last executing test programs: 2m46.366449356s ago: executing program 2 (id=508): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='enable_event:sch!d:sched_process_fork', 0x25) 2m46.245923418s ago: executing program 2 (id=510): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0xffffffffffffffff) 2m46.01921041s ago: executing program 2 (id=512): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x2, 0x7fff0003}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x80000}) lseek(r2, 0xfffe, 0x2) 2m45.62667922s ago: executing program 2 (id=516): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 2m45.467718995s ago: executing program 2 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x30, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x4}]}]}, 0x30}}, 0x0) 2m45.175939734s ago: executing program 2 (id=519): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xb, 0x0, @local, 0x2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000c80)="105a3aed00007929e6f1348f96cf00ac36c10be77837dba2a7aa2950752a576c55c4a0541a810eea", 0x28}], 0x1}, 0x20008b88) 2m44.707607941s ago: executing program 32 (id=519): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xb, 0x0, @local, 0x2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000c80)="105a3aed00007929e6f1348f96cf00ac36c10be77837dba2a7aa2950752a576c55c4a0541a810eea", 0x28}], 0x1}, 0x20008b88) 2m27.183480795s ago: executing program 4 (id=636): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0xe, 0x100000001, 0x2, 0x0, 0x3d, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x7f, 0x800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x400add0, &(0x7f00000001c0)={0xa, 0x4e24, 0x10789e, @empty}, 0x1c) 2m26.466488657s ago: executing program 4 (id=641): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) dup2(r1, r0) 2m26.289937734s ago: executing program 4 (id=644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000180)) 2m26.03487299s ago: executing program 4 (id=647): syz_mount_image$udf(&(0x7f0000000340), &(0x7f0000000a00)='./file0\x00', 0x2000002, &(0x7f0000000a40)=ANY=[@ANYBLOB='volume=00000000000000000062,gid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc32, &(0x7f0000000b80)="$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") mount$overlay(0x0, &(0x7f00000022c0)='./file0\x00', &(0x7f0000002300), 0x0, &(0x7f0000002340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000002380)='./file0\x00', 0x141104, 0x1aa) getdents64(r0, 0x0, 0x0) 2m25.519721971s ago: executing program 4 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0) 2m24.878373385s ago: executing program 4 (id=657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl(r1, 0x4048aec9, &(0x7f00000000c0)="01") 2m24.360268366s ago: executing program 33 (id=657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl(r1, 0x4048aec9, &(0x7f00000000c0)="01") 51.776195298s ago: executing program 5 (id=1180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 51.312846794s ago: executing program 5 (id=1182): timer_create(0x3, &(0x7f0000001900)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000001940)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001980), 0x8, 0x0) ppoll(&(0x7f00000019c0)=[{r0, 0x4000}, {r0, 0x100}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000001a00)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 50.26442012s ago: executing program 5 (id=1187): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x6bb, &(0x7f0000000780)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 49.812098815s ago: executing program 5 (id=1189): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 47.407308538s ago: executing program 5 (id=1199): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000400)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='ms_mode\x00', &(0x7f0000000480)='prefer-crc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 45.057978204s ago: executing program 5 (id=1208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.345577226s ago: executing program 34 (id=1208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.375978098s ago: executing program 1 (id=1352): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406d0432c500000000000109022400210000f0490904000801"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32, @ANYBLOB="10001b"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 3.539143323s ago: executing program 6 (id=1363): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./proc/sys/kernel/sem\x00', 0xc2880, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) 3.27583854s ago: executing program 1 (id=1365): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001180)={[{@shortname_win95}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_lower}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@uni_xlate}, {@utf8no}, {@fat=@sys_immutable}, {@rodir}, {@numtail}, {@shortname_mixed}, {@rodir}, {@shortname_win95}, {@numtail}]}, 0x7f, 0x2bf, &(0x7f0000001700)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 3.263568571s ago: executing program 6 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xffffffffffffff0e}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 2.821049686s ago: executing program 1 (id=1369): r0 = syz_io_uring_setup(0x10, &(0x7f0000000340)={0x0, 0xb45d, 0x0, 0x0, 0x4}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000005c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 2.436014274s ago: executing program 1 (id=1372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 2.435429974s ago: executing program 6 (id=1373): r0 = openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xffdfffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x167, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xb420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x1, 0x400, 0x1}) 2.167691952s ago: executing program 6 (id=1374): mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/devices/virtual/cpuid/cpu0/uevent\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='\x00\x00\n', 0x3) 2.055321303s ago: executing program 1 (id=1375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) 1.963739342s ago: executing program 0 (id=1377): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) 1.757191642s ago: executing program 6 (id=1378): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101442, 0x95) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1.614023857s ago: executing program 3 (id=1379): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0xd, 0x0, 0x0, @time={0x3, 0x83}, {0x0, 0x2}, {0x20}, @raw32={[0x0, 0xb2d1]}}], 0xfe52) 1.560126493s ago: executing program 0 (id=1380): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 1.28455109s ago: executing program 3 (id=1381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x30, 0x3a, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x9, 0x4, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) r1 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x1}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000140)="1140679a", 0x4}], 0x1}, 0x40810) 1.137423545s ago: executing program 0 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000100980)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00001009c0)='./sys\x00', &(0x7f0000100a00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000100a40)='./sys/devices/system/cpu/online\x00', 0x0, 0x0) read(r0, &(0x7f0000100a80)=""/10, 0xa) 976.100451ms ago: executing program 3 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 789.91127ms ago: executing program 0 (id=1384): unshare(0x22020600) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 767.356862ms ago: executing program 3 (id=1385): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x6}, 0x2) 602.285829ms ago: executing program 6 (id=1386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2c, r1, 0x601, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x800) 526.400787ms ago: executing program 3 (id=1387): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000, 0xfffffffffffffffc}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x2, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000700)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) 414.976638ms ago: executing program 0 (id=1388): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) ppoll(&(0x7f00000001c0)=[{r0, 0xa0d0}], 0x1, 0x0, 0x0, 0x0) 156.084524ms ago: executing program 3 (id=1389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)={0x3}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000480)={0xff}) 155.741134ms ago: executing program 1 (id=1390): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x4, 0x2) getdents64(r0, 0xffffffffffffffff, 0x43) 0s ago: executing program 0 (id=1391): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) kernel console output (not intermixed with test programs): 211a9-7d00-4ebf-a576-e3de63fa2cbd [ 144.787769][ T7203] loop3: detected capacity change from 0 to 512 [ 144.795909][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.865189][ T7203] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 144.936276][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.959214][ T7203] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 144.968541][ T3524] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 145.001454][ T7176] XFS (loop2): Ending clean mount [ 145.012810][ T7203] System zones: 1-12 [ 145.047912][ T7203] EXT4-fs (loop3): orphan cleanup on readonly fs [ 145.057892][ T3524] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 145.092169][ T3524] EXT4-fs error (device loop0): ext4_release_dquot:6994: comm kworker/u4:11: Failed to release dquot type 0 [ 145.119329][ T7203] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.491: invalid indirect mapped block 589824 (level 0) [ 145.139019][ T5798] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 145.159543][ T5798] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 145.164624][ T7203] EXT4-fs (loop3): Remounting filesystem read-only [ 145.180603][ T5798] EXT4-fs error (device loop0): ext4_quota_off:7242: inode #3: comm syz-executor: mark_inode_dirty error [ 145.188590][ T7203] EXT4-fs (loop3): 1 truncate cleaned up [ 145.216201][ T5790] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 145.243500][ T7203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 145.369558][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 146.389871][ T7245] loop2: detected capacity change from 0 to 256 [ 146.438890][ T7222] loop0: detected capacity change from 0 to 32768 [ 146.911050][ T7252] pimreg: tun_chr_ioctl cmd 1074025677 [ 146.921802][ T7254] loop3: detected capacity change from 0 to 512 [ 146.932969][ T7252] pimreg: linktype set to 773 [ 146.977852][ T7254] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.514: inode has both inline data and extents flags [ 147.020171][ T28] audit: type=1326 audit(1793914667.608:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8d959fb19 code=0x0 [ 147.045597][ T7254] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.514: couldn't read orphan inode 15 (err -117) [ 147.082549][ T7254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.244886][ T5790] bond0: (slave syz_tun): Releasing backup interface [ 147.271881][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.498126][ T2971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.645158][ T2971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.749534][ T2971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.898200][ T2971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.955968][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.967922][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.984762][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.008360][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.025067][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.032561][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.078555][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.089790][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.098373][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.116821][ T7290] loop3: detected capacity change from 0 to 4096 [ 149.117509][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.131128][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.138759][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.194549][ T7290] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 149.378466][ T7290] ntfs3: loop3: ino=19, mi_enum_attr [ 149.395444][ T7290] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 149.436008][ T7290] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 149.480731][ T7293] rxe_eth0 speed is unknown, defaulting to 1000 [ 149.948475][ T5168] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.051121][ T7319] loop3: detected capacity change from 0 to 1024 [ 150.181916][ T5168] usb 1-1: Using ep0 maxpacket: 8 [ 150.203265][ T5168] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 150.232445][ T5168] usb 1-1: config 179 has no interface number 0 [ 150.253352][ T5168] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 150.304449][ T5168] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 150.325491][ T5168] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.350726][ T5168] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 150.393325][ T5168] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 150.450393][ T5168] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 150.493527][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.539894][ T7313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.165088][ T52] Bluetooth: hci1: command tx timeout [ 151.513048][ T7293] chnl_net:caif_netlink_parms(): no params data found [ 151.523081][ T5168] usb 1-1: USB disconnect, device number 4 [ 151.523151][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 151.523207][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 151.577977][ T7343] loop3: detected capacity change from 0 to 512 [ 151.604634][ T7343] EXT4-fs (loop3): Test dummy encryption mode enabled [ 151.626626][ T7343] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.694104][ T7343] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.544: bad orphan inode 131083 [ 151.777834][ T7343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.241673][ T7343] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 152.255444][ T2971] hsr_slave_0: left promiscuous mode [ 152.280549][ T2971] hsr_slave_1: left promiscuous mode [ 