last executing test programs: 4.308515332s ago: executing program 5 (id=1340): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f60122000009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200108"], 0x0}) 3.609494493s ago: executing program 1 (id=1351): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x3c}}, 0x0) 3.45004329s ago: executing program 2 (id=1352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1ff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x80}]}}}]}, 0x5c}}, 0x40000) 3.405660386s ago: executing program 1 (id=1354): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000000100)=""/201, 0xc9, 0x134) 3.163130461s ago: executing program 1 (id=1356): syz_mount_image$minix(&(0x7f0000000080), &(0x7f00000001c0)='./file2\x00', 0x1008800, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYBLOB="3db70f1d93ef392454bf976455dbd62c0617a398506031aed46c92bd3162f79bd0469bb10d4bc2beb3392030ccd369b7ece3dae7cdaa41f65c2aa3870e5814f90178cd7bde300f5392bfad00b4866b245859cd", @ANYRESHEX, @ANYRES16, @ANYRES8], 0x1, 0x1f3, &(0x7f0000000500)="$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") stat(&(0x7f0000000780)='./file2\x00', 0x0) 3.096988528s ago: executing program 2 (id=1359): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000002c0)={0x7, 0x0, '\x00', {0x0, @bt={0x5, 0x8, 0x0, 0x3, 0xf, 0x1, 0x5, 0x0, 0x1, 0x8, 0x8, 0x76b312d2, 0x8f, 0x80000000, 0x2, 0x10, {0x20c00, 0x7ec6acaf}, 0x9, 0xa}}}) 2.849766314s ago: executing program 2 (id=1361): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r0], 0x1c}}, 0x0) 2.805130977s ago: executing program 1 (id=1363): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 2.721600213s ago: executing program 2 (id=1364): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x58c, &(0x7f0000000600)="$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") mount$nfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1c0030, 0x0) 2.486335535s ago: executing program 1 (id=1367): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xf1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5e4, &(0x7f0000000a00)={[{0xfffffffffffffff5, 0x4e00, "4951a4d8fd7192fab8d724579ccedf801ec180c9c2e1e902586f76b9353f591587c38c5f7397fa52c612f331d0ebf6125848e7ee9487e40000901537740e98f0376570fba0ad0e14e8f007fc05a383527db6173e789a5ab62a1fb9cf1be0a8938a73dcb6586b618b417ae66b693bf1203cdde76250b6b982e3d6c4499ca20d9e42760ec2dc15f212685c12456924b0d32b7290527eea37f81fdb0ebc56bb31f16880c7a9277b4e72e81c08c916e8b79afe9f2b77d20018e330697d33dbf056a37cb60a19b826dfd6b5532bb2c18a0ed2d5121c758ac48babfc846c547aa411de75072ff488f5df9ce6f34e381afa11fea85738bab3a2f247fab799c3a45363d6beb302530834aaf5f25978d17359593a1cd523201158df3b452b48353539d3b23113fc52ceab18a76c49ca5fe576ec61dedd3219f95f13a0d6a5c106ed5891d95b10ca10e2"}, {0xea, 0x4e00, "ab1ed0358d9e5afbbe44a1798c7ca16997aaaecc86c0da980ce18226341b63b79474b6f0e650d67c4b09f2694f456ccf9a9ed67e2219b93a23cd1be2b90c08df3054095553f33b7451b500743278c3c5f6ac7e35aa8f11f4d9fee0774530f70e32143d63c2aa605bbc58fb42e85cc40d7aa7fb8319a30a9f54806a7b3122fdda92f03a4f2096e48aa562deac3383997b9016473a3da285b686ff81719670b17a84bc77a19f1195cc63ceb2de2a4584803b0308d24343a3919f87bb58c6bb0a5ab4b265fc344e36ada09ad619e217e375b83a25b19c355c87e17de171510e0710a5e2203f5e94d5354281"}, {0x5e, 0x4e00, "b96521bbb5ef56dc9a9717f9a7a01c9bf7336d7e139abd0a04f620ba450eb6498eeeb2a4d8a0d55cf366528be3be7478c388bd08cffc747eb5332d7676b1fe713e97d2b3ac19cc70578354d050ad8cb474af1501df7419d44d4fb1045523"}, {0xdb, 0x4e00, "07a150437634d4d8c13bdcdf71249e027b959ffdd3f3000607e70d5bc3f03c964bd8dfd1415258932dbec5a2f97c706914aac82fed4d8831d91b85092797acd09f10b5aeab73ea10e6307a4f5cb8fcc590bb354887f80b2a49811f1200310f2da30cac70f3542a80f3472671091cb4ddcb84c4f768020c6590a0a51332b0a9381d9a472b7495e72358294326b10415aa68d993acac46fcc7a721b513bdb86585e4552b3e8e65b29c1380372522a0f2adfbc40afe2819e56c760c815c78d942d7b5b732f592b97d27a3117d39c4f658624a828fb7f5f0105bc14bc7"}, {0x14, 0x4e00, "fbf1fdaeceb7c6ab875983a395e1185bb8814145"}, {0x6e, 0x4e00, "a9e23780ed6eaada382a0b6651fbe7d7f2af5d6a1ae3f446b9642029a747283ccccd5d9c84f514ef17cd0e490ab772608020b0dee2d2f5ab4aca6396a80f96fdf66a0332356f9b2cea8a18c1b5fb42d707f589909941e7996c586667b9df05e5db4e4a2c8c5618431d99dd6df155"}, {0x68, 0x4e00, "9a7febc4d799ff1c6cc11b30d1f58e4b3b0197f25118408d847e8a499b1aac7d6e69de3fb73cba2ef9b9e3c54ab5242689a81994df772282c7fb60bcebee860cc16da5aac1f070b9c0a4c22b3a591e5d0de6f05f874d3c69f8a2d762a1cd0aac46558ca7f78d97a4"}, {0xfc, 0x4e00, "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"}, {0x66, 0x4e00, "eaebeafdd3aaeabe8a12d9509f6090a409399c59c47dd48b677ddca152c2388f309663e16aebe1dd94c300a7d5591b373cd33419a74cc2ba2680d5a4478ddf2b5fe34cf8dad7316ee3c827535764bc426e2ce0437fd8d2dedc29a015c07ce7fad8f4cfd87aa8"}]}) 2.25783072s ago: executing program 5 (id=1373): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x4) 2.11836376s ago: executing program 5 (id=1376): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x1b0, 0x0, 0x290, 0x290, 0x0, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0) 2.074537147s ago: executing program 4 (id=1377): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) 2.057865432s ago: executing program 5 (id=1378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="5001000016000100000000000000000000000000000000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ff0200000000000000000000000000010000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000c0010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7f000050001100fe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000000005001b"], 0x150}}, 0x0) 1.96239343s ago: executing program 2 (id=1379): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002480)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b000000000091d3000000001400000000000000290000003e000000010000000000000014000000000000002900000034000000000000000000000050"], 0x98}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x1, 0x5}}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x33}}}], 0x40}}], 0x2, 0x0) 1.961875719s ago: executing program 3 (id=1380): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@updsa={0x10c, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {}, {0x0, 0x0, 0xb846cf7}, {0x0, 0xf5e3}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e23, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}}]}, 0x10c}}, 0x0) 1.786021693s ago: executing program 0 (id=1381): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.690634383s ago: executing program 0 (id=1382): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0xb}, 0x32) 1.633719009s ago: executing program 4 (id=1383): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000180)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x18}}], 0x1, 0x4) 1.625520192s ago: executing program 3 (id=1384): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)=@ipv6_delrule={0x24, 0x21, 0xd01, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x40004000) 1.61889209s ago: executing program 5 (id=1385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x0) 1.563000269s ago: executing program 0 (id=1386): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000000000000000000d0a470000000000000200000604"], &(0x7f0000000f40)=""/4089, 0x44, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) 1.410536707s ago: executing program 5 (id=1387): r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@datacow}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"00000000000000000000000000005ffd", 0x0, 0x0, {0xfffffffffffffff8, 0x3}, {0x8, 0xb0a}, 0xab4, [0x5, 0x17a, 0x7, 0x5, 0x3, 0x6a, 0x1, 0x5f, 0x2, 0x5, 0xffffffff, 0x7, 0x3, 0xffdffffffffffffb, 0x621, 0x7]}) 1.410101291s ago: executing program 2 (id=1388): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x29f, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000100)=ANY=[]) 1.311078166s ago: executing program 3 (id=1389): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) 1.310551653s ago: executing program 4 (id=1390): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001500192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1.299468392s ago: executing program 0 (id=1391): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.118047719s ago: executing program 3 (id=1392): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000030000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000a704000008000000850000009500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.056995343s ago: executing program 4 (id=1393): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 802.757647ms ago: executing program 0 (id=1394): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x8) 665.730041ms ago: executing program 3 (id=1395): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x2, @capture={0x0, 0x0, {0x18}, 0x8, 0x4}}) 630.432345ms ago: executing program 4 (id=1396): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x460, 0x0, 0xb, 0x148, 0x3c8, 0x148, 0x3c8, 0x230, 0x242, 0x3c8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 359.974627ms ago: executing program 0 (id=1397): r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) 26.831121ms ago: executing program 3 (id=1398): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x4}, 0x2) 26.604088ms ago: executing program 1 (id=1399): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0xd00, 0x32315659, 0x280, 0x168}) 0s ago: executing program 4 (id=1400): syz_mount_image$cramfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x10080, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0], 0x1, 0x158, &(0x7f0000000200)="$eJzszz9rGnEYwPHvef4praJQC7ZDK3TooVjPE7uVoqXSg9qDFpcOpaBXWtAqCuXGttCtQ1/ADUmETOKQ5AUYkyWJQjCv4yBDIGPC+TOEhEyZf59F7/s8PNy9eTnTSICK8LrT7vbsft9upj9YterHjS3RI8Cdxb92t+cvN0Ufl+Gb/xsE77fIOzH4+r1lP290Wv6zVwYNqNzzewgdsXvXb0mxW1g27SlMHohm3NCKy/YoCJW4aP69s1V4pkCAy3sngJPeFC9q5jLrn1X+mtkn9xVw3OxouP9+umfmMo/tf0b14SCaUqnbu2uLz3Tco7yaO8yPhvPZtPbOqlmzomG8KOoFXS/NrYOpWfr1n+Db6E/4dO1eOAzU4Y8CrgLDxdwbKzFgsnJqteORJHD8IwGK43rbFxO4Oml8SYUGr5KJAKqGgiRJkiRJkiRJkiTd0nkAAAD//4Y0Ysk=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): nterface activated: batadv_slave_0 [ 73.459315][ T5342] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.480290][ T5342] xt_policy: neither incoming nor outgoing policy selected [ 73.555314][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.575291][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.596463][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.610173][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.622259][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.633551][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.643896][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.655605][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.667601][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.699329][ T5235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.717879][ T5235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.727284][ T5235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.736278][ T5235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.755439][ T5231] veth0_vlan: entered promiscuous mode [ 73.768390][ T5231] veth1_vlan: entered promiscuous mode [ 73.857478][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.859022][ T5231] veth0_macvtap: entered promiscuous mode [ 73.879273][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.980388][ T5231] veth1_macvtap: entered promiscuous mode [ 73.999607][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.010318][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.020534][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.031400][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.041517][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.052587][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.063222][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.073795][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.083843][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.094411][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.105848][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.163156][ T4600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.163945][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.171000][ T4600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.193545][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.205353][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.226031][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.239415][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.252008][ T5356] loop3: detected capacity change from 0 to 512 [ 74.253041][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.270872][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.281992][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.292182][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.303817][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.317029][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.317423][ T5356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.343786][ T5356] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.353911][ T4600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.375013][ T4600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.391675][ T5231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.402285][ T5231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.411204][ T5231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.420159][ T5231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.421180][ T5356] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.14: corrupted inode contents [ 74.442889][ T5255] Bluetooth: hci3: command tx timeout [ 74.442916][ T5249] Bluetooth: hci5: command tx timeout [ 74.448657][ T5255] Bluetooth: hci0: command tx timeout [ 74.454303][ T5234] Bluetooth: hci4: command tx timeout [ 74.459680][ T5255] Bluetooth: hci2: command tx timeout [ 74.464609][ T5246] Bluetooth: hci1: command tx timeout [ 74.482395][ T4600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.486381][ T5356] EXT4-fs (loop3): Remounting filesystem read-only [ 74.491247][ T4600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.552574][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.585728][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.599823][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.689377][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.697521][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.711464][ T5361] loop3: detected capacity change from 0 to 256 [ 74.767796][ T5361] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 74.851582][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.861588][ T5361] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 74.878100][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.888604][ T5361] exFAT-fs (loop3): Filesystem has been set read-only [ 74.942430][ T4600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.955975][ T4600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.042813][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.066753][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.164791][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.172671][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.605429][ T5381] loop0: detected