last executing test programs: 1m7.172202926s ago: executing program 2 (id=987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) 1m6.437432509s ago: executing program 2 (id=992): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m5.742668669s ago: executing program 2 (id=997): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, 0x0) 1m5.087068862s ago: executing program 2 (id=1001): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x1000040, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m3.539714826s ago: executing program 2 (id=1017): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1, 0x0, 0x0) 1m1.996874199s ago: executing program 2 (id=1028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}}, 0x0) 1m0.907739883s ago: executing program 32 (id=1028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}}, 0x0) 57.248781182s ago: executing program 5 (id=1051): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x32, &(0x7f0000000000), &(0x7f00000001c0)=0x4) 56.515965667s ago: executing program 5 (id=1054): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 55.973746846s ago: executing program 5 (id=1057): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="626172726965722c756d61736b3d30303030303030303030303030303030303030303034302c6e6f626172726965722c747970653d883b7f382c6e6c733d63703835302c006d61736b3d30303030303030303030323030303030303030303031312c666f7263652c6e6f6465636f6d706f73652c756d61736b3d30303030303030303030303030303030303030303030352c00"], 0x2, 0x6da, &(0x7f0000000580)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsimN0se9h5x6Sg+6hR5Keje054ZAyVXHQCGXnHRTmdmZ1Ur7lKzHJv39xMx8M99z/rMzsw/EBPB/a3k2ys8iieXZN7fS9d2dhebEzsJUnt2MiEpElCLKrUUka5Hl3smn+Ha6MS+f9Ovnw9Wltz//aveL1lo5n7LypUH1eqh0b9rOp6hHxES+7DbZp8VPjnZ/qL27fdsbVdLewzRgN4rAxV+eq1V4bvtdttt5H/8nmw+qfpzzFhhTSeu+2WUmYjoiqhGtu35+dSid7+hO3/ZFDwAAAACOq3b8Ki/sxV5sxaWzGA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8U+XP/0/yqVSk65EUz/+v5NsiT4+h4Q9C/GyqtXx29oMBAAAAAAAAgDP36l7sxVZcKtb3k+w3/9c6fuP/VrwXG7ES63EztqIRm7EZ6zEfETMdDVW2Gpub6/NZzYgrA2rejk971Lzdf4x3TnmfAQAAAAAAAGDMVYfkP5zs3vb7WD74/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZBEjHRWmTTlSI9E6VyRFQjopKW2474tEh/TSS9Nj47/3EAAADAc6keXk2qI9R54f3Yi624VKzvJ9ln/mvZ5+VqvBdrsRmrsRnNWIl7+Wfo9FN/aXdnobm7s/Aonbrb/emXxxp61mK0vnvo3fPLWYla3I/VbMvNuBtJ7GdKeSsv7+4spMtHvcf1QTqm5Ce5AaOZ6EjfS2fXP8nSfz78LUL5WLt4QqW+OTNZ7mQ7InP52NIal4sI9I7E0KNTHtjTfJTa3/xcGdxT75h/MLj36SOlen5zcyGORuJ2lNpH6NrgSER89x8f//pBc+3hg/sbs+OzSz29P7TE0UgsdETi+jcoEsPNZZG42l5fjl/Er2I2vpx6K9ZjNX4TjdiMlXqR38hfz+l8ZnCkPpvuXHtr2EjSc7Levn71GlM9Do0p6vHzLNWI17JjeilWI4nHEbESb2R/t2O+fTU4OMJXRzjrSyNcaTvc+F62aIcpav3L/m20Jk9LGtfLHXHtvObOZHmdWw6i9GLPKBX3utHvRx3K38kTaQt/GHh/OG9HIzHfEYmX+r1eWiH9634632iuPVx/0Hh3xP5ez5fpefSnsbpLpEf4xajmO3c5myfZOTWX5b3UvsMejlcl/8WlpdSVd7Vdr3Wm/jIex71DZ+oPYzEWYykrfS0rPdl1x0rzrrdbOnwNT/PSd1rl9g87ne+3Hkez9X4IgPE2/f3pSu2/tX/XPqr9sfag9mb1Z1M/mnqlEpP/mvxxeW7i9dIryd/jo/jdwed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5DaePH3YaDZX1nsnSr2zksG1Gs394kFiA8ocSiT5o3JGKJxsPHm6P7TBwYmpfHgnrH6aieJpjcML189wGMn20eNVHX4siqc8jdBF0hXwtPKJx1z0fLBlcgwO5dFE/fQaLF6wHVnHf/XWeh2viYjoVXjIhWPiNK4+wEW6tfno3VsbT57+YPVR452Vd1bWJhcXl+aWFt9YuHV/tbky15p3VDiXh98C56Hz7URbJSJeHV53wINaAQAAAAAAAAAAgDN0Hv8LcdH7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHy9Lc9G+VkkMT93cy5d391ZaKZTkT4oWY6IUkQkv41I/hlxJ1pTzHQ0l/Tr58PVpbc//2r3i4O2ykX5UsR233qj2c6nqEfERL48rfbuDm+vcpCc6pGdtCOTBuxGETi4aP8LAAD//7co7JU=") listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 55.230416712s ago: executing program 5 (id=1059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}}, 0x0) 53.577574653s ago: executing program 5 (id=1068): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x4, 0x4) 52.979611325s ago: executing program 5 (id=1072): r0 = fanotify_init(0x200, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x1) 51.517559966s ago: executing program 0 (id=1079): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x3c, 0xffffffffffffffff, {0x9}}, './file0\x00'}) 50.783661316s ago: executing program 0 (id=1085): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffff81}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x104, 0x0, &(0x7f0000000400)="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", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x22) 50.070359103s ago: executing program 0 (id=1089): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000300)=""/171, 0xab}], 0x2, 0x92, 0x0) 49.397920114s ago: executing program 0 (id=1092): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@verity_require}, {@metacopy_off}]}) 48.886908737s ago: executing program 0 (id=1095): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f0000000700)={[{@grpjquota}, {@quota}, {@abort}, {@usrquota}, {@block_validity}]}, 0x12, 0x51d, &(0x7f0000000cc0)="$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") rmdir(&(0x7f0000000040)='./file0\x00') 47.804197084s ago: executing program 0 (id=1100): r0 = syz_open_dev$swradio(&(0x7f0000000940), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000a80)={0xb, @win={{0x38305343, 0x9, 0xfff, 0x2}, 0x1, 0x2, 0x0, 0x5, 0x0, 0x8f}}) 47.487378709s ago: executing program 1 (id=1101): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000004180)=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}}}, 0xc) 47.127213908s ago: executing program 1 (id=1103): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2b}}}], 0x58}, 0x0) 46.814966135s ago: executing program 1 (id=1105): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe) 46.397416854s ago: executing program 1 (id=1108): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x6, 0x2b, 0x0, 0x74efdfe049b861ab) 45.917261567s ago: executing program 1 (id=1111): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000001a80)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {}, {@nodiscard}, {@noquota}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) 44.576508072s ago: executing program 1 (id=1112): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) setsockopt(r0, 0x7fff, 0x7, 0x0, 0x0) 37.393247358s ago: executing program 33 (id=1072): r0 = fanotify_init(0x200, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x1) 32.34269364s ago: executing program 34 (id=1100): r0 = syz_open_dev$swradio(&(0x7f0000000940), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000a80)={0xb, @win={{0x38305343, 0x9, 0xfff, 0x2}, 0x1, 0x2, 0x0, 0x5, 0x0, 0x8f}}) 29.330825028s ago: executing program 35 (id=1112): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) setsockopt(r0, 0x7fff, 0x7, 0x0, 0x0) 27.681395248s ago: executing program 4 (id=1164): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x900, &(0x7f0000000140)=[{&(0x7f0000000300)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe08a10a000e800a00142603600e1208000fc00e000406a80016c008000e400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 27.167727155s ago: executing program 4 (id=1167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="080009000000000008000800000000000800080000040000140002"], 0x58}}, 0x0) 26.353426607s ago: executing program 4 (id=1170): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000}, 0x20) 25.926616856s ago: executing program 4 (id=1173): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 25.431917269s ago: executing program 4 (id=1176): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x507, &(0x7f0000000b40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)={0x4, 0x55, 0x38b85cc4, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x36a, 0x20003f}) 24.455497494s ago: executing program 4 (id=1180): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="080027226da0d6c1", 0x8}], 0x1}, 0x41) 9.237388167s ago: executing program 36 (id=1180): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="080027226da0d6c1", 0x8}], 0x1}, 0x41) 5.384630043s ago: executing program 6 (id=1250): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfef"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.817582029s ago: executing program 7 (id=1256): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x2a, 0xb, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 3.080437552s ago: executing program 7 (id=1258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x22}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) 2.637470701s ago: executing program 3 (id=1259): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(0xffffffffffffffff, 0x9, 0x5) 2.524258038s ago: executing program 7 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x48}}, 0x0) 2.403154982s ago: executing program 6 (id=1261): r0 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r0, 0x114, 0x271f, 0x0, 0x20000008) 2.146347486s ago: executing program 3 (id=1262): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYBLOB="5333c923ead7d62a1aa7e1ad6926618430329b0ea6e6e24d7310d2249d89707d2a2ee55d187812e2a0109f36ed3b24151208962f1353f76d5dc207c8b61a67695d2e4632e520"], 0x1, 0x1a3, &(0x7f00000007c0)="$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") symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.98654191s ago: executing program 6 (id=1263): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8b28225ea772f0daee8c7c98100e05104d9", 0x12}], 0x1}, 0x0) 1.576339268s ago: executing program 3 (id=1264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x111, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 1.447455051s ago: executing program 6 (id=1265): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 1.154852995s ago: executing program 3 (id=1266): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x8, 0x5e55b37311de6d89, 0x0, @multicast1, @empty}}}}) 1.069908187s ago: executing program 6 (id=1267): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 1.007228038s ago: executing program 7 (id=1268): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) tee(r0, r0, 0x8000000000000001, 0x0) 619.59567ms ago: executing program 6 (id=1269): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x1008001, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000000540)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x1000) 532.762477ms ago: executing program 7 (id=1270): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002580)=[{&(0x7f0000002280)=""/249, 0xf9}], 0x1, 0x200, 0x400) 461.894808ms ago: executing program 3 (id=1271): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x4, 0x0, 0x4) 38.768374ms ago: executing program 7 (id=1272): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x2, @pix_mp={0x0, 0x0, 0x31324d4e}}) 0s ago: executing program 3 (id=1273): r0 = mq_open(&(0x7f0000001100)='*a%\xff\x00\xf1\fNC\x84\xe0\x99\x1e-\x9a\x0f\x1a\x90\xee\x10\xfeARsO\xae\xd6\x05K\xe2D\x8d\xa4H8\xcf:\a;\xd8\xc7\xc8\\C\xcf\xa7\xcb\xb4\xe4\x8dY\xe3\xa5K&\xe5\xc4\x84v\xfa\xe7\x11\xc4\x99\x10,\xe3M\x80\xd3\xc2\x1c\xb0\x84\xb83', 0x41, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T6278] (syz.3.156,6278,0):ocfs2_prepare_dir_for_insert:4277 ERROR: status = -5 [ 96.757367][ T6278] (syz.3.156,6278,0):ocfs2_mknod:298 ERROR: status = -5 [ 96.777755][ T6278] (syz.3.156,6278,0):ocfs2_mknod:502 ERROR: status = -5 [ 96.792256][ T6278] (syz.3.156,6278,0):ocfs2_create:676 ERROR: status = -5 [ 96.798617][ T6344] loop1: detected capacity change from 0 to 32768 [ 96.841603][ T6350] EXT4-fs: Ignoring removed i_version option [ 96.851854][ T6350] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 96.993782][ T6350] EXT4-fs (loop5): 1 truncate cleaned up [ 97.000399][ T6350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.135254][ T6344] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 97.135254][ T6344] [ 97.162255][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.217118][ T6344] ERROR: (device loop1): remounting filesystem as read-only [ 97.276758][ T5830] ocfs2: Unmounting device (7,3) on (node local) [ 97.344008][ T6367] loop0: detected capacity change from 0 to 8 [ 97.454626][ T6369] loop5: detected capacity change from 0 to 256 [ 97.469570][ T6367] SQUASHFS error: zlib decompression failed, data probably corrupt [ 97.479262][ T6369] vfat: Unknown parameter 'short#›¦`‘ú½Šç§name' [ 97.494472][ T6367] SQUASHFS error: Failed to read block 0x4e8: -5 [ 97.524125][ T29] audit: type=1800 audit(1734614938.594:12): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.199" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 97.931917][ T6375] loop2: detected capacity change from 0 to 32768 [ 97.986322][ T6381] loop0: detected capacity change from 0 to 512 [ 98.031418][ T6381] EXT4-fs: Ignoring removed i_version option [ 98.064545][ T6381] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 98.083218][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 98.128586][ T6381] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 98.178682][ T6393] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 98.210745][ T6381] System zones: 1-12 [ 98.215008][ T6381] EXT4-fs (loop0): orphan cleanup on readonly fs [ 98.249746][ T6381] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.205: invalid indirect mapped block 12 (level 1) [ 98.341840][ T6381] EXT4-fs (loop0): Remounting filesystem read-only [ 98.348607][ T6381] EXT4-fs (loop0): 1 truncate cleaned up [ 98.404065][ T6375] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 98.433872][ T6381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 98.487214][ T6375] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 98.535077][ T6375] bcachefs (loop2): Version upgrade required: [ 98.535077][ T6375] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 98.535077][ T6375] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 98.535077][ T6375] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 98.606323][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.656508][ T6402] loop1: detected capacity change from 0 to 164 [ 98.701282][ T6375] bcachefs (loop2): dropping and reconstructing all alloc info [ 98.729054][ T6379] loop3: detected capacity change from 0 to 40427 [ 98.729657][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 98.756011][ T6379] F2FS-fs (loop3): heap/no_heap options were deprecated [ 98.772411][ T6375] bcachefs (loop2): check_topology... done [ 98.778341][ T6375] bcachefs (loop2): accounting_read... done [ 98.789570][ T6375] bcachefs (loop2): alloc_read... done [ 98.805750][ T6375] bcachefs (loop2): stripes_read... done [ 98.814505][ T6375] bcachefs (loop2): snapshots_read... done [ 98.828742][ T6375] bcachefs (loop2): check_allocations... [ 98.866886][ T6379] F2FS-fs (loop3): invalid crc value [ 98.917935][ T6375] done [ 98.926140][ T6379] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 98.940978][ T6408] capability: warning: `syz.4.215' uses deprecated v2 capabilities in a way that may be insecure [ 98.950175][ T6375] bcachefs (loop2): going read-write [ 98.996911][ T6375] bcachefs (loop2): done starting filesystem [ 99.013554][ T6379] F2FS-fs (loop3): Found nat_bits in checkpoint [ 99.067827][ T6414] loop0: detected capacity change from 0 to 256 [ 99.118117][ T6414] exfat: Deprecated parameter 'namecase' [ 99.173153][ T6379] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 