152.315018][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.338629][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.362429][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.379430][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.391673][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.419230][ T2971] bridge_slave_1: left allmulticast mode [ 152.438574][ T2971] bridge_slave_1: left promiscuous mode [ 152.459536][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.509348][ T2971] bridge_slave_0: left allmulticast mode [ 152.517424][ T2971] bridge_slave_0: left promiscuous mode [ 152.523285][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.589494][ T2971] veth1_macvtap: left promiscuous mode [ 152.598490][ T2971] veth0_macvtap: left promiscuous mode [ 152.618205][ T2971] veth1_vlan: left promiscuous mode [ 152.627465][ T2971] veth0_vlan: left promiscuous mode [ 153.251505][ T52] Bluetooth: hci1: command tx timeout [ 153.588816][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 153.654370][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 153.714118][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.776556][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.199488][ T2971] bond0 (unregistering): Released all slaves [ 154.299320][ T7363] bonding: unable to delete non-existent b [ 154.350919][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.385017][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.392389][ T7293] bridge_slave_0: entered allmulticast mode [ 154.427348][ T7293] bridge_slave_0: entered promiscuous mode [ 154.440754][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.449195][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.465539][ T7293] bridge_slave_1: entered allmulticast mode [ 154.473045][ T7293] bridge_slave_1: entered promiscuous mode [ 154.591008][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.646804][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.783192][ T7293] team0: Port device team_slave_0 added [ 154.827726][ T7293] team0: Port device team_slave_1 added [ 154.920889][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.928058][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.965519][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.007702][ T7400] ip_tables: iptables: counters copy to user failed while replacing table [ 155.034817][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.041841][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.083873][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 155.090337][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.281827][ T7293] hsr_slave_0: entered promiscuous mode [ 155.296617][ T7293] hsr_slave_1: entered promiscuous mode [ 155.303211][ T7293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.317907][ T7293] Cannot create hsr debugfs directory [ 155.331962][ T52] Bluetooth: hci1: command tx timeout [ 155.490354][ T9] IPVS: starting estimator thread 0... [ 155.585032][ T7416] IPVS: using max 18 ests per chain, 43200 per kthread [ 156.020815][ T7293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 156.047606][ T7293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 156.068957][ T7293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.094182][ T7293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 156.269305][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'. [ 156.281462][ T7441] tipc: Started in network mode [ 156.287807][ T7441] tipc: Node identity 7, cluster identity 4711 [ 156.294063][ T7441] tipc: Node number set to 7 [ 156.396622][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.436967][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.458073][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.465435][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.504046][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.511350][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.833865][ T7458] loop0: detected capacity change from 0 to 16 [ 156.912671][ T7458] erofs: (device loop0): mounted with root inode @ nid 36. [ 157.011020][ T7458] erofs: (device loop0): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 157.045753][ T7458] erofs: (device loop0): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000 [ 157.058470][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.407706][ T52] Bluetooth: hci1: command tx timeout [ 157.777333][ T7293] veth0_vlan: entered promiscuous mode [ 157.817725][ T7293] veth1_vlan: entered promiscuous mode [ 157.928917][ T7293] veth0_macvtap: entered promiscuous mode [ 157.952217][ T7293] veth1_macvtap: entered promiscuous mode [ 157.974885][ T7496] phram: illegal device length [ 158.014067][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.044431][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.076285][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.104534][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.124787][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.141786][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.155787][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.183710][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.214999][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.244463][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.264194][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.283809][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.302180][ T7503] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma? [ 158.316893][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.354340][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.378702][ T7293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.403994][ T7293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.413664][ T7293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.422802][ T7293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.603252][ T7512] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 158.681690][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 158.856876][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.886987][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.991368][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.015896][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.724923][ T5885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.914592][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 159.924244][ T5885] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 159.941583][ T5885] usb 2-1: config 16 has an invalid interface number: 128 but max is 0 [ 159.960298][ T5885] usb 2-1: config 16 has no interface number 0 [ 160.001808][ T5885] usb 2-1: config 16 interface 128 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.042760][ T5885] usb 2-1: config 16 interface 128 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.073556][ T5885] usb 2-1: config 16 interface 128 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.103932][ T5885] usb 2-1: config 16 interface 128 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.133303][ T5885] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.150905][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.397110][ T5885] usb 2-1: GET_CAPABILITIES returned 0 [ 160.413703][ T5885] usbtmc 2-1:16.128: can't read capabilities [ 160.687229][ T5885] usb 2-1: USB disconnect, device number 4 [ 160.939692][ T7563] loop4: detected capacity change from 0 to 40427 [ 160.991808][ T7563] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 161.024509][ T7563] F2FS-fs (loop4): Image doesn't support compression [ 161.088969][ T7563] F2FS-fs (loop4): invalid crc value [ 161.108406][ T7563] F2FS-fs (loop4): Found nat_bits in checkpoint [ 161.377801][ T7563] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 161.623808][ T7293] syz-executor: attempt to access beyond end of device [ 161.623808][ T7293] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.665760][ T7293] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 161.754552][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.960056][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 161.983508][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.009603][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.035680][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.076142][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 162.101335][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.133040][ T9] usb 4-1: config 0 descriptor?? [ 162.414539][ T5859] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 162.611624][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 162.626135][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input7 [ 162.650616][ T5859] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 162.663313][ T5859] usb 1-1: config 179 has no interface number 0 [ 162.676272][ T5859] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 162.705709][ T5859] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 162.727740][ T5859] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 162.760325][ T5859] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 162.772744][ T9] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 162.809775][ T5859] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 162.840668][ T9] usb 4-1: USB disconnect, device number 3 [ 162.868496][ T5859] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 162.901984][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.951582][ T7616] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 163.067860][ T7637] loop4: detected capacity change from 0 to 8 [ 163.084051][ T7633] fido_id[7633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 163.246572][ T7637] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 163.287422][ T7637] cramfs: wrong magic [ 163.379581][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 163.765918][ T9] usb 1-1: USB disconnect, device number 5 [ 163.765999][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 163.766056][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 163.826559][ T9] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 164.126667][ T7659] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 164.299393][ T7662] loop3: detected capacity change from 0 to 256 [ 164.379722][ T7662] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 164.754911][ T7673] loop3: detected capacity change from 0 to 512 [ 164.762303][ T7655] loop4: detected capacity change from 0 to 32768 [ 164.817863][ T7673] EXT4-fs (loop3): orphan cleanup on readonly fs [ 164.877162][ T7655] JBD2: Ignoring recovery information on journal [ 164.879197][ T7673] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.633: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 164.914551][ T7673] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.633: ea_inode dec ref err=-117 [ 164.978103][ T7673] EXT4-fs (loop3): 1 orphan inode deleted [ 164.997319][ T7673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 165.030922][ T7655] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 165.269982][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.481745][ T7293] ocfs2: Unmounting device (7,4) on (node local) [ 165.694901][ T7668] loop0: detected capacity change from 0 to 32768 [ 165.997405][ T7694] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 166.055742][ T7694] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 166.239440][ T7704] netlink: 'syz.3.643': attribute type 2 has an invalid length. [ 166.247677][ T7704] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 166.260295][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.643'. [ 166.294621][ T7704] netlink: 'syz.3.643': attribute type 2 has an invalid length. [ 166.338501][ T7704] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 166.377641][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.643'. [ 166.413184][ T7706] tap0: tun_chr_ioctl cmd 2147767507 [ 166.414564][ T7704] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 166.654159][ T7710] loop4: detected capacity change from 0 to 2048 [ 166.677861][ T7708] loop1: detected capacity change from 0 to 8192 [ 166.697125][ T7710] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.720318][ T7708] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.831585][ T7708] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 166.912013][ T7708] REISERFS (device loop1): using ordered data mode [ 166.953032][ T7708] reiserfs: using flush barriers [ 166.962975][ T7723] loop0: detected capacity change from 0 to 128 [ 166.980512][ T7708] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.055802][ T7293] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh [ 167.069391][ T7708] REISERFS (device loop1): checking transaction log (loop1) [ 167.102360][ T7293] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh [ 167.121417][ T7708] REISERFS (device loop1): Using r5 hash to sort names [ 167.144118][ T7708] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 167.736216][ T1136] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.785972][ T5860] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 167.868414][ T1136] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.995602][ T5860] usb 1-1: Using ep0 maxpacket: 8 [ 168.006438][ T5860] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 168.024547][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.057691][ T5860] pvrusb2: Hardware description: Terratec Grabster AV400 [ 168.076140][ T1136] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.085433][ T5860] pvrusb2: ********** [ 168.090483][ T5860] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 168.126549][ T5860] pvrusb2: Important functionality might not be entirely working. [ 168.144866][ T5860] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 168.168004][ T5860] pvrusb2: ********** [ 168.236868][ T1136] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.273522][ T7730] loop3: detected capacity change from 0 to 32768 [ 168.303875][ T2327] pvrusb2: Invalid write control endpoint [ 168.516618][ T7728] pvrusb2: Invalid write control endpoint [ 168.526803][ T9] usb 1-1: USB disconnect, device number 6 [ 168.653572][ T2327] pvrusb2: Invalid write control endpoint [ 168.696919][ T7736] device-mapper: table: 248:3: crypt: Error decoding and setting key (-EINVAL) [ 168.708021][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 168.714934][ T7736] device-mapper: ioctl: error adding target to table [ 168.750739][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 168.774751][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 168.806038][ T2327] pvrusb2: Device being rendered inoperable [ 168.894592][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 