detected capacity change from 0 to 128 [ 109.752882][ T6199] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.772695][ T6192] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.826586][ T6199] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.006159][ T28] audit: type=1800 audit(1777569427.969:5): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.139" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 110.026553][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.059701][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.099789][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.173487][ T5837] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.385715][ T5837] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.410444][ T5837] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 110.450600][ T5837] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.475187][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.493461][ T5837] usb 4-1: Product: syz [ 110.503642][ T5837] usb 4-1: Manufacturer: syz [ 110.514016][ T5837] usb 4-1: SerialNumber: syz [ 110.535170][ T5837] cdc_mbim 4-1:1.0: skipping garbage [ 110.580142][ T6216] loop2: detected capacity change from 0 to 2048 [ 110.606699][ T6216] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 110.638796][ T6216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.759187][ T6218] loop1: detected capacity change from 0 to 4096 [ 110.767496][ T6204] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.781164][ T6218] EXT4-fs: inline encryption not supported [ 110.800631][ T6218] EXT4-fs: Ignoring removed bh option [ 110.860793][ T6218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.897810][ T6218] EXT4-fs (loop1): Test dummy encryption mode enabled [ 110.941111][ T6218] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 110.954086][ T6218] System zones: 0-5 [ 110.984803][ T6218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.034019][ T6208] loop0: detected capacity change from 0 to 32768 [ 111.158127][ T28] audit: type=1800 audit(1777569429.119:6): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.142" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 111.340742][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.420075][ T6204] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.432039][ T5837] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 111.451211][ T5837] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 111.481201][ T6224] loop1: detected capacity change from 0 to 256 [ 111.481586][ T5837] wwan wwan0: port wwan0mbim0 attached [ 111.552254][ T5837] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, c6:c4:60:a0:b2:46 [ 111.631205][ T6224] FAT-fs (loop1): Directory bread(block 64) failed [ 111.656138][ T6224] FAT-fs (loop1): Directory bread(block 65) failed [ 111.662988][ T6224] FAT-fs (loop1): Directory bread(block 66) failed [ 111.693793][ T6224] FAT-fs (loop1): Directory bread(block 67) failed [ 111.701061][ T6224] FAT-fs (loop1): Directory bread(block 68) failed [ 111.723537][ T6224] FAT-fs (loop1): Directory bread(block 69) failed [ 111.753609][ T6224] FAT-fs (loop1): Directory bread(block 70) failed [ 111.771085][ T5835] usb 4-1: USB disconnect, device number 3 [ 111.780319][ T5835] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 111.789720][ T6224] FAT-fs (loop1): Directory bread(block 71) failed [ 111.800314][ T6224] FAT-fs (loop1): Directory bread(block 72) failed [ 111.807941][ T6224] FAT-fs (loop1): Directory bread(block 73) failed [ 111.951332][ T5835] wwan wwan0: port wwan0mbim0 disconnected [ 112.303022][ T6236] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.384952][ T6236] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 112.902578][ T6253] loop0: detected capacity change from 0 to 164 [ 113.023066][ T6253] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 113.276570][ T6263] input: syz1 as /devices/virtual/input/input6 [ 113.359241][ T6267] loop0: detected capacity change from 0 to 512 [ 113.389450][ T6267] EXT4-fs (loop0): Test dummy encryption mode enabled [ 113.412803][ T6267] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.508079][ T6267] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.162: bad orphan inode 131083 [ 113.598796][ T6267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.986994][ T6267] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 114.260110][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.341924][ T6270] loop1: detected capacity change from 0 to 32768 [ 114.416364][ T6270] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.163 (6270) [ 114.549159][ T6270] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.590998][ T6270] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 114.627485][ T6270] BTRFS info (device loop1): setting nodatacow, compression disabled [ 114.638597][ T6270] BTRFS info (device loop1): turning on flush-on-commit [ 114.663243][ T6270] BTRFS info (device loop1): trying to use backup root at mount time [ 114.689351][ T6270] BTRFS info (device loop1): max_inline at 0 [ 114.725100][ T6270] BTRFS info (device loop1): using free space tree [ 114.822793][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 114.839415][ T6270] BTRFS error (device loop1): failed to load root extent [ 114.847131][ T6270] BTRFS warning (device loop1): try to load backup roots slot 1 [ 114.856478][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 114.897118][ T6270] BTRFS warning (device loop1): couldn't read tree root [ 114.905161][ T6270] BTRFS warning (device loop1): try to load backup roots slot 2 [ 114.919355][ T4092] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 114.931471][ T6270] BTRFS warning (device loop1): couldn't read tree root [ 114.939016][ T6270] BTRFS warning (device loop1): try to load backup roots slot 3 [ 114.968200][ T6270] BTRFS info (device loop1): enabling ssd optimizations [ 114.983197][ T6270] BTRFS info (device loop1): auto enabling async discard [ 115.005877][ T6270] BTRFS info (device loop1): rebuilding free space tree [ 115.077317][ T787] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.128472][ T6270] BTRFS info (device loop1): checking UUID tree [ 115.293542][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 115.304842][ T787] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 115.317737][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.344346][ T787] usb 1-1: config 0 descriptor?? [ 115.389089][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.550737][ T6329] loop2: detected capacity change from 0 to 512 [ 115.590377][ T787] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 115.611701][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.658077][ T787] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 115.663271][ T6329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.681414][ T6329] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.709296][ T787] usb 1-1: media controller created [ 115.745442][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.974806][ T787] DVB: Unable to find symbol dib7000p_attach() [ 115.995494][ T787] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 116.175645][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.205629][ T787] rc_core: IR keymap rc-dib0700-rc5 not found [ 116.211849][ T787] Registered IR keymap rc-empty [ 116.227482][ T787] dvb-usb: could not initialize remote control. [ 116.244689][ T787] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 116.277851][ T787] usb 1-1: USB disconnect, device number 3 [ 116.370382][ T787] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 116.394201][ T6345] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.178'. [ 116.459209][ T6347] loop3: detected capacity change from 0 to 256 [ 116.571558][ T6347] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 116.627237][ T6349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.181'. [ 117.129917][ T6361] loop3: detected capacity change from 0 to 4096 [ 117.139217][ T6360] loop1: detected capacity change from 0 to 1764 [ 117.184021][ T6361] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 117.284895][ T6361] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 117.447255][ T6365] loop0: detected capacity change from 0 to 2048 [ 117.476012][ T28] audit: type=1800 audit(1777569435.429:7): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.187" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 117.518281][ T6365] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.549332][ T6361] ntfs3: loop3: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 117.577304][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.039193][ T6379] raw_sendmsg: syz.0.195 forgot to set AF_INET. Fix it! [ 118.410845][ T6389] loop3: detected capacity change from 0 to 512 [ 118.437244][ T6389] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 118.464315][ T6389] EXT4-fs (loop3): 1 truncate cleaned up [ 118.474892][ T6389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.640222][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.741060][ T6395] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.765461][ T6395] netlink: 'syz.3.200': attribute type 12 has an invalid length. [ 118.773560][ T6395] netlink: 'syz.3.200': attribute type 29 has an invalid length. [ 118.781438][ T6395] netlink: 148 bytes leftover after parsing attributes in process `syz.3.200'. [ 119.306603][ T6405] loop3: detected capacity change from 0 to 4096 [ 119.553359][ T28] audit: type=1800 audit(1777569437.509:8): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.205" name="file1" dev="loop3" ino=0 res=0 errno=0 [ 119.817865][ T28] audit: type=1326 audit(1777569437.779:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.1.