99.178400][ T6418] i2c i2c-0: Invalid block write size 253 [ 99.197240][ T6414] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 99.343211][ T6375] syz.2.204 (6375) used greatest stack depth: 17040 bytes left [ 99.392216][ T5825] bcachefs (loop2): shutting down [ 99.409577][ T5825] bcachefs (loop2): going read-only [ 99.448402][ T5825] bcachefs (loop2): finished waiting for writes to stop [ 99.498715][ T5825] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 99.527310][ T5825] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 99.582453][ T5825] bcachefs (loop2): unshutdown complete, journal seq 11 [ 99.615322][ T5825] bcachefs (loop2): done going read-only, filesystem not clean [ 99.746931][ T5825] bcachefs (loop2): shutdown complete [ 100.105492][ T6440] loop5: detected capacity change from 0 to 1024 [ 100.115657][ T6444] loop3: detected capacity change from 0 to 256 [ 100.136043][ T6440] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 100.150268][ T6440] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 100.158661][ T6440] EXT4-fs (loop5): orphan cleanup on readonly fs [ 100.216895][ T6440] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.229: Invalid inode table block 0 in block_group 0 [ 100.311646][ T6440] EXT4-fs (loop5): Remounting filesystem read-only [ 100.318231][ T6440] Quota error (device loop5): write_blk: dquota write failed [ 100.331482][ T6444] FAT-fs (loop3): Directory bread(block 64) failed [ 100.338156][ T6444] FAT-fs (loop3): Directory bread(block 65) failed [ 100.348497][ T6440] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 100.369052][ T6444] FAT-fs (loop3): Directory bread(block 66) failed [ 100.380715][ T6440] EXT4-fs (loop5): 1 truncate cleaned up [ 100.388194][ T6444] FAT-fs (loop3): Directory bread(block 67) failed [ 100.473507][ T6440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.479373][ T6459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'. [ 100.496634][ T6444] FAT-fs (loop3): Directory bread(block 68) failed [ 100.505793][ T6444] FAT-fs (loop3): Directory bread(block 69) failed [ 100.515902][ T6444] FAT-fs (loop3): Directory bread(block 70) failed [ 100.583560][ T6444] FAT-fs (loop3): Directory bread(block 71) failed [ 100.590298][ T6444] FAT-fs (loop3): Directory bread(block 72) failed [ 100.597753][ T6444] FAT-fs (loop3): Directory bread(block 73) failed [ 100.793179][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.977139][ T6472] loop0: detected capacity change from 0 to 256 [ 100.997285][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 101.024835][ T6472] exfat: Deprecated parameter 'utf8' [ 101.070235][ T6477] loop5: detected capacity change from 0 to 512 [ 101.144437][ T6477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.183897][ T6472] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 101.268408][ T6477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.335494][ T6477] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.380747][ T6492] loop3: detected capacity change from 0 to 512 [ 101.448851][ T6492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.546004][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.546033][ T6492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.580729][ T6492] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.711615][ T6492] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 101.723474][ T6492] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 101.738493][ T6492] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.247: Failed to acquire dquot type 0 [ 101.962877][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 102.047678][ T5905] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.262181][ T6522] loop1: detected capacity change from 0 to 8 [ 102.310590][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 102.322620][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 102.332584][ T5905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 102.368215][ T5905] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 102.377797][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.451089][ T6522] SQUASHFS error: Unable to read inode 0xa7 [ 102.460665][ T5905] usb 1-1: Product: syz [ 102.464861][ T5905] usb 1-1: Manufacturer: syz [ 102.469468][ T5905] usb 1-1: SerialNumber: syz [ 102.490926][ T5905] usb 1-1: config 0 descriptor?? [ 103.004072][ T6517] loop4: detected capacity change from 0 to 32768 [ 103.011420][ T6517] XFS: attr2 mount option is deprecated. [ 103.060109][ T5905] usb 1-1: USB disconnect, device number 3 [ 103.060452][ T6544] loop5: detected capacity change from 0 to 1024 [ 103.317722][ T6517] XFS (loop4): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 103.535174][ T3529] hfsplus: b-tree write err: -5, ino 4 [ 103.638052][ T6517] XFS (loop4): Quotacheck needed: Please wait. [ 103.844634][ T6517] XFS (loop4): Quotacheck: Done. [ 103.892883][ T5889] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.937896][ T6585] loop5: detected capacity change from 0 to 1024 [ 104.040745][ T6581] loop0: detected capacity change from 0 to 32768 [ 104.060731][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 104.073360][ T6585] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f04cc01c, mo2=0002] [ 104.087185][ T6585] System zones: 0-1, 3-36 [ 104.097694][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.164306][ T6585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.169751][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.198441][ T5827] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.217636][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 104.228684][ T6585] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f04cc01c, mo2=0002] [ 104.258521][ T6585] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 104.270231][ T6581] JBD2: Ignoring recovery information on journal [ 104.316129][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.392778][ T5889] usb 2-1: config 0 descriptor?? [ 104.478557][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.501848][ T5889] hub 2-1:0.0: USB hub found [ 104.562694][ T6581] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 104.709948][ T5889] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 104.815464][ T5829] ocfs2: Unmounting device (7,0) on (node local) [ 104.824185][ T6614] loop5: detected capacity change from 0 to 256 [ 104.924121][ T5889] usbhid 2-1:0.0: can't add hid device: -71 [ 104.955664][ T6608] loop4: detected capacity change from 0 to 4096 [ 104.958296][ T5889] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 104.982943][ T6614] FAT-fs (loop5): Directory bread(block 64) failed [ 105.023040][ T5889] usb 2-1: USB disconnect, device number 3 [ 105.050036][ T6614] FAT-fs (loop5): Directory bread(block 65) failed [ 105.070398][ T6614] FAT-fs (loop5): Directory bread(block 66) failed [ 105.101765][ T6614] FAT-fs (loop5): Directory bread(block 67) failed [ 105.142851][ T6621] openvswitch: netlink: IP tunnel dst address not specified [ 105.152607][ T6614] FAT-fs (loop5): Directory bread(block 68) failed [ 105.159164][ T6614] FAT-fs (loop5): Directory bread(block 69) failed [ 105.195288][ T6622] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.229252][ T6614] FAT-fs (loop5): Directory bread(block 70) failed [ 105.277853][ T6614] FAT-fs (loop5): Directory bread(block 71) failed [ 105.310289][ T6614] FAT-fs (loop5): Directory bread(block 72) failed [ 105.333925][ T6614] FAT-fs (loop5): Directory bread(block 73) failed [ 105.459068][ T6627] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.288'. [ 105.481239][ T6628] loop0: detected capacity change from 0 to 512 [ 105.503170][ T6627] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.288'. [ 105.548570][ T6628] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.587039][ T6634] loop4: detected capacity change from 0 to 512 [ 105.593572][ T6628] EXT4-fs (loop0): Test dummy encryption mode enabled [ 105.600417][ T6628] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 105.655897][ T6628] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.694662][ T6628] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 105.752982][ T6628] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 105.756101][ T6641] loop3: detected capacity change from 0 to 64 [ 105.997047][ T6634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.027270][ T6634] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.089598][ T6654] loop1: detected capacity change from 0 to 512 [ 106.166660][ T6634] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.289: corrupted inode contents [ 106.226351][ T6634] EXT4-fs (loop4): Remounting filesystem read-only [ 106.245616][ T6654] EXT4-fs: inline encryption not supported [ 106.289821][ T6654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.355364][ T6654] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.465537][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.533657][ T33] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 106.582610][ T6673] netlink: 'syz.3.304': attribute type 32 has an invalid length. [ 106.679840][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.787202][ T6679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.906762][ T6685] loop4: detected capacity change from 0 to 1764 [ 107.105680][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.5.308'. [ 107.180753][ T5905] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.403219][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 107.451345][ T5905] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 107.460994][ T5905] usb 3-1: config 0 has no interface number 0 [ 107.483924][ T5905] usb 3-1: config 0 interface 224 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 107.527637][ T5905] usb 3-1: config 0 interface 224 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 107.568556][ T5905] usb 3-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=ea.ac [ 107.609673][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.627972][ T5905] usb 3-1: Product: syz [ 107.638076][ T5905] usb 3-1: Manufacturer: syz [ 107.653243][ T5905] usb 3-1: SerialNumber: syz [ 107.696878][ T5905] usb 3-1: config 0 descriptor?? [ 107.722541][ T6689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.730038][ T6689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.864593][ T6713] warning: `syz.3.316' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.012169][ T6689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.019469][ T6689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.159024][ T5905] cdc_subset 3-1:0.224 usb0: register 'cdc_subset' at usb-dummy_hcd.2-1, ALi M5632, 2e:cd:b4:13:4f:5c [ 108.190711][ T6688] loop1: detected capacity change from 0 to 40427 [ 108.222317][ T6688] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384) [ 108.236154][ T6688] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 108.360014][ T5889] usb 3-1: USB disconnect, device number 2 [ 108.370828][ T5889] cdc_subset 3-1:0.224 usb0: unregister 'cdc_subset' usb-dummy_hcd.2-1, ALi M5632 [ 108.417031][ T6688] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.615834][ T6688] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 108.640882][ T6688] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.990176][ T6746] loop0: detected capacity change from 0 to 64 [ 108.997912][ T5826] syz-executor: attempt to access beyond end of device [ 108.997912][ T5826] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.029964][ T5826] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 109.062918][ T6723] loop5: detected capacity change from 0 to 32768 [ 109.121515][ T6730] loop3: detected capacity change from 0 to 32768 [ 109.150700][ T6723] (syz.5.321,6723,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.164695][ T6730] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.325 (6730) [ 109.218167][ T6723] (syz.5.321,6723,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.305422][ T6730] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.316628][ T6730] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 109.325730][ T6730] BTRFS info (device loop3): using free-space-tree [ 109.362953][ T6723] JBD2: Ignoring recovery information on journal [ 109.447552][ T6723] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 109.538840][ T6765] loop0: detected capacity change from 0 to 256 [ 109.625592][ T6765] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.759513][ T6723] ocfs2: Unmounting device (7,5) on (node local) [ 110.039303][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 110.252867][ T5830] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.277278][ T6791] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 110.341035][ T6796] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.425841][ T6797] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.738987][ T6805] loop5: detected capacity change from 0 to 256 [ 110.942939][ T6805] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 111.150655][ T5889] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.168175][ T6819] xt_CT: No such helper "pptp" [ 111.372058][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 111.510697][ T5889] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 111.518887][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.531408][ T5889] usb 3-1: config 0 has no interface number 0 [ 111.537541][ T5889] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 111.548673][ T5889] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 111.554505][ T6832] x_tables: duplicate underflow at hook 2 [ 111.558578][ T5889] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.577800][ T5889] usb 3-1: config 0 interface 52 has no altsetting 0 [ 111.585229][ T5889] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 111.594374][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.657690][ T5889] usb 3-1: config 0 descriptor?? [ 111.683728][ T6834] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 111.751008][ T6817] loop1: detected capacity change from 0 to 32768 [ 111.773288][ T6817] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.354 (6817) [ 111.801056][ T6817] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.830809][ T6817] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 111.839324][ T6817] BTRFS info (device loop1): using free-space-tree [ 111.860188][ T6838] loop5: detected capacity change from 0 to 256 [ 111.917640][ T5889] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input5 [ 111.934515][ T5184] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 112.040808][ T5931] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.145963][ T5184] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 112.156314][ T5889] usb 3-1: USB disconnect, device number 3 [ 112.420042][ T6842] loop4: detected capacity change from 0 to 32768 [ 112.434793][ T6842] BTRFS: device /dev/loop4 (7:4) using temp-fsid a03535e3-33e4-44c8-af9f-193d4bd33ec9 [ 112.444908][ T6842] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.365 (6842) [ 112.469304][ T5826] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.491218][ T5931] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 112.519858][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.540646][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.569244][ T6842] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.570663][ T5931] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 112.585658][ T6842] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 112.605413][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.623349][ T5931] usb 1-1: config 0 descriptor?? [ 112.628833][ T6842] BTRFS info (device loop4): using free-space-tree [ 112.647942][ T5931] usb-storage 1-1:0.0: USB Mass Storage device detected [ 112.714107][ T6867] loop5: detected capacity change from 0 to 256 [ 112.729511][ T5931] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 112.772460][ T6872] loop3: detected capacity change from 0 to 1764 [ 112.801416][ T6872] afs: Unexpected value for 'dyn' [ 112.878157][ T6867] FAT-fs (loop5): Directory bread(block 64) failed [ 112.909135][ T6867] FAT-fs (loop5): Directory bread(block 65) failed [ 112.916143][ T6867] FAT-fs (loop5): Directory bread(block 66) failed [ 112.922990][ T6867] FAT-fs (loop5): Directory bread(block 67) failed [ 112.929592][ T6867] FAT-fs (loop5): Directory bread(block 68) failed [ 112.936495][ T6867] FAT-fs (loop5): Directory bread(block 69) failed [ 112.943490][ T6867] FAT-fs (loop5): Directory bread(block 70) failed [ 112.950238][ T6867] FAT-fs (loop5): Directory bread(block 71) failed [ 112.957132][ T6867] FAT-fs (loop5): Directory bread(block 72) failed [ 112.963998][ T6867] FAT-fs (loop5): Directory bread(block 73) failed [ 112.984397][ T5931] usb 1-1: USB disconnect, device number 4 [ 113.079069][ T6876] loop2: detected capacity change from 0 to 2048 [ 113.178891][ T6876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.267642][ T6884] loop3: detected capacity change from 0 to 2048 [ 113.348053][ T6891] loop5: detected capacity change from 0 to 1764 [ 113.371154][ T6891] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 113.520610][ T6898] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.658689][ T6900] SET target dimension over the limit! [ 113.908058][ T5827] BTRFS info (device loop4): last unmount of filesystem a03535e3-33e4-44c8-af9f-193d4bd33ec9 [ 114.245337][ T6921] syz.0.389 (6921): attempted to duplicate a private mapping with mremap. This is not supported. [ 114.311151][ T6924] netlink: 20 bytes leftover after parsing attributes in process `syz.5.390'. [ 114.330343][ T6924] netlink: 40 bytes leftover after parsing attributes in process `syz.5.390'. [ 114.673385][ T6934] loop3: detected capacity change from 0 to 256 [ 114.819057][ T6934] FAT-fs (loop3): Directory bread(block 64) failed [ 114.850965][ T6934] FAT-fs (loop3): Directory bread(block 65) failed [ 114.888144][ T6934] FAT-fs (loop3): Directory bread(block 66) failed [ 114.910581][ T6934] FAT-fs (loop3): Directory bread(block 67) failed [ 114.937692][ T6934] FAT-fs (loop3): Directory bread(block 68) failed [ 114.977997][ T6934] FAT-fs (loop3): Directory bread(block 69) failed [ 115.010955][ T6934] FAT-fs (loop3): Directory bread(block 70) failed [ 115.017524][ T6934] FAT-fs (loop3): Directory bread(block 71) failed [ 115.060740][ T6934] FAT-fs (loop3): Directory bread(block 72) failed [ 115.087642][ T6934] FAT-fs (loop3): Directory bread(block 73) failed [ 115.774048][ T6936] loop5: detected capacity change from 0 to 32768 [ 115.864912][ T6930] loop2: detected capacity change from 0 to 32768 [ 115.870141][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.408'. [ 115.921340][ T6930] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.393 (6930) [ 115.961650][ T6940] loop4: detected capacity change from 0 to 32768 [ 115.987336][ T6930] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.004336][ T6930] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 116.015155][ T6930] BTRFS info (device loop2): disk space caching is enabled [ 116.030790][ T6930] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 116.065252][ T6936] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 116.152164][ T6972] loop1: detected capacity change from 0 to 256 [ 116.504647][ T6930] BTRFS info (device loop2): rebuilding free space tree [ 116.538734][ T6990] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 116.592290][ T5828] ocfs2: Unmounting device (7,5) on (node local) [ 116.701314][ T6992] loop1: detected capacity change from 0 to 256 [ 116.722643][ T6974] loop3: detected capacity change from 0 to 32768 [ 116.731588][ T6930] BTRFS info (device loop2): disabling free space tree [ 116.738640][ T6930] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 116.748831][ T6930] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.897732][ T6974] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 116.933953][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 117.121043][ T6974] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 117.196558][ T5825] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.449138][ T5830] ocfs2: Unmounting device (7,3) on (node local) [ 117.560707][ T5889] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.733239][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.770235][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 117.810636][ T5889] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 117.865243][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.918633][ T5889] usb 2-1: config 0 descriptor?? [ 118.152258][ T7029] netlink: 'syz.2.432': attribute type 21 has an invalid length. [ 118.215535][ T7029] netlink: 128 bytes leftover after parsing attributes in process `syz.2.432'. [ 118.250731][ T7029] netlink: 'syz.2.432': attribute type 5 has an invalid length. [ 118.351277][ T7029] netlink: 3 bytes leftover after parsing attributes in process `syz.2.432'. [ 118.381652][ T5889] Bluetooth: Can't get version to change to load ram patch err [ 118.414876][ T5889] Bluetooth: Loading patch file failed [ 118.432169][ T5889] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 118.453467][ T5889] usb 2-1: USB disconnect, device number 4 [ 118.660050][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.830747][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 118.841759][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.862943][ T8] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 118.885730][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.918870][ T8] usb 4-1: Product: syz [ 118.925274][ T8] usb 4-1: Manufacturer: syz [ 118.960593][ T8] usb 4-1: SerialNumber: syz [ 118.987350][ T8] usb 4-1: config 0 descriptor?? [ 119.018952][ T8] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 119.045657][ T8] usb 4-1: selecting invalid altsetting 1 [ 119.171578][ T7023] loop0: detected capacity change from 0 to 32768 [ 119.248030][ T7058] loop1: detected capacity change from 0 to 1024 [ 119.425203][ T5889] usb 4-1: USB disconnect, device number 2 [ 120.172822][ T7095] mmap: syz.3.455 (7095) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.546781][ T7105] loop3: detected capacity change from 0 to 1764 [ 120.628583][ T7113] No control pipe specified [ 120.910894][ T7123] loop2: detected capacity change from 0 to 1024 [ 121.071078][ T7123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.098037][ T7137] loop3: detected capacity change from 0 to 16 [ 121.133793][ T7123] EXT4-fs warning (device loop2): empty_inline_dir:1839: bad inline directory (dir #12) - no `..' [ 121.205694][ T7139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.255430][ T7137] erofs (device loop3): mounted with root inode @ nid 36. [ 121.271708][ T7142] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 121.292423][ T7137] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 121.335408][ T7137] erofs (device loop3): failed to decompress -23 in[64, 4032] out[1851] [ 121.346124][ T7137] erofs (device loop3): read error -117 @ 43 of nid 36 [ 121.607047][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.647860][ T7153] loop0: detected capacity change from 0 to 512 [ 121.709045][ T7153] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.767854][ T7158] IPv6: sit1: Disabled Multicast RS [ 121.782008][ T7153] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.484: invalid indirect mapped block 83886080 (level 1) [ 121.862796][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 121.931006][ T7153] EXT4-fs (loop0): Remounting filesystem read-only [ 121.997057][ T7153] EXT4-fs (loop0): 1 orphan inode deleted [ 122.003030][ T7153] EXT4-fs (loop0): 1 truncate cleaned up [ 122.009669][ T7153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.080963][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 122.234703][ T7177] loop2: detected capacity change from 0 to 8192 [ 122.308657][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.371712][ T7186] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 122.409150][ T7177] loop2: p1 p3 p4 [ 122.414109][ T7177] loop2: partition table partially beyond EOD, truncated [ 122.444282][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.499'. [ 122.452820][ T7177] loop2: p1 size 3523149824 extends beyond EOD, truncated [ 122.487632][ T7177] loop2: p3 size 395700 extends beyond EOD, truncated [ 122.532165][ T7177] loop2: p4 start 117571584 is beyond EOD, truncated [ 122.575144][ T7192] loop4: detected capacity change from 0 to 128 [ 122.644778][ T7192] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.663750][ T7194] netlink: 48 bytes leftover after parsing attributes in process `syz.3.502'. [ 122.810016][ T6553] udevd[6553]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 122.810223][ T5833] udevd[5833]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 123.021621][ T7204] loop2: detected capacity change from 0 to 8 [ 123.028422][ T7204] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 123.153837][ T7196] loop1: detected capacity change from 0 to 8192 [ 123.211507][ T7212] netlink: 'syz.3.511': attribute type 1 has an invalid length. [ 123.570227][ T7232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.522'. [ 123.828320][ T7241] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 124.246230][ T7259] syz.2.534 uses obsolete (PF_INET,SOCK_PACKET) [ 124.488072][ T7271] netlink: 'syz.0.541': attribute type 9 has an invalid length. [ 124.496173][ T7271] netlink: 244 bytes leftover after parsing attributes in process `syz.0.541'. [ 124.547190][ T7263] loop3: detected capacity change from 0 to 4096 [ 124.569711][ T7272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.650099][ T7263] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 124.743862][ T7263] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 124.795995][ T7278] loop2: detected capacity change from 0 to 2048 [ 124.847907][ T7281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.544'. [ 124.988711][ T7286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.001991][ T7278] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 125.210792][ T7278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.253778][ T7293] loop0: detected capacity change from 0 to 256 [ 125.460199][ T7276] loop5: detected capacity change from 0 to 32768 [ 125.494696][ T7293] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 125.501267][ T7302] loop3: detected capacity change from 0 to 64 [ 125.830635][ T5906] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.042293][ T5906] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 126.077281][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.156853][ T5906] usb 5-1: config 0 descriptor?? [ 126.194685][ T5906] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 126.609914][ T5906] gspca_sunplus: reg_w_riv err -71 [ 126.630737][ T5906] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 126.687246][ T5906] usb 5-1: USB disconnect, device number 3 [ 127.138422][ T7323] loop3: detected capacity change from 0 to 32768 [ 127.195295][ T7323] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.559 (7323) [ 127.322842][ T7323] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.333196][ T7323] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 127.343075][ T7323] BTRFS info (device loop3): using free-space-tree [ 127.651180][ T5830] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.768558][ T7351] loop1: detected capacity change from 0 to 32768 [ 127.801498][ T7351] (syz.1.568,7351,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear " or missing value [ 127.858846][ T7351] (syz.1.568,7351,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 128.151122][ T7334] loop5: detected capacity change from 0 to 32768 [ 128.193605][ T7334] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 128.248997][ T7346] loop0: detected capacity change from 0 to 32768 [ 128.333669][ T7334] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 128.345689][ T7346] (syz.0.566,7346,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.425225][ T7346] (syz.0.566,7346,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.533407][ T7351] overlay: Unknown parameter 'obj_type' [ 128.626930][ T7346] JBD2: Ignoring recovery information on journal [ 128.698928][ T7375] loop4: detected capacity change from 0 to 32768 [ 128.717719][ T5828] ocfs2: Unmounting device (7,5) on (node local) [ 128.762649][ T7375] (syz.4.569,7375,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.824431][ T5889] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 128.838645][ T7346] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 128.848325][ T7375] (syz.4.569,7375,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.899341][ T7346] (syz.0.566,7346,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x78b62c9b, computed 0x9e9236ca. Applying ECC. [ 128.919372][ T7375] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 128.998978][ T7375] JBD2: Ignoring recovery information on journal [ 129.042402][ T5889] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 129.044584][ T5829] ocfs2: Unmounting device (7,0) on (node local) [ 129.051664][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.073220][ T5889] usb 3-1: config 0 descriptor?? [ 129.083304][ T5889] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 129.097594][ T7375] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 129.533705][ T7418] loop3: detected capacity change from 0 to 65 [ 129.584009][ T5889] gp8psk: usb in 137 operation failed. [ 129.591015][ T5889] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 129.610696][ T7418] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 129.630626][ T5889] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 129.648615][ T7423] loop1: detected capacity change from 0 to 1024 [ 129.670123][ T5827] ocfs2: Unmounting device (7,4) on (node local) [ 129.680883][ T5889] usb 3-1: USB disconnect, device number 4 [ 129.968996][ T7430] netlink: 'syz.0.585': attribute type 1 has an invalid length. [ 129.996761][ T7430] netlink: 'syz.0.585': attribute type 3 has an invalid length. [ 130.010707][ T7430] netlink: 224 bytes leftover after parsing