capacity change from 0 to 64 [ 76.035070][ T5391] loop2: detected capacity change from 0 to 1024 [ 76.097331][ T5394] libceph: resolve '. [ 76.097331][ T5394] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 76.097331][ T5394] ' (ret=-3): failed [ 76.144179][ T5395] loop0: detected capacity change from 0 to 256 [ 76.172740][ T5391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.347579][ T5375] loop1: detected capacity change from 0 to 32768 [ 76.386481][ T5375] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2 (5375) [ 76.412060][ T5400] loop3: detected capacity change from 0 to 256 [ 76.462898][ T5375] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.482347][ T5375] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 76.491026][ T5375] BTRFS info (device loop1): using free-space-tree [ 76.506133][ T5235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.519721][ T5400] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 76.678132][ T5395] FAT-fs (loop0): Directory bread(block 64) failed [ 76.733482][ T5395] FAT-fs (loop0): Directory bread(block 65) failed [ 76.763423][ T5395] FAT-fs (loop0): Directory bread(block 66) failed [ 77.003177][ T5395] FAT-fs (loop0): Directory bread(block 67) failed [ 77.009955][ T5395] FAT-fs (loop0): Directory bread(block 68) failed [ 77.071803][ T5372] loop5: detected capacity change from 0 to 32768 [ 77.097767][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 77.111739][ T5395] FAT-fs (loop0): Directory bread(block 69) failed [ 77.143306][ T5395] FAT-fs (loop0): Directory bread(block 70) failed [ 77.149988][ T5395] FAT-fs (loop0): Directory bread(block 71) failed [ 77.233647][ T5372] BTRFS: device /dev/loop5 (7:5) using temp-fsid 2c9e54d6-16de-4b36-b6e4-5a5910b13128 [ 77.266120][ T5395] FAT-fs (loop0): Directory bread(block 72) failed [ 77.272859][ T5395] FAT-fs (loop0): Directory bread(block 73) failed [ 77.279647][ T5372] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.18 (5372) [ 77.451393][ T5423] loop4: detected capacity change from 0 to 32768 [ 77.490663][ T5372] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 77.548747][ T5372] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 77.594417][ T5372] BTRFS info (device loop5): using free-space-tree [ 77.654192][ T5230] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.260406][ T29] audit: type=1326 audit(1729606828.364:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2589f7dff9 code=0x7ffc0000 [ 78.359750][ T5466] netlink: 'syz.4.42': attribute type 3 has an invalid length. [ 78.420748][ T29] audit: type=1326 audit(1729606828.364:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2589f7dff9 code=0x7ffc0000 [ 78.443443][ T29] audit: type=1326 audit(1729606828.414:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f2589f7dff9 code=0x7ffc0000 [ 78.465919][ T29] audit: type=1326 audit(1729606828.414:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2589f7dff9 code=0x7ffc0000 [ 78.548380][ T5468] loop1: detected capacity change from 0 to 2048 [ 78.567848][ T5243] BTRFS info (device loop5): last unmount of filesystem 2c9e54d6-16de-4b36-b6e4-5a5910b13128 [ 78.686189][ T5296] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.696899][ T5468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.718344][ T5468] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.751791][ T5468] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.36: bg 0: block 253: invalid block bitmap [ 78.883676][ T5296] usb 4-1: Using ep0 maxpacket: 32 [ 78.969019][ T5230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.084209][ T5296] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 79.094439][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.159370][ T5488] netlink: 'syz.5.44': attribute type 10 has an invalid length. [ 79.245398][ T5296] usb 4-1: config 0 descriptor?? [ 79.270361][ T5296] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 79.316641][ T5495] loop2: detected capacity change from 0 to 128 [ 79.344185][ T5495] ======================================================= [ 79.344185][ T5495] WARNING: The mand mount option has been deprecated and [ 79.344185][ T5495] and is ignored by this kernel. Remove the mand [ 79.344185][ T5495] option from the mount to silence this warning. [ 79.344185][ T5495] ======================================================= [ 79.370094][ T5496] syz.4.54 uses old SIOCAX25GETINFO [ 79.392650][ T5488] geneve0: entered promiscuous mode [ 79.495005][ T5488] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 79.685355][ T5495] EXT4-fs (loop2): Test dummy encryption mode enabled [ 79.693497][ T5296] gspca_nw80x: reg_r err -71 [ 79.698452][ T5296] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 79.708275][ T5495] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.745017][ T5296] usb 4-1: USB disconnect, device number 2 [ 79.769886][ T5495] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.109771][ T5522] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.152965][ T5495] fscrypt (loop2): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 80.481038][ T5235] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.572082][ T5531] loop5: detected capacity change from 0 to 32768 [ 80.675727][ T5535] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 80.696611][ T5541] process 'syz.2.70' launched './file0' with NULL argv: empty string added [ 80.813645][ T5296] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.881187][ T5553] loop0: detected capacity change from 0 to 256 [ 80.934423][ T5553] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.994017][ T5296] usb 2-1: Using ep0 maxpacket: 16 [ 80.999859][ T5531] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,very_degraded,journal_flush_disabled,norecovery,nojournal_transaction_names,allocator_stuck_timeout=32767,version_upgrade=none,no_data_io [ 81.002925][ T5296] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 81.026015][ T5531] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 81.071927][ T5553] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.113416][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.187222][ T5296] usb 2-1: config 0 descriptor?? [ 81.211996][ T5296] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 81.436515][ T25] cfg80211: failed to load regulatory.db [ 81.456003][ T5531] bcachefs (loop5): accounting_read... done [ 81.468824][ T5531] bcachefs (loop5): alloc_read... done [ 81.475375][ T5531] bcachefs (loop5): stripes_read... done [ 81.481098][ T5531] bcachefs (loop5): snapshots_read... done [ 81.511007][ T5531] bcachefs (loop5): going read-write [ 81.540434][ T5531] bcachefs (loop5): done starting filesystem [ 81.608487][ T5296] gspca_sonixj: reg_r err -71 [ 81.641900][ T5296] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 81.684190][ T5531] syz.5.68 (5531) used greatest stack depth: 17056 bytes left [ 81.708127][ T5296] usb 2-1: USB disconnect, device number 2 [ 81.809120][ T5243] bcachefs (loop5): shutting down [ 81.813522][ T5584] loop2: detected capacity change from 0 to 64 [ 81.840242][ T5243] bcachefs (loop5): going read-only [ 82.505393][ T5601] loop0: detected capacity change from 0 to 256 [ 82.528586][ T5603] loop1: detected capacity change from 0 to 512 [ 82.574674][ T5607] openvswitch: netlink: Missing key (keys=8040, expected=200000) [ 82.605469][ T5603] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 82.623558][ T5298] bcachefs (loop5): bch2_delete_dead_snapshots(): error deleting keys from dying snapshots erofs_trans_commit [ 82.674841][ T5298] bcachefs (loop5): bch2_delete_dead_snapshots(): error erofs_trans_commit [ 82.684986][ T5603] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 82.693510][ T5603] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.98: bad orphan inode 13 [ 82.716102][ T5580] loop4: detected capacity change from 0 to 32768 [ 82.724402][ T5603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.740683][ T5580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.88 (5580) [ 82.766736][ T5243] bcachefs (loop5): finished waiting for writes to stop [ 82.801507][ T5580] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.844589][ T5580] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 82.893213][ T5580] BTRFS info (device loop4): using free-space-tree [ 82.907091][ T5230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.236772][ T5637] loop3: detected capacity change from 0 to 1024 [ 83.254430][ T5637] EXT4-fs: Ignoring removed orlov option [ 83.263838][ T5637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.293208][ T5637] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 83.301529][ T5637] System zones: 0-1, 3-36 [ 83.325702][ T5637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.390813][ T5580] BTRFS warning (device loop4): get dev_stats failed, device not found [ 83.592539][ T5231] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.695705][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.469213][ T5665] loop1: detected capacity change from 0 to 32768 [ 84.691367][ T5665] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 84.961134][ T5702] ./file1: Can't lookup blockdev [ 84.991415][ T5230] ocfs2: Unmounting device (7,1) on (node local) [ 85.374123][ T5714] netlink: 40 bytes leftover after parsing attributes in process `syz.3.142'. [ 85.626062][ T5727] loop3: detected capacity change from 0 to 1024 [ 85.681773][ T5727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.899593][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.947950][ T5743] veth2: entered promiscuous mode [ 85.961841][ T5743] veth2: entered allmulticast mode [ 86.222896][ T5753] loop1: detected capacity change from 0 to 1024 [ 86.274188][ T5753] EXT4-fs: Ignoring removed orlov option [ 86.304101][ T5759] loop0: detected capacity change from 0 to 128 [ 86.322357][ T5753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.374476][ T5759] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.441316][ T5759] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.531531][ T5759] EXT4-fs warning (device loop0): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 86.566661][ T5753] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 86.584667][ T5753] System zones: 0-1, 3-36 [ 86.629839][ T5753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.646219][ T5228] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.713269][ T5298] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.811321][ T5230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.877667][ T5298] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 86.893057][ T5298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.923467][ T5298] usb 3-1: Product: syz [ 86.927691][ T5298] usb 3-1: Manufacturer: syz [ 86.932309][ T5298] usb 3-1: SerialNumber: syz [ 87.004179][ T5298] usb 3-1: config 0 descriptor?? [ 87.014580][ T5783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.175'. [ 87.180020][ T5789] loop0: detected capacity change from 0 to 64 [ 87.242054][ T5298] hso 3-1:0.0: Failed to find BULK IN ep [ 87.295557][ T5298] usb-storage 3-1:0.0: USB Mass Storage device detected [ 87.618469][ T5810] netlink: 'syz.0.183': attribute type 21 has an invalid length. [ 87.725629][ T5298] usb 3-1: USB disconnect, device number 2 [ 87.868708][ T5820] loop4: detected capacity change from 0 to 512 [ 87.894465][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 87.912423][ T5820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.962415][ T5820] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.035939][ T5231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.373169][ T5296] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 88.542917][ T5846] netlink: 1076 bytes leftover after parsing attributes in process `syz.4.202'. [ 88.573952][ T5296] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 88.603217][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.625560][ T5296] usb 2-1: config 0 descriptor?? [ 88.644463][ T5296] ums-realtek 2-1:0.0: USB Mass Storage device detected [ 88.843153][ T5860] ERROR: device name not specified. [ 89.008152][ T5296] usb 2-1: USB disconnect, device number 3 [ 89.120143][ T5874] loop0: detected capacity change from 0 to 8 [ 89.153740][ T5874] SQUASHFS error: Failed to read block 0x2d7: -5 [ 89.160155][ T5874] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 89.421853][ T5886] loop4: detected capacity change from 0 to 1024 [ 89.622290][ T5886] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 89.675322][ T5892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.226'. [ 89.823228][ T29] audit: type=1326 audit(1729606839.924:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2589f7dff9 code=0x7ffc0000 [ 89.883799][ T29] audit: type=1326 audit(1729606839.924:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2589f7dff9 code=0x7ffc0000 [ 89.905850][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.912782][ T29] audit: type=1326 audit(1729606839.964:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f2589f7dff9 code=0x7ffc0000 [ 89.935407][ T29] audit: type=1326 audit(1729606839.964:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2589f7dff9 code=0x7ffc0000 [ 89.957392][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.963822][ T29] audit: type=1326 audit(1729606839.964:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2589f7dff9 code=0x7ffc0000 [ 90.076793][ T5906] loop2: detected capacity change from 0 to 256 [ 90.245944][ T5878] loop3: detected capacity change from 0 to 32768 [ 90.269325][ T5878] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 90.292265][ T5906] FAT-fs (loop2): Directory bread(block 64) failed [ 90.302817][ T5878] JBD2: Ignoring recovery information on journal [ 90.303429][ T5906] FAT-fs (loop2): Directory bread(block 65) failed [ 90.320995][ T5906] FAT-fs (loop2): Directory bread(block 66) failed [ 90.364739][ T5906] FAT-fs (loop2): Directory bread(block 67) failed [ 90.372086][ T5906] FAT-fs (loop2): Directory bread(block 68) failed [ 90.403309][ T5878] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 90.420369][ T5906] FAT-fs (loop2): Directory bread(block 69) failed [ 90.442410][ T5906] FAT-fs (loop2): Directory bread(block 70) failed [ 90.455575][ T5906] FAT-fs (loop2): Directory bread(block 71) failed [ 90.462274][ T5906] FAT-fs (loop2): Directory bread(block 72) failed [ 90.488072][ T5906] FAT-fs (loop2): Directory bread(block 73) failed [ 90.559113][ T29] audit: type=1800 audit(1729606840.664:11): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.219" name="file1" dev="loop3" ino=16946 res=0 errno=0 [ 90.599952][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 90.652435][ T29] audit: type=1800 audit(1729606840.764:12): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.233" name="file1" dev="loop2" ino=1048608 res=0 errno=0 [ 90.712825][ T5229] ocfs2: Unmounting device (7,3) on (node local) [ 90.973282][ T5338] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.000295][ T5932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.136343][ T5338] usb 1-1: Using ep0 maxpacket: 8 [ 91.148431][ T5338] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.217078][ T5338] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 91.271175][ T5338] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 91.333157][ T5338] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 91.367326][ T5338] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 91.439647][ T5338] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 91.451046][ T5338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 91.468088][ T5338] usb 1-1: Product: syz [ 91.479066][ T5338] usb 1-1: Manufacturer: syz [ 91.498270][ T5338] usb 1-1: SerialNumber: syz [ 91.517624][ T5338] usb 1-1: config 0 descriptor?? [ 91.569692][ T5951] loop3: detected capacity change from 0 to 1024 [ 91.661880][ T5229] hfsplus: bad catalog entry type [ 91.684571][ T5229] hfsplus: bad catalog entry type [ 91.693279][ T5401] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.739413][ T5338] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 91.754514][ T5338] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 91.777682][ T12] hfsplus: b-tree write err: -5, ino 4 [ 91.877514][ T5401] usb 2-1: Using ep0 maxpacket: 32 [ 91.885140][ T5401] usb 2-1: config 0 has no interfaces? [ 91.893760][ T5401] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 91.917325][ T5401] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 91.937105][ T5401] usb 2-1: Product: syz [ 91.941323][ T5401] usb 2-1: Manufacturer: syz [ 91.944177][ T5338] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 91.974862][ T5401] usb 2-1: SerialNumber: syz [ 91.977076][ T5338] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 92.015095][ T5401] usb 2-1: config 0 descriptor?? [ 92.018237][ T5338] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 92.090805][ T5338] usb 1-1: USB disconnect, device number 2 [ 92.274807][ T5298] usb 2-1: USB disconnect, device number 4 [ 92.357824][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.393857][ T5945] loop2: detected capacity change from 0 to 32768 [ 92.472319][ T5945] JBD2: Ignoring recovery information on journal [ 92.548422][ T5945] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 92.568927][ T5249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.581478][ T5249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.610924][ T5945] (syz.2.249,5945,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: directory entry too close to end - offset=32, inode=16945, rec_len=280, name_len=10 [ 92.641852][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.663772][ T5249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.684473][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.692513][ T5945] (syz.2.249,5945,1):ocfs2_prepare_dir_for_insert:4277 ERROR: status = -2 [ 92.704444][ T5249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.711734][ T5249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.758923][ T5945] (syz.2.249,5945,0):ocfs2_mknod:296 ERROR: status = -2 [ 92.766285][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.791902][ T5945] (syz.2.249,5945,0):ocfs2_mknod:500 ERROR: status = -2 [ 92.868901][ T5971] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 92.887333][ T5945] (syz.2.249,5945,1):ocfs2_create:674 ERROR: status = -2 [ 92.935877][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.999970][ T5255] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.017435][ T5255] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.025714][ T5255] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.045411][ T5255] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.063236][ T5255] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.071188][ T5255] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.139498][ T5235] ocfs2: Unmounting device (7,2) on (node local) [ 93.562573][ T5991] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 93.716223][ T5999] ntfs3(nbd0): try to read out of volume at offset 0x0 [ 94.081152][ T35] bridge_slave_1: left allmulticast mode [ 94.113191][ T35] bridge_slave_1: left promiscuous mode [ 94.120751][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.147509][ T6013] loop2: detected capacity change from 0 to 128 [ 94.205713][ T35] bridge_slave_0: left allmulticast mode [ 94.211720][ T35] bridge_slave_0: left promiscuous mode [ 94.230902][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.754729][ T5255] Bluetooth: hci1: command tx timeout [ 95.153415][ T5255] Bluetooth: hci6: command tx timeout [ 95.240513][ T6040] loop2: detected capacity change from 0 to 40427 [ 95.264678][ T6040] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 95.272461][ T6040] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 95.338727][ T6040] F2FS-fs (loop2): invalid crc value [ 95.396594][ T6040] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.407743][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.429381][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.450153][ T35] bond0 (unregistering): Released all slaves [ 95.465051][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 95.491332][ T6040] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 95.509946][ T6040] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.654006][ T6040] F2FS-fs (loop2): Corrupted max_depth of 3: 769 [ 95.701092][ T6040] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 95.743597][ T6054] loop4: detected capacity change from 0 to 2048 [ 95.891788][ T6054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.991842][ T6054] EXT4-fs error (device loop4): ext4_lookup:1805: inode #2: comm syz.4.300: bad inode number: 12 [ 96.040677][ T6054] EXT4-fs (loop4): Remounting filesystem read-only [ 96.177445][ T5231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.424550][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.431770][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.483305][ T5966] bridge_slave_0: entered allmulticast mode [ 96.490363][ T5966] bridge_slave_0: entered promiscuous mode [ 96.732498][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.760509][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.793514][ T5966] bridge_slave_1: entered allmulticast mode [ 96.822761][ T5966] bridge_slave_1: entered promiscuous mode [ 96.835859][ T5255] Bluetooth: hci1: command tx timeout [ 97.089392][ T6108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.319'. [ 97.115993][ T35] hsr_slave_0: left promiscuous mode [ 97.253128][ T5255] Bluetooth: hci6: command tx timeout [ 97.260464][ T35] hsr_slave_1: left promiscuous mode [ 97.308161][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.365385][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.424425][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.445060][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.517072][ T35] veth1_macvtap: left promiscuous mode [ 97.527643][ T35] veth0_macvtap: left promiscuous mode [ 97.552070][ T35] veth1_vlan: left promiscuous mode [ 97.557921][ T35] veth0_vlan: left promiscuous mode [ 98.386487][ T35] team0 (unregistering): Port device team_slave_1 removed [ 98.427876][ T35] team0 (unregistering): Port device team_slave_0 removed [ 98.832575][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 98.878654][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.917234][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.923088][ T5255] Bluetooth: hci1: command tx timeout [ 99.029649][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 99.093917][ T6157] loop4: detected capacity change from 0 to 256 [ 99.245093][ T5966] team0: Port device team_slave_0 added [ 99.249338][ T6157] FAT-fs (loop4): Directory bread(block 64) failed [ 99.278134][ T6157] FAT-fs (loop4): Directory bread(block 65) failed [ 99.298914][ T6157] FAT-fs (loop4): Directory bread(block 66) failed [ 99.308513][ T5966] team0: Port device team_slave_1 added [ 99.314548][ T5255] Bluetooth: hci6: command tx timeout [ 99.322671][ T6157] FAT-fs (loop4): Directory bread(block 67) failed [ 99.330384][ T6157] FAT-fs (loop4): Directory bread(block 68) failed [ 99.337171][ T6157] FAT-fs (loop4): Directory bread(block 69) failed [ 99.343866][ T6157] FAT-fs (loop4): Directory bread(block 70) failed [ 99.350528][ T6157] FAT-fs (loop4): Directory bread(block 71) failed [ 99.357408][ T6157] FAT-fs (loop4): Directory bread(block 72) failed [ 99.364138][ T6157] FAT-fs (loop4): Directory bread(block 73) failed [ 99.734642][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.741827][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.790214][ T5974] bridge_slave_0: entered allmulticast mode [ 99.798342][ T5974] bridge_slave_0: entered promiscuous mode [ 99.806788][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.926432][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.963139][ T5295] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.969091][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.984377][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.991348][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.017427][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.143109][ T5295] usb 1-1: Using ep0 maxpacket: 16 [ 100.160570][ T5295] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.185381][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.192702][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.200311][ T5295] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 100.200581][ T5974] bridge_slave_1: entered allmulticast mode [ 100.235273][ T5974] bridge_slave_1: entered promiscuous mode [ 100.239799][ T5295] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.255226][ T6196] loop1: detected capacity change from 0 to 64 [ 100.310432][ T5295] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.323101][ T5295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.353236][ T5295] usb 1-1: Product: syz [ 100.357571][ T5295] usb 1-1: Manufacturer: syz [ 100.362195][ T5295] usb 1-1: SerialNumber: syz [ 100.365439][ T6196] hfs: keylen 94 too large [ 100.383229][ T6196] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 100.609714][ T6179] loop2: detected capacity change from 0 to 32768 [ 100.626868][ T6179] (syz.2.347,6179,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.643399][ T6179] (syz.2.347,6179,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.686974][ T5966] hsr_slave_0: entered promiscuous mode [ 100.809712][ T5295] hub 1-1:1.2: bad descriptor, ignoring hub [ 100.816013][ T5295] hub 1-1:1.2: probe with driver hub failed with error -5 [ 100.816852][ T6179] JBD2: Ignoring recovery information on journal [ 100.829128][ T5966] hsr_slave_1: entered promiscuous mode [ 100.845505][ T5295] usb 1-1: USB disconnect, device number 3 [ 100.869605][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.882161][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.010330][ T5255] Bluetooth: hci1: command tx timeout [ 101.017531][ T5398] udevd[5398]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.036746][ T6179] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 101.322943][ T5974] team0: Port device team_slave_0 added [ 101.351122][ T5974] team0: Port device team_slave_1 added [ 101.366252][ T5235] ocfs2: Unmounting device (7,2) on (node local) [ 101.393239][ T5255] Bluetooth: hci6: command tx timeout [ 101.595087][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.608341][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.634320][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.683113][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.949374][ T6239] loop4: detected capacity change from 0 to 1024 [ 102.038208][ T29] audit: type=1326 audit(1729606852.154:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d357dff9 code=0x7ffc0000 [ 102.133755][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.140826][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.146658][ T6239] hfsplus: request for non-existent node 128 in B*Tree [ 102.166926][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.167170][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.184984][ T6247] bridge1: entered promiscuous mode [ 102.205265][ T29] audit: type=1326 audit(1729606852.154:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d357dff9 code=0x7ffc0000 [ 102.273131][ T29] audit: type=1326 audit(1729606852.194:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f33d357dff9 code=0x7ffc0000 [ 102.314149][ T6253] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 102.340915][ T6239] hfsplus: request for non-existent node 128 in B*Tree [ 102.546576][ T5974] hsr_slave_0: entered promiscuous mode [ 102.581079][ T5974] hsr_slave_1: entered promiscuous mode [ 102.693165][ T5974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.724759][ T5974] Cannot create hsr debugfs directory [ 102.979103][ T6277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.382'. [ 103.027754][ T6277] netlink: 43 bytes leftover after parsing attributes in process `syz.2.382'. [ 103.050007][ T6267] C: renamed from team_slave_0 (while UP) [ 103.057984][ T6277] netlink: 'syz.2.382': attribute type 5 has an invalid length. [ 103.059256][ T6267] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 103.072420][ T6277] netlink: 43 bytes leftover after parsing attributes in process `syz.2.382'. [ 103.081193][ T6267] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 103.364323][ T5966] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.469384][ T6291] loop0: detected capacity change from 0 to 164 [ 103.532870][ T6291] Unable to read rock-ridge attributes [ 103.564198][ T6291] Unable to read rock-ridge attributes [ 103.649407][ T5966] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.703580][ T6293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.387'. [ 103.800791][ T6299] loop4: detected capacity change from 0 to 1024 [ 103.896341][ T5966] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.927278][ T6306] loop1: detected capacity change from 0 to 256 [ 104.021067][ T6299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.055739][ T5966] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.167259][ T5231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.621749][ T6334] xt_HMARK: proto mask must be zero with L3 mode [ 104.860711][ T6343] loop2: detected capacity change from 0 to 64 [ 104.930297][ T6344] netlink: 'syz.1.405': attribute type 21 has an invalid length. [ 104.968659][ T6344] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 105.301075][ T6358] netlink: 132 bytes leftover after parsing attributes in process `syz.1.411'. [ 105.564965][ T6372] loop0: detected capacity change from 0 to 512 [ 105.731837][ T6372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.803641][ T6372] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.823291][ T5295] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.988816][ T5295] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 106.000598][ T5974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.013164][ T5295] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.043238][ T5295] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 106.067608][ T5974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.103971][ T5295] usb 2-1: config 0 has no interface number 0 [ 106.108005][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'. [ 106.114715][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.143194][ T5295] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 106.175743][ T5295] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 106.189575][ T5974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.194484][ T5295] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.230885][ T5295] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 106.240153][ T5295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 106.251934][ T5974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.258491][ T5295] usb 2-1: SerialNumber: syz [ 106.286654][ T5295] usb 2-1: config 0 descriptor?? [ 106.363223][ T5295] gspca_main: spca561-2.14.0 probing abcd:cdee [ 106.497841][ T5966] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.519512][ T5295] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 106.537427][ T5295] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.548100][ T5966] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.565294][ T5295] usb 2-1: MIDIStreaming interface descriptor not found [ 106.599876][ T5966] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.657439][ T5966] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.732267][ T5295] usb 2-1: USB disconnect, device number 5 [ 106.870418][ T5434] udevd[5434]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.015540][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.198916][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.281523][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.288709][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.390784][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.444493][ T6427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.436'. [ 107.475404][ T6427] netlink: 60 bytes leftover after parsing attributes in process `syz.1.436'. [ 107.508026][ T6427] IPv6: sit1: Disabled Multicast RS [ 107.631863][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.635211][ T6437] xt_TCPMSS: Only works on TCP SYN packets [ 107.639045][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.779713][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.922828][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.930038][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.948575][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.955777][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.999730][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 108.109701][ T6448] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 108.411679][ T6467] team_slave_1: entered promiscuous mode [ 108.684807][ T6467] team0: Port device team_slave_1 removed [ 108.950942][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.114951][ T6496] loop2: detected capacity change from 0 to 8 [ 109.171237][ T6496] Page size > filesystem block size (0). This is currently not supported! [ 109.188519][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.395679][ T5974] veth0_vlan: entered promiscuous mode [ 109.446639][ T5974] veth1_vlan: entered promiscuous mode [ 109.476717][ T5401] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.535706][ T5974] veth0_macvtap: entered promiscuous mode [ 109.560222][ T5974] veth1_macvtap: entered promiscuous mode [ 109.622897][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.683114][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.703217][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.717345][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.742761][ T5401] usb 3-1: config index 0 descriptor too short (expected 65484, got 59) [ 109.763698][ T5401] usb 3-1: config 1 has an invalid descriptor of length 20, skipping remainder of the config [ 109.775372][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.808017][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.824252][ T5401] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.863187][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.900632][ T5401] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.926427][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.943852][ T5401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.954086][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.983112][ T5401] usb 3-1: SerialNumber: syz [ 110.007519][ T5401] cdc_ether 3-1:1.0: skipping garbage [ 110.018027][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.030293][ T5401] usb 3-1: bad CDC descriptors [ 110.050312][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.079916][ T6504] loop1: detected capacity change from 0 to 32768 [ 110.176448][ T6504] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 110.207244][ T5401] usb 3-1: USB disconnect, device number 3 [ 110.212395][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.234564][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.244807][ T6504] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 110.282823][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.313122][ T6504] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 110.343392][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.414503][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.428583][ T6504] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 110.463259][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.482316][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.498672][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.503773][ T6533] loop4: detected capacity change from 0 to 8 [ 110.509309][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.526319][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.539167][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.580770][ T5974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.603224][ T5974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.634468][ T6533] SQUASHFS error: Unable to read inode 0xa7 [ 110.641600][ T5974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.670915][ T5974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.769373][ T5966] veth0_vlan: entered promiscuous mode [ 110.797631][ T6537] loop0: detected capacity change from 0 to 128 [ 110.874338][ T6537] befs: (loop0): No write support. Marking filesystem read-only [ 110.987017][ T6537] befs: (loop0): invalid magic header [ 110.996122][ T5966] veth1_vlan: entered promiscuous mode [ 111.143916][ T5314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.153299][ T5314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.268038][ T5966] veth0_macvtap: entered promiscuous mode [ 111.295279][ T5966] veth1_macvtap: entered promiscuous mode [ 111.303197][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.314163][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.476060][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.554574][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.602068][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.636376][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.683215][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.715065][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.758898][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.791242][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.839905][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.880342][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.925402][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.969589][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.021815][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.080804][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.127800][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.163240][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.214049][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.270515][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.298589][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.329133][ T6569] loop0: detected capacity change from 0 to 32768 [ 112.347977][ T6569] (syz.0.480,6569,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.367825][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.378605][ T6569] (syz.0.480,6569,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.400383][ T6569] JBD2: Ignoring recovery information on journal [ 112.408268][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.408289][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.408311][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.408347][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.408367][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.466006][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.559704][ T6569] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.608331][ T5966] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.608406][ T5966] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.608446][ T5966] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.608485][ T5966] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.084269][ T5228] ocfs2: Unmounting device (7,0) on (node local) [ 113.119773][ T5314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.177481][ T5314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.375495][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.435978][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.840411][ T6640] netlink: 'syz.5.258': attribute type 1 has an invalid length. [ 114.417553][ T6667] loop0: detected capacity change from 0 to 512 [ 114.464816][ T6667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.562155][ T29] audit: type=1326 audit(1729606864.674:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d357dff9 code=0x7ffc0000 [ 114.600442][ T6667] EXT4-fs (loop0): orphan cleanup on readonly fs [ 114.733726][ T6667] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.515: bg 0: block 248: padding at end of block bitmap is not set [ 114.758417][ T29] audit: type=1326 audit(1729606864.674:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d357dff9 code=0x7ffc0000 [ 114.813477][ T6662] loop2: detected capacity change from 0 to 8192 [ 114.841335][ T29] audit: type=1326 audit(1729606864.744:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f33d357dff9 code=0x7ffc0000 [ 114.876775][ T6667] Quota error (device loop0): write_blk: dquota write failed [ 114.923512][ T6662] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.936004][ T6667] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 114.984764][ T6667] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.515: Failed to acquire dquot type 1 [ 114.997635][ T29] audit: type=1326 audit(1729606864.744:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d357dff9 code=0x7ffc0000 [ 115.062293][ T6662] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 115.113784][ T6667] EXT4-fs (loop0): 1 truncate cleaned up [ 115.122924][ T6662] FAT-fs (loop2): Filesystem has been set read-only [ 115.130348][ T29] audit: type=1326 audit(1729606864.744:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d357dff9 code=0x7ffc0000 [ 115.164090][ T6667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.285221][ T5401] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 115.299256][ T6667] EXT4-fs error (device loop0): __ext4_remount:6522: comm syz.0.515: Abort forced by user [ 115.396399][ T6667] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 115.468496][ T6648] loop4: detected capacity change from 0 to 32768 [ 115.493284][ T5401] usb 6-1: Using ep0 maxpacket: 8 [ 115.497258][ T6667] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 115.511230][ T5401] usb 6-1: unable to get BOS descriptor or descriptor too short [ 115.526516][ T6667] ext4 filesystem being remounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.545634][ T5401] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 115.566457][ T6703] netlink: 'syz.3.527': attribute type 7 has an invalid length. [ 115.579997][ T5401] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.601429][ T6648] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 115.637273][ T5401] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 115.687710][ T5401] usb 6-1: config 1 has no interface number 1 [ 115.702019][ T6648] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 263 [ 115.717161][ T5401] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 115.773467][ T6648] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 115.774154][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.813473][ T6648] OCFS2: Returning error to the calling process. [ 115.838612][ T6648] (syz.4.506,6648,1):ocfs2_find_leaf:1940 ERROR: status = -30 [ 115.846494][ T5401] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x81 has invalid maxpacket 174, setting to 64 [ 115.863283][ T6648] (syz.4.506,6648,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 115.883502][ T6648] (syz.4.506,6648,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 115.892539][ T6648] (syz.4.506,6648,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 115.904834][ T6648] (syz.4.506,6648,1):ocfs2_read_virt_blocks:987 ERROR: status = -30 [ 115.913343][ T6648] (syz.4.506,6648,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 115.921486][ T6648] (syz.4.506,6648,1):ocfs2_find_dir_space_el:3486 ERROR: status = -5 [ 115.929926][ T6648] (syz.4.506,6648,1):ocfs2_prepare_dir_for_insert:4277 ERROR: status = -5 [ 115.938869][ T6648] (syz.4.506,6648,1):ocfs2_symlink:1875 ERROR: status = -5 [ 115.946453][ T6648] (syz.4.506,6648,1):ocfs2_symlink:2076 ERROR: status = -5 [ 116.020044][ T5231] ocfs2: Unmounting device (7,4) on (node local) [ 116.116145][ T29] audit: type=1800 audit(1729606866.234:21): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.529" name="/" dev="sockfs" ino=13556 res=0 errno=0 [ 116.329395][ T5401] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.338573][ T5401] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.346743][ T5401] usb 6-1: Product: syz [ 116.350925][ T5401] usb 6-1: Manufacturer: syz [ 116.355589][ T5401] usb 6-1: SerialNumber: syz [ 116.458579][ T6730] netlink: 32 bytes leftover after parsing attributes in process `syz.2.534'. [ 116.683158][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.706531][ T5299] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.775343][ T5401] usb 6-1: USB disconnect, device number 2 [ 117.094601][ T6745] loop1: detected capacity change from 0 to 32768 [ 117.113519][ T6745] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section replicas_v0: invalid device 108 in entry user: 1/9 [0 0 0 0 0 0 0 0 108] [ 117.113519][ T6745] replicas_v0 (size 24): [ 117.113519][ T6745] btree: 1 [0] journal: 1 [0] user: 9 [0 0 0 0 0 0 0 0 108] [ 117.113519][ T6745] [ 117.143882][ T6745] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry [ 117.302890][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 117.368251][ T5299] usb 5-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 117.377800][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.386213][ T25] usb 4-1: New USB device found, idVendor=0572, idProduct=cb07, bcdDevice=f6.00 [ 117.396080][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.408265][ T5299] usb 5-1: config 0 descriptor?? [ 117.416350][ T25] usb 4-1: Product: syz [ 117.420542][ T25] usb 4-1: Manufacturer: syz [ 117.437024][ T25] usb 4-1: SerialNumber: syz [ 117.446586][ T5299] gspca_main: spca505-2.14.0 probing 0733:0430 [ 117.456396][ T25] usb 4-1: config 0 descriptor?? [ 117.494637][ T25] usb-storage 4-1:0.0: USB Mass Storage device detected [ 117.563905][ T6761] binder: 6758:6761 ioctl c00c6211 0 returned -14 [ 117.625089][ T6755] loop1: detected