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26cb99cdd9 code=0x0 [ 119.940064][ T6403] loop0: detected capacity change from 0 to 40427 [ 119.956785][ T6403] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 119.964103][ T6403] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 119.994063][ T6403] F2FS-fs (loop0): invalid crc value [ 120.245772][ T6403] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 120.252976][ T6403] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.419488][ T28] audit: type=1800 audit(1777569438.379:10): pid=6403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.204" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 120.512491][ T5771] syz-executor: attempt to access beyond end of device [ 120.512491][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.542981][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 121.036700][ T6443] loop3: detected capacity change from 0 to 512 [ 121.043433][ T5835] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.107955][ T6443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.240112][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.281288][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.313697][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.337147][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.353486][ T5835] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.373734][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.394608][ T5835] usb 3-1: config 0 descriptor?? [ 121.590039][ T6449] loop3: detected capacity change from 0 to 4096 [ 121.645884][ T6449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.741029][ T6444] loop1: detected capacity change from 0 to 32768 [ 121.748128][ T6449] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.222: reserved inode found cleared - inode=1 [ 121.779483][ T6444] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.220 (6444) [ 121.873440][ T6449] ext4: Unknown parameter '@LqE: 艞t}0$' [ 121.874136][ T6444] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 121.899962][ T5835] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 121.958305][ T6444] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 121.987507][ T5835] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 122.001595][ T6444] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 122.022879][ T6444] BTRFS info (device loop1): use zstd compression, level 3 [ 122.034426][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.051308][ T5773] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 122.061358][ T5773] Bluetooth: hci1: Injecting HCI hardware error event [ 122.066143][ T6444] BTRFS info (device loop1): using free space tree [ 122.075201][ T5773] Bluetooth: hci1: hardware error 0x00 [ 122.258339][ T5835] usb 3-1: USB disconnect, device number 2 [ 122.315672][ T6447] loop0: detected capacity change from 0 to 32768 [ 122.360237][ T6453] fido_id[6453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 122.395423][ T6444] BTRFS info (device loop1): enabling ssd optimizations [ 122.436923][ T6444] BTRFS info (device loop1): auto enabling async discard [ 123.127547][ T6485] loop2: detected capacity change from 0 to 164 [ 123.275909][ T5774] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 124.120633][ T6478] loop0: detected capacity change from 0 to 32768 [ 124.230421][ T6499] loop2: detected capacity change from 0 to 2048 [ 124.283758][ T5773] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 124.313813][ T6499] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 124.394789][ T6499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.498840][ T28] audit: type=1800 audit(1777569442.459:11): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.234" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 125.007741][ T6505] loop2: detected capacity change from 0 to 1024 [ 125.100572][ T6505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.652125][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.896359][ T6523] loop2: detected capacity change from 0 to 4096 [ 125.970793][ T6523] ntfs: volume version 3.1. [ 126.420398][ T6521] loop0: detected capacity change from 0 to 40427 [ 126.454771][ T6521] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 126.462602][ T6521] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 126.509421][ T6521] F2FS-fs (loop0): invalid crc value [ 126.746618][ T6521] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 126.765585][ T6521] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.942838][ T6521] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 127.228932][ T6527] loop2: detected capacity change from 0 to 32768 [ 127.319156][ T6527] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 127.511908][ T6527] XFS (loop2): Ending clean mount [ 127.545758][ T6527] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 127.562568][ T6537] loop1: detected capacity change from 0 to 32768 [ 127.583572][ T6527] XFS (loop2): Unmount and run xfs_repair [ 127.589476][ T6527] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 127.654205][ T6527] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 127.663150][ T6527] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 127.679636][ T6537] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 127.698760][ T6527] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 127.759304][ T6527] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 127.768677][ T6537] XFS (loop1): Ending clean mount [ 127.820172][ T6527] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 127.842112][ T6547] loop0: detected capacity change from 0 to 32768 [ 127.850186][ T6527] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.871844][ T6537] XFS (loop1): Quotacheck needed: Please wait. [ 127.883688][ T6527] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 127.892838][ T6527] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.903043][ T6527] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 127.917845][ T6547] JBD2: Ignoring recovery information on journal [ 127.924333][ T6527] XFS (loop2): Failed to initialize disk quotas. [ 128.005619][ T6547] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 128.085801][ T6537] XFS (loop1): Quotacheck: Done. [ 128.099727][ T28] audit: type=1800 audit(1777569446.049:12): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.244" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 128.193670][ T28] audit: type=1800 audit(1777569446.109:13): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.244" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 128.367801][ T5775] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.409347][ T5774] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.420560][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 128.674080][ T6561] netlink: 'syz.3.252': attribute type 39 has an invalid length. [ 128.827804][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 128.872316][ T6563] bond_slave_0: entered promiscuous mode [ 128.878678][ T6563] bond_slave_1: entered promiscuous mode [ 128.892249][ T6563] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 129.159521][ T6569] loop2: detected capacity change from 0 to 256 [ 129.346469][ T6569] FAT-fs (loop2): Directory bread(block 64) failed [ 129.368415][ T6569] FAT-fs (loop2): Directory bread(block 65) failed [ 129.387572][ T6569] FAT-fs (loop2): Directory bread(block 66) failed [ 129.394314][ T6569] FAT-fs (loop2): Directory bread(block 67) failed [ 129.401110][ T6569] FAT-fs (loop2): Directory bread(block 68) failed [ 129.408378][ T6569] FAT-fs (loop2): Directory bread(block 69) failed [ 129.416299][ T6569] FAT-fs (loop2): Directory bread(block 70) failed [ 129.422879][ T6569] FAT-fs (loop2): Directory bread(block 71) failed [ 129.431123][ T6569] FAT-fs (loop2): Directory bread(block 72) failed [ 129.437893][ T6569] FAT-fs (loop2): Directory bread(block 73) failed [ 130.194421][ T5813] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.310325][ T6589] loop2: detected capacity change from 0 to 1764 [ 130.359577][ T6206] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.413676][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 