attributes in process `syz.0.585'. [ 130.198505][ T7437] openvswitch: netlink: Key type 164 is out of range max 32 [ 130.300927][ T7439] netlink: 332 bytes leftover after parsing attributes in process `syz.1.588'. [ 130.302849][ T7441] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 130.381501][ T7446] cgroup: name respecified [ 130.496196][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 130.573975][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 130.909540][ T7462] loop4: detected capacity change from 0 to 1764 [ 130.984188][ T29] audit: type=1326 audit(1734614971.984:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc78785d29 code=0x7ffc0000 [ 131.060554][ T29] audit: type=1326 audit(1734614972.024:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fbc78785d29 code=0x7ffc0000 [ 131.085802][ T7448] loop0: detected capacity change from 0 to 32768 [ 131.137880][ T7448] (syz.0.592,7448,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 131.159192][ T7448] (syz.0.592,7448,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 131.181511][ T29] audit: type=1326 audit(1734614972.024:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc78785d29 code=0x7ffc0000 [ 131.204294][ T29] audit: type=1326 audit(1734614972.024:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc78785d29 code=0x7ffc0000 [ 131.222670][ T7470] netlink: 'syz.5.604': attribute type 1 has an invalid length. [ 131.256740][ T7472] ubi0: attaching mtd0 [ 131.277831][ T7472] ubi0: scanning is finished [ 131.312864][ T7472] ubi0: empty MTD device detected [ 131.406435][ T7478] netlink: 68 bytes leftover after parsing attributes in process `syz.4.607'. [ 131.415732][ T7478] netlink: 68 bytes leftover after parsing attributes in process `syz.4.607'. [ 131.509265][ T7448] JBD2: Ignoring recovery information on journal [ 131.536100][ T7472] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 131.590763][ T7472] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 131.598114][ T7472] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 131.600991][ T7448] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 131.695084][ T7472] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 131.715613][ T7472] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 131.761241][ T7472] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 131.769275][ T7472] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1566678631 [ 131.842853][ T7494] xt_bpf: check failed: parse error [ 131.848185][ T7472] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 131.872292][ T7483] ubi0: background thread "ubi_bgt0d" started, PID 7483 [ 132.133340][ T5829] ocfs2: Unmounting device (7,0) on (node local) [ 132.229354][ T7506] dccp_v6_rcv: dropped packet with invalid checksum [ 132.405412][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.423790][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.932079][ T7519] loop2: detected capacity change from 0 to 32768 [ 132.963783][ T7488] loop1: detected capacity change from 0 to 32768 [ 132.971669][ T7514] batadv0: entered promiscuous mode [ 133.010458][ T7519] add_index: next_index = 0. Resetting! [ 133.054770][ T7488] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.610 (7488) [ 133.244221][ T7488] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.254691][ T7488] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 133.263531][ T7488] BTRFS info (device loop1): using free-space-tree [ 133.817884][ T7568] loop3: detected capacity change from 0 to 256 [ 133.820382][ T7488] BTRFS info (device loop1 state M): max_inline set to 0 [ 133.894612][ T7568] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 133.911414][ T5826] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.970602][ T5953] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.140778][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 134.164773][ T5953] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 134.194443][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.296497][ T5953] usb 3-1: config 0 descriptor?? [ 134.517465][ T5953] usb 3-1: string descriptor 0 read error: -71 [ 134.547241][ T5953] usb 3-1: selecting invalid altsetting 3 [ 134.590567][ T5953] comedi comedi0: could not set alternate setting 3 in high speed [ 134.609860][ T5953] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 134.664285][ T5953] usbduxsigma 3-1:0.0: probe with driver usbduxsigma failed with error -22 [ 134.716194][ T5953] usb 3-1: USB disconnect, device number 5 [ 135.275632][ T7611] syz.2.662: attempt to access beyond end of device [ 135.275632][ T7611] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 135.311159][ T7613] loop1: detected capacity change from 0 to 256 [ 135.483731][ T7592] loop0: detected capacity change from 0 to 32768 [ 135.647891][ T7619] netlink: 604 bytes leftover after parsing attributes in process `syz.4.666'. [ 135.660919][ T7613] FAT-fs (loop1): Directory bread(block 64) failed [ 135.674776][ T7613] FAT-fs (loop1): Directory bread(block 65) failed [ 135.709871][ T7613] FAT-fs (loop1): Directory bread(block 66) failed [ 135.730618][ T7613] FAT-fs (loop1): Directory bread(block 67) failed [ 135.749343][ T7613] FAT-fs (loop1): Directory bread(block 68) failed [ 135.791005][ T7613] FAT-fs (loop1): Directory bread(block 69) failed [ 135.797704][ T7613] FAT-fs (loop1): Directory bread(block 70) failed [ 135.840658][ T7625] usb usb7: usbfs: process 7625 (syz.5.669) did not claim interface 63 before use [ 135.851550][ T7613] FAT-fs (loop1): Directory bread(block 71) failed [ 135.858186][ T7613] FAT-fs (loop1): Directory bread(block 72) failed [ 135.904552][ T7613] FAT-fs (loop1): Directory bread(block 73) failed [ 136.116773][ T7633] xt_cluster: node mask cannot exceed total number of nodes [ 136.202167][ T7635] IPv6: Can't replace route, no match found [ 136.500615][ T7648] loop3: detected capacity change from 0 to 64 [ 136.926504][ T7669] netlink: 56 bytes leftover after parsing attributes in process `syz.5.692'. [ 137.492988][ T7695] loop0: detected capacity change from 0 to 16 [ 137.544442][ T7695] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 137.560314][ T7693] loop4: detected capacity change from 0 to 8192 [ 137.605572][ T7695] erofs (device loop0): mounted with root inode @ nid 36. [ 137.615397][ T7693] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.694193][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 138.057080][ T7712] xt_TCPMSS: Only works on TCP SYN packets [ 138.472888][ T7733] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (3) [ 138.484111][ T7732] loop1: detected capacity change from 0 to 256 [ 138.547043][ T7732] FAT-fs (loop1): Directory bread(block 64) failed [ 138.574589][ T7732] FAT-fs (loop1): Directory bread(block 65) failed [ 138.587975][ T7732] FAT-fs (loop1): Directory bread(block 66) failed [ 138.598507][ T7732] FAT-fs (loop1): Directory bread(block 67) failed [ 138.635089][ T7732] FAT-fs (loop1): Directory bread(block 68) failed [ 138.660075][ T7732] FAT-fs (loop1): Directory bread(block 69) failed [ 138.680702][ T5931] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 138.694639][ T7732] FAT-fs (loop1): Directory bread(block 70) failed [ 138.714858][ T7732] FAT-fs (loop1): Directory bread(block 71) failed [ 138.725393][ T7732] FAT-fs (loop1): Directory bread(block 72) failed [ 138.747544][ T7732] FAT-fs (loop1): Directory bread(block 73) failed [ 138.860610][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 138.867464][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.905432][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 138.950617][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 138.989887][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 139.039844][ T7749] binder: Bad value for 'stats' [ 139.040562][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 139.099937][ T5931] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 139.127721][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 139.170826][ T5931] usb 6-1: Product: syz [ 139.175065][ T5931] usb 6-1: Manufacturer: syz [ 139.190159][ T5931] usb 6-1: SerialNumber: syz [ 139.221629][ T5931] usb 6-1: config 0 descriptor?? [ 139.460950][ T5931] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 139.460985][ T5931] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 139.654551][ T5931] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 139.681778][ T5931] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 139.719241][ T5931] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 139.756950][ T7773] loop0: detected capacity change from 0 to 128 [ 139.774346][ T5931] usb 6-1: USB disconnect, device number 2 [ 139.830773][ T7773] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 139.948210][ T7773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.004547][ T7778] loop1: detected capacity change from 0 to 1024 [ 140.222422][ T3501] hfsplus: b-tree write err: -5, ino 4 [ 140.520370][ T7799] capability: warning: `syz.4.751' uses 32-bit capabilities (legacy support in use) [ 140.827085][ T7810] netlink: 'syz.0.753': attribute type 13 has an invalid length. [ 141.084821][ T7822] loop1: detected capacity change from 0 to 256 [ 141.117252][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 141.628851][ T7839] usb usb8: usbfs: process 7839 (syz.2.766) did not claim interface 0 before use [ 142.324816][ T7864] 9pnet_virtio: no channels available for device syz [ 142.343866][ T7865] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 142.421362][ T7827] loop5: detected capacity change from 0 to 32768 [ 142.729467][ T7827] JBD2: Ignoring recovery information on journal [ 142.883901][ T7827] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 143.065146][ T7837] loop1: detected capacity change from 0 to 32768 [ 143.193564][ T7837] (syz.1.765,7837,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 143.240921][ T7889] netlink: 'syz.0.782': attribute type 22 has an invalid length. [ 143.291963][ T5828] ocfs2: Unmounting device (7,5) on (node local) [ 143.344621][ T7837] (syz.1.765,7837,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 143.550121][ T7837] JBD2: Ignoring recovery information on journal [ 143.912523][ T7837] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 144.181295][ T5826] ocfs2: Unmounting device (7,1) on (node local) [ 144.411742][ T7937] trusted_key: encrypted_key: keylen parameter is missing [ 144.778661][ T7948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.806'. [ 145.070327][ T7941] loop2: detected capacity change from 0 to 32768 [ 145.112089][ T7941] bcachefs (/dev/loop2): error reading default superblock: checksum error, type none: got should be [ 145.797750][ T7993] loop1: detected capacity change from 0 to 4096 [ 145.979391][ T7941] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,version_upgrade=none [ 146.064947][ T7941] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 146.065238][ T7941] bcachefs (loop2): insufficient writeable journal devices available: have 0, need 1 [ 146.065238][ T7941] rw journal devs: [ 146.151392][ T8012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.827'. [ 146.302187][ T7993] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 146.302187][ T7993] [ 146.354218][ T7941] bcachefs (loop2): accounting_read... done [ 146.396716][ T7941] bcachefs (loop2): alloc_read... done [ 146.428586][ T7941] bcachefs (loop2): stripes_read... done [ 146.513379][ T7941] bcachefs (loop2): snapshots_read... done [ 146.523059][ T7941] bcachefs (loop2): journal_replay... done [ 146.529019][ T7941] bcachefs (loop2): resume_logged_ops... done [ 146.543043][ T7941] bcachefs (loop2): delete_dead_inodes... done [ 146.549574][ T7941] bcachefs (loop2): going read-write [ 146.971579][ T7941] bcachefs (loop2): done starting filesystem [ 146.984843][ T8044] bcachefs (loop2 inum 4099 offset 0): __bch2_write(): move error: insufficient_devices [ 147.042220][ T8044] bcachefs (loop2 inum 536870913 offset 0): __bch2_write(): move error: insufficient_devices [ 147.531973][ T5825] bcachefs (loop2): shutting down [ 147.547050][ T5825] bcachefs (loop2): going read-only [ 147.566968][ T5825] bcachefs (loop2): finished waiting for writes to stop [ 147.653260][ T29] audit: type=1326 audit(1734614988.734:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc78785d29 code=0x7ffc0000 [ 147.690644][ T5825] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 147.725075][ T5825] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 147.750671][ T29] audit: type=1326 audit(1734614988.764:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc78785d29 code=0x7ffc0000 [ 147.781206][ T5825] bcachefs (loop2): shutdown complete, journal seq 10 [ 147.818645][ T5825] bcachefs (loop2): marking filesystem clean [ 147.844348][ T29] audit: type=1326 audit(1734614988.794:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fbc78785d29 code=0x7ffc0000 [ 147.903817][ T29] audit: type=1326 audit(1734614988.794:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc78785d29 code=0x7ffc0000 [ 148.073997][ T5825] bcachefs (loop2): shutdown complete [ 148.212398][ T8098] loop5: detected capacity change from 0 to 8 [ 148.251526][ T8098] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 148.320240][ T8098] cramfs: Error -3 while decompressing! [ 148.350660][ T8098] cramfs: ffffffff9a4e1368(26)->ffff888079754000(4096) [ 148.361225][ T8098] cramfs: Error -5 while decompressing! [ 148.390677][ T8098] cramfs: ffffffff9a4e1382(26)->ffff88805168c000(4096) [ 148.413663][ T8098] cramfs: Error -3 while decompressing! [ 148.431888][ T8098] cramfs: ffffffff9a4e139c(16)->ffff888050809000(4096) [ 148.470774][ T8098] cramfs: Error -3 while decompressing! [ 148.514324][ T8098] cramfs: ffffffff9a4e1368(26)->ffff888079754000(4096) [ 148.534699][ T29] audit: type=1800 audit(1734614989.614:21): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.857" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 148.765108][ T8113] loop0: detected capacity change from 0 to 64 [ 149.158165][ T8129] loop1: detected capacity change from 0 to 1024 [ 149.440653][ T5889] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.637409][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 149.680629][ T5889] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 149.689294][ T5889] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 149.723659][ T5889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 149.780605][ T5889] usb 5-1: config 1 has no interface number 0 [ 149.786772][ T5889] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.827822][ T5889] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.869192][ T5889] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 149.930597][ T5889] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 149.939706][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.018691][ T5889] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 150.251567][ T5889] snd_usb_pod 5-1:1.1: cannot start listening: -90 [ 150.281757][ T5889] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 150.312357][ T5889] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 150.374936][ T8175] netlink: 108 bytes leftover after parsing attributes in process `syz.5.886'. [ 150.405065][ T8177] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 150.418486][ T8175] netlink: 108 bytes leftover after parsing attributes in process `syz.5.886'. [ 150.450790][ T8175] netlink: 84 bytes leftover after parsing attributes in process `syz.5.886'. [ 150.498643][ T5889] usb 5-1: USB disconnect, device number 4 [ 150.737977][ T8187] netlink: 'syz.5.890': attribute type 2 has an invalid length. [ 150.763076][ T8186] loop3: detected capacity change from 0 to 1024 [ 150.777889][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.5.890'. [ 151.010260][ T8193] loop1: detected capacity change from 0 to 256 [ 151.196930][ T8193] FAT-fs (loop1): Directory bread(block 64) failed [ 151.242604][ T8202] loop3: detected capacity change from 0 to 512 [ 151.250322][ T8193] FAT-fs (loop1): Directory bread(block 65) failed [ 151.258708][ T8193] FAT-fs (loop1): Directory bread(block 66) failed [ 151.277277][ T8202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.285918][ T8193] FAT-fs (loop1): Directory bread(block 67) failed [ 151.305036][ T8193] FAT-fs (loop1): Directory bread(block 68) failed [ 151.331706][ T8193] FAT-fs (loop1): Directory bread(block 69) failed [ 151.347347][ T8202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.360104][ T8193] FAT-fs (loop1): Directory bread(block 70) failed [ 151.375225][ T8202] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.391517][ T8193] FAT-fs (loop1): Directory bread(block 71) failed [ 151.447520][ T8193] FAT-fs (loop1): Directory bread(block 72) failed [ 151.477366][ T8193] FAT-fs (loop1): Directory bread(block 73) failed [ 151.993477][ T8229] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 152.010783][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.308625][ T8197] loop5: detected capacity change from 0 to 32768 [ 152.400635][ T5953] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 152.415721][ T8197] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 152.421181][ T8247] loop3: detected capacity change from 0 to 1024 [ 152.500742][ T5888] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.716628][ T5828] ocfs2: Unmounting device (7,5) on (node local) [ 152.735629][ T5953] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 152.781555][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.965847][ T5953] usb 1-1: config 0 descriptor?? [ 153.017090][ T5888] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 153.026478][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.027643][ T8264] loop3: detected capacity change from 0 to 1024 [ 153.066125][ T5888] usb 5-1: Product: syz [ 153.070336][ T5888] usb 5-1: Manufacturer: syz [ 153.082731][ T5888] usb 5-1: SerialNumber: syz [ 153.096284][ T8264] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 153.107039][ T8264] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 153.147392][ T5888] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 153.195482][ T8] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 153.272618][ T8264] EXT4-fs (loop3): invalid journal inode [ 153.278692][ T8264] EXT4-fs (loop3): can't get journal size [ 153.288722][ T5953] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 153.315086][ T8264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.579809][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.182745][ T5953] gp8psk: usb out operation failed. [ 154.188022][ T5953] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 154.410946][ T5953] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 154.563406][ T8304] loop5: detected capacity change from 0 to 512 [ 154.610667][ T5953] usb 1-1: USB disconnect, device number 5 [ 154.679616][ T8304] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.899711][ T8304] EXT4-fs (loop5): 1 truncate cleaned up [ 154.982160][ T8304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.246140][ T8304] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.931: corrupted in-inode xattr: overlapping e_value [ 155.359461][ T8321] loop1: detected capacity change from 0 to 256 [ 155.414087][ T8318] loop4: detected capacity change from 0 to 2048 [ 155.462524][ T8321] exfat: Deprecated parameter 'namecase' [ 155.499210][ T8304] EXT4-fs (loop5): Remounting filesystem read-only [ 155.553076][ T8304] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1772: inode #15: comm syz.5.931: unable to update i_inline_off [ 155.639586][ T8321] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 155.675776][ T8327] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.888856][ T8330] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.939' sets config #5 [ 155.986864][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.359996][ T8318] NILFS (loop4): error -2 truncating bmap (ino=16) [ 156.983191][ T8327] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 157.088960][ T8327] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 157.229737][ T8327] Remounting filesystem read-only [ 157.277787][ T5827] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 157.405907][ T8351] trusted_key: encrypted_key: master key parameter '' is invalid [ 158.010841][ T8360] 9pnet_fd: p9_fd_create_tcp (8360): problem connecting socket to 127.0.0.1 [ 158.344409][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 159.176078][ T8337] loop3: detected capacity change from 0 to 32768 [ 159.243262][ T29] audit: type=1326 audit(1734615000.304:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b5785d29 code=0x7ffc0000 [ 159.310920][ T8337] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.943 (8337) [ 159.473913][ T29] audit: type=1326 audit(1734615000.304:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b5785d29 code=0x7ffc0000 [ 159.730650][ T29] audit: type=1326 audit(1734615000.364:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f04b5785d29 code=0x7ffc0000 [ 159.752795][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.968346][ T29] audit: type=1326 audit(1734615000.364:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b5785d29 code=0x7ffc0000 [ 159.990498][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.272616][ T29] audit: type=1326 audit(1734615000.364:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b5785d29 code=0x7ffc0000 [ 161.240667][ C0] sched: DL replenish lagged too much [ 161.560919][ T5953] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.900661][ T5953] usb 1-1: Using ep0 maxpacket: 8 [ 162.015432][ T5953] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.109909][ T5953] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 162.128717][ T8431] netlink: 60 bytes leftover after parsing attributes in process `syz.5.977'. [ 162.205124][ T5953] usb 1-1: config 8 has no interface number 0 [ 162.261764][ T8431] unsupported nlmsg_type 40 [ 162.293771][ T5953] usb 1-1: config 8 interface 255 has no altsetting 0 [ 162.420235][ T5953] usb 1-1: string descriptor 0 read error: -22 [ 162.483867][ T5953] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 162.593562][ T8439] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 162.627826][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.698242][ T8439] netlink: 228 bytes leftover after parsing attributes in process `syz.2.981'. [ 162.820691][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 163.290764][ T5953] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 163.557757][ T5953] usb 1-1: USB disconnect, device number 6 [ 163.780869][ T8458] cgroup: Invalid name [ 163.944210][ T8461] loop1: detected capacity change from 0 to 64 [ 164.035657][ T8461] MINIX-fs: mounting file system with errors, running fsck is recommended [ 164.897446][ T8474] openvswitch: netlink: EtherType 0 is less than min 600 [ 165.784616][ T8490] loop2: detected capacity change from 0 to 512 [ 165.981406][ T8490] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 166.089349][ T8490] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1001: invalid indirect mapped block 2683928664 (level 1) [ 166.270323][ T8490] EXT4-fs (loop2): Remounting filesystem read-only [ 166.360984][ T8490] EXT4-fs (loop2): 1 truncate cleaned up [ 166.367770][ T8490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.733675][ T29] audit: type=1326 audit(1734615008.814:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.0.1020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04b5785d29 code=0x0 [ 168.119045][ T8536] loop5: detected capacity change from 0 to 256 [ 168.301664][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.328812][ T8536] FAT-fs (loop5): Directory bread(block 64) failed [ 168.366327][ T8536] FAT-fs (loop5): Directory bread(block 65) failed [ 168.380066][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1026'. [ 168.447288][ T8536] FAT-fs (loop5): Directory bread(block 66) failed [ 168.542565][ T8536] FAT-fs (loop5): Directory bread(block 67) failed [ 168.549223][ T8536] FAT-fs (loop5): Directory bread(block 68) failed [ 168.661189][ T8536] FAT-fs (loop5): Directory bread(block 69) failed [ 168.741430][ T8536] FAT-fs (loop5): Directory bread(block 70) failed [ 168.748098][ T8536] FAT-fs (loop5): Directory bread(block 71) failed [ 168.880175][ T8536] FAT-fs (loop5): Directory bread(block 72) failed [ 168.917867][ T8536] FAT-fs (loop5): Directory bread(block 73) failed [ 168.949033][ T3501] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.076976][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1027'. [ 169.647418][ T3501] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.917953][ T8558] dlm: no locking on control device [ 170.464127][ T8566] loop4: detected capacity change from 0 to 64 [ 170.502252][ T3501] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.232227][ T3501] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.742089][ T29] audit: type=1326 audit(1734615012.814:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb2d85d29 code=0x7ffc0000 [ 172.009907][ T29] audit: type=1326 audit(1734615012.814:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb2d85d29 code=0x7ffc0000 [ 172.049082][ T8584] netlink: 'syz.0.1046': attribute type 2 has an invalid length. [ 172.141032][ T8584] netlink: 'syz.0.1046': attribute type 1 has an invalid length. [ 172.268074][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 172.331871][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.341375][ T29] audit: type=1326 audit(1734615012.954:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f2cb2d85d29 code=0x7ffc0000 [ 172.364718][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.389407][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.430624][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.451180][ T3501] bridge_slave_1: left allmulticast mode [ 172.457129][ T3501] bridge_slave_1: left promiscuous mode [ 172.490775][ T5138] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.528690][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.636363][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.697581][ T29] audit: type=1326 audit(1734615012.954:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb2d85d29 code=0x7ffc0000 [ 172.861565][ T3501] bridge_slave_0: left allmulticast mode [ 172.940260][ T3501] bridge_slave_0: left promiscuous mode [ 172.971734][ T29] audit: type=1326 audit(1734615012.954:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.4.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb2d85d29 code=0x7ffc0000 [ 173.035529][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.700982][ T5850] Bluetooth: hci0: command tx timeout [ 174.933368][ T8622] loop5: detected capacity change from 0 to 1024 [ 175.250991][ T3529] hfsplus: b-tree write err: -5, ino 4 [ 176.332928][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.394771][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.433857][ T3501] bond0 (unregistering): Released all slaves [ 176.503121][ T3501] bond1 (unregistering): Released all slaves [ 176.547576][ T8600] veth0_vlan: entered allmulticast mode [ 176.782632][ T5850] Bluetooth: hci0: command tx timeout [ 177.950633][ T29] audit: type=1326 audit(1734615019.024:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc78785d29 code=0x7ffc0000 [ 178.163726][ T29] audit: type=1326 audit(1734615019.074:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc78785d29 code=0x7ffc0000 [ 178.359950][ T29] audit: type=1326 audit(1734615019.084:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fbc78785d29 code=0x7ffc0000 [ 178.588854][ T29] audit: type=1326 audit(1734615019.084:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc78785d29 code=0x7ffc0000 [ 178.834722][ T29] audit: type=1326 audit(1734615019.084:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc78785d29 code=0x7ffc0000 [ 178.860396][ T5850] Bluetooth: hci0: command tx timeout [ 179.025149][ T8680] loop3: detected capacity change from 0 to 24 [ 179.350658][ T8686] autofs4:pid:8686:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 179.480601][ T8588] chnl_net:caif_netlink_parms(): no params data found [ 179.874451][ T3501] hsr_slave_0: left promiscuous mode [ 180.000576][ T29] audit: type=1326 audit(1734615021.074:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb2d85d29 code=0x7ffc0000 [ 180.081958][ T3501] hsr_slave_1: left promiscuous mode [ 180.209278][ T29] audit: type=1326 audit(1734615021.074:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb2d85d29 code=0x7ffc0000 [ 180.290754][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.298686][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.450582][ T29] audit: type=1326 audit(1734615021.194:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f2cb2d85d29 code=0x7ffc0000 [ 180.513152][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.610658][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.683329][ T29] audit: type=1326 audit(1734615021.194:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb2d85d29 code=0x7ffc0000 [ 180.864739][ T3501] veth1_macvtap: left promiscuous mode [ 180.913830][ T29] audit: type=1326 audit(1734615021.194:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb2d85d29 code=0x7ffc0000 [ 180.940606][ T5850] Bluetooth: hci0: command tx timeout [ 180.967475][ T3501] veth0_macvtap: left promiscuous mode [ 181.014633][ T3501] veth1_vlan: left promiscuous mode [ 181.020292][ T3501] veth0_vlan: left promiscuous mode [ 181.331043][ T8715] overlayfs: conflicting options: metacopy=off,verity=require [ 181.540991][ T8719] ceph: No source [ 181.797444][ T8721] loop0: detected capacity change from 0 to 512 [ 181.943116][ T8721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.077759][ T8721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 182.143587][ T8721] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.308157][ T8721] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 182.350453][ T8721] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1095: Failed to acquire dquot type 0 [ 182.432284][ T8730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.651051][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 