last executing test programs: 19.162612795s ago: executing program 3 (id=1721): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000240)) 19.10159117s ago: executing program 3 (id=1723): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x154}}, 0x0) 18.745973304s ago: executing program 3 (id=1730): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x541b, 0x0) 18.463079314s ago: executing program 3 (id=1734): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000240)="b4cc31", 0x3}], 0x1) 18.249250376s ago: executing program 3 (id=1739): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000d00)={[{@utf8}, {@dmask={'dmask', 0x3d, 0x7}}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@errors_continue}]}, 0x1, 0x1505, &(0x7f0000004180)="$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") mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) 17.691362795s ago: executing program 3 (id=1749): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "1c5350", "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"}}, 0x110) 14.599782566s ago: executing program 4 (id=1782): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004440), 0x200201, 0x0) fcntl$notify(r0, 0x406, 0x0) 14.284494441s ago: executing program 4 (id=1786): r0 = socket(0x22, 0x2, 0x11) bind$inet6(r0, 0x0, 0x0) 13.911119802s ago: executing program 4 (id=1790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001740)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_MARK={0x8}, @CTA_STATUS={0x8}]}, 0x24}}, 0x0) 13.680806486s ago: executing program 4 (id=1793): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xfee5}) 13.36535106s ago: executing program 4 (id=1797): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f00000001c0)={[{@grpjquota}, {@errors_continue}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") rmdir(&(0x7f0000000740)='./file0\x00') 10.923850236s ago: executing program 4 (id=1809): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 4.0201526s ago: executing program 2 (id=1858): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x0) 3.922165189s ago: executing program 5 (id=1859): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0xfffffffffffffffc, 0x9) 3.452282758s ago: executing program 5 (id=1862): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8931, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) 3.282646244s ago: executing program 2 (id=1863): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0xb3}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3.180996806s ago: executing program 1 (id=1865): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c78c3, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x10000}) 2.887794707s ago: executing program 5 (id=1866): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.722680716s ago: executing program 0 (id=1867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x0) 2.675128056s ago: executing program 1 (id=1868): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000003800), 0x0, 0x0) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/153, 0x99}], 0x10000000000002f6) 2.486926237s ago: executing program 5 (id=1869): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 2.428362407s ago: executing program 0 (id=1870): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@updsa={0x10c, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {}, {0x0, 0x0, 0xb846cf7}, {0x0, 0xf5e3}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e23, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}}]}, 0x10c}}, 0x0) 2.318021845s ago: executing program 2 (id=1871): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xea0, 0x9, 0x3, 0x0, 0x1}) 2.015268359s ago: executing program 0 (id=1872): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.915836274s ago: executing program 2 (id=1873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}}, 0x0) 1.870709141s ago: executing program 1 (id=1874): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x0) 1.530953055s ago: executing program 0 (id=1875): r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x12, {{0x29, 0x0, 0x4000000, @private0}}}, 0x88) 1.43999168s ago: executing program 1 (id=1876): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x4, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0xffffffffffffff0d, 0x1, {{0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1.137178397s ago: executing program 0 (id=1877): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000004340)={[{@check_relaxed}, {@utf8}, {@overriderock}, {@check_strict}, {}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@session={'session', 0x3d, 0x38}}, {@block={'block', 0x3d, 0x200}}, {@map_normal}, {@map_acorn}, {@check_strict}, {@overriderock}, {@unhide}, {@unhide}, {@check_strict}]}, 0x1, 0xa23, &(0x7f0000000e80)="$eJzs3c1vHGcZAPBn1nbiuiVJ21BK1NaTlKRua5y1TROsHoqzu3a22F5kO1IjDk1pHBTFUGhBaiukphLi1AokEAe4VZw4VeqFckC9ILjREwck1H+h4hRORjO7ttf2rtc2/kr6+1m7Ox/PvO8zOx+vd3d23+DusnR8zdjSUn7b4fiVP+5Dxhxil8qfffDh+9nt3dtxJLriueRPEb0RkUZ0R8SjET2l8mxtukNBtyKuRcQnEUlEHI3645Zci+SX8cDq+CeR/D6rt60jWy2ZTpb4Qjvo/Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6jpFQuFoeTI1GdufJSWheRblAqz9aSWFraOGd5mbqP816/k4871huRZLfo7V3u6vvRk6uzH4mI9Ew8Vh97LO+QPHrj7fsfOfH8w92F5eXbZfN/Obr1Yt946+1brywuLrzecm6S7GJWh9JkZaY6V6tOj09W0upcLR27cKF4/vLEXDpRnarMXZ2br0ynpdnK+HxtNh0oPZ0Oj42NppWhq7UrM5PloanK8sSLXx8pFi+kLw59pzI+O1ebOf/i0FzpcnVqqjozmcdks7OYi9mO+O3qfDpfGZ9O0xs3FxdG1+XUFev23yxouNOaZEEjnYJGiiMjw8MjI8PvNnrPXplw4bmx5y4Wi93FdWJDxB7ttBwu97XfzLt/EocdKtTb/4ipqMZMXImXIm35V4pyzEYtptvMb1hu/8+er2xabTS1/41Wvrtp/qns7kw80RjtbdP+t8ll//7eiLfi7bgVr8RiLMZCvH7gGe3v32RUYiaqMRe1qMZ0jOdT0saUNMbiQlyIYrwcl6M/5qI7JqIaU1GJubgaczEflXyPKsVsVGI85qMWs5HGQJTi6UhjOMZiLEYjjUoMxdWoxZWYickox3heyo24mT/vo5vkuBI0vJWgkU2CNjTm227/K+v/OeEeVNh0K+/BWRx2ZqnR/h/pHDpQ2o+EAAAAgF331b/HsZMP/e3fEUk8nn8uP1GdqhQPOi0AAABgF+WX6z2WPfRkQ49H4vU/AAAA3GuS/Dt2SUT0RX99aPmbUN4EAAAAgHtE/vn/E5H0r07w+h8AAADuMZ1/Y79jRDK4/PO/6fX64/VGRH0s6ZuoTlWGSrWp54fjXP4rA/k3DTaU1hWR9ORfP3gmTtejTvfVH/tWS8zq7M2ihoeeH45n4kxjRQaezB6eHGgROVKPfKoe+VRzZFesiRzNIgHgXndmk/Z4q+3/MzFYjxg8lTf53afWtMFdecta1LICwGGx0sfOfxtdmrVo/xsRT7Rr/7+xyev/LOKhuNFfv6RgKF6N12IxrsdgNK446G9V6nJvBPXLEAY7vBvQ17hk4dOLhRjc8H5A78q6NscuxEgMtnxHoKncZDmH0Xpc195sAwDYb2c2bYdX2v/uzdr/wc1f/ze1uS4pBIDDYKUH++0O9G89+KDXEQBYSysNAAAAAAAAAAAAAAAAAAAAAAAAAAAAu29LP+D/j3MRi4sLETvtLKDFwKd//fOX2sa8d39E73Yy3HygELuT8+Ef6IqIg6r9hdj2Utk2PixPnYG1Awd8YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBfJBFdraYXIo5GRDEizu9/Vnvn9kEnsFvSnS2W3Ik78WYc2+10AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6Bq//1+I+uP99UnRXYg4GxHXIuK7B53jdvR2mH9nn/I4fH6Q3zf9/n8hoieWkuiub/ZIekrl2dp0tiskR7P5n33w4fvZrW2R7ywPbOxVISsgq2FN5xKNGpqm9Kxd6sF8qb7ywhu3fvLaj9LypXzHvDQ/MVWenpz91mrgI8lH9S4QmrtBWM73Z2f/8qumyUcalX+UrWlr6+udyOstb6z3K62WblPvFtxcXBjJapqvvDT/0x8Wmmc9FKcjnhyIGFhb0/ezW5uaTq9/PtdKPk9+kRyL38a1fPtnz0aylGSb6Hi+/vfduLm4MPTqa4vXV3J65+abTQWciP6IuL72KOuQU39+Pmkp3+sKPVmtxTwouzvZobxNNZU4vPq8rlmHB/Ndpm9b65C2X4dch+e9kdHo+oyWsoPk1z9+OM5tuqWPtijxXIcaW0o+T/6VXI5/xs+b+v8oZNv/bLQ8OlsUkUc27SnN89YcXoWzq2s+0jzj5fVltj0q2QPvxffimyvbv9B0/m9sqzbHzcr56IWmiTs/HzXVuOG4aOh0XGys8Q/HN7Qoq/LD6OS6Fqlx9mm3TCPPk/WoNnl+OZ6N6D61rTPKsx3OKJ2W3+nx/7tkIP4Tt/X/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHH5JRFer6YWIsxFxIiKOZ+NpxNL6mNs7qK/Ql+wkzV2zk5zvPknbFU3uxJ14M47td0YAAAAAAAAA7I1L5c8++PD97JZ/Ht8VXys05qQR3RFxIvlNT6k8W5vuUFBPxLXlj/R7t5fDtezugdXxT7KxRzssdLCXDwDAXe1/AQAA///rmG2Q") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.130846861s ago: executing program 2 (id=1878): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x301, 0x0, 0x0, 0x1000000, 0x0}) 1.105435649s ago: executing program 5 (id=1879): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x3) 710.811092ms ago: executing program 2 (id=1880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500020000000800124000100000050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0) 530.470913ms ago: executing program 1 (id=1882): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 529.482256ms ago: executing program 5 (id=1883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) 297.473262ms ago: executing program 0 (id=1884): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b40, 0xffffffffffffffff) 0s ago: executing program 1 (id=1885): r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x12, &(0x7f00000004c0)=[@in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e20, 0x40, @empty, 0x7}]}, &(0x7f00000005c0)=0x10) kernel console output (not intermixed with test programs): config [ 110.184230][ T5286] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.256057][ T5286] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.265525][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.273723][ T5286] usb 3-1: SerialNumber: syz [ 110.527734][ T5286] usb 3-1: 0:2 : does not exist [ 110.535769][ T5286] usb 3-1: unit 49 not found! [ 110.541996][ T5286] usb 3-1: unit 55 not found! [ 110.612187][ T5285] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.628374][ T5330] usb 2-1: USB disconnect, device number 4 [ 110.655984][ T5286] usb 3-1: USB disconnect, device number 5 [ 110.758211][ T5240] udevd[5240]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.788399][ T5285] usb 1-1: config 0 has an invalid interface number: 242 but max is 0 [ 110.800041][ T5285] usb 1-1: config 0 has no interface number 0 [ 110.820496][ T5285] usb 1-1: New USB device found, idVendor=0403, idProduct=bdc8, bcdDevice=cb.ec [ 110.846398][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=142, SerialNumber=70 [ 110.862585][ T5285] usb 1-1: Product: syz [ 110.866819][ T5285] usb 1-1: Manufacturer: syz [ 110.871432][ T5285] usb 1-1: SerialNumber: syz [ 110.905864][ T5285] usb 1-1: config 0 descriptor?? [ 110.924392][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 110.938646][ T5285] ftdi_sio 1-1:0.242: FTDI USB Serial Device converter detected [ 110.955808][ T5285] ftdi_sio ttyUSB0: unknown device type: 0xcbec [ 111.071807][ T6428] loop3: detected capacity change from 0 to 4096 [ 111.134292][ T5285] usb 1-1: USB disconnect, device number 3 [ 111.152589][ T5285] ftdi_sio 1-1:0.242: device disconnected [ 111.212607][ T929] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 111.230352][ T929] ath9k_htc: Failed to initialize the device [ 111.285600][ T5330] usb 2-1: ath9k_htc: USB layer deinitialized [ 111.323972][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.460'. [ 111.360445][ T6439] loop2: detected capacity change from 0 to 1024 [ 111.368089][ T6435] netlink: 124 bytes leftover after parsing attributes in process `syz.5.460'. [ 111.554117][ T6442] netlink: 108 bytes leftover after parsing attributes in process `syz.3.464'. [ 111.568858][ T6442] netlink: 56 bytes leftover after parsing attributes in process `syz.3.464'. [ 111.686026][ T2939] hfsplus: b-tree write err: -5, ino 4 [ 112.877615][ T6490] loop1: detected capacity change from 0 to 32768 [ 113.078425][ T6504] syz.1.496 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 113.604789][ T6486] loop4: detected capacity change from 0 to 32768 [ 113.674334][ T6521] loop2: detected capacity change from 0 to 4096 [ 113.682050][ T5285] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.686451][ T6486] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 113.707519][ T6526] netlink: 'syz.5.504': attribute type 2 has an invalid length. [ 113.731241][ T6486] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 113.780316][ T6486] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 113.815275][ T5286] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 113.833523][ T5286] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 113.901993][ T5285] usb 1-1: Using ep0 maxpacket: 16 [ 113.950014][ T6521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.003122][ T5285] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 114.070833][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.116538][ T5286] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 283ms [ 114.125229][ T5286] gfs2: fsid=syz:syz.0: jid=0: Done [ 114.143229][ T6486] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 114.161005][ T5285] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 114.172333][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.181822][ T5285] usb 1-1: Product: syz [ 114.186077][ T5285] usb 1-1: Manufacturer: syz [ 114.190709][ T5285] usb 1-1: SerialNumber: syz [ 114.205603][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.208095][ T5285] usb 1-1: config 0 descriptor?? [ 114.454034][ T5285] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 114.490686][ C0] powermate: config urb returned -71 [ 114.497907][ C0] powermate: config urb returned -71 [ 114.503536][ C0] powermate: config urb returned -71 [ 114.509056][ C0] powermate: config urb returned -71 [ 114.518437][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 114.528157][ T5285] usb 1-1: USB disconnect, device number 4 [ 114.568815][ T6550] loop1: detected capacity change from 0 to 1024 [ 114.964557][ T6565] loop4: detected capacity change from 0 to 64 [ 115.134609][ T5285] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.407021][ T5285] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 115.416421][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.424540][ T5285] usb 3-1: Product: syz [ 115.428756][ T5285] usb 3-1: Manufacturer: syz [ 115.433666][ T5285] usb 3-1: SerialNumber: syz [ 115.442042][ T5285] usb 3-1: config 0 descriptor?? [ 115.666104][ T5285] hso 3-1:0.0: Failed to find BULK IN ep [ 115.702908][ T5285] usb-storage 3-1:0.0: USB Mass Storage device detected [ 115.871430][ T6600] netlink: 'syz.0.539': attribute type 2 has an invalid length. [ 115.978421][ T6609] vhci_hcd: invalid port number 0 [ 116.162116][ T5285] usb 3-1: USB disconnect, device number 6 [ 116.177624][ T54] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 116.184249][ T54] Bluetooth: Wrong link type (-22) [ 116.189593][ T54] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 116.196305][ T54] Bluetooth: Wrong link type (-22) [ 116.202544][ T54] Bluetooth: hci1: link tx timeout [ 116.207827][ T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.348412][ T6622] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.551'. [ 116.369484][ T6623] loop0: detected capacity change from 0 to 256 [ 116.635461][ T6636] set match dimension is over the limit! [ 116.817203][ T6639] loop3: detected capacity change from 0 to 1024 [ 116.877043][ T6639] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.889755][ T6639] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 116.931484][ T6642] xt_CT: No such helper "pptp" [ 116.944538][ T6639] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.983377][ T6639] EXT4-fs error (device loop3): __ext4_get_inode_loc:4403: comm syz.3.558: Invalid inode table block 0 in block_group 0 [ 117.062367][ T6639] EXT4-fs (loop3): Remounting filesystem read-only [ 117.103847][ T6639] __quota_error: 5 callbacks suppressed [ 117.103868][ T6639] Quota error (device loop3): write_blk: dquota write failed [ 117.197614][ T6639] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 117.218157][ T6639] EXT4-fs (loop3): 1 truncate cleaned up [ 117.243672][ T6658] loop5: detected capacity change from 0 to 1024 [ 117.276344][ T6639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.362001][ T6658] hfsplus: request for non-existent node 128 in B*Tree [ 117.400316][ T6658] hfsplus: request for non-existent node 128 in B*Tree [ 117.422374][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.883639][ T5335] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 118.066412][ T5335] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 118.089496][ T5335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.124110][ T5335] usb 4-1: config 0 descriptor?? [ 118.151806][ T5335] ums-realtek 4-1:0.0: USB Mass Storage device detected [ 118.174018][ T6646] loop0: detected capacity change from 0 to 32768 [ 118.242076][ T6646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.557 (6646) [ 118.330366][ T6656] loop2: detected capacity change from 0 to 32768 [ 118.337141][ T5241] Bluetooth: hci1: command 0x0406 tx timeout [ 118.362446][ T6646] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.364263][ T6656] [ 118.364263][ T6656] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.364263][ T6656] [ 118.393640][ T6646] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 118.402491][ T6646] BTRFS info (device loop0): using free-space-tree [ 118.482988][ T6656] [ 118.482988][ T6656] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.482988][ T6656] [ 118.606149][ T6680] loop5: detected capacity change from 0 to 32768 [ 118.626028][ T6656] [ 118.626028][ T6656] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.626028][ T6656] [ 118.636979][ T6656] [ 118.636979][ T6656] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.636979][ T6656] [ 118.702416][ T111] [ 118.702416][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.702416][ T111] [ 118.799413][ T5335] usb 4-1: USB disconnect, device number 2 [ 118.908452][ T5225] [ 118.908452][ T5225] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.908452][ T5225] [ 118.919698][ T5225] [ 118.919698][ T5225] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.919698][ T5225] [ 119.144972][ T6721] loop2: detected capacity change from 0 to 2048 [ 119.176816][ T6723] netlink: 'syz.4.590': attribute type 10 has an invalid length. [ 119.176947][ T6717] loop1: detected capacity change from 0 to 8 [ 119.271265][ T6723] veth0_vlan: left promiscuous mode [ 119.275878][ T6721] Alternate GPT is invalid, using primary GPT. [ 119.283874][ T6721] loop2: p2 p3 p7 [ 119.321635][ T6723] veth0_vlan: entered promiscuous mode [ 119.346914][ T6717] SQUASHFS error: xz decompression failed, data probably corrupt [ 119.359646][ T5223] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.367277][ T6717] SQUASHFS error: Failed to read block 0x60: -5 [ 119.380282][ T6723] team0: Device veth0_vlan failed to register rx_handler [ 119.528559][ T5240] udevd[5240]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 119.541755][ T5233] udevd[5233]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 119.555332][ T5242] udevd[5242]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 119.617228][ T6717] SQUASHFS error: xz decompression failed, data probably corrupt [ 119.625231][ T6717] SQUASHFS error: Failed to read block 0x60: -5 [ 119.668370][ T29] audit: type=1800 audit(1727957648.291:29): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.588" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 119.827680][ T6732] loop2: detected capacity change from 0 to 2048 [ 119.952616][ T6739] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.033420][ T6732] syz.2.594: attempt to access beyond end of device [ 120.033420][ T6732] loop2: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 120.092590][ T6732] syz.2.594: attempt to access beyond end of device [ 120.092590][ T6732] loop2: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 120.265305][ T6749] loop5: detected capacity change from 0 to 128 [ 120.388122][ T6739] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 120.432335][ T6739] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 120.449104][ T6753] loop1: detected capacity change from 0 to 128 [ 120.505303][ T6739] Remounting filesystem read-only [ 120.567307][ T6753] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.608915][ T6753] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.814243][ T8] IPVS: starting estimator thread 0... [ 120.829203][ T5227] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.859097][ T6777] loop4: detected capacity change from 0 to 512 [ 120.932197][ T6776] IPVS: using max 17 ests per chain, 40800 per kthread [ 120.998567][ T6777] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 121.011017][ T6785] loop2: detected capacity change from 0 to 256 [ 121.023859][ T6786] loop0: detected capacity change from 0 to 2048 [ 121.071545][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 121.081614][ T6788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.618'. [ 121.091648][ T6777] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.614: invalid indirect mapped block 2683928664 (level 1) [ 121.136803][ T6791] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.167620][ T6786] syz.0.616: attempt to access beyond end of device [ 121.167620][ T6786] loop0: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 121.242512][ T6777] EXT4-fs (loop4): Remounting filesystem read-only [ 121.254452][ T6786] syz.0.616: attempt to access beyond end of device [ 121.254452][ T6786] loop0: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 121.295385][ T6777] EXT4-fs (loop4): 1 truncate cleaned up [ 121.322992][ T6777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.567649][ T6791] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 121.578791][ T6791] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 121.592283][ T5222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.614417][ T6791] Remounting filesystem read-only [ 122.211478][ T6833] tmpfs: Bad value for 'nr_inodes' [ 122.953042][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.656'. [ 123.055967][ T6874] No such timeout policy "syz0" [ 123.389138][ T6888] loop5: detected capacity change from 0 to 512 [ 123.476472][ T6888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.679138][ T6888] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.906282][ T5226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.142609][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.683'. [ 124.152694][ T6928] netlink: 'syz.4.682': attribute type 1 has an invalid length. [ 124.214916][ T6933] loop3: detected capacity change from 0 to 256 [ 124.257484][ T6928] netlink: 'syz.4.682': attribute type 2 has an invalid length. [ 124.262663][ T6933] exfat: Deprecated parameter 'utf8' [ 124.475973][ T6933] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5b52992a, utbl_chksum : 0xe619d30d) [ 124.696951][ T29] audit: type=1326 audit(1727957653.361:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97cf7dff9 code=0x7ffc0000 [ 124.719117][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.829525][ T29] audit: type=1326 audit(1727957653.361:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97cf7dff9 code=0x7ffc0000 [ 124.934744][ T6952] loop2: detected capacity change from 0 to 4096 [ 124.952132][ T29] audit: type=1326 audit(1727957653.391:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fd97cf7dff9 code=0x7ffc0000 [ 125.056378][ T29] audit: type=1326 audit(1727957653.391:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97cf7dff9 code=0x7ffc0000 [ 125.164243][ T29] audit: type=1326 audit(1727957653.391:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97cf7dff9 code=0x7ffc0000 [ 125.181514][ T6952] ntfs3: loop2: try to read out of volume at offset 0x3fffffc7000 [ 125.430714][ T6982] dlm: plock device version mismatch: kernel (1.2.0), user (1.33554432.0) [ 126.158600][ T7014] netlink: 108 bytes leftover after parsing attributes in process `syz.1.721'. [ 126.196047][ T7014] netlink: 108 bytes leftover after parsing attributes in process `syz.1.721'. [ 126.242085][ T7014] netlink: 84 bytes leftover after parsing attributes in process `syz.1.721'. [ 126.528288][ T7028] loop0: detected capacity change from 0 to 2048 [ 126.596068][ T7028] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.806932][ T6990] loop2: detected capacity change from 0 to 32768 [ 126.924828][ T7042] tmpfs: Bad value for 'mpol' [ 127.025730][ T6990] ea_get: invalid extended attribute [ 127.031711][ T6990] ffff88805b41e898: 04 00 00 00 .... [ 127.242254][ T7049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.738'. [ 127.288503][ T7054] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 127.299180][ T7054] overlayfs: missing 'lowerdir' [ 127.588157][ T29] audit: type=1326 audit(1727957656.251:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd560d7dff9 code=0x7ffc0000 [ 127.702094][ T29] audit: type=1326 audit(1727957656.301:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd560d7dff9 code=0x7ffc0000 [ 127.769751][ T7064] loop3: detected capacity change from 0 to 1024 [ 127.828817][ T29] audit: type=1326 audit(1727957656.301:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd560d7dff9 code=0x7ffc0000 [ 127.888805][ T29] audit: type=1326 audit(1727957656.301:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd560d7dff9 code=0x7ffc0000 [ 127.979165][ T7064] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 127.999720][ T7074] netlink: 'syz.2.753': attribute type 10 has an invalid length. [ 128.029469][ T7064] hfsplus: xattr search failed [ 128.062667][ T7074] veth1_macvtap: left promiscuous mode [ 128.120910][ T7077] netlink: 'syz.0.751': attribute type 11 has an invalid length. [ 128.147655][ T7038] loop4: detected capacity change from 0 to 32768 [ 128.163277][ T7038] XFS: attr2 mount option is deprecated. [ 128.404497][ T7038] XFS (loop4): cannot change alignment: superblock does not support data alignment [ 129.123188][ T7093] loop3: detected capacity change from 0 to 32768 [ 129.292981][ T7093] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 129.625176][ T7093] XFS (loop3): Ending clean mount [ 129.723196][ T5229] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 129.736929][ T7125] loop1: detected capacity change from 0 to 32768 [ 129.968397][ T7150] loop2: detected capacity change from 0 to 512 [ 130.623281][ T7176] netlink: 72 bytes leftover after parsing attributes in process `syz.0.794'. [ 130.632765][ T7176] netlink: 72 bytes leftover after parsing attributes in process `syz.0.794'. [ 130.670192][ T7150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.683162][ T7150] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.779754][ T7186] netlink: 'syz.5.798': attribute type 39 has an invalid length. [ 130.841857][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.885505][ T7186] netlink: 'syz.5.798': attribute type 4 has an invalid length. [ 130.941991][ T7186] netlink: 152 bytes leftover after parsing attributes in process `syz.5.798'. [ 131.011038][ T7186] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 131.113475][ T7192] netlink: 'syz.0.801': attribute type 3 has an invalid length. [ 131.616871][ T7222] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 131.652708][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'. [ 131.768847][ T7230] loop2: detected capacity change from 0 to 64 [ 132.292074][ T8] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 132.336460][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.345110][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.492259][ T8] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 132.506944][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.533474][ T8] usb 4-1: Product: syz [ 132.537688][ T8] usb 4-1: Manufacturer: syz [ 132.545618][ T8] usb 4-1: SerialNumber: syz [ 132.634620][ T8] usb 4-1: config 0 descriptor?? [ 132.788510][ T7272] netlink: 'syz.4.840': attribute type 1 has an invalid length. [ 132.959136][ T7275] loop0: detected capacity change from 0 to 256 [ 132.978981][ T7279] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.844'. [ 132.991252][ T8] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 133.055300][ T7275] FAT-fs (loop0): Directory bread(block 64) failed [ 133.097631][ T7275] FAT-fs (loop0): Directory bread(block 65) failed [ 133.127647][ T7275] FAT-fs (loop0): Directory bread(block 66) failed [ 133.156905][ T7275] FAT-fs (loop0): Directory bread(block 67) failed [ 133.163863][ T7275] FAT-fs (loop0): Directory bread(block 68) failed [ 133.170530][ T7275] FAT-fs (loop0): Directory bread(block 69) failed [ 133.177242][ T7275] FAT-fs (loop0): Directory bread(block 70) failed [ 133.184394][ T7275] FAT-fs (loop0): Directory bread(block 71) failed [ 133.191430][ T7275] FAT-fs (loop0): Directory bread(block 72) failed [ 133.193009][ T8] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 133.198325][ T7275] FAT-fs (loop0): Directory bread(block 73) failed [ 133.232048][ T8] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 133.478131][ T8] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 133.536189][ T8] usb 4-1: USB disconnect, device number 3 [ 133.748945][ T7293] loop0: detected capacity change from 0 to 32768 [ 133.987229][ T7293] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 134.526915][ T7329] loop1: detected capacity change from 0 to 32768 [ 134.535475][ T7329] XFS: ikeep mount option is deprecated. [ 134.541389][ T7329] XFS: ikeep mount option is deprecated. [ 134.618675][ T7329] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.619523][ T7293] XFS (loop0): Ending clean mount [ 134.890012][ T7359] loop5: detected capacity change from 0 to 1024 [ 135.141418][ T5223] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 135.286959][ T7329] XFS (loop1): Ending clean mount [ 135.834937][ T5227] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.073417][ T7366] loop4: detected capacity change from 0 to 40427 [ 136.109706][ T7366] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 136.122012][ T7366] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 136.136796][ T7366] F2FS-fs (loop4): invalid crc value [ 136.187417][ T7366] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.318162][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 136.411303][ T7382] netlink: 'syz.5.883': attribute type 29 has an invalid length. [ 136.431083][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.883'. [ 136.481999][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.885'. [ 136.523593][ T7389] xt_TCPMSS: Only works on TCP SYN packets [ 136.609487][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 136.639931][ T7366] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 136.662200][ T7366] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.671589][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.888'. [ 138.171340][ T7450] bridge0: port 3(veth0_to_bridge) entered blocking state [ 138.178815][ T7450] bridge0: port 3(veth0_to_bridge) entered disabled state [ 138.196794][ T7450] veth0_to_bridge: entered allmulticast mode [ 138.207792][ T7450] veth0_to_bridge: entered promiscuous mode [ 138.217573][ T7450] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.237577][ T7450] bridge0: port 3(veth0_to_bridge) entered blocking state [ 138.245919][ T7450] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 138.441644][ T7462] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 139.558913][ T7510] netlink: 'syz.0.944': attribute type 2 has an invalid length. [ 139.672434][ T5335] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.836663][ T5335] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 139.853117][ T7479] loop4: detected capacity change from 0 to 32768 [ 139.860718][ T5335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.873879][ T7522] loop2: detected capacity change from 0 to 256 [ 139.907394][ T5335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 139.949059][ T7479] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 139.960381][ T5335] usb 2-1: config 1 has no interface number 0 [ 139.984093][ T5335] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 139.995305][ T5335] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 140.011601][ T5335] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.020994][ T5335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.030398][ T5335] usb 2-1: Product: syz [ 140.042457][ T5335] usb 2-1: Manufacturer: syz [ 140.047262][ T5335] usb 2-1: SerialNumber: syz [ 140.047301][ T7522] FAT-fs (loop2): Directory bread(block 64) failed [ 140.076670][ T7522] FAT-fs (loop2): Directory bread(block 65) failed [ 140.092121][ T7522] FAT-fs (loop2): Directory bread(block 66) failed [ 140.098677][ T7522] FAT-fs (loop2): Directory bread(block 67) failed [ 140.112218][ T7536] tmpfs: Bad value for 'mpol' [ 140.128117][ T7522] FAT-fs (loop2): Directory bread(block 68) failed [ 140.138209][ T7522] FAT-fs (loop2): Directory bread(block 69) failed [ 140.147093][ T7522] FAT-fs (loop2): Directory bread(block 70) failed [ 140.153777][ T7522] FAT-fs (loop2): Directory bread(block 71) failed [ 140.160424][ T7522] FAT-fs (loop2): Directory bread(block 72) failed [ 140.167194][ T7522] FAT-fs (loop2): Directory bread(block 73) failed [ 140.205837][ T7479] XFS (loop4): Ending clean mount [ 140.262315][ T7540] loop3: detected capacity change from 0 to 256 [ 140.327088][ T7540] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 140.367949][ T7544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.959'. [ 140.435252][ T7540] exFAT-fs (loop3): error, invalid dentry access beyond EOF (clu : 11, eidx : 128) [ 140.455334][ T7540] exFAT-fs (loop3): Filesystem has been set read-only [ 140.478007][ T5222] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 140.510170][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'. [ 140.538121][ T7548] loop2: detected capacity change from 0 to 2048 [ 140.547309][ T7548] udf: Bad value for 'lastblock' [ 140.618124][ T7548] debugfs: Bad value for 'gid' [ 140.632168][ T7548] debugfs: Bad value for 'gid' [ 140.723593][ T7550] trusted_key: encrypted_key: insufficient parameters specified [ 140.916752][ T8] usb 2-1: USB disconnect, device number 5 [ 140.992324][ T7562] loop5: detected capacity change from 0 to 2048 [ 141.194073][ T7562] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.303847][ T7565] delete_channel: no stack [ 141.356913][ T7575] netlink: 'syz.0.973': attribute type 10 has an invalid length. [ 141.365175][ T7575] netlink: 40 bytes leftover after parsing attributes in process `syz.0.973'. [ 141.374355][ T7575] veth0_vlan: entered allmulticast mode [ 141.380779][ T7575] bridge0: port 3(veth0_vlan) entered blocking state [ 141.388963][ T7575] bridge0: port 3(veth0_vlan) entered disabled state [ 141.398530][ T7575] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 141.819570][ T7594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.983'. [ 141.984557][ T29] audit: type=1400 audit(1727957670.641:39): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=7600 comm="syz.2.986" [ 142.054377][ T5285] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.238786][ T7613] loop1: detected capacity change from 0 to 512 [ 142.281685][ T5285] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 142.304824][ T7613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.321624][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.340146][ T5285] usb 4-1: Product: syz [ 142.354526][ T5285] usb 4-1: Manufacturer: syz [ 142.369700][ T5285] usb 4-1: SerialNumber: syz [ 142.383664][ T5285] usb 4-1: config 0 descriptor?? [ 142.421664][ T7613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.502036][ T7613] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.586646][ T7631] loop0: detected capacity change from 0 to 1024 [ 142.596346][ T5227] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.615029][ T7631] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 142.634389][ T7631] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 142.677255][ T5285] hso 4-1:0.0: Can't find BULK IN endpoint [ 142.685547][ T7631] jbd2_journal_init_inode: Cannot locate journal superblock [ 142.718920][ T7631] EXT4-fs (loop0): Could not load journal inode [ 142.794022][ T5285] usb-storage 4-1:0.0: USB Mass Storage device detected [ 142.979538][ T5285] usb 4-1: USB disconnect, device number 4 [ 143.152048][ T5330] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.322550][ T5330] usb 1-1: Using ep0 maxpacket: 32 [ 143.329656][ T5330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 181, changing to 7 [ 143.343460][ T5330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8338, setting to 1024 [ 143.356868][ T29] audit: type=1400 audit(1727957672.021:40): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=7656 comm="syz.2.1010" [ 143.401371][ T5330] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 143.416178][ T5330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.440209][ T5330] usb 1-1: Product: syz [ 143.455002][ T5330] usb 1-1: Manufacturer: syz [ 143.465137][ T5330] usb 1-1: SerialNumber: syz [ 143.482510][ T5330] usb 1-1: config 0 descriptor?? [ 143.491819][ T5330] hub 1-1:0.0: bad descriptor, ignoring hub [ 143.498325][ T5330] hub 1-1:0.0: probe with driver hub failed with error -5 [ 143.518675][ T5330] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 143.559183][ T5330] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 143.581705][ T7672] netlink: 'syz.4.1019': attribute type 6 has an invalid length. [ 143.680775][ T7674] loop3: detected capacity change from 0 to 2048 [ 143.718271][ T7674] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.738430][ T5330] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 143.773840][ T5285] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 143.792637][ T5330] usb 1-1: USB disconnect, device number 5 [ 143.932585][ T5285] usb 6-1: Using ep0 maxpacket: 32 [ 143.948275][ T5285] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 175 [ 143.978458][ T5285] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 143.992154][ T5285] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.006167][ T7683] overlayfs: conflicting options: userxattr,metacopy=on [ 144.018816][ T5285] usb 6-1: Product: syz [ 144.043357][ T5285] usb 6-1: Manufacturer: syz [ 144.064051][ T5285] usb 6-1: SerialNumber: syz [ 144.097906][ T5285] usb 6-1: config 0 descriptor?? [ 144.102045][ T7687] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 144.112392][ T7669] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 144.150016][ T5286] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.188504][ T5285] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 144.311986][ T5286] usb 3-1: Using ep0 maxpacket: 32 [ 144.331526][ T5286] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.372125][ T7698] openvswitch: netlink: Actions may not be safe on all matching packets [ 144.380709][ T3386] usb 6-1: Failed to submit usb control message: -71 [ 144.391250][ T3386] usb 6-1: unable to send the bmi data to the device: -71 [ 144.400682][ T5285] usb 6-1: USB disconnect, device number 2 [ 144.416261][ T3386] usb 6-1: unable to get target info from device [ 144.427103][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.448546][ T3386] usb 6-1: could not get target info (-71) [ 144.454572][ T5288] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.481982][ T5286] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 144.509108][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.514393][ T3386] usb 6-1: could not probe fw (-71) [ 144.534529][ T5286] usb 3-1: config 0 descriptor?? [ 144.551232][ T5286] rndis_host 3-1:0.0: invalid descriptor buffer length [ 144.568073][ T5286] usb 3-1: bad CDC descriptors [ 144.582407][ T5286] cdc_acm 3-1:0.0: invalid descriptor buffer length [ 144.623793][ T5288] usb 2-1: config index 0 descriptor too short (expected 2207, got 159) [ 144.633593][ T5288] usb 2-1: config 1 has an invalid interface number: 3 but max is 2 [ 144.668120][ T5288] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 144.705054][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.758033][ T5288] usb 2-1: config 1 has no interface number 1 [ 144.773218][ T5288] usb 2-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 144.782140][ T5286] usb 3-1: USB disconnect, device number 7 [ 144.793436][ T5288] usb 2-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 144.851205][ T5288] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.884579][ T5288] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.894023][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.909635][ T5288] usb 2-1: Product: syz [ 144.915625][ T5288] usb 2-1: Manufacturer: syz [ 144.920244][ T5288] usb 2-1: SerialNumber: syz [ 145.194394][ T7721] loop3: detected capacity change from 0 to 1764 [ 145.221626][ T5288] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 145.338532][ T5288] hub 2-1:1.3: bad descriptor, ignoring hub [ 145.350849][ T5288] hub 2-1:1.3: probe with driver hub failed with error -5 [ 145.448697][ T5288] usb 2-1: USB disconnect, device number 6 [ 145.522272][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1043'. [ 145.760467][ T7739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1049'. [ 146.256257][ T7758] netlink: 'syz.1.1057': attribute type 2 has an invalid length. [ 146.322599][ T7758] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 146.367408][ T7758] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 146.403609][ T7723] loop5: detected capacity change from 0 to 32768 [ 146.457720][ T7723] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.022197][ T7799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1073'. [ 147.135604][ T7723] XFS (loop5): Ending clean mount [ 147.299487][ T5226] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.509942][ T7820] ªªªªª: renamed from bond_slave_0 (while UP) [ 147.622437][ T7808] loop1: detected capacity change from 0 to 32768 [ 147.672131][ T7808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1077 (7808) [ 147.808532][ T7808] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.838736][ T7808] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 147.847847][ T7808] BTRFS info (device loop1): using free-space-tree [ 147.972632][ T7843] loop2: detected capacity change from 0 to 256 [ 148.101719][ T7843] FAT-fs (loop2): Directory bread(block 64) failed [ 148.121534][ T7843] FAT-fs (loop2): Directory bread(block 65) failed [ 148.194934][ T7843] FAT-fs (loop2): Directory bread(block 66) failed [ 148.390969][ T7843] FAT-fs (loop2): Directory bread(block 67) failed [ 148.393830][ T7865] loop5: detected capacity change from 0 to 512 [ 148.413051][ T7843] FAT-fs (loop2): Directory bread(block 68) failed [ 148.419612][ T7843] FAT-fs (loop2): Directory bread(block 69) failed [ 148.525507][ T7843] FAT-fs (loop2): Directory bread(block 70) failed [ 148.526708][ T7865] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 148.549618][ T7843] FAT-fs (loop2): Directory bread(block 71) failed [ 148.558537][ T7843] FAT-fs (loop2): Directory bread(block 72) failed [ 148.566784][ T7843] FAT-fs (loop2): Directory bread(block 73) failed [ 148.571211][ T7865] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 148.592108][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1100'. [ 148.822114][ T7865] EXT4-fs error (device loop5): __ext4_iget:4952: inode #15: block 1803188595: comm syz.5.1099: invalid block [ 148.868922][ T7884] loop0: detected capacity change from 0 to 512 [ 148.881747][ T7865] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.1099: couldn't read orphan inode 15 (err -117) [ 148.906648][ T5227] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.946818][ T7865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.970507][ T7886] loop3: detected capacity change from 0 to 512 [ 149.042004][ T7884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.125407][ T7886] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 149.147932][ T7886] EXT4-fs (loop3): 1 truncate cleaned up [ 149.163051][ T7886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.188032][ T5226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.209489][ T7884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 149.223677][ T7884] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.251457][ T7886] EXT4-fs error (device loop3): ext4_add_entry:2437: inode #2: comm syz.3.1108: Directory hole found for htree leaf block 0 [ 149.560289][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.630959][ T5223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 149.677680][ T7909] netlink: 'syz.2.1117': attribute type 1 has an invalid length. [ 150.029697][ T7924] netlink: 'syz.2.1122': attribute type 1 has an invalid length. [ 150.368757][ T7942] tmpfs: Bad value for 'mpol' [ 150.374103][ T7941] loop3: detected capacity change from 0 to 512 [ 150.483465][ T7941] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1128: attempt to clear invalid blocks 1 len 1 [ 150.534525][ T7941] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1128: bg 0: block 343: padding at end of block bitmap is not set [ 150.581826][ T7953] loop1: detected capacity change from 0 to 512 [ 150.633967][ T7954] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 150.677158][ T7941] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 150.692260][ T7941] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1128: invalid indirect mapped block 1819239214 (level 0) [ 150.714980][ T7941] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1128: invalid indirect mapped block 1819239214 (level 1) [ 150.749132][ T7953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.788585][ T7941] EXT4-fs (loop3): 1 truncate cleaned up [ 150.805957][ T7941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.812155][ T7953] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.956207][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.044659][ T7953] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #12: block 32: comm syz.1.1137: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 151.152479][ T7979] netlink: 203452 bytes leftover after parsing attributes in process `syz.5.1148'. [ 151.249264][ T7953] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #12: comm syz.1.1137: directory missing '.' [ 151.259307][ T7982] loop5: detected capacity change from 0 to 1024 [ 151.440992][ T5227] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.459202][ T7982] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 151.465904][ T7993] netlink: 'syz.3.1157': attribute type 1 has an invalid length. [ 151.907890][ T8011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.308235][ T5286] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.403013][ T8034] netlink: 'syz.5.1175': attribute type 4 has an invalid length. [ 152.546353][ T5286] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 152.572247][ T5286] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.620036][ T8031] loop1: detected capacity change from 0 to 8192 [ 152.630452][ T5286] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 152.915368][ T5286] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 152.927868][ T8031] loop1: p1 p2 p3 p4 [ 152.932008][ T5286] usb 3-1: Manufacturer: syz [ 152.942964][ T5286] usb 3-1: config 0 descriptor?? [ 152.948253][ T8031] loop1: p1 size 108922248 extends beyond EOD, truncated [ 152.969127][ T5286] igorplugusb 3-1:0.0: incorrect number of endpoints [ 152.989444][ T8031] loop1: p2 start 861536256 is beyond EOD, truncated [ 153.001065][ T8054] loop4: detected capacity change from 0 to 256 [ 153.024093][ T8031] loop1: p3 start 851968 is beyond EOD, truncated [ 153.052125][ T8031] loop1: p4 size 65536 extends beyond EOD, truncated [ 153.104252][ T8054] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 153.216002][ T5286] usb 3-1: USB disconnect, device number 8 [ 153.591077][ T7647] udevd[7647]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 153.616131][ T7648] udevd[7648]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 153.682781][ T8068] netlink: 'syz.5.1194': attribute type 1 has an invalid length. [ 153.736160][ T8068] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1194'. [ 