130.430512][ T5813] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 130.467087][ T5813] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.489086][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.509910][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.531732][ T5813] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.564647][ T5813] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.599384][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.623430][ T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.813525][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 130.834033][ T787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.865651][ T787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.876365][ T5813] usb 4-1: usb_control_msg returned -32 [ 130.882042][ T5813] usbtmc 4-1:16.0: can't read capabilities [ 130.904532][ T787] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.922636][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.953462][ T787] usb 2-1: Product: syz [ 130.963440][ T787] usb 2-1: Manufacturer: syz [ 130.978447][ T787] usb 2-1: SerialNumber: syz [ 131.233776][ T787] usb 2-1: 0:2 : does not exist [ 131.251634][ T787] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 131.346702][ T787] usb 2-1: USB disconnect, device number 4 [ 131.412498][ T6205] udevd[6205]: setting owner of /dev/bus/usb/002/004 to uid=0, gid=0 failed: No such file or directory [ 131.501503][ T6206] udevd[6206]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.621951][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.632648][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.645872][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.655045][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.662585][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.674910][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.682570][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.690450][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.698339][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.709787][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.718093][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.726520][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.737884][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.747156][ T5837] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 131.773807][ T5837] hid-generic 00A0:0006:0003.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 131.884352][ T5816] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 132.095555][ T5816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.116485][ T5816] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.143412][ T5816] usb 1-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 132.153074][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.171743][ T5816] usb 1-1: Product: syz [ 132.179522][ T5816] usb 1-1: Manufacturer: syz [ 132.190798][ T5816] usb 1-1: SerialNumber: syz [ 132.208953][ T5816] usb 1-1: config 0 descriptor?? [ 132.461488][ T5816] usb 1-1: USB disconnect, device number 4 [ 132.515775][ T6621] loop2: detected capacity change from 0 to 256 [ 132.525261][ T6621] exfat: Deprecated parameter 'utf8' [ 132.558776][ T6621] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 132.946025][ T5816] usb 4-1: USB disconnect, device number 4 [ 133.082984][ T6626] loop3: detected capacity change from 0 to 512 [ 133.111112][ T6626] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.162146][ T6626] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.203870][ T6626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.249871][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.263606][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.271628][ T6626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.307646][ T6626] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.469528][ T28] audit: type=1800 audit(1777569451.429:14): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.277" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 133.494675][ T6631] loop0: detected capacity change from 0 to 8192 [ 133.542142][ T6631] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.555989][ T6631] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 133.568031][ T6631] REISERFS (device loop0): using ordered data mode [ 133.574748][ T6631] reiserfs: using flush barriers [ 133.600423][ T6631] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.617789][ T6631] REISERFS (device loop0): checking transaction log (loop0) [ 133.635961][ T6631] REISERFS (device loop0): Using r5 hash to sort names [ 133.643684][ T6631] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 133.659133][ T6631] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 133.771838][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.806203][ T6631] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 133.859497][ T6638] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 133.935805][ T6631] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 134.010282][ T6639] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 134.077756][ T6631] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 134.344038][ T6645] netlink: 7 bytes leftover after parsing attributes in process `syz.3.284'. [ 134.353040][ T6645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.284'. [ 134.362305][ T6645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.284'. [ 134.538904][ T6636] loop2: detected capacity change from 0 to 32768 [ 134.592729][ T6636] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.760934][ T6636] XFS (loop2): Ending clean mount [ 134.945757][ T6636] XFS (loop2): User initiated shutdown received. [ 134.983872][ T6636] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 135.035382][ T6636] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 135.206250][ T5775] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 135.567138][ T6665] 9pnet: p9_errstr2errno: server reported unknown error L҉ [ 135.824564][ T6671] loop0: detected capacity change from 0 to 764 [ 135.865885][ T6671] rock: directory entry would overflow storage [ 135.891655][ T6671] rock: sig=0x5245, size=8, remaining=5 [ 136.983452][ T6691] can0: slcan on ttyS3. [ 137.023620][ T6695] netlink: 'syz.2.296': attribute type 10 has an invalid length. [ 137.047103][ T6695] netlink: 55 bytes leftover after parsing attributes in process `syz.2.296'. [ 138.134730][ T6693] can0 (unregistered): slcan off ttyS3. [ 138.644144][ T6727] loop2: detected capacity change from 0 to 128 [ 139.039566][ T28] audit: type=1326 audit(1777569456.999:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.3.303" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa22079cdd9 code=0x0 [ 140.151020][ T6765] fuse: Bad value for 'fd' [ 140.275523][ T6767] capability: warning: `syz.2.314' uses deprecated v2 capabilities in a way that may be insecure [ 140.723395][ T5835] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 140.777613][ T6777] loop2: detected capacity change from 0 to 2048 [ 140.845202][ T6777] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 140.883899][ T6777] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 140.891646][ T6777] UDF-fs: Scanning with blocksize 512 failed [ 140.945900][ T6777] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.962382][ T5835] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.993845][ T5835] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.028802][ T5835] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.072519][ T5835] usb 4-1: config 0 interface 0 has no altsetting 0 [ 141.082619][ T5835] usb 4-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 141.115965][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.141039][ T5835] usb 4-1: config 0 descriptor?? [ 141.350519][ T6775] loop1: detected capacity change from 0 to 32768 [ 141.441279][ T28] audit: type=1800 audit(1777569459.399:16): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.318" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 141.638778][ T5835] sony 0003:054C:0374.0003: unknown main item tag 0x6 [ 141.662244][ T5835] sony 0003:054C:0374.0003: unknown main item tag 0x3 [ 141.673424][ T5835] sony 0003:054C:0374.0003: unknown main item tag 0xe [ 141.731284][ T5835] sony 0003:054C:0374.0003: hiddev0,hidraw0: USB HID v0.20 Device [HID 054c:0374] on usb-dummy_hcd.3-1/input0 [ 141.804192][ T5835] sony 0003:054C:0374.0003: failed to claim input [ 141.890257][ T5835] usb 4-1: USB disconnect, device number 5 [ 141.929634][ T6791] netlink: 'syz.2.324': attribute type 10 has an invalid length. [ 141.992171][ T6787] fido_id[6787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 142.056112][ T6791] team0: Port device dummy0 added [ 142.062775][ T6792] netlink: 'syz.2.324': attribute type 10 has an invalid length. [ 142.162712][ T6792] team0: Port device dummy0 removed [ 142.174274][ T6792] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 