last executing test programs: 10.681459165s ago: executing program 2 (id=478): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="8d0000008000"}) 9.945272463s ago: executing program 2 (id=484): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 9.721264333s ago: executing program 2 (id=487): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x0, 0x0) 9.558688182s ago: executing program 2 (id=489): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="00af268263b121dc03d7d9b98b9cdb76841d31005b31fdfd141b652968fbeae7aac982a517703dc5950f6728aecf5ec337b119ffd66d0a02970718ba573db352906385cece74366e628b6a775c9a6f6fff046416c6240e39a647186c4cf0b360bd17d4cdbd912dc61fd24e6f17d8"], 0x1, 0x152, &(0x7f00000007c0)="$eJzs0E1LKnEUx/Hf3Bnlcq/eBzKwFia0aEjMacRatdBIEtKBwk0rwSYKFCOhXBrRrkXQ1oXlVnwLlrWxRgh7E23cBS0n/o7Rw67977MZ5nsOh2FWlnoqgoAMx3KpuLdvlsvmVnDdSCc3ntrtuOhuAD8/zZ39qziwI54KMDgCRL7xAtu7BXMuXyqI90EcUAEkfjtdg7P7SzSf0+YhSaKp00Bn3Gn6aO9ji47apAIk/r7fsy+AGXHv/9s94BlApRZquZCxbNu2xfeepEJTY5LTm3cZq5sKzwbMUz050fD4ZWTN20skhvPHSDf8EGk1+z0rvWakjV5U1xeimqJpsb5xb6Vi1TMoq54DYPPLPTf8ASULHEvA+XA2uJa8ADr1F6P4Z7E++tfVQzkISJVaPud3NXK+fz8gq5BARERERERERERERERERET0Xa8BAAD//wFeZcY=") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) 9.136084771s ago: executing program 2 (id=495): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0xe, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x472, &(0x7f0000000ec0)="$eJzs3M9vFFUcAPDvTH8AArYi/uCHWkVj44+WAioHD2o08YCJiR40npq2EGShhtZECFEwBk/GmHg3Hv0XPOnFGL2YeNW7ISGmF8CLa2Z3pt1ddre03e0i+/kkA+/tvNn3vvvm7b6Zt9sA+tZY9k8SsSMi/oiIkWq2vsBY9b/rSxdmbixdmEmiXH7r76RS7trShZmiaHHc9jwznkaknyWxr0m9C+fOn5oulebO5vnJxdMfTC6cO//sydPTJ+ZOzJ05dPTokcNTLzx/6LnmDR9eW5xZm67t/Xh+/57X3/3qjWNf1MXfEEeHjLXb+US53OHqemtnTToZ7GFDWJOBiMi6a6gy/kdiIFY6byRe+7SnjQO6qlwul7e33n2xDNzBkqjPG/LQL4oP+uz6t9gaJwEvdW/60XNXX65eAGVxX8+36p7BSPMyQw3Xt500FhHvXPznm2yL7tyHAACo80M2/3mm2fwvjftryt2drw2NRsQ9EbErIu6NiN0RcV9EpewDEfFg5chYnjutpnGR5Ob5T3plQwGuIpv/vZivbdXP/5YjGB3Iczsr8Q8lx0+W5g7mr8l4DG3J8lNt6vjx1d+/bLWvdv6XbVn9xVwwb8eVwS31x8xOL05vJOZaVy9F7B0sYq2NP1leCUgiYk9E7F1nHSef+m5/q32rx99GB9aZyt9GPFnt/4uxVB9/IWm/Pjm5NUpzByeLs+Jmv/x2+c1W9W8o/g7I+v+upuf/cvyjSe167cLa67j85+ctr2nWe/4PJ29X0sUy8EfTi4tnpyKGk2PVRtc+fmjl2CJflM/iHz/QfPzvipVXYl9EZCfxQxHxcEQ8krf90Yh4LCIOtIn/51cef7/pjvT26P/ZNfX/SmI4Gh9pnhg49dP3dZWOriTz+G+07/8jldR4/sitvP/dSrvWdzYDAADA/08aETsiSSeW02k6MVH9vvzuiLQ0v7D49PH5D8/MVn8jMBpDaXGna6TmfuhUfllfzV+KiOpXC4r9h/P7xl8PbKvkJ2bmS7O9Dh763PYW4z/z10CvWwd0nd9rQf8y/qF/NRv/W3vQDmDz+fyH/tVk/G/rRTuAzdfs8/+T9of82622AJurYfxb9oM+svbr/1/f60pDgE3XcvzfyX/5B6hw/x/60sK2WP1H8m0TxTOt8/DbJZFEREefMIZui7g2nignTTs30l43TKKbid6+LwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTKfwEAAP//rCvcPQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0) 8.429929479s ago: executing program 2 (id=502): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 7.915177368s ago: executing program 32 (id=502): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 5.178376022s ago: executing program 1 (id=534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) 4.844804501s ago: executing program 3 (id=538): mmap(&(0x7f00002f9000/0x4000)=nil, 0x4000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 4.844547831s ago: executing program 1 (id=539): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 4.6656371s ago: executing program 1 (id=540): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x122a000, 0x1000, 0x21}, 0x20) 3.949682429s ago: executing program 1 (id=544): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) 3.669092928s ago: executing program 4 (id=547): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x800010, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6e6f696e6c696e655f64656e7472792c70726a6a71756f74613d6163746976655f6c6f67733d342c6a71666d743d76667376312c6e6f696e6c696e655f646174612c6e6f5f686561702c636865636b706f696e743d64697361626c652c66617374626f6f742c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c00ac19de274efe59cc5334a78992c33160f2bb29d00ec19e86b62e10e9d54427a6838f1aff0ce27327b707feafcce74234d4abe846a4a55fd26c5918e2ac7a6aa2fd027fd0b881927cefce65dd3d73b0b9185466a67b", @ANYRES32], 0x21, 0x552d, &(0x7f0000000a00)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) 2.725000816s ago: executing program 4 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.213924985s ago: executing program 4 (id=552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001040)='rpm_return_int\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x12000000, '.\x00'}}) 2.207236585s ago: executing program 0 (id=553): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.881145355s ago: executing program 0 (id=554): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, "90337f00ff7f000000000000ff1eff00"}) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff) 1.756091474s ago: executing program 0 (id=555): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x4004}) ppoll(&(0x7f0000000340)=[{r1}], 0x1, 0x0, 0x0, 0x0) 1.430738043s ago: executing program 4 (id=556): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000340), 0x41, 0x43d, &(0x7f0000000900)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/104, 0x68) 1.373233863s ago: executing program 1 (id=557): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x5, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.103704312s ago: executing program 1 (id=558): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000080)="4000a2") 1.006137782s ago: executing program 4 (id=559): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000001c0)={[{@barrier}, {@gid}, {@barrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {@force}, {@nls={'nls', 0x3d, 'iso8859-9'}}, {}]}, 0x1, 0x6e4, &(0x7f0000000240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20800, 0x0, 0x1, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 782.700302ms ago: executing program 3 (id=560): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000180)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1, 0x400, 0x0, 0x0) 782.436572ms ago: executing program 0 (id=561): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r0, 0x319, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) 635.976912ms ago: executing program 4 (id=562): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400, 0x80, 0x0) 628.737592ms ago: executing program 0 (id=563): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 516.441981ms ago: executing program 3 (id=564): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000340), r1) 386.455351ms ago: executing program 3 (id=565): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc}, {@barrier_val}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") chdir(&(0x7f0000000540)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xf8) getdents64(r0, 0x0, 0x22) 343.813471ms ago: executing program 0 (id=566): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000025c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000597000/0x4000)=nil, 0x4000, 0xa000, 0x7, &(0x7f000045f000/0xa000)=nil) 201.11128ms ago: executing program 3 (id=567): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) 0s ago: executing program 3 (id=568): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") io_setup(0x9, &(0x7f00000001c0)=0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x147042, 0x60) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x18, 0x8, 0x5, r1, 0x0, 0x0, 0x7}]) kernel console output (not intermixed with test programs): : unexpected cc 0x0c38 length: 249 > 2 [ 67.979728][ T4257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.987999][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.996121][ T4257] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.004822][ T4263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.020790][ T4257] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.028294][ T4263] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.100109][ T4258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.109128][ T4258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.119797][ T4258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.545718][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 68.597345][ T4248] chnl_net:caif_netlink_parms(): no params data found [ 68.660159][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 68.750460][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 68.786811][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 68.817795][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.827901][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.839261][ T4254] device bridge_slave_0 entered promiscuous mode [ 68.882623][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.892474][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.904258][ T4254] device bridge_slave_1 entered promiscuous mode [ 68.968014][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.979757][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.989326][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.998393][ T4248] device bridge_slave_0 entered promiscuous mode [ 69.008367][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.017139][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.026210][ T4250] device bridge_slave_0 entered promiscuous mode [ 69.047009][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.057858][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.067318][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.077151][ T4248] device bridge_slave_1 entered promiscuous mode [ 69.088883][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.096778][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.106612][ T4250] device bridge_slave_1 entered promiscuous mode [ 69.207183][ T4254] team0: Port device team_slave_0 added [ 69.215832][ T4248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.229277][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.241986][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.254109][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.264331][ T4256] device bridge_slave_0 entered promiscuous mode [ 69.272456][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.281274][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.291591][ T4249] device bridge_slave_0 entered promiscuous mode [ 69.305518][ T4254] team0: Port device team_slave_1 added [ 69.317427][ T4248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.330768][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.359779][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.369729][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.378529][ T4256] device bridge_slave_1 entered promiscuous mode [ 69.388045][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.396687][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.405999][ T4249] device bridge_slave_1 entered promiscuous mode [ 69.475461][ T4248] team0: Port device team_slave_0 added [ 69.485474][ T4250] team0: Port device team_slave_0 added [ 69.515240][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.527571][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.565018][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.586027][ T4248] team0: Port device team_slave_1 added [ 69.595422][ T4250] team0: Port device team_slave_1 added [ 69.604675][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.627768][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.641472][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.650985][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.689493][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.719041][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.733487][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.793145][ T4249] team0: Port device team_slave_0 added [ 69.805234][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.815013][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.849055][ T4248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.862780][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.872433][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.903525][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.928919][ T4249] team0: Port device team_slave_1 added [ 69.938396][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.947473][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.981200][ T4248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.997362][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.006774][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.039790][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 70.047685][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.067379][ T4256] team0: Port device team_slave_0 added [ 70.110754][ T4256] team0: Port device team_slave_1 added [ 70.119234][ T4264] Bluetooth: hci2: command 0x0409 tx timeout [ 70.128523][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 70.129252][ T4264] Bluetooth: hci3: command 0x0409 tx timeout [ 70.156445][ T4254] device hsr_slave_0 entered promiscuous mode [ 70.164973][ T4254] device hsr_slave_1 entered promiscuous mode [ 70.198975][ T4264] Bluetooth: hci4: command 0x0409 tx timeout [ 