last executing test programs: 5.586233053s ago: executing program 2 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 5.406093975s ago: executing program 2 (id=451): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x80300000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, 0x1c) 4.546530772s ago: executing program 0 (id=453): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x2, "d3dc2bea"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x0, 0x2, 0x2}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 4.407808671s ago: executing program 2 (id=454): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000780)={0x20, 0x16, 0x2, "2fa6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.73861326s ago: executing program 3 (id=462): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000000, 0x4132, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000e40)=0x3, 0x4) 2.664298895s ago: executing program 3 (id=464): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 2.562075282s ago: executing program 3 (id=465): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 2.226527194s ago: executing program 0 (id=469): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x210c00, &(0x7f0000001480)=ANY=[], 0x0, 0x1b8, &(0x7f0000000780)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 2.095700913s ago: executing program 1 (id=470): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000003c0)) 1.962091641s ago: executing program 1 (id=471): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000180)={0x0, 0xfbfffffe}) 1.863578628s ago: executing program 0 (id=472): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 1.730217876s ago: executing program 1 (id=473): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, r0, 0x325, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x1, 0xf}, @void, @val={0xc, 0x99, {0x8, 0x4c}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x11}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x20000}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.728615486s ago: executing program 0 (id=481): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) 1.52057852s ago: executing program 1 (id=474): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x27ff, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.51981601s ago: executing program 0 (id=483): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 1.420130337s ago: executing program 3 (id=475): r0 = fsopen(&(0x7f0000000240)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='seclabel', &(0x7f00000000c0)='<', 0x1) 1.22654689s ago: executing program 2 (id=476): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f00000024c0)={0x20, r1, 0x1, 0x0, &(0x7f0000004c40)=[{}]}) 1.22143041s ago: executing program 0 (id=486): syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x104) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x3e3) 1.093783158s ago: executing program 2 (id=477): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff0ff447cd9caded4abf65767e9dbbd7b5841a8ce3eae5cb5abfd7d4fb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e0000000000000000000000b5ff5bb6b1fa869800651587af", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1aca438, &(0x7f00000008c0)=ANY=[], 0x9, 0x0, &(0x7f0000000000)) 910.64811ms ago: executing program 1 (id=478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x3}) 620.513589ms ago: executing program 3 (id=479): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x10, 0x0, 0x36c}, &(0x7f0000000040), &(0x7f00000007c0)) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 460.30403ms ago: executing program 3 (id=480): syz_read_part_table(0x5d5, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) sendfile(r0, r0, 0x0, 0x80000000b) 907.49µs ago: executing program 2 (id=482): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) 0s ago: executing program 1 (id=492): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000100)=""/97, 0x61}], 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 80.815601][ T5774] cgroup: Unknown subsys name 'net' [ 80.957753][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.802563][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.480421][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.480421][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.482418][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.489756][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.496548][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.503137][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.510224][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.516394][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.523398][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.531553][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.538762][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.558354][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.567004][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.575271][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.592908][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.600810][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.602238][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.608248][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.615879][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.622206][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.634737][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.637209][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.644422][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.658235][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.121287][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 85.283594][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 85.304813][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 85.371547][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.380984][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.388424][ T5792] bridge_slave_0: entered allmulticast mode [ 85.396065][ T5792] bridge_slave_0: entered promiscuous mode [ 85.406503][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.414879][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.422524][ T5792] bridge_slave_1: entered allmulticast mode [ 85.430716][ T5792] bridge_slave_1: entered promiscuous mode [ 85.471445][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 85.586973][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.600376][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.637238][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.644795][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.652583][ T5784] bridge_slave_0: entered allmulticast mode [ 85.659849][ T5784] bridge_slave_0: entered promiscuous mode [ 85.684637][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.691849][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.699090][ T5789] bridge_slave_0: entered allmulticast mode [ 85.706124][ T5789] bridge_slave_0: entered promiscuous mode [ 85.713996][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.721433][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.728623][ T5784] bridge_slave_1: entered allmulticast mode [ 85.736672][ T5784] bridge_slave_1: entered promiscuous mode [ 85.776085][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.783350][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.790641][ T5789] bridge_slave_1: entered allmulticast mode [ 85.797993][ T5789] bridge_slave_1: entered promiscuous mode [ 85.833176][ T5792] team0: Port device team_slave_0 added [ 85.842203][ T5792] team0: Port device team_slave_1 added [ 85.874941][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.886806][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.900252][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.946530][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.992981][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.000120][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.026743][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.039065][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.046294][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.053591][ T5785] bridge_slave_0: entered allmulticast mode [ 86.061382][ T5785] bridge_slave_0: entered promiscuous mode [ 86.085192][ T5784] team0: Port device team_slave_0 added [ 86.094382][ T5784] team0: Port device team_slave_1 added [ 86.101183][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.108146][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.134708][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.161544][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.168761][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.175904][ T5785] bridge_slave_1: entered allmulticast mode [ 86.183470][ T5785] bridge_slave_1: entered promiscuous mode [ 86.192954][ T5789] team0: Port device team_slave_0 added [ 86.202332][ T5789] team0: Port device team_slave_1 added [ 86.234028][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.241247][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.267451][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.333001][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.340085][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.366710][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.380622][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.394057][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.415018][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.422125][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.448151][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.465104][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.472387][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.498349][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.563945][ T5792] hsr_slave_0: entered promiscuous mode [ 86.571836][ T5792] hsr_slave_1: entered promiscuous mode [ 86.595210][ T5785] team0: Port device team_slave_0 added [ 86.604952][ T5785] team0: Port device team_slave_1 added [ 86.689982][ T5790] Bluetooth: hci2: command tx timeout [ 86.690000][ T5797] Bluetooth: hci0: command tx timeout [ 86.690317][ T5788] Bluetooth: hci1: command tx timeout [ 86.730369][ T5789] hsr_slave_0: entered promiscuous mode [ 86.739859][ T5789] hsr_slave_1: entered promiscuous mode [ 86.746122][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.754151][ T5789] Cannot create hsr debugfs directory [ 86.773210][ T5788] Bluetooth: hci3: command tx timeout [ 86.782302][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.789835][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.816031][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.832151][ T5784] hsr_slave_0: entered promiscuous mode [ 86.838608][ T5784] hsr_slave_1: entered promiscuous mode [ 86.845749][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.853738][ T5784] Cannot create hsr debugfs directory [ 86.883256][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.890430][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.916464][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.057939][ T5785] hsr_slave_0: entered promiscuous mode [ 87.064954][ T5785] hsr_slave_1: entered promiscuous mode [ 87.071951][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.079642][ T5785] Cannot create hsr debugfs directory [ 87.391117][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.415928][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.425954][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.438307][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.508948][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.519553][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.531142][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.562028][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.630185][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.670809][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.688004][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.721557][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.763904][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.774921][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.802506][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.812711][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.910102][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.935365][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.965899][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.998434][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.005869][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.053804][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.061014][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.075152][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.104169][ T2957] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.111316][ T2957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.143290][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.150614][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.178090][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.250946][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.270574][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.292644][ T2957] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.299847][ T2957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.315475][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.345491][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.362653][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.369948][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.412082][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.419309][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.450976][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.458156][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.623128][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.774515][ T5788] Bluetooth: hci2: command tx timeout [ 88.778734][ T5790] Bluetooth: hci1: command tx timeout [ 88.783003][ T5788] Bluetooth: hci0: command tx timeout [ 88.849472][ T5788] Bluetooth: hci3: command tx timeout [ 88.858221][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.880171][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.020570][ T5792] veth0_vlan: entered promiscuous mode [ 89.047485][ T5789] veth0_vlan: entered promiscuous mode [ 89.076789][ T5792] veth1_vlan: entered promiscuous mode [ 89.113185][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.132059][ T5789] veth1_vlan: entered promiscuous mode [ 89.186707][ T5792] veth0_macvtap: entered promiscuous mode [ 89.201026][ T5792] veth1_macvtap: entered promiscuous mode [ 89.227607][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.245137][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.279209][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.290753][ T5784] veth0_vlan: entered promiscuous mode [ 89.314179][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.323512][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.335350][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.344380][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.366906][ T5784] veth1_vlan: entered promiscuous mode [ 89.374589][ T5789] veth0_macvtap: entered promiscuous mode [ 89.391117][ T5789] veth1_macvtap: entered promiscuous mode [ 89.443580][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.454564][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.467721][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.514123][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.525056][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.537044][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.573700][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.583017][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.592426][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.602109][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.630119][ T5785] veth0_vlan: entered promiscuous mode [ 89.662113][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.675218][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.696205][ T5785] veth1_vlan: entered promiscuous mode [ 89.707254][ T5784] veth0_macvtap: entered promiscuous mode [ 89.744076][ T5784] veth1_macvtap: entered promiscuous mode [ 89.762495][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.772373][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.865335][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.877695][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.888433][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.900405][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.913545][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.927364][ T5785] veth0_macvtap: entered promiscuous mode [ 89.948186][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.962378][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.012673][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.031411][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.041592][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.052445][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.064945][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.085650][ T5785] veth1_macvtap: entered promiscuous mode [ 90.098168][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.102376][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.117802][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.119259][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.134849][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.143873][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.203755][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.217847][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.227939][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.238956][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.250575][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.261579][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.297848][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.346907][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.360116][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.371798][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.398883][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.412973][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.426226][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.451594][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.507563][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.537637][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.552004][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.570882][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.746256][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.771233][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.850867][ T5788] Bluetooth: hci1: command tx timeout [ 90.850886][ T5797] Bluetooth: hci2: command tx timeout [ 90.856318][ T5788] Bluetooth: hci0: command tx timeout [ 