142.621293][ T6809] loop3: detected capacity change from 0 to 256 [ 142.687332][ T6809] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 142.824517][ T28] audit: type=1800 audit(1777569460.789:17): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.333" name="bus" dev="loop3" ino=1048602 res=0 errno=0 [ 143.507332][ T6813] loop2: detected capacity change from 0 to 40427 [ 143.572906][ T6813] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.762098][ T6813] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.950385][ T5775] syz-executor: attempt to access beyond end of device [ 143.950385][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.991292][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 144.053951][ T787] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.113809][ T6831] loop3: detected capacity change from 0 to 8192 [ 144.132143][ T6831] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.154073][ T6831] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 144.189866][ T6831] REISERFS (device loop3): using ordered data mode [ 144.223603][ T6831] reiserfs: using flush barriers [ 144.258425][ T6831] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.301888][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.329964][ T6831] REISERFS (device loop3): checking transaction log (loop3) [ 144.334724][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.362536][ T6831] REISERFS (device loop3): Using r5 hash to sort names [ 144.370291][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.381874][ T6831] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 144.435169][ T787] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.463374][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.502112][ T787] usb 2-1: config 0 descriptor?? [ 144.597799][ T6831] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 2121, free_space(entry_count) 2 [ 144.637684][ T6831] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 564. Fsck? [ 144.666970][ T6831] REISERFS (device loop3): Remounting filesystem read-only [ 144.687247][ T6831] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 144.977502][ T787] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x4 [ 144.994381][ T787] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 145.043859][ T787] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 145.310166][ T6848] input: syz0 as /devices/virtual/input/input8 [ 145.357344][ T967] usb 2-1: USB disconnect, device number 5 [ 145.753045][ T6862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.354'. [ 146.238718][ T6872] loop5: detected capacity change from 0 to 7 [ 146.270782][ T6872] Dev loop5: unable to read RDB block 7 [ 146.283665][ T6872] loop5: AHDI p1 p2 p3 [ 146.289247][ T6872] loop5: partition table partially beyond EOD, truncated [ 146.301639][ T6872] loop5: p1 start 1601398130 is beyond EOD, truncated [ 146.309109][ T6872] loop5: p2 start 1702059890 is beyond EOD, truncated [ 146.523693][ T5816] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.579756][ T6866] loop3: detected capacity change from 0 to 32768 [ 146.648702][ T6866] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 146.714164][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 146.726229][ T5816] usb 2-1: config 0 has no interfaces? [ 146.750984][ T5816] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.795770][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 146.822001][ T6866] XFS (loop3): Ending clean mount [ 146.834380][ T5816] usb 2-1: SerialNumber: syz [ 146.860244][ T5816] usb 2-1: config 0 descriptor?? [ 146.866736][ T6866] XFS (loop3): Quotacheck needed: Please wait. [ 147.036912][ T6866] XFS (loop3): Quotacheck: Done. [ 147.134734][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.152621][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.182591][ T5816] usb 2-1: USB disconnect, device number 6 [ 147.277402][ T5770] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.667190][ T6901] loop2: detected capacity change from 0 to 512 [ 147.689971][ T6901] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.728313][ T6901] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.369: bad orphan inode 131083 [ 147.746416][ T6901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.813579][ T28] audit: type=1800 audit(1777569465.769:18): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.369" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 147.978144][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.120489][ T6907] FAT-fs (nullb0): bogus number of reserved sectors [ 148.143983][ T6907] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 149.271873][ T6926] loop2: detected capacity change from 0 to 512 [ 149.294529][ T6926] ext4: Unknown parameter 'bsddf"noblock_validity' [ 149.382679][ T6206] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.910473][ T28] audit: type=1326 audit(1777569467.869:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22079cdd9 code=0x7ffc0000 [ 149.957175][ T28] audit: type=1326 audit(1777569467.899:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22079cdd9 code=0x7ffc0000 [ 150.008057][ T28] audit: type=1326 audit(1777569467.899:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22079cdd9 code=0x7ffc0000 [ 150.063744][ T28] audit: type=1326 audit(1777569467.899:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22079cdd9 code=0x7ffc0000 [ 150.153408][ T28] audit: type=1326 audit(1777569467.899:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22079cdd9 code=0x7ffc0000 [ 150.197199][ T28] audit: type=1326 audit(1777569467.899:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa22079cdd9 code=0x7ffc0000 [ 150.271191][ T28] audit: type=1326 audit(1777569467.919:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6943 comm="syz.3.385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa22075d60e code=0x7ffc0000 [ 150.333693][ T28] audit: type=1326 audit(1777569467.949:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22079cdd9 code=0x7ffc0000 [ 150.423386][ T28] audit: type=1326 audit(1777569467.949:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.385" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa22075d60e code=0x7ffc0000 [ 150.607179][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 150.680627][ T6962] netlink: 65011 bytes leftover after parsing attributes in process `syz.3.392'. [ 150.737737][ T6964] Bluetooth: MGMT ver 1.22 [ 151.298369][ T6986] loop2: detected capacity change from 0 to 1024 [ 151.829832][ T6984] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.203526][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.325777][ T6996] loop3: detected capacity change from 0 to 40427 [ 152.341710][ T6996] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 152.357350][ T6996] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 152.369053][ T6996] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff [ 152.382408][ T6996] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 152.395563][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.408995][ T6996] F2FS-fs (loop3): invalid crc value [ 152.409014][ T8] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 152.430590][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.441108][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 152.448741][ T6996] F2FS-fs (loop3): Found nat_bits in checkpoint [ 152.464713][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 152.480159][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.492104][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.501335][ T8] usb 3-1: Product: syz [ 152.506121][ T8] usb 3-1: Manufacturer: syz [ 152.528224][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 152.534471][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 152.546078][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 152.552306][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 152.611094][ T6996] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 152.619263][ T6996] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.699251][ T6996] syz.3.409: attempt to access beyond end of device [ 152.699251][ T6996] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 152.762785][ T5770] syz-executor: attempt to access beyond end of device [ 152.762785][ T5770] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 152.782100][ T5770] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 152.800203][ T5770] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 152.917250][ T7016] veth0: entered allmulticast mode [ 153.528860][ T8] usb 3-1: USB disconnect, device number 3 [ 153.816626][ T7022] loop3: detected capacity change from 0 to 32768 [ 153.880897][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 153.880913][ T28] audit: type=1800 audit(1777569471.839:56): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.417" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 153.921044][ T7021] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 153.921044][ T7021] [ 153.965402][ T7021] ERROR: (device loop3): remounting filesystem as read-only [ 153.972786][ T7021] xtLookup: xtSearch returned -5 [ 154.039319][ T7022] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 154.039319][ T7022] [ 154.071457][ T7037] binder: 7036:7037 ioctl c0306201 200000001a80 returned -14 [ 154.073775][ T7022] xtLookup: xtSearch returned -5 [ 154.101792][ T7022] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 154.101792][ T7022] [ 154.118410][ T7022] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 154.118410][ T7022] [ 154.130665][ T7022] xtLookup: xtSearch returned -5 [ 154.144168][ T7022] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 154.144168][ T7022] [ 154.514917][ T7051] loop2: detected capacity change from 0 to 2048 [ 154.562396][ T7053] loop1: detected capacity change from 0 to 4096 [ 154.594947][ T7053] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 154.672103][ T7051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.716086][ T7051] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.775425][ T7058] loop3: detected capacity change from 0 to 256 [ 154.803721][ T7053] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 154.849650][ T7051] fs-verity: sha512 using implementation "sha512-avx2" [ 154.950100][ T7058] FAT-fs (loop3): Directory bread(block 64) failed [ 154.980204][ T7058] FAT-fs (loop3): Directory bread(block 65) failed [ 155.008459][ T7053] ntfs3: loop1: ino=1f, "file2" failed to open parent directory r=5 to update [ 155.013945][ T7058] FAT-fs (loop3): Directory bread(block 66) failed [ 155.028927][ T7058] FAT-fs (loop3): Directory bread(block 67) failed [ 155.035972][ T7058] FAT-fs (loop3): Directory bread(block 68) failed [ 155.042758][ T7058] FAT-fs (loop3): Directory bread(block 69) failed [ 155.080179][ T7058] FAT-fs (loop3): Directory bread(block 70) failed [ 155.124990][ T7058] FAT-fs (loop3): Directory bread(block 71) failed [ 155.131830][ T7058] FAT-fs (loop3): Directory bread(block 72) failed [ 155.141622][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.168953][ T7058] FAT-fs (loop3): Directory bread(block 73) failed [ 155.169403][ T988] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update [ 155.855966][ T7074] loop2: detected capacity change from 0 to 512 [ 155.923662][ T7074] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.441: inode has both inline data and extents flags [ 155.998891][ T7074] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.441: couldn't read orphan inode 15 (err -117) [ 156.089120][ T7074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.190139][ T7074] EXT4-fs error (device loop2): ext4_check_dx_root:2266: inode #2: comm syz.2.441: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 156.299389][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.105641][ T7086] loop3: detected capacity change from 0 to 32768 [ 157.210249][ T7086] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 157.355109][ T7086] XFS (loop3): Ending clean mount [ 157.394383][ T7086] XFS (loop3): Quotacheck needed: Please wait. [ 157.466933][ T7086] XFS (loop3): Quotacheck: Done. [ 157.769484][ T5770] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 160.030310][ T7140] loop1: detected capacity change from 0 to 32768 [ 160.109886][ T7141] loop2: detected capacity change from 0 to 32768 [ 160.111285][ T7140] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 160.151193][ T7141] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.228813][ T7140] XFS (loop1): Ending clean mount [ 160.330836][ T7141] XFS (loop2): Ending clean mount [ 160.348480][ T7141] XFS (loop2): Quotacheck needed: Please wait. [ 160.440566][ T7141] XFS (loop2): Quotacheck: Done. [ 160.640309][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.721515][ T5774] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 160.979234][ T7186] loop2: detected capacity change from 0 to 1024 [ 161.034442][ T7186] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.142628][ T7186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.212141][ T7186] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.440055][ T7186] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.477: lblock 0 mapped to illegal pblock 0 (length 5) [ 161.536683][ T7186] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 161.574797][ T7186] EXT4-fs (loop2): This should not happen!! Data will be lost [ 161.574797][ T7186] [ 161.849442][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 163.392961][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 163.473507][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 163.665562][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 163.684270][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.711454][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.737863][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 163.766194][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 163.781081][ T8] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 163.797198][ T8] usb 4-1: Manufacturer: syz [ 163.812550][ T8] usb 4-1: config 0 descriptor?? [ 163.929065][ T7242] syzkaller1: entered promiscuous mode [ 163.937383][ T7242] syzkaller1: entered allmulticast mode [ 164.251219][ T8] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 164.268106][ T8] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 164.288925][ T8] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 164.609331][ T967] usb 4-1: USB disconnect, device number 6 [ 164.753384][ T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 164.984177][ T787] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 165.010061][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 165.037602][ T787] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.057243][ T787] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.078420][ T787] usb 3-1: Product: syz [ 165.082674][ T787] usb 3-1: Manufacturer: syz [ 165.099128][ T787] usb 3-1: SerialNumber: syz [ 165.114700][ T787] usb 3-1: config 0 descriptor?? [ 165.136746][ T787] usb 3-1: selecting invalid altsetting 0 [ 165.196225][ T7262] loop1: detected capacity change from 0 to 40427 [ 165.223539][ T7262] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 165.243998][ T7262] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 165.265350][ T7262] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff [ 165.283413][ T7262] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 165.307816][ T7262] F2FS-fs (loop1): invalid crc value [ 165.373498][ T787] usb 3-1: USB disconnect, device number 4 [ 165.414977][ T7262] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.499764][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.587716][ T7262] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 165.622304][ T7262] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.822725][ T7262] syz.1.508: attempt to access beyond end of device [ 165.822725][ T7262] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 165.944290][ T5774] syz-executor: attempt to access beyond end of device [ 165.944290][ T5774] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 165.966968][ T5774] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 165.989257][ T5774] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 167.055315][ T7307] syzkaller1: entered promiscuous mode [ 167.060871][ T7307] syzkaller1: entered allmulticast mode [ 167.475962][ T967] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 167.513263][ T967] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.583398][ T787] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.793917][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 167.808208][ T787] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 167.827787][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.848055][ T787] usb 3-1: Product: syz [ 167.863335][ T787] usb 3-1: Manufacturer: syz [ 167.868180][ T787] usb 3-1: SerialNumber: syz [ 167.895910][ T787] usb 3-1: config 0 descriptor?? [ 168.336912][ T787] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 168.346400][ T7336] : renamed from vlan0 (while UP) [ 168.357624][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.376536][ T787] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 168.393793][ T787] usb 3-1: media controller created [ 168.458425][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.085169][ T787] zl10353_read_register: readreg error (reg=127, ret==0) [ 169.092389][ T7320] dtv5100: wlen = 0, aborting. [ 169.110716][ T787] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 169.130491][ T787] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 169.172950][ T787] usb 3-1: USB disconnect, device number 5 [ 169.297043][ T787] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 169.633547][ T5835] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 169.834003][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 