last executing test programs: 1m26.920220955s ago: executing program 4 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x460}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/22, 0x16}], 0x1) 1m26.74534243s ago: executing program 4 (id=422): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x568, 0x448, 0xa8, 0xffffffff, 0xa8, 0x0, 0x638, 0x638, 0xffffffff, 0x638, 0x638, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x5, @multicast1, @remote, @icmp_id, @gre_key=0x5}}}}, {{@ip={@empty, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0x2a0, 0x2d8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x15, [{0x3, 0x8a, 0x8, 0x400}, {0x7504, 0x3, 0x94, 0x80000001}, {0x3, 0x4, 0x0, 0x4}, {0x3, 0x3, 0x5}, {0x2, 0xc2, 0x8, 0xeb7c}, {0xe727, 0x0, 0x5, 0x7ff}, {0x401, 0x80, 0x9, 0xd}, {0x0, 0x2, 0x9, 0x8000}, {0x3, 0x9, 0x1, 0x9}, {0x100, 0x8, 0xa, 0x7}, {0x2, 0x3, 0x0, 0xfffffff7}, {0x9, 0x69, 0x9, 0xfff}, {0x7fff, 0x3, 0x80, 0x7}, {0x3, 0xa6, 0xf, 0x4}, {0x7, 0x6a, 0x1, 0x5}, {0x800, 0x4, 0xf, 0x4}, {0x3, 0xe0, 0xd0, 0x7fffffff}, {0x5, 0xdd, 0x3, 0xfffffffc}, {0x9, 0xc9, 0x1, 0x560bbb59}, {0xfff5, 0x4f, 0x3, 0x7ff}, {0xb, 0x44, 0x1, 0x5}, {0xc, 0x67, 0x40, 0x3}, {0xc478, 0x1, 0x2, 0x4}, {0x9, 0x40, 0x25, 0x401}, {0x10, 0x70, 0x1, 0x5}, {0xb, 0x8, 0x6, 0xba83}, {0x0, 0x0, 0x2e, 0x7f}, {0x5, 0x5, 0xb, 0x7}, {0x6, 0x6, 0xb, 0x7}, {0x5, 0x4, 0x0, 0x800}, {0x61c3, 0x8, 0x5, 0x3}, {0x8000, 0x3, 0x97, 0xffffffff}, {0xc, 0x4, 0x4, 0x5}, {0xfffb, 0xa0, 0x3}, {0x4, 0x59, 0x1, 0x7e}, {0x4, 0x3, 0x2e, 0x10001}, {0x3, 0x81, 0x9, 0x7}, {0x8085, 0xb, 0x10, 0xa}, {0x2, 0x81, 0x3, 0x2a5}, {0x40, 0x7, 0x9e, 0x4e1c}, {0x5, 0x0, 0x86, 0x2}, {0x7ff, 0x2, 0x7f, 0x1}, {0x8, 0x1, 0xa, 0xfffffff9}, {0xfff1, 0x5, 0xf1, 0x2}, {0x1000, 0x4, 0x7, 0xff}, {0x9, 0xe2, 0x8, 0x568d}, {0xf, 0x8, 0x20, 0x2}, {0x7, 0x1, 0x4, 0x8}, {0x9, 0x7f, 0x7, 0x1}, {0x1, 0x8, 0x2, 0xf}, {0x4, 0xc, 0x7, 0x3}, {0x7, 0x4, 0x9, 0x7}, {0x9, 0x3, 0x9, 0x6}, {0x1404, 0xe, 0x7, 0x10000}, {0xa, 0x6, 0x3, 0xf}, {0x3, 0x0, 0x3, 0x5}, {0x5, 0x10, 0x56}, {0xf, 0x0, 0x34, 0x8}, {0x0, 0xfe, 0x3, 0x200}, {0x8001, 0x0, 0x5, 0x2}, {0x7fff, 0x5, 0x8, 0x7fff}, {0x1, 0x5, 0x7, 0x401}, {0xbec2, 0x7f, 0x2, 0x7de}, {0xec0, 0xf9, 0x7f, 0x3}], {0x5}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xa}, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 1m26.538615385s ago: executing program 4 (id=424): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1}, 0x5}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004800}, 0x4800) 1m26.229589483s ago: executing program 4 (id=429): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m25.523074422s ago: executing program 4 (id=443): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8) 1m24.848715609s ago: executing program 4 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/memory/memory0/state\x00', 0x1, 0x0) write$FUSE_IOCTL(r0, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0x2, 0x0, 0xfe}}, 0x20) 1m24.43040496s ago: executing program 32 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/memory/memory0/state\x00', 0x1, 0x0) write$FUSE_IOCTL(r0, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0x2, 0x0, 0xfe}}, 0x20) 36.424395483s ago: executing program 0 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), &(0x7f00000002c0)=""/218}, 0x20) 35.716235281s ago: executing program 0 (id=925): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010127bd7002fbdbdf251000000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 35.256930833s ago: executing program 0 (id=931): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ff"], 0x184}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) 35.044403669s ago: executing program 0 (id=935): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1400c, &(0x7f00000004c0)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000500)="$eJzs3L9vG1UcAPDvOXFCaCGhlF8tPwIFUSFImrZABwZAIDEUgQQDjFYSqtK0oCZItIpEylAmVCGxI0b+BSZYEGJCYgVmVFGhLG2ZjM53l9iu7eaHY5f685GcfN/d2e997+45z/dyDmBgTaY/kojdEfF7RIxnxcYNJrNf11aXZ6+vLs8mUa2+809S2+7q6vJssWnxvF31hUhif4t6F8+dP1VZWJg/m5enl05/PL147vxzJ09XTsyfmD9z+Nixo0dmXnzh8PPbyG4sIva8lcWlfNkb73/15vEvG/JvyqNLJjutfKpa7XJ1/XVXXTzcx3awOUP58SrX+v94DNUdvfF4/fO1wmd9aiCwY6rVanVX+9UrVeA2lkRjWZeHQVH8oS8+/+a/R+sHAS/v6Aikv668kn0ASvO+lj+yNcNrVwzKTZ9vu2kyIt5b+feb9BEdr0MkO9QCAGDQ/JCOf55NRzvLs+nYY338UYr767a7O58bmoiIeyJiT0TcG2dib0TcF1Hb9oGIeHCT9ddNktSGmVdXR5rGP6XLW05uA9Lx30v53Fbj+K8Y/cXEUK10LitEOfng5ML8oXyfHIzyaFqe6VDHj6/9dqnduvrxX/pI6y/Ggnk7Lg+PNj5nrrJU2XrGja5ciNg33Cr/ZG0mIB15PhQR+1q9QOnmdZx85ruH2627ef4ddGGiqfptxNPZ8V+JpvwLSef5yek7YmH+0HRxVtzol18vvt2u/m3l3wXp8b+z5fm/lv9EUj9fu7j5Oi7+8UXbudXJch5s4vxfqSxVRpJ3a/FIvuzTytLS2ZmIkeR41uj65YfXn1uUi+3T/A8eaN3/98T6ntgfEelJ/EhEPBoRj+XH7vGIeCIiDnTI/+dXn/ywedlYkf8tcPznNnX814ORaFxSarFNGgyd+un7hkon1sM8/+ud3/+O1qKD+ZKNvP/d2IrWwXb3HwAAAPwflCJidySlqbW4VJqayv6Hf2829Z365Mxcdo/ARJRLxZWu8brroTP5x/qsfCEisn8tKNYfiVLtuvHXQ2O18tTsRwtzfc0c2NWm/6f+Gup364Ad54YtGFz6Pwyujv2/3Lt2AL13Q//v2OdHd7QtQG+1+Ps/1o92AL3Xavzv+35gMDT1f9N+MEBc/4fBpf/D4NrAPfzA7WdxLG5+k/xaUI6I5lXFK23g6VsJxiM208LtB8U3I273daLcuzb3I4hSd17nz3x/t1g10v7U+vtSxC2wE1oHyc51h94F/XtPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Kb/AgAA//8GT9U6") syz_mount_image$fuse(0x0, &(0x7f00000009c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) llistxattr(&(0x7f0000000b40)='./file0\x00', 0x0, 0xfffffdf3) 34.524095082s ago: executing program 0 (id=940): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, 0x0}) 33.767733702s ago: executing program 0 (id=943): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="9fd3", 0x2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 32.997193942s ago: executing program 33 (id=943): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="9fd3", 0x2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 3.064256858s ago: executing program 5 (id=1202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004844}, 0x30) 2.942959651s ago: executing program 2 (id=1204): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f00000000c0)=0x5) 2.790043926s ago: executing program 5 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000140), 0xca, r0}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) 2.564980181s ago: executing program 5 (id=1207): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 2.396750236s ago: executing program 5 (id=1209): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_matches\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.071540085s ago: executing program 6 (id=1210): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) 2.069251525s ago: executing program 3 (id=1211): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 1.902596169s ago: executing program 3 (id=1212): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) 1.89316538s ago: executing program 2 (id=1213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) 1.88814849s ago: executing program 6 (id=1214): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x6781, 0x2007fffdfff}) fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x0, 0x2, 0x73f1, 0x800}) 1.758046783s ago: executing program 2 (id=1215): r0 = syz_create_resource$futex(&(0x7f0000000500)=0x1) r1 = syz_create_resource$futex(&(0x7f0000001e00)) futex(r1, 0x8, 0x2, 0x0, r1, 0x0) futex(r0, 0xc, 0x1, 0x0, r1, 0x1) 1.732301404s ago: executing program 6 (id=1216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x50, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.662465056s ago: executing program 3 (id=1217): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x7, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 1.607245097s ago: executing program 1 (id=1218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000880)) 1.576478268s ago: executing program 2 (id=1219): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 1.535069269s ago: executing program 6 (id=1220): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80000001) 1.476829601s ago: executing program 3 (id=1221): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='/,0x-', 0x5) 1.413656762s ago: executing program 6 (id=1222): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x300401a, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=continue,usrquota,integrity,iocharset=cp857,noquota,grpquota,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550df33dd47ded539aef131d50bbd580000000000000000b9b0fa44661887a1633f523184b4e52fbab2783d4a8e4c913491c6800c959a6cba88690ccbce67e3919"], 0x1, 0x60f6, &(0x7f00000002c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x104) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 1.335047444s ago: executing program 5 (id=1223): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0xfffffffe}, &(0x7f00000000c0)=0x8) 1.324357545s ago: executing program 3 (id=1224): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) 1.320252625s ago: executing program 1 (id=1225): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000900)=ANY=[@ANYRES8=0x0], 0x1, 0x2b4, &(0x7f0000000940)="$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") munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000cc0)='2', 0xfe63, 0xe7c) 1.059004712s ago: executing program 5 (id=1226): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000440)='./file0\x00', 0x1000000, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f000000d680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 793.782049ms ago: executing program 1 (id=1227): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x6781, 0x2007fffdfff}) fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x0, 0x2, 0x73f1, 0x800}) 647.666003ms ago: executing program 2 (id=1228): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x2710}, 0x15, 0x7ff, 0xfffffffa}], 0xfffffde6) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) 539.176166ms ago: executing program 1 (id=1229): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r0, 0x0, 0xf70f) 351.930041ms ago: executing program 1 (id=1230): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x0) 288.416622ms ago: executing program 3 (id=1231): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 83.926708ms ago: executing program 2 (id=1232): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80000001) 31.321909ms ago: executing program 1 (id=1233): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000b340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040800}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}}], 0x2, 0x4000) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0}, 0x24c}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x400}], 0x3, 0x2, 0x0) 0s ago: executing program 6 (id=1234): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) dup3(r0, r1, 0x0) kernel console output (not intermixed with test programs): ink becomes ready [ 91.393455][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.403203][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.417365][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.428884][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.438562][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.447675][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.456748][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.475129][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.488161][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.499118][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.509684][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.521978][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.542829][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.556449][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.580721][ T4272] device veth0_macvtap entered promiscuous mode [ 91.609884][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.620981][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.636850][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.647577][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.661656][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.669579][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.679859][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.689373][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.699004][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.709931][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.729785][ T4272] device veth1_macvtap entered promiscuous mode [ 91.752936][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768036][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.780688][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.793630][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.813431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.822803][ T7] cfg80211: failed to load regulatory.db [ 91.837933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.849900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.904406][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.922723][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.933123][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.947226][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.957852][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.968686][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.982267][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.007214][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.017960][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.028195][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.037053][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.046213][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.054408][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.094538][ T4273] device veth0_vlan entered promiscuous mode [ 92.109126][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.121056][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.131530][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.143174][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.154398][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.165272][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.177545][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.220653][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.231666][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.249005][ T4273] device veth1_vlan entered promiscuous mode [ 