154.140473][ T8086] netlink: 'syz.4.1202': attribute type 5 has an invalid length. [ 154.445273][ T8100] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1208'. [ 154.554094][ T8103] loop3: detected capacity change from 0 to 64 [ 154.586404][ T8094] loop0: detected capacity change from 0 to 4096 [ 154.618330][ T8094] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 154.645355][ T8106] netlink: 'syz.5.1209': attribute type 10 has an invalid length. [ 154.876389][ T8113] loop5: detected capacity change from 0 to 8 [ 154.936055][ T8113] SQUASHFS error: Failed to read block 0x1ec: -5 [ 154.942635][ T5286] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.964337][ T8115] netlink: 'syz.3.1214': attribute type 4 has an invalid length. [ 154.970592][ T8113] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 155.104370][ T5286] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.114836][ T5286] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.146170][ T5286] usb 2-1: config 1 has no interface number 0 [ 155.161790][ T5286] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.201682][ T5286] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.228175][ T8121] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1218'. [ 155.241218][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.269227][ T5286] usb 2-1: Product: syz [ 155.296756][ T5286] usb 2-1: Manufacturer: syz [ 155.317489][ T5286] usb 2-1: SerialNumber: syz [ 155.327752][ T8130] netlink: 'syz.0.1223': attribute type 3 has an invalid length. [ 155.335960][ T8123] binder: 8122:8123 unknown command 64 [ 155.342998][ T8123] binder: 8122:8123 ioctl c0306201 20000780 returned -22 [ 155.350188][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1220'. [ 155.370167][ T8129] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1220'. [ 155.371631][ T5286] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing [ 155.396965][ T5286] cdc_ncm 2-1:1.1: bind() failure [ 155.660088][ T5285] usb 2-1: USB disconnect, device number 7 [ 155.883910][ T8153] loop0: detected capacity change from 0 to 64 [ 155.980295][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 156.003767][ T8153] Trying to free block not in datazone [ 156.179714][ T8163] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1239'. [ 156.201420][ T8163] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1239'. [ 156.242227][ T5286] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 156.292327][ T8169] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 156.292327][ T8169] SÃȘØÈžZ§6ŸÂ' [ 156.417789][ T5286] usb 5-1: config 0 has an invalid interface number: 123 but max is 0 [ 156.436865][ T5286] usb 5-1: config 0 has no interface number 0 [ 156.470064][ T5286] usb 5-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=a0.f6 [ 156.491711][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.549271][ T5286] usb 5-1: config 0 descriptor?? [ 156.806256][ T8189] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 156.820291][ T5286] kaweth 5-1:0.123: Firmware present in device. [ 157.062019][ T5286] kaweth 5-1:0.123: Error reading configuration (-71), no net device created [ 157.071004][ T5286] kaweth 5-1:0.123: probe with driver kaweth failed with error -5 [ 157.159498][ T5286] usb 5-1: USB disconnect, device number 2 [ 157.417168][ T8214] loop2: detected capacity change from 0 to 1024 [ 157.628234][ T8214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.637211][ T8230] x_tables: unsorted entry at hook 3 [ 157.713966][ T8214] EXT4-fs warning (device loop2): ext4_empty_dir:3107: inode #11: comm syz.2.1265: directory missing '..' [ 157.869596][ T8239] netlink: 'syz.3.1276': attribute type 1 has an invalid length. [ 157.877555][ T8239] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1276'. [ 157.886963][ T8239] netlink: 'syz.3.1276': attribute type 1 has an invalid length. [ 157.928113][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.356696][ T8265] xt_ecn: cannot match TCP bits for non-tcp packets [ 159.254642][ T8288] loop5: detected capacity change from 0 to 4096 [ 159.355729][ T8317] netlink: 'syz.2.1310': attribute type 30 has an invalid length. [ 159.381290][ T8288] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 159.610348][ T8288] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 159.646901][ T8312] loop1: detected capacity change from 0 to 4096 [ 159.727064][ T8329] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.801283][ T8312] syz.1.1311: attempt to access beyond end of device [ 159.801283][ T8312] loop1: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 159.901516][ T8312] syz.1.1311: attempt to access beyond end of device [ 159.901516][ T8312] loop1: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 159.935484][ T29] audit: type=1800 audit(1727957688.601:41): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1311" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 160.052956][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1322'. [ 160.187368][ T8292] loop0: detected capacity change from 0 to 32768 [ 160.236731][ T8292] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1300 (8292) [ 160.378427][ T8292] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.391980][ T8292] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 160.418626][ T8292] BTRFS info (device loop0): using free-space-tree [ 160.420554][ T8348] loop4: detected capacity change from 0 to 256 [ 160.555691][ T8330] loop3: detected capacity change from 0 to 32768 [ 161.420165][ T8398] xt_nfacct: accounting object `syz1' does not exists [ 161.520324][ T8360] loop2: detected capacity change from 0 to 32768 [ 161.581530][ T8360] BTRFS: device /dev/loop2 (7:2) using temp-fsid 1f34a5ed-32b7-463f-80bd-70429992541e [ 161.592194][ T8360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1332 (8360) [ 161.612467][ T8360] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.623203][ T8360] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 161.631672][ T8360] BTRFS info (device loop2): using free-space-tree [ 161.674027][ T5223] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.732283][ T8419] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 162.183799][ T8436] loop3: detected capacity change from 0 to 8 [ 162.438381][ T8436] SQUASHFS error: Failed to read block 0x1ec: -5 [ 162.444913][ T8436] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 162.644164][ T5225] BTRFS info (device loop2): last unmount of filesystem 1f34a5ed-32b7-463f-80bd-70429992541e [ 162.699058][ T8455] loop0: detected capacity change from 0 to 64 [ 162.822711][ T5330] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 163.057188][ T5330] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.068917][ T5330] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.078958][ T5330] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.088537][ T5330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.124187][ T8449] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 163.134730][ T5330] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.651316][ T5286] usb 2-1: USB disconnect, device number 8 [ 163.704945][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1378'. [ 163.899905][ T8497] loop0: detected capacity change from 0 to 512 [ 164.036398][ T8497] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 164.087628][ T8497] System zones: 1-12 [ 164.123108][ T8497] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #11: comm syz.0.1379: iget: bogus i_mode (0) [ 164.179824][ T8497] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1379: couldn't read orphan inode 11 (err -117) [ 164.213244][ T8497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.297279][ T5285] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.311261][ T8515] ip6t_srh: unknown srh match flags 4000 [ 164.467399][ T5223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.476724][ T5285] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 164.486184][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.528290][ T5285] usb 4-1: config 0 descriptor?? [ 164.567740][ T5285] usb 4-1: selecting invalid altsetting 1 [ 164.584425][ T5285] flexcop_usb: set interface failed. [ 164.632018][ T5285] b2c2_flexcop_usb 4-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 164.831158][ T5288] usb 4-1: USB disconnect, device number 5 [ 164.839640][ T5330] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 165.040823][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 165.074914][ T5330] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 165.115389][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 165.148261][ T5330] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 165.233086][ T8551] loop1: detected capacity change from 0 to 1024 [ 165.254103][ T5330] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 165.274486][ T5330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.294725][ T5330] usb 5-1: Product: syz [ 165.298921][ T5330] usb 5-1: Manufacturer: syz [ 165.318143][ T5330] usb 5-1: SerialNumber: syz [ 165.386126][ T5330] usb 5-1: config 0 descriptor?? [ 165.426011][ T5330] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 165.647851][ T8567] loop2: detected capacity change from 0 to 8 [ 165.690611][ T8565] loop3: detected capacity change from 0 to 2048 [ 165.739049][ T8565] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 165.764061][ T5330] ums-isd200 5-1:0.0: probe with driver ums-isd200 failed with error -22 [ 165.799379][ T8571] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.819358][ T8565] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 147 [ 165.847489][ T5330] usb 5-1: USB disconnect, device number 3 [ 165.890844][ T8565] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 165.918894][ T8565] Remounting filesystem read-only [ 165.926411][ T8565] NILFS (loop3): error -5 truncating bmap (ino=15) [ 165.937587][ T8565] syz.3.1414: attempt to access beyond end of device [ 165.937587][ T8565] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 165.998306][ T8565] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 166.143771][ T5229] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 166.208548][ T8587] netlink: 'syz.5.1427': attribute type 8 has an invalid length. [ 166.242574][ T5285] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 166.261299][ T8587] netlink: 'syz.5.1427': attribute type 4 has an invalid length. [ 166.317521][ T8587] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1427'. [ 166.405478][ T5285] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.432435][ T5285] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 166.490035][ T5285] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 166.519498][ T8592] loop2: detected capacity change from 0 to 512 [ 166.522078][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.573759][ T8592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.579178][ T5285] usb 1-1: config 0 descriptor?? [ 166.590684][ T8584] loop1: detected capacity change from 0 to 32768 [ 166.609933][ T8595] usb usb8: usbfs: process 8595 (syz.4.1429) did not claim interface 0 before use [ 166.640195][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1430'. [ 166.664498][ T8592] EXT4-fs (loop2): orphan cleanup on readonly fs [ 166.733661][ T8584] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 166.733661][ T8584] [ 166.762075][ T5330] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.795558][ T8592] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1428: bg 0: block 248: padding at end of block bitmap is not set [ 166.825569][ T8584] ERROR: (device loop1): remounting filesystem as read-only [ 166.856231][ T8592] Quota error (device loop2): write_blk: dquota write failed [ 166.875585][ T8592] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 166.893654][ T8592] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1428: Failed to acquire dquot type 1 [ 166.920460][ T8592] EXT4-fs (loop2): 1 truncate cleaned up [ 166.932516][ T5330] usb 4-1: Using ep0 maxpacket: 16 [ 166.947878][ T8592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.959841][ T5330] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 166.970355][ T5330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.985935][ T8605] SET target dimension over the limit! [ 167.017729][ T5330] usb 4-1: Product: syz [ 167.052003][ T5330] usb 4-1: Manufacturer: syz [ 167.052879][ T8592] EXT4-fs error (device loop2): __ext4_remount:6522: comm syz.2.1428: Abort forced by user [ 167.063199][ T5330] usb 4-1: SerialNumber: syz [ 167.079938][ T5285] Bluetooth: Can't get version to change to load ram patch err [ 167.096687][ T8592] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 167.112025][ T5285] Bluetooth: Loading patch file failed [ 167.118576][ T5330] usb 4-1: config 0 descriptor?? [ 167.132098][ T5285] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 167.141559][ T5285] usb 1-1: USB disconnect, device number 6 [ 167.162800][ T5330] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 167.230032][ T8610] loop4: detected capacity change from 0 to 64 [ 167.237445][ T8592] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 167.276763][ T8592] ext4 filesystem being remounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.357882][ T5330] usb 4-1: USB disconnect, device number 6 [ 167.507031][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.609759][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1441'. [ 168.097726][ T8643] netlink: 'syz.3.1451': attribute type 3 has an invalid length. [ 168.189994][ T8643] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1451'. [ 168.200895][ T8646] bond0: entered promiscuous mode [ 168.206160][ T8646] bond0: entered allmulticast mode [ 168.702146][ T5285] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 168.872653][ T5285] usb 5-1: Using ep0 maxpacket: 32 [ 168.891670][ T5285] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 168.949517][ T5285] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 168.976568][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 169.010992][ T5285] usb 5-1: Product: syz [ 169.022016][ T5285] usb 5-1: Manufacturer: syz [ 169.026654][ T5285] usb 5-1: SerialNumber: syz [ 169.328947][ T5285] usb 5-1: config 0 descriptor?? [ 169.334677][ T8661] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.537215][ T8705] openvswitch: netlink: Actions may not be safe on all matching packets [ 169.561794][ T929] usb 5-1: USB disconnect, device number 4 [ 169.656814][ T5285] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 169.856954][ T5285] usb 6-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=67.51 [ 169.884945][ T5285] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.907915][ T5285] usb 6-1: Product: syz [ 169.920222][ T5285] usb 6-1: Manufacturer: syz [ 169.927299][ T5285] usb 6-1: SerialNumber: syz [ 169.939934][ T5285] usb 6-1: config 0 descriptor?? [ 169.955785][ T5285] usbtest 6-1:0.0: EZ-USB device [ 169.979986][ T5285] usbtest 6-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 170.159313][ T5285] usb 6-1: USB disconnect, device number 3 [ 170.235593][ T8707] loop1: detected capacity change from 0 to 32768 [ 170.332909][ T8707] add_index: next_index = 0. Resetting! [ 170.534439][ T8737] loop2: detected capacity change from 0 to 256 [ 170.562208][ T929] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 170.783752][ T929] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 170.793262][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.845057][ T929] usb 5-1: config 0 descriptor?? [ 170.878067][ T929] gspca_main: spca508-2.14.0 probing 8086:0110 [ 171.373356][ T929] gspca_spca508: reg_read err -71 [ 171.381498][ T929] gspca_spca508: reg_read err -71 [ 171.453036][ T929] gspca_spca508: reg_read err -71 [ 171.477647][ T929] gspca_spca508: reg_read err -71 [ 171.543409][ T929] gspca_spca508: reg write: error -71 [ 171.543477][ T929] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 171.601387][ T929] usb 5-1: USB disconnect, device number 5 [ 171.668267][ T8775] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.052104][ T8794] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1523'. [ 172.126592][ T8794] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 172.731655][ T8814] loop5: detected capacity change from 0 to 40427 [ 172.771972][ T8814] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 172.786459][ T8814] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 172.847605][ T8824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.928969][ T8814] F2FS-fs (loop5): Found nat_bits in checkpoint [ 173.070856][ T8814] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 173.084752][ T8814] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 173.122192][ T5288] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 173.152147][ T5286] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.172483][ T8814] fscrypt (loop5, inode 3): Error -61 getting encryption context [ 173.275055][ T5288] usb 1-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 173.288615][ T5288] usb 1-1: config 0 has an invalid interface number: 82 but max is 35 [ 173.359968][ T5288] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 173.416258][ T5288] usb 1-1: config 0 has no interface number 0 [ 173.446244][ T5288] usb 1-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 173.474905][ T8826] loop4: detected capacity change from 0 to 32768 [ 173.482166][ T5286] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 173.491242][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.502445][ T5286] usb 4-1: config 0 descriptor?? [ 173.517887][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.606988][ T5288] usb 1-1: config 0 descriptor?? [ 173.617573][ T5288] gspca_main: sunplus-2.14.0 probing 08ca:0104 [ 173.772345][ T8826] ea_get: invalid extended attribute [ 173.777940][ T8826] ffff88805992e898: 04 00 00 00 .... [ 174.010143][ T5286] [drm] vendor descriptor length:b9 data:b9 07 38 29 08 17 2f 84 c0 cb 01 [ 174.019131][ T5286] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 174.020596][ T5288] gspca_sunplus: reg_r err -71 [ 174.042478][ T5288] sunplus 1-1:0.82: probe with driver sunplus failed with error -71 [ 174.052826][ T5288] usb 1-1: USB disconnect, device number 7 [ 174.072111][ T5286] [drm:udl_init] *ERROR* Selecting channel failed [ 174.137660][ T5286] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 174.166209][ T5286] [drm] Initialized udl on minor 2 [ 174.186393][ T5286] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 174.203687][ T5286] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 174.346778][ T929] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 174.376261][ T929] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 174.394922][ T929] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 174.410812][ T5286] usb 4-1: USB disconnect, device number 7 [ 174.556664][ T8870] loop4: detected capacity change from 0 to 256 [ 174.560951][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1559'. [ 174.747246][ T8872] loop1: detected capacity change from 0 to 1024 [ 174.782701][ T8874] No such timeout policy "syz1" [ 175.077238][ T8849] loop2: detected capacity change from 0 to 32768 [ 175.105851][ T8849] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1549 (8849) [ 175.203468][ T8849] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 175.251152][ T8849] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 175.319098][ T8849] BTRFS info (device loop2): disk space caching is enabled [ 175.350059][ T8849] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 175.490997][ T8911] netlink: 'syz.4.1579': attribute type 1 has an invalid length. [ 175.537970][ T8916] xt_TCPMSS: Only works on TCP SYN packets [ 175.854074][ T8928] loop0: detected capacity change from 0 to 512 [ 175.878310][ T8938] IPv6: Can't replace route, no match found [ 175.885135][ T8926] loop5: detected capacity change from 0 to 64 [ 175.930389][ T8849] BTRFS info (device loop2): rebuilding free space tree [ 175.987528][ T8928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.042888][ T8928] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.096882][ T8849] BTRFS info (device loop2): disabling free space tree [ 176.135471][ T8849] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.183845][ T8849] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.359564][ T5223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.491805][ T8849] BTRFS info (device loop2): balance: start -f -susage=15..1,drange=4398046511104..0,limit=34359738386,stripes=4..255 [ 176.526853][ T8849] BTRFS info (device loop2): balance: ended with status: 0 [ 176.798969][ T5225] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 177.105172][ T8934] loop3: detected capacity change from 0 to 32768 [ 177.112621][ T8934] btrfs: Deprecated parameter 'usebackuproot' [ 177.118798][ T8934] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 177.148951][ T8934] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1583 (8934) [ 177.192924][ T8934] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.203723][ T8934] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 177.246195][ T8934] BTRFS info (device loop3): using free-space-tree [ 177.428462][ T8998] kAFS: No cell specified [ 177.541074][ T8934] BTRFS info (device loop3): rebuilding free space tree [ 177.808457][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1613'. [ 177.820337][ T9014] loop4: detected capacity change from 0 to 8 [ 177.847928][ T5229] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.852357][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1598'. [ 177.883710][ T9014] SQUASHFS error: Failed to read block 0x4e8: -5 [ 177.909929][ T9014] SQUASHFS error: Failed to read block 0x4de: -5 [ 177.959292][ T9014] SQUASHFS error: Failed to read block 0x4de: -5 [ 177.989827][ T9014] SQUASHFS error: Failed to read block 0x4de: -5 [ 177.994366][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1598'. [ 178.024854][ T29] audit: type=1800 audit(1727957706.691:42): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1612" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 178.250240][ T9027] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 178.722544][ T5286] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 178.828156][ T9050] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.1630'. [ 178.932601][ T5286] usb 6-1: Using ep0 maxpacket: 8 [ 178.948535][ T5286] usb 6-1: config 0 has an invalid interface number: 15 but max is 0 [ 178.956901][ T5286] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.016359][ T5286] usb 6-1: config 0 has no interface number 0 [ 179.059211][ T9057] loop3: detected capacity change from 0 to 8 [ 179.062358][ T5286] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 179.090178][ T5286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.146505][ T5286] usb 6-1: Product: syz [ 179.150825][ T5286] usb 6-1: Manufacturer: syz [ 179.160187][ T9057] SQUASHFS error: Unable to read directory block [629:26] [ 179.173942][ T5286] usb 6-1: SerialNumber: syz [ 179.213499][ T5286] usb 6-1: config 0 descriptor?? [ 179.429457][ T5286] imon 6-1:0.15: unable to register, err -19 [ 179.473055][ T5286] usb 6-1: USB disconnect, device number 4 [ 179.772617][ T9076] usb usb3: usbfs: process 9076 (syz.4.1643) did not claim interface 6 before use [ 179.777504][ T9041] loop0: detected capacity change from 0 to 32768 [ 179.886008][ T9041] read_mapping_page failed! [ 179.895640][ T9041] ialloc: diAlloc returned -5! [ 180.048253][ T9083] loop1: detected capacity change from 0 to 256 [ 180.184159][ T9083] FAT-fs (loop1): Directory bread(block 64) failed [ 180.232034][ T9083] FAT-fs (loop1): Directory bread(block 65) failed [ 180.252511][ T9083] FAT-fs (loop1): Directory bread(block 66) failed [ 180.287029][ T9083] FAT-fs (loop1): Directory bread(block 67) failed [ 180.322030][ T9083] FAT-fs (loop1): Directory bread(block 68) failed [ 180.367442][ T9083] FAT-fs (loop1): Directory bread(block 69) failed [ 180.391112][ T9083] FAT-fs (loop1): Directory bread(block 70) failed [ 180.411749][ T9083] FAT-fs (loop1): Directory bread(block 71) failed [ 180.438974][ T9083] FAT-fs (loop1): Directory bread(block 72) failed [ 180.476184][ T9083] FAT-fs (loop1): Directory bread(block 73) failed [ 180.520930][ T9061] loop2: detected capacity change from 0 to 32768 [ 180.538615][ T9097] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1654'. [ 180.574611][ T9097] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 180.617891][ T9100] loop0: detected capacity change from 0 to 256 [ 180.653386][ T5288] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 180.749825][ T9100] ./file1: Can't lookup blockdev [ 180.805359][ T9105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1657'. [ 180.851208][ T9100] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 180.888159][ T9100] FAT-fs (loop0): Filesystem has been set read-only [ 180.895331][ T9100] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 180.909052][ T9100] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 180.947973][ T29] audit: type=1800 audit(1727957709.611:43): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1649" name="file1" dev="loop0" ino=1048620 res=0 errno=0 [ 180.995326][ T9100] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 181.050737][ T9100] erofs: (device erofs): erofs_read_superblock: cannot read erofs superblock [ 181.102784][ T5288] usb 6-1: config 0 has an invalid interface number: 199 but max is 0 [ 181.111545][ T5288] usb 6-1: config 0 has no interface number 0 [ 181.118142][ T5288] usb 6-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice=9e.c3 [ 181.128528][ T5288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.150468][ T5288] usb 6-1: config 0 descriptor?? [ 181.162343][ T5288] gspca_main: spca501-2.14.0 probing 0506:00df [ 181.196045][ T9117] loop3: detected capacity change from 0 to 1024 [ 181.293727][ T9122] overlayfs: conflicting options: userxattr,redirect_dir=on [ 181.311215][ T9117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.519452][ T9133] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1670'. [ 181.571072][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.715638][ T5288] gspca_spca501: reg write: error -71 [ 181.738418][ T5288] spca501 6-1:0.199: Reg write failed for 0x00,0x02,0x01 [ 181.779788][ T5288] spca501 6-1:0.199: probe with driver spca501 failed with error -22 [ 181.841666][ T5288] usb 6-1: USB disconnect, device number 5 [ 182.012436][ T9149] netlink: zone id is out of range [ 182.434881][ T5285] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.517812][ T9175] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1690'. [ 182.538129][ T9175] openvswitch: netlink: Missing key (keys=400040, expected=2000) [ 182.637839][ T5285] usb 5-1: config 29 has an invalid descriptor of length 0, skipping remainder of the config [ 182.698618][ T5285] usb 5-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 182.720408][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.743713][ T9181] loop3: detected capacity change from 0 to 64 [ 182.755687][ T5285] usb 5-1: Product: syz [ 182.759901][ T5285] usb 5-1: Manufacturer: syz [ 182.782171][ T5285] usb 5-1: SerialNumber: syz [ 183.049076][ T5285] qmi_wwan 5-1:29.0: skipping garbage [ 183.073382][ T5285] qmi_wwan 5-1:29.0: probe with driver qmi_wwan failed with error -22 [ 183.090150][ T5285] usb 5-1: USB disconnect, device number 6 [ 183.142109][ T2628] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 183.332095][ T2628] usb 6-1: Using ep0 maxpacket: 32 [ 183.345557][ T2628] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.376279][ T2628] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 183.403401][ T2628] usb 6-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 183.427195][ T2628] usb 6-1: config 0 interface 0 has no altsetting 1 [ 183.434532][ T9195] veth2: entered allmulticast mode [ 183.450758][ T2628] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 183.461775][ T2628] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.491276][ T2628] usb 6-1: Product: syz [ 183.511019][ T2628] usb 6-1: Manufacturer: syz [ 183.540272][ T2628] usb 6-1: SerialNumber: syz [ 183.548208][ T2628] usb 6-1: config 0 descriptor?? [ 184.082584][ T2628] usb 6-1: USB disconnect, device number 6 [ 184.134030][ T9186] loop1: detected capacity change from 0 to 40427 [ 184.147593][ T9186] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 184.147652][ T9186] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 184.196909][ T9186] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.407940][ T9186] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 184.438844][ T9186] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.495523][ T9186] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 185.008445][ T9244] loop4: detected capacity change from 0 to 2048 [ 185.263964][ T9244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.402511][ T9260] QAT: Invalid ioctl 21531 [ 185.531752][ T5222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.645373][ T5243] Bluetooth: hci2: command 0x0406 tx timeout [ 185.653344][ T5243] Bluetooth: hci3: command 0x0406 tx timeout [ 185.659382][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 185.665749][ T5243] Bluetooth: hci0: command 0x0406 tx timeout [ 185.672002][ T5244] Bluetooth: hci4: command 0x0406 tx timeout [ 185.672050][ T5244] Bluetooth: hci5: command 0x0406 tx timeout [ 185.744337][ T9280] Unsupported ieee802154 address type: 0 [ 185.789859][ T9272] loop3: detected capacity change from 0 to 256 [ 185.811519][ T9272] exfat: Deprecated parameter 'utf8' [ 185.947720][ T9272] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbd5ad3fb, utbl_chksum : 0xe619d30d) [ 185.981162][ T9291] loop0: detected capacity change from 0 to 1024 [ 186.022042][ T9288] loop2: detected capacity change from 0 to 2048 [ 186.120807][ T9291] syz.0.1744: attempt to access beyond end of device [ 186.120807][ T9291] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 186.252217][ T9301] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.322063][ T9288] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=32, inode=15564440312192434187, rec_len=11150, name_len=126 [ 186.429832][ T9288] Remounting filesystem read-only [ 186.777254][ T9317] netlink: 'syz.5.1756': attribute type 2 has an invalid length. [ 186.797501][ T9316] veth3: entered allmulticast mode [ 186.898430][ T9317] netlink: 'syz.5.1756': attribute type 1 has an invalid length. [ 186.934625][ T9317] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1756'. [ 186.936376][ T9319] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1758'. [ 187.794021][ T2628] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 187.975392][ T9342] loop1: detected capacity change from 0 to 64 [ 188.022024][ T2628] usb 6-1: Using ep0 maxpacket: 16 [ 188.034048][ T2628] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 188.064505][ T2628] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 188.084407][ T2628] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.134529][ T2628] usb 6-1: Product: syz [ 188.138759][ T2628] usb 6-1: Manufacturer: syz [ 188.188649][ T2628] usb 6-1: SerialNumber: syz [ 188.209877][ T2628] usb 6-1: config 0 descriptor?? [ 188.274075][ T2628] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 188.305606][ T2628] usb 6-1: Detected FT232R [ 188.690675][ T2628] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 188.698076][ T2628] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 188.709311][ T2628] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 188.728309][ T2628] usb 6-1: USB disconnect, device number 7 [ 188.740152][ T2628] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 188.750400][ T2628] ftdi_sio 6-1:0.0: device disconnected [ 189.812136][ T9377] delete_channel: no stack [ 190.627478][ T9400] loop4: detected capacity change from 0 to 512 [ 190.639136][ T9400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.164187][ T9419] loop2: detected capacity change from 0 to 4096 [ 192.201338][ T9419] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 192.291016][ T9419] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 192.405126][ T9403] loop0: detected capacity change from 0 to 32768 [ 192.434930][ T9400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 192.447667][ T9400] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.539678][ T9400] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 192.648995][ T9400] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 192.709569][ T9425] loop5: detected capacity change from 0 to 512 [ 192.722638][ T9400] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1797: Failed to acquire dquot type 0 [ 192.736480][ T5225] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 192.901056][ T9425] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1806: bad orphan inode 15 [ 192.992148][ T9425] ext4_test_bit(bit=14, block=5) = 0 [ 192.998437][ T9425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.036815][ T9397] loop1: detected capacity change from 0 to 32768 [ 193.063116][ T5222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 193.113815][ T9397] btrfs: Deprecated parameter 'usebackuproot' [ 193.119936][ T9397] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 193.232124][ T9397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1794 (9397) [ 193.383443][ T9397] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.439723][ T9397] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 193.454150][ T5226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.502621][ T9397] BTRFS info (device loop1): using free-space-tree [ 193.564267][ T9397] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 193.598633][ T9397] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 193.662405][ T9397] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 193.757189][ T9397] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 193.783766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.792654][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.805441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.817967][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.823292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.841482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.853826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.860643][ T9397] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 193.866169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.866562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.899312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.911746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.924112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.984044][ T9397] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 193.984340][ T9397] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 194.062397][ T2628] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 194.084347][ T9397] BTRFS error (device loop1): open_ctree failed [ 194.285385][ T2628] usb 6-1: Using ep0 maxpacket: 32 [ 194.338854][ T2628] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 194.408383][ T2628] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.472769][ T2628] usb 6-1: config 0 descriptor?? [ 194.515019][ T2628] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 194.921204][ T2628] gspca_nw80x: reg_r err -71 [ 194.940911][ T2628] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 194.998490][ T2628] usb 6-1: USB disconnect, device number 8 [ 195.738215][ T9476] netlink: 'syz.0.1825': attribute type 21 has an invalid length. [ 195.965540][ T9482] netlink: 'syz.2.1828': attribute type 3 has an invalid length. [ 196.030517][ T9482] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1828'. [ 196.097623][ T9482] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 196.163053][ T9482] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 196.172852][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1831'. [ 197.675465][ T9511] loop2: detected capacity change from 0 to 2048 [ 197.823074][ T9518] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.941238][ T5234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 197.956625][ T5234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 197.972087][ T5234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 197.980277][ T5234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 197.988043][ T5234] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 197.995483][ T5234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 198.022890][ T9511] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 198.162034][ T9511] Remounting filesystem read-only [ 198.240270][ T9511] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 198.310432][ T9511] NILFS (loop2): error -5 truncating bmap (ino=16) [ 198.607221][ T5225] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 198.791899][ C0] net_ratelimit: 10124 callbacks suppressed [ 198.791922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.810162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.822444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.834762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.847037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.859428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.871752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.884067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.896373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.908638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.935011][ T9534] loop5: detected capacity change from 0 to 1024 [ 199.390139][ T9519] chnl_net:caif_netlink_parms(): no params data found [ 199.418372][ T2939] hfsplus: b-tree write err: -5, ino 4 [ 199.647275][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1854'. [ 200.038682][ T9519] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.111947][ T5234] Bluetooth: hci6: command tx timeout [ 200.129642][ T9519] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.175526][ T9519] bridge_slave_0: entered allmulticast mode [ 200.202491][ T9556] netlink: 'syz.2.1858': attribute type 2 has an invalid length. [ 200.210251][ T9556] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1858'. [ 200.263194][ T9519] bridge_slave_0: entered promiscuous mode [ 200.281944][ T29] audit: type=1326 audit(1727957728.911:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.5.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97cf7dff9 code=0x7ffc0000 [ 200.359085][ T9519] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.422029][ T9519] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.477809][ T29] audit: type=1326 audit(1727957728.911:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.5.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97cf7dff9 code=0x7ffc0000 [ 200.522294][ T9519] bridge_slave_1: entered allmulticast mode [ 200.529405][ T9519] bridge_slave_1: entered promiscuous mode [ 200.703550][ T29] audit: type=1326 audit(1727957728.941:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.5.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fd97cf7dff9 code=0x7ffc0000 [ 200.902525][ T9566] netlink: 'syz.2.1863': attribute type 10 has an invalid length. [ 200.925721][ T29] audit: type=1326 audit(1727957728.941:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.5.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97cf7dff9 code=0x7ffc0000 [ 200.966286][ T9566] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1863'. [ 201.052311][ T9566] batman_adv: batadv0: Adding interface: virt_wifi0 [ 201.110511][ T9566] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.137546][ T29] audit: type=1326 audit(1727957728.941:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.5.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97cf7dff9 code=0x7ffc0000 [ 201.322065][ T9566] batman_adv: batadv0: Interface activated: virt_wifi0 [ 201.380728][ T9519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.496954][ T9519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.809887][ T9519] team0: Port device team_slave_0 added [ 201.877389][ T9519] team0: Port device team_slave_1 added [ 202.188473][ T5234] Bluetooth: hci6: command tx timeout [ 202.323982][ T9519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.383434][ T9519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.595960][ T9519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.750686][ T9519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.815361][ T9519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.029566][ T9519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.116580][ T9592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1876'. [ 203.191690][ T9598] loop0: detected capacity change from 0 to 1764 [ 203.347786][ T9598] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 203.556911][ T9519] hsr_slave_0: entered promiscuous mode [ 203.711044][ T9519] hsr_slave_1: entered promiscuous mode [ 203.802174][ C0] net_ratelimit: 15423 callbacks suppressed [ 203.802197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.804899][ T9519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.808493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.840091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.852358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.864655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.876992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.889395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.901711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.914019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.926408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.985241][ T9519] Cannot create hsr debugfs directory [ 204.279049][ T5234] Bluetooth: hci6: command tx timeout [ 207.699568][ T2939] sched: DL replenish lagged too much [ 208.812168][ C0] net_ratelimit: 19996 callbacks suppressed [ 208.812196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.813213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 208.818479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.832335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 208.842548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.855684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 208.866885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.879812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 208.890897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.903691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 213.822516][ C0] net_ratelimit: 20428 callbacks suppressed [ 213.822542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.822656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 213.828747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.841648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 213.852825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.865525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 213.876901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.889493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 213.900591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.913472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 215.607880][ T5234] Bluetooth: hci6: command tx timeout [ 218.832104][ C0] net_ratelimit: 20130 callbacks suppressed [ 218.832131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.832410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 218.838330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.851615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 218.862754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.875490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 218.886726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.899587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 218.910670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.923547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 223.842129][ C0] net_ratelimit: 19938 callbacks suppressed [ 223.842155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.842663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 223.848433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.861391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 223.872652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.885733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 223.896558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.909187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 223.920284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.933124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 228.851880][ C0] net_ratelimit: 19832 callbacks suppressed [ 228.851908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.852285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 228.858232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.870887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 228.882075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.894934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 228.906094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.922688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 228.930147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.942810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 233.862192][ C0] net_ratelimit: 19864 callbacks suppressed [ 233.862218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.862219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 233.862489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.869213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 233.880476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.893302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 233.904474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.917221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 233.928259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.941351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 238.872158][ C0] net_ratelimit: 20273 callbacks suppressed [ 238.872185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.872641][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 238.878370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.891332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 238.902493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.915217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 238.926489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.939047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 238.950190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.963110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 243.881910][ C1] net_ratelimit: 20531 callbacks suppressed [ 243.881936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 243.882058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.888951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 243.900238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.913050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 243.924013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.936919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 