70.211308][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.219395][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.252288][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.266603][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.274656][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.306630][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.336844][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.346092][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.379837][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.425641][ T4250] device hsr_slave_0 entered promiscuous mode [ 70.433162][ T4250] device hsr_slave_1 entered promiscuous mode [ 70.441784][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.450882][ T4250] Cannot create hsr debugfs directory [ 70.458787][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.467501][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.501004][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.548730][ T4248] device hsr_slave_0 entered promiscuous mode [ 70.560956][ T4248] device hsr_slave_1 entered promiscuous mode [ 70.570462][ T4248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.580021][ T4248] Cannot create hsr debugfs directory [ 70.669515][ T4249] device hsr_slave_0 entered promiscuous mode [ 70.676605][ T4249] device hsr_slave_1 entered promiscuous mode [ 70.686011][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.694808][ T4249] Cannot create hsr debugfs directory [ 70.810147][ T4256] device hsr_slave_0 entered promiscuous mode [ 70.818023][ T4256] device hsr_slave_1 entered promiscuous mode [ 70.826395][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.835091][ T4256] Cannot create hsr debugfs directory [ 71.088854][ T4254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.121870][ T4254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.151325][ T4254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.175215][ T4254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.221290][ T4250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.234554][ T4250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.251578][ T4250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.265263][ T4250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.342202][ T4249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.389411][ T4249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.403478][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.411268][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.440060][ T4249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.454368][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.475658][ T4249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.497350][ T4248] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.512286][ T4248] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.525906][ T4248] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.552719][ T4248] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.606732][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.622999][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.647696][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.673455][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.684660][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.696620][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.706392][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.721770][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.740914][ T4256] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.756413][ T4256] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.769392][ T4256] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.808232][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.822484][ T4256] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.846444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.861293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.873422][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.881371][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.903150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.928303][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.960373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.981791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.994746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.004210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.014352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.028610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.041854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.067013][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.087532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.099313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.118568][ T4254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.130669][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 72.141044][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.171257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.192117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.199368][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 72.207476][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 72.210420][ T4262] Bluetooth: hci3: command 0x041b tx timeout [ 72.238279][ T4248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.256716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.268340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.278279][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.288290][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.297332][ T4262] Bluetooth: hci4: command 0x041b tx timeout [ 72.302280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.326743][ T4248] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.356225][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.369096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.378635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.396109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.417724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.432480][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.442385][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.454572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.506072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.518213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.530374][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.538874][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.549658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.561762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.573379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.583188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.592514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.629021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.643783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.656814][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.666357][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.678541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.689611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.720802][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.746595][ T4250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.761710][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.790506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.800894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.810526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.821291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.833213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.849615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.860495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.870829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.881705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.894562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.906313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.918075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.927972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.938033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.957019][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.977179][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.015048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.028299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.044953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.056112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.071801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.086775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.097723][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.105509][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.115128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.124427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.134752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.155861][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.173120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.193184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.238114][ T4248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.261850][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.280160][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.297541][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.311451][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.320746][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.331562][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.342950][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.354983][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.363328][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.374436][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.386410][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.396318][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.406922][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.415072][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.425388][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.436243][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.446794][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.457377][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.491393][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.503324][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.515324][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.527733][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.540174][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.549681][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.558511][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.568574][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.580177][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.596619][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.609874][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.625755][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.637265][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.652511][ T4254] device veth0_vlan entered promiscuous mode [ 73.684266][ T4254] device veth1_vlan entered promiscuous mode [ 73.712074][ T4256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.726182][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.759603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.775568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.797426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.809711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.817896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.826571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.838097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.846620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.856242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.866160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.875698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.900065][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.922596][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.937573][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.961273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.970867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.982721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.064731][ T4254] device veth0_macvtap entered promiscuous mode [ 74.105478][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.116652][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.147662][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.164245][ T4254] device veth1_macvtap entered promiscuous mode [ 74.199334][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 74.230102][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.265551][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.278053][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.279199][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 74.292193][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.294829][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 74.313137][ T4258] Bluetooth: hci2: command 0x040f tx timeout [ 74.314339][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.354131][ T4250] device veth0_vlan entered promiscuous mode [ 74.362793][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 74.385590][ T4248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.405844][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.426280][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.438362][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.451414][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.476825][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.493393][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.503134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.513447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.528067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.538867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.553501][ T4250] device veth1_vlan entered promiscuous mode [ 74.573158][ T4254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.583728][ T4254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.593410][ T4254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.603877][ T4254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.630241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.640799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.652120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.716407][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.725377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.735797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.747997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.761287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.769656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.784309][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.795404][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.812400][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.844931][ T4250] device veth0_macvtap entered promiscuous mode [ 74.905252][ T4250] device veth1_macvtap entered promiscuous mode [ 74.919013][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.931828][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.943175][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.961404][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.998313][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.011988][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.031571][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.043485][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.056313][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.072217][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.084657][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.097766][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.112188][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.173671][ T4248] device veth0_vlan entered promiscuous mode [ 75.205761][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.227368][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.245419][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.258332][ T4248] device veth1_vlan entered promiscuous mode [ 75.287713][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.299614][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.308533][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.321111][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.338427][ T4250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.350947][ T4250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.364468][ T4250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.378017][ T4250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.394202][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.405755][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.447761][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.450847][ T4256] device veth0_vlan entered promiscuous mode [ 75.461250][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.476256][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.490803][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.502598][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.522888][ T4248] device veth0_macvtap entered promiscuous mode [ 75.541848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.552545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.563779][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.567048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.590288][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.594536][ T4248] device veth1_macvtap entered promiscuous mode [ 75.627016][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.641658][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.655309][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.668044][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.685456][ T4256] device veth1_vlan entered promiscuous mode [ 75.716869][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.732014][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.744204][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.760632][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.777046][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.825271][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.848315][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.863547][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.874412][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.889595][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.901590][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.914208][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.928818][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.941230][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.984679][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.003729][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.040099][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.052338][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.062084][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.073721][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.089903][ T4248] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.101217][ T4248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.112960][ T4248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.126082][ T4248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.147290][ T4249] device veth0_vlan entered promiscuous mode [ 76.223211][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.249395][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.262322][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.279124][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 76.300462][ T4256] device veth0_macvtap entered promiscuous mode [ 76.314904][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.359048][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 76.359079][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 76.368494][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 76.407025][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.432077][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.443605][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 76.462778][ T4256] device veth1_macvtap entered promiscuous mode [ 76.521912][ T4337] ipt_CLUSTERIP: Please specify destination IP [ 76.525871][ T126] cfg80211: failed to load regulatory.db [ 76.607784][ T4249] device veth1_vlan entered promiscuous mode [ 76.637944][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.643723][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.666063][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.679315][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.685821][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.710140][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.732161][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.752576][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.772956][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.860579][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.875770][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.888154][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.907875][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.919640][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.934122][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.950103][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.962785][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.989535][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.011661][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.026857][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.038756][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.047045][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.062444][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.074268][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.096853][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.110606][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.156453][ T4249] device veth0_macvtap entered promiscuous mode [ 77.219987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.234104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.257623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.270322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.289712][ T4249] device veth1_macvtap entered promiscuous mode [ 77.309966][ T4256] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.348968][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.356325][ T4256] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.389404][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.426842][ T4256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.437706][ T4256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.478305][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.493770][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.515349][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.530132][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.544061][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.563737][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.586438][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.611727][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.631699][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.647116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.658338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.677230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.750793][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.766190][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.790999][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.828714][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.848816][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.868923][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.888767][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.904878][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.957956][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.983255][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.014524][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.108634][ T4249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.144921][ T4249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.187448][ T4346] loop2: detected capacity change from 0 to 32768 [ 78.218934][ T4249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.252896][ T4249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.315145][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.367897][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.432581][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.463050][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.488630][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.563613][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.570790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.600549][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.692725][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.745738][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.788945][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.843477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.044662][ T4363] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 79.044662][ T4363] The task syz.0.1 (4363) triggered the difference, watch for misbehavior. [ 79.404142][ T4354] loop3: detected capacity change from 0 to 32768 [ 79.500165][ T4354] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4354) [ 79.587015][ T4354] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 79.622971][ T4354] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 79.645480][ T4354] BTRFS info (device loop3): setting nodatacow, compression disabled [ 79.674652][ T4354] BTRFS info (device loop3): setting datacow [ 79.704374][ T4354] BTRFS info (device loop3): doing ref verification [ 79.724189][ T4354] BTRFS info (device loop3): force clearing of disk cache [ 79.755503][ T4354] BTRFS info (device loop3): turning off barriers [ 79.772552][ T952] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.815687][ T4354] BTRFS info (device loop3): enabling ssd optimizations [ 79.861553][ T4354] BTRFS info (device loop3): using spread ssd allocation scheme [ 79.913682][ T4354] BTRFS info (device loop3): using free space tree [ 79.945163][ T27] audit: type=1326 