92.266003][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.274867][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.305097][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.323964][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.343015][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.356064][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.405112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.426338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.434900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.480740][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.515393][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.525250][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.539143][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.581342][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.589227][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.591659][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.599604][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.620532][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.658573][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.684640][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.708904][ T4273] device veth0_macvtap entered promiscuous mode [ 92.746967][ T4273] device veth1_macvtap entered promiscuous mode [ 92.806013][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.814036][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.844409][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.873910][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.888612][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.904715][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.926132][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.937771][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.948918][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.958901][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.969861][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.986992][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.000547][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.012414][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.030019][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.044110][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.064963][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.075896][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.076304][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.085871][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.085924][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.085936][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.085950][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.085960][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.085973][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.090545][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.116320][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.185228][ T4423] tap0: tun_chr_ioctl cmd 1075343107 [ 93.210913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.227745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.244357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.278733][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.297662][ T4425] rnbd_client L600: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 93.314687][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.324846][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.339135][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.382140][ T11] rtrs_client L2025: : CM error (CM event: address error, err: -19) [ 93.403768][ T4425] rtrs_client L2627: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 93.515897][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.548094][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.564001][ T4429] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 93.585036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.656947][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.664834][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.708916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.951916][ T4435] loop3: detected capacity change from 0 to 4096 [ 94.099556][ T4435] ntfs3: loop3: Failed to load $Extend. [ 94.262758][ T4449] loop1: detected capacity change from 0 to 1024 [ 94.272239][ T4453] GÂL ˆòf [ 94.308160][ T4449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.375213][ T4272] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 94.430108][ T4272] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 95.081328][ T4483] ======================================================= [ 95.081328][ T4483] WARNING: The mand mount option has been deprecated and [ 95.081328][ T4483] and is ignored by this kernel. Remove the mand [ 95.081328][ T4483] option from the mount to silence this warning. [ 95.081328][ T4483] ======================================================= [ 95.221837][ T4487] loop3: detected capacity change from 0 to 1024 [ 95.251620][ T4487] EXT4-fs: Ignoring removed bh option [ 95.361632][ T4487] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.425890][ T4349] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.626990][ T4349] usb 1-1: Using ep0 maxpacket: 32 [ 95.643892][ T4349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.668339][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 95.683519][ T4349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.695052][ T4349] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 95.751018][ T4349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.798552][ T4349] usb 1-1: config 0 descriptor?? [ 96.207692][ T4520] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.263648][ T4349] zydacron 0003:13EC:0006.0001: item fetching failed at offset 0/2 [ 96.274171][ T4522] loop4: detected capacity change from 0 to 64 [ 96.295197][ T4349] zydacron 0003:13EC:0006.0001: parse failed [ 96.315315][ T4349] zydacron: probe of 0003:13EC:0006.0001 failed with error -22 [ 96.407780][ T4522] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 96.519900][ T4522] gfs2: path_lookup on c::: returned error -2 [ 96.530692][ T4349] usb 1-1: USB disconnect, device number 2 [ 97.055863][ T4519] loop3: detected capacity change from 0 to 40427 [ 97.110055][ T4519] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 97.129635][ T4519] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 97.179052][ T4519] F2FS-fs (loop3): invalid crc value [ 97.194452][ T4519] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 97.264309][ T4519] F2FS-fs (loop3): Found nat_bits in checkpoint [ 97.412081][ T4519] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 97.435260][ T4519] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.626254][ T4519] syz.3.49: attempt to access beyond end of device [ 97.626254][ T4519] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 97.769739][ T4272] syz-executor: attempt to access beyond end of device [ 97.769739][ T4272] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.835767][ T4349] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.037689][ T4349] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.068496][ T4349] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 98.104408][ T4349] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 98.124530][ T4349] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 98.149742][ T4349] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 98.169208][ T4349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.209519][ T4552] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.225348][ T4552] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.246588][ T4349] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 98.260104][ T4274] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.269502][ T4349] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 98.287666][ T4349] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 98.328046][ T4349] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 98.347882][ T4349] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 98.365627][ T4349] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 98.381277][ T4349] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 98.454462][ T22] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.478436][ T4274] usb 1-1: unable to get BOS descriptor or descriptor too short [ 98.497840][ T4274] usb 1-1: config 1 has an invalid interface number: 156 but max is 2 [ 98.546031][ T4274] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.549910][ T4572] batman_adv: batadv0: Adding interface: ipvlan2 [ 98.586292][ T4574] mmap: syz.2.69 (4574) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.587993][ T4274] usb 1-1: config 1 has no interface number 2 [ 98.616416][ T4572] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.649317][ T4274] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 98.681007][ T4274] usb 1-1: config 1 interface 1 has no altsetting 0 [ 98.703908][ T4274] usb 1-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 98.721633][ T4274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.725929][ T4572] batman_adv: batadv0: Interface activated: ipvlan2 [ 98.742981][ T4274] usb 1-1: Product: syz [ 98.757767][ T4274] usb 1-1: Manufacturer: syz [ 98.786039][ T4274] usb 1-1: SerialNumber: syz [ 98.917950][ T4349] usb 2-1: USB disconnect, device number 2 [ 98.964561][ T4349] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 99.001877][ T4349] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 99.035207][ T4274] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 99.047755][ T4349] keyspan 2-1:1.0: device disconnected [ 99.054412][ T4274] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 99.090749][ T4274] usb 1-1: 1:1 : unsupported format bits 0x7b6c0006 [ 99.120466][ T4274] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 99.158576][ T4274] usb 1-1: selecting invalid altsetting 0 [ 99.177202][ T4274] usb 1-1: selecting invalid altsetting 0 [ 99.183151][ T4274] usb 1-1: unit 2 not found! [ 99.198417][ T4274] usb 1-1: unit 236 not found! [ 99.279409][ T4274] usb 1-1: USB disconnect, device number 3 [ 99.299777][ T4589] block2mtd: illegal erase size [ 99.606903][ T4594] udevd[4594]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.650765][ T4601] input: syz0 as /devices/virtual/input/input5 [ 100.659377][ T4643] loop1: detected capacity change from 0 to 256 [ 100.806101][ T4651] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 100.860150][ T4651] i2c i2c-0: new_device: Instantiated device fusb302 at 0x22 [ 101.280804][ T26] audit: type=1400 audit(1792502083.085:2): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=4665 comm="syz.1.97" name="//o" offset=50 [ 101.430667][ T4672] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.594020][ T4678] loop3: detected capacity change from 0 to 64 [ 102.230188][ T4701] capability: warning: `syz.4.111' uses 32-bit capabilities (legacy support in use) [ 102.272215][ T4701] program syz.4.111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.471494][ T4724] loop4: detected capacity change from 0 to 32768 [ 103.494682][ T4734] ftl_cs: FTL header not found. [ 103.604703][ T4724] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 103.627842][ T4734] block2mtd: mtd1: [/dev/zram0] erase_size = 4KiB [4096] [ 103.672314][ T4724] JBD2: Ignoring recovery information on journal [ 103.754000][ T4724] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 104.178647][ T4269] ocfs2: Unmounting device (7,4) on (node local) [ 104.751732][ T4767] loop0: detected capacity change from 0 to 128 [ 104.820425][ T4767] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 104.879074][ T4767] hpfs: filesystem error: improperly stopped [ 104.909101][ T4767] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 104.944888][ T4767] hpfs: You really don't want any checks? You are crazy... [ 104.988853][ T4767] hpfs: hpfs_map_sector(): read error [ 105.010240][ T4767] hpfs: code page support is disabled [ 105.032387][ T4767] hpfs: hpfs_map_4sectors(): unaligned read [ 105.066855][ T4767] hpfs: hpfs_map_4sectors(): unaligned read [ 105.093247][ T4767] hpfs: filesystem error: unable to find root dir [ 105.154190][ T4755] loop1: detected capacity change from 0 to 32768 [ 105.204700][ T4767] hpfs: hpfs_map_4sectors(): unaligned read [ 105.231552][ T4767] hpfs: hpfs_map_sector(): read error [ 105.727655][ T4788] loop0: detected capacity change from 0 to 512 [ 105.816762][ T4788] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.147: inode has both inline data and extents flags [ 105.842654][ T4788] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.147: couldn't read orphan inode 15 (err -117) [ 105.870187][ T4788] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 105.905318][ T4794] loop3: detected capacity change from 0 to 4096 [ 105.949075][ T4794] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 106.109147][ T4794] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 106.138259][ T26] audit: type=1326 audit(1792502087.945:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.4.148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec4f39f559 code=0x0 [ 106.171131][ T4794] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 106.360630][ T4374] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 106.394924][ T4272] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 106.405669][ T4272] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 106.412734][ T4272] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 106.446033][ T4391] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 106.460885][ T4272] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 106.469069][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 106.672168][ T4785] comedi comedi1: reset error (fatal) [ 106.732185][ T4804] loop6: detected capacity change from 0 to 7 [ 106.743245][ T4802] loop3: detected capacity change from 0 to 4096 [ 106.777888][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.787343][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.799269][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.808529][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.848694][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.857994][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.868288][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.877560][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.897774][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.907058][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.916077][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.925351][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.942866][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.952144][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.960543][ T4804] ldm_validate_partition_table(): Disk read failed. [ 