90.886553][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.907101][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.930574][ T5788] Bluetooth: hci3: command tx timeout [ 91.000606][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.008494][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.041634][ T5896] syz.1.11[5896]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.076267][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.085314][ T5896] loop1: detected capacity change from 0 to 1024 [ 91.097440][ T5896] ======================================================= [ 91.097440][ T5896] WARNING: The mand mount option has been deprecated and [ 91.097440][ T5896] and is ignored by this kernel. Remove the mand [ 91.097440][ T5896] option from the mount to silence this warning. [ 91.097440][ T5896] ======================================================= [ 91.139349][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.210724][ T5896] EXT4-fs: inline encryption not supported [ 91.224600][ T5896] EXT4-fs: Ignoring removed bh option [ 91.271799][ T5896] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.372848][ T5896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.517414][ T5907] loop3: detected capacity change from 0 to 1024 [ 91.573683][ T5907] hfsplus: invalid extended attribute record [ 91.665122][ T28] audit: type=1800 audit(1759805618.638:2): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 91.745515][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.790044][ T2957] hfsplus: b-tree write err: -5, ino 4 [ 92.073233][ T5920] loop3: detected capacity change from 0 to 256 [ 92.139909][ T27] cfg80211: failed to load regulatory.db [ 92.722019][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 92.789793][ T5934] loop0: detected capacity change from 0 to 512 [ 92.854948][ T5934] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 92.891493][ T5934] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 92.922689][ T5934] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 92.944577][ T5788] Bluetooth: hci0: command tx timeout [ 92.944610][ T5790] Bluetooth: hci1: command tx timeout [ 92.956165][ T5797] Bluetooth: hci2: command tx timeout [ 93.011123][ T5797] Bluetooth: hci3: command tx timeout [ 93.023999][ T5934] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 93.038553][ T5917] loop1: detected capacity change from 0 to 40427 [ 93.061481][ T5917] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 93.066632][ T5934] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 93.081319][ T5917] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 93.090059][ T5917] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff [ 93.098613][ T5917] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 93.099107][ T5934] EXT4-fs (loop0): orphan cleanup on readonly fs [ 93.132194][ T5917] F2FS-fs (loop1): invalid crc value [ 93.164231][ T5934] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.26: bg 0: block 34: padding at end of block bitmap is not set [ 93.196983][ T5934] Quota error (device loop0): write_blk: dquota write failed [ 93.205662][ T5934] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 93.206235][ T5917] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.216691][ T5934] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.26: Failed to acquire dquot type 1 [ 93.255770][ T5934] EXT4-fs (loop0): 1 truncate cleaned up [ 93.270899][ T5934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.350165][ T5934] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 93.371494][ T5934] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 93.393604][ T5917] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 93.419029][ T5917] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.496673][ T5934] syz.0.26 (5934) used greatest stack depth: 20880 bytes left [ 93.536334][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.605245][ T5789] syz-executor: attempt to access beyond end of device [ 93.605245][ T5789] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.651116][ T5789] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 93.774095][ T5926] loop3: detected capacity change from 0 to 40427 [ 93.801966][ T5926] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 93.849464][ T5926] F2FS-fs (loop3): invalid crc value [ 93.861645][ T5926] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.019561][ T5926] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 94.065852][ T5957] vivid-000: disconnect [ 94.112804][ T5954] vivid-000: reconnect [ 94.223861][ T5792] syz-executor: attempt to access beyond end of device [ 94.223861][ T5792] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.266048][ T5792] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.796578][ T28] audit: type=1400 audit(1759805621.778:3): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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tipc: Enabling of bearer rejected, failed to enable media [ 94.931216][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.230785][ T5986] loop2: detected capacity change from 0 to 1024 [ 95.287296][ T5986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.388730][ T5986] EXT4-fs error (device loop2): ext4_get_inode_usage:883: inode #2: comm syz.2.47: corrupted in-inode xattr: bad e_name length [ 95.494171][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.168899][ T6015] capability: warning: `syz.0.60' uses deprecated v2 capabilities in a way that may be insecure [ 96.213667][ T6017] program syz.0.60 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.254220][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.62'. [ 96.483203][ T6024] loop2: detected capacity change from 0 to 128 [ 96.516674][ T6024] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 96.559873][ T6024] hpfs: filesystem error: improperly stopped [ 96.565935][ T6024] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 96.595019][ T6000] loop3: detected capacity change from 0 to 32768 [ 96.609458][ T6024] hpfs: You really don't want any checks? You are crazy... [ 96.618606][ T6024] hpfs: hpfs_map_sector(): read error [ 96.653630][ T6024] hpfs: code page support is disabled [ 96.660576][ T6024] hpfs: hpfs_map_4sectors(): unaligned read [ 96.667433][ T6024] hpfs: hpfs_map_4sectors(): unaligned read [ 96.709683][ T6035] loop0: detected capacity change from 0 to 256 [ 96.715548][ T6024] hpfs: filesystem error: unable to find root dir [ 96.734001][ T6000] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.904692][ T6035] FAT-fs (loop0): Directory bread(block 64) failed [ 96.935185][ T6000] XFS (loop3): Ending clean mount [ 96.948912][ T6035] FAT-fs (loop0): Directory bread(block 65) failed [ 96.955632][ T6035] FAT-fs (loop0): Directory bread(block 66) failed [ 96.993946][ T6000] XFS (loop3): Quotacheck needed: Please wait. [ 96.998749][ T6035] FAT-fs (loop0): Directory bread(block 67) failed [ 97.013970][ T6035] FAT-fs (loop0): Directory bread(block 68) failed [ 97.048810][ T6035] FAT-fs (loop0): Directory bread(block 69) failed [ 97.055555][ T6035] FAT-fs (loop0): Directory bread(block 70) failed [ 97.110512][ T6035] FAT-fs (loop0): Directory bread(block 71) failed [ 97.117645][ T6035] FAT-fs (loop0): Directory bread(block 72) failed [ 97.142656][ T6000] XFS (loop3): Quotacheck: Done. [ 97.159483][ T6035] FAT-fs (loop0): Directory bread(block 73) failed [ 97.384863][ T5792] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 97.755164][ T6057] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.893175][ T28] audit: type=1326 audit(1759805624.878:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2778eec9 code=0x7ffc0000 [ 97.962018][ T28] audit: type=1326 audit(1759805624.908:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fbb2778eec9 code=0x7ffc0000 [ 98.040468][ T28] audit: type=1326 audit(1759805624.908:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2778eec9 code=0x7ffc0000 [ 98.229814][ T3063] kernel write not supported for file /amidi2 (pid: 3063 comm: kworker/1:2) [ 98.307366][ T6073] binder: 6072:6073 ioctl c018620c 200000000240 returned -22 [ 98.431880][ T6077] loop0: detected capacity change from 0 to 256 [ 98.485468][ T6077] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 98.631127][ T6063] loop1: detected capacity change from 0 to 32768 [ 98.683431][ T6081] loop3: detected capacity change from 0 to 1024 [ 98.690620][ T6063] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.78 (6063) [ 98.778372][ T6063] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.818983][ T6063] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 98.841011][ T6063] BTRFS info (device loop1): turning on sync discard [ 98.847762][ T6063] BTRFS info (device loop1): turning on async discard [ 98.884940][ T6063] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 98.915813][ T6063] BTRFS info (device loop1): trying to use backup root at mount time [ 98.925200][ T77] hfsplus: b-tree write err: -5, ino 4 [ 98.966354][ T6063] BTRFS info (device loop1): force clearing of disk cache [ 99.005158][ T6063] BTRFS info (device loop1): using free space tree [ 99.258577][ T6063] BTRFS info (device loop1): rebuilding free space tree [ 99.500562][ T5789] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.160384][ T6129] loop1: detected capacity change from 0 to 256 [ 100.197750][ T6129] FAT-fs (loop1): Directory bread(block 64) failed [ 100.215158][ T6129] FAT-fs (loop1): Directory bread(block 65) failed [ 100.226701][ T6129] FAT-fs (loop1): Directory bread(block 66) failed [ 100.235998][ T6129] FAT-fs (loop1): Directory bread(block 67) failed [ 100.247394][ T5791] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.250935][ T6129] FAT-fs (loop1): Directory bread(block 68) failed [ 100.265361][ T6129] FAT-fs (loop1): Directory bread(block 69) failed [ 100.275035][ T6129] FAT-fs (loop1): Directory bread(block 70) failed [ 100.284393][ T6129] FAT-fs (loop1): Directory bread(block 71) failed [ 100.302433][ T6129] FAT-fs (loop1): Directory bread(block 72) failed [ 100.317056][ T6129] FAT-fs (loop1): Directory bread(block 73) failed [ 100.392452][ T6113] loop2: detected capacity change from 0 to 32768 [ 100.400329][ T6133] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 100.460281][ T5791] usb 1-1: Using ep0 maxpacket: 32 [ 100.475674][ T6113] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.494196][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.576005][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.617932][ T5791] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.40 [ 100.696044][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.738948][ T6113] XFS (loop2): Ending clean mount [ 100.781483][ T5791] usb 1-1: config 0 descriptor?? [ 100.806402][ T6145] loop3: detected capacity change from 0 to 2048 [ 100.855586][ T5784] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.871437][ T6145] Alternate GPT is invalid, using primary GPT. [ 100.895618][ T6145] loop3: p1 p2 p3 [ 101.144562][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 101.147557][ T5795] udevd[5795]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 101.168173][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 101.281208][ T5791] magicmouse 0003:05AC:0265.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 101.446016][ T5791] usb 1-1: USB disconnect, device number 2 [ 101.488518][ T6155] loop1: detected capacity change from 0 to 4096 [ 101.553345][ T6155] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 101.570414][ T6159] loop2: detected capacity change from 0 to 1024 [ 101.582910][ T6159] EXT4-fs: inline encryption not supported [ 101.618181][ T6159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.636788][ T6159] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.769017][ T6159] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 3: comm syz.2.110: lblock 3 mapped to illegal pblock 3 (length 3) [ 101.868997][ T6159] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 101.884532][ T6159] EXT4-fs (loop2): This should not happen!! Data will be lost [ 101.884532][ T6159] [ 101.897205][ T6166] loop3: detected capacity change from 0 to 64 [ 101.971391][ T11] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 102.027157][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 102.084060][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.084060][ T11] [ 102.155824][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.387878][ T6174] loop2: detected capacity change from 0 to 764 [ 102.469546][ T6178] netlink: 19 bytes leftover after parsing attributes in process `syz.0.119'. [ 102.748978][ T5779] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.821744][ T6188] loop0: detected capacity change from 0 to 256 [ 102.864214][ T6188] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 102.964182][ T5779] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 102.973774][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.988712][ T5779] usb 2-1: Product: syz [ 102.992935][ T5779] usb 2-1: Manufacturer: syz [ 103.008631][ T5779] usb 2-1: SerialNumber: syz [ 103.033351][ T5779] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 103.137237][ T3063] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 103.293435][ T6194] loop0: detected capacity change from 0 to 2048 [ 103.358903][ T6194] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.492028][ T6190] loop2: detected capacity change from 0 to 32768 [ 103.526831][ T6190] (syz.2.125,6190,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.546595][ T6190] (syz.2.125,6190,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.591934][ T9] usb 2-1: USB disconnect, device number 2 [ 103.612145][ T6190] JBD2: Ignoring recovery information on journal [ 103.752280][ T6190] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 103.968490][ T6205] loop0: detected capacity change from 0 to 256 [ 104.041498][ T5784] ocfs2: Unmounting device (7,2) on (node local) [ 104.057600][ T6205] FAT-fs (loop0): Directory bread(block 64) failed [ 104.070891][ T6205] FAT-fs (loop0): Directory bread(block 65) failed [ 104.077614][ T6205] FAT-fs (loop0): Directory bread(block 66) failed [ 104.093916][ T6205] FAT-fs (loop0): Directory bread(block 67) failed [ 104.100849][ T6205] FAT-fs (loop0): Directory bread(block 68) failed [ 104.150313][ T6205] FAT-fs (loop0): Directory bread(block 69) failed [ 104.157020][ T6205] FAT-fs (loop0): Directory bread(block 70) failed [ 104.209718][ T6205] FAT-fs (loop0): Directory bread(block 71) failed [ 104.213194][ T3063] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 104.219653][ T6205] FAT-fs (loop0): Directory bread(block 72) failed [ 104.237599][ T6205] FAT-fs (loop0): Directory bread(block 73) failed [ 104.244087][ T3063] ath9k_htc: Failed to initialize the device [ 104.266496][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 104.488583][ T6215] loop1: detected capacity change from 0 to 256 [ 104.655531][ T6219] loop0: detected capacity change from 0 to 512 [ 104.672133][ T28] audit: type=1800 audit(1759805631.658:7): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.137" name="file1" dev="loop1" ino=1048611 res=0 errno=0 [ 104.730673][ T6215] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 104.776341][ T6215] FAT-fs (loop1): Filesystem has been set read-only [ 104.800036][ T6223] hfs: can't find a HFS filesystem on dev nullb0 [ 104.920667][ T6219] EXT4-fs (loop0): Test dummy encryption mode enabled [ 104.948939][ T6219] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.988734][ T6219] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.039203][ T6219] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.138: corrupted in-inode xattr: e_name out of bounds [ 105.057609][ T6219] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 105.071897][ T6219] EXT4-fs (loop0): 1 orphan inode deleted [ 105.079359][ T6219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.082834][ T6228] loop2: detected capacity change from 0 to 2048 [ 105.130303][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.131232][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.143'. [ 105.609062][ T6246] loop0: detected capacity change from 0 to 64 [ 106.099655][ T6255] loop1: detected capacity change from 0 to 4096 [ 106.176634][ T6260] loop2: detected capacity change from 0 to 1024 [ 106.230984][ T6255] syz.1.155 (6255) used greatest stack depth: 20496 bytes left [ 106.244525][ T6260] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 106.272316][ T6260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.352661][ T28] audit: type=1800 audit(1759805633.338:8): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.157" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 106.435216][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.514543][ T6272] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 107.314421][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 107.576770][ T6306] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 107.831873][ T6292] loop1: detected capacity change from 0 to 32768 [ 107.855554][ T6292] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.171 (6292) [ 107.891443][ T6292] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 107.912758][ T6292] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 107.954844][ T6292] BTRFS info (device loop1): using free space tree [ 108.061478][ T6292] BTRFS info (device loop1): enabling ssd optimizations [ 108.078824][ T6292] BTRFS info (device loop1): auto enabling async discard [ 108.299123][ T5789] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 108.548909][ T6308] loop2: detected capacity change from 0 to 32768 [ 108.566614][ T6308] XFS: noikeep mount option is deprecated. [ 108.635910][ T6302] loop3: detected capacity change from 0 to 40427 [ 108.658559][ T6308] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 108.689019][ T6308] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.724605][ T6302] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 108.822010][ T6302] F2FS-fs (loop3): invalid crc value [ 108.905809][ T6302] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.086485][ T6308] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 109.178784][ T6302] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 109.243269][ T6308] XFS (loop2): Starting recovery (logdev: internal) [ 109.255474][ T28] audit: type=1800 audit(1759805636.238:9): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.175" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 109.337485][ T6308] XFS (loop2): Ending recovery (logdev: internal) [ 109.433953][ T5792] syz-executor: attempt to access beyond end of device [ 109.433953][ T5792] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.477291][ T5846] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x516/0x640, xfs_bnobt block 0x8 [ 109.498988][ T5792] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 109.529000][ T5846] XFS (loop2): Unmount and run xfs_repair [ 109.543747][ T5846] XFS (loop2): xfs_inactive_ifree: xfs_ifree returned error -117 [ 109.576564][ T5784] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.576553][ T5846] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_inactive_ifree+0x1d1/0x380 (fs/xfs/xfs_inode.c:1633). Shutting down filesystem. [ 109.628906][ T5846] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 109.993035][ T6367] loop1: detected capacity change from 0 to 4096 [ 110.130163][ T6367] ntfs: volume version 3.1. [ 110.158932][ T6367] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 110.192003][ T6367] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 110.209765][ T6367] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 110.275728][ T6367] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 110.293362][ T6367] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 110.325777][ T6367] ntfs: (device loop1): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 110.379014][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 110.858874][ T5791] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.964164][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 111.050935][ T5791] usb 1-1: Using ep0 maxpacket: 16 [ 111.063218][ T5791] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 111.086845][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.105397][ T5791] usb 1-1: Product: syz [ 111.117113][ T5791] usb 1-1: Manufacturer: syz [ 111.128781][ T5791] usb 1-1: SerialNumber: syz [ 111.142738][ T5791] usb 1-1: config 0 descriptor?? [ 111.179794][ T5791] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 111.397255][ T5791] gspca_sn9c2028: read1 error -32 [ 111.615320][ T5791] gspca_sn9c2028: read1 error -71 [ 111.626226][ T5791] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 111.639274][ T6412] netlink: 256 bytes leftover after parsing attributes in process `syz.2.215'. [ 111.643301][ T5791] usb 1-1: USB disconnect, device number 3 [ 111.668973][ T6412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'. [ 111.797786][ T6397] loop3: detected capacity change from 0 to 32768 [ 112.332313][ T6410] loop1: detected capacity change from 0 to 32768 [ 112.438327][ T6410] read_mapping_page failed! [ 113.088965][ T5779] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.294754][ T5779] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 113.313811][ T5779] usb 4-1: config 0 has no interface number 0 [ 113.340458][ T5779] usb 4-1: New USB device found, idVendor=0fce, idProduct=d0e1, bcdDevice= 0.00 [ 113.358841][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.368754][ T5779] usb 4-1: Product: syz [ 113.372977][ T5779] usb 4-1: Manufacturer: syz [ 113.388758][ T5779] usb 4-1: SerialNumber: syz [ 113.401667][ T5779] usb 4-1: config 0 descriptor?? [ 113.410019][ T5779] usb-storage 4-1:0.145: USB Mass Storage device detected [ 113.435638][ T6442] loop0: detected capacity change from 0 to 32768 [ 113.458181][ T5779] usb-storage 4-1:0.145: device ignored [ 113.623368][ T5779] usb 4-1: USB disconnect, device number 2 [ 114.094681][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'. [ 114.189129][ T6474] warning: `syz.0.242' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.509148][ T3063] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.575078][ T6488] loop3: detected capacity change from 0 to 164 [ 114.578844][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.708796][ T3063] usb 2-1: Using ep0 maxpacket: 32 [ 114.716414][ T3063] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.725938][ T3063] usb 2-1: config 0 has no interface number 0 [ 114.742340][ T3063] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 114.766176][ T3063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.776129][ T3063] usb 2-1: Product: syz [ 114.780159][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 114.780892][ T3063] usb 2-1: Manufacturer: syz [ 114.791082][ T3063] usb 2-1: SerialNumber: syz [ 114.797035][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.809807][ T3063] usb 2-1: config 0 descriptor?? [ 114.817118][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.830568][ T3063] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 114.835074][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.845433][ T3063] usb 2-1: selecting invalid altsetting 1 [ 114.856854][ T3063] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 114.857709][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 114.880925][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.882715][ T3063] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 114.903674][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 114.917054][ T3063] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 114.917374][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 114.930317][ T3063] usb 2-1: media controller created [ 114.934084][ T9] usb 1-1: Manufacturer: syz [ 114.955783][ T9] usb 1-1: config 0 descriptor?? [ 114.970891][ T3063] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.089020][ T5779] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.253257][ T9] rc_core: IR keymap rc-hauppauge not found [ 115.259442][ T9] Registered IR keymap rc-empty [ 115.264992][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.281662][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.292932][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.300178][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.302777][ T5779] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 115.318999][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.329730][ T5779] usb 4-1: config 0 descriptor?? [ 115.344079][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 115.365818][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 115.393261][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.429093][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.458879][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.499236][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.546786][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.578960][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.623737][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.659452][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.702036][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.738854][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 115.749944][ T5779] hid (null): report_id 0 is invalid [ 115.770328][ T5779] hid-steam 0003:28DE:1142.0002: report_id 0 is invalid [ 115.777648][ T5779] hid-steam 0003:28DE:1142.0002: item 0 1 1 8 parsing failed [ 115.783828][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 115.788181][ T5779] hid-steam 0003:28DE:1142.0002: steam_probe:parse of hid interface failed [ 115.803666][ T5779] hid-steam: probe of 0003:28DE:1142.0002 failed with error -22 [ 115.829461][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 115.864682][ T9] usb 1-1: USB disconnect, device number 4 [ 115.980225][ T5791] usb 4-1: USB disconnect, device number 3 [ 116.027068][ T6504] loop2: detected capacity change from 0 to 512 [ 116.060019][ T3063] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 116.069099][ T6504] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 116.078987][ T3063] zl10353_read_register: readreg error (reg=127, ret==-110) [ 116.090326][ T3063] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 116.097709][ T6504] EXT4-fs (loop2): 1 truncate cleaned up [ 116.126167][ T6504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.159182][ T3063] usb 2-1: USB disconnect, device number 3 [ 116.178115][ T6504] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 4: comm syz.2.255: lblock 0 mapped to illegal pblock 4 (length 1) [ 116.230271][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.406984][ T6508] loop0: detected capacity change from 0 to 4096 [ 116.417647][ T6508] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 116.487316][ T6508] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 116.704180][ T5785] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 116.856129][ T6514] can0: slcan on ptm0. [ 117.059756][ T6513] can0 (unregistered): slcan off ptm0. [ 117.253776][ T6510] loop2: detected capacity change from 0 to 32768 [ 117.352062][ T6510] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.613944][ T6510] XFS (loop2): Ending clean mount [ 117.638853][ T6510] XFS (loop2): Quotacheck needed: Please wait. [ 117.716686][ T6510] XFS (loop2): Quotacheck: Done. [ 117.732348][ T5846] kernel write not supported for file /vcs (pid: 5846 comm: kworker/0:3) [ 118.050585][ T5784] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.386232][ T6564] loop3: detected capacity change from 0 to 128 [ 118.417719][ T6564] EXT4-fs: Ignoring removed orlov option [ 118.540506][ T6564] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.655278][ T6572] loop2: detected capacity change from 0 to 2048 [ 118.690400][ T6564] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.702897][ T6572] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 118.732461][ T6572] NILFS (loop2): mounting unchecked fs [ 118.799141][ T6160] udevd[6160]: incorrect nilfs2 checksum on /dev/loop2 [ 118.807620][ T6564] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.275: No space for directory leaf checksum. Please run e2fsck -D. [ 118.814709][ T6527] loop1: detected capacity change from 0 to 32768 [ 118.866838][ T6572] NILFS (loop2): recovery complete [ 118.882414][ T6564] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.275: checksumming directory block 0 [ 118.945141][ T6577] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.199703][ T5792] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.502049][ T6590] tipc: Started in network mode [ 119.509176][ T6590] tipc: Node identity ac14140f, cluster identity 4711 [ 119.553610][ T6590] tipc: New replicast peer: 255.255.255.255 [ 119.568865][ T6590] tipc: Enabled bearer , priority 10 [ 119.885361][ T6599] loop1: detected capacity change from 0 to 4096 [ 119.934123][ T6599] NILFS (loop1): invalid segment: Checksum error in segment payload [ 119.978556][ T6599] NILFS (loop1): trying rollback from an earlier position [ 120.055644][ T6599] NILFS (loop1): recovery complete [ 120.098907][ T6611] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.489419][ T6622] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 120.518220][ T6622] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 120.558194][ T6622] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 120.582420][ T6622] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 120.607696][ T6622] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 120.634869][ T6622] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 120.677587][ T6622] comedi comedi3: 8255: I/O port conflict (0x400000a,4) [ 120.690954][ T3063] tipc: Node number set to 2886997007 [ 120.735743][ T6622] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 120.763288][ T6622] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 120.773561][ T6597] loop0: detected capacity change from 0 to 32768 [ 120.993882][ T6634] tipc: Started in network mode [ 121.006539][ T6634] tipc: Node identity ac14140f, cluster identity 4711 [ 121.022544][ T6634] tipc: New replicast peer: 255.255.255.255 [ 121.043392][ T6634] tipc: Enabled bearer , priority 10 [ 121.653141][ T6649] loop0: detected capacity change from 0 to 1024 [ 121.797734][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 122.158888][ T9] tipc: Node number set to 2886997007 [ 122.265149][ T6646] loop1: detected capacity change from 0 to 40427 [ 122.283702][ T6646] F2FS-fs (loop1): invalid crc value [ 122.294445][ T6646] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.319195][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.376512][ T6646] F2FS-fs (loop1): Start checkpoint disabled! [ 122.419459][ T6646] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 122.480410][ T6666] xt_socket: unknown flags 0xd0 [ 122.511873][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.538827][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.582144][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 122.604190][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.649531][ T9] usb 1-1: config 0 descriptor?? [ 122.667209][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.312'. [ 122.689328][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.312'. [ 122.823210][ T6672] loop1: detected capacity change from 0 to 64 [ 123.071208][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 123.084743][ T9] wacom 0003:056A:0336.0003: ignoring exceeding usage max [ 123.094295][ T6676] Zero length message leads to an empty skb [ 123.119694][ T9] wacom 0003:056A:0336.0003: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.0-1/input0 [ 123.276554][ T9] usb 1-1: USB disconnect, device number 5 [ 123.296481][ T6677] fido_id[6677]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0336.0003/report_descriptor': No such device [ 123.342786][ T6679] loop1: detected capacity change from 0 to 4096 [ 123.366759][ T6679] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 123.392404][ T6679] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 123.404292][ T6679] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 123.418001][ T6679] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 123.455881][ T6679] ntfs: volume version 3.1. [ 123.627289][ T6674] loop3: detected capacity change from 0 to 32768 [ 123.765277][ T112] ERROR: (device loop3): diUpdatePMap: the inode is not allocated in the working map [ 123.765277][ T112] [ 123.785816][ T112] ERROR: (device loop3): remounting filesystem as read-only [ 123.796277][ T6683] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 123.821145][ T6683] @0Ù: renamed from bond_slave_1 (while UP) [ 124.005040][ T6685] loop2: detected capacity change from 0 to 4096 [ 124.076517][ T6690] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.104054][ T6685] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 124.163618][ T6685] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 124.239103][ T6695] CUSE: info not properly terminated [ 124.418621][ T6699] loop2: detected capacity change from 0 to 1024 [ 124.437676][ T6699] EXT4-fs: inline encryption not supported [ 124.444766][ T6699] EXT4-fs: Ignoring removed i_version option [ 124.469154][ T6699] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.507113][ T6699] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #3: block 1: comm syz.2.325: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.546043][ T6699] Quota error (device loop2): write_blk: dquota write failed [ 124.563898][ T6699] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 124.596280][ T6699] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.325: Failed to acquire dquot type 0 [ 124.635218][ T6699] EXT4-fs error (device loop2): ext4_free_blocks:6676: comm syz.2.325: Freeing blocks not in datazone - block = 0, count = 4096 [ 124.682285][ T6699] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.325: Invalid inode bitmap blk 0 in block_group 0 [ 124.702839][ T2957] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.720772][ T6699] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 124.742224][ T6699] EXT4-fs (loop2): 1 orphan inode deleted [ 124.756320][ T2957] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 124.759575][ T6699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.773856][ T2957] EXT4-fs error (device loop2): ext4_release_dquot:6976: comm kworker/u4:8: Failed to release dquot type 0 [ 124.828284][ T6699] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 1: comm syz.2.325: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.888237][ T6699] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 1 [ 124.888403][ T6699] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 60928 [ 124.890834][ T6699] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.325: Failed to acquire dquot type 0 [ 124.995440][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.167556][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 125.839234][ T5779] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.867898][ T28] audit: type=1326 audit(1759805652.848:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2778eec9 code=0x7ffc0000 [ 126.058840][ T5779] usb 1-1: Using ep0 maxpacket: 16 [ 126.062954][ T6726] loop1: detected capacity change from 0 to 32768 [ 126.076275][ T5779] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 126.108734][ T5779] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 126.121077][ T6726] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 126.138006][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.171684][ T6726] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 126.192084][ T5779] usb 1-1: config 0 descriptor?? [ 126.242622][ T5779] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 126.286768][ T6732] loop2: detected capacity change from 0 to 40427 [ 126.310616][ T6732] F2FS-fs (loop2): heap/no_heap options were deprecated [ 126.344769][ T6732] F2FS-fs (loop2): invalid crc value [ 126.363603][ T6732] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.436605][ T5142] bcm5974 1-1:0.0: could not read from device [ 126.508854][ T5779] bcm5974 1-1:0.0: could not read from device [ 126.535702][ T5142] bcm5974 1-1:0.0: could not read from device [ 126.548452][ T6732] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.583223][ T5779] input: failed to attach handler mousedev to device input9, error: -5 [ 126.616281][ T5779] usb 1-1: USB disconnect, device number 6 [ 126.630153][ T5142] bcm5974 1-1:0.0: could not read from device [ 126.658841][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 126.787518][ T5784] syz-executor: attempt to access beyond end of device [ 126.787518][ T5784] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.840618][ T5784] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 127.084407][ T6751] loop1: detected capacity change from 0 to 4096 [ 127.149186][ T3063] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.209431][ T6751] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 127.359191][ T3063] usb 4-1: Using ep0 maxpacket: 8 [ 127.372817][ T3063] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.394023][ T3063] usb 4-1: config 0 has no interface number 0 [ 127.409801][ T3063] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.424784][ T6755] loop0: detected capacity change from 0 to 64 [ 127.451929][ T3063] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.481406][ T3063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.513207][ T3063] usb 4-1: config 0 descriptor?? [ 127.588370][ T3063] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 127.800120][ T5791] usb 4-1: USB disconnect, device number 4 [ 128.076090][ T6774] loop0: detected capacity change from 0 to 256 [ 128.111475][ T6774] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 128.831787][ T6790] loop0: detected capacity change from 0 to 128 [ 128.859639][ T6790] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.880571][ T6790] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.978560][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.326422][ T6796] loop3: detected capacity change from 0 to 32768 [ 129.378024][ T6796] JBD2: Ignoring recovery information on journal [ 129.485222][ T6796] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 