243.948072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.960828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 243.972065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.891991][ C0] net_ratelimit: 20458 callbacks suppressed [ 248.892017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.892073][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 248.898275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.910900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 248.922268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.934833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 248.946008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.959034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 248.970047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.982727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 253.901966][ C0] net_ratelimit: 20528 callbacks suppressed [ 253.901992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.902248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 253.908321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.921029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 253.932155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.944999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 253.956214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.968849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 253.980186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.992760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 258.911919][ C0] net_ratelimit: 20349 callbacks suppressed [ 258.911945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.912559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 258.918145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.931068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 258.942200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.954919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 258.966159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.978850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 258.989910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.002850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 263.922100][ C1] net_ratelimit: 19650 callbacks suppressed [ 263.922126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 263.922482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.929206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 263.940395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.953278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 263.964447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.977226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 263.988454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.001208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 264.012199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.932117][ C0] net_ratelimit: 19603 callbacks suppressed [ 268.932144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.933173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 268.938324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.951854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 268.962449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.975126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 268.986402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.999056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 269.010105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.023043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 273.941927][ C0] net_ratelimit: 19841 callbacks suppressed [ 273.941954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.942099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 273.948144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.961090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 273.972241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.984967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 273.996226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.009390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 274.019922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.032856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 278.951836][ C1] net_ratelimit: 20512 callbacks suppressed [ 278.951863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 278.951981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.958915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 278.970177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.983112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 278.994272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.007024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 279.018204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.030878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 279.041983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.961904][ C1] net_ratelimit: 20472 callbacks suppressed [ 283.961930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 283.961975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.968961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 283.980279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.992955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 284.004111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.017024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 284.028190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.040886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 284.052196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.971928][ C0] net_ratelimit: 20441 callbacks suppressed [ 288.971954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.972378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 288.978279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.991009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 289.002066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.014979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 289.026122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.039114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 289.050091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.062847][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 293.981943][ C0] net_ratelimit: 20452 callbacks suppressed [ 293.981969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.982384][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 293.988151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.001173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 294.012346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.025014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 294.036283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.048895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 294.060052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.073818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 298.991972][ C0] net_ratelimit: 19821 callbacks suppressed [ 298.991999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.992396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 298.998272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.010889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 299.022292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.034874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 299.045969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.059035][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 299.070086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.082865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 304.001833][ C0] net_ratelimit: 19671 callbacks suppressed [ 304.001859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.002210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 304.008176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.020740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 304.031956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.044733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 304.055958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.068652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 304.079949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.092524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 309.011926][ C0] net_ratelimit: 19721 callbacks suppressed [ 309.011951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.012444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 309.018198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.031017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 309.042250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.054855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 309.065978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.078814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 309.090006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.102735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 314.022035][ C0] net_ratelimit: 19669 callbacks suppressed [ 314.022061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.022580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 314.028318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.041144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 314.052355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.065005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 314.076303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.088874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 314.100048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.113101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 317.591802][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 317.598806][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9601/1:b..l [ 317.607356][ C1] rcu: (detected by 1, t=10503 jiffies, g=21973, q=950 ncpus=2) [ 317.615096][ C1] task:syz.2.1880 state:R running task stack:21952 pid:9601 tgid:9599 ppid:5225 flags:0x00004006 [ 317.627831][ C1] Call Trace: [ 317.631130][ C1] [ 317.634439][ C1] __schedule+0x1895/0x4b30 [ 317.639009][ C1] ? __pfx___schedule+0x10/0x10 [ 317.643906][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.649575][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 317.655609][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 317.660938][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 317.666092][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 317.671876][ C1] irqentry_exit+0x5e/0x90 [ 317.676333][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.682358][ C1] RIP: 0010:lock_release+0x658/0xa30 [ 317.687721][ C1] Code: 3c 3b 00 74 08 4c 89 f7 e8 a5 1b 8e 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 317.707365][ C1] RSP: 0018:ffffc90004136960 EFLAGS: 00000206 [ 317.713468][ C1] RAX: 0000000000000001 RBX: 1ffff92000826d3e RCX: ffffc90004136903 [ 317.721465][ C1] RDX: 0000000000000001 RSI: ffffffff8c0adc40 RDI: ffffffff8c60f860 [ 317.729460][ C1] RBP: ffffc90004136a90 R08: ffffffff901ce5ef R09: 1ffffffff2039cbd [ 317.737457][ C1] R10: dffffc0000000000 R11: fffffbfff2039cbe R12: 1ffff92000826d38 [ 317.745452][ C1] R13: 0000000000000246 R14: ffffc900041369f0 R15: dffffc0000000000 [ 317.753473][ C1] ? percpu_ref_tryget+0x14/0x180 [ 317.758545][ C1] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 317.764736][ C1] ? __pfx_lock_release+0x10/0x10 [ 317.769835][ C1] get_mem_cgroup_from_objcg+0x1aa/0x1d0 [ 317.775500][ C1] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 317.781256][ C1] obj_cgroup_uncharge_pages+0x85/0x210 [ 317.786836][ C1] ? __pfx_obj_cgroup_uncharge_pages+0x10/0x10 [ 317.793121][ C1] __memcg_kmem_uncharge_page+0xe9/0x290 [ 317.798793][ C1] free_unref_page+0x1fc/0xf20 [ 317.803595][ C1] vfree+0x186/0x2e0 [ 317.807534][ C1] hash_net6_destroy+0x81/0x240 [ 317.812432][ C1] ip_set_create+0x14b1/0x1900 [ 317.817256][ C1] ? __pfx_ip_set_create+0x10/0x10 [ 317.822408][ C1] ? trace_contention_end+0x3c/0x120 [ 317.827751][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.833417][ C1] ? nfnetlink_rcv_msg+0x225/0x1180 [ 317.838644][ C1] nfnetlink_rcv_msg+0xbee/0x1180 [ 317.843696][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.849358][ C1] ? nfnetlink_rcv_msg+0x225/0x1180 [ 317.854605][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 317.860290][ C1] ? __netlink_deliver_tap+0x54d/0x7c0 [ 317.865788][ C1] ? netlink_deliver_tap+0x19d/0x1b0 [ 317.871107][ C1] ? netlink_unicast+0x7c4/0x990 [ 317.876076][ C1] ? netlink_sendmsg+0x8e4/0xcb0 [ 317.881055][ C1] ? __sock_sendmsg+0x223/0x270 [ 317.885941][ C1] ? ____sys_sendmsg+0x52a/0x7e0 [ 317.890904][ C1] ? __sys_sendmsg+0x292/0x380 [ 317.895864][ C1] ? do_syscall_64+0xf3/0x230 [ 317.900561][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.907119][ C1] netlink_rcv_skb+0x1e5/0x430 [ 317.911926][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 317.917413][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.922753][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.928418][ C1] ? apparmor_capable+0x13b/0x1b0 [ 317.933483][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.939145][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.944807][ C1] ? security_capable+0x7e/0x2d0 [ 317.949776][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.955532][ C1] nfnetlink_rcv+0x297/0x2ab0 [ 317.960236][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.965899][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 317.971661][ C1] ? __dev_queue_xmit+0x2da/0x3e80 [ 317.976804][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.982468][ C1] ? __dev_queue_xmit+0x1764/0x3e80 [ 317.987692][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.993353][ C1] ? kasan_save_track+0x51/0x80 [ 317.998235][ C1] ? do_syscall_64+0xf3/0x230 [ 318.002935][ C1] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 318.008076][ C1] ? __dev_queue_xmit+0x2da/0x3e80 [ 318.013220][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 318.018639][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.024297][ C1] ? ref_tracker_free+0x643/0x7e0 [ 318.029345][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.035007][ C1] ? __asan_memcpy+0x40/0x70 [ 318.039713][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 318.045108][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.050773][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.056440][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.061686][ C1] ? skb_clone+0x240/0x390 [ 318.066133][ C1] ? __pfx_lock_release+0x10/0x10 [ 318.071201][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 318.076776][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.082022][ C1] netlink_unicast+0x7f8/0x990 [ 318.086920][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 318.092238][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.097899][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.103562][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.109220][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.114876][ C1] ? __check_object_size+0x48e/0x900 [ 318.120196][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 318.125000][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.130408][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.136328][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 318.141298][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.146959][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.152275][ C1] __sock_sendmsg+0x223/0x270 [ 318.156996][ C1] ____sys_sendmsg+0x52a/0x7e0 [ 318.161814][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.167147][ C1] __sys_sendmsg+0x292/0x380 [ 318.171772][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 318.176958][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.183365][ C1] ? do_syscall_64+0x100/0x230 [ 318.188159][ C1] ? do_syscall_64+0xb6/0x230 [ 318.192999][ C1] do_syscall_64+0xf3/0x230 [ 318.197536][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.203470][ C1] RIP: 0033:0x7fdd5d97dff9 [ 318.207905][ C1] RSP: 002b:00007fdd5e71c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.216348][ C1] RAX: ffffffffffffffda RBX: 00007fdd5db35f80 RCX: 00007fdd5d97dff9 [ 318.224341][ C1] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 318.232429][ C1] RBP: 00007fdd5d9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 318.240605][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.248597][ C1] R13: 0000000000000000 R14: 00007fdd5db35f80 R15: 00007ffd7d474468 [ 318.256609][ C1] [ 318.259658][ C1] rcu: rcu_preempt kthread starved for 9711 jiffies! g21973 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 318.270789][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 318.280776][ C1] rcu: RCU grace-period kthread stack dump: [ 318.286680][ C1] task:rcu_preempt state:R running task stack:25560 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 318.298484][ C1] Call Trace: [ 318.301784][ C1] [ 318.304738][ C1] __schedule+0x1895/0x4b30 [ 318.309304][ C1] ? __pfx___schedule+0x10/0x10 [ 318.314197][ C1] ? __pfx_lock_release+0x10/0x10 [ 318.319258][ C1] ? __asan_memset+0x23/0x50 [ 318.323878][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 318.329728][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.336132][ C1] ? schedule+0x90/0x320 [ 318.340409][ C1] schedule+0x14b/0x320 [ 318.344605][ C1] schedule_timeout+0x1be/0x310 [ 318.349924][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 318.355331][ C1] ? __pfx_process_timeout+0x10/0x10 [ 318.360661][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.366323][ C1] ? prepare_to_swait_event+0x330/0x350 [ 318.371918][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 318.376801][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 318.382061][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 318.388249][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 318.393566][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 318.399505][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.405167][ C1] ? finish_swait+0xd4/0x1e0 [ 318.409843][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 318.414466][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 318.419692][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 318.425719][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.431411][ C1] ? __kthread_parkme+0x169/0x1d0 [ 318.436478][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 318.441707][ C1] kthread+0x2f2/0x390 [ 318.445803][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 318.451028][ C1] ? __pfx_kthread+0x10/0x10 [ 318.455648][ C1] ret_from_fork+0x4d/0x80 [ 318.460101][ C1] ? __pfx_kthread+0x10/0x10 [ 318.464719][ C1] ret_from_fork_asm+0x1a/0x30 [ 318.469534][ C1] [ 318.472569][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 318.478902][ C1] Sending NMI from CPU 1 to CPUs 0: [ 318.484126][ C0] NMI backtrace for cpu 0 [ 318.484140][ C0] CPU: 0 UID: 0 PID: 5286 Comm: kworker/0:6 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 318.484166][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 318.484181][ C0] Workqueue: events nsim_dev_trap_report_work [ 318.484213][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 318.484249][ C0] Code: 44 0a 20 e9 35 61 5b 0a 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 14 25 c0 d7 03 00 65 8b 05 c0 f7 6e 7e 25 00 01 ff 00 74 [ 318.484268][ C0] RSP: 0018:ffffc90000006340 EFLAGS: 00000246 [ 318.484287][ C0] RAX: 0000000000000100 RBX: 0000000000000000 RCX: ffff88802d5f8000 [ 318.484303][ C0] RDX: ffff88802d5f8000 RSI: 0000000000000001 RDI: 0000000000000000 [ 318.484318][ C0] RBP: 000000000000001d R08: ffffffff8a689ce0 R09: ffffc900000066b0 [ 318.484335][ C0] R10: ffffc900000066a0 R11: fffff52000000ca2 R12: dffffc0000000000 [ 318.484353][ C0] R13: 0000000000000003 R14: ffff888032a054b8 R15: 0000000000000001 [ 318.484372][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 318.484391][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.484407][ C0] CR2: 0000555588010808 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 318.484425][ C0] Call Trace: [ 318.484433][ C0] [ 318.484442][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 318.484470][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 318.484510][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 318.484538][ C0] ? nmi_handle+0x2a/0x5a0 [ 318.484574][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 318.484606][ C0] ? nmi_handle+0x151/0x5a0 [ 318.484631][ C0] ? nmi_handle+0x2a/0x5a0 [ 318.484665][ C0] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 318.484698][ C0] ? default_do_nmi+0x63/0x160 [ 318.484727][ C0] ? exc_nmi+0x123/0x1f0 [ 318.484755][ C0] ? end_repeat_nmi+0xf/0x53 [ 318.484786][ C0] ? rt6_score_route+0xa0/0x380 [ 318.484814][ C0] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 318.484847][ C0] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 318.484882][ C0] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 318.484914][ C0] [ 318.484922][ C0] [ 318.484929][ C0] rt6_score_route+0xa0/0x380 [ 318.484957][ C0] find_match+0x1cb/0xc10 [ 318.484982][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.485011][ C0] __find_rr_leaf+0x275/0x8e0 [ 318.485045][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 318.485068][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 318.485106][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.485133][ C0] fib6_table_lookup+0x413/0xbb0 [ 318.485176][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 318.485209][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.485238][ C0] ip6_pol_route+0x273/0x15d0 [ 318.485269][ C0] ? ip6_pol_route+0x198/0x15d0 [ 318.485299][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 318.485327][ C0] ? br_nf_dev_queue_xmit+0x4f8/0x22e0 [ 318.485363][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.485390][ C0] fib6_rule_lookup+0x58c/0x790 [ 318.485419][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 318.485443][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 318.485474][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 318.485508][ C0] ? __pfx_validate_chain+0x10/0x10 [ 318.485533][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.485558][ C0] ? __pfx_lock_release+0x10/0x10 [ 318.485595][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.485622][ C0] ip6_route_input+0x859/0xd90 [ 318.485658][ C0] ? mark_lock+0x9a/0x360 [ 318.485686][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 318.485734][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.485758][ C0] ? ip6_rcv_finish_core+0x20f/0x410 [ 318.485787][ C0] ip6_rcv_finish+0x144/0x180 [ 318.485808][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 318.485831][ C0] ip_sabotage_in+0x205/0x290 [ 318.485857][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 318.485881][ C0] nf_hook_slow+0xc5/0x220 [ 318.485914][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 318.485934][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 318.485956][ C0] NF_HOOK+0x29e/0x450 [ 318.485976][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.486000][ C0] ? skb_orphan+0xae/0xd0 [ 318.486023][ C0] ? NF_HOOK+0x9a/0x450 [ 318.486044][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 318.486067][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 318.486094][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.486118][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 318.486140][ C0] __netif_receive_skb+0x1ea/0x650 [ 318.486172][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 318.486208][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 318.486239][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.486267][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.486294][ C0] ? netif_receive_skb+0x131/0x890 [ 318.486321][ C0] ? netif_receive_skb+0x131/0x890 [ 318.486350][ C0] netif_receive_skb+0x1e8/0x890 [ 318.486377][ C0] ? __pfx_lock_release+0x10/0x10 [ 318.486414][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 318.486441][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.486469][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.486493][ C0] ? br_netif_receive_skb+0x130/0x1a0 [ 318.486522][ C0] NF_HOOK+0xa0/0x400 [ 318.486547][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 318.486573][ C0] ? NF_HOOK+0xfc/0x400 [ 318.486596][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 318.486623][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 318.486660][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.486687][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.486710][ C0] ? br_pass_frame_up+0x297/0x430 [ 318.486739][ C0] br_handle_frame_finish+0x18ed/0x1fe0 [ 318.486778][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 318.486803][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 318.486836][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 318.486867][ C0] ? ip6t_do_table+0x205/0x18a0 [ 318.486897][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 318.486931][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.486957][ C0] ? ip6t_do_table+0x205/0x18a0 [ 318.486989][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.487013][ C0] ? nf_hook_slow+0x175/0x220 [ 318.487044][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 318.487071][ C0] br_nf_hook_thresh+0x474/0x590 [ 318.487101][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 318.487126][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 318.487154][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.487179][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.487203][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.487226][ C0] ? skb_push+0x97/0x100 [ 318.487256][ C0] br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 318.487284][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 318.487317][ C0] br_nf_pre_routing_ipv6+0x379/0x770 [ 318.487345][ C0] ? br_nf_pre_routing_ipv6+0x41e/0x770 [ 318.487371][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 318.487401][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 318.487429][ C0] ? br_nf_pre_routing+0x70e/0x1470 [ 318.487452][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 318.487476][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.487501][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 318.487526][ C0] br_handle_frame+0x9ff/0x1530 [ 318.487558][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 318.487586][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 318.487611][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 318.487657][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.487684][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 318.487709][ C0] __netif_receive_skb_core+0x13ea/0x4570 [ 318.487746][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 318.487776][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.487801][ C0] ? mark_lock+0x9a/0x360 [ 318.487826][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 318.487859][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.487883][ C0] ? mark_lock+0x9a/0x360 [ 318.487907][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.487931][ C0] ? __lock_acquire+0x1384/0x2050 [ 318.487977][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.488005][ C0] __netif_receive_skb+0x12f/0x650 [ 318.488036][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 318.488072][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 318.488099][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 318.488135][ C0] ? __pfx_lock_release+0x10/0x10 [ 318.488172][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 318.488214][ C0] process_backlog+0x662/0x15b0 [ 318.488248][ C0] ? process_backlog+0x33b/0x15b0 [ 318.488285][ C0] ? __pfx_process_backlog+0x10/0x10 [ 318.488315][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 318.488353][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.488392][ C0] __napi_poll+0xcd/0x490 [ 318.488422][ C0] net_rx_action+0x89b/0x1240 [ 318.488468][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 318.488499][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 318.488556][ C0] handle_softirqs+0x2c7/0x980 [ 318.488592][ C0] ? do_softirq+0x11b/0x1e0 [ 318.488624][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 318.488672][ C0] do_softirq+0x11b/0x1e0 [ 318.488701][ C0] [ 318.488709][ C0] [ 318.488718][ C0] ? __pfx_do_softirq+0x10/0x10 [ 318.488749][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 318.488788][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.488815][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.488838][ C0] ? rcu_is_watching+0x15/0xb0 [ 318.488866][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 318.488899][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 318.488926][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 318.488958][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 318.488990][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.489014][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 318.489045][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 318.489081][ C0] ? process_scheduled_works+0x976/0x1850 [ 318.489115][ C0] process_scheduled_works+0xa65/0x1850 [ 318.489167][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 318.489206][ C0] ? assign_work+0x364/0x3d0 [ 318.489241][ C0] worker_thread+0x870/0xd30 [ 318.489277][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.489303][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.489327][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 318.489363][ C0] ? __kthread_parkme+0x169/0x1d0 [ 318.489400][ C0] ? __pfx_worker_thread+0x10/0x10 [ 318.489434][ C0] kthread+0x2f2/0x390 [ 318.489456][ C0] ? __pfx_worker_thread+0x10/0x10 [ 318.489490][ C0] ? __pfx_kthread+0x10/0x10 [ 318.489513][ C0] ret_from_fork+0x4d/0x80 [ 318.489548][ C0] ? __pfx_kthread+0x10/0x10 [ 318.489571][ C0] ret_from_fork_asm+0x1a/0x30 [ 318.489615][ C0] [ 319.031949][ C0] net_ratelimit: 18254 callbacks suppressed [ 319.031972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.035455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 319.040500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.048220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 319.051742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.058274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 319.062286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.068783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 319.073663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.079267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 322.285281][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.301703][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.125775][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.142268][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.041932][ C1] net_ratelimit: 19579 callbacks suppressed [ 324.041958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 324.042251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.048937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 324.060192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.072869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 324.084170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.096764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 324.107870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.120645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:0f:96:16:fe:15, vlan:0) [ 324.131961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)