audit(1740760078.418:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfad8d169 code=0x7ffc0000 [ 79.992573][ T4375] loop0: detected capacity change from 0 to 512 [ 80.010127][ T952] usb 5-1: Using ep0 maxpacket: 16 [ 80.022649][ T27] audit: type=1326 audit(1740760078.458:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4cfad8d169 code=0x7ffc0000 [ 80.054325][ T27] audit: type=1326 audit(1740760078.458:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4cfad8d1a3 code=0x7ffc0000 [ 80.084371][ T27] audit: type=1326 audit(1740760078.458:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4cfad8bc1f code=0x7ffc0000 [ 80.095513][ T952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.130228][ T952] usb 5-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 80.143777][ T952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.171729][ T952] usb 5-1: config 0 descriptor?? [ 80.229706][ T4375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.236136][ T27] audit: type=1326 audit(1740760078.468:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4cfad8d1f7 code=0x7ffc0000 [ 80.275761][ T27] audit: type=1326 audit(1740760078.468:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cfad8bad0 code=0x7ffc0000 [ 80.310660][ T27] audit: type=1326 audit(1740760078.468:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4cfad8cd6b code=0x7ffc0000 [ 80.352265][ T27] audit: type=1326 audit(1740760078.488:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4cfad8bdca code=0x7ffc0000 [ 80.467210][ T27] audit: type=1326 audit(1740760078.488:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4cfad8bdca code=0x7ffc0000 [ 80.541727][ T4354] BTRFS info (device loop3): rebuilding free space tree [ 80.642038][ T27] audit: type=1326 audit(1740760078.498:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4cfad8b9d7 code=0x7ffc0000 [ 80.673271][ T952] logitech-djreceiver 0003:046D:C539.0001: unknown main item tag 0x0 [ 80.757239][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 80.838466][ T952] logitech-djreceiver 0003:046D:C539.0001: hidraw0: USB HID v0.05 Device [HID 046d:c539] on usb-dummy_hcd.4-1/input0 [ 81.266585][ T4303] usb 5-1: USB disconnect, device number 2 [ 81.298327][ T4248] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.723237][ T4407] loop2: detected capacity change from 0 to 512 [ 81.748886][ T4407] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.797665][ T4407] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.939138][ T4407] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.033183][ T4407] EXT4-fs (loop2): 1 truncate cleaned up [ 82.057706][ T4407] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 82.119315][ T4415] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 82.236581][ T4407] EXT4-fs error (device loop2): ext4_xattr_block_find:1828: inode #15: comm syz.2.23: corrupted xattr block 33 [ 82.257585][ T4423] loop4: detected capacity change from 0 to 1024 [ 82.332398][ T4415] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.355419][ T4397] loop0: detected capacity change from 0 to 40427 [ 82.365489][ T4415] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.387477][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 82.390661][ T4415] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.419048][ T4415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.432770][ T4397] F2FS-fs (loop0): invalid crc value [ 82.443685][ T4415] usb 4-1: Product: syz [ 82.448991][ T4415] usb 4-1: Manufacturer: syz [ 82.455226][ T4415] usb 4-1: SerialNumber: syz [ 82.462054][ T4397] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.515417][ T4314] hfsplus: b-tree write err: -5, ino 4 [ 82.610143][ T4397] F2FS-fs (loop0): Start checkpoint disabled! [ 82.669319][ T4397] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 82.686288][ T4415] usb 4-1: 0:2 : does not exist [ 82.704735][ T4415] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 82.807263][ T4435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.30'. [ 82.840308][ T4415] usb 4-1: USB disconnect, device number 2 [ 82.871307][ T4397] ======================================================= [ 82.871307][ T4397] WARNING: The mand mount option has been deprecated and [ 82.871307][ T4397] and is ignored by this kernel. Remove the mand [ 82.871307][ T4397] option from the mount to silence this warning. [ 82.871307][ T4397] ======================================================= [ 82.969798][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 82.999065][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 83.061236][ T4314] kworker/u4:6: attempt to access beyond end of device [ 83.061236][ T4314] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 83.148937][ T4442] capability: warning: `syz.2.32' uses deprecated v2 capabilities in a way that may be insecure [ 84.016585][ T4462] loop0: detected capacity change from 0 to 4096 [ 84.064812][ T4464] loop4: detected capacity change from 0 to 4096 [ 84.078781][ T4462] ntfs: volume version 3.1. [ 84.118170][ T4464] ntfs: volume version 3.1. [ 84.901834][ T4460] loop3: detected capacity change from 0 to 32768 [ 84.961564][ T4460] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.41 (4460) [ 85.037058][ T4474] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.388682][ C1] sched: RT throttling activated [ 85.391874][ T4460] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 85.497991][ T4460] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 85.510013][ T4468] loop2: detected capacity change from 0 to 131072 [ 85.526160][ T4460] BTRFS info (device loop3): force zlib compression, level 3 [ 85.535271][ T4468] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 85.552138][ T4468] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 85.564342][ T4460] BTRFS info (device loop3): force clearing of disk cache [ 85.575449][ T4460] BTRFS info (device loop3): setting nodatasum [ 85.582725][ T4460] BTRFS info (device loop3): use zlib compression, level 3 [ 85.591759][ T4468] F2FS-fs (loop2): invalid crc value [ 85.600352][ T4460] BTRFS info (device loop3): allowing degraded mounts [ 85.609168][ T4460] BTRFS info (device loop3): enabling disk space caching [ 85.617813][ T4460] BTRFS info (device loop3): disk space caching is enabled [ 85.654068][ T4468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 85.725040][ T4468] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 85.734325][ T4468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 85.889224][ T4460] BTRFS info (device loop3): enabling ssd optimizations [ 85.910035][ T4468] F2FS-fs (loop2): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 85.952230][ T4460] BTRFS info (device loop3): rebuilding free space tree [ 85.982959][ T4460] BTRFS info (device loop3): disabling free space tree [ 86.006756][ T4476] loop4: detected capacity change from 0 to 32768 [ 86.015044][ T4460] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.055950][ T4460] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.064672][ T4480] loop1: detected capacity change from 0 to 32768 [ 86.221598][ T4480] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 86.304308][ T4460] BTRFS info (device loop3): balance: start -f -s [ 86.401400][ T4460] BTRFS info (device loop3): relocating block group 1048576 flags system [ 86.552808][ T4250] ocfs2: Unmounting device (7,1) on (node local) [ 86.648581][ T4460] BTRFS info (device loop3): balance: ended with status: 0 [ 86.816059][ T4488] loop0: detected capacity change from 0 to 32768 [ 86.842685][ T4488] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 86.868759][ T4488] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 86.971246][ T4488] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 87.027414][ T4412] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 87.054618][ T4412] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 87.075733][ T4509] loop2: detected capacity change from 0 to 2048 [ 87.126792][ T4248] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 87.207924][ T4509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.235403][ T4516] loop1: detected capacity change from 0 to 512 [ 87.311875][ T4516] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.335318][ T4412] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 280ms [ 87.378352][ T4412] gfs2: fsid=syz:syz.0: jid=0: Done [ 87.408522][ T4488] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 87.473217][ T4516] EXT4-fs (loop1): 1 truncate cleaned up [ 87.504883][ T4516] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 87.552860][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 87.616002][ T4516] EXT4-fs error (device loop1): ext4_xattr_block_find:1828: inode #15: comm syz.1.62: corrupted xattr block 33 [ 87.795361][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 87.954269][ T4529] loop0: detected capacity change from 0 to 4096 [ 87.993149][ T4529] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 88.538151][ T4535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 88.601589][ T4535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 89.017960][ T4527] loop2: detected capacity change from 0 to 40427 [ 89.062227][ T4527] F2FS-fs (loop2): invalid crc value [ 89.072490][ T4539] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.101263][ T4527] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.231559][ T4539] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.256084][ T4527] F2FS-fs (loop2): Start checkpoint disabled! [ 89.297858][ T4527] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 89.383803][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 89.383818][ T27] audit: type=1326 audit(1740760087.858:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8e58d169 code=0x7ffc0000 [ 89.426267][ T4539] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.443651][ T4543] loop1: detected capacity change from 0 to 512 [ 89.490432][ T27] audit: type=1326 audit(1740760087.908:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8a8e58d169 code=0x7ffc0000 [ 89.528788][ T4543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.546102][ T9] kworker/u4:0: attempt to access beyond end of device [ 89.546102][ T9] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 89.587849][ T27] audit: type=1326 audit(1740760087.908:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a8e58d1a3 code=0x7ffc0000 [ 89.615038][ T27] audit: type=1326 audit(1740760087.908:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8a8e58bc1f code=0x7ffc0000 [ 89.642425][ T27] audit: type=1326 audit(1740760087.918:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8a8e58d1f7 code=0x7ffc0000 [ 89.670013][ T27] audit: type=1326 audit(1740760087.918:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a8e58bad0 code=0x7ffc0000 [ 89.702117][ T27] audit: type=1326 audit(1740760087.918:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a8e58cd6b code=0x7ffc0000 [ 89.786802][ T27] audit: type=1326 audit(1740760087.948:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8a8e58bdca code=0x7ffc0000 [ 89.822720][ T4539] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.867761][ T27] audit: type=1326 audit(1740760087.948:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8a8e58bdca code=0x7ffc0000 [ 89.911380][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 89.928123][ T27] audit: type=1326 audit(1740760087.948:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8a8e58b9d7 code=0x7ffc0000 [ 90.196421][ T4539] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.230411][ T4554] netlink: 132 bytes leftover after parsing attributes in process `syz.1.63'. [ 90.288022][ T4539] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.344378][ T4539] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.392016][ T4539] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.510516][ T4558] loop1: detected capacity change from 0 to 2048 [ 90.585810][ T4558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 90.696034][ T4571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 90.728853][ T4571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 90.818264][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 90.908784][ T4415] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 90.999086][ T4568] loop2: detected capacity change from 0 to 32768 [ 91.010165][ T4568] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.64 (4568) [ 91.026773][ T4568] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 91.039766][ T4568] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 91.050322][ T4568] BTRFS info (device loop2): force zlib compression, level 3 [ 91.060389][ T4568] BTRFS info (device loop2): force clearing of disk cache [ 91.070775][ T4568] BTRFS info (device loop2): setting nodatasum [ 91.077570][ T4568] BTRFS info (device loop2): use zlib compression, level 3 [ 91.087083][ T4568] BTRFS info (device loop2): allowing degraded mounts [ 91.096442][ T4568] BTRFS info (device loop2): enabling disk space caching [ 91.106862][ T4568] BTRFS info (device loop2): disk space caching is enabled [ 91.121665][ T4415] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.137448][ T4415] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 91.144724][ T4568] BTRFS info (device loop2): enabling ssd optimizations [ 91.152828][ T4415] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.174598][ T4568] BTRFS info (device loop2): rebuilding free space tree [ 91.176907][ T4415] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 91.203109][ T4568] BTRFS info (device loop2): disabling free space tree [ 91.204780][ T4415] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 91.225377][ T4568] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 91.250524][ T4568] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 91.268460][ T4415] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 91.285086][ T4415] usb 1-1: Manufacturer: syz [ 91.291712][ T4415] usb 1-1: config 0 descriptor?? [ 91.363619][ T4568] BTRFS info (device loop2): balance: start -f -s [ 91.380838][ T4568] BTRFS info (device loop2): relocating block group 1048576 flags system [ 91.447493][ T4568] BTRFS info (device loop2): balance: ended with status: 0 [ 91.628923][ T4415] rc_core: IR keymap rc-hauppauge not found [ 91.641458][ T4415] Registered IR keymap rc-empty [ 91.658885][ T4415] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.701211][ T4415] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.708905][ T4254] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 91.750192][ T4415] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 91.803751][ T4592] loop3: detected capacity change from 0 to 2048 [ 91.844477][ T4415] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 91.946557][ T4592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.958071][ T4415] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.048768][ T4415] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.088787][ T4415] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.180531][ T4415] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.234224][ T4415] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.288884][ T4415] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.341733][ T4415] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.388987][ T4415] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.449109][ T4415] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.508781][ T4415] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.568843][ T4415] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 92.591336][ T4612] netlink: 'syz.1.74': attribute type 4 has an invalid length. [ 92.625605][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 92.639925][ T4415] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 92.668046][ T4415] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 92.695583][ T4415] usb 1-1: USB disconnect, device number 2 [ 93.894896][ T4632] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.078747][ T4517] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.147045][ T4632] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.279830][ T4517] usb 5-1: Using ep0 maxpacket: 32 [ 94.298361][ T4517] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 94.328529][ T4517] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 94.371936][ T4517] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 94.400047][ T4517] usb 5-1: config 1 has no interface number 0 [ 94.417198][ T4517] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.446119][ T4517] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 94.485375][ T4517] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 94.511833][ T4517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.529816][ T4637] loop3: detected capacity change from 0 to 32768 [ 94.573429][ T4517] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 94.654228][ T4632] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.770498][ T4632] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.777952][ T4517] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 94.958140][ T4632] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.986992][ T4632] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.018537][ T4632] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.055227][ T4632] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.203506][ T4647] loop3: detected capacity change from 0 to 1024 [ 95.227386][ T4517] usb 5-1: USB disconnect, device number 3 [ 95.238964][ T4517] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 95.313318][ T4652] loop0: detected capacity change from 0 to 2048 [ 95.345939][ T4647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.406883][ T4652] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.456607][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 95.602133][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 95.616694][ T4663] Illegal XDP return value 4294967274 on prog (id 15) dev N/A, expect packet loss! [ 96.630166][ T4677] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.887499][ T4677] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.008298][ T4677] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.111350][ T4677] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.258625][ T4677] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.316774][ T4677] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.362313][ T4677] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.385897][ T4677] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.103595][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.302520][ T4718] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.308785][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 98.337025][ T4700] loop1: detected capacity change from 0 to 32768 [ 98.343013][ T14] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 98.364341][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.379140][ T14] usb 5-1: config 0 descriptor?? [ 98.482182][ T4718] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.484615][ T4700] XFS (loop1): Mounting V5 Filesystem [ 98.601492][ T14] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 98.621515][ T4718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.622530][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.706340][ T14] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 98.715056][ T4700] XFS (loop1): Ending clean mount [ 98.731880][ T4714] loop0: detected capacity change from 0 to 32768 [ 98.747707][ T14] usb 5-1: media controller created [ 98.764320][ T4718] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.764710][ T4700] XFS (loop1): Quotacheck needed: Please wait. [ 98.796330][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.884449][ T4700] XFS (loop1): Quotacheck: Done. [ 98.922566][ T4714] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 98.922566][ T4714] [ 98.960769][ T4714] ERROR: (device loop0): remounting filesystem as read-only [ 98.980495][ T4714] syz.0.111: attempt to access beyond end of device [ 98.980495][ T4714] loop0: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 99.025238][ T4718] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.044298][ T4250] XFS (loop1): Unmounting Filesystem [ 99.104375][ T107] blkno = 5002c, nblocks = 1 [ 99.117063][ T107] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 99.117063][ T107] [ 99.131288][ T4718] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.167563][ T4718] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.202195][ T4718] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.242498][ T14] az6027: usb out operation failed. (-71) [ 99.259012][ T14] stb0899_attach: Driver disabled by Kconfig [ 99.286038][ T14] az6027: no front-end attached [ 99.286038][ T14] [ 99.316721][ T14] az6027: usb out operation failed. (-71) [ 99.336675][ T14] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 99.357946][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 99.385101][ T14] dvb-usb: schedule remote query interval to 400 msecs. [ 99.415294][ T14] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 99.448940][ T14] usb 5-1: USB disconnect, device number 4 [ 99.532111][ T4733] loop1: detected capacity change from 0 to 128 [ 99.570464][ T14] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 99.600720][ T4733] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 99.677440][ T4733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.763444][ T4733] overlayfs: upper fs needs to support d_type. [ 99.809955][ T4733] overlayfs: upper fs does not support tmpfile. [ 99.872379][ T4737] loop0: detected capacity change from 0 to 4096 [ 99.932666][ T4737] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 100.116581][ T4729] loop2: detected capacity change from 0 to 40427 [ 100.164364][ T4743] device ipvlan2 entered promiscuous mode [ 100.204311][ T4729] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.210610][ T4743] bridge0: port 3(ipvlan2) entered blocking state [ 100.245980][ T4743] bridge0: port 3(ipvlan2) entered disabled state [ 100.366133][ T4729] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.527631][ T4254] syz-executor: attempt to access beyond end of device [ 100.527631][ T4254] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.058017][ T4751] loop0: detected capacity change from 0 to 32768 [ 101.596986][ T4773] loop0: detected capacity change from 0 to 2048 [ 101.646910][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 101.748826][ T4776] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.817954][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 101.817969][ T27] audit: type=1800 audit(1740760100.288:50): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.131" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 101.944736][ T4776] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 101.973857][ T4776] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 102.025217][ T4776] Remounting filesystem read-only [ 102.112244][ T4256] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 102.169401][ T4771] loop2: detected capacity change from 0 to 32768 [ 102.270399][ T4771] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 102.380776][ T4791] loop0: detected capacity change from 0 to 256 [ 102.448483][ T4791] FAT-fs (loop0): Directory bread(block 64) failed [ 102.464532][ T4770] loop3: detected capacity change from 0 to 32768 [ 102.489709][ T4791] FAT-fs (loop0): Directory bread(block 65) failed [ 102.526655][ T4254] ocfs2: Unmounting device (7,2) on (node local) [ 102.546971][ T4791] FAT-fs (loop0): Directory bread(block 66) failed [ 102.629375][ T4791] FAT-fs (loop0): Directory bread(block 67) failed [ 102.664905][ T4791] FAT-fs (loop0): Directory bread(block 68) failed [ 102.682678][ T4791] FAT-fs (loop0): Directory bread(block 69) failed [ 102.703046][ T4791] FAT-fs (loop0): Directory bread(block 70) failed [ 102.739911][ T4791] FAT-fs (loop0): Directory bread(block 71) failed [ 102.773303][ T4791] FAT-fs (loop0): Directory bread(block 72) failed [ 102.809029][ T4791] FAT-fs (loop0): Directory bread(block 73) failed [ 103.310416][ T4810] can0: slcan on ttyS3. [ 103.400978][ T4817] can0 (unregistered): slcan off ttyS3. [ 103.928870][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.129118][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 104.146100][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.161884][ T4832] loop2: detected capacity change from 0 to 8192 [ 104.186393][ T14] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 104.205007][ T4832] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 104.229061][ T4832] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 104.233733][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.258997][ T14] usb 2-1: Product: syz [ 104.265614][ T14] usb 2-1: Manufacturer: syz [ 104.269744][ T4832] REISERFS (device loop2): using ordered data mode [ 104.271767][ T14] usb 2-1: SerialNumber: syz [ 104.288013][ T14] usb 2-1: config 0 descriptor?? [ 104.294239][ T4832] reiserfs: using flush barriers [ 104.303881][ T14] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 104.320427][ T14] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 104.328605][ T4832] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.357414][ T4832] REISERFS (device loop2): checking transaction log (loop2) [ 104.387109][ T4832] REISERFS (device loop2): Using r5 hash to sort names [ 104.411205][ T4832] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 104.529796][ T4832] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3253, free_space(entry_count) 2 [ 104.568087][ T4832] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 540. Fsck? [ 104.622503][ T4827] loop0: detected capacity change from 0 to 32768 [ 104.626283][ T4832] REISERFS (device loop2): Remounting filesystem read-only [ 104.649060][ T4832] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 104.919576][ T14] em28xx 2-1:0.0: chip ID is em2874 [ 105.194588][ T14] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 105.224746][ T14] em28xx 2-1:0.0: board has no eeprom [ 105.321664][ T14] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 105.338780][ T14] em28xx 2-1:0.0: dvb set to bulk mode. [ 105.379007][ T14] usb 2-1: USB disconnect, device number 2 [ 105.386161][ T14] em28xx 2-1:0.0: Disconnecting em28xx [ 105.421757][ T4518] em28xx 2-1:0.0: Binding DVB extension [ 105.476518][ T4861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.160'. [ 105.557424][ T4518] em28xx 2-1:0.0: Registering input extension [ 105.788793][ T4518] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 105.818484][ T4518] Registered IR