168.902556][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 168.996910][ T2327] pvrusb2: Attached sub-driver cx25840 [ 169.002788][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 169.072053][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 169.504265][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.518439][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.539306][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.549983][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.559629][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.569603][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.756486][ T7765] loop0: detected capacity change from 0 to 512 [ 169.772205][ T7765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.820938][ T7765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.894125][ T7765] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.115005][ T7757] rxe_eth0 speed is unknown, defaulting to 1000 [ 170.228064][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.435769][ T7746] loop1: detected capacity change from 0 to 32768 [ 170.460155][ T7780] loop3: detected capacity change from 0 to 1024 [ 170.567640][ T7746] JBD2: Ignoring recovery information on journal [ 170.756190][ T7746] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 170.958682][ T7792] loop0: detected capacity change from 0 to 1024 [ 170.992455][ T7792] EXT4-fs: Ignoring removed bh option [ 171.059654][ T7798] /dev/loop0: Can't open blockdev [ 171.065477][ T7792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.273399][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.348289][ T5786] ocfs2: Unmounting device (7,1) on (node local) [ 171.646894][ T52] Bluetooth: hci1: command tx timeout [ 171.993740][ T7818] loop1: detected capacity change from 0 to 4096 [ 172.000535][ T1136] hsr_slave_0: left promiscuous mode [ 172.066261][ T1136] hsr_slave_1: left promiscuous mode [ 172.081012][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.098826][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.106309][ T7824] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.151561][ T28] audit: type=1326 audit(1793914692.738:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.0.678" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fc459fb19 code=0x0 [ 172.205763][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.213249][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.259215][ T1136] bridge_slave_1: left allmulticast mode [ 172.266847][ T1136] bridge_slave_1: left promiscuous mode [ 172.272728][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.317019][ T1136] bridge_slave_0: left allmulticast mode [ 172.323698][ T1136] bridge_slave_0: left promiscuous mode [ 172.340986][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.459949][ T1136] veth1_macvtap: left promiscuous mode [ 172.476066][ T1136] veth0_macvtap: left promiscuous mode [ 172.491506][ T1136] veth1_vlan: left promiscuous mode [ 172.500452][ T1136] veth0_vlan: left promiscuous mode [ 172.808591][ T28] audit: type=1400 audit(1793914693.398:33): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7841 comm="syz.3.682" name="unknown" offset=16 [ 172.838938][ T27] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 173.056553][ T27] usb 2-1: config index 0 descriptor too short (expected 5668, got 36) [ 173.084874][ T27] usb 2-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 173.114501][ T27] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 173.123545][ T27] usb 2-1: config 3 has no interface number 0 [ 173.140491][ T27] usb 2-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 173.181878][ T27] usb 2-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.200072][ T27] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 173.210106][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.225615][ T27] usb 2-1: Product: syz [ 173.234859][ T27] usb 2-1: Manufacturer: syz [ 173.248148][ T27] usb 2-1: SerialNumber: syz [ 173.282568][ T7834] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.543652][ T27] usb-storage 2-1:3.20: USB Mass Storage device detected [ 173.587284][ T9] smpboot: CPU 1 is now offline [ 173.639637][ T7857] loop3: detected capacity change from 0 to 128 [ 173.665234][ T52] Bluetooth: hci1: command tx timeout [ 173.693538][ T27] usb-storage 2-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 173.709906][ T7857] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.783153][ T27] scsi host1: usb-storage 2-1:3.20 [ 173.826920][ T7857] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.083061][ T5859] usb 2-1: USB disconnect, device number 5 [ 174.796673][ T7875] loop0: detected capacity change from 0 to 512 [ 174.921232][ T7875] Quota error (device loop0): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 174.969563][ T7875] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 175.026086][ T7875] EXT4-fs error (device loop0): ext4_acquire_dquot:6958: comm syz.0.695: Failed to acquire dquot type 1 [ 175.113136][ T7875] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #16: comm syz.0.695: corrupted inode contents [ 175.161144][ T1136] team0 (unregistering): Port device team_slave_1 removed [ 175.181296][ T7875] EXT4-fs error (device loop0): ext4_dirty_inode:6188: inode #16: comm syz.0.695: mark_inode_dirty error [ 175.251867][ T7875] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #16: comm syz.0.695: corrupted inode contents [ 175.301514][ T7875] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #16: comm syz.0.695: mark_inode_dirty error [ 175.342987][ T1136] team0 (unregistering): Port device team_slave_0 removed [ 175.366582][ T7875] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #16: comm syz.0.695: corrupted inode contents [ 175.415723][ T7886] program syz.1.699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.455009][ T7875] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 175.505922][ T7875] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #16: comm syz.0.695: corrupted inode contents [ 175.576443][ T7875] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.695: mark_inode_dirty error [ 175.605041][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.657678][ T7875] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 175.710217][ T7875] EXT4-fs (loop0): 1 truncate cleaned up [ 175.729698][ T52] Bluetooth: hci1: command tx timeout [ 175.750990][ T7875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.801268][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.816226][ T7875] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.973651][ T7875] Quota error (device loop0): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 176.001105][ T7875] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 176.037711][ T7875] EXT4-fs error (device loop0): ext4_acquire_dquot:6958: comm syz.0.695: Failed to acquire dquot type 1 [ 176.163262][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.666307][ T1136] bond0 (unregistering): Released all slaves [ 176.760436][ T7757] chnl_net:caif_netlink_parms(): no params data found [ 177.343055][ T7757] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.431913][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.477147][ T7757] bridge_slave_0: entered allmulticast mode [ 177.516511][ T7757] bridge_slave_0: entered promiscuous mode [ 177.571436][ T7757] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.624606][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.681379][ T7757] bridge_slave_1: entered allmulticast mode [ 177.729158][ T7757] bridge_slave_1: entered promiscuous mode [ 177.810872][ T52] Bluetooth: hci1: command tx timeout [ 177.880449][ T7757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.975940][ T7757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.121200][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 178.175332][ T7930] macvlan0: entered promiscuous mode [ 178.181363][ T7930] netlink: 'syz.3.713': attribute type 2 has an invalid length. [ 178.264045][ T7757] team0: Port device team_slave_0 added [ 178.317122][ T7757] team0: Port device team_slave_1 added [ 178.473812][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.517839][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.642158][ T7919] loop1: detected capacity change from 0 to 32768 [ 178.666069][ T7757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.698713][ T7941] device-mapper: ioctl: Invalid ioctl structure: name mp, dev 30 [ 178.747829][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.774635][ T7919] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 178.798270][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.962665][ T7757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.014683][ T7919] syz.1.710 (7919) used greatest stack depth: 18808 bytes left [ 179.319354][ T7757] hsr_slave_0: entered promiscuous mode [ 179.334070][ T5786] ocfs2: Unmounting device (7,1) on (node local) [ 179.368508][ T7757] hsr_slave_1: entered promiscuous mode [ 179.407415][ T7757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.449752][ T7757] Cannot create hsr debugfs directory [ 180.121154][ T7959] loop1: detected capacity change from 0 to 128 [ 180.221225][ T7959] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 180.312217][ T7959] hpfs: filesystem error: improperly stopped [ 180.364715][ T7959] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 180.372507][ T7959] hpfs: You really don't want any checks? You are crazy... [ 180.405844][ T7963] netlink: 64 bytes leftover after parsing attributes in process `syz.0.721'. [ 180.464911][ T7959] hpfs: Code page index out of array [ 180.470254][ T7959] hpfs: code page support is disabled [ 180.525880][ T7959] hpfs: hpfs_map_4sectors(): unaligned read [ 180.532975][ T7959] hpfs: hpfs_map_4sectors(): unaligned read [ 180.556597][ T7757] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 180.602540][ T7757] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 180.634727][ T7959] hpfs: filesystem error: unable to find root dir [ 180.702085][ T7757] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 180.726219][ T7953] loop3: detected capacity change from 0 to 40427 [ 180.764820][ T7757] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 180.813315][ T7953] F2FS-fs (loop3): invalid crc value [ 180.877790][ T7953] F2FS-fs (loop3): Found nat_bits in checkpoint [ 181.207585][ T7953] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 181.298434][ T7757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.441035][ T7757] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.459604][ T7953] syz.3.719: attempt to access beyond end of device [ 181.459604][ T7953] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.560791][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.568011][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.665880][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.673047][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.699589][ T7984] loop1: detected capacity change from 0 to 2048 [ 181.814148][ T7984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.999415][ T7984] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #12: block 2: comm syz.1.725: lblock 0 mapped to illegal pblock 2 (length 1) [ 182.090530][ T5795] syz-executor: attempt to access beyond end of device [ 182.090530][ T5795] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 182.108431][ T7994] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #12: block 2: comm syz.1.725: lblock 0 mapped to illegal pblock 2 (length 1) [ 182.173481][ T5795] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 182.283340][ T7998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 182.349219][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.792132][ T7757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.929339][ T8008] tap0: tun_chr_ioctl cmd 2147767519 [ 184.008901][ T8034] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.101493][ T7757] veth0_vlan: entered promiscuous mode [ 184.178348][ T7757] veth1_vlan: entered promiscuous mode [ 184.357885][ T8045] loop1: detected capacity change from 0 to 512 [ 184.548847][ T8045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.632353][ T7757] veth0_macvtap: entered promiscuous mode [ 184.703558][ T8045] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.740029][ T7757] veth1_macvtap: entered promiscuous mode [ 184.901315][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.979931][ T8045] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.739: bg 0: block 217: padding at end of block bitmap is not set [ 185.004708][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.069834][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.127207][ T8045] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6660: Corrupt filesystem [ 185.151537][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.198820][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.267538][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.341345][ T7757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.366309][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.497054][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.586207][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.648525][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.714109][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.763881][ T7757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.819046][ T7757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.847504][ T8062] device-mapper: ioctl: Invalid ioctl structure: name m, dev 2f [ 185.874338][ T7757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.966845][ T7757] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.018862][ T7757] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.064527][ T7757] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.085749][ T7757] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.534802][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.542677][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.648473][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.697058][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.195167][ T8060] loop1: detected capacity change from 0 to 32768 [ 187.339170][ T8060] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 187.453717][ T8095] loop0: detected capacity change from 0 to 128 [ 187.546434][ T8060] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 187.598470][ T8095] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.735248][ T8060] XFS (loop1): Starting recovery (logdev: internal) [ 187.767365][ T8095] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.845571][ T8060] XFS (loop1): Ending recovery (logdev: internal) [ 188.120546][ T5798] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.431332][ T5786] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.469775][ T8142] MTRR 1 not used [ 189.785739][ T8152] loop3: detected capacity change from 0 to 256 [ 190.318983][ T8162] loop5: detected capacity change from 0 to 128 [ 190.430644][ T8162] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 190.510929][ T8162] hpfs: filesystem error: improperly stopped [ 190.566774][ T8162] hpfs: You really don't want any checks? You are crazy... [ 190.617786][ T8162] hpfs: hpfs_map_sector(): read error [ 190.623218][ T8162] hpfs: code page support is disabled [ 190.687557][ T8162] hpfs: hpfs_map_4sectors(): unaligned read [ 190.744597][ T8162] hpfs: hpfs_map_4sectors(): unaligned read [ 190.786194][ T8162] hpfs: filesystem error: unable to find root dir [ 190.901526][ T8131] loop0: detected capacity change from 0 to 40427 [ 190.999634][ T8131] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 191.070401][ T8177] vhci_hcd vhci_hcd.0: failed to lookup sock [ 191.128562][ T8131] F2FS-fs (loop0): invalid crc value [ 191.206329][ T8131] F2FS-fs (loop0): Found nat_bits in checkpoint [ 191.303531][ T28] audit: type=1326 audit(1793914711.878:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.5.778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bf9fb19 code=0x7ffc0000 [ 191.524757][ T28] audit: type=1326 audit(1793914711.888:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.5.778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bf9fb19 code=0x7ffc0000 [ 191.650438][ T8131] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 191.742953][ T28] audit: type=1326 audit(1793914711.938:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.5.778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bf9fb19 code=0x7ffc0000 [ 191.906353][ T28] audit: type=1326 audit(1793914711.938:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.5.778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bf9fb19 code=0x7ffc0000 [ 192.098629][ T8200] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 192.114538][ T28] audit: type=1326 audit(1793914711.948:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.5.778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f519bf9fb19 code=0x7ffc0000 [ 192.229922][ T8202] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.784'. [ 192.282718][ T28] audit: type=1326 audit(1793914711.948:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.5.778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bf9fb19 code=0x7ffc0000 [ 192.472754][ T28] audit: type=1326 audit(1793914711.948:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.5.778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bf9fb19 code=0x7ffc0000 [ 192.629629][ T8211] loop3: detected capacity change from 0 to 512 [ 192.658223][ T28] audit: type=1326 audit(1793914711.958:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.5.778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bf9fb19 code=0x7ffc0000 [ 192.744988][ T8211] EXT4-fs (loop3): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 192.868587][ T28] audit: type=1326 audit(1793914711.958:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.5.778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bf9fb19 code=0x7ffc0000 [ 192.933298][ T8218] netlink: 56 bytes leftover after parsing attributes in process `syz.1.790'. [ 193.074541][ T28] audit: type=1326 audit(1793914711.978:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.5.778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f519bf9fb19 code=0x7ffc0000 [ 193.250081][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.261469][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.414993][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 194.594040][ T8257] rtc_cmos 00:00: in use; can't configure [ 194.659533][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 194.694631][ T9] usb 1-1: config 0 has no interface number 0 [ 194.738537][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 194.789224][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.852451][ T9] usb 1-1: Product: syz [ 194.882835][ T9] usb 1-1: Manufacturer: syz [ 194.908419][ T9] usb 1-1: SerialNumber: syz [ 194.959865][ T9] usb 1-1: config 0 descriptor?? [ 194.985833][ T8268] input: syz0 as /devices/virtual/input/input10 [ 195.687188][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 195.753189][ T9] asix: probe of 1-1:0.251 failed with error -524 [ 195.973620][ T9] usb 1-1: USB disconnect, device number 7 [ 196.295920][ T8294] loop7: detected capacity change from 0 to 7 [ 196.346079][ T8296] blk_print_req_error: 29 callbacks suppressed [ 196.346094][ T8296] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 196.474752][ T8294] Dev loop7: unable to read RDB block 7 [ 196.525743][ T8294] loop7: unable to read partition table [ 196.558760][ T8299] loop5: detected capacity change from 0 to 64 [ 196.595122][ T8294] loop7: partition table beyond EOD, truncated [ 196.632147][ T8278] loop3: detected capacity change from 0 to 32768 [ 196.731602][ T8294] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 196.834707][ T8278] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 196.980111][ T8278] XFS (loop3): Ending clean mount [ 197.001251][ T5153] Dev loop7: unable to read RDB block 7 [ 197.054501][ T5153] loop7: unable to read partition table [ 197.060364][ T5153] loop7: partition table beyond EOD, truncated [ 197.174582][ T8278] XFS (loop3): User initiated shutdown received. [ 197.311485][ T8278] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 197.453533][ T8278] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 197.492112][ T8317] netlink: 104 bytes leftover after parsing attributes in process `syz.0.818'. [ 197.653911][ T5795] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 197.994521][ T5859] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 198.368682][ T5859] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.449406][ T5859] usb 2-1: config 0 interface 0 has no altsetting 0 [ 198.510625][ T5859] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 198.570020][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.623947][ T8341] netlink: 'syz.0.825': attribute type 12 has an invalid length. [ 198.665008][ T5859] usb 2-1: config 0 descriptor?? [ 198.700920][ T8341] netlink: 'syz.0.825': attribute type 29 has an invalid length. [ 198.786328][ T8341] netlink: 148 bytes leftover after parsing attributes in process `syz.0.825'. [ 198.854623][ T8341] netlink: 'syz.0.825': attribute type 1 has an invalid length. [ 198.928121][ T8341] netlink: 'syz.0.825': attribute type 2 has an invalid length. [ 198.961018][ T8345] loop3: detected capacity change from 0 to 2048 [ 199.086173][ T8347] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.272485][ T5859] wacom 0003:056A:0016.0007: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 199.400407][ T8347] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 199.413311][ T5859] wacom 0003:056A:0016.0007: hidraw0: USB HID v10.01 Device [HID 056a:0016] on usb-dummy_hcd.1-1/input0 [ 199.509074][ T8347] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 199.529934][ T5859] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0016.0007/input/input11 [ 199.674534][ T8347] Remounting filesystem read-only [ 199.847532][ T5859] usb 2-1: USB disconnect, device number 6 [ 199.956648][ T5795] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 200.025877][ T5795] NILFS (loop3): discard dirty page: offset=0, ino=15 [ 200.032812][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.152381][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.204248][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.261804][ T5795] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 200.323689][ T5795] NILFS (loop3): discard dirty page: offset=4096, ino=15 [ 200.357450][ T5795] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 200.394518][ T5795] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 200.454571][ T5795] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 200.484578][ T5795] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 200.527975][ T5795] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 200.594885][ T5795] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 200.601616][ T5795] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 200.683171][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.729942][ T8372] loop0: detected capacity change from 0 to 512 [ 200.736547][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.783926][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.837067][ T8372] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 200.873466][ T5795] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 200.915877][ T5795] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 200.923227][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.002524][ T8372] EXT4-fs (loop0): 1 truncate cleaned up [ 201.034520][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.074099][ T8372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.112893][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.165813][ T5795] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 201.172558][ T5795] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 201.263040][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.316157][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.366259][ T5795] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 201.402395][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 201.467780][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.028747][ T8374] loop5: detected capacity change from 0 to 32768 [ 202.077454][ T8374] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.836 (8374) [ 202.129809][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 202.129825][ T28] audit: type=1400 audit(1793914722.698:53): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8392 comm="syz.1.839" [ 202.225761][ T8374] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 202.289841][ T8374] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 202.360874][ T8374] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 202.454966][ T8374] BTRFS info (device loop5): use zstd compression, level 3 [ 202.462327][ T8374] BTRFS info (device loop5): using free space tree [ 202.726061][ T8374] BTRFS info (device loop5): enabling ssd optimizations [ 202.790228][ T8374] BTRFS info (device loop5): auto enabling async discard [ 203.060726][ T28] audit: type=1800 audit(1793914723.648:54): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.836" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 203.698723][ T7757] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 205.794526][ T8472] loop3: detected capacity change from 0 to 131072 [ 205.885670][ T8472] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (512, 24) [ 205.893551][ T8472] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 205.901884][ T8472] F2FS-fs (loop3): Test dummy encryption mode enabled [ 205.922885][ T8472] F2FS-fs (loop3): invalid crc value [ 205.976409][ T8472] F2FS-fs (loop3): Found nat_bits in checkpoint [ 206.008920][ T8472] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 206.043322][ T8472] F2FS-fs (loop3): Start checkpoint disabled! [ 206.108590][ T8472] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 206.117269][ T8472] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 207.014773][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 207.023632][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 207.135266][ T8497] netlink: 'syz.0.864': attribute type 6 has an invalid length. [ 210.137786][ T8504] loop1: detected capacity change from 0 to 32768 [ 210.362498][ T8504] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop1": -EINTR [ 210.668083][ T8561] loop3: detected capacity change from 0 to 164 [ 211.750781][ T8543] loop0: detected capacity change from 0 to 32768 [ 211.893085][ T8543] ERROR: (device loop0): diAllocAG: numfree > numinos [ 211.893085][ T8543] [ 211.922523][ T5859] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 211.990473][ T8543] ERROR: (device loop0): remounting filesystem as read-only [ 212.065614][ T8543] ialloc: diAlloc returned -5! [ 212.114641][ T8581] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 212.114641][ T8581] [ 212.144730][ T5859] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 212.194470][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.258730][ T5859] usb 4-1: config 0 descriptor?? [ 212.323886][ T5859] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 212.725303][ T5859] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 212.933598][ T5859] gspca_cpia1: usb_control_msg 01, error -32 [ 212.969120][ T5859] gspca_cpia1: usb_control_msg 01, error -71 [ 213.013283][ T5859] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 213.055611][ T5859] usb 4-1: USB disconnect, device number 4 [ 213.977732][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 214.068687][ T8615] netlink: 'syz.1.895': attribute type 12 has an invalid length. [ 214.625683][ T8626] loop3: detected capacity change from 0 to 4096 [ 214.728686][ T8626] EXT4-fs (loop3): Test dummy encryption mode enabled [ 214.740192][ T8601] loop0: detected capacity change from 0 to 32768 [ 214.793110][ T8626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.893344][ T8636] loop5: detected capacity change from 0 to 512 [ 214.932491][ T8601] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 214.989259][ T8636] EXT4-fs: inline encryption not supported [ 215.106912][ T8636] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.276394][ T8636] EXT4-fs (loop5): 1 truncate cleaned up [ 215.357026][ T8636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.564913][ T8636] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5994: inode #12: comm syz.5.903: bad extra_isize 62 (inode size 256) [ 215.701464][ T8636] EXT4-fs (loop5): Remounting filesystem read-only [ 215.825825][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.853146][ T7757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.867377][ T5798] ocfs2: Unmounting device (7,0) on (node local) [ 216.227575][ T8656] loop3: detected capacity change from 0 to 256 [ 217.518509][ T8672] loop3: detected capacity change from 0 to 131072 [ 217.525874][ T8672] XFS: ikeep mount option is deprecated. [ 217.661355][ T8672] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 217.840684][ T28] audit: type=1400 audit(1793914738.428:55): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=8684 comm="syz.1.914" name="foo" offset=35 [ 217.973282][ T8672] XFS (loop3): Starting recovery (logdev: internal) [ 218.009176][ T8689] loop0: detected capacity change from 0 to 128 [ 218.060675][ T8672] XFS (loop3): Ending recovery (logdev: internal) [ 218.093688][ T28] audit: type=1800 audit(1793914738.678:56): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.912" name="file1" dev="loop3" ino=38 res=0 errno=0 [ 218.171979][ T8689] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.271239][ T5795] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 218.804722][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 218.844180][ T8700] loop0: detected capacity change from 0 to 512 [ 218.882997][ T8700] EXT4-fs: Ignoring removed nobh option [ 219.006122][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 219.064822][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.119136][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.205433][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 219.258455][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.324994][ T9] usb 4-1: config 0 descriptor?? [ 219.799337][ T9] hid (null): usage index exceeded [ 219.805608][ T8697] loop1: detected capacity change from 0 to 40427 [ 219.844331][ T9] uclogic 0003:5543:0005.0008: ignoring exceeding usage max [ 219.853112][ T8697] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 219.898451][ T9] uclogic 0003:5543:0005.0008: ignoring exceeding usage max [ 219.909150][ T8697] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 219.939761][ T9] uclogic 0003:5543:0005.0008: usage index exceeded [ 219.968232][ T8697] F2FS-fs (loop1): invalid crc value [ 219.981825][ T9] uclogic 0003:5543:0005.0008: item 0 2 2 2 parsing failed [ 220.019147][ T8697] F2FS-fs (loop1): Found nat_bits in checkpoint [ 220.032383][ T9] uclogic 0003:5543:0005.0008: parse failed [ 220.088313][ T9] uclogic: probe of 0003:5543:0005.0008 failed with error -22 [ 220.191478][ T9] usb 4-1: USB disconnect, device number 5 [ 220.381625][ T8697] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 220.426056][ T8697] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 220.603604][ T5786] syz-executor: attempt to access beyond end of device [ 220.603604][ T5786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 220.697435][ T5786] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 220.809344][ T8725] xt_hashlimit: size too large, truncated to 1048576 [ 220.894543][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 220.912735][ T8727] xt_hashlimit: size too large, truncated to 1048576 [ 221.134666][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 221.177344][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 221.243122][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 221.345557][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 221.410326][ T9] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 221.456083][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.521118][ T8720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 221.583143][ T8720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 221.665345][ T8720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 221.696413][ T9] pl2303 1-1:1.0: pl2303 converter detected [ 221.771730][ T9] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 222.064782][ T8720] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 222.103776][ T8729] loop5: detected capacity change from 0 to 32768 [ 222.111222][ T8720] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 222.145680][ T8720] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 222.220930][ T8720] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 222.282411][ T8720] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 222.957793][ T8717] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 223.166334][ T8717] pl2303 ttyUSB0: error sending break = -32 [ 223.239691][ T9] usb 1-1: USB disconnect, device number 8 [ 223.311280][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 223.381651][ T9] pl2303 1-1:1.0: device disconnected [ 223.465085][ T28] audit: type=1326 audit(1793914744.048:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.1.931" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d959fb19 code=0x7ffc0000 [ 223.623505][ T28] audit: type=1326 audit(1793914744.078:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.1.931" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd8d959fb19 code=0x7ffc0000 [ 223.755957][ T28] audit: type=1326 audit(1793914744.078:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.1.931" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d959fb19 code=0x7ffc0000 [ 224.647521][ T8747] loop5: detected capacity change from 0 to 40427 [ 224.705554][ T8747] F2FS-fs (loop5): invalid crc value [ 224.759159][ T8747] F2FS-fs (loop5): Found nat_bits in checkpoint [ 224.976419][ T8747] F2FS-fs (loop5): Start checkpoint disabled! [ 225.057286][ T8747] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 225.210948][ T8766] loop0: detected capacity change from 0 to 4096 [ 225.330735][ T8766] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 225.529268][ T8766] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 225.594182][ T8766] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 225.621379][ T8761] loop1: detected capacity change from 0 to 32768 [ 225.726349][ T8761] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 225.766018][ T1136] kworker/u4:7: attempt to access beyond end of device [ 225.766018][ T1136] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 225.819697][ T8761] JBD2: Ignoring recovery information on journal [ 225.858010][ T8766] ntfs3: loop0: ino=1c, mi_enum_attr [ 225.869782][ T1136] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 225.946001][ T1136] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 225.952920][ T1136] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 226.035233][ T8761] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 226.163215][ T2971] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 226.223656][ T5798] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 226.283931][ T5798] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 226.364809][ T5798] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 226.382861][ T1136] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 226.488518][ T8761] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 226.647477][ T8761] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 226.684962][ T8761] OCFS2: File system is now read-only. [ 226.718841][ T8761] (syz.1.938,8761,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 226.800120][ T8761] (syz.1.938,8761,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 226.854604][ T8761] (syz.1.938,8761,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 226.863081][ T8761] (syz.1.938,8761,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 226.964816][ T8761] (syz.1.938,8761,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 226.973036][ T8761] (syz.1.938,8761,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 227.068339][ T8761] (syz.1.938,8761,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 227.114638][ T8761] (syz.1.938,8761,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 227.123299][ T8761] (syz.1.938,8761,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 227.219530][ T8761] (syz.1.938,8761,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 227.265004][ T8761] (syz.1.938,8761,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 227.327542][ T8761] (syz.1.938,8761,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 227.385012][ T8761] (syz.1.938,8761,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 227.394171][ T8761] (syz.1.938,8761,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 227.519578][ T8761] (syz.1.938,8761,0):ocfs2_lock_allocators:2704 ERROR: status = -30 [ 227.545370][ T8761] (syz.1.938,8761,0):ocfs2_extend_allocation:592 ERROR: status = -30 [ 227.601010][ T8761] (syz.1.938,8761,0):ocfs2_extend_no_holes:1029 ERROR: status = -30 [ 227.641485][ T8761] (syz.1.938,8761,0):ocfs2_expand_nonsparse_inode:1625 ERROR: status = -30 [ 227.705658][ T8761] (syz.1.938,8761,0):ocfs2_write_begin_nolock:1692 ERROR: status = -30 [ 227.754597][ T8761] (syz.1.938,8761,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 227.959413][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 228.018285][ T5786] ocfs2: Unmounting device (7,1) on (node local) [ 228.184959][ T8] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 228.230871][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.282671][ T8] usb 1-1: config 0 descriptor?? [ 228.295666][ T8804] netlink: 7 bytes leftover after parsing attributes in process `syz.5.948'. [ 228.342645][ T8] cp210x 1-1:0.0: cp210x converter detected [ 228.612231][ T8809] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 228.758575][ T8] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 228.829151][ T8] usb 1-1: cp210x converter now attached to ttyUSB0 [ 228.971197][ T8813] loop1: detected capacity change from 0 to 2048 [ 229.062565][ T8] usb 1-1: USB disconnect, device number 9 [ 229.081724][ T8813] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 229.151670][ T8813] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 229.194935][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 229.258656][ T8] cp210x 1-1:0.0: device disconnected [ 229.266119][ T8813] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 229.360175][ T8813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.590919][ T8821] loop5: detected capacity change from 0 to 128 [ 229.676399][ T8821] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 229.773568][ T8821] hpfs: filesystem error: improperly stopped [ 229.833214][ T8821] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 229.901254][ T8821] hpfs: You really don't want any checks? You are crazy... [ 229.948414][ T8821] hpfs: hpfs_map_sector(): read error [ 229.974828][ T8821] hpfs: code page support is disabled [ 230.020499][ T8821] hpfs: hpfs_map_4sectors(): unaligned read [ 230.046419][ T8821] hpfs: hpfs_map_4sectors(): unaligned read [ 230.052450][ T8821] hpfs: filesystem error: unable to find root dir [ 230.142165][ T8821] hpfs: hpfs_map_4sectors(): unaligned read [ 230.191965][ T8821] hpfs: hpfs_map_sector(): read error [ 231.423673][ T8832] loop1: detected capacity change from 0 to 32768 [ 232.595722][ T8884] loop3: detected capacity change from 0 to 8 [ 232.666369][ T8884] SQUASHFS error: lzo decompression failed, data probably corrupt [ 232.710844][ T8884] SQUASHFS error: Failed to read block 0x144: -5 [ 232.760565][ T8884] SQUASHFS error: Unable to read metadata cache entry [142] [ 232.794584][ T8884] SQUASHFS error: Unable to read inode 0x11f [ 232.874716][ T8891] netlink: 48 bytes leftover after parsing attributes in process `syz.0.973'. [ 233.164722][ T28] audit: type=1400 audit(1793914753.748:60): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8896 comm="syz.3.976" [ 233.585283][ T8908] use of bytesused == 0 is deprecated and will be removed in the future, [ 233.594313][ T8908] use the actual size instead. [ 234.445789][ T8936] nvme_fcloop: unknown parameter or missing value 'wwn' [ 235.062406][ T8953] loop0: detected capacity change from 0 to 1024 [ 235.147333][ T8956] kAFS: bad VL server IP address [ 235.280293][ T8959] phram: illegal start address [ 235.308194][ T8961] warning: `syz.3.999' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 235.407371][ T8961] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 235.755445][ T8969] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 235.792028][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 236.398713][ T8982] device-mapper: table: 248:4: multipath: unknown path selector type (-EINVAL) [ 236.435182][ T8982] device-mapper: ioctl: error adding target to table [ 236.610531][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 236.665556][ T8999] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 236.698721][ T8998] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 236.762928][ T8998] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 237.285204][ T9019] ip_tables: iptables: counters copy to user failed while replacing table [ 238.122101][ T28] audit: type=1400 audit(1793914758.708:61): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9046 comm="syz.1.1029" name="unknown" offset=28 [ 239.157770][ T9090] loop3: detected capacity change from 0 to 256 [ 239.221832][ T9090] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 239.345749][ T9094] loop1: detected capacity change from 0 to 128 [ 240.016460][ T9103] loop3: detected capacity change from 0 to 4096 [ 240.140513][ T9103] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 240.193668][ T9103] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 240.288217][ T9103] ntfs3: loop3: ino=5, "/" directory corrupted [ 240.352981][ T9103] ntfs3: loop3: ino=5, "/" directory corrupted [ 240.509846][ T2971] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 240.521788][ T9121] loop1: detected capacity change from 0 to 164 [ 240.567828][ T5795] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 240.631095][ T5795] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 240.665346][ T9121] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 240.692345][ T5795] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 240.771726][ T141] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 240.806148][ T9121] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 240.864116][ T9128] loop5: detected capacity change from 0 to 2048 [ 240.997729][ T9128] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.126717][ T9128] CacheFiles: Failed to register: -95 [ 241.246716][ T9137] loop0: detected capacity change from 0 to 16 [ 241.603109][ T9143] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 241.603109][ T9143] The task syz.5.1061 (9143) triggered the difference, watch for misbehavior. [ 242.241378][ T9160] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 242.280266][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 242.309781][ T9160] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 242.340670][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 242.455939][ T9138] loop1: detected capacity change from 0 to 32768 [ 242.529278][ T9138] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1060 (9138) [ 