106.977383][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.986686][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.997435][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.006711][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.022418][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.031682][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.045990][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.053780][ T4804] Dev loop6: unable to read RDB block 0 [ 107.068704][ T4804] loop6: unable to read partition table [ 107.074584][ T4804] loop6: partition table beyond EOD, truncated [ 107.083597][ T4802] ntfs: volume version 3.1. [ 107.094174][ T4804] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 107.109903][ T4595] ldm_validate_partition_table(): Disk read failed. [ 107.117431][ T4595] Dev loop6: unable to read RDB block 0 [ 107.130490][ T4595] loop6: unable to read partition table [ 107.139035][ T4595] loop6: partition table beyond EOD, truncated [ 107.147856][ T4807] ldm_validate_partition_table(): Disk read failed. [ 107.186032][ T4807] Dev loop6: unable to read RDB block 0 [ 107.202771][ T4807] loop6: unable to read partition table [ 107.222986][ T4807] loop6: partition table beyond EOD, truncated [ 107.246935][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 107.272783][ T4807] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 107.290232][ T7] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 107.325191][ T7] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 107.366390][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.384805][ T7] usb 5-1: Product: syz [ 107.394946][ T7] usb 5-1: Manufacturer: syz [ 107.440536][ T7] usb 5-1: SerialNumber: syz [ 107.483319][ T7] r8152-cfgselector 5-1: config 0 descriptor?? [ 107.716300][ T7] r8152-cfgselector 5-1: Needed 2 retries to read version [ 107.723529][ T7] r8152-cfgselector 5-1: Unknown version 0x0000 [ 107.790133][ T4817] ima: policy update failed [ 107.805114][ T26] audit: type=1802 audit(1792502089.605:4): pid=4817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.158" res=0 errno=0 [ 107.902835][ T4809] loop1: detected capacity change from 0 to 32768 [ 107.950955][ T4349] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 108.033806][ T4809] ERROR: (device loop1): diAllocAG: numfree > numinos [ 108.033806][ T4809] [ 108.078297][ T4826] loop2: detected capacity change from 0 to 256 [ 108.088544][ T4809] ERROR: (device loop1): remounting filesystem as read-only [ 108.110166][ T4826] exfat: Deprecated parameter 'utf8' [ 108.115789][ T4809] ialloc: diAlloc returned -5! [ 108.123316][ T4827] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 108.123316][ T4827] [ 108.142712][ T4826] exfat: Deprecated parameter 'namecase' [ 108.204465][ T4826] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 108.315775][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.517826][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.549160][ T7] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 108.575610][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.618435][ T7] gspca_main: spca501-2.14.0 probing 0000:0000 [ 108.815087][ T7] gspca_spca501: reg write: error -71 [ 108.835454][ T7] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 108.862975][ T7] spca501: probe of 4-1:1.0 failed with error -22 [ 108.887054][ T7] uvcvideo 4-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 108.912648][ T7] usb 4-1: Found UVC 1.00 device (0000:0000) [ 108.941762][ T7] uvcvideo 4-1:1.1: No supported video formats found. [ 108.971478][ T7] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 109.031929][ T7] usb 4-1: USB disconnect, device number 2 [ 109.260802][ T4833] loop1: detected capacity change from 0 to 32768 [ 109.299527][ T4833] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.163 (4833) [ 109.380181][ T4833] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.411885][ T4833] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 109.453139][ T4833] BTRFS info (device loop1): allowing degraded mounts [ 109.460292][ T4833] BTRFS info (device loop1): metadata ratio 4 [ 109.491232][ T4833] BTRFS info (device loop1): turning on sync discard [ 109.511487][ T4833] BTRFS info (device loop1): turning off discard [ 109.524077][ T4833] BTRFS warning (device loop1): excessive commit interval 3911 [ 109.542216][ T4833] BTRFS info (device loop1): turning on sync discard [ 109.572543][ T4833] BTRFS info (device loop1): disabling tree log [ 109.586698][ T4833] BTRFS info (device loop1): using free space tree [ 109.772888][ T4833] BTRFS info (device loop1): enabling ssd optimizations [ 110.004904][ T4881] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.313955][ T4833] BTRFS info (device loop1): disk added /dev/nullb0 [ 110.455013][ T4271] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.184502][ T4901] loop0: detected capacity change from 0 to 32768 [ 111.256179][ T4901] XFS (loop0): Mounting V5 Filesystem [ 111.358987][ T4926] loop1: detected capacity change from 0 to 4096 [ 111.378738][ T4901] XFS (loop0): Ending clean mount [ 111.480048][ T4927] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.674073][ T4273] XFS (loop0): Unmounting Filesystem [ 111.874222][ T4929] loop3: detected capacity change from 0 to 8192 [ 111.935965][ T4929] loop3: p4 < > [ 112.180388][ T4937] ip_tables: iptables: counters copy to user failed while replacing table [ 112.210927][ T4939] netlink: 68 bytes leftover after parsing attributes in process `syz.4.200'. [ 112.404376][ T4525] udevd[4525]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 112.846097][ T4961] loop1: detected capacity change from 0 to 4096 [ 112.871921][ T4961] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 112.947418][ T4966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.222'. [ 113.054708][ T4969] ip_tables: iptables: counters copy to user failed while replacing table [ 113.348315][ T4973] loop2: detected capacity change from 0 to 4096 [ 113.432029][ T4979] capability: warning: `syz.1.218' uses deprecated v2 capabilities in a way that may be insecure [ 113.479853][ T4973] ntfs: volume version 3.1. [ 113.973384][ T14] kernel write not supported for file /snd/midiC2D0 (pid: 14 comm: kworker/0:1) [ 114.016244][ T4975] loop3: detected capacity change from 0 to 32768 [ 114.343093][ T5003] pimreg0: tun_chr_ioctl cmd 2147767507 [ 114.763965][ T5015] loop4: detected capacity change from 0 to 4096 [ 114.922915][ T5015] ntfs: volume version 3.1. [ 115.211626][ T5032] loop1: detected capacity change from 0 to 512 [ 115.690061][ T5020] loop2: detected capacity change from 0 to 32768 [ 115.759780][ T5020] JBD2: Ignoring recovery information on journal [ 115.798790][ T5032] EXT4-fs (loop1): Test dummy encryption mode enabled [ 115.859471][ T5032] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.243: inode has both inline data and extents flags [ 115.915857][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.967123][ T5032] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.243: couldn't read orphan inode 15 (err -117) [ 116.001296][ T5020] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 116.024717][ T5038] loop3: detected capacity change from 0 to 32768 [ 116.047433][ T5032] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.072063][ T5038] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 116.117734][ T14] usb 1-1: config 127 has an invalid interface number: 2 but max is 0 [ 116.126980][ T14] usb 1-1: config 127 has no interface number 0 [ 116.137694][ T14] usb 1-1: New USB device found, idVendor=09fb, idProduct=602d, bcdDevice=4b.5f [ 116.148959][ T5038] JBD2: Ignoring recovery information on journal [ 116.158019][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 116.169740][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.196008][ T14] usb 1-1: Product: syz [ 116.205617][ T14] usb 1-1: Manufacturer: syz [ 116.216994][ T14] usb 1-1: SerialNumber: syz [ 116.289611][ T5038] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 116.340836][ T9] (kworker/u4:0,9,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=16, inode=66, rec_len=296, name_len=2 [ 116.400935][ T26] audit: type=1800 audit(1792502098.205:5): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.246" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 116.424115][ T4270] ocfs2: Unmounting device (7,2) on (node local) [ 116.436482][ T5038] (syz.3.246,5038,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=16, inode=66, rec_len=296, name_len=2 [ 116.456446][ T5043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.494055][ T5043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.505780][ T5038] (syz.3.246,5038,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 116.531229][ T5038] (syz.3.246,5038,0):__ocfs2_prepare_orphan_dir:2170 ERROR: status = -2 [ 116.560091][ T5038] (syz.3.246,5038,0):ocfs2_prepare_orphan_dir:2212 ERROR: status = -2 [ 116.569802][ T14] ftdi_sio 1-1:127.2: FTDI USB Serial Device converter detected [ 116.586638][ T14] ftdi_sio ttyUSB0: unknown device type: 0x4b5f [ 116.615158][ T14] usb 1-1: USB disconnect, device number 4 [ 116.627415][ T5038] (syz.3.246,5038,1):ocfs2_prepare_orphan_dir:2228 ERROR: status = -2 [ 116.641569][ T14] ftdi_sio 1-1:127.2: device disconnected [ 116.687873][ T5038] (syz.3.246,5038,1):ocfs2_add_inode_to_orphan:2663 ERROR: status = -2 [ 116.725547][ T5038] (syz.3.246,5038,1):ocfs2_dio_wr_get_block:2215 ERROR: status = -2 [ 116.755989][ T5038] (syz.3.246,5038,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 116.908015][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 117.564606][ T5086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 117.599369][ T5089] loop2: detected capacity change from 0 to 512 [ 117.708272][ T5089] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 117.736806][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.755095][ T5089] System zones: 0-2, 18-18, 34-35 [ 117.797200][ T5089] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.832876][ T5089] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.948385][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.996110][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.015585][ T14] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 118.024693][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.072750][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 118.079337][ T14] usb 2-1: config 0 descriptor?? [ 118.113524][ T5101] loop3: detected capacity change from 0 to 512 [ 118.234927][ T5101] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 118.279347][ T5101] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.514607][ T5113] loop0: detected capacity change from 0 to 512 [ 118.522444][ T14] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 118.533844][ T14] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 118.542001][ T14] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 118.550661][ T14] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 118.558400][ T14] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 118.589183][ T5113] EXT4-fs: Ignoring removed nobh option [ 118.604132][ T14] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 118.675914][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 118.712281][ T5113] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.272: invalid indirect mapped block 256 (level 2) [ 118.742796][ T14] playstation 0003:054C:0DF2.0002: Invalid byte count transferred, expected 20 got 0 [ 118.770999][ T5113] EXT4-fs (loop0): 2 truncates cleaned up [ 118.772375][ T14] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -22 [ 118.786908][ T5113] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.800523][ T14] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 118.828797][ T14] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 118.877929][ T14] playstation: probe of 0003:054C:0DF2.0002 failed with error -22 [ 118.940235][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 119.015890][ T127] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.033042][ T22] usb 2-1: USB disconnect, device number 3 [ 119.177712][ T5122] fido_id[5122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 119.255271][ T127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.282894][ T127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.321135][ T127] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 119.338956][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.375378][ T127] usb 5-1: Product: syz [ 119.395093][ T127] usb 5-1: Manufacturer: syz [ 119.407677][ T127] usb 5-1: SerialNumber: syz [ 119.478108][ T22] hid-generic 0005:0C45:1010.0003: item fetching failed at offset 0/1 [ 119.493730][ T127] symbolserial 5-1:1.0: symbol converter detected [ 119.520282][ T127] usb 5-1: symbol converter now attached to ttyUSB0 [ 119.536841][ T22] hid-generic: probe of 0005:0C45:1010.0003 failed with error -22 [ 119.683228][ T5144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.699419][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.720223][ T5119] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 119.732584][ T955] usb 5-1: USB disconnect, device number 3 [ 119.758768][ T955] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 119.779742][ T955] symbolserial 5-1:1.0: device disconnected [ 119.902732][ T14] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 119.918002][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.934869][ T14] usb 3-1: Product: syz [ 119.940080][ T14] usb 3-1: Manufacturer: syz [ 119.944830][ T14] usb 3-1: SerialNumber: syz [ 119.978764][ T5152] i2c i2c-0: new_device: Can't parse I2C address [ 120.209389][ T14] rtl8150 3-1:1.0: couldn't reset the device [ 120.219734][ T14] rtl8150: probe of 3-1:1.0 failed with error -5 [ 120.253403][ T14] usb 3-1: USB disconnect, device number 2 [ 120.268618][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 120.441159][ T5167] loop1: detected capacity change from 0 to 512 [ 120.481974][ T5167] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.294: invalid indirect mapped block 4294967295 (level 1) [ 120.502517][ T5171] loop0: detected capacity change from 0 to 512 [ 120.509916][ T5167] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.294: invalid indirect mapped block 4294967295 (level 1) [ 120.534665][ T5167] EXT4-fs (loop1): 2 truncates cleaned up [ 120.545681][ T5167] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.656584][ T5171] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.296: corrupted in-inode xattr [ 120.686263][ T5167] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.294: bg 0: block 5: invalid block bitmap [ 120.712904][ T5171] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.296: couldn't read orphan inode 15 (err -117) [ 120.777158][ T5171] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 120.786656][ T5167] EXT4-fs error (device loop1) in ext4_setattr:5695: error 28 [ 120.810124][ T26] audit: type=1800 audit(1792502102.615:6): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.296" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 120.918883][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 121.023551][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 121.125196][ T5188] cramfs: checking physical address 0x0000000144b89000 for linear cramfs image [ 121.161037][ T5188] cramfs: wrong magic [ 121.183253][ T5191] netlink: 108 bytes leftover after parsing attributes in process `syz.1.303'. [ 121.209276][ T5188] cramfs: wrong magic [ 121.300551][ T5193] usbcore.quirks: string doesn't fit in 127 chars. [ 121.452155][ T5200] loop4: detected capacity change from 0 to 512 [ 121.496402][ T5200] EXT4-fs: Ignoring removed nobh option [ 121.608307][ T5200] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.310: invalid indirect mapped block 256 (level 2) [ 121.682819][ T5200] EXT4-fs (loop4): 2 truncates cleaned up [ 121.759384][ T5200] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.028822][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 122.596550][ T5254] loop2: detected capacity change from 0 to 164 [ 122.651654][ T5254] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 122.723994][ T5254] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 122.991666][ T5265] loop0: detected capacity change from 0 to 4096 [ 122.996299][ T5267] WARNING! power/level is deprecated; use power/control instead [ 123.030986][ T5265] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 123.432708][ T5283] loop2: detected capacity change from 0 to 512 [ 123.462482][ T5283] EXT4-fs (loop2): Test dummy encryption mode enabled [ 123.491810][ T5283] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.547180][ T5283] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.607559][ T5283] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.349: bad orphan inode 131083 [ 123.647464][ T5283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 123.670043][ T5282] loop1: detected capacity change from 0 to 8192 [ 123.695774][ T5283] EXT4-fs (loop2): shut down requested (2) [ 123.791514][ T5282] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 123.870581][ T5282] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 123.915149][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 123.942389][ T5282] REISERFS (device loop1): using journaled data mode [ 124.021736][ T5282] reiserfs: using flush barriers [ 124.124667][ T5282] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.212912][ T5282] REISERFS (device loop1): checking transaction log (loop1) [ 124.261445][ T5302] loop2: detected capacity change from 0 to 2048 [ 124.298965][ T5282] REISERFS (device loop1): Using tea hash to sort names [ 124.309141][ T5302] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 124.351375][ T5282] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 124.366394][ T5302] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 124.414197][ T5302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.441523][ T5282] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 124.476868][ T5306] loop0: detected capacity change from 0 to 256 [ 124.537341][ T5306] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 125.361564][ T5331] program syz.4.369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.747753][ T5347] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 126.240179][ T5369] program syz.2.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.314050][ T5372] loop3: detected capacity change from 0 to 256 [ 126.515927][ T5376] 9pnet: p9_errstr2errno: server reported unknown error [ 126.716375][ T5384] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 126.805019][ T5384] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 127.099024][ T5401] XFS (mtdblock0): Invalid superblock magic number [ 127.699348][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 128.031170][ T5444] loop1: detected capacity change from 0 to 1024 [ 128.074727][ T5446] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 128.144763][ T5446] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 128.183613][ T5446] i2c-slave-eeprom: probe of 0-0001 failed with error -22 [ 128.231421][ T5446] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 128.263581][ T5444] hfsplus: invalid length 1280 has been corrected to 255 [ 128.577212][ T5463] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.427'. [ 128.653300][ T5466] loop4: detected capacity change from 0 to 512 [ 128.761023][ T5466] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.429: bg 0: block 5: invalid block bitmap [ 128.875571][ T5466] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 128.931954][ T5466] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.429: invalid indirect mapped block 3 (level 2) [ 128.995993][ T5466] EXT4-fs (loop4): 1 orphan inode deleted [ 129.001882][ T5466] EXT4-fs (loop4): 1 truncate cleaned up [ 129.024900][ T5466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.223821][ T4269] EXT4-fs error (device loop4): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 129.248578][ T4269] EXT4-fs error (device loop4): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 129.736962][ T4799] EXT4-fs (loop4): unmounting filesystem. [ 130.024106][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.185211][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.235719][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.302135][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.402898][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.425641][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 130.433546][ T14] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 130.468989][ T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.519120][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.553475][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.583949][ T14] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.664247][ T14] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.705024][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.967674][ T14] usb 3-1: GET_CAPABILITIES returned 0 [ 130.973521][ T14] usbtmc 3-1:16.0: can't read capabilities [ 131.228486][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.275829][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.285008][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.294138][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.303273][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.312403][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.323901][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.333075][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.350677][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.359832][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.369007][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.378164][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.390652][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.399819][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.409027][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.418154][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 131.444599][ T127] usb 3-1: USB disconnect, device number 3 [ 131.756730][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.767829][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.779874][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.798153][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.806094][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 131.813469][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.080712][ T5549] rxe_eth0 speed is unknown, defaulting to 1000 [ 132.411854][ T5570] loop1: detected capacity change from 0 to 2048 [ 132.489374][ T5570] loop1: [ICS] [ 132.779783][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.787368][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.260663][ T5593] netlink: 'syz.2.480': attribute type 1 has an invalid length. [ 133.630594][ T5549] chnl_net:caif_netlink_parms(): no params data found [ 133.665691][ T5609] loop3: detected capacity change from 0 to 256 [ 133.856633][ T11] device hsr_slave_0 left promiscuous mode [ 133.874117][ T11] device hsr_slave_1 left promiscuous mode [ 133.897663][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 133.924998][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.979374][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.024865][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.049654][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.086680][ T11] device bridge_slave_1 left promiscuous mode [ 134.100286][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.135584][ T11] device bridge_slave_0 left promiscuous mode [ 134.162442][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.273252][ T11] device veth1_macvtap left promiscuous mode [ 134.280214][ T11] device veth0_macvtap left promiscuous mode [ 134.286929][ T11] device veth1_vlan left promiscuous mode [ 134.293275][ T11] device veth0_vlan left promiscuous mode [ 134.525648][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.720639][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 134.728485][ T14] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 134.745403][ T14] usb 2-1: config 16 has an invalid interface number: 128 but max is 0 [ 134.761302][ T14] usb 2-1: config 16 has no interface number 0 [ 134.768216][ T14] usb 2-1: config 16 interface 128 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.778578][ T14] usb 2-1: config 16 interface 128 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.788868][ T14] usb 2-1: config 16 interface 128 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.799507][ T14] usb 2-1: config 16 interface 128 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.813026][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.830963][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.096823][ T14] usb 2-1: GET_CAPABILITIES returned 0 [ 135.102755][ T14] usbtmc 2-1:16.128: can't read capabilities [ 135.311404][ T127] usb 2-1: USB disconnect, device number 4 [ 135.535890][ T5649] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input8 [ 135.805236][ T11] team0 (unregistering): Port device team_slave_1 removed [ 135.887501][ T11] team0 (unregistering): Port device team_slave_0 removed [ 135.977696][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 136.032634][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.166374][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.167113][ T127] wacom 0003:056A:003F.0004: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 136.408882][ T5662] fido_id[5662]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 136.556075][ T5668] loop0: detected capacity change from 0 to 24 [ 136.592936][ T5668] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 136.643745][ T5668] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 136.702232][ T5659] loop3: detected capacity change from 0 to 32768 [ 136.723407][ T5659] XFS (loop3): Mounting V5 Filesystem [ 136.793978][ T5659] XFS (loop3): Ending clean mount [ 137.012036][ T5683] loop1: detected capacity change from 0 to 512 [ 137.049454][ T5683] EXT4-fs: Ignoring removed nobh option [ 137.074164][ T4272] XFS (loop3): Unmounting Filesystem [ 137.161727][ T5683] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.509: invalid indirect mapped block 256 (level 2) [ 137.242893][ T5683] EXT4-fs (loop1): 2 truncates cleaned up [ 137.267428][ T5683] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 137.434990][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 137.448075][ T11] bond0 (unregistering): Released all slaves [ 137.659413][ T26] audit: type=1400 audit(1792502119.475:7): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=5690 comm="syz.3.512" name="//o" offset=76 [ 137.994537][ T5549] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.023410][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.060878][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 138.077310][ T5549] device bridge_slave_0 entered promiscuous mode [ 138.136589][ T5549] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.143831][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.171003][ T5549] device bridge_slave_1 entered promiscuous mode [ 138.305583][ T5549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.338471][ T5549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.480063][ T5549] team0: Port device team_slave_0 added [ 138.558679][ T5549] team0: Port device team_slave_1 added [ 138.574100][ T5689] loop1: detected capacity change from 0 to 32768 [ 138.635051][ T5549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.670634][ T5689] JBD2: Ignoring recovery information on journal [ 138.677437][ T5549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.775285][ T5549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.815242][ T5689] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 138.834784][ T5549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.845491][ T5549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.939958][ T5549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.052545][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 139.150700][ T5549] device hsr_slave_0 entered promiscuous mode [ 139.182379][ T5549] device hsr_slave_1 entered promiscuous mode [ 139.213032][ T5549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.237406][ T5549] Cannot create hsr debugfs directory [ 139.497909][ T5741] device erspan0 entered promiscuous mode [ 139.711566][ T4288] Bluetooth: hci2: unknown advertising packet type: 0x1f [ 139.795616][ T5549] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.833605][ T5549] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.854714][ T5549] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.885816][ T5549] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.965663][ T4274] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.123472][ T5549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.135970][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 140.164543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.176387][ T4274] usb 4-1: Using ep0 maxpacket: 32 [ 140.177330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.189255][ T4274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 140.202655][ T5549] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.224396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.251616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.260334][ T4274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 140.285918][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.293184][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.298157][ T4274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 140.349396][ T4274] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 140.373648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.381117][ T4274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.381148][ T4274] usb 4-1: Product: syz [ 140.381167][ T4274] usb 4-1: Manufacturer: syz [ 140.381184][ T4274] usb 4-1: SerialNumber: syz [ 140.407286][ T4274] usb 4-1: config 0 descriptor?? [ 140.443167][ T4274] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 140.464084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.487118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.504194][ T3622] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 140.526881][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.534079][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.582246][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.616860][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.638961][ T5744] loop1: detected capacity change from 0 to 32768 [ 140.668110][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.703326][ T3622] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 140.742912][ T127] usb 4-1: USB disconnect, device number 3 [ 140.742919][ C0] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 140.778893][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.811801][ T5744] XFS (loop1): Mounting V5 Filesystem [ 140.837511][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.893935][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.903535][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.912502][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.922698][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.962090][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.981451][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.998818][ T5744] XFS (loop1): Ending clean mount [ 141.007494][ T5549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.315086][ T4271] XFS (loop1): Unmounting Filesystem [ 141.401691][ T5778] loop0: detected capacity change from 0 to 512 [ 141.536426][ T5778] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 141.769076][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 142.159844][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.188671][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.203749][ T5801] loop1: detected capacity change from 0 to 2048 [ 142.223131][ T5549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.321376][ T5801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 142.427569][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 142.535977][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 143.200326][ T5841] netlink: 1 bytes leftover after parsing attributes in process `syz.3.554'. [ 143.471035][ T5851] sctp: [Deprecated]: syz.3.558 (pid 5851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.471035][ T5851] Use struct sctp_sack_info instead [ 143.527281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.542717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.596192][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.611276][ T5855] loop0: detected capacity change from 0 to 128 [ 143.626254][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.682909][ T5549] device veth0_vlan entered promiscuous mode [ 143.706346][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.724773][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.740775][ T5549] device veth1_vlan entered promiscuous mode [ 143.859632][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.890441][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 143.903146][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.949091][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.985330][ T5549] device veth0_macvtap entered promiscuous mode [ 144.014574][ T5549] device veth1_macvtap entered promiscuous mode [ 144.048652][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.095816][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.120477][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.142576][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.173002][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.202530][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.225040][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.247055][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.288411][ T5549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.319573][ T5868] netlink: 27 bytes leftover after parsing attributes in process `syz.3.563'. [ 144.337953][ T5870] program syz.0.564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.344131][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.563'. [ 144.376096][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.397462][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.433242][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.457824][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.507292][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.535184][ T5875] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.545638][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.558765][ T5856] loop2: detected capacity change from 0 to 32768 [ 144.575603][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.645205][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.668406][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.679576][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.697158][ T5884] overlayfs: unrecognized mount option "\']*=°¢ÛÎæ[\,\:/¢.@/)&!-(-f)*[=" or missing value [ 144.739328][ T5856] XFS (loop2): Mounting V5 Filesystem [ 144.742807][ T5549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.758147][ T5549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.862426][ T5549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.870595][ T5856] XFS (loop2): Ending clean mount [ 144.923271][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.933288][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.948151][ T5549] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.964422][ T5549] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.011791][ T5856] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 145.037439][ T5549] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.046736][ T5549] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.258870][ T4270] XFS (loop2): Unmounting Filesystem [ 145.309597][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.322248][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.357736][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.428808][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.447006][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.477626][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.757182][ T5913] loop5: detected capacity change from 0 to 256 [ 145.887837][ T5913] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 146.317834][ T5928] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.604068][ T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 146.632622][ T5942] loop3: detected capacity change from 0 to 1024 [ 146.753659][ T5942] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.586: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 146.809803][ T14] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 146.811705][ T5951] loop0: detected capacity change from 0 to 512 [ 146.827507][ T5942] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.586: couldn't read orphan inode 11 (err -117) [ 146.874783][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.916995][ T14] usb 6-1: Product: syz [ 146.921239][ T14] usb 6-1: Manufacturer: syz [ 146.954112][ T5951] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.964431][ T5942] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.020029][ T5951] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.040450][ T14] usb 6-1: SerialNumber: syz [ 147.070796][ T14] usb 6-1: config 0 descriptor?? [ 147.116208][ T14] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 147.137872][ T5942] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.586: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.186952][ T5942] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 147.226875][ T5942] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.586: lblock 0 mapped to illegal pblock 48 (length 1) [ 147.245043][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 147.321871][ T5965] EXT4-fs: Ignoring removed bh option [ 147.327515][ T127] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 147.394591][ T5942] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 147.405912][ T5968] netlink: 'syz.0.593': attribute type 29 has an invalid length. [ 147.414031][ T5968] netlink: 'syz.0.593': attribute type 29 has an invalid length. [ 147.441787][ T5942] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.586: Failed to acquire dquot type 0 [ 147.483439][ T5972] netlink: 'syz.0.593': attribute type 29 has an invalid length. [ 147.526809][ T127] usb 2-1: not running at top speed; connect to a high speed hub [ 147.554122][ T5968] netlink: 'syz.0.593': attribute type 29 has an invalid length. [ 147.563445][ T127] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 147.622937][ T127] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 165, setting to 64 [ 147.664336][ T127] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 147.693817][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.720592][ T127] usb 2-1: Product: syz [ 147.724840][ T127] usb 2-1: Manufacturer: syz [ 147.754975][ T127] usb 2-1: SerialNumber: syz [ 147.775342][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 147.790652][ T5959] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 147.802834][ T4272] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 147.837317][ T127] oti6858 2-1:1.0: oti6858 converter detected [ 147.866312][ T127] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 147.875608][ T4272] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 147.903829][ T4272] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 147.929612][ T5980] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by ""[5980] [ 147.964131][ T127] usb 6-1: USB disconnect, device number 2 [ 148.342895][ T14] usb 2-1: USB disconnect, device number 5 [ 148.376116][ T14] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 148.408068][ T14] oti6858 2-1:1.0: device disconnected [ 149.459413][ T4407] wacom 0003:056A:003F.0005: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 149.657674][ T6028] loop1: detected capacity change from 0 to 1024 [ 149.850529][ T6025] fido_id[6025]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 149.909553][ T6037] loop3: detected capacity change from 0 to 128 [ 149.960398][ T6037] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.027644][ T30] hfsplus: bad catalog file entry [ 150.027841][ T6037] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.353317][ T76] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.733557][ T6062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.624'. [ 150.764078][ T6066] loop3: detected capacity change from 0 to 512 [ 150.882819][ T6066] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.023073][ T6066] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #15: comm syz.3.626: inline data xattr refers to an external xattr inode [ 151.056781][ T6066] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.626: couldn't read orphan inode 15 (err -117) [ 151.135834][ T6066] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 151.419649][ T26] audit: type=1400 audit(1792502133.225:8): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6083 comm="syz.1.632" name="p" offset=48 [ 151.529222][ T6066] EXT4-fs: Ignoring removed bh option [ 151.580603][ T6066] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 151.612946][ T6066] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 151.663716][ T6066] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c018, mo2=0003] [ 151.696786][ T6066] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 151.812641][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 153.179059][ T6114] loop1: detected capacity change from 0 to 32768 [ 153.220106][ T6129] loop0: detected capacity change from 0 to 512 [ 153.290318][ T6129] EXT4-fs: Ignoring removed i_version option [ 153.331174][ T6114] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 153.390568][ T6114] XFS (loop1): Mounting V5 Filesystem [ 153.437390][ T6129] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.557504][ T6129] EXT4-fs (loop0): orphan cleanup on readonly fs [ 153.595593][ T6114] XFS (loop1): Ending clean mount [ 153.620094][ T6114] XFS (loop1): Quotacheck needed: Please wait. [ 153.694127][ T6129] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 153.782015][ T6114] XFS (loop1): Quotacheck: Done. [ 153.838772][ T6129] Quota error (device loop0): write_blk: dquota write failed [ 153.888851][ T6129] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 154.001253][ T6129] Quota error (device loop0): write_blk: dquota write failed [ 154.063613][ T6129] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 154.112583][ T4271] XFS (loop1): Unmounting Filesystem [ 154.135029][ T6129] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.646: Failed to acquire dquot type 1 [ 154.202714][ T6129] EXT4-fs (loop0): 1 truncate cleaned up [ 154.314303][ T6129] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 154.445667][ T6129] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.647399][ T6169] loop2: detected capacity change from 0 to 512 [ 154.743707][ T6169] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.657: iget: bad i_size value: 38620345925642 [ 154.767474][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 154.794372][ T6139] loop5: detected capacity change from 0 to 32768 [ 154.885651][ T6169] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.657: couldn't read orphan inode 15 (err -117) [ 154.913553][ T6139] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 154.924983][ T6169] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.979080][ T26] audit: type=1800 audit(1792502136.785:9): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.657" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 155.033690][ T6169] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.657: bg 0: block 5: invalid block bitmap [ 155.244946][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 155.401965][ T6139] syz.5.649 (6139) used greatest stack depth: 18624 bytes left [ 155.601206][ T5549] ocfs2: Unmounting device (7,5) on (node local) [ 155.828171][ T6194] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 155.935957][ T6194] overlayfs: overlapping lowerdir path [ 156.249595][ T6205] Falling back ldisc for ttyS3. [ 156.299665][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 156.329177][ T6207] device bridge_slave_1 left promiscuous mode [ 156.354994][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.401138][ T6207] device bridge_slave_0 left promiscuous mode [ 156.415693][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.269623][ T6230] loop0: detected capacity change from 0 to 512 [ 157.333584][ T6230] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.365090][ T6230] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.676: bad orphan inode 131083 [ 157.387250][ T6230] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 157.616600][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 158.146487][ T6254] netlink: 'syz.1.688': attribute type 9 has an invalid length. [ 158.154208][ T6254] netlink: 668 bytes leftover after parsing attributes in process `syz.1.688'. [ 158.222345][ T6258] Zero length message leads to an empty skb [ 158.568219][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'. [ 158.865604][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.022352][ T6245] loop0: detected capacity change from 0 to 32768 [ 159.051107][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 159.060953][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.133894][ T14] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 159.166409][ T14] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 159.178904][ T14] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 159.192691][ T14] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.206327][ T14] usb 4-1: config 1 interface 1 has no altsetting 0 [ 159.282595][ T14] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 159.355772][ T6245] XFS (loop0): Mounting V5 Filesystem [ 159.373848][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.409104][ T14] usb 4-1: Product: syz [ 159.445648][ T14] usb 4-1: Manufacturer: syz [ 159.450328][ T14] usb 4-1: SerialNumber: syz [ 159.603420][ T6245] XFS (loop0): Ending clean mount [ 159.730420][ T14] usb 4-1: selecting invalid altsetting 0 [ 159.772677][ T4274] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 159.810593][ T4274] XFS (loop0): Unmount and run xfs_repair [ 159.834194][ T4274] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 159.860343][ T4274] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 159.884107][ T4274] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 159.913432][ T4274] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 159.943154][ T4274] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 159.952935][ T14] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 159.985158][ T4274] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 160.006891][ T4274] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.027867][ T4274] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.062325][ T4274] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.093224][ T6245] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 160.166269][ T6245] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54f/0x9c0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 160.183640][ T14] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 160.212653][ T6295] loop1: detected capacity change from 0 to 32768 [ 160.271122][ T14] usb 4-1: USB disconnect, device number 4 [ 160.326831][ T6245] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 160.364359][ T6295] XFS (loop1): Mounting V5 Filesystem [ 160.489525][ T6295] XFS (loop1): Ending clean mount [ 160.553881][ T4273] XFS (loop0): Unmounting Filesystem [ 160.610011][ T4609] udevd[4609]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.700101][ T6325] loop2: detected capacity change from 0 to 1024 [ 160.726513][ T6325] ext4: Bad value for 'sb' [ 160.823147][ T4271] XFS (loop1): Unmounting Filesystem [ 160.836896][ T6327] loop5: detected capacity change from 0 to 2048 [ 160.928034][ T6327] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.111995][ T4274] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.296383][ T4274] usb 3-1: Using ep0 maxpacket: 32 [ 162.303457][ T4274] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 162.314508][ T4274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.344505][ T4274] usb 3-1: config 0 descriptor?? [ 162.358497][ T4274] gspca_main: sunplus-2.14.0 probing 041e:400b [ 163.016084][ T6406] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.183459][ T4274] gspca_sunplus: reg_r err -71 [ 163.201093][ T4274] sunplus: probe of 3-1:0.0 failed with error -71 [ 163.239619][ T4274] usb 3-1: USB disconnect, device number 4 [ 163.678967][ T6430] process 'syz.5.754' launched './file0' with NULL argv: empty string added [ 164.496769][ T26] audit: type=1400 audit(1792502146.305:10): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6456 comm="syz.0.765" name="unknown" offset=16 [ 164.533096][ T6460] Bluetooth: MGMT ver 1.22 [ 165.248740][ T6449] loop3: detected capacity change from 0 to 32768 [ 165.278321][ T6449] XFS (loop3): Mounting V5 Filesystem [ 165.326643][ T6449] XFS (loop3): Ending clean mount [ 165.374650][ T6449] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 165.560554][ T4272] XFS (loop3): Unmounting Filesystem [ 165.643622][ T6502] loop2: detected capacity change from 0 to 4096 [ 165.798821][ T6502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.831963][ T6509] loop0: detected capacity change from 0 to 512 [ 165.862881][ T6502] EXT4-fs (loop2): shut down requested (2) [ 165.940299][ T6509] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 165.967723][ T6509] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.085817][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 166.209807][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 167.255807][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 167.630408][ T6559] loop5: detected capacity change from 0 to 4096 [ 167.688482][ T6559] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 167.733217][ T6559] EXT4-fs (loop5): shut down requested (2) [ 167.786238][ T6572] netlink: 68 bytes leftover after parsing attributes in process `syz.3.798'. [ 167.933277][ T5549] EXT4-fs (loop5): unmounting filesystem. [ 168.624179][ T6604] input: syz1 as /devices/virtual/input/input16 [ 168.826353][ T6612] rnbd_client L211: map_device: Parameters missing [ 168.888227][ T6616] ALSA: mixer_oss: invalid OSS volume 'nused' [ 169.128414][ T6628] loop5: detected capacity change from 0 to 512 [ 169.230402][ T6628] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 169.268830][ T6631] program syz.0.821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.293208][ T6628] EXT4-fs (loop5): 1 truncate cleaned up [ 169.305743][ T6628] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 169.361280][ T26] audit: type=1800 audit(1792502151.165:11): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.820" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 169.478099][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'. [ 169.493297][ T5549] EXT4-fs (loop5): unmounting filesystem. [ 169.803201][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 169.845660][ T4278] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 169.908888][ T6652] device batadv0 entered promiscuous mode [ 169.929765][ T6652] device macsec1 entered promiscuous mode [ 169.952001][ T6652] device batadv0 left promiscuous mode [ 170.043685][ T6661] bond0: (slave bond_slave_0): Releasing backup interface [ 170.052352][ T4278] usb 1-1: Using ep0 maxpacket: 32 [ 170.064335][ T4278] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 170.093926][ T4278] usb 1-1: config 0 has no interface number 0 [ 170.129722][ T4278] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 170.153886][ T4278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.184235][ T4278] usb 1-1: Product: syz [ 170.205719][ T4278] usb 1-1: Manufacturer: syz [ 170.210484][ T4278] usb 1-1: SerialNumber: syz [ 170.250954][ T4278] usb 1-1: config 0 descriptor?? [ 170.282428][ T4278] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 170.362156][ T6668] vivid-000: disconnect [ 170.373208][ T6667] vivid-000: reconnect [ 170.480023][ T4286] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 170.486749][ T4286] Bluetooth: Wrong link type (-22) [ 170.494378][ T4286] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 170.502775][ T4286] Bluetooth: Wrong link type (-22) [ 170.508160][ T4286] Bluetooth: hci3: link tx timeout [ 170.514075][ T4286] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.525543][ T4278] usb 1-1: qt2_attach - failed to power on unit: -71 [ 170.532453][ T4278] quatech2: probe of 1-1:0.51 failed with error -71 [ 170.549168][ T4278] usb 1-1: USB disconnect, device number 5 [ 171.225927][ T6699] loop3: detected capacity change from 0 to 256 [ 171.364787][ T6704] netlink: 71 bytes leftover after parsing attributes in process `syz.2.847'. [ 171.840811][ T6717] IPv6: addrconf: prefix option has invalid lifetime [ 172.153062][ T6726] futex_wake_op: syz.5.856 tries to shift op by -1; fix this program [ 172.615748][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 172.665560][ T6741] bond0: no command found in slaves file - use +ifname or -ifname [ 172.683700][ T6739] loop3: detected capacity change from 0 to 1024 [ 173.135882][ T6758] ALSA: mixer_oss: invalid OSS volume 'nused' [ 173.218152][ T6760] loop3: detected capacity change from 0 to 4096 [ 173.338053][ T6764] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.470762][ T6769] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 173.853134][ T6783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.874'. [ 173.999328][ T6779] loop2: detected capacity change from 0 to 8192 [ 174.053701][ T6779] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 174.085513][ T6779] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 174.094809][ T6779] REISERFS (device loop2): using ordered data mode [ 174.166818][ T6779] reiserfs: using flush barriers [ 174.173272][ T6779] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.196019][ T6779] REISERFS (device loop2): checking transaction log (loop2) [ 174.473775][ T6779] REISERFS (device loop2): Using tea hash to sort names [ 174.490125][ T6779] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 174.766108][ T6779] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=3171692, len=3 - odd [ 174.920250][ T6818] loop5: detected capacity change from 0 to 512 [ 175.012218][ T6818] EXT4-fs (loop5): 1 truncate cleaned up [ 175.072205][ T6818] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 175.285098][ T5549] EXT4-fs (loop5): unmounting filesystem. [ 175.512514][ T6837] loop5: detected capacity change from 0 to 256 [ 175.560777][ T6837] exfat: Deprecated parameter 'utf8' [ 175.583801][ T6839] __sock_release: fasync list not empty! [ 175.586854][ T6837] exfat: Deprecated parameter 'namecase' [ 175.604697][ T6837] exfat: Deprecated parameter 'namecase' [ 175.614837][ T6837] exfat: Deprecated parameter 'namecase' [ 175.680121][ T6837] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 175.951464][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 176.298608][ T6864] netlink: 165 bytes leftover after parsing attributes in process `syz.0.900'. [ 176.343269][ T6863] loop3: detected capacity change from 0 to 2048 [ 176.996882][ T6886] netlink: 'syz.3.907': attribute type 3 has an invalid length. [ 177.734391][ T6874] loop0: detected capacity change from 0 to 40427 [ 177.796530][ T6874] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 177.825537][ T6874] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 177.881055][ T6874] F2FS-fs (loop0): Found nat_bits in checkpoint [ 177.892992][ T6916] netlink: 52 bytes leftover after parsing attributes in process `syz.3.916'. [ 178.084854][ T6874] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 178.135554][ T6874] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 178.245326][ T6928] netlink: 'syz.2.918': attribute type 11 has an invalid length. [ 178.657045][ T6867] loop1: detected capacity change from 0 to 40427 [ 178.719314][ T6867] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 178.825839][ T6867] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 178.920288][ T6867] F2FS-fs (loop1): invalid crc value [ 178.982147][ T6867] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.234086][ T6867] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 179.320037][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.925'. [ 179.344925][ T6956] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 179.801857][ T6975] loop0: detected capacity change from 0 to 512 [ 179.820760][ T6978] loop5: detected capacity change from 0 to 128 [ 179.831160][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.936'. [ 179.868427][ T6975] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 179.898672][ T6978] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 179.929815][ T6975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 179.990681][ T6975] System zones: 1-12 [ 180.025574][ T14] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 180.033828][ T6975] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.935: bad orphan inode 131072 [ 180.075138][ T6984] sctp: [Deprecated]: syz.3.938 (pid 6984) Use of int in max_burst socket option deprecated. [ 180.075138][ T6984] Use struct sctp_assoc_value instead [ 180.096227][ T6975] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 180.141634][ T6975] overlayfs: upper fs needs to support d_type. [ 180.151427][ T6978] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 180.197416][ T4273] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /200/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 180.228253][ T14] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 180.245506][ T14] usb 3-1: config 0 has no interface number 0 [ 180.252645][ T14] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 180.264199][ T14] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 180.285693][ T6978] ext2 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.301606][ T14] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 180.322540][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.352904][ T14] usb 3-1: config 0 descriptor?? [ 180.375570][ T6973] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.413802][ T14] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 180.634978][ T5549] EXT4-fs (loop5): unmounting filesystem. [ 180.690399][ T4349] usb 3-1: USB disconnect, device number 5 [ 180.867025][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 180.956992][ T6999] loop5: detected capacity change from 0 to 4096 [ 181.063652][ T6999] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 181.107858][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.136481][ T6999] EXT4-fs (loop5): shut down requested (0) [ 181.396948][ T5549] EXT4-fs (loop5): unmounting filesystem. [ 181.426318][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.627124][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.848292][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.539808][ T7037] loop2: detected capacity change from 0 to 64 [ 182.610263][ T26] audit: type=1400 audit(1792502420.420:12): apparmor="STATUS" operation="profile_load" profile="unconfined" name=":" pid=7034 comm="syz.3.955" [ 182.857461][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.873482][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.882481][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.893146][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.905736][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 182.913432][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.103237][ T7039] rxe_eth0 speed is unknown, defaulting to 1000 [ 183.398096][ T7059] tipc: Started in network mode [ 183.405118][ T7059] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 183.446569][ T7059] tipc: Enabled bearer , priority 0 [ 184.181308][ T7074] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 184.532603][ T7039] chnl_net:caif_netlink_parms(): no params data found [ 184.577823][ T14] tipc: Node number set to 43690 [ 184.902892][ T7103] tipc: Started in network mode [ 184.921788][ T7103] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 184.935740][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 184.946050][ T7103] tipc: Enabled bearer , priority 0 [ 185.429678][ T26] audit: type=1326 audit(1792502423.240:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.5.