184.926959][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 185.644837][ T8754] loop1: detected capacity change from 0 to 32768 [ 186.924707][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.964950][ T8588] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.021045][ T8588] bridge_slave_0: entered allmulticast mode [ 187.028283][ T8588] bridge_slave_0: entered promiscuous mode [ 187.109073][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.152286][ T8588] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.159596][ T8588] bridge_slave_1: entered allmulticast mode [ 187.210239][ T8588] bridge_slave_1: entered promiscuous mode [ 187.448636][ T8588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.522630][ T8588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.827333][ T8588] team0: Port device team_slave_0 added [ 187.931940][ T8588] team0: Port device team_slave_1 added [ 188.108333][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.169393][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.320631][ T8588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.455924][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.500726][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.660554][ T8588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.085272][ T8588] hsr_slave_0: entered promiscuous mode [ 189.158238][ T8588] hsr_slave_1: entered promiscuous mode [ 189.223404][ T8588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.236581][ T8772] loop4: detected capacity change from 0 to 32768 [ 189.259939][ T8588] Cannot create hsr debugfs directory [ 189.340871][ T8772] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1117 (8772) [ 189.475690][ T8772] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 189.553232][ T8772] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 189.620742][ T8772] BTRFS info (device loop4): using free-space-tree [ 190.508954][ T8588] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 190.530921][ T5827] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.568056][ T8588] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 190.664783][ T8588] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 190.804689][ T8588] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 191.398790][ T8588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.536726][ T8588] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.686727][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.693903][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.792951][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.800122][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.005978][ T8588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.182382][ T8837] bridge0: port 3(veth0_to_bridge) entered blocking state [ 192.237452][ T8837] bridge0: port 3(veth0_to_bridge) entered disabled state [ 192.255766][ T8837] veth0_to_bridge: entered allmulticast mode [ 192.328760][ T8837] veth0_to_bridge: entered promiscuous mode [ 192.379631][ T8837] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.451292][ T8837] bridge0: port 3(veth0_to_bridge) entered blocking state [ 192.459207][ T8837] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 193.204943][ T8588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.435363][ T8828] loop3: detected capacity change from 0 to 32768 [ 193.540787][ T8828] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1128 (8828) [ 193.724382][ T8828] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.815680][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.822178][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.832638][ T8828] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 193.941143][ T8828] BTRFS info (device loop3): using free-space-tree [ 194.599739][ T8880] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1133'. [ 194.790929][ T5830] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.935420][ T8588] veth0_vlan: entered promiscuous mode [ 195.121278][ T8588] veth1_vlan: entered promiscuous mode [ 195.295255][ T5138] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 195.314959][ T5138] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 195.333548][ T5138] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 195.357443][ T5138] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 195.366002][ T5138] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 195.394354][ T5138] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.429610][ T8588] veth0_macvtap: entered promiscuous mode [ 195.543239][ T8588] veth1_macvtap: entered promiscuous mode [ 195.743840][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.817619][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.905787][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.960683][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.020551][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.090678][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.143517][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.230425][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.311470][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.362297][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.420424][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.672218][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.741364][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.791686][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.836112][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.880630][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.950799][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.010994][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.043232][ T8902] loop4: detected capacity change from 0 to 4096 [ 197.080821][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.117463][ T8904] loop3: detected capacity change from 0 to 256 [ 197.137256][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.180136][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.300605][ T8904] FAT-fs (loop3): Directory bread(block 64) failed [ 197.321717][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.378521][ T8904] FAT-fs (loop3): Directory bread(block 65) failed [ 197.430810][ T8904] FAT-fs (loop3): Directory bread(block 66) failed [ 197.444958][ T8588] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.470896][ T8904] FAT-fs (loop3): Directory bread(block 67) failed [ 197.477707][ T8904] FAT-fs (loop3): Directory bread(block 68) failed [ 197.505596][ T5850] Bluetooth: hci6: command tx timeout [ 197.530867][ T8588] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.550638][ T8904] FAT-fs (loop3): Directory bread(block 69) failed [ 197.557308][ T8904] FAT-fs (loop3): Directory bread(block 70) failed [ 197.574215][ T8588] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.617359][ T8588] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.638758][ T8904] FAT-fs (loop3): Directory bread(block 71) failed [ 197.700825][ T8904] FAT-fs (loop3): Directory bread(block 72) failed [ 197.707416][ T8904] FAT-fs (loop3): Directory bread(block 73) failed [ 198.747972][ T8668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.763168][ T8923] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1145'. [ 198.830799][ T8668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.936922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 198.949620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 198.962600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 198.975722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 198.988846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 199.001937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 199.015029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 199.028199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 199.041393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 199.054390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 199.061843][ T8668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.074667][ T8884] chnl_net:caif_netlink_parms(): no params data found [ 199.187968][ T8668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.571457][ T5840] Bluetooth: hci6: command tx timeout [ 199.643860][ T8930] loop4: detected capacity change from 0 to 1024 [ 200.164116][ T1248] hfsplus: b-tree write err: -5, ino 4 [ 200.212188][ T8884] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.219332][ T8884] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.330375][ T8884] bridge_slave_0: entered allmulticast mode [ 200.349400][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 200.380992][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 200.395016][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 200.403963][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 200.414236][ T5834] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 200.423355][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 200.477108][ T8884] bridge_slave_0: entered promiscuous mode [ 200.568937][ T8884] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.633027][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.672803][ T8884] bridge_slave_1: entered allmulticast mode [ 200.697095][ T8884] bridge_slave_1: entered promiscuous mode [ 200.722116][ T8948] netlink: 'syz.6.1152': attribute type 10 has an invalid length. [ 200.856882][ T8948] team0: Device hsr_slave_0 failed to register rx_handler [ 201.032626][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 201.038723][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 201.044844][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 201.052391][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 201.058472][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 201.215042][ T8884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.403633][ T8884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.652324][ T5138] Bluetooth: hci6: command tx timeout [ 202.007267][ T8884] team0: Port device team_slave_0 added [ 202.196870][ T8884] team0: Port device team_slave_1 added [ 202.535546][ T5138] Bluetooth: hci7: command tx timeout [ 202.662831][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.669859][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.911806][ T8884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.052159][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.059174][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.303490][ T5850] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 203.339055][ T5850] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 203.347153][ T5850] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 203.355987][ T5850] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 203.365036][ T5850] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 203.373236][ T5850] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 203.460630][ T8884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.746950][ T5850] Bluetooth: hci6: command tx timeout [ 203.844156][ T8992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1167'. [ 203.941120][ C0] net_ratelimit: 4502 callbacks suppressed [ 203.941144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 203.960185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 203.973282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 203.986335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 203.999383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 204.014577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 204.027606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 204.040703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 204.053800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 204.066850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 204.293013][ T8884] hsr_slave_0: entered promiscuous mode [ 204.383960][ T8884] hsr_slave_1: entered promiscuous mode [ 204.462199][ T9002] process 'syz.3.1171' launched '/dev/fd/3' with NULL argv: empty string added [ 204.510878][ T8884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.554602][ T8884] Cannot create hsr debugfs directory [ 204.595797][ T9004] xt_hashlimit: overflow, try lower: 18446744073709551612/2047 [ 204.620930][ T5850] Bluetooth: hci7: command tx timeout [ 205.181156][ T9012] binder: binder_mmap: 9011 20174000-20d74000 bad vm_flags failed -1 [ 205.307158][ T9015] loop4: detected capacity change from 0 to 512 [ 205.411871][ T5850] Bluetooth: hci8: command tx timeout [ 205.491985][ T9015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.600750][ T9015] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.884595][ T8941] chnl_net:caif_netlink_parms(): no params data found [ 206.216611][ T9024] netlink: 'syz.6.1179': attribute type 21 has an invalid length. [ 206.250736][ T9024] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1179'. [ 206.694748][ T5850] Bluetooth: hci7: command tx timeout [ 207.049637][ T8982] chnl_net:caif_netlink_parms(): no params data found [ 207.171857][ T8941] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.179051][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.284711][ T8941] bridge_slave_0: entered allmulticast mode [ 207.325687][ T8941] bridge_slave_0: entered promiscuous mode [ 207.388709][ T8941] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.445974][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.503277][ T5850] Bluetooth: hci8: command tx timeout [ 207.533924][ T8941] bridge_slave_1: entered allmulticast mode [ 207.574418][ T8941] bridge_slave_1: entered promiscuous mode [ 207.610314][ T8884] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 207.731895][ T8884] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 207.794862][ T8884] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 207.998543][ T8884] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 208.048183][ T9058] netlink: 'syz.6.1189': attribute type 13 has an invalid length. [ 208.102265][ T9058] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1189'. [ 208.137655][ T8941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.216048][ T8941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.737431][ T8941] team0: Port device team_slave_0 added [ 208.770746][ T5850] Bluetooth: hci7: command tx timeout [ 208.791903][ T8941] team0: Port device team_slave_1 added [ 208.951258][ C0] net_ratelimit: 4132 callbacks suppressed [ 208.951283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 208.970409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 208.983539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 208.996787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 209.009995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 209.023242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 209.036382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 209.049496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 209.062558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 