169.848729][ T5835] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 169.872006][ T5835] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 169.888300][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.900711][ T5835] usb 4-1: Product: syz [ 169.911693][ T5835] usb 4-1: Manufacturer: syz [ 169.918939][ T5835] usb 4-1: SerialNumber: syz [ 169.949246][ T5835] usb 4-1: config 0 descriptor?? [ 169.977826][ T7356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.989204][ T5835] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 170.555116][ T5813] usb 4-1: USB disconnect, device number 7 [ 170.561079][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 171.309292][ T7358] loop2: detected capacity change from 0 to 40427 [ 171.344200][ T7358] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 171.357996][ T7358] F2FS-fs (loop2): Image doesn't support compression [ 171.372366][ T7358] F2FS-fs (loop2): Image doesn't support compression [ 171.380761][ T7358] F2FS-fs (loop2): invalid crc value [ 171.400644][ T7358] F2FS-fs (loop2): Found nat_bits in checkpoint [ 171.547876][ T7358] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 172.084616][ T8] libceph: connect (1)[c::]:6789 error -101 [ 172.091768][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 172.109936][ T8] libceph: connect (1)[c::]:6789 error -101 [ 172.110009][ T7384] ceph: No mds server is up or the cluster is laggy [ 172.116445][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 172.386027][ T8] libceph: connect (1)[c::]:6789 error -101 [ 172.413917][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 172.902046][ T7410] loop2: detected capacity change from 0 to 512 [ 172.922057][ T7410] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 172.977121][ T7410] EXT4-fs (loop2): 1 truncate cleaned up [ 173.009738][ T7410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.404106][ T5773] Bluetooth: hci3: command tx timeout [ 173.468327][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.680813][ T7459] loop2: detected capacity change from 0 to 512 [ 174.713913][ T7459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.811865][ T7459] EXT4-fs (loop2): shut down requested (2) [ 174.952822][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.137617][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.160433][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.173582][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.195437][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.207935][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 175.215741][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.585710][ T7475] veth1_to_bond: entered allmulticast mode [ 175.627789][ T7474] veth1_to_bond: left allmulticast mode [ 175.842029][ T7464] chnl_net:caif_netlink_parms(): no params data found [ 176.099761][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.108628][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.116474][ T7464] bridge_slave_0: entered allmulticast mode [ 176.127563][ T7464] bridge_slave_0: entered promiscuous mode [ 176.149599][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.161862][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.169840][ T7464] bridge_slave_1: entered allmulticast mode [ 176.177643][ T7464] bridge_slave_1: entered promiscuous mode [ 176.250627][ T7464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.273159][ T7464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.329013][ T7464] team0: Port device team_slave_0 added [ 176.339547][ T7464] team0: Port device team_slave_1 added [ 176.403138][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.419638][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.454652][ T7464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.474382][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.481552][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.510064][ T7464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.582748][ T7464] hsr_slave_0: entered promiscuous mode [ 176.600643][ T7464] hsr_slave_1: entered promiscuous mode [ 176.636184][ T7464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.650378][ T7464] Cannot create hsr debugfs directory [ 176.720143][ T5835] infiniband syz1: ib_query_port failed (-19) [ 176.780700][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 176.789936][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 176.825386][ T7510] ceph: No mds server is up or the cluster is laggy [ 177.240563][ T4092] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.324196][ T5779] Bluetooth: hci2: command tx timeout [ 177.428098][ T4092] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.572753][ T4092] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.744187][ T4092] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.792413][ T7464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.817427][ T7464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.836950][ T7464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.858623][ T7464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 178.182418][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.197133][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.211140][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.225491][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.243803][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 178.252293][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.796650][ T7464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.919838][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 178.945228][ T7552] syz_tun: entered promiscuous mode [ 178.957853][ T7552] syz_tun: left promiscuous mode [ 179.057732][ T7464] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.123626][ T5813] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.166540][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.175458][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.192648][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.199937][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.322082][ T5813] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 179.352760][ T5813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.369831][ T5813] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 179.393888][ T5813] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.423681][ T5773] Bluetooth: hci2: command tx timeout [ 179.440206][ T5813] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 179.451628][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.473704][ T5813] usb 4-1: Product: syz [ 179.478157][ T5813] usb 4-1: Manufacturer: syz [ 179.504983][ T5813] cdc_wdm 4-1:1.0: skipping garbage [ 179.510303][ T5813] cdc_wdm 4-1:1.0: skipping garbage [ 179.527481][ T5813] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 179.543376][ T5813] cdc_wdm 4-1:1.0: Unknown control protocol [ 179.890974][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 179.898619][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 179.913628][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 179.920335][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 179.930563][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 179.937280][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 179.944624][ T5813] usb 4-1: USB disconnect, device number 8 [ 180.103070][ T7531] chnl_net:caif_netlink_parms(): no params data found [ 180.365793][ T5773] Bluetooth: hci3: command tx timeout [ 180.467390][ T4092] hsr_slave_0: left promiscuous mode [ 180.484359][ T4092] hsr_slave_1: left promiscuous mode [ 180.491683][ T4092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.510064][ T4092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.522810][ T4092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.546751][ T4092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.578812][ T4092] bridge_slave_1: left allmulticast mode [ 180.594456][ T4092] bridge_slave_1: left promiscuous mode [ 180.603985][ T4092] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.675770][ T4092] bridge_slave_0: left allmulticast mode [ 180.681526][ T4092] bridge_slave_0: left promiscuous mode [ 180.721127][ T4092] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.835416][ T4092] veth1_macvtap: left promiscuous mode [ 180.844763][ T4092] veth0_macvtap: left promiscuous mode [ 181.073532][ T8] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 181.275622][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.313491][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.330234][ T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 181.340045][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.360147][ T8] usb 4-1: config 0 descriptor?? [ 181.483725][ T5773] Bluetooth: hci2: command tx timeout [ 181.871073][ T8] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 182.089636][ T4092] team0 (unregistering): Port