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f5b9f559 code=0x7ffc0000 [ 185.482649][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.520503][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.525650][ T26] audit: type=1326 audit(1792502423.310:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.5.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f64f5b9f559 code=0x7ffc0000 [ 185.573106][ T7039] device bridge_slave_0 entered promiscuous mode [ 185.613884][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.641014][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.657547][ T26] audit: type=1326 audit(1792502423.310:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.5.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f5b9f559 code=0x7ffc0000 [ 185.676618][ T7039] device bridge_slave_1 entered promiscuous mode [ 185.722779][ T26] audit: type=1326 audit(1792502423.310:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.5.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f64f5b9f559 code=0x7ffc0000 [ 185.756277][ T30] device hsr_slave_0 left promiscuous mode [ 185.777985][ T30] device hsr_slave_1 left promiscuous mode [ 185.795116][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.816228][ T7136] loop5: detected capacity change from 0 to 128 [ 185.823477][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.826157][ T26] audit: type=1326 audit(1792502423.320:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.5.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f5b9f559 code=0x7ffc0000 [ 185.856303][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.895784][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.901440][ T7136] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 185.951119][ T30] device bridge_slave_1 left promiscuous mode [ 185.957672][ T26] audit: type=1326 audit(1792502423.340:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.5.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f64f5b9f559 code=0x7ffc0000 [ 185.969515][ T7136] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.993280][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.026080][ T30] device bridge_slave_0 left promiscuous mode [ 186.037595][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.096118][ T26] audit: type=1326 audit(1792502423.340:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.5.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f5b9f559 code=0x7ffc0000 [ 186.190386][ T30] device veth1_macvtap left promiscuous mode [ 186.197138][ T7149] loop3: detected capacity change from 0 to 128 [ 186.199385][ T30] device veth0_macvtap left promiscuous mode [ 186.215823][ T30] device veth1_vlan left promiscuous mode [ 186.222071][ T30] device veth0_vlan left promiscuous mode [ 186.260617][ T7149] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 186.296730][ T7149] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.328705][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.489679][ T5549] EXT4-fs (loop5): unmounting filesystem. [ 186.610169][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 186.763073][ T7164] ip_tables: iptables: counters copy to user failed while replacing table [ 187.025841][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 187.459877][ T7170] loop3: detected capacity change from 0 to 32768 [ 188.103885][ T7188] sg_write: data in/out 19942/1 bytes for SCSI command 0x32-- guessing data in; [ 188.103885][ T7188] program syz.5.1005 not setting count and/or reply_len properly [ 188.122764][ T7194] io-wq is not configured for unbound workers [ 188.386651][ T30] team0 (unregistering): Port device team_slave_1 removed [ 188.553591][ T30] team0 (unregistering): Port device team_slave_0 removed [ 188.636153][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.712227][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.105703][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 189.188127][ T30] bond0 (unregistering): Released all slaves [ 189.272257][ T4357] tipc: Node number set to 43690 [ 189.325836][ T7209] smc: net device bridge_slave_0 applied user defined pnetid SYZ1 [ 189.387473][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.430142][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.526734][ T7039] team0: Port device team_slave_0 added [ 189.571789][ T7039] team0: Port device team_slave_1 added [ 189.758290][ T7223] loop1: detected capacity change from 0 to 1024 [ 189.793109][ T7223] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 190.125950][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.132970][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.230062][ T7039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.284034][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.335936][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.432049][ T7039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.499134][ T7243] loop1: detected capacity change from 0 to 512 [ 190.537036][ T7243] EXT4-fs: Ignoring removed orlov option [ 190.601817][ T7243] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.649102][ T7243] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.673219][ T7039] device hsr_slave_0 entered promiscuous mode [ 190.701924][ T7039] device hsr_slave_1 entered promiscuous mode [ 190.728402][ T7243] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.1024: corrupted in-inode xattr [ 190.744177][ T7039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.797347][ T7243] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1024: couldn't read orphan inode 15 (err -117) [ 190.809593][ T7039] Cannot create hsr debugfs directory [ 190.872542][ T7243] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 190.895617][ T4407] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 191.080657][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 191.100453][ T4407] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 191.141727][ T4407] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 191.164215][ T4407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 191.176794][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 191.214183][ T4407] usb 3-1: Product: syz [ 191.234420][ T4407] usb 3-1: Manufacturer: syz [ 191.471197][ T7039] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 191.504889][ T7039] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 191.555275][ T7039] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 191.602520][ T7039] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 191.903362][ T7039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.967336][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.989148][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.030511][ T7039] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.064764][ T4407] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input17 [ 192.074656][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.083789][ T127] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 192.096417][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.115368][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.122582][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.172122][ T4407] usb 3-1: USB disconnect, device number 6 [ 192.190935][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.224191][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.244242][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.274869][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.282086][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.297166][ T127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 192.330165][ T127] usb 6-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 192.366214][ T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.374932][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.398751][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.438671][ T127] usb 6-1: config 0 descriptor?? [ 192.448645][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.480574][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.524292][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.547923][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.577052][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.608625][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.626508][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.702267][ T7039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.749396][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.794892][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.819555][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.868262][ T7292] 9p: Unknown Cache mode readahead [ 192.877699][ T127] logitech 0003:046D:C20A.0006: unknown main item tag 0x0 [ 192.895147][ T127] logitech 0003:046D:C20A.0006: unknown main item tag 0x0 [ 192.926357][ T127] logitech 0003:046D:C20A.0006: unknown main item tag 0x0 [ 192.965731][ T127] logitech 0003:046D:C20A.0006: unknown main item tag 0x0 [ 192.993317][ T127] logitech 0003:046D:C20A.0006: unknown main item tag 0x0 [ 193.023036][ T127] logitech 0003:046D:C20A.0006: unknown main item tag 0x0 [ 193.035622][ T127] logitech 0003:046D:C20A.0006: unknown main item tag 0x0 [ 193.063226][ T127] logitech 0003:046D:C20A.0006: unknown main item tag 0x0 [ 193.108622][ T127] logitech 0003:046D:C20A.0006: hidraw0: USB HID v0.00 Device [HID 046d:c20a] on usb-dummy_hcd.5-1/input0 [ 193.155542][ T127] logitech 0003:046D:C20A.0006: no inputs found [ 193.214398][ T127] usb 6-1: USB disconnect, device number 3 [ 193.354561][ T7304] loop1: detected capacity change from 0 to 512 [ 193.462993][ T7301] fido_id[7301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 193.482653][ T7304] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 193.570575][ T7304] EXT4-fs (loop1): 1 truncate cleaned up [ 193.600508][ T7304] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.792413][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 193.972887][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.011367][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.033963][ T7323] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1044'. [ 194.064391][ T7039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.218511][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.224902][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.036061][ T7358] loop2: detected capacity change from 0 to 1024 [ 195.144621][ T7358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 195.175759][ T7358] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.230202][ T7358] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.1056: Freeing blocks not in datazone - block = 0, count = 16 [ 195.277536][ T7369] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1058'. [ 195.433230][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.449511][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.489068][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.508185][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.528658][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 195.593014][ T7039] device veth0_vlan entered promiscuous mode [ 195.628676][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.644402][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.670552][ T7039] device veth1_vlan entered promiscuous mode [ 195.717846][ T26] audit: type=1400 audit(1792502433.530:20): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7378 comm="syz.2.1061" name="unknown" offset=16 [ 195.744912][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.754522][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.763797][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.776221][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.789057][ T7039] device veth0_macvtap entered promiscuous mode [ 195.819349][ T7039] device veth1_macvtap entered promiscuous mode [ 195.878564][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.915612][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.942995][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.964201][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.989687][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.002809][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.013271][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.034425][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.070222][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.108400][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.127515][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.148381][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.183175][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.214621][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.236176][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.255592][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.277241][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.307925][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.339986][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.368369][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.419651][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.442383][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.480983][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.522591][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.570827][ T7039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.595584][ T7039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.624762][ T7039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.675532][ T7039] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.721118][ T7402] loop1: detected capacity change from 0 to 2048 [ 196.828271][ T7402] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 196.887688][ T7408] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.899798][ T7402] syz.1.1069: attempt to access beyond end of device [ 196.899798][ T7402] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 196.988587][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.026632][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.057085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.157020][ T7412] tap0: tun_chr_ioctl cmd 2147767517 [ 197.164981][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.193566][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.222005][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.521800][ T7423] loop2: detected capacity change from 0 to 512 [ 197.638330][ T7423] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 197.688168][ T7423] FAT-fs (loop2): Filesystem has been set read-only [ 197.766849][ T7432] loop5: detected capacity change from 0 to 22 [ 197.815274][ T7432] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 197.925835][ T7432] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 198.255639][ T4371] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 198.474422][ T4371] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 198.504128][ T4371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.522347][ T7425] loop6: detected capacity change from 0 to 32768 [ 198.542075][ T7456] netlink: 'syz.3.1089': attribute type 21 has an invalid length. [ 198.560530][ T7456] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1089'. [ 198.569954][ T4371] usb 3-1: config 0 descriptor?? [ 198.611419][ T7458] netlink: 'syz.3.1089': attribute type 21 has an invalid length. [ 198.628182][ T7425] JBD2: Ignoring recovery information on journal [ 198.645650][ T7458] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1089'. [ 198.722960][ T7425] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 199.055657][ T4371] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 199.093698][ T4371] [drm] Initialized udl on minor 2 [ 199.126424][ T7468] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.155048][ T7039] ocfs2: Unmounting device (7,6) on (node local) [ 199.198786][ T4371] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 199.227455][ T4371] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 199.477620][ T4371] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 199.486773][ T127] usb 3-1: USB disconnect, device number 7 [ 199.505694][ T7445] loop5: detected capacity change from 0 to 32768 [ 199.524959][ T4371] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 199.576239][ T4357] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 199.597036][ T4371] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 199.610494][ T7445] JBD2: Ignoring recovery information on journal [ 199.718171][ T7445] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 199.765785][ T4357] usb 2-1: Using ep0 maxpacket: 32 [ 199.773059][ T4357] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 199.845489][ T4357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.887751][ T4357] usb 2-1: config 0 descriptor?? [ 200.081921][ T5549] ocfs2: Unmounting device (7,5) on (node local) [ 200.100939][ T4357] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 200.157695][ T4357] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.214164][ T4357] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 200.254614][ T4357] usb 2-1: media controller created [ 200.376822][ T4357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.442563][ T7483] loop2: detected capacity change from 0 to 22 [ 200.500999][ T7483] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 200.510897][ T4357] az6027: usb out operation failed. (-71) [ 200.549655][ T4357] az6027: usb out operation failed. (-71) [ 200.571518][ T7483] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 200.576547][ T4357] stb0899_attach: Driver disabled by Kconfig [ 200.625735][ T4357] az6027: no front-end attached [ 200.625735][ T4357] [ 200.668748][ T4357] az6027: usb out operation failed. (-71) [ 200.692025][ T4357] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 200.719035][ T4357] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 200.781554][ T4357] dvb-usb: schedule remote query interval to 400 msecs. [ 200.800141][ T4357] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 200.870755][ T4357] usb 2-1: USB disconnect, device number 6 [ 200.905883][ T955] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 200.925053][ T7493] cougar: G6 mapped to space [ 201.064158][ T4357] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 201.107578][ T955] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 201.138754][ T955] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 201.187244][ T7502] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1103'. [ 201.187258][ T7504] kAFS: bad VL server IP address [ 201.206160][ T955] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 201.223511][ T955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.700751][ T955] lg-g15 0003:046D:C222.0007: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 201.786669][ T7520] loop6: detected capacity change from 0 to 512 [ 201.835955][ T955] lg-g15 0003:046D:C222.0007: Error -90 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 201.849054][ T7520] EXT4-fs: Ignoring removed bh option [ 201.881551][ T7520] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 201.921092][ T127] usb 4-1: USB disconnect, device number 5 [ 201.993804][ T7520] EXT4-fs (loop6): 1 truncate cleaned up [ 202.022294][ T7520] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 202.261037][ T7523] fido_id[7523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 202.339023][ T7039] EXT4-fs (loop6): unmounting filesystem. [ 202.563482][ T7508] loop2: detected capacity change from 0 to 32768 [ 202.938107][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1112'. [ 203.374092][ T26] audit: type=1807 audit(1792502441.180:21): UNKNOWN=? res=0 [ 203.387111][ T26] audit: type=1802 audit(1792502441.200:22): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1118" res=0 errno=0 [ 203.407279][ T7548] ima: policy update failed [ 203.439300][ T26] audit: type=1802 audit(1792502441.220:23): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1118" res=0 errno=0 [ 203.565669][ T4407] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 203.758831][ T4407] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 203.780174][ T4407] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.829256][ T4407] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 203.871451][ T4407] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 203.911507][ T4407] usb 7-1: Product: syz [ 203.935895][ T4407] usb 7-1: Manufacturer: syz [ 203.963850][ T4407] hub 7-1:4.0: USB hub found [ 204.067055][ T26] audit: type=1400 audit(1792502441.880:24): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=7569 comm="syz.2.1123" name="p" offset=64 [ 204.177912][ T4407] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 204.331528][ T7573] loop2: detected capacity change from 0 to 2048 [ 204.348431][ T7575] input: syz1 as /devices/virtual/input/input20 [ 204.408085][ T7573] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 204.463791][ T7573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.566486][ T127] usb 7-1: USB disconnect, device number 2 [ 205.026851][ T7589] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 205.057595][ T7592] loop3: detected capacity change from 0 to 256 [ 205.712621][ T7616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 206.028067][ T7628] Bluetooth: ISO socket layer initialized [ 206.055821][ T4349] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 206.251030][ T4349] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 206.265583][ T4349] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.274440][ T4349] usb 7-1: Product: syz [ 206.290009][ T4349] usb 7-1: Manufacturer: syz [ 206.300335][ T4349] usb 7-1: SerialNumber: syz [ 206.383093][ T4357] kernel write not supported for file /sg0 (pid: 4357 comm: kworker/1:4) [ 206.535657][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 206.997992][ T4349] rtl8150 7-1:1.0: eth9: rtl8150 is detected [ 207.162921][ T4357] usb 7-1: USB disconnect, device number 3 [ 207.808241][ T7652] loop3: detected capacity change from 0 to 32768 [ 208.034147][ T7652] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 208.291756][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 208.977657][ T7716] netlink: 'syz.5.1178': attribute type 9 has an invalid length. [ 209.864655][ T7735] serio: Serial port ptm1 [ 211.171214][ T7783] loop6: detected capacity change from 0 to 256 [ 211.270506][ T7783] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 211.428030][ T26] audit: type=1800 audit(1792502449.240:25): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1200" name="file1" dev="loop6" ino=1048692 res=0 errno=0 [ 212.279825][ T7809] loop6: detected capacity change from 0 to 16 [ 212.345350][ T7809] erofs: (device loop6): mounted with root inode @ nid 36. [ 212.480926][ T7809] syz.6.1208: attempt to access beyond end of device [ 212.480926][ T7809] loop6: rw=0, sector=34225530872, nr_sectors = 8 limit=16 [ 212.544759][ T7809] syz.6.1208: attempt to access beyond end of device [ 212.544759][ T7809] loop6: rw=0, sector=34225530872, nr_sectors = 8 limit=16 [ 213.012571][ T7668] Set syz0 is full, maxelem 65536 reached [ 213.529389][ T7846] loop1: detected capacity change from 0 to 128 [ 213.567139][ T7846] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 213.963968][ T4374] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 214.328042][ T7840] loop6: detected capacity change from 0 to 32768 [ 214.500253][ T7840] find_entry called with index = 0 [ 214.572555][ T7840] read_mapping_page failed! [ 214.592999][ T7840] ERROR: (device loop6): txCommit: [ 214.592999][ T7840] [ 214.743845][ T109] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 214.768794][ T109] ------------[ cut here ]------------ [ 214.774357][ T109] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 214.777424][ T7851] loop5: detected capacity change from 0 to 32768 [ 214.822239][ T109] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 214.828406][ T109] CPU: 0 PID: 109 Comm: jfsCommit Not tainted syzkaller #0 [ 214.835644][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.845754][ T109] RIP: 0010:txUnlock+0xc7d/0xcb0 [ 214.850756][ T109] Code: e9 c5 33 07 0f 0b e8 f2 55 8d fe 48 c7 c7 80 3f c6 8a 48 c7 c6 69 3b c6 8a ba a4 03 00 00 48 c7 c1 60 4c c6 8a e8 c3 c5 33 07 <0f> 0b e8 cc 55 8d fe 48 c7 c7 80 3f c6 8a 48 c7 c6 69 3b c6 8a ba [ 214.870406][ T109] RSP: 0018:ffffc90002d97d30 EFLAGS: 00010246 [ 214.876562][ T109] RAX: 0000000000000037 RBX: 0000000000000000 RCX: 8331ab93a0df4100 [ 214.884647][ T109] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 214.892701][ T109] RBP: ffff8880557736c8 R08: ffffc90002d97a27 R09: 1ffff920005b2f44 [ 214.900736][ T109] R10: dffffc0000000000 R11: fffff520005b2f45 R12: ffffc900028ea168 [ 214.908761][ T109] R13: dffffc0000000000 R14: 000000000000002d R15: ffff8880777e1a94 [ 214.916782][ T109] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 214.925762][ T109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.932398][ T109] CR2: 000055555a2a3a38 CR3: 000000005ac10000 CR4: 00000000003506f0 [ 214.940449][ T109] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.948462][ T109] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.956471][ T109] Call Trace: [ 214.959789][ T109] [ 214.962752][ T109] ? _raw_spin_lock_irqsave+0x100/0x100 [ 214.968350][ T109] ? lockdep_hardirqs_on+0x94/0x140 [ 214.973601][ T109] jfs_lazycommit+0x588/0xa90 [ 214.978330][ T109] ? txFreelock+0x5a0/0x5a0 [ 214.982874][ T109] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 214.988815][ T109] ? do_task_dead+0xd0/0xd0 [ 214.993367][ T109] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 214.999288][ T109] ? __kthread_parkme+0x71/0x1c0 [ 215.004258][ T109] ? __kthread_parkme+0x15b/0x1c0 [ 215.009314][ T109] kthread+0x29d/0x330 [ 215.013412][ T109] ? txFreelock+0x5a0/0x5a0 [ 215.017941][ T109] ? kthread_blkcg+0xd0/0xd0 [ 215.022565][ T109] ret_from_fork+0x1f/0x30 [ 215.027026][ T109] [ 215.030077][ T109] Modules linked in: [ 215.064144][ T7851] JBD2: Ignoring recovery information on journal [ 215.136836][ T7851] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 215.195995][ T109] ---[ end trace 0000000000000000 ]--- [ 215.201635][ T109] RIP: 0010:txUnlock+0xc7d/0xcb0 [ 215.211927][ T109] Code: e9 c5 33 07 0f 0b e8 f2 55 8d fe 48 c7 c7 80 3f c6 8a 48 c7 c6 69 3b c6 8a ba a4 03 00 00 48 c7 c1 60 4c c6 8a e8 c3 c5 33 07 <0f> 0b e8 cc 55 8d fe 48 c7 c7 80 3f c6 8a 48 c7 c6 69 3b c6 8a ba [ 215.260356][ T109] RSP: 0018:ffffc90002d97d30 EFLAGS: 00010246 [ 215.269064][ T5549] ocfs2: Unmounting device (7,5) on (node local) [ 215.285561][ T109] RAX: 0000000000000037 RBX: 0000000000000000 RCX: 8331ab93a0df4100 [ 215.304429][ T109] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 215.325512][ T109] RBP: ffff8880557736c8 R08: ffffc90002d97a27 R09: 1ffff920005b2f44 [ 215.333906][ T109] R10: dffffc0000000000 R11: fffff520005b2f45 R12: ffffc900028ea168 [ 215.365683][ T109] R13: dffffc0000000000 R14: 000000000000002d R15: ffff8880777e1a94 [ 215.373753][ T109] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 215.395474][ T109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.402154][ T109] CR2: 00005555727c4a38 CR3: 000000007d56a000 CR4: 00000000003506e0 [ 215.425492][ T109] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.433824][ T109] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 215.455792][ T109] Kernel panic - not syncing: Fatal exception [ 215.462528][ T109] Kernel Offset: disabled [ 215.466905][ T109] Rebooting in 86400 seconds..