keymap rc-empty [ 105.842764][ T4518] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 105.897990][ T4518] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 105.945651][ T4518] em28xx 2-1:0.0: Input extension successfully initialized [ 105.979121][ T14] em28xx 2-1:0.0: Closing input extension [ 106.075557][ T14] em28xx 2-1:0.0: Freeing device [ 106.270781][ T4884] loop3: detected capacity change from 0 to 64 [ 106.501428][ T4890] loop0: detected capacity change from 0 to 64 [ 107.233733][ T4891] loop4: detected capacity change from 0 to 32768 [ 107.292922][ T4891] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.178 (4891) [ 107.365785][ T4891] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 107.392126][ T4904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 107.416069][ T4891] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 107.439964][ T4891] BTRFS info (device loop4): setting nodatacow, compression disabled [ 107.488760][ T4891] BTRFS info (device loop4): force clearing of disk cache [ 107.517586][ T4891] BTRFS info (device loop4): enabling ssd optimizations [ 107.538802][ T4891] BTRFS info (device loop4): using spread ssd allocation scheme [ 107.575344][ T4891] BTRFS info (device loop4): doing ref verification [ 107.587315][ T4894] loop3: detected capacity change from 0 to 32768 [ 107.595440][ T4891] BTRFS info (device loop4): force zlib compression, level 3 [ 107.630466][ T4908] input: syz0 as /devices/virtual/input/input8 [ 107.640525][ T4891] BTRFS info (device loop4): not using ssd optimizations [ 107.645608][ T4894] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.180 (4894) [ 107.650094][ T4891] BTRFS info (device loop4): not using spread ssd allocation scheme [ 107.692848][ T4891] BTRFS info (device loop4): using free space tree [ 107.724987][ T4894] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.756447][ T4894] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 107.794021][ T4894] BTRFS info (device loop3): setting nodatacow, compression disabled [ 107.814755][ T4894] BTRFS info (device loop3): max_inline at 0 [ 107.834978][ T4894] BTRFS info (device loop3): enabling disk space caching [ 107.844629][ T4894] BTRFS info (device loop3): turning off barriers [ 107.873023][ T4894] BTRFS info (device loop3): turning on flush-on-commit [ 107.888934][ T4894] BTRFS info (device loop3): doing ref verification [ 107.898047][ T4894] BTRFS info (device loop3): force clearing of disk cache [ 107.922942][ T4891] BTRFS info (device loop4): rebuilding free space tree [ 107.948237][ T4894] BTRFS info (device loop3): enabling ssd optimizations [ 107.978327][ T4894] BTRFS info (device loop3): max_inline at 4096 [ 108.007956][ T4894] BTRFS info (device loop3): disk space caching is enabled [ 108.079278][ T4939] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 108.149452][ T4404] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.257440][ T4249] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.294518][ T4894] BTRFS info (device loop3): rebuilding free space tree [ 108.348753][ T4404] usb 3-1: Using ep0 maxpacket: 16 [ 108.370304][ T4404] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 108.381425][ T4404] usb 3-1: config 0 has no interface number 0 [ 108.392519][ T4894] BTRFS info (device loop3): disabling free space tree [ 108.392707][ T4404] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.422884][ T4894] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.456328][ T4404] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 108.492087][ T4404] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 108.518082][ T4404] usb 3-1: Product: syz [ 108.540816][ T4404] usb 3-1: SerialNumber: syz [ 108.544593][ T4894] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.568576][ T4404] usb 3-1: config 0 descriptor?? [ 108.611696][ T4404] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 108.676766][ T4404] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input9 [ 108.910958][ T4248] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.925714][ T4264] Bluetooth: hci2: command 0x0406 tx timeout [ 109.058015][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 109.066700][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.083738][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.139275][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.177317][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.201627][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.233202][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.252697][ T4968] loop0: detected capacity change from 0 to 2048 [ 109.270235][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.292509][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.313176][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.363916][ T4968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.365505][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 109.398069][ T26] usb 3-1: USB disconnect, device number 2 [ 109.405669][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 109.468085][ T26] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 109.932561][ T4986] loop0: detected capacity change from 0 to 256 [ 109.958128][ T4986] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 110.376496][ T4997] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 110.449125][ T5000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 110.486672][ T5002] mkiss: ax0: crc mode is auto. [ 111.513173][ T4998] loop2: detected capacity change from 0 to 40427 [ 111.580624][ T4998] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.801190][ T4998] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.947234][ T4254] syz-executor: attempt to access beyond end of device [ 111.947234][ T4254] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.010606][ T5014] loop4: detected capacity change from 0 to 32768 [ 112.088215][ T5018] loop3: detected capacity change from 0 to 32768 [ 112.101881][ T5018] XFS: ikeep mount option is deprecated. [ 112.123001][ T5014] XFS (loop4): Mounting V5 Filesystem [ 112.225632][ T5018] XFS (loop3): Mounting V5 Filesystem [ 112.385376][ T5014] XFS (loop4): Ending clean mount [ 112.419683][ T5014] XFS (loop4): Quotacheck needed: Please wait. [ 112.445116][ T5018] XFS (loop3): Ending clean mount [ 112.542218][ T5018] XFS (loop3): User initiated shutdown received. [ 112.570921][ T5018] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 112.580451][ T5014] XFS (loop4): Quotacheck: Done. [ 112.602550][ T5018] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 112.673732][ T4248] XFS (loop3): Unmounting Filesystem [ 112.820612][ T4249] XFS (loop4): Unmounting Filesystem [ 113.236407][ T5053] loop2: detected capacity change from 0 to 32768 [ 113.253976][ T5053] XFS: ikeep mount option is deprecated. [ 113.293638][ T5053] XFS (loop2): Mounting V5 Filesystem [ 113.435735][ T5053] XFS (loop2): Ending clean mount [ 113.463554][ T5053] XFS (loop2): Quotacheck needed: Please wait. [ 113.580940][ T5053] XFS (loop2): Quotacheck: Done. [ 113.688590][ T5080] team0: Port device team_slave_1 removed [ 113.713468][ T4254] XFS (loop2): Unmounting Filesystem [ 113.800836][ T5064] loop0: detected capacity change from 0 to 32768 [ 113.895690][ T5085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.235'. [ 113.909724][ T5064] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.074031][ T5088] syz.2.234 uses obsolete (PF_INET,SOCK_PACKET) [ 114.155367][ T4256] ocfs2: Unmounting device (7,0) on (node local) [ 114.233658][ T5090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.237'. [ 114.455164][ T5092] loop2: detected capacity change from 0 to 4096 [ 114.527443][ T5099] loop4: detected capacity change from 0 to 256 [ 114.779184][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.989066][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 115.035918][ T26] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 115.065662][ T26] usb 2-1: config 0 has no interface number 0 [ 115.092720][ T26] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.152339][ T26] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.193474][ T26] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 115.229003][ T26] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 115.260675][ T26] usb 2-1: Product: syz [ 115.285756][ T26] usb 2-1: SerialNumber: syz [ 115.329501][ T26] usb 2-1: config 0 descriptor?? [ 115.347599][ T26] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 115.366495][ T26] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input10 [ 115.390841][ T5122] loop4: detected capacity change from 0 to 512 [ 115.400677][ T5122] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.477828][ T5122] EXT4-fs (loop4): 1 truncate cleaned up [ 115.494656][ T5122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.557186][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 115.675236][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 115.763416][ T4600] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.781042][ C0] cm109_urb_ctl_callback: 7 callbacks suppressed [ 115.781071][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.803172][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.816313][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.832024][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.849035][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.863087][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.875922][ T4298] usb 2-1: USB disconnect, device number 3 [ 115.883172][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.883204][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 115.939861][ T4298] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 116.101038][ T4600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.140685][ T4600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.169234][ T5133] loop0: detected capacity change from 0 to 8192 [ 116.176957][ T4600] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.209541][ T4600] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 116.218913][ T5133] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 116.225031][ T4600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.265216][ T4600] usb 3-1: config 0 descriptor?? [ 116.288888][ T5133] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 116.304532][ T5133] REISERFS (device loop0): using ordered data mode [ 116.316128][ T5133] reiserfs: using flush barriers [ 116.333318][ T5133] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.375766][ T5133] REISERFS (device loop0): checking transaction log (loop0) [ 116.689835][ T4600] logitech 0003:046D:CA03.0002: unknown main item tag 0x0 [ 116.709058][ T4600] logitech 0003:046D:CA03.0002: unknown main item tag 0x0 [ 116.731781][ T4600] logitech 0003:046D:CA03.0002: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.2-1/input0 [ 116.746828][ T4600] logitech 0003:046D:CA03.0002: no inputs found [ 116.757180][ T5133] REISERFS (device loop0): Using tea hash to sort names [ 116.780225][ T5133] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 116.884933][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 116.931982][ T4600] usb 3-1: USB disconnect, device number 3 [ 116.954791][ T5147] device xfrm1 entered promiscuous mode [ 117.495312][ T5165] loop3: detected capacity change from 0 to 2048 [ 117.585757][ T5165] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 117.692723][ T5170] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.051727][ T5176] loop3: detected capacity change from 0 to 2048 [ 118.168139][ T26] hid-generic 0000:0000:0000.0003: unknown main item tag 0x3 [ 118.209315][ T26] hid-generic 0000:0000:0000.0003: unknown main item tag 0xd [ 118.231219][ T26] hid-generic 0000:0000:0000.0003: unknown main item tag 0xe [ 118.263864][ T26] hid-generic 0000:0000:0000.0003: item fetching failed at offset 25/83 [ 118.298179][ T26] hid-generic: probe of 0000:0000:0000.0003 failed with error -22 [ 118.664306][ T5185] loop3: detected capacity change from 0 to 4096 [ 118.709313][ T5185] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 118.784278][ T5185] ntfs3: loop3: Failed to load $Extend. [ 118.943922][ T5185] syz.3.274 (5185) used greatest stack depth: 19984 bytes left [ 120.112547][ T5201] loop1: detected capacity change from 0 to 32768 [ 120.201043][ T5201] XFS (loop1): Mounting V5 Filesystem [ 120.361770][ T5201] XFS (loop1): Ending clean mount [ 120.571366][ T5201] syz.1.281 (5201) used greatest stack depth: 19240 bytes left [ 120.618453][ T4250] XFS (loop1): Unmounting Filesystem [ 121.475320][ T5265] tun0: tun_chr_ioctl cmd 1074025677 [ 121.499793][ T5265] tun0: linktype set to 769 [ 121.786346][ T5273] loop2: detected capacity change from 0 to 1024 [ 121.815454][ T5277] loop3: detected capacity change from 0 to 4096 [ 121.877852][ T5278] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.902675][ T5277] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 121.934658][ T5277] Remounting filesystem read-only [ 122.356645][ T5298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'. [ 122.472260][ T5301] loop2: detected capacity change from 0 to 64 [ 122.530961][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.748844][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 122.779655][ T26] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.809590][ T26] usb 1-1: config 0 has no interface number 0 [ 122.852809][ T26] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.879031][ T26] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.909016][ T26] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 122.938957][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.979245][ T26] usb 1-1: config 0 descriptor?? [ 123.554738][ T5316] sctp: [Deprecated]: syz.4.329 (pid 5316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.554738][ T5316] Use struct sctp_sack_info instead [ 123.597673][ T26] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.0004/input/input11 [ 123.740902][ T26] uclogic 0003:28BD:0094.