129.596294][ T5792] ocfs2: Unmounting device (7,3) on (node local) [ 129.623577][ T6798] loop0: detected capacity change from 0 to 32768 [ 129.674701][ T6798] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 129.742930][ T5785] ocfs2: Unmounting device (7,0) on (node local) [ 130.453317][ T6780] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 131.016412][ T6827] loop3: detected capacity change from 0 to 32768 [ 131.092371][ T6827] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 131.105947][ T6834] loop2: detected capacity change from 0 to 2048 [ 131.127905][ T6827] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.203090][ T6834] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 131.272715][ T6848] netlink: 44 bytes leftover after parsing attributes in process `syz.1.384'. [ 131.293115][ T6827] XFS (loop3): Ending clean mount [ 131.303935][ T6834] NILFS (loop2): mounting unchecked fs [ 131.318259][ T5786] udevd[5786]: incorrect nilfs2 checksum on /dev/loop2 [ 131.331515][ T6827] XFS (loop3): Quotacheck needed: Please wait. [ 131.369374][ T6834] NILFS (loop2): recovery complete [ 131.414337][ T6851] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.474023][ T6827] XFS (loop3): Quotacheck: Done. [ 131.541118][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 131.541133][ T28] audit: type=1800 audit(1759805658.528:17): pid=6827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.378" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 131.677014][ T5792] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.990366][ T6863] capability: warning: `syz.1.390' uses 32-bit capabilities (legacy support in use) [ 132.193706][ T6872] syz.3.386 uses obsolete (PF_INET,SOCK_PACKET) [ 132.802844][ T6870] loop1: detected capacity change from 0 to 32768 [ 132.865269][ T6870] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 132.932525][ T6870] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 133.109933][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.116991][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.161919][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 133.164465][ T6894] loop0: detected capacity change from 0 to 512 [ 133.207578][ T6886] loop3: detected capacity change from 0 to 32768 [ 133.217851][ T6886] (syz.3.402,6886,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.249197][ T6886] (syz.3.402,6886,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.322951][ T6894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.344317][ T6886] JBD2: Ignoring recovery information on journal [ 133.465058][ T6894] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.544082][ T6886] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 133.641612][ T6894] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz.0.405: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 133.699135][ T6894] EXT4-fs (loop0): Remounting filesystem read-only [ 133.728056][ T6894] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz.0.405: directory missing '.' [ 133.887419][ T5792] ocfs2: Unmounting device (7,3) on (node local) [ 133.890346][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.947285][ T6910] loop1: detected capacity change from 0 to 256 [ 133.977005][ T6910] exfat: Deprecated parameter 'namecase' [ 134.093630][ T6910] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eaaf3db, utbl_chksum : 0xe619d30d) [ 134.388112][ T6916] tipc: Invalid UDP bearer configuration [ 134.388169][ T6916] tipc: Enabling of bearer rejected, failed to enable media [ 134.730579][ T6920] loop1: detected capacity change from 0 to 8192 [ 134.786517][ T6920] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 134.861506][ T6920] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 134.871438][ T6920] REISERFS (device loop1): using ordered data mode [ 134.877980][ T6920] reiserfs: using flush barriers [ 134.888887][ T6920] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.910092][ T6920] REISERFS (device loop1): checking transaction log (loop1) [ 134.961379][ T6914] loop2: detected capacity change from 0 to 32768 [ 134.963480][ T6920] REISERFS (device loop1): Using r5 hash to sort names [ 135.002761][ T6920] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 135.075546][ T6914] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.234036][ T6914] XFS (loop2): Ending clean mount [ 135.389121][ T5784] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.441549][ T6936] sctp: [Deprecated]: syz.0.419 (pid 6936) Use of int in max_burst socket option. [ 135.441549][ T6936] Use struct sctp_assoc_value instead [ 135.510664][ T6938] netlink: 56 bytes leftover after parsing attributes in process `syz.1.418'. [ 135.521652][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'. [ 135.806061][ T6940] bridge0: port 3(vlan2) entered blocking state [ 135.825856][ T6940] bridge0: port 3(vlan2) entered disabled state [ 135.846162][ T6940] vlan2: entered allmulticast mode [ 135.856067][ T6940] bridge0: entered allmulticast mode [ 135.929521][ T6926] loop3: detected capacity change from 0 to 40427 [ 135.940315][ T6940] vlan2: left allmulticast mode [ 135.945512][ T6940] bridge0: left allmulticast mode [ 135.955599][ T6926] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 136.007443][ T6926] F2FS-fs (loop3): invalid crc value [ 136.043825][ T6926] F2FS-fs (loop3): Found nat_bits in checkpoint [ 136.208341][ T6926] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 136.286161][ T5792] syz-executor: attempt to access beyond end of device [ 136.286161][ T5792] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.320270][ T5792] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 136.374825][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 136.440057][ T6954] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 136.614244][ T6960] loop2: detected capacity change from 0 to 512 [ 136.629860][ T6960] EXT4-fs: Ignoring removed oldalloc option [ 136.650763][ T6960] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.687779][ T6960] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.743375][ T6960] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c01c, mo2=0102] [ 136.762780][ T6960] System zones: 0-2, 18-18, 34-34 [ 136.768282][ T6960] EXT4-fs (loop2): orphan cleanup on readonly fs [ 136.782601][ T6960] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 136.812341][ T6960] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 136.838958][ T6960] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.429: Failed to acquire dquot type 1 [ 136.901807][ T6960] EXT4-fs (loop2): 1 truncate cleaned up [ 136.951208][ T6960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.121521][ T6960] EXT4-fs: Ignoring removed orlov option [ 137.138856][ T6960] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 137.167918][ T6960] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.209641][ T6960] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 137.232470][ T6960] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=842c11c, mo2=0102] [ 137.267933][ T6960] EXT4-fs error (device loop2): __ext4_remount:6743: comm syz.2.429: Abort forced by user [ 137.290281][ T6960] EXT4-fs (loop2): Remounting filesystem read-only [ 137.296867][ T6960] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 137.343451][ T6960] ext4 filesystem being remounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.389177][ T6956] loop1: detected capacity change from 0 to 32768 [ 137.444042][ T6956] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 137.480640][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.571334][ T6963] loop0: detected capacity change from 0 to 32768 [ 137.714126][ T6979] loop2: detected capacity change from 0 to 512 [ 137.726999][ T6963] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 137.766993][ T6956] syz.1.427 (6956) used greatest stack depth: 18928 bytes left [ 137.795851][ T6979] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.814180][ T6979] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 137.874131][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 137.880284][ T6979] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 137.893943][ T6963] XFS (loop0): Ending clean mount [ 137.896522][ T6979] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 137.941841][ T6979] System zones: 0-2, 18-18, 34-34 [ 137.982299][ T6979] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.432: iget: bad i_size value: 360287970189639680 [ 138.063275][ T6979] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.432: couldn't read orphan inode 15 (err -117) [ 138.112796][ T5785] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.116574][ T6979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.299866][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.641993][ T7003] loop3: detected capacity change from 0 to 32768 [ 139.689945][ T7003] [ 139.689945][ T7003] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.689945][ T7003] [ 139.759462][ T7003] ERROR: (device loop3): diWrite: ixpxd invalid [ 139.759462][ T7003] [ 139.796250][ T7003] ERROR: (device loop3): txCommit: [ 139.796250][ T7003] [ 139.837645][ T7024] ERROR: (device loop3): diWrite: ixpxd invalid [ 139.837645][ T7024] [ 139.873064][ T7024] ERROR: (device loop3): txCommit: [ 139.873064][ T7024] [ 139.962321][ T7020] loop0: detected capacity change from 0 to 32768 [ 139.995138][ T7009] loop1: detected capacity change from 0 to 40427 [ 140.009309][ T7009] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 140.022220][ T7020] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.043328][ T7009] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 140.045083][ T5792] [ 140.045083][ T5792] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.045083][ T5792] [ 140.058586][ T7009] F2FS-fs (loop1): invalid crc value [ 140.071708][ T5792] [ 140.071708][ T5792] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 140.071708][ T5792] [ 140.095430][ T7009] F2FS-fs (loop1): Found nat_bits in checkpoint [ 140.163478][ T7020] XFS (loop0): Ending clean mount [ 140.312928][ T5785] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.326488][ T7009] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 140.350390][ T7009] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.123301][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.323227][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 141.336452][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.352482][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.365170][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.383367][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.394134][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.409761][ T9] usb 1-1: config 0 descriptor?? [ 141.844049][ T9] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 141.863135][ T9] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 141.892106][ T9] microsoft 0003:045E:07DA.0004: usage index exceeded [ 141.903991][ T9] microsoft 0003:045E:07DA.0004: item 0 0 2 2 parsing failed [ 141.912670][ T9] microsoft 0003:045E:07DA.0004: parse failed [ 141.920682][ T9] microsoft: probe of 0003:045E:07DA.0004 failed with error -22 [ 142.079546][ T9] usb 1-1: USB disconnect, device number 7 [ 142.129379][ T7057] loop1: detected capacity change from 0 to 64 [ 142.276374][ T7061] ptrace attach of "./syz-executor exec"[5792] was attempted by ""[7061] [ 142.605634][ T7071] loop1: detected capacity change from 0 to 256 [ 142.633798][ T7071] exfat: Deprecated parameter 'utf8' [ 142.663716][ T7071] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 142.750882][ T7073] loop0: detected capacity change from 0 to 8 [ 142.811313][ T7073] SQUASHFS error: zlib decompression failed, data probably corrupt [ 142.838905][ T7073] SQUASHFS error: Failed to read block 0x9b: -5 [ 142.845221][ T7073] SQUASHFS error: Unable to read metadata cache entry [99] [ 142.879447][ T7073] SQUASHFS error: Unable to read inode 0x127 [ 143.066104][ T7065] loop3: detected capacity change from 0 to 40427 [ 143.106525][ T7065] F2FS-fs (loop3): invalid crc value [ 143.115718][ T7065] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.240197][ T7065] F2FS-fs (loop3): Start checkpoint disabled! [ 143.256709][ T7065] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 144.049949][ T7096] loop2: detected capacity change from 0 to 8192 [ 144.093959][ T7096] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.179195][ T7096] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 144.188499][ T7096] REISERFS (device loop2): using ordered data mode [ 144.288821][ T7096] reiserfs: using flush barriers [ 144.306500][ T7096] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.353968][ T7096] REISERFS (device loop2): checking transaction log (loop2) [ 144.414195][ T7096] REISERFS (device loop2): Using r5 hash to sort names [ 144.506920][ T7096] reiserfs: enabling write barrier flush mode [ 144.537911][ T7096] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 144.560583][ T7096] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 144.577889][ T7096] REISERFS (device loop2): Remounting filesystem read-only [ 144.593226][ T7096] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 144.608463][ T7096] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 144.629839][ T7096] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 144.632242][ T7107] loop3: detected capacity change from 0 to 2048 [ 144.646808][ T7096] REISERFS error (device loop2): zam-7001 reiserfs_find_entry: io error [ 144.658309][ T7096] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 144.681374][ T7096] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 144.701515][ T7096] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 144.716574][ T7107] loop3: p3 p4 < > [ 144.724444][ T7096] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 144.729019][ T7107] loop3: p3 start 11362048 is beyond EOD, truncated [ 144.771570][ T7096] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 144.791101][ T7094] loop0: detected capacity change from 0 to 32768 [ 144.803353][ T5157] loop3: p3 p4 < > [ 144.807525][ T5157] loop3: p3 start 11362048 is beyond EOD, truncated [ 144.810061][ T7094] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.486 (7094) [ 144.868223][ T7094] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.891204][ T5784] ------------[ cut here ]------------ [ 144.896738][ T5784] kernel BUG at fs/reiserfs/journal.c:1916! [ 144.900767][ T7094] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 144.910933][ T5784] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 144.917343][ T5784] CPU: 0 PID: 5784 Comm: syz-executor Not tainted syzkaller #0 [ 144.924915][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.935015][ T5784] RIP: 0010:do_journal_release+0x53a/0x550 [ 144.937799][ T7094] BTRFS info (device loop0): using free space tree [ 144.940851][ T5784] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 40 d3 b6 ff e9 ac fc ff ff e8 a6 7b 5f ff <0f> 0b e8 9f 7b 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 144.940870][ T5784] RSP: 0018:ffffc9000459fb00 EFLAGS: 00010293 [ 144.940888][ T5784] RAX: ffffffff82260f2a RBX: ffff88807664c000 RCX: ffff88802a628000 [ 144.981096][ T5784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.989105][ T5784] RBP: ffffc9000459fbf8 R08: ffffc9000459fb77 R09: 0000000000000000 [ 144.997112][ T5784] R10: ffffc9000459fb40 R11: fffff520008b3f6f R12: ffffc9000b4a9000 [ 145.005117][ T5784] R13: 1ffff920008b3f64 R14: ffff88807664c630 R15: 0000000000000000 [ 145.013125][ T5784] FS: 000055556f42d500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 145.022096][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.028717][ T5784] CR2: 000055556f4485c8 CR3: 000000006178e000 CR4: 00000000003506f0 [ 145.036732][ T5784] Call Trace: [ 145.040039][ T5784] [ 145.043000][ T5784] ? journal_release+0x30/0x30 [ 145.047832][ T5784] journal_release+0x1f/0x30 [ 145.052465][ T5784] reiserfs_put_super+0x222/0x480 [ 145.057530][ T5784] ? hook_inode_free_security+0xb0/0xb0 [ 145.063100][ T5784] ? reiserfs_dirty_inode+0x240/0x240 [ 145.068533][ T5784] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 145.074212][ T5784] ? reiserfs_dirty_inode+0x240/0x240 [ 145.079629][ T5784] generic_shutdown_super+0x134/0x2b0 [ 145.085055][ T5784] kill_block_super+0x44/0x90 [ 145.089769][ T5784] deactivate_locked_super+0x97/0x100 [ 145.095184][ T5784] cleanup_mnt+0x429/0x4c0 [ 145.099651][ T5784] task_work_run+0x1ce/0x250 [ 145.104292][ T5784] ? task_work_cancel+0x240/0x240 [ 145.109361][ T5784] ? exit_to_user_mode_loop+0x3b/0x110 [ 145.114864][ T5784] exit_to_user_mode_loop+0xe6/0x110 [ 145.120256][ T5784] exit_to_user_mode_prepare+0xf6/0x180 [ 145.125847][ T5784] syscall_exit_to_user_mode+0x1a/0x50 [ 145.131355][ T5784] do_syscall_64+0x61/0xb0 [ 145.135841][ T5784] ? clear_bhb_loop+0x40/0x90 [ 145.140552][ T5784] ? clear_bhb_loop+0x40/0x90 [ 145.145261][ T5784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.151193][ T5784] RIP: 0033:0x7f57cff901f7 [ 145.155673][ T5784] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 145.175312][ T5784] RSP: 002b:00007ffe8dd74c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 145.183765][ T5784] RAX: 0000000000000000 RBX: 00007f57d0011d7d RCX: 00007f57cff901f7 [ 145.191770][ T5784] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8dd74d10 [ 145.199771][ T5784] RBP: 00007ffe8dd74d10 R08: 0000000000000000 R09: 0000000000000000 [ 145.207771][ T5784] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8dd75da0 [ 145.215783][ T5784] R13: 00007f57d0011d7d R14: 000000000002358f R15: 00007ffe8dd75de0 [ 145.223799][ T5784] [ 145.226863][ T5784] Modules linked in: [ 145.255668][ T5786] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.290857][ T5784] ---[ end trace 0000000000000000 ]--- [ 145.296436][ T5784] RIP: 0010:do_journal_release+0x53a/0x550 [ 145.305552][ T5784] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 40 d3 b6 ff e9 ac fc ff ff e8 a6 7b 5f ff <0f> 0b e8 9f 7b 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 145.328194][ T5784] RSP: 0018:ffffc9000459fb00 EFLAGS: 00010293 [ 145.334400][ T5784] RAX: ffffffff82260f2a RBX: ffff88807664c000 RCX: ffff88802a628000 [ 145.342894][ T5784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.357431][ T5784] RBP: ffffc9000459fbf8 R08: ffffc9000459fb77 R09: 0000000000000000 [ 145.368720][ T7094] BTRFS info (device loop0): enabling ssd optimizations [ 145.372156][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 145.375691][ T7094] BTRFS info (device loop0): auto enabling async discard [ 145.398764][ T5784] R10: ffffc9000459fb40 R11: fffff520008b3f6f R12: ffffc9000b4a9000 [ 145.410881][ T5784] R13: 1ffff920008b3f64 R14: ffff88807664c630 R15: 0000000000000000 [ 145.430591][ T5784] FS: 000055556f42d500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 145.441257][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.447900][ T5784] CR2: 0000001b2e623ff8 CR3: 000000006178e000 CR4: 00000000003506e0 [ 145.457136][ T5784] Kernel panic - not syncing: Fatal exception [ 145.463580][ T5784] Kernel Offset: disabled [ 145.467911][ T5784] Rebooting in 86400 seconds..