device team_slave_1 removed [ 182.158217][ T4092] team0 (unregistering): Port device team_slave_0 removed [ 182.160947][ T8] usb 4-1: USB disconnect, device number 9 [ 182.258068][ T4092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.337353][ T4092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.450064][ T5773] Bluetooth: hci3: command tx timeout [ 182.825836][ T4092] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 182.921176][ T4092] bond0 (unregistering): Released all slaves [ 183.234239][ T7531] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.265925][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.273252][ T7531] bridge_slave_0: entered allmulticast mode [ 183.303404][ T7531] bridge_slave_0: entered promiscuous mode [ 183.341488][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.350125][ T7531] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.358331][ T7531] bridge_slave_1: entered allmulticast mode [ 183.367117][ T7531] bridge_slave_1: entered promiscuous mode [ 183.415170][ T7464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.495156][ T7531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.522464][ T7613] process 'syz.0.631' launched './file2' with NULL argv: empty string added [ 183.549211][ T7531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.563706][ T5773] Bluetooth: hci2: command tx timeout [ 183.752058][ T7531] team0: Port device team_slave_0 added [ 183.800612][ T7531] team0: Port device team_slave_1 added [ 183.873009][ T7531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.905131][ T7531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.988310][ T7531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.012776][ T7531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.032242][ T7531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.055666][ T4092] IPVS: stop unused estimator thread 0... [ 184.107106][ T7531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.333843][ T7531] hsr_slave_0: entered promiscuous mode [ 184.350413][ T7531] hsr_slave_1: entered promiscuous mode [ 184.369549][ T7531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.387868][ T7531] Cannot create hsr debugfs directory [ 184.491857][ T7610] loop3: detected capacity change from 0 to 32768 [ 184.515738][ T7610] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.630 (7610) [ 184.537451][ T5773] Bluetooth: hci3: command tx timeout [ 184.575781][ T7610] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.616652][ T7610] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 184.656184][ T7610] BTRFS info (device loop3): setting nodatacow, compression disabled [ 184.683550][ T7610] BTRFS info (device loop3): enabling auto defrag [ 184.700481][ T7610] BTRFS info (device loop3): max_inline at 0 [ 184.718004][ T7610] BTRFS info (device loop3): using free space tree [ 184.766546][ T7464] veth0_vlan: entered promiscuous mode [ 184.922635][ T7610] BTRFS info (device loop3): auto enabling async discard [ 185.023071][ T7464] veth1_vlan: entered promiscuous mode [ 185.268496][ T7464] veth0_macvtap: entered promiscuous mode [ 185.315578][ T7464] veth1_macvtap: entered promiscuous mode [ 185.543150][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.563427][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.577486][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.588244][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.598163][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.610230][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.635662][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.654673][ T5770] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.697467][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.725282][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.793497][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.804575][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.814664][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.826001][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.861945][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.909760][ T7464] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.928051][ T7464] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.942441][ T7464] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.958781][ T7464] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.378402][ T7531] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 186.420940][ T7531] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 186.486195][ T7531] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.585862][ T4102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.594685][ T7531] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.604267][ T5773] Bluetooth: hci3: command tx timeout [ 186.611705][ T4102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.714811][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.722745][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.839761][ T7670] loop3: detected capacity change from 0 to 256 [ 186.904161][ T7670] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.943456][ T7670] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 186.987556][ T7670] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 187.002613][ T7673] 9pnet_fd: Insufficient options for proto=fd [ 187.128919][ T7531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.210338][ T7531] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.266779][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.274041][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.321566][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.328862][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.350925][ T7682] loop4: detected capacity change from 0 to 512 [ 187.988859][ T7701] loop4: detected capacity change from 0 to 256 [ 188.010367][ T7701] exfat: Deprecated parameter 'namecase' [ 188.071828][ T7701] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 188.348034][ T7531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.512218][ T7531] veth0_vlan: entered promiscuous mode [ 188.600012][ T7531] veth1_vlan: entered promiscuous mode [ 188.780888][ T7531] veth0_macvtap: entered promiscuous mode [ 188.828553][ T7531] veth1_macvtap: entered promiscuous mode [ 188.864067][ T7724] loop4: detected capacity change from 0 to 512 [ 188.885756][ T7724] EXT4-fs: Ignoring removed bh option [ 188.907251][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.939644][ T7721] loop3: detected capacity change from 0 to 1024 [ 188.957926][ T7724] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 188.970310][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.031544][ T7724] EXT4-fs (loop4): 1 truncate cleaned up [ 189.037604][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.069205][ T7724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.099808][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.153682][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.211647][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.253248][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.297666][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.300050][ T28] audit: type=1800 audit(1777569507.249:57): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.651" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 189.330003][ T7531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.416880][ T7734] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.651: bg 0: block 465: padding at end of block bitmap is not set [ 189.435402][ T28] audit: type=1800 audit(1777569507.379:58): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.651" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 189.435452][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.510125][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.551278][ T7734] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 189.565130][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.590559][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.607040][ T7734] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.651: invalid indirect mapped block 234881024 (level 0) [ 189.625167][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.645110][ T7738] loop3: detected capacity change from 0 to 1024 [ 189.651655][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.664096][ T7738] EXT4-fs: inline encryption not supported [ 189.688555][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.699944][ T7738] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 189.720055][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.745547][ T7531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.758750][ T7738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.817719][ T7531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.835581][ T7464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.864244][ T7531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.876006][ T7531] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.913397][ T28] audit: type=1800 audit(1777569507.859:59): pid=7738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.653" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 189.946285][ T7531] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.252955][ T4092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.292139][ T4092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.405390][ T4092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.432112][ T4092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.617453][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.858639][ T7762] loop4: detected capacity change from 0 to 4096 [ 191.049770][ T7772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.662'. [ 191.076496][ T7762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.179756][ T7776] loop2: detected capacity change from 0 to 512 [ 191.253731][ T28] audit: type=1800 audit(1777569509.209:60): pid=7762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.660" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 191.335395][ T7776] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.381420][ T7776] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 191.424332][ T7776] EXT4-fs (loop2): 1 truncate cleaned up [ 191.431486][ T7776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.683440][ T7776] EXT4-fs error (device loop2): ext4_xattr_block_find:1879: inode #15: comm syz.2.663: corrupted xattr block 33: invalid header [ 191.802873][ T7776] EXT4-fs (loop2): Remounting filesystem read-only [ 191.898322][ T6205] udevd[6205]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 191.976646][ T7531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.524593][ T7806] loop3: detected capacity change from 0 to 8192 [ 192.563020][ T7806] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 192.617967][ T7806] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 192.675157][ T7806] REISERFS (device loop3): using ordered data mode [ 192.685108][ T7464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.712542][ T7806] reiserfs: using flush barriers [ 192.752466][ T7806] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 192.826296][ T7806] REISERFS (device loop3): checking transaction log (loop3) [ 193.100721][ T7806] REISERFS (device loop3): Using tea hash to sort names [ 193.131593][ T7806] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 193.513628][ T5835] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 193.696697][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 193.727518][ T5835] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 193.735002][ T28] audit: type=1326 audit(1777569511.689:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.4.677" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d58b9cdd9 code=0x7ffc0000 [ 193.753972][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.797045][ T5835] usb 3-1: Product: syz [ 193.801306][ T5835] usb 3-1: Manufacturer: syz [ 193.811325][ T28] audit: type=1326 audit(1777569511.739:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.4.677" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d58b9cdd9 code=0x7ffc0000 [ 193.853373][ T5835] usb 3-1: SerialNumber: syz [ 193.912354][ T5835] usb 3-1: config 0 descriptor?? [ 193.947177][ T28] audit: type=1326 audit(1777569511.749:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.4.677" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d58b9cdd9 code=0x7ffc0000 [ 193.985818][ T7837] Zero length message leads to an empty skb [ 194.077187][ T28] audit: type=1326 audit(1777569511.749:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.4.677" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d58b9cdd9 code=0x7ffc0000 [ 194.149640][ T28] audit: type=1326 audit(1777569511.749:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.4.677" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d58b9cdd9 code=0x7ffc0000 [ 194.227638][ T5835] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 006 [ 194.260585][ T28] audit: type=1326 audit(1777569511.749:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.4.677" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3d58b9cdd9 code=0x7ffc0000 [ 194.420366][ T28] audit: type=1326 audit(1777569511.749:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.4.677" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d58b9cdd9 code=0x7ffc0000 [ 194.593953][ T28] audit: type=1326 audit(1777569511.749:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.4.677" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d58b9cdd9 code=0x7ffc0000 [ 194.643613][ T7825] i2c i2c-1: failure reading data [ 194.672183][ T27] usb 3-1: USB disconnect, device number 6 [ 194.714290][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.720868][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.775804][ T28] audit: type=1326 audit(1777569511.749:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.4.677" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f3d58b9cdd9 code=0x7ffc0000 [ 194.920819][ T28] audit: type=1326 audit(1777569511.999:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.4.677" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d58b9cdd9 code=0x7ffc0000 [ 195.033545][ T28] audit: type=1326 audit(1777569511.999:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.4.677" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d58b9cdd9 code=0x7ffc0000 [ 195.950889][ T7844] loop4: detected capacity change from 0 to 32768 [ 196.057239][ T7844] UFO tlock:0xffffc9000288a0d8 [ 196.069556][ T7855] loop2: detected capacity change from 0 to 1024 [ 196.108527][ T7855] EXT4-fs: inline encryption not supported [ 196.154027][ T7855] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 196.198276][ T112] general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 [#1] PREEMPT SMP KASAN [ 196.210077][ T112] KASAN: maybe wild-memory-access in range [0xdead000000000108-0xdead00000000010f] [ 196.219420][ T112] CPU: 1 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 196.226660][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.236757][ T112] RIP: 0010:__list_add_valid_or_report+0x3d/0xf0 [ 196.243154][ T112] Code: 00 00 00 48 89 d3 48 85 d2 0f 84 8c 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 54 30 ae fd 49 8b 14 24 4c 39 f2 [ 196.263065][ T112] RSP: 0018:ffffc90002d17c70 EFLAGS: 00010806 [ 196.269161][ T112] RAX: 1bd5a00000000021 RBX: dead000000000100 RCX: 0000000000000000 [ 196.277161][ T112] RDX: dead000000000100 RSI: ffffc90002669890 RDI: ffff88802d7774e8 [ 196.285152][ T112] RBP: ffff88802d7774d8 R08: 0000000000000003 R09: 0000000000000004 [ 196.293150][ T112] R10: dffffc0000000000 R11: fffff520005a2f70 R12: dead000000000108 [ 196.301151][ T112] R13: dffffc0000000000 R14: ffffc90002669890 R15: ffff88802d7774e8 [ 196.309151][ T112] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 196.318105][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.324727][ T112] CR2: 00007ffd77aa98ec CR3: 000000006be94000 CR4: 00000000003506e0 [ 196.332733][ T112] Call Trace: [ 196.336046][ T112] [ 196.339008][ T112] diUpdatePMap+0x62d/0xe50 [ 196.343550][ T112] txUpdateMap+0x6c2/0x890 [ 196.348016][ T112] jfs_lazycommit+0x429/0xa70 [ 196.353157][ T112] ? txFreelock+0x5a0/0x5a0 [ 196.357694][ T112] ? do_task_dead+0xd0/0xd0 [ 196.362230][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 196.367208][ T112] kthread+0x2fa/0x390 [ 196.371298][ T112] ? txFreelock+0x5a0/0x5a0 [ 196.375870][ T112] ? kthread_blkcg+0xd0/0xd0 [ 196.380576][ T112] ret_from_fork+0x48/0x80 [ 196.385039][ T112] ? kthread_blkcg+0xd0/0xd0 [ 196.389669][ T112] ret_from_fork_asm+0x11/0x20 [ 196.394491][ T112] [ 196.397528][ T112] Modules linked in: [ 196.401470][ T112] ---[ end trace 0000000000000000 ]--- [ 196.406966][ T112] RIP: 0010:__list_add_valid_or_report+0x3d/0xf0 [ 196.413330][ T112] Code: 00 00 00 48 89 d3 48 85 d2 0f 84 8c 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 54 30 ae fd 49 8b 14 24 4c 39 f2 [ 196.432969][ T112] RSP: 0018:ffffc90002d17c70 EFLAGS: 00010806 [ 196.439069][ T112] RAX: 1bd5a00000000021 RBX: dead000000000100 RCX: 0000000000000000 [ 196.447067][ T112] RDX: dead000000000100 RSI: ffffc90002669890 RDI: ffff88802d7774e8 [ 196.455085][ T112] RBP: ffff88802d7774d8 R08: 0000000000000003 R09: 0000000000000004 [ 196.463080][ T112] R10: dffffc0000000000 R11: fffff520005a2f70 R12: dead000000000108 [ 196.471072][ T112] R13: dffffc0000000000 R14: ffffc90002669890 R15: ffff88802d7774e8 [ 196.479069][ T112] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 196.488107][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.494709][ T112] CR2: 00007ffd77aa98ec CR3: 000000006be94000 CR4: 00000000003506e0 [ 196.502711][ T112] Kernel panic - not syncing: Fatal exception [ 196.509349][ T112] Kernel Offset: disabled [ 196.513685][ T112] Rebooting in 86400 seconds..