209.075764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 209.195862][ T8982] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.227718][ T8982] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.278820][ T8982] bridge_slave_0: entered allmulticast mode [ 209.311951][ T8982] bridge_slave_0: entered promiscuous mode [ 209.407838][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.443389][ T9078] loop3: detected capacity change from 0 to 64 [ 209.449696][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.571693][ T5850] Bluetooth: hci8: command tx timeout [ 209.588923][ T8941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.667078][ T8982] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.689465][ T9077] loop6: detected capacity change from 0 to 4096 [ 209.700620][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.707891][ T8982] bridge_slave_1: entered allmulticast mode [ 209.766388][ T9077] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 209.782335][ T8982] bridge_slave_1: entered promiscuous mode [ 209.950731][ T9077] ntfs3(loop6): failed to convert "c46c" to cp850 [ 210.031367][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.038379][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.220564][ T8941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.385510][ T8982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.507415][ T8982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.054793][ T8884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.119940][ T8941] hsr_slave_0: entered promiscuous mode [ 211.130674][ T5905] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 211.181186][ T8941] hsr_slave_1: entered promiscuous mode [ 211.238563][ T8941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.281108][ T8941] Cannot create hsr debugfs directory [ 211.327240][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 211.364096][ T5905] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 211.392381][ T5905] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.460119][ T5905] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 211.482086][ T8982] team0: Port device team_slave_0 added [ 211.525353][ T8982] team0: Port device team_slave_1 added [ 211.536711][ T5905] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.630929][ T5905] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.653362][ T5850] Bluetooth: hci8: command tx timeout [ 211.687096][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.739222][ T5905] usb 4-1: Product: syz [ 211.773297][ T5905] usb 4-1: Manufacturer: syz [ 211.807362][ T5905] usb 4-1: SerialNumber: syz [ 211.858374][ T8884] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.926184][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.960804][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.130548][ T8982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.170789][ T5905] usb 4-1: USB disconnect, device number 3 [ 212.312102][ T8624] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.319412][ T8624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.381668][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.388692][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.418579][ T9109] loop6: detected capacity change from 0 to 1024 [ 212.563300][ T6553] udevd[6553]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.596234][ T8982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.662669][ T8624] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.669847][ T8624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.132556][ T8982] hsr_slave_0: entered promiscuous mode [ 213.190753][ T8982] hsr_slave_1: entered promiscuous mode [ 213.218207][ T8982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.240417][ T8982] Cannot create hsr debugfs directory [ 213.737870][ T8884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.961050][ C0] net_ratelimit: 6303 callbacks suppressed [ 213.961074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 213.979628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.992391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 214.005103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.018003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 214.030913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.046100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 214.058853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.071728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 214.084450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.476463][ T8941] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 214.627680][ T8941] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 214.764018][ T8941] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 215.000896][ T8941] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 215.039458][ T9143] loop3: detected capacity change from 0 to 1024 [ 215.115273][ T8884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.359046][ T8982] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 215.486318][ T8982] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 215.746546][ T8982] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 215.842076][ T8982] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 216.445572][ T9164] netlink: 'syz.3.1221': attribute type 10 has an invalid length. [ 216.497268][ T9164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1221'. [ 216.528548][ T8941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.629912][ T9164] bridge0: port 3(dummy0) entered blocking state [ 216.651927][ T9164] bridge0: port 3(dummy0) entered disabled state [ 216.673758][ T9164] dummy0: entered allmulticast mode [ 216.698278][ T9164] dummy0: entered promiscuous mode [ 216.728678][ T9164] bridge0: port 3(dummy0) entered blocking state [ 216.735322][ T9164] bridge0: port 3(dummy0) entered forwarding state [ 217.100213][ T9168] loop3: detected capacity change from 0 to 1024 [ 217.253055][ T8982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.292196][ T68] hfsplus: b-tree write err: -5, ino 4 [ 217.559479][ T8982] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.715116][ T8941] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.923484][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.930787][ T8668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.154752][ T8884] veth0_vlan: entered promiscuous mode [ 218.195301][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.202556][ T8668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.245644][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.253185][ T8668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.322276][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.329529][ T8668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.549319][ T9183] loop3: detected capacity change from 0 to 8 [ 218.591537][ T9183] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 218.641234][ T9183] cramfs: Error -3 while decompressing! [ 218.676780][ T9183] cramfs: ffffffff9a4dd368(26)->ffff8880400b3000(4096) [ 218.761072][ T9183] cramfs: Error -5 while decompressing! [ 218.782786][ T9183] cramfs: ffffffff9a4dd382(26)->ffff8880400b4000(4096) [ 218.827133][ T9183] cramfs: Error -3 while decompressing! [ 218.837983][ T8884] veth1_vlan: entered promiscuous mode [ 218.855383][ T9183] cramfs: ffffffff9a4dd39c(16)->ffff8880400b5000(4096) [ 218.894823][ T9183] cramfs: Error -3 while decompressing! [ 218.917718][ T9183] cramfs: ffffffff9a4dd368(26)->ffff8880400b3000(4096) [ 218.950001][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 218.950023][ T29] audit: type=1800 audit(1734615060.024:43): pid=9183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1227" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 218.970607][ C0] net_ratelimit: 6402 callbacks suppressed [ 218.970633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 218.994803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.007452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 219.020080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.032950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 219.045671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.058426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 219.072903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.085706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 219.098469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.677137][ T8884] veth0_macvtap: entered promiscuous mode [ 219.845092][ T8941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.964933][ T8884] veth1_macvtap: entered promiscuous mode [ 220.107677][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.173311][ T9202] netlink: 'syz.6.1230': attribute type 2 has an invalid length. [ 220.240546][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.312828][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.365926][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.453916][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.517041][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.556344][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.598299][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.635526][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.666839][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.721013][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.760589][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.801879][ T8884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.882873][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.987790][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.057351][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.171232][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.253492][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.336935][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.356738][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.420654][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.462387][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.521384][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.574196][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.630023][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.695815][ T8884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.784973][ T8884] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.911591][ T8884] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.000843][ T8884] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.048683][ T8884] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.094337][ T9225] loop3: detected capacity change from 0 to 64 [ 222.132306][ T8982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.394513][ T8941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.813273][ T9234] loop6: detected capacity change from 0 to 64 [ 223.100424][ T8624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.180441][ T5138] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 223.208579][ T5138] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 223.224856][ T5138] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 223.233492][ T5138] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 223.248510][ T5138] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 223.258153][ T5138] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 223.300610][ T8624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.599036][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.680559][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.980531][ C0] net_ratelimit: 8654 callbacks suppressed [ 223.980557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 223.999105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.011525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.023880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.036698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 224.049495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.061930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.074307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.087164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 224.101659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.548018][ T8982] veth0_vlan: entered promiscuous mode [ 224.579755][ T9257] loop6: detected capacity change from 0 to 2048 [ 224.725359][ T9264] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.789769][ T29] audit: type=1326 audit(1734615065.854:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c6f85d29 code=0x7ffc0000 [ 224.916054][ T8982] veth1_vlan: entered promiscuous mode [ 224.989505][ T29] audit: type=1326 audit(1734615065.854:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c6f85d29 code=0x7ffc0000 [ 225.180686][ T29] audit: type=1326 audit(1734615065.904:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f78c6f85d29 code=0x7ffc0000 [ 225.299137][ T9268] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1248'. [ 225.341163][ T5138] Bluetooth: hci9: command tx timeout [ 225.348076][ T9268] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1248'. [ 225.397211][ T29] audit: type=1326 audit(1734615065.904:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c6f85d29 code=0x7ffc0000 [ 225.475514][ T9238] chnl_net:caif_netlink_parms(): no params data found [ 225.585514][ T29] audit: type=1326 audit(1734615065.904:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.3.