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 123.797228][ T5324] loop3: detected capacity change from 0 to 256 [ 123.799851][ T26] usb 1-1: USB disconnect, device number 3 [ 123.823857][ T5324] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 123.945332][ T4600] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.143651][ T4600] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 124.164831][ T4600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 124.185216][ T4600] usb 5-1: Product: syz [ 124.190357][ T4600] usb 5-1: Manufacturer: syz [ 124.195633][ T4600] usb 5-1: SerialNumber: syz [ 124.218621][ T4600] usb 5-1: config 0 descriptor?? [ 124.245980][ T5325] loop1: detected capacity change from 0 to 32768 [ 124.250354][ T4600] ch341 5-1:0.0: ch341-uart converter detected [ 124.287191][ T5325] XFS (loop1): Mounting V5 Filesystem [ 124.404445][ T5325] XFS (loop1): Ending clean mount [ 124.436962][ T5325] XFS (loop1): Quotacheck needed: Please wait. [ 124.487961][ T5348] mkiss: ax0: crc mode is auto. [ 124.522789][ T5325] XFS (loop1): Quotacheck: Done. [ 124.732409][ T4250] XFS (loop1): Unmounting Filesystem [ 125.000271][ T5353] loop3: detected capacity change from 0 to 4096 [ 125.057370][ T4600] usb 5-1: failed to send control message: -71 [ 125.066347][ T5354] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.088823][ T4600] ch341-uart: probe of ttyUSB0 failed with error -71 [ 125.108232][ T4600] usb 5-1: USB disconnect, device number 5 [ 125.146863][ T4600] ch341 5-1:0.0: device disconnected [ 125.436745][ T5359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.343'. [ 125.725772][ T5366] loop4: detected capacity change from 0 to 256 [ 126.026305][ T5380] sp0: Synchronizing with TNC [ 126.112202][ T5384] loop2: detected capacity change from 0 to 1024 [ 126.129048][ T5382] tap0: tun_chr_ioctl cmd 1074025677 [ 126.141126][ T5384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.144014][ T5382] tap0: linktype set to 0 [ 126.238972][ T5384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 126.414304][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 126.487968][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 126.677441][ T5403] loop2: detected capacity change from 0 to 128 [ 126.741243][ T5403] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 126.799045][ T5403] FAT-fs (loop2): Filesystem has been set read-only [ 126.802318][ T5407] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 126.859397][ T5394] loop0: detected capacity change from 0 to 32768 [ 126.891483][ T5394] XFS: ikeep mount option is deprecated. [ 126.984460][ T5394] XFS (loop0): Mounting V5 Filesystem [ 127.121650][ T5394] XFS (loop0): Ending clean mount [ 127.149432][ T5394] XFS (loop0): Quotacheck needed: Please wait. [ 127.269040][ T5427] loop2: detected capacity change from 0 to 512 [ 127.299038][ T5394] XFS (loop0): Quotacheck: Done. [ 127.379094][ T5427] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 127.393608][ T27] audit: type=1800 audit(1740760125.868:51): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.359" name="file2" dev="loop0" ino=9287 res=0 errno=0 [ 127.406333][ T5401] loop3: detected capacity change from 0 to 32768 [ 127.427584][ T5401] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.362 (5401) [ 127.446246][ T5427] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.461708][ T5401] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.490433][ T5401] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 127.501458][ T5401] BTRFS info (device loop3): using free space tree [ 127.559347][ T4256] XFS (loop0): Unmounting Filesystem [ 127.628866][ T5427] EXT4-fs error (device loop2): ext4_get_first_dir_block:3603: inode #12: block 31: comm syz.2.370: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=1, rec_len=6, size=1024 fake=1 [ 127.691458][ T5427] EXT4-fs (loop2): Remounting filesystem read-only [ 127.711736][ T5427] EXT4-fs error (device loop2): ext4_get_first_dir_block:3605: inode #12: comm syz.2.370: directory missing '..' [ 127.741374][ T5427] EXT4-fs (loop2): Remounting filesystem read-only [ 127.886204][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 127.898333][ T5401] BTRFS info (device loop3): enabling ssd optimizations [ 128.259748][ T4248] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.347444][ T5470] loop2: detected capacity change from 0 to 4096 [ 128.546596][ T5476] input: syz0 as /devices/virtual/input/input12 [ 128.562191][ T5470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 128.608252][ T5470] fs-verity: sha256 using implementation "sha256-avx2" [ 128.717226][ T5482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'. [ 128.718248][ T5470] fs-verity (loop2, inode 16): fs-verity keyring is empty, rejecting signed file! [ 128.946408][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 128.991041][ T5493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.389'. [ 129.606048][ T5511] loop3: detected capacity change from 0 to 4096 [ 129.706799][ T5516] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.197989][ T5507] loop0: detected capacity change from 0 to 32768 [ 130.255985][ T5526] loop4: detected capacity change from 0 to 8192 [ 130.503804][ T5539] loop2: detected capacity change from 0 to 1024 [ 130.564350][ T27] audit: type=1326 audit(1740760129.038:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5541 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b38d169 code=0x7ffc0000 [ 130.590864][ T5539] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 130.603027][ T5539] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.636573][ T5539] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.411: inode #458752: comm syz.2.411: iget: illegal inode # [ 130.661683][ T27] audit: type=1326 audit(1740760129.038:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5541 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b38d169 code=0x7ffc0000 [ 130.661816][ T5539] EXT4-fs (loop2): Remounting filesystem read-only [ 130.690931][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.692214][ T27] audit: type=1326 audit(1740760129.038:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5541 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffb4b38d169 code=0x7ffc0000 [ 130.734400][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.742155][ T27] audit: type=1326 audit(1740760129.038:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5541 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b38d169 code=0x7ffc0000 [ 130.769020][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.788771][ T5539] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.411: error while reading EA inode 458752 err=-117 [ 130.808848][ T27] audit: type=1326 audit(1740760129.038:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5541 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b38d169 code=0x7ffc0000 [ 130.840505][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.851998][ T5539] EXT4-fs (loop2): Remounting filesystem read-only [ 130.865905][ T5548] loop0: detected capacity change from 0 to 128 [ 130.878117][ T27] audit: type=1326 audit(1740760129.078:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5541 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7ffb4b38d169 code=0x7ffc0000 [ 130.905093][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.937919][ T5548] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 130.960680][ T5548] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.025325][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 131.044167][ T27] audit: type=1326 audit(1740760129.078:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5541 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b38d169 code=0x7ffc0000 [ 131.105791][ T27] audit: type=1326 audit(1740760129.078:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5541 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b38d169 code=0x7ffc0000 [ 131.131257][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.139925][ T27] audit: type=1326 audit(1740760129.078:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5541 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7ffb4b38d169 code=0x7ffc0000 [ 131.151968][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 131.165404][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.403249][ T5553] loop2: detected capacity change from 0 to 8192 [ 131.423894][ T5553] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.457303][ T5553] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 131.469488][ T5553] REISERFS (device loop2): using ordered data mode [ 131.476674][ T5553] reiserfs: using flush barriers [ 131.480691][ T5546] loop4: detected capacity change from 0 to 32768 [ 131.499808][ T5553] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.534999][ T5553] REISERFS (device loop2): checking transaction log (loop2) [ 131.570070][ T5553] REISERFS (device loop2): Using r5 hash to sort names [ 131.580466][ T5553] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 131.647134][ T5553] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 131.705868][ T5553] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 131.777899][ T5562] loop3: detected capacity change from 0 to 8192 [ 131.792965][ T5567] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 131.825405][ T5562] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.858887][ T5562] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 131.870503][ T5562] REISERFS (device loop3): using ordered data mode [ 131.879658][ T5562] reiserfs: using flush barriers [ 131.915900][ T5562] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.937019][ T5562] REISERFS (device loop3): checking transaction log (loop3) [ 131.956009][ T5562] REISERFS (device loop3): Using r5 hash to sort names [ 131.965375][ T5562] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 132.017972][ T5572] process 'syz.4.422' launched './file0' with NULL argv: empty string added [ 132.039405][ T4604] kernel write not supported for file /input/mouse0 (pid: 4604 comm: kworker/0:14) [ 132.255809][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 132.356047][ T5578] kernel profiling enabled (shift: 7) [ 132.434044][ T5557] loop1: detected capacity change from 0 to 40427 [ 132.493003][ T5557] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.582416][ T5557] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.713217][ T4250] syz-executor: attempt to access beyond end of device [ 132.713217][ T4250] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.841036][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.847504][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.067797][ T5602] loop3: detected capacity change from 0 to 4096 [ 133.097159][ T5602] __ntfs_error: 2 callbacks suppressed [ 133.097179][ T5602] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 133.153967][ T5602] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 133.175285][ T5602] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 133.237265][ T5602] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 133.274560][ T5602] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 133.284152][ T5591] loop4: detected capacity change from 0 to 32768 [ 133.316576][ T5591] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.430 (5591) [ 133.346185][ T5602] ntfs: volume version 3.1. [ 133.368019][ T5591] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.383917][ T5602] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 133.408873][ T5602] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 133.429891][ T5591] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 133.450475][ T5591] BTRFS info (device loop4): enabling auto defrag [ 133.458573][ T5602] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 133.459949][ T5591] BTRFS info (device loop4): trying to use backup root at mount time [ 133.500681][ T5591] BTRFS info (device loop4): force clearing of disk cache [ 133.501495][ T5602] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 133.529546][ T5591] BTRFS info (device loop4): setting nodatacow, compression disabled [ 133.538600][ T5591] BTRFS info (device loop4): turning on sync discard [ 133.550727][ T5591] BTRFS info (device loop4): using free space tree [ 133.560991][ T5602] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x9, name_len 2. [ 133.812094][ T5591] BTRFS info (device loop4): rebuilding free space tree [ 133.866631][ T5640] loop3: detected capacity change from 0 to 2048 [ 133.894368][ T5640] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 133.927682][ T5640] syz.3.443: attempt to access