capacity change from 0 to 4096 [ 117.670480][ T25] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 117.756655][ T25] usb 4-1: USB disconnect, device number 3 [ 117.845641][ T5299] gspca_spca505: reg write: error -71 [ 117.851132][ T5299] spca505 5-1:0.0: probe with driver spca505 failed with error -5 [ 117.893572][ T5299] usb 5-1: USB disconnect, device number 2 [ 118.023214][ T6769] netlink: 36 bytes leftover after parsing attributes in process `syz.0.557'. [ 118.158946][ T6756] loop2: detected capacity change from 0 to 32768 [ 118.461095][ T6785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.561'. [ 118.502361][ T6756] ERROR: (device loop2): dbAlloc: unable to allocate blocks [ 118.502361][ T6756] [ 118.815834][ T6797] loop4: detected capacity change from 0 to 4096 [ 118.826580][ T6797] EXT4-fs: Ignoring removed nobh option [ 119.028602][ T6810] netlink: 'syz.1.569': attribute type 2 has an invalid length. [ 119.114400][ T6815] netlink: 'syz.5.577': attribute type 4 has an invalid length. [ 119.147965][ T6810] : entered promiscuous mode [ 119.164130][ T6797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.244581][ T6797] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 119.289312][ T6797] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 119.314583][ T5236] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.348232][ T6797] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.570: Failed to acquire dquot type 1 [ 119.508361][ T5236] usb 4-1: config 0 has an invalid interface number: 224 but max is 0 [ 119.517439][ T5236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.527887][ T5236] usb 4-1: config 0 has no interface number 0 [ 119.534088][ T5236] usb 4-1: config 0 interface 224 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 119.546011][ T5236] usb 4-1: config 0 interface 224 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 119.558615][ T5236] usb 4-1: config 0 interface 224 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.569743][ T5236] usb 4-1: config 0 interface 224 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.603258][ T5231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.654740][ T6830] netlink: 'syz.5.584': attribute type 1 has an invalid length. [ 119.663234][ T5236] usb 4-1: config 0 interface 224 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.673220][ T5236] usb 4-1: config 0 interface 224 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 119.695711][ T5236] usb 4-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=69.e2 [ 119.723615][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.731691][ T5236] usb 4-1: Product: syz [ 119.735989][ T5236] usb 4-1: Manufacturer: syz [ 119.740607][ T5236] usb 4-1: SerialNumber: syz [ 119.748969][ T5236] usb 4-1: config 0 descriptor?? [ 119.989174][ T5236] keyspan 4-1:0.224: Keyspan 4 port adapter converter detected [ 120.042766][ T5236] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 87 [ 120.086638][ T5236] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 7 [ 120.141530][ T5236] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 81 [ 120.204550][ T5236] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 120.232586][ T5236] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 82 [ 120.240710][ T5236] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 2 [ 120.261960][ T5236] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 120.271445][ T5236] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 83 [ 120.281234][ T5236] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 3 [ 120.307605][ T5236] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 120.324219][ T5236] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 84 [ 120.332188][ T5236] keyspan 4-1:0.224: found no endpoint descriptor for endpoint 4 [ 120.349692][ T5236] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 120.367471][ T5236] usb 4-1: USB disconnect, device number 4 [ 120.430581][ T5299] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 120.445381][ T5236] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 120.479902][ T5236] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 120.573913][ T5236] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 120.622296][ T5236] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 120.678269][ T5236] keyspan 4-1:0.224: device disconnected [ 120.877591][ T6869] loop4: detected capacity change from 0 to 32768 [ 120.976835][ T5299] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 120.986169][ T5299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.013154][ T5299] usb 6-1: Product: syz [ 121.019149][ T5299] usb 6-1: Manufacturer: syz [ 121.043840][ T5299] usb 6-1: SerialNumber: syz [ 121.075226][ T5299] usb 6-1: config 0 descriptor?? [ 121.261526][ T6881] 9pnet: Found fid 0 not clunked [ 121.293365][ T5299] hso 6-1:0.0: Failed to find BULK IN ep [ 121.293814][ T6884] loop1: detected capacity change from 0 to 256 [ 121.326307][ T5299] usb-storage 6-1:0.0: USB Mass Storage device detected [ 121.445279][ T6884] FAT-fs (loop1): Directory bread(block 64) failed [ 121.488528][ T6884] FAT-fs (loop1): Directory bread(block 65) failed [ 121.522498][ T5299] usb 6-1: USB disconnect, device number 3 [ 121.542249][ T6884] FAT-fs (loop1): Directory bread(block 66) failed [ 121.587903][ T6884] FAT-fs (loop1): Directory bread(block 67) failed [ 121.613251][ T6884] FAT-fs (loop1): Directory bread(block 68) failed [ 121.619818][ T6884] FAT-fs (loop1): Directory bread(block 69) failed [ 121.662757][ T6884] FAT-fs (loop1): Directory bread(block 70) failed [ 121.700021][ T6884] FAT-fs (loop1): Directory bread(block 71) failed [ 121.722221][ T6884] FAT-fs (loop1): Directory bread(block 72) failed [ 121.746054][ T6884] FAT-fs (loop1): Directory bread(block 73) failed [ 122.402074][ T6925] sctp: [Deprecated]: syz.1.622 (pid 6925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.402074][ T6925] Use struct sctp_sack_info instead [ 122.823094][ T5401] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 122.870073][ T6947] loop0: detected capacity change from 0 to 1024 [ 122.903854][ T6947] EXT4-fs: Ignoring removed i_version option [ 122.981492][ T5401] usb 6-1: Using ep0 maxpacket: 16 [ 123.006908][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'. [ 123.017220][ T6947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.041684][ T5401] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 123.084873][ T5401] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 123.121281][ T5401] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 123.284502][ T6947] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.635: corrupted in-inode xattr: bad e_name length [ 123.331285][ T6947] EXT4-fs (loop0): Remounting filesystem read-only [ 123.463686][ T5401] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 123.473870][ T5401] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.481899][ T5401] usb 6-1: Product: syz [ 123.493062][ T5401] usb 6-1: Manufacturer: syz [ 123.497720][ T5401] usb 6-1: SerialNumber: syz [ 123.516186][ T5401] usb 6-1: config 0 descriptor?? [ 123.522678][ T6932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 123.585100][ T5401] mceusb 6-1:0.0: mceusb_dev_probe: device setup failed! [ 123.592592][ T5401] mceusb 6-1:0.0: probe with driver mceusb failed with error -12 [ 123.668036][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.805683][ T5338] usb 6-1: USB disconnect, device number 4 [ 124.054976][ T6992] netlink: 288 bytes leftover after parsing attributes in process `syz.2.654'. [ 124.071438][ T29] audit: type=1326 audit(1729606874.184:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.1.653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33d357dff9 code=0x0 [ 124.322974][ T7002] loop3: detected capacity change from 0 to 1024 [ 124.340849][ T7001] netlink: 'syz.0.658': attribute type 27 has an invalid length. [ 124.421325][ T7001] hsr0: entered promiscuous mode [ 124.492850][ T7002] hfsplus: xattr search failed [ 124.505174][ T6971] loop4: detected capacity change from 0 to 32768 [ 124.583458][ T6971] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.642 (6971) [ 124.654661][ T6971] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.713267][ T6971] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 124.721809][ T6971] BTRFS info (device loop4): using free-space-tree [ 125.133132][ T5299] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.296582][ T7047] netlink: 'syz.0.673': attribute type 8 has an invalid length. [ 125.313937][ T5231] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.385159][ T5299] usb 3-1: Using ep0 maxpacket: 32 [ 125.450833][ T5299] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 125.503153][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.573476][ T5299] usb 3-1: config 0 descriptor?? [ 125.614043][ T5299] gspca_main: sunplus-2.14.0 probing 041e:400b [ 126.062180][ T5299] gspca_sunplus: reg_w_riv err -71 [ 126.068238][ T5299] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 126.083182][ T7032] loop3: detected capacity change from 0 to 32768 [ 126.093164][ T7032] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.671 (7032) [ 126.136986][ T5299] usb 3-1: USB disconnect, device number 4 [ 126.381537][ T7063] netlink: 'syz.5.680': attribute type 1 has an invalid length. [ 126.389470][ T7063] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.680'. [ 126.424597][ T7032] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.522239][ T7032] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 126.541283][ T7032] BTRFS info (device loop3): using free-space-tree [ 126.771541][ T7049] loop1: detected capacity change from 0 to 32768 [ 127.002561][ T7049] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.193662][ T5974] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.493359][ T7049] XFS (loop1): Ending clean mount [ 127.509898][ T7099] loop2: detected capacity change from 0 to 32768 [ 127.803498][ T7099] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 127.822067][ T7049] XFS (loop1): Quotacheck needed: Please wait. [ 128.011224][ T7138] warning: `syz.5.700' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.073170][ T7139] netlink: 48 bytes leftover after parsing attributes in process `syz.4.701'. [ 128.078646][ T7049] XFS (loop1): Quotacheck: Done. [ 128.180829][ T7099] XFS (loop2): Ending clean mount [ 128.274713][ T7099] XFS (loop2): Quotacheck needed: Please wait. [ 128.518428][ T7155] netlink: 'syz.3.707': attribute type 3 has an invalid length. [ 128.537058][ T5230] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.654658][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 128.887656][ T7169] loop4: detected capacity change from 0 to 512 [ 128.913245][ T7099] XFS (loop2): Quotacheck: Done. [ 129.096454][ T7169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.122083][ T7169] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.296603][ T5235] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 129.322579][ T5231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.813568][ T7200] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.838672][ T7200] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.881079][ T7200] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.913931][ T7200] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.959790][ T7200] geneve2: entered promiscuous mode [ 129.999367][ T7200] geneve2: entered allmulticast mode [ 130.765874][ T7205] loop4: detected capacity change from 0 to 32768 [ 130.825125][ T7205] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.732 (7205) [ 130.858185][ T7228] loop1: detected capacity change from 0 to 256 [ 130.915099][ T7205] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.954708][ T7205] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 131.023835][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.742'. [ 131.043508][ T7205] BTRFS info (device loop4): using free-space-tree [ 131.215001][ T7238] xt_nat: multiple ranges no longer supported [ 131.502896][ T7223] loop0: detected capacity change from 0 to 32768 [ 131.566200][ T7223] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.738 (7223) [ 131.596136][ T7223] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 131.607268][ T7223] BTRFS info (device loop0 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 131.617883][ T7223] BTRFS info (device loop0 state S): using free-space-tree [ 131.625525][ T7223] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 131.654356][ T7263] syz.3.749 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 131.661197][ T7262] loop2: detected capacity change from 0 to 1024 [ 131.696905][ T7223] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 131.824885][ T7262] EXT4-fs (loop2): stripe (2047) is not aligned with cluster size (16), stripe is disabled [ 131.882600][ T7223] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 131.912202][ T7223] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 131.928587][ T7223] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 131.934636][ T7262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.988488][ T7262] EXT4-fs error (device loop2): ext4_empty_dir:3117: inode #11: block 623: comm syz.2.748: Attempting to read directory block (623) that is past i_size (638464) [ 131.998411][ T5231] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.006394][ T7262] EXT4-fs (loop2): Remounting filesystem read-only [ 132.029985][ T7223] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 132.102780][ T7223] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 132.242819][ T5235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.439562][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.448208][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.451849][ T5314] BTRFS warning (device loop0 state CS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1, ignored [ 132.479926][ T5314] BTRFS error (device loop0 state CS): level verify failed on logical 5328896 mirror 1 wanted 0 found 1 [ 132.563151][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.663304][ T5236] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.689570][ T5228] BTRFS info (device loop0 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 132.743204][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 132.756306][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 132.795203][ T9] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 132.813403][ T5236] usb 4-1: Using ep0 maxpacket: 16 [ 132.830431][ T9] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 132.853212][ T9] usb 2-1: Product: syz [ 132.859367][ T9] usb 2-1: Manufacturer: syz [ 132.864138][ T9] usb 2-1: SerialNumber: syz [ 132.874784][ T5236] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.945263][ T5236] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 132.969811][ T5236] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 132.989961][ T5236] usb 4-1: Product: syz [ 133.018582][ T5236] usb 4-1: Manufacturer: syz [ 133.038947][ T5236] usb 4-1: SerialNumber: syz [ 133.095996][ T5236] usb 4-1: config 0 descriptor?? [ 133.110854][ T9] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 133.119366][ T9] usb 2-1: Handspring Visor / Palm OS: port 84, is for unknown use [ 133.143624][ T9] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 133.151494][ T9] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 133.320828][ T9] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 133.352935][ T9] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 133.374540][ T5236] usb 4-1: selecting invalid altsetting 1 [ 133.407127][ T9] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 133.452170][ T9] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 133.484654][ T5236] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 133.510389][ T9] usb 2-1: USB disconnect, device number 6 [ 133.542292][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 133.561308][ T5236] usb 4-1: USB disconnect, device number 5 [ 133.600082][ T7317] ip6t_REJECT: ECHOREPLY is not supported [ 133.644550][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 133.691133][ T5398] udevd[5398]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.722459][ T9] visor 2-1:1.0: device disconnected [ 133.934789][ T7326] loop0: detected capacity change from 0 to 764 [ 134.009198][ T7326] Symlink component flag not implemented [ 134.043219][ T7326] Symlink component flag not implemented [ 134.060443][ T7326] Symlink component flag not implemented (112) [ 134.087173][ T7326] Symlink component flag not implemented (22) [ 134.862818][ T7361] loop2: detected capacity change from 0 to 1024 [ 134.880180][ T7361] EXT4-fs: Ignoring removed orlov option [ 134.889615][ T7361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.998304][ T7366] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 135.143224][ T7361] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 135.170365][ T7361] System zones: 0-1, 3-36 [ 135.227514][ T7361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.515306][ T5235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.607663][ T7395] geneve2: entered promiscuous mode [ 136.023148][ T5401] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.093127][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.263068][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 136.275548][ T5296] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.297805][ T5401] usb 1-1: config 1 has an invalid interface number: 166 but max is 0 [ 136.297860][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.308248][ T5401] usb 1-1: config 1 has no interface number 0 [ 136.321397][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 136.352158][ T5401] usb 1-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=b6.97 [ 136.392813][ T5401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.403255][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 136.433535][ T5296] usb 2-1: Using ep0 maxpacket: 32 [ 136.442260][ T5296] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 136.474513][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 136.498003][ T5296] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 136.518989][ T5296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.540940][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.560628][ T5296] usb 2-1: Product: syz [ 136.574211][ T5296] usb 2-1: Manufacturer: syz [ 136.578874][ T5296] usb 2-1: SerialNumber: syz [ 136.616914][ T9] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 136.626747][ T5401] cdc_subset 1-1:1.166: probe with driver cdc_subset failed with error -22 [ 136.630285][ T7436] loop4: detected capacity change from 0 to 256 [ 136.643922][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.651970][ T9] usb 4-1: Product: syz [ 136.657365][ T5296] usb 2-1: config 0 descriptor?? [ 136.663321][ T7416] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 136.680597][ T5296] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.691522][ T9] usb 4-1: Manufacturer: syz [ 136.702165][ T9] usb 4-1: SerialNumber: syz [ 136.732561][ T9] usb 4-1: config 0 descriptor?? [ 136.760557][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 136.800075][ T7436] FAT-fs (loop4): Directory bread(block 64) failed [ 136.811226][ T7436] FAT-fs (loop4): Directory bread(block 65) failed [ 136.847516][ T7436] FAT-fs (loop4): Directory bread(block 66) failed [ 136.895955][ T7436] FAT-fs (loop4): Directory bread(block 67) failed [ 136.896966][ T5401] usb 1-1: USB disconnect, device number 4 [ 136.902630][ T7436] FAT-fs (loop4): Directory bread(block 68) failed [ 136.983856][ T7436] FAT-fs (loop4): Directory bread(block 69) failed [ 137.006623][ T7436] FAT-fs (loop4): Directory bread(block 70) failed [ 137.033502][ T7436] FAT-fs (loop4): Directory bread(block 71) failed [ 137.041368][ T9] usb 2-1: USB disconnect, device number 7 [ 137.051165][ T7436] FAT-fs (loop4): Directory bread(block 72) failed [ 137.070052][ T7436] FAT-fs (loop4): Directory bread(block 73) failed [ 137.132315][ T5299] usb 4-1: USB disconnect, device number 6 [ 137.202831][ T7446] netlink: 'syz.2.812': attribute type 1 has an invalid length. [ 137.224292][ T7446] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.812'. [ 137.956326][ T7471] x_tables: duplicate entry at hook 2 [ 137.978203][ T7473] loop0: detected capacity change from 0 to 256 [ 138.073188][ T5401] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 138.623100][ T5401] usb 3-1: Using ep0 maxpacket: 16 [ 138.632345][ T5401] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 138.657177][ T5401] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 138.669585][ T5401] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 138.679534][ T5401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.687635][ T5401] usb 3-1: Product: syz [ 138.691823][ T5401] usb 3-1: Manufacturer: syz [ 138.696491][ T5401] usb 3-1: SerialNumber: syz [ 138.703862][ T5401] usb 3-1: config 0 descriptor?? [ 138.712108][ T5401] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 138.929966][ T7503] loop0: detected capacity change from 0 to 1024 [ 138.959523][ T7503] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.979589][ T7503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.982651][ T7502] syz.1.834: attempt to access beyond end of device [ 138.982651][ T7502] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 139.054792][ T7502] syz.1.834: attempt to access beyond end of device [ 139.054792][ T7502] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 139.190941][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.657430][ T7531] loop0: detected capacity change from 0 to 64 [ 139.767853][ T7534] loop4: detected capacity change from 0 to 1024 [ 140.092351][ T7545] binder: 7544:7545 ioctl c018620c 20000080 returned -22 [ 140.615887][ T7565] netlink: 'syz.1.865': attribute type 1 has an invalid length. [ 140.625890][ T7566] nvme_fabrics: unknown parameter or missing value 'h' in ctrl creation request [ 140.894334][ T9] usb 3-1: USB disconnect, device number 5 [ 141.151418][ T7585] netlink: 'syz.0.873': attribute type 9 has an invalid length. [ 141.163299][ T7585] netlink: 'syz.0.873': attribute type 7 has an invalid length. [ 141.174334][ T7585] netlink: 'syz.0.873': attribute type 8 has an invalid length. [ 141.380491][ T7592] ceph: No source [ 141.861474][ T7614] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 141.899314][ T7615] netlink: 'syz.4.888': attribute type 26 has an invalid length. [ 142.303890][ T7635] loop1: detected capacity change from 0 to 512 [ 142.310859][ T7635] EXT4-fs: Ignoring removed oldalloc option [ 142.333283][ T7635] EXT4-fs: Ignoring removed nobh option [ 142.367253][ T7637] overlayfs: missing 'lowerdir' [ 142.445985][ T7642] tmpfs: Bad value for 'nr_blocks' [ 142.694818][ T7650] syz.0.906: attempt to access beyond end of device [ 142.694818][ T7650] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 142.724189][ T7650] gfs2: error -5 reading superblock [ 142.825147][ T7635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.846106][ T5249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 142.857066][ T5249] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 142.866310][ T5249] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 142.874554][ T5249] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 142.882259][ T5249] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 142.891095][ T7635] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.892110][ T5249] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 143.037160][ T5230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.303376][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 143.534999][ T7654] chnl_net:caif_netlink_parms(): no params data found [ 143.593300][ T5236] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.791944][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.920'. [ 143.833177][ T5236] usb 5-1: Using ep0 maxpacket: 8 [ 144.025784][ T5236] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 144.073120][ T5236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.097748][ T5236] usb 5-1: config 0 has no interface number 0 [ 144.113742][ T5236] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 144.135049][ T5236] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 144.153240][ T5236] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.181421][ T5236] usb 5-1: config 0 interface 52 has no altsetting 0 [ 144.194187][ T5236] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 144.213267][ T5236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.308641][ T5236] usb 5-1: config 0 descriptor?? [ 144.317597][ T7654] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.328387][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.343382][ T7654] bridge_slave_0: entered allmulticast mode [ 144.381922][ T7654] bridge_slave_0: entered promiscuous mode [ 144.440305][ T7654] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.476637][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.513689][ T7654] bridge_slave_1: entered allmulticast mode [ 144.520922][ T7654] bridge_slave_1: entered promiscuous mode [ 144.547099][ T5236] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input8 [ 144.595032][ T4664] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 144.642764][ T7724] loop1: detected capacity change from 0 to 256 [ 144.703797][ T7724] exfat: Deprecated parameter 'namecase' [ 144.737660][ T7724] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 144.747661][ T5236] usb 5-1: USB disconnect, device number 3 [ 144.765619][ T4664] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 144.832274][ T7654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.881784][ T7654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.993153][ T5234] Bluetooth: hci7: command tx timeout [ 145.066327][ T7654] team0: Port device team_slave_0 added [ 145.106788][ T7654] team0: Port device team_slave_1 added [ 145.128220][ T7740] kernel profiling enabled (shift: 17) [ 145.357635][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.390526][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.497821][ T7654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.575198][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.582212][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.695683][ T7758] xt_bpf: check failed: parse error [ 145.747154][ T7654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.163168][ T5401] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.204097][ T7760] loop2: detected capacity change from 0 to 32768 [ 146.247192][ T7654] hsr_slave_0: entered promiscuous mode [ 146.269991][ T7654] hsr_slave_1: entered promiscuous mode [ 146.295604][ T7654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.311217][ T7654] Cannot create hsr debugfs directory [ 146.390802][ T5401] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 146.438884][ T5401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.480905][ T5401] usb 2-1: config 0 descriptor?? [ 146.519691][ T5401] cp210x 2-1:0.0: cp210x converter detected [ 146.523291][ T7784] netlink: 76 bytes leftover after parsing attributes in process `syz.0.964'. [ 146.671654][ T7784] : entered promiscuous mode [ 146.730726][ T5401] usb 2-1: cp210x converter now attached to ttyUSB0 [ 146.979540][ T5236] usb 2-1: USB disconnect, device number 8 [ 146.998712][ T5236] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 147.023541][ T5236] cp210x 2-1:0.0: device disconnected [ 147.073299][ T5234] Bluetooth: hci7: command tx timeout [ 147.159257][ T7654] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.185523][ T7654] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 147.205149][ T7803] loop0: detected capacity change from 0 to 764 [ 147.247646][ T7803] Symlink component flag not implemented [ 147.262377][ T7803] Symlink component flag not implemented (101) [ 147.286316][ T7805] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 147.318383][ T7805] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 147.353702][ T7805] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 147.467748][ T7654] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.478680][ T7654] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 147.630944][ T7654] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.679205][ T7654] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 147.866483][ T7654] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.900565][ T7654] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 148.388658][ T7654] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.446309][ T7654] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.530883][ T7849] netlink: 56 bytes leftover after parsing attributes in process `syz.3.998'. [ 148.562135][ T7654] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.605221][ T7654] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.906713][ T7867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'. [ 148.937634][ T7654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.035831][ T7654] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.082113][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.089302][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.153369][ T5234] Bluetooth: hci7: command tx timeout [ 149.298537][ T7654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.308997][ T7654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.330472][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.337702][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.131090][ T7860] loop2: detected capacity change from 0 to 131072 [ 150.174250][ T7860] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 150.181010][ T7860] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 150.200493][ T7654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.210483][ T7860] F2FS-fs (loop2): invalid crc value [ 150.342741][ T7860] F2FS-fs (loop2): Found nat_bits in checkpoint [ 150.547492][ T7887] loop0: detected capacity change from 0 to 32768 [ 150.648991][ T7860] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 150.663910][ T7887] __jfs_setxattr: xattr_size = 1857, new_size = 2089 [ 150.674888][ T7860] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 150.695209][ T7910] openvswitch: netlink: Missing key (keys=40, expected=100) [ 150.756322][ T7860] fscrypt (loop2, inode 8): Error -61 getting encryption context [ 150.833910][ T29] audit: type=1400 audit(1729606900.934:23): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=7912 comm="syz.3.1022" [ 