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c6f85d29 code=0x7ffc0000 [ 225.625600][ T8982] veth0_macvtap: entered promiscuous mode [ 225.799560][ T8982] veth1_macvtap: entered promiscuous mode [ 225.805792][ T5832] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 225.998502][ T8941] veth0_vlan: entered promiscuous mode [ 226.030641][ T5832] usb 7-1: Using ep0 maxpacket: 16 [ 226.102488][ T5832] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 226.115289][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.161058][ T5832] usb 7-1: config 0 has no interface number 0 [ 226.226311][ T5832] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.237536][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.300609][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.337790][ T5832] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 226.372181][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 226.380397][ T5832] usb 7-1: Product: syz [ 226.387348][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.440561][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.462829][ T5832] usb 7-1: SerialNumber: syz [ 226.528246][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.551690][ T5832] usb 7-1: config 0 descriptor?? [ 226.612522][ T5832] cm109 7-1:0.8: invalid payload size 239, expected 4 [ 226.623012][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.685227][ T5832] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input7 [ 226.716517][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.797455][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.868791][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.962925][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.080580][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.134089][ C1] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 227.141580][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.148758][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.156142][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.163368][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.170616][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.178171][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.185441][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.192601][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.199737][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.206900][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 227.300662][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 227.309968][ T5832] usb 7-1: USB disconnect, device number 2 [ 227.329696][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.411165][ T5138] Bluetooth: hci9: command tx timeout [ 227.434057][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.460923][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 227.470121][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 227.529944][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.622754][ T5832] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 227.640873][ T8941] veth1_vlan: entered promiscuous mode [ 227.758884][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.859134][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.945718][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.029234][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.120642][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.210324][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.276517][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.342981][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.420399][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.476300][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.543427][ T9316] loop3: detected capacity change from 0 to 16 [ 228.572462][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.605051][ T9316] erofs (device loop3): mounted with root inode @ nid 36. [ 228.631781][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.690449][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.760474][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.887102][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.990889][ C0] net_ratelimit: 8744 callbacks suppressed [ 228.990913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 229.009536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.021916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.034261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.047055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 229.059763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.075941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.088298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.101102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:01:7c:ac:46:d2, vlan:0) [ 229.113794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.287679][ T8982] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.360614][ T8982] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.369382][ T8982] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.496640][ T5138] Bluetooth: hci9: command tx timeout [ 229.502852][ T8982] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.570004][ T9238] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.614750][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.648791][ T9238] bridge_slave_0: entered allmulticast mode [ 229.708155][ T9238] bridge_slave_0: entered promiscuous mode [ 229.915808][ T8941] veth0_macvtap: entered promiscuous mode [ 230.008336][ T9238] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.070628][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.077930][ T9238] bridge_slave_1: entered allmulticast mode [ 230.128923][ T9333] loop6: detected capacity change from 0 to 128 [ 230.165036][ T9238] bridge_slave_1: entered promiscuous mode [ 230.224512][ T9333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 230.307940][ T9333] System zones: 1-3, 19-19, 35-36 [ 230.341025][ T9333] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 230.641688][ T8941] veth1_macvtap: entered promiscuous mode [ 230.675301][ T5889] ------------[ cut here ]------------ [ 230.677615][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 230.680771][ T5889] DEBUG_LOCKS_WARN_ON(1) [ 230.680879][ T5889] WARNING: CPU: 0 PID: 5889 at kernel/locking/lockdep.c:232 __lock_acquire+0x564/0x2100 [ 230.703667][ T5889] Modules linked in: [ 230.707576][ T5889] CPU: 0 UID: 0 PID: 5889 Comm: kworker/0:5 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 230.718348][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 230.728412][ T5889] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 230.734963][ T5889] RIP: 0010:__lock_acquire+0x564/0x2100 [ 230.740532][ T5889] Code: 00 00 83 3d 21 f4 9e 0e 00 75 23 90 48 c7 c7 00 96 0a 8c 48 c7 c6 00 99 0a 8c e8 67 5d e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 230.760139][ T5889] RSP: 0018:ffffc9000488f450 EFLAGS: 00010046 [ 230.766210][ T5889] RAX: d0f6e83a7c789700 RBX: 0000000000001201 RCX: ffff88802ede3c00 [ 230.774182][ T5889] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.782154][ T5889] RBP: 0000000000041201 R08: ffffffff81601a42 R09: 1ffff110170c519a [ 230.790123][ T5889] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88802ede46c4 [ 230.798125][ T5889] R13: 000000000000000a R14: 1ffff11005dbc8ea R15: ffff88802ede4750 [ 230.806116][ T5889] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 230.815052][ T5889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.821639][ T5889] CR2: 0000001b30112ff8 CR3: 000000000e736000 CR4: 0000000000350ef0 [ 230.829619][ T5889] Call Trace: [ 230.832899][ T5889] [ 230.835829][ T5889] ? __warn+0x165/0x4d0 [ 230.839999][ T5889] ? __lock_acquire+0x564/0x2100 [ 230.844949][ T5889] ? report_bug+0x2b3/0x500 [ 230.849468][ T5889] ? __lock_acquire+0x564/0x2100 [ 230.854417][ T5889] ? handle_bug+0x60/0x90 [ 230.859034][ T5889] ? exc_invalid_op+0x1a/0x50 [ 230.863811][ T5889] ? asm_exc_invalid_op+0x1a/0x20 [ 230.868857][ T5889] ? __warn_printk+0x292/0x360 [ 230.873636][ T5889] ? __lock_acquire+0x564/0x2100 [ 230.878591][ T5889] ? validate_chain+0x11e/0x5920 [ 230.883557][ T5889] lock_acquire+0x1ed/0x550 [ 230.888069][ T5889] ? wg_packet_decrypt_worker+0xcf/0xd80 [ 230.893720][ T5889] ? __lock_acquire+0x1397/0x2100 [ 230.898752][ T5889] ? __pfx_lock_acquire+0x10/0x10 [ 230.903781][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.909414][ T5889] ? __local_bh_disable_ip+0x187/0x220 [ 230.914893][ T5889] ? __pfx_validate_chain+0x10/0x10 [ 230.920105][ T5889] ? wg_packet_decrypt_worker+0xcf/0xd80 [ 230.925758][ T5889] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 230.931590][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.937232][ T5889] ? validate_chain+0x11e/0x5920 [ 230.942183][ T5889] ? wg_packet_decrypt_worker+0xcf/0xd80 [ 230.947835][ T5889] ? process_scheduled_works+0x976/0x1840 [ 230.953557][ T5889] _raw_spin_lock_bh+0x35/0x50 [ 230.958334][ T5889] ? wg_packet_decrypt_worker+0xcf/0xd80 [ 230.963987][ T5889] wg_packet_decrypt_worker+0xcf/0xd80 [ 230.969472][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.975135][ T5889] ? __lock_acquire+0x1397/0x2100 [ 230.980169][ T5889] ? __pfx_validate_chain+0x10/0x10 [ 230.985382][ T5889] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 230.991472][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.997110][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.002746][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.008379][ T5889] ? look_up_lock_class+0x77/0x170 [ 231.013503][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.019138][ T5889] ? register_lock_class+0x102/0x980 [ 231.024428][ T5889] ? try_to_wake_up+0x91b/0x1470 [ 231.029375][ T5889] ? do_raw_spin_lock+0x14f/0x370 [ 231.034400][ T5889] ? __pfx_lock_release+0x10/0x10 [ 231.039437][ T5889] ? __pfx_register_lock_class+0x10/0x10 [ 231.045085][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.050719][ T5889] ? mark_lock+0x9a/0x360 [ 231.055058][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.060707][ T5889] ? __lock_acquire+0x1397/0x2100 [ 231.065914][ T5889] ? do_raw_spin_unlock+0x13c/0x8b0 [ 231.071132][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.076786][ T5889] ? __pfx_lock_acquire+0x10/0x10 [ 231.081916][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.087554][ T5889] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.093546][ T5889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.099886][ T5889] ? process_scheduled_works+0x976/0x1840 [ 231.105609][ T5889] process_scheduled_works+0xa68/0x1840 [ 231.111174][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.117253][ T5889] ? assign_work+0x364/0x3d0 [ 231.121844][ T5889] worker_thread+0x870/0xd30 [ 231.126440][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.132082][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.137716][ T5889] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 231.143619][ T5889] ? __kthread_parkme+0x169/0x1d0 [ 231.148650][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 231.153763][ T5889] kthread+0x2f2/0x390 [ 231.157839][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 231.162953][ T5889] ? __pfx_kthread+0x10/0x10 [ 231.167550][ T5889] ret_from_fork+0x4d/0x80 [ 231.171975][ T5889] ? __pfx_kthread+0x10/0x10 [ 231.176577][ T5889] ret_from_fork_asm+0x1a/0x30 [ 231.181355][ T5889] [ 231.184374][ T5889] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 231.191649][ T5889] CPU: 0 UID: 0 PID: 5889 Comm: kworker/0:5 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 231.202497][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 231.212552][ T5889] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 231.219171][ T5889] Call Trace: [ 231.222448][ T5889] [ 231.225381][ T5889] dump_stack_lvl+0x241/0x360 [ 231.230076][ T5889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.235295][ T5889] ? __pfx__printk+0x10/0x10 [ 231.239904][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.245541][ T5889] ? vscnprintf+0x5d/0x90 [ 231.249876][ T5889] panic+0x349/0x880 [ 231.253786][ T5889] ? __warn+0x174/0x4d0 [ 231.257951][ T5889] ? __pfx_panic+0x10/0x10 [ 231.262382][ T5889] ? ret_from_fork_asm+0x1a/0x30 [ 231.267326][ T5889] __warn+0x344/0x4d0 [ 231.271325][ T5889] ? __lock_acquire+0x564/0x2100 [ 231.276281][ T5889] report_bug+0x2b3/0x500 [ 231.280626][ T5889] ? __lock_acquire+0x564/0x2100 [ 231.285580][ T5889] handle_bug+0x60/0x90 [ 231.289737][ T5889] exc_invalid_op+0x1a/0x50 [ 231.294241][ T5889] asm_exc_invalid_op+0x1a/0x20 [ 231.299105][ T5889] RIP: 0010:__lock_acquire+0x564/0x2100 [ 231.304661][ T5889] Code: 00 00 83 3d 21 f4 9e 0e 00 75 23 90 48 c7 c7 00 96 0a 8c 48 c7 c6 00 99 0a 8c e8 67 5d e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 231.324281][ T5889] RSP: 0018:ffffc9000488f450 EFLAGS: 00010046 [ 231.330361][ T5889] RAX: d0f6e83a7c789700 RBX: 0000000000001201 RCX: ffff88802ede3c00 [ 231.338351][ T5889] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.346337][ T5889] RBP: 0000000000041201 R08: ffffffff81601a42 R09: 1ffff110170c519a [ 231.354315][ T5889] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88802ede46c4 [ 231.362295][ T5889] R13: 000000000000000a R14: 1ffff11005dbc8ea R15: ffff88802ede4750 [ 231.370288][ T5889] ? __warn_printk+0x292/0x360 [ 231.375091][ T5889] ? validate_chain+0x11e/0x5920 [ 231.380072][ T5889] lock_acquire+0x1ed/0x550 [ 231.384594][ T5889] ? wg_packet_decrypt_worker+0xcf/0xd80 [ 231.390251][ T5889] ? __lock_acquire+0x1397/0x2100 [ 231.395290][ T5889] ? __pfx_lock_acquire+0x10/0x10 [ 231.400325][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.405964][ T5889] ? __local_bh_disable_ip+0x187/0x220 [ 231.411441][ T5889] ? __pfx_validate_chain+0x10/0x10 [ 231.416656][ T5889] ? wg_packet_decrypt_worker+0xcf/0xd80 [ 231.422305][ T5889] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 231.428131][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.433788][ T5889] ? validate_chain+0x11e/0x5920 [ 231.438752][ T5889] ? wg_packet_decrypt_worker+0xcf/0xd80 [ 231.444408][ T5889] ? process_scheduled_works+0x976/0x1840 [ 231.450137][ T5889] _raw_spin_lock_bh+0x35/0x50 [ 231.454910][ T5889] ? wg_packet_decrypt_worker+0xcf/0xd80 [ 231.460570][ T5889] wg_packet_decrypt_worker+0xcf/0xd80 [ 231.466054][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.471698][ T5889] ? __lock_acquire+0x1397/0x2100 [ 231.476738][ T5889] ? __pfx_validate_chain+0x10/0x10 [ 231.481956][ T5889] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 231.488048][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.493687][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.499326][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.504962][ T5889] ? look_up_lock_class+0x77/0x170 [ 231.510086][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.515722][ T5889] ? register_lock_class+0x102/0x980 [ 231.521016][ T5889] ? try_to_wake_up+0x91b/0x1470 [ 231.525960][ T5889] ? do_raw_spin_lock+0x14f/0x370 [ 231.530987][ T5889] ? __pfx_lock_release+0x10/0x10 [ 231.536110][ T5889] ? __pfx_register_lock_class+0x10/0x10 [ 231.541752][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.547390][ T5889] ? mark_lock+0x9a/0x360 [ 231.551728][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.557362][ T5889] ? __lock_acquire+0x1397/0x2100 [ 231.562395][ T5889] ? do_raw_spin_unlock+0x13c/0x8b0 [ 231.567599][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.573236][ T5889] ? __pfx_lock_acquire+0x10/0x10 [ 231.578267][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.583903][ T5889] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.589891][ T5889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.596235][ T5889] ? process_scheduled_works+0x976/0x1840 [ 231.601960][ T5889] process_scheduled_works+0xa68/0x1840 [ 231.607524][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.613516][ T5889] ? assign_work+0x364/0x3d0 [ 231.618109][ T5889] worker_thread+0x870/0xd30 [ 231.622707][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.628342][ T5889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.633976][ T5889] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 231.639884][ T5889] ? __kthread_parkme+0x169/0x1d0 [ 231.644916][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 231.650029][ T5889] kthread+0x2f2/0x390 [ 231.654107][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 231.659220][ T5889] ? __pfx_kthread+0x10/0x10 [ 231.663818][ T5889] ret_from_fork+0x4d/0x80 [ 231.668261][ T5889] ? __pfx_kthread+0x10/0x10 [ 231.672858][ T5889] ret_from_fork_asm+0x1a/0x30 [ 231.677630][ T5889] [ 231.680905][ T5889] Kernel Offset: disabled [ 231.685224][ T5889] Rebooting in 86400 seconds..