242.676691][ T9138] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.770819][ T9138] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 242.838589][ T9138] BTRFS info (device loop1): setting nodatasum [ 242.911474][ T9138] BTRFS info (device loop1): force zlib compression, level 3 [ 242.966174][ T9138] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 243.024595][ T9138] BTRFS info (device loop1): use lzo compression, level 0 [ 243.076699][ T9138] BTRFS info (device loop1): turning on flush-on-commit [ 243.120475][ T9138] BTRFS info (device loop1): enabling auto defrag [ 243.158466][ T9138] BTRFS info (device loop1): max_inline at 4096 [ 243.196155][ T9138] BTRFS info (device loop1): using free space tree [ 243.224514][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 243.355032][ T9138] BTRFS info (device loop1): enabling ssd optimizations [ 243.417924][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 243.460384][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 243.526810][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 243.622958][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0382, bcdDevice= 0.00 [ 243.693402][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.741962][ T9] usb 6-1: config 0 descriptor?? [ 243.763170][ T9157] loop0: detected capacity change from 0 to 32768 [ 243.851549][ T9167] loop3: detected capacity change from 0 to 32768 [ 243.860422][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 243.912930][ T9157] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 244.056119][ T9167] ialloc: diAlloc returned -5! [ 244.222016][ T9] wacom 0003:056A:0382.0009: Unknown device_type for 'HID 056a:0382'. Ignoring. [ 244.254516][ T9157] XFS (loop0): Ending clean mount [ 244.425637][ T8] usb 6-1: USB disconnect, device number 2 [ 244.575240][ T5798] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 244.764984][ T5859] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 244.922828][ T9203] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1073'. [ 245.014765][ T5859] usb 2-1: Using ep0 maxpacket: 8 [ 245.055378][ T5859] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 245.144506][ T5859] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 245.209935][ T5859] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 245.289717][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.355814][ T5859] kobil_sct 2-1:1.0: KOBIL USB smart card terminal converter detected [ 245.424883][ T5859] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 245.458112][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1075'. [ 245.804672][ T9209] loop5: detected capacity change from 0 to 8192 [ 245.872879][ T9209] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 245.970654][ T9209] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 245.981297][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1072'. [ 246.034255][ T9209] REISERFS (device loop5): using ordered data mode [ 246.072360][ T9209] reiserfs: using flush barriers [ 246.099551][ T2137] usb 2-1: USB disconnect, device number 7 [ 246.125013][ T2137] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 246.162007][ T9209] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 246.208411][ T2137] kobil_sct 2-1:1.0: device disconnected [ 246.260534][ T9209] REISERFS (device loop5): checking transaction log (loop5) [ 246.499369][ T9209] REISERFS (device loop5): Using tea hash to sort names [ 246.521607][ T9209] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 246.931342][ T9228] loop3: detected capacity change from 0 to 1024 [ 246.976621][ T9228] EXT4-fs: Ignoring removed orlov option [ 246.982320][ T9228] EXT4-fs: Ignoring removed i_version option [ 247.155543][ T9228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.322892][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.764497][ T9220] loop0: detected capacity change from 0 to 32768 [ 247.867484][ T9220] jfs_rmdir: dtDelete returned -2 [ 247.970893][ T9243] loop3: detected capacity change from 0 to 4096 [ 248.022199][ T9243] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 248.186811][ T9243] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 248.343387][ T141] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 248.391690][ T5795] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 248.439007][ T5795] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 248.504563][ T5795] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 248.513108][ T60] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 249.164316][ T9245] loop1: detected capacity change from 0 to 40427 [ 249.343151][ T9245] F2FS-fs (loop1): invalid crc value [ 249.386478][ T9245] F2FS-fs (loop1): Found nat_bits in checkpoint [ 249.635727][ T9245] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 249.800459][ T5786] syz-executor: attempt to access beyond end of device [ 249.800459][ T5786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 249.891635][ T5786] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 250.329611][ T9261] loop5: detected capacity change from 0 to 32768 [ 251.356588][ T9277] loop0: detected capacity change from 0 to 32768 [ 251.382605][ T9291] loop1: detected capacity change from 0 to 512 [ 251.448205][ T9291] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 251.475630][ T28] audit: type=1800 audit(1793914772.058:62): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1103" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 251.587882][ T9291] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.1102: corrupted in-inode xattr: invalid ea_ino [ 251.673961][ T9291] EXT4-fs (loop1): Remounting filesystem read-only [ 251.732779][ T9291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.827380][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.009007][ T9303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1114'. [ 252.389709][ T28] audit: type=1326 audit(1793914772.978:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d959fb19 code=0x7ffc0000 [ 252.529322][ T28] audit: type=1326 audit(1793914773.008:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fd8d959fb19 code=0x7ffc0000 [ 252.553259][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.717863][ T28] audit: type=1326 audit(1793914773.008:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d959fb19 code=0x7ffc0000 [ 252.786241][ T9324] netlink: 'syz.3.1123': attribute type 8 has an invalid length. [ 252.852315][ T28] audit: type=1326 audit(1793914773.008:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d959fb19 code=0x7ffc0000 [ 253.373501][ T9342] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1130'. [ 253.829595][ T9355] loop1: detected capacity change from 0 to 8 [ 254.113969][ T9363] netlink: 'syz.1.1140': attribute type 3 has an invalid length. [ 254.508830][ T9367] loop1: detected capacity change from 0 to 1024 [ 254.989626][ T9360] loop5: detected capacity change from 0 to 40427 [ 255.017728][ T9376] tipc: Started in network mode [ 255.038560][ T9360] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 255.074910][ T9376] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 255.106529][ T9360] F2FS-fs (loop5): Image doesn't support compression [ 255.113277][ T9360] F2FS-fs (loop5): heap/no_heap options were deprecated [ 255.129142][ T9376] tipc: Enabled bearer , priority 0 [ 255.228267][ T9360] F2FS-fs (loop5): invalid crc value [ 255.264200][ T9360] F2FS-fs (loop5): Found nat_bits in checkpoint [ 255.485559][ T9360] F2FS-fs (loop5): Start checkpoint disabled! [ 255.583300][ T9360] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 255.919498][ T1136] kworker/u4:7: attempt to access beyond end of device [ 255.919498][ T1136] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 255.969803][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.981535][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.992732][ T1136] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 256.020542][ T1136] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 256.078352][ T9373] loop3: detected capacity change from 0 to 40427 [ 256.117558][ T9373] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 256.157870][ T9373] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 256.220255][ T9373] F2FS-fs (loop3): invalid crc value [ 256.247768][ T2137] tipc: Node number set to 43690 [ 256.271272][ T9373] F2FS-fs (loop3): Found nat_bits in checkpoint [ 256.503605][ T9373] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 256.534295][ T9373] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 256.620013][ T9373] syz.3.1144: attempt to access beyond end of device [ 256.620013][ T9373] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.877219][ T9402] tipc: New replicast peer: 127.0.0.1 [ 256.902188][ T9402] tipc: Enabled bearer , priority 10 [ 256.983341][ T9405] loop5: detected capacity change from 0 to 128 [ 257.068108][ T9405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 257.102012][ T9408] loop0: detected capacity change from 0 to 1024 [ 257.127671][ T9405] System zones: 1-3, 19-19, 35-36 [ 257.158974][ T9405] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 257.273148][ T9405] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 257.369324][ T9408] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 257.379700][ T5795] syz-executor: attempt to access beyond end of device [ 257.379700][ T5795] loop3: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 257.436059][ T9408] System zones: 0-1, 3-12 [ 257.441685][ T9408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.490150][ T5795] F2FS-fs (loop3): Issue discard(5637, 5637, 1) failed, ret: -5 [ 257.649166][ T7757] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.669208][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.710879][ T9416] loop1: detected capacity change from 0 to 4096 [ 257.901494][ T9418] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.423832][ T9446] program syz.5.1172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.451382][ T9432] loop3: detected capacity change from 0 to 32768 [ 259.527960][ T9432] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1156 (9432) [ 259.614879][ T9432] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 259.636606][ T9430] loop1: detected capacity change from 0 to 32768 [ 259.694674][ T9432] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 259.733058][ T9452] loop5: detected capacity change from 0 to 512 [ 259.750637][ T9432] BTRFS info (device loop3): using free space tree [ 259.781505][ T9430] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 259.900462][ T9452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.991742][ T9430] XFS (loop1): Ending clean mount [ 260.103738][ T9432] BTRFS info (device loop3): enabling ssd optimizations [ 260.152358][ T9432] BTRFS info (device loop3): auto enabling async discard [ 260.252612][ T5786] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 260.299361][ T7757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.705936][ T5795] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 260.998390][ T8597] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (8597) [ 261.672979][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 261.874515][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 261.890211][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 3: 50, using maximum allowed: 30 [ 261.942506][ T8] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 50 [ 262.009504][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 262.040979][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 262.084031][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.134578][ T8] usb 4-1: config 0 descriptor?? [ 262.423350][ T9510] loop5: detected capacity change from 0 to 164 [ 262.469314][ T9510] Unable to read rock-ridge attributes [ 262.522568][ T9510] Unable to read rock-ridge attributes [ 262.587038][ T8] wacom 0003:056A:0094.000A: Using device in hidraw-only mode [ 262.670518][ T8] wacom 0003:056A:0094.000A: hidraw0: USB HID vff.f8 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 262.787146][ T5859] usb 4-1: USB disconnect, device number 6 [ 262.966714][ T9513] fido_id[9513]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 263.071933][ T9503] loop0: detected capacity change from 0 to 32768 [ 263.178072][ T9503] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.1184 (9503) [ 263.297644][ T9503] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 263.375008][ T9503] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 263.456679][ T9503] BTRFS info (device loop0): using free space tree [ 263.562053][ T5786] tipc: Resetting bearer [ 263.794558][ T9503] BTRFS info (device loop0): enabling ssd optimizations [ 263.840295][ T5786] tipc: Disabling bearer [ 263.846575][ T9503] BTRFS info (device loop0): auto enabling async discard [ 264.214226][ T9515] loop5: detected capacity change from 0 to 40427 [ 264.294836][ T9515] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 264.301223][ T9515] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 264.314143][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.369760][ T5798] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 264.402817][ T9515] F2FS-fs (loop5): invalid crc value [ 264.760148][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.854568][ T9515] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 264.861655][ T9515] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 265.142121][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.166251][ T7757] syz-executor: attempt to access beyond end of device [ 265.166251][ T7757] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 265.261336][ T7757] syz-executor: attempt to access beyond end of device [ 265.261336][ T7757] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 265.465689][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.499346][ T7757] syz-executor: attempt to access beyond end of device [ 265.499346][ T7757] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 265.603274][ T7757] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 266.135279][ T60] tipc: Disabling bearer [ 266.185185][ T60] tipc: Left network mode [ 266.495191][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.515392][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.528459][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.545979][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.555301][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 266.562709][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.081820][ T9563] rxe_eth0 speed is