150.907681][ T7654] veth0_vlan: entered promiscuous mode [ 150.920631][ T7654] veth1_vlan: entered promiscuous mode [ 150.944769][ T7654] veth0_macvtap: entered promiscuous mode [ 150.956677][ T7654] veth1_macvtap: entered promiscuous mode [ 150.973487][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.984063][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.994177][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.004723][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.014671][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.025671][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.036371][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.046937][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.056834][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.067565][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.077853][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.088593][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.099123][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.110241][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.124816][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.165576][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.182620][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.193169][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.205795][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.215780][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.226765][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.237604][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.239831][ T5234] Bluetooth: hci7: command tx timeout [ 151.248379][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.248399][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.248420][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.248454][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.248473][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.248491][ T7654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.248510][ T7654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.250633][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.395503][ T7654] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.412446][ T7654] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.421627][ T7654] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.433447][ T7654] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.481327][ T7895] loop4: detected capacity change from 0 to 32768 [ 151.490736][ T7895] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1017 (7895) [ 151.606168][ T7924] loop3: detected capacity change from 0 to 4096 [ 151.631378][ T7895] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.642880][ T7895] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 151.667786][ T7924] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 151.711582][ T7895] BTRFS info (device loop4): using free-space-tree [ 151.726293][ T7926] loop1: detected capacity change from 0 to 4096 [ 151.775225][ T7926] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 151.932088][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.975193][ T7924] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 151.995256][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.078021][ T5314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.088801][ T5314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.109338][ T7924] ntfs3(loop3): ino=1b, "file0" attr_set_size [ 152.173768][ T7924] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 152.633435][ T5231] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.759711][ T7959] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.898948][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 153.678886][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 153.727288][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1052'. [ 153.894071][ T8001] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 153.953540][ T8001] Error parsing options; rc = [-22] [ 154.362935][ T8025] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 154.393287][ T8025] overlayfs: overlapping lowerdir path [ 154.566067][ T8022] loop2: detected capacity change from 0 to 8192 [ 154.734907][ T8022] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.849839][ T8041] delete_channel: no stack [ 154.971998][ T8049] overlayfs: unescaped trailing colons in lowerdir mount option. [ 155.194158][ T8059] netlink: 'syz.2.1083': attribute type 2 has an invalid length. [ 155.243840][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 155.313887][ T8066] netlink: 'syz.3.1088': attribute type 3 has an invalid length. [ 155.363874][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 156.114126][ T5236] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.149478][ T5299] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 156.307204][ T5236] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 156.323281][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.366393][ T5236] usb 2-1: config 0 descriptor?? [ 156.425203][ T5299] usb 4-1: not running at top speed; connect to a high speed hub [ 156.442237][ T5299] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 156.467490][ T5299] usb 4-1: config 95 has no interface number 0 [ 156.494292][ T5299] usb 4-1: config 95 interface 1 has no altsetting 0 [ 156.524666][ T5299] usb 4-1: string descriptor 0 read error: -22 [ 156.531169][ T5299] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 156.563157][ T5299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.784176][ T5236] usb 2-1: Cannot set MAC address [ 156.797715][ T5236] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 157.077897][ T29] audit: type=1326 audit(1729606907.194:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2589f7dff9 code=0x7ffc0000 [ 157.080030][ T8116] loop2: detected capacity change from 0 to 32768 [ 157.100146][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.117962][ T29] audit: type=1326 audit(1729606907.194:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2589f7dff9 code=0x7ffc0000 [ 157.141430][ T5236] usb 2-1: USB disconnect, device number 9 [ 157.150678][ T932] usb 4-1: USB disconnect, device number 7 [ 157.156667][ T8116] (syz.2.1112,8116,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 157.220517][ T29] audit: type=1326 audit(1729606907.224:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2589f7dff9 code=0x7ffc0000 [ 157.260091][ T8116] (syz.2.1112,8116,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 157.295006][ T29] audit: type=1326 audit(1729606907.224:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2589f7dff9 code=0x7ffc0000 [ 157.348274][ T8116] JBD2: Ignoring recovery information on journal [ 157.398095][ T8116] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 157.729628][ T5235] ocfs2: Unmounting device (7,2) on (node local) [ 158.592381][ T8180] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1141'. [ 158.645581][ T8180] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1141'. [ 158.746768][ T8190] loop4: detected capacity change from 0 to 8 [ 158.799418][ T8191] loop2: detected capacity change from 0 to 64 [ 159.349446][ T8210] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1154'. [ 159.382327][ T8210] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1154'. [ 159.430680][ T8210] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1154'. [ 159.627221][ T8219] binder: 8218:8219 ioctl c0046209 0 returned -22 [ 159.804966][ T8221] loop3: detected capacity change from 0 to 256 [ 159.850428][ T8229] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1161'. [ 159.899094][ T8221] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 160.290276][ T8209] loop2: detected capacity change from 0 to 32768 [ 160.410130][ T8186] loop0: detected capacity change from 0 to 32768 [ 160.412113][ T29] audit: type=1326 audit(1729606910.524:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.5.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbad7dff9 code=0x7ffc0000 [ 160.467894][ T8186] add_index: next_index = 0. Resetting! [ 160.561534][ T8209] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 160.565499][ T8255] tipc: Trying to set illegal importance in message [ 160.613461][ T29] audit: type=1326 audit(1729606910.594:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.5.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fcbbad7dff9 code=0x7ffc0000 [ 160.644616][ T8209] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 160.795723][ T29] audit: type=1326 audit(1729606910.864:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.5.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbad7dff9 code=0x7ffc0000 [ 160.980751][ T8209] bcachefs: bch2_fs_get_tree() error: EINVAL [ 161.379493][ T8277] netlink: 'syz.1.1186': attribute type 2 has an invalid length. [ 161.431986][ T8277] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1186'. [ 161.701112][ T8290] netlink: 'syz.5.1193': attribute type 1 has an invalid length. [ 161.735894][ T8290] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1193'. [ 162.521388][ T8320] No such timeout policy "syz1" [ 162.963358][ T8337] netlink: 468 bytes leftover after parsing attributes in process `syz.2.1212'. [ 163.155148][ T5401] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 163.249603][ T8299] loop3: detected capacity change from 0 to 32768 [ 163.259169][ T29] audit: type=1326 audit(1729606913.374:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.2.1218" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34a877dff9 code=0x0 [ 163.371315][ T5401] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 163.399634][ T5401] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.467517][ T5401] usb 2-1: Product: syz [ 163.489365][ T5401] usb 2-1: Manufacturer: syz [ 163.537403][ T5401] usb 2-1: SerialNumber: syz [ 163.572268][ T5401] r8152-cfgselector 2-1: Unknown version 0x0000 [ 163.582666][ T5401] r8152-cfgselector 2-1: config 0 descriptor?? [ 164.048474][ T5401] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 164.622039][ T8343] kexec: Could not allocate control_code_buffer [ 164.661438][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1236'. [ 164.693209][ T8384] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1236'. [ 164.714812][ T8384] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1236'. [ 166.036955][ T5401] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.151567][ T8455] openvswitch: netlink: Unknown nsh attribute 0 [ 166.163318][ T8454] loop2: detected capacity change from 0 to 1024 [ 166.203894][ T5401] usb 1-1: Using ep0 maxpacket: 16 [ 166.214616][ T5401] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 166.223176][ T932] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 166.224504][ T5401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.246226][ T5401] usb 1-1: Product: syz [ 166.283222][ T5401] usb 1-1: Manufacturer: syz [ 166.293070][ T5401] usb 1-1: SerialNumber: syz [ 166.317193][ T5298] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 166.336433][ T5401] usb 1-1: config 0 descriptor?? [ 166.342146][ T8457] xt_CT: No such helper "snmp" [ 166.374008][ T5401] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 166.377088][ T932] usb 5-1: Using ep0 maxpacket: 16 [ 166.406198][ T932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 166.444884][ T932] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 166.518136][ T932] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 166.548451][ T932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.565517][ T5298] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.585995][ T5401] gp8psk: usb in 128 operation failed. [ 166.586698][ T932] usb 5-1: Product: syz [ 166.596497][ T5401] gp8psk: usb in 137 operation failed. [ 166.602030][ T5401] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.621984][ T5298] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 166.640397][ T5298] usb 6-1: config 1 has no interface number 0 [ 166.641100][ T932] usb 5-1: Manufacturer: syz [ 166.646806][ T5298] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.672829][ T5401] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 166.682799][ T5401] usb 1-1: media controller created [ 166.707784][ T5401] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.716537][ T8466] loop2: detected capacity change from 0 to 16 [ 166.733203][ T932] usb 5-1: SerialNumber: syz [ 166.736448][ T5298] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.749408][ T5401] gp8psk_fe: Frontend revision 1 attached [ 166.756205][ T5401] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 166.763404][ T932] usb 5-1: config 0 descriptor?? [ 166.765402][ T5298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.773626][ T8442] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 166.780101][ T5401] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 166.799561][ T8466] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 166.806554][ T5298] usb 6-1: Product: syz [ 166.821543][ T5298] usb 6-1: Manufacturer: syz [ 166.834069][ T5298] usb 6-1: SerialNumber: syz [ 166.853600][ T932] hub 5-1:0.0: bad descriptor, ignoring hub [ 166.856904][ T8468] libceph: resolve '0' (ret=-3): failed [ 166.859610][ T932] hub 5-1:0.0: probe with driver hub failed with error -5 [ 166.878459][ T5298] usb 6-1: selecting invalid altsetting 1 [ 166.886092][ T932] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 166.966137][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 167.052413][ T5401] gp8psk: usb in 138 operation failed. [ 167.109889][ T5401] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 167.176677][ T5401] gp8psk: found Genpix USB device pID = 201 (hex) [ 167.224761][ T5401] usb 1-1: USB disconnect, device number 5 [ 167.319149][ T5298] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 167.325407][ T5298] cdc_ncm 6-1:1.1: bind() failure [ 167.367562][ T8478] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 167.394535][ T5401] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 167.510332][ T5298] usb 6-1: USB disconnect, device number 5 [ 167.905815][ T8498] Cannot find add_set index 0 as target [ 168.590471][ T8511] loop2: detected capacity change from 0 to 8192 [ 168.700395][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1303'. [ 168.713136][ T8511] loop2: p1 p3 p4 [ 168.723357][ T8511] loop2: partition table partially beyond EOD, truncated [ 168.730658][ T8511] loop2: p1 size 3523149824 extends beyond EOD, truncated [ 168.753621][ T8511] loop2: p3 size 395700 extends beyond EOD, truncated [ 168.777516][ T8523] ieee802154 phy0 wpan0: encryption failed: -90 [ 168.780446][ T8511] loop2: p4 start 117571584 is beyond EOD, truncated [ 168.792332][ T8491] loop4: detected capacity change from 0 to 40427 [ 168.895105][ T8491] F2FS-fs (loop4): invalid crc value [ 168.945630][ T8491] F2FS-fs (loop4): Found nat_bits in checkpoint [ 169.052664][ T8531] netlink: 'syz.2.1306': attribute type 11 has an invalid length. [ 169.054407][ T5767] udevd[5767]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 169.076642][ T8531] netlink: 'syz.2.1306': attribute type 5 has an invalid length. [ 169.104214][ T5398] udevd[5398]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 169.268167][ T8491] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 