unknown, defaulting to 1000 [ 268.607621][ T5099] Bluetooth: hci0: command tx timeout [ 269.359565][ T9563] chnl_net:caif_netlink_parms(): no params data found [ 269.614549][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.626770][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.636182][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.645294][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.652843][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.660602][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.800230][ T60] hsr_slave_0: left promiscuous mode [ 269.876354][ T60] hsr_slave_1: left promiscuous mode [ 269.901442][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.973601][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.009004][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.037680][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.287145][ T60] veth1_macvtap: left promiscuous mode [ 270.292734][ T60] veth0_macvtap: left promiscuous mode [ 270.331445][ T60] veth1_vlan: left promiscuous mode [ 270.355753][ T60] veth0_vlan: left promiscuous mode [ 270.686352][ T5099] Bluetooth: hci0: command tx timeout [ 271.731610][ T5099] Bluetooth: hci1: command tx timeout [ 272.462451][ T9646] loop3: detected capacity change from 0 to 40427 [ 272.503186][ T9646] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 272.541363][ T9646] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 272.597373][ T9646] F2FS-fs (loop3): Found nat_bits in checkpoint [ 272.724196][ T9646] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 272.753807][ T9646] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 272.772443][ T5099] Bluetooth: hci0: command tx timeout [ 273.221459][ T60] team0 (unregistering): Port device team_slave_1 removed [ 273.382826][ T60] team0 (unregistering): Port device team_slave_0 removed [ 273.543673][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.685577][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.755522][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'. [ 273.811316][ T5099] Bluetooth: hci1: command tx timeout [ 274.333231][ T60] bond0 (unregistering): Released all slaves [ 274.538297][ T9611] rxe_eth0 speed is unknown, defaulting to 1000 [ 274.680580][ T9563] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.723673][ T9563] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.773764][ T9563] bridge_slave_0: entered allmulticast mode [ 274.814968][ T9563] bridge_slave_0: entered promiscuous mode [ 274.853561][ T5099] Bluetooth: hci0: command tx timeout [ 274.907487][ T9563] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.928899][ T9563] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.988293][ T9563] bridge_slave_1: entered allmulticast mode [ 275.031700][ T9563] bridge_slave_1: entered promiscuous mode [ 275.121640][ T9664] loop3: detected capacity change from 0 to 512 [ 275.218794][ T9563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.303968][ T9664] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.1228: iget: bad extended attribute block 134217728 [ 275.348278][ T9563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.412875][ T9664] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1228: couldn't read orphan inode 15 (err -117) [ 275.510246][ T9664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.621197][ T28] audit: type=1800 audit(1793914796.208:67): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1228" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 275.657152][ T9563] team0: Port device team_slave_0 added [ 275.663318][ T9664] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1228: bg 0: block 465: padding at end of block bitmap is not set [ 275.717029][ T9563] team0: Port device team_slave_1 added [ 275.769270][ T9664] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6660: Corrupt filesystem [ 275.817455][ T9664] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1228: invalid indirect mapped block 234881024 (level 0) [ 275.862010][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.882641][ T9664] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1228: invalid indirect mapped block 768 (level 1) [ 275.901707][ T5099] Bluetooth: hci1: command tx timeout [ 275.907386][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.006049][ T9563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.032638][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.121802][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.171981][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.309029][ T9563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.683670][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.937629][ T9563] hsr_slave_0: entered promiscuous mode [ 276.975253][ T9563] hsr_slave_1: entered promiscuous mode [ 276.995180][ T9563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.003121][ T9563] Cannot create hsr debugfs directory [ 277.028529][ T9692] loop0: detected capacity change from 0 to 64 [ 277.078970][ T9693] loop3: detected capacity change from 0 to 1024 [ 277.178201][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.599718][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.862131][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.954022][ T9704] ªªªªªª: renamed from vlan0 (while UP) [ 277.967207][ T5099] Bluetooth: hci1: command tx timeout [ 278.058977][ T9611] chnl_net:caif_netlink_parms(): no params data found [ 278.337274][ T9711] (null): rxe_set_mtu: Set mtu to 1024 [ 279.270532][ T9611] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.314515][ T9611] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.340266][ T9611] bridge_slave_0: entered allmulticast mode [ 279.378471][ T9611] bridge_slave_0: entered promiscuous mode [ 279.407663][ T9711] infiniband syz0: set active [ 279.442495][ T9711] infiniband syz0: added syz_tun [ 279.476823][ T9711] syz0: rxe_create_cq: returned err = -12 [ 279.482702][ T9711] infiniband syz0: Couldn't create ib_mad CQ [ 279.551552][ T9711] infiniband syz0: Couldn't open port 1 [ 279.571553][ T9611] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.610843][ T9611] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.664194][ T9611] bridge_slave_1: entered allmulticast mode [ 279.709680][ T9611] bridge_slave_1: entered promiscuous mode [ 279.722293][ T9711] RDS/IB: syz0: added [ 279.760115][ T9711] smc: adding ib device syz0 with port count 1 [ 279.801649][ T9711] smc: ib device syz0 port 1 has pnetid [ 280.096868][ T9611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.148515][ T9611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.531202][ T9611] team0: Port device team_slave_0 added [ 280.607987][ T9611] team0: Port device team_slave_1 added [ 280.809916][ T9611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.838426][ T9611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.932000][ T9611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.157461][ T9563] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 281.200498][ T9563] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 281.266600][ T9611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.298039][ T9611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.395225][ T9611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.498637][ T9563] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 281.558656][ T9563] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 281.979888][ T9611] hsr_slave_0: entered promiscuous mode [ 282.024980][ T9611] hsr_slave_1: entered promiscuous mode [ 282.053281][ T9611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.090632][ T9611] Cannot create hsr debugfs directory [ 282.233542][ T9754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1247'. [ 282.616600][ T9563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.720219][ T9563] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.792580][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.799781][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.900606][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.907826][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.192824][ T9611] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.274816][ T9611] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.342487][ T9611] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.382205][ T9611] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.897315][ T9611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.003703][ T9611] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.057673][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.064908][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.155861][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.163018][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.304859][ T9563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.580428][ T9791] loop3: detected capacity change from 0 to 1024 [ 284.646319][ T9563] veth0_vlan: entered promiscuous mode [ 284.738230][ T9563] veth1_vlan: entered promiscuous mode [ 284.806563][ T9791] hfsplus: catalog searching failed [ 284.962182][ T9563] veth0_macvtap: entered promiscuous mode [ 284.980200][ T11] hfsplus: b-tree write err: -5, ino 3 [ 285.044380][ T9563] veth1_macvtap: entered promiscuous mode [ 285.144207][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.263768][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.343086][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.402738][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.451199][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.492750][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.534119][ T9563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.738121][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.803951][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.834842][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.879802][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.940776][ T9563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.969780][ T9563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.024142][ T9563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.203330][ T9810] ima: Unable to open file: /e (-2) [ 286.208535][ T60] hsr_slave_0: left promiscuous mode [ 286.225919][ T9809] ima: policy update failed [ 286.233906][ T28] audit: type=1802 audit(1793914806.818:68): pid=9809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1260" res=0 errno=0 [ 286.278776][ T60] hsr_slave_1: left promiscuous mode [ 286.294055][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.328327][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.357283][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.387545][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.421530][ T60] bridge_slave_1: left allmulticast mode [ 286.442240][ T60] bridge_slave_1: left promiscuous mode [ 286.469684][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.501820][ T60] bridge_slave_0: left allmulticast mode [ 286.523390][ T60] bridge_slave_0: left promiscuous mode [ 286.545572][ T9816] loop3: detected capacity change from 0 to 4096 [ 286.553665][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.572025][ T9816] EXT4-fs: inline encryption not supported [ 286.653689][ T9816] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 286.704267][ T9816] EXT4-fs (loop3): Test dummy encryption mode enabled [ 286.734156][ T60] veth1_macvtap: left promiscuous mode [ 286.764193][ T60] veth0_macvtap: left promiscuous mode [ 286.782436][ T9816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.809769][ T60] veth1_vlan: left promiscuous mode [ 286.838200][ T60] veth0_vlan: left promiscuous mode [ 286.979981][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.455988][ T9829] loop3: detected capacity change from 0 to 164 [ 288.583665][ T60] team0 (unregistering): Port device team_slave_1 removed [ 288.659214][ T60] team0 (unregistering): Port device team_slave_0 removed [ 288.742657][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.826194][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.458613][ T60] bond0 (unregistering): Released all slaves [ 289.570415][ T9563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.584308][ T9563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.613120][ T9563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.613149][ T9563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.737143][ T9611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.045556][ T9845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1269'. [ 290.230432][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.295336][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.426636][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.515178][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.642288][ T9852] loop0: detected capacity change from 0 to 512 [ 290.716909][ T9852] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.859705][ T9852] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.1270: corrupted in-inode xattr: e_value size too large [ 291.020107][ T9852] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1270: couldn't read orphan inode 15 (err -117) [ 291.110606][ T9852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.183215][ T9861] tap0: tun_chr_ioctl cmd 2147767511 [ 291.250399][ T9852] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 291.358513][ T9611] veth0_vlan: entered promiscuous mode [ 291.425118][ T9840] loop3: detected capacity change from 0 to 32768 [ 291.438514][ T9611] veth1_vlan: entered promiscuous mode [ 291.509730][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.544086][ T9840] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 291.609124][ T9611] veth0_macvtap: entered promiscuous mode [ 291.735679][ T9611] veth1_macvtap: entered promiscuous mode [ 291.853659][ T9840] XFS (loop3): Ending clean mount [ 291.867101][ T9611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.943762][ T9611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.996269][ T9611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.056572][ T9611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.095646][ T9611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.154598][ T9611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.195806][ T9611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.209148][ T5795] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 292.263291][ T9611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.349114][ T9611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.414600][ T9611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.467568][ T9611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.519148][ T9611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.568968][ T9611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.639895][ T9611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.743811][ T9611] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.810994][ T9611] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.864565][ T9611] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.908130][ T9611] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.311289][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.394916][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.527892][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.580833][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.608264][ T9920] loop3: detected capacity change from 0 to 1024 [ 295.326830][ T9899] loop0: detected capacity change from 0 to 32768 [ 295.381969][ T9903] loop1: detected capacity change from 0 to 40427 [ 295.497108][ T9903] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 295.544655][ T9903] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 295.651260][ T9903] F2FS-fs (loop1): invalid crc value [ 295.768554][ T9903] F2FS-fs (loop1): Found nat_bits in checkpoint [ 296.074724][ T9903] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 296.122810][ T9903] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 297.384058][ T9970] loop6: detected capacity change from 0 to 512 [ 297.467343][ T9970] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 297.569852][ T9970] EXT4-fs (loop6): 1 truncate cleaned up [ 297.625551][ T9970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.802666][ T9970] EXT4-fs error (device loop6): __ext4_expand_extra_isize:5994: inode #12: comm syz.6.1299: bad extra_isize 62 (inode size 256) [ 297.915233][ T9983] ip_tables: iptables: counters copy to user failed while replacing table [ 297.957433][ T9970] EXT4-fs (loop6): Remounting filesystem read-only [ 298.239332][ T9611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.744387][T10004] netem: incorrect gi model size [ 298.784510][T10004] netem: change failed [ 298.883427][T10009] loop6: detected capacity change from 0 to 512 [ 298.947485][T10009] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 299.034752][T10009] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.1311: bad orphan inode 131083 [ 299.097653][T10009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.320540][ T9611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.625374][ T5885] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 299.854668][ T5885] usb 2-1: not running at top speed; connect to a high speed hub [ 299.873745][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.913213][ T9994] loop0: detected capacity change from 0 to 32768 [ 299.940790][ T5885] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 299.977266][ T5885] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 300.046075][ T5885] usb 2-1: Product: syz [ 300.087913][ T5885] usb 2-1: Manufacturer: syz [ 300.170421][ T5885] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 300.220973][ T5885] usb 2-1: No streaming interface found for terminal 2. [ 300.351088][ T5885] usb 2-1: USB disconnect, device number 8 [ 301.404217][T10023] loop3: detected capacity change from 0 to 32768 [ 301.581914][T10023] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 301.649379][T10023] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 301.983927][T10023] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 302.092366][ T9841] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 302.166811][ T9841] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 302.542828][ T9841] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 376ms [ 302.603088][ T9841] gfs2: fsid=syz:syz.0: jid=0: Done [ 302.647248][T10023] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 302.698769][T10023] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 302.885208][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 303.084797][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 303.103127][ T8] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 303.137386][ T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.188597][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.238665][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.290913][ T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.353002][ T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 303.408318][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.684546][ T8] usb 7-1: GET_CAPABILITIES returned 0 [ 303.720515][ T8] usbtmc 7-1:16.0: can't read capabilities [ 303.894438][ T8] usb 7-1: USB disconnect, device number 2 [ 304.347960][T10106] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 304.657346][T10114] loop3: detected capacity change from 0 to 128 [ 304.713276][T10114] syz.3.1343: attempt to access beyond end of device [ 304.713276][T10114] loop3: rw=3, sector=137, nr_sectors = 7 limit=128 [ 304.781314][T10083] loop0: detected capacity change from 0 to 32768 [ 304.801093][T10114] syz.3.1343: attempt to access beyond end of device [ 304.801093][T10114] loop3: rw=2051, sector=144, nr_sectors = 57 limit=128 [ 304.884519][ T5885] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 304.929028][T10083] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 305.096067][ T5885] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.168916][ T5885] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.204450][T10083] XFS (loop0): Ending clean mount [ 305.249097][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 305.298570][ T5885] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 305.361103][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.422057][ T5885] usb 2-1: config 0 descriptor?? [ 305.527777][ T5798] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 305.948961][ T5885] hid-multitouch 0003:0EEF:72C4.000B: unbalanced delimiter at end of report description [ 306.029044][ T5885] hid-multitouch: probe of 0003:0EEF:72C4.000B failed with error -22 [ 306.119707][ T5885] usb 2-1: USB disconnect, device number 9 [ 306.493562][T10130] loop3: detected capacity change from 0 to 32768 [ 306.590264][T10130] JBD2: Ignoring recovery information on journal [ 306.803849][T10130] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 307.208310][T10130] syz.3.1344 (10130) used greatest stack depth: 17752 bytes left [ 307.461209][ T5795] ocfs2: Unmounting device (7,3) on (node local) [ 307.490031][T10169] loop6: detected capacity change from 0 to 1024 [ 307.574506][ T5885] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 307.809827][ T5885] usb 2-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 307.830454][ T28] audit: type=1400 audit(1793914828.418:69): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=66226F pid=10170 comm="syz.0.1356" name=66226F offset=66 [ 307.900194][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.981809][ T5885] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 308.054437][ T5885] usb 2-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 308.158407][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.201558][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 308.229658][T10178] loop0: detected capacity change from 0 to 512 [ 308.265113][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.302337][T10178] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 308.321771][ T5885] usb 2-1: config 0 descriptor?? [ 308.420702][T10178] EXT4-fs (loop0): 1 truncate cleaned up [ 308.468384][T10178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.550032][T10178] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.1358: Logical block already allocated [ 308.571194][T10187] ip6gre1: entered promiscuous mode [ 308.591186][T10187] ip6gre1: entered allmulticast mode [ 308.599325][T10178] EXT4-fs (loop0): Remounting filesystem read-only [ 308.623888][ T8] usb 2-1: USB disconnect, device number 10 [ 308.771871][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.418394][T10212] loop1: detected capacity change from 0 to 256 [ 309.506329][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1366'. [ 309.627648][T10214] ipvlan2: entered allmulticast mode [ 309.664681][T10214] virt_wifi0: entered allmulticast mode [ 309.710427][T10214] batman_adv: batadv0: Adding interface: ipvlan2 [ 309.771979][T10214] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.920313][T10214] batman_adv: batadv0: Interface activated: ipvlan2 [ 310.239957][T10227] loop3: detected capacity change from 0 to 2048 [ 310.397562][T10236] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.580410][T10239] synth uevent: /devices/virtual/cpuid/cpu0: unknown uevent action string [ 310.654728][T10239] cpuid cpu0: uevent: failed to send synthetic uevent: -22 [ 310.983136][T10249] loop6: detected capacity change from 0 to 1024 [ 311.099454][T10249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 311.179481][T10249] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.320889][T10249] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: comm syz.6.1378: lblock 0 mapped to illegal pblock 0 (length 6) [ 311.470173][T10249] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 311.540008][T10249] EXT4-fs (loop6): This should not happen!! Data will be lost [ 311.540008][T10249] [ 311.600619][T10260] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #15: comm syz.6.1378: lblock 0 mapped to illegal pblock 0 (length 4) [ 311.739008][T10260] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #15: comm syz.6.1378: lblock 0 mapped to illegal pblock 0 (length 4) [ 311.917200][ T3524] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 311.945485][T10242] loop1: detected capacity change from 0 to 32768 [ 312.044698][ T3524] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 312.072090][T10242] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 312.128553][ T3524] EXT4-fs (loop6): This should not happen!! Data will be lost [ 312.128553][ T3524] [ 312.164123][T10242] VFS: Lookup of '' in ocfs2 loop1 would have caused loop [ 312.241618][ T9611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 312.532368][ T9563] ocfs2: Unmounting device (7,1) on (node local) [ 312.578125][ T9563] VFS: Busy inodes after unmount of loop1 (ocfs2) [ 312.578311][ T9563] ------------[ cut here ]------------ [ 312.590820][ T9563] kernel BUG at fs/super.c:694! [ 312.721909][ T9563] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 312.728038][ T9563] CPU: 0 PID: 9563 Comm: syz-executor Not tainted syzkaller #0 [ 312.735603][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 312.745688][ T9563] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0 [ 312.751855][ T9563] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ec 38 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 e0 c6 f7 8a 48 89 de e8 03 85 9b 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 [ 312.771815][ T9563] RSP: 0018:ffffc9000b6f7d20 EFLAGS: 00010246 [ 312.777885][ T9563] RAX: 000000000000002f RBX: ffff888025884660 RCX: df76c65e4cbb3000 [ 312.785860][ T9563] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 312.793836][ T9563] RBP: 1ffff11004b108f2 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 312.801813][ T9563] R10: dffffc0000000000 R11: ffffed101718518b R12: 0000000000000000 [ 312.809799][ T9563] R13: dffffc0000000000 R14: ffffffff8e63fd60 R15: ffff888025884790 [ 312.817778][ T9563] FS: 000055557c1d6500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 312.826728][ T9563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.833318][ T9563] CR2: 00007fffb03cc048 CR3: 000000006bff0000 CR4: 00000000003506f0 [ 312.841294][ T9563] Call Trace: [ 312.844578][ T9563] [ 312.847520][ T9563] kill_block_super+0x44/0x90 [ 312.852211][ T9563] deactivate_locked_super+0x9c/0x210 [ 312.857779][ T9563] cleanup_mnt+0x3d7/0x460 [ 312.862222][ T9563] task_work_run+0x1d4/0x260 [ 312.866824][ T9563] ? task_work_cancel+0x220/0x220 [ 312.871864][ T9563] ? exit_to_user_mode_loop+0x3b/0x110 [ 312.877333][ T9563] exit_to_user_mode_loop+0xe6/0x110 [ 312.882632][ T9563] exit_to_user_mode_prepare+0xee/0x180 [ 312.888215][ T9563] syscall_exit_to_user_mode+0x1a/0x50 [ 312.893680][ T9563] do_syscall_64+0x61/0xb0 [ 312.898104][ T9563] ? clear_bhb_loop+0x40/0x90 [ 312.902793][ T9563] ? clear_bhb_loop+0x40/0x90 [ 312.907477][ T9563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.913418][ T9563] RIP: 0033:0x7f038c7a0d57 [ 312.917879][ T9563] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 312.937501][ T9563] RSP: 002b:00007ffc3dfe1658 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 312.946024][ T9563] RAX: 0000000000000000 RBX: 00007f038c836fb3 RCX: 00007f038c7a0d57 [ 312.954284][ T9563] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3dfe1710 [ 312.962287][ T9563] RBP: 00007ffc3dfe1710 R08: 00007ffc3dfe2710 R09: 00000000ffffffff [ 312.970421][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3dfe27a0 [ 312.978462][ T9563] R13: 00007f038c836fb3 R14: 000000000004c38e R15: 00007ffc3dfe27e0 [ 312.986471][ T9563] [ 312.989508][ T9563] Modules linked in: [ 313.093879][T10292] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1391'. [ 313.187802][ T9563] ---[ end trace 0000000000000000 ]--- [ 313.200200][ T9563] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0 [ 313.213550][ T9563] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ec 38 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 e0 c6 f7 8a 48 89 de e8 03 85 9b 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 [ 313.259427][ T9563] RSP: 0018:ffffc9000b6f7d20 EFLAGS: 00010246 [ 313.270436][ T9563] RAX: 000000000000002f RBX: ffff888025884660 RCX: df76c65e4cbb3000 [ 313.290960][ T9563] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 313.310217][ T9563] RBP: 1ffff11004b108f2 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 313.334157][ T9563] R10: dffffc0000000000 R11: ffffed101718518b R12: 0000000000000000 [ 313.354293][ T9563] R13: dffffc0000000000 R14: ffffffff8e63fd60 R15: ffff888025884790 [ 313.373504][ T9563] FS: 000055557c1d6500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 313.396323][ T9563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.413833][ T9563] CR2: 00007fdffd0e4eb8 CR3: 000000006bff0000 CR4: 00000000003506f0 [ 313.433957][ T9563] Kernel panic - not syncing: Fatal exception [ 313.440141][ T9563] Kernel Offset: disabled [ 313.444497][ T9563] Rebooting in 86400 seconds..