169.603746][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1318'. [ 169.795628][ T8568] netlink: 'syz.3.1326': attribute type 1 has an invalid length. [ 169.803658][ T8568] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1326'. [ 169.876256][ T8571] loop2: detected capacity change from 0 to 128 [ 169.898528][ T8574] syz.5.1329 uses obsolete (PF_INET,SOCK_PACKET) [ 170.246594][ T8576] loop0: detected capacity change from 0 to 32768 [ 170.363751][ T8571] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.398625][ T8571] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.591519][ T5235] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.000063][ T5296] usb 5-1: USB disconnect, device number 4 [ 171.093219][ T932] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 171.151169][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'. [ 171.287615][ T932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.323933][ T932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.369959][ T8618] delete_channel: no stack [ 171.375028][ T932] usb 6-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 171.428263][ T8623] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 171.433519][ T932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.484152][ T932] usb 6-1: config 0 descriptor?? [ 171.631000][ T8626] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 171.876628][ T8635] loop1: detected capacity change from 0 to 64 [ 171.903489][ T932] appletouch 6-1:0.0: Failed to request geyser raw mode [ 171.922065][ T932] appletouch 6-1:0.0: probe with driver appletouch failed with error -5 [ 171.961235][ T8635] Bad inode number on dev loop1: 6 is out of range [ 171.972272][ T932] usb 6-1: USB disconnect, device number 6 [ 172.038024][ T8597] loop0: detected capacity change from 0 to 32768 [ 172.262927][ T8597] JBD2: Ignoring recovery information on journal [ 172.304556][ T8647] loop2: detected capacity change from 0 to 1024 [ 172.372065][ T8597] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 172.385703][ T8647] EXT4-fs (loop2): orphan cleanup on readonly fs [ 172.409009][ T8647] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1364: bad orphan inode 8 [ 172.484428][ T8647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.557477][ T8663] netlink: 'syz.4.1369': attribute type 1 has an invalid length. [ 172.656210][ T8647] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 172.795030][ T8647] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 172.863306][ T5228] ocfs2: Unmounting device (7,0) on (node local) [ 172.873382][ T5298] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 173.054785][ T5298] usb 2-1: too many configurations: 241, using maximum allowed: 8 [ 173.128543][ T5298] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.150433][ T5298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.203208][ T5235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.245122][ T5298] usb 2-1: Product: syz [ 173.273101][ T5298] usb 2-1: Manufacturer: syz [ 173.294741][ T5298] usb 2-1: SerialNumber: syz [ 173.334211][ T5298] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.402821][ T5401] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 173.645187][ C1] usb 2-1: ath9k_htc: invalid pkt_len (fff5) [ 173.913255][ T932] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 174.089754][ T932] usb 3-1: too many configurations: 159, using maximum allowed: 8 [ 174.261386][ T932] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 174.303396][ T932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.311453][ T932] usb 3-1: Product: syz [ 174.413141][ T932] usb 3-1: Manufacturer: syz [ 174.437624][ T932] usb 3-1: SerialNumber: syz [ 174.487774][ T932] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 174.537922][ T8717] xt_l2tp: invalid flags combination: 8 [ 174.544491][ T5296] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 179.373042][ T5296] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 179.380295][ T5296] ath9k_htc: Failed to initialize the device [ 184.004324][ C0] sched: DL replenish lagged too much [ 279.094080][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 279.101078][ C0] rcu: (detected by 0, t=10502 jiffies, g=20165, q=1342 ncpus=2) [ 279.108896][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10366 (4294965066-4294954700), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 279.122277][ C0] rcu: rcu_preempt kthread starved for 10366 jiffies! g20165 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 279.133518][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 279.143501][ C0] rcu: RCU grace-period kthread stack dump: [ 279.149397][ C0] task:rcu_preempt state:R running task stack:25856 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 279.161196][ C0] Call Trace: [ 279.164485][ C0] [ 279.167433][ C0] __schedule+0x18af/0x4bd0 [ 279.171974][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 279.177204][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.183222][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.189597][ C0] ? __pfx___schedule+0x10/0x10 [ 279.194483][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.200140][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 279.205357][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.211029][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 279.216166][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 279.221906][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.228279][ C0] irqentry_exit+0x5e/0x90 [ 279.232725][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 279.238751][ C0] RIP: 0010:__timer_delete_sync+0x4/0x310 [ 279.244520][ C0] Code: 47 13 00 48 89 df 31 f6 5b eb 1b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 00 [ 279.264166][ C0] RSP: 0018:ffffc90000167b98 EFLAGS: 00000246 [ 279.270264][ C0] RAX: 0000000000208040 RBX: 0000000000000000 RCX: 0000000000000001 [ 279.278267][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffc90000167bc0 [ 279.286278][ C0] RBP: ffffc90000167c90 R08: ffffffff901cfeef R09: 1ffffffff2039fdd [ 279.294292][ C0] R10: dffffc0000000000 R11: fffffbfff2039fde R12: dffffc0000000000 [ 279.302310][ C0] R13: 1ffff9200002cf74 R14: ffffc90000167bc0 R15: 00000000ffffcecd [ 279.310340][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.316031][ C0] schedule_timeout+0x1c8/0x310 [ 279.320940][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 279.326371][ C0] ? __pfx_process_timeout+0x10/0x10 [ 279.331734][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.337406][ C0] ? prepare_to_swait_event+0x330/0x350 [ 279.343023][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 279.347912][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 279.353160][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 279.359359][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 279.364685][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 279.370644][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.376322][ C0] ? finish_swait+0xd4/0x1e0 [ 279.380969][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 279.385600][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 279.390823][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 279.396776][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.402457][ C0] ? __kthread_parkme+0x169/0x1d0 [ 279.407543][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 279.412786][ C0] kthread+0x2f2/0x390 [ 279.416890][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 279.422127][ C0] ? __pfx_kthread+0x10/0x10 [ 279.426759][ C0] ret_from_fork+0x4d/0x80 [ 279.431218][ C0] ? __pfx_kthread+0x10/0x10 [ 279.435847][ C0] ret_from_fork_asm+0x1a/0x30 [ 279.440671][ C0] [ 279.443705][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 279.450046][ C0] Sending NMI from CPU 0 to CPUs 1: [ 279.455283][ C1] NMI backtrace for cpu 1 [ 279.455299][ C1] CPU: 1 UID: 0 PID: 5298 Comm: kworker/1:6 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 279.455326][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.455342][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 279.455381][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 [ 279.455417][ C1] Code: ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 279.455438][ C1] RSP: 0018:ffffc90000a186b8 EFLAGS: 00000046 [ 279.455457][ C1] RAX: ffffffff87375663 RBX: 0000000000000000 RCX: ffff88802cf83c00 [ 279.455475][ C1] RDX: ffffc900022d2000 RSI: 0000000000000014 RDI: 0000000000000014 [ 279.455492][ C1] RBP: ffffc90000a18838 R08: ffffffff873754a6 R09: 1ffff1100f5ab2d1 [ 279.455510][ C1] R10: dffffc0000000000 R11: ffffed100f5ab2d2 R12: dffffc0000000000 [ 279.455529][ C1] R13: 1ffff11028874843 R14: ffff8881443a4000 R15: ffff8881443a4218 [ 279.455551][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 279.455571][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.455588][ C1] CR2: 00007f6bd6e656c0 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 279.455607][ C1] Call Trace: [ 279.455616][ C1] [ 279.455626][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 279.455660][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 279.455704][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 279.455734][ C1] ? nmi_handle+0x2a/0x5a0 [ 279.455770][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 279.455804][ C1] ? nmi_handle+0x151/0x5a0 [ 279.455829][ C1] ? nmi_handle+0x2a/0x5a0 [ 279.455855][ C1] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 279.455886][ C1] ? default_do_nmi+0x63/0x160 [ 279.455919][ C1] ? exc_nmi+0x123/0x1f0 [ 279.455951][ C1] ? end_repeat_nmi+0xf/0x53 [ 279.455980][ C1] ? usb_hcd_submit_urb+0x146/0x1e80 [ 279.456005][ C1] ? usb_hcd_submit_urb+0x303/0x1e80 [ 279.456031][ C1] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 279.456062][ C1] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 279.456095][ C1] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 279.456126][ C1] [ 279.456134][ C1] [ 279.456141][ C1] usb_hcd_submit_urb+0x303/0x1e80 [ 279.456172][ C1] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 279.456195][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 279.456228][ C1] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 279.456269][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.456296][ C1] ? usb_submit_urb+0x10e4/0x1930 [ 279.456330][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.456361][ C1] ath9k_hif_usb_reg_in_cb+0x4ce/0x6e0 [ 279.456394][ C1] ? kcov_remote_start+0x97/0x7d0 [ 279.456428][ C1] __usb_hcd_giveback_urb+0x42e/0x6e0 [ 279.456456][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 279.456481][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.456510][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 279.456542][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.456574][ C1] dummy_timer+0x856/0x4620 [ 279.456607][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.456639][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 279.456695][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.456740][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 279.456776][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 279.456807][ C1] __hrtimer_run_queues+0x59d/0xd50 [ 279.456833][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 279.456878][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 279.456904][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.456931][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 279.456968][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 279.456998][ C1] handle_softirqs+0x2c7/0x980 [ 279.457036][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 279.457070][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 279.457105][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.457132][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 279.457158][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 279.457190][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 279.457226][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.457255][ C1] irq_exit_rcu+0x9/0x30 [ 279.457285][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 279.457323][ C1] [ 279.457330][ C1] [ 279.457340][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 279.457365][ C1] RIP: 0010:preempt_schedule_irq+0xf6/0x1c0 [ 279.457416][ C1] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 8b 00 00 00 bf 01 00 00 00 e8 35 a1 94 f5 e8 a0 13 ce f5 fb bf 01 00 00 00 e5 ab ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 05 13 30 f6 48 [ 279.457438][ C1] RSP: 0018:ffffc90003d278e0 EFLAGS: 00000282 [ 279.457458][ C1] RAX: 6a84814cac4e4f00 RBX: 1ffff920007a4f24 RCX: ffffffff8170be0a [ 279.457477][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acb40 RDI: 0000000000000001 [ 279.457494][ C1] RBP: ffffc90003d279a0 R08: ffffffff942c98c7 R09: 1ffffffff2859318 [ 279.457513][ C1] R10: dffffc0000000000 R11: fffffbfff2859319 R12: 1ffff920007a4f1c [ 279.457531][ C1] R13: 1ffff920007a4f20 R14: ffffc90003d27900 R15: dffffc0000000000 [ 279.457555][ C1] ? mark_lock+0x9a/0x360 [ 279.457584][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 279.457608][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.457653][ C1] irqentry_exit+0x5e/0x90 [ 279.457675][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 279.457709][ C1] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 279.457742][ C1] Code: 8c e8 54 08 6f 0a 65 66 8b 05 84 59 ac 7e 66 85 c0 75 5d bf 01 00 00 00 e8 7d af 0b 00 e8 48 20 45 00 fb 65 8b 05 48 59 ac 7e <85> c0 75 05 e8 e7 37 a9 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 279.457762][ C1] RSP: 0018:ffffc90003d27a60 EFLAGS: 00000286 [ 279.457781][ C1] RAX: 0000000080000000 RBX: 1ffff920007a4f50 RCX: ffffffff8170be0a [ 279.457799][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acb40 RDI: ffffffff8c6102a0 [ 279.457817][ C1] RBP: ffffc90003d27b20 R08: ffffffff942c98c7 R09: 1ffffffff2859318 [ 279.457836][ C1] R10: dffffc0000000000 R11: fffffbfff2859319 R12: dffffc0000000000 [ 279.457854][ C1] R13: 1ffff920007a4f54 R14: ffffc90003d27aa0 R15: 0000000000000201 [ 279.457877][ C1] ? mark_lock+0x9a/0x360 [ 279.457905][ C1] ? neigh_periodic_work+0xb35/0xd50 [ 279.457938][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 279.457971][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.457998][ C1] ? neigh_destroy+0x423/0x580 [ 279.458027][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.458058][ C1] neigh_periodic_work+0xb35/0xd50 [ 279.458095][ C1] ? process_scheduled_works+0x976/0x1850 [ 279.458130][ C1] process_scheduled_works+0xa65/0x1850 [ 279.458181][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.458221][ C1] ? assign_work+0x364/0x3d0 [ 279.458257][ C1] worker_thread+0x870/0xd30 [ 279.458295][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.458323][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.458350][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 279.458391][ C1] ? __kthread_parkme+0x169/0x1d0 [ 279.458429][ C1] ? __pfx_worker_thread+0x10/0x10 [ 279.458464][ C1] kthread+0x2f2/0x390 [ 279.458486][ C1] ? __pfx_worker_thread+0x10/0x10 [ 279.458520][ C1] ? __pfx_kthread+0x10/0x10 [ 279.458545][ C1] ret_from_fork+0x4d/0x80 [ 279.458581][ C1] ? __pfx_kthread+0x10/0x10 [ 279.458604][ C1] ret_from_fork_asm+0x1a/0x30 [ 279.458649][ C1]