beyond end of device [ 133.927682][ T5640] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 133.951088][ T5642] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.030017][ T5640] syz.3.443: attempt to access beyond end of device [ 134.030017][ T5640] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 134.050622][ T5640] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 134.061076][ T5640] NILFS (loop3): error -5 reading inode: ino=12 [ 134.092531][ T4249] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.672848][ T5659] loop3: detected capacity change from 0 to 16 [ 134.743616][ T5663] tap0: tun_chr_ioctl cmd 1074025677 [ 134.744045][ T5659] erofs: (device loop3): mounted with root inode @ nid 36. [ 134.762564][ T5663] tap0: linktype set to 821 [ 134.810357][ T5659] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-22] [ 134.978803][ T4604] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 135.132237][ T5679] loop1: detected capacity change from 0 to 256 [ 135.171847][ T5679] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 135.193909][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 135.213897][ T4604] usb 5-1: config 7 has an invalid interface number: 34 but max is 0 [ 135.226103][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 135.244587][ T4604] usb 5-1: config 7 has no interface number 0 [ 135.255592][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 135.273444][ T4604] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35 [ 135.286280][ T4604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.314276][ T5681] Zero length message leads to an empty skb [ 135.323270][ T4604] usb 5-1: Product: syz [ 135.337399][ T4604] usb 5-1: Manufacturer: syz [ 135.358423][ T4604] usb 5-1: SerialNumber: syz [ 136.135731][ T4604] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 136.154843][ T5694] loop0: detected capacity change from 0 to 32768 [ 136.154843][ T5689] loop2: detected capacity change from 0 to 32768 [ 136.179051][ T4604] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 136.190682][ T5689] XFS: ikeep mount option is deprecated. [ 136.194663][ T5694] JBD2: Ignoring recovery information on journal [ 136.202042][ T4604] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 136.239065][ T4604] dvb_usb_cxusb: probe of 5-1:7.34 failed with error -22 [ 136.274653][ T5689] XFS (loop2): Mounting V5 Filesystem [ 136.315127][ T5694] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 136.328949][ T5689] XFS (loop2): Ending clean mount [ 136.341892][ T5689] XFS (loop2): Quotacheck needed: Please wait. [ 136.368432][ T4604] usb 5-1: USB disconnect, device number 6 [ 136.412893][ T5694] (syz.0.469,5694,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 136.456489][ T5689] XFS (loop2): Quotacheck: Done. [ 136.588162][ T4256] ocfs2: Unmounting device (7,0) on (node local) [ 136.629370][ T4254] XFS (loop2): Unmounting Filesystem [ 137.025309][ T5722] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.124662][ T5716] loop3: detected capacity change from 0 to 40427 [ 137.150712][ T5716] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 137.171809][ T5722] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.193113][ T5716] F2FS-fs (loop3): invalid crc value [ 137.234408][ T5716] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.255577][ T5722] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.298065][ T5735] loop0: detected capacity change from 0 to 1024 [ 137.354302][ T5722] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.361020][ T5716] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.511150][ T5722] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.592275][ T5722] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.648607][ T5722] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.708311][ T5722] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.793994][ T5748] loop2: detected capacity change from 0 to 16 [ 137.849815][ T5748] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 137.903833][ T5751] loop0: detected capacity change from 0 to 256 [ 137.972538][ T5748] cramfs: Error -3 while decompressing! [ 138.018712][ T5748] cramfs: ffffffff9754a518(42)->ffff88802fd5f000(4096) [ 138.035802][ T5751] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 138.124172][ T5751] 9pnet_fd: p9_fd_create_unix (5751): problem connecting socket: ./file1: -13 [ 138.817840][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 138.817856][ T27] audit: type=1326 audit(1740760137.288:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfad8d169 code=0x7ffc0000 [ 138.880248][ T5776] mmap: syz.0.501 (5776) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.976457][ T27] audit: type=1326 audit(1740760137.338:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4cfad8d169 code=0x7ffc0000 [ 139.009580][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.045432][ T4275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.131629][ T27] audit: type=1326 audit(1740760137.338:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfad8d169 code=0x7ffc0000 [ 139.159233][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.248543][ T27] audit: type=1326 audit(1740760137.338:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfad8d169 code=0x7ffc0000 [ 139.281935][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.370672][ T4275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.408718][ T27] audit: type=1326 audit(1740760137.358:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f4cfad8d169 code=0x7ffc0000 [ 139.476859][ T5770] loop4: detected capacity change from 0 to 32768 [ 139.531162][ T5781] loop3: detected capacity change from 0 to 256 [ 139.533121][ T27] audit: type=1326 audit(1740760137.358:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfad8d169 code=0x7ffc0000 [ 139.569424][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.591270][ T4275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.627033][ T5770] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 139.728003][ T27] audit: type=1326 audit(1740760137.358:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfad8d169 code=0x7ffc0000 [ 139.818971][ T27] audit: type=1326 audit(1740760137.358:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f4cfad8d169 code=0x7ffc0000 [ 139.819085][ T27] audit: type=1326 audit(1740760137.408:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfad8d169 code=0x7ffc0000 [ 139.819110][ T27] audit: type=1326 audit(1740760137.428:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cfad8d169 code=0x7ffc0000 [ 139.825120][ T4275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.238188][ T4249] ocfs2: Unmounting device (7,4) on (node local) [ 140.406984][ T4264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 140.423523][ T4264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 140.436222][ T4264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 140.449582][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 140.463965][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 140.506148][ T4264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 140.529481][ T5797] netlink: 132 bytes leftover after parsing attributes in process `syz.3.510'. [ 140.804662][ T5812] loop3: detected capacity change from 0 to 128 [ 140.830165][ T5812] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 140.841897][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 140.880935][ T5812] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.932937][ T5812] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 93: 0xcc != 0x00 [ 140.964380][ T5812] UDF-fs: error (device loop3): udf_count_free_bitmap: udf_count_free failed [ 141.014436][ T5812] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 93: 0xcc != 0x00 [ 141.037628][ T5812] UDF-fs: error (device loop3): udf_count_free_bitmap: udf_count_free failed [ 141.164837][ T5826] netlink: 'syz.4.522': attribute type 4 has an invalid length. [ 141.292722][ T5830] loop1: detected capacity change from 0 to 128 [ 141.350270][ T5830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.362706][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 141.375455][ T5830] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.652800][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 141.874050][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.886761][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.897441][ T5801] device bridge_slave_0 entered promiscuous mode [ 141.957884][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.964524][ T5856] input: syz0 as /devices/virtual/input/input13 [ 141.995222][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.016026][ T5801] device bridge_slave_1 entered promiscuous mode [ 142.181960][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.264779][ T4275] device hsr_slave_0 left promiscuous mode [ 142.293197][ T4275] device hsr_slave_1 left promiscuous mode [ 142.304535][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.322731][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.341717][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.379156][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.391292][ T4275] device bridge_slave_1 left promiscuous mode [ 142.410760][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.471741][ T4275] device bridge_slave_0 left promiscuous mode [ 142.481718][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.577861][ T4275] device veth1_macvtap left promiscuous mode [ 142.593160][ T4275] device veth0_macvtap left promiscuous mode [ 142.599769][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 142.622727][ T4275] device veth1_vlan left promiscuous mode [ 142.641792][ T4275] device veth0_vlan left promiscuous mode [ 143.922189][ T4275] team0 (unregistering): Port device team_slave_1 removed [ 144.055511][ T4275] team0 (unregistering): Port device team_slave_0 removed [ 144.079756][ T5890] loop4: detected capacity change from 0 to 40427 [ 144.090272][ T5890] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 144.114373][ T5890] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 144.145053][ T5890] F2FS-fs (loop4): invalid crc value [ 144.189473][ T5890] F2FS-fs (loop4): Found nat_bits in checkpoint [ 144.204752][ T4275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.280704][ T5890] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 144.317151][ T5890] F2FS-fs (loop4): Start checkpoint disabled! [ 144.331567][ T4275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.344316][ T5890] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 144.377039][ T5890] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 144.584664][ T41] kworker/u4:2: attempt to access beyond end of device [ 144.584664][ T41] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 144.678713][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 144.832987][ T5900] loop0: detected capacity change from 0 to 32768 [ 144.931244][ T5900] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 145.123364][ T4256] ocfs2: Unmounting device (7,0) on (node local) [ 145.675746][ T4275] bond0 (unregistering): Released all slaves [ 145.766894][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.854181][ T5801] team0: Port device team_slave_0 added [ 145.868403][ T5801] team0: Port device team_slave_1 added [ 145.942786][ T5918] loop4: detected capacity change from 0 to 512 [ 145.969905][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.981471][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.009904][ T5918] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 146.023249][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.038122][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.047910][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.076363][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.086005][ T5918] EXT4-fs (loop4): 1 truncate cleaned up [ 146.097906][ T5918] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.153027][ T5918] EXT4-fs error (device loop4): ext4_read_inline_dir:1593: inode #12: block 7: comm syz.4.556: path /114/file0/file0: bad entry in directory: inode out of bounds - offset=24, inode=16777215, rec_len=16, size=80 fake=0 [ 146.153165][ T5801] device hsr_slave_0 entered promiscuous mode [ 146.198845][ T5801] device hsr_slave_1 entered promiscuous mode [ 146.290511][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 146.491704][ T5926] loop4: detected capacity change from 0 to 1024 [ 146.548549][ T4973] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.577574][ T5926] hfsplus: bad catalog entry type [ 146.621892][ T5801] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.655067][ T48] hfsplus: b-tree write err: -5, ino 4 [ 146.670857][ T5801] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.709740][ T5801] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 146.738555][ T5801] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.758839][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 146.769048][ T4973] usb 2-1: Using ep0 maxpacket: 16 [ 146.785192][ T4973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.798501][ T4973] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 146.809391][ T4973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.823169][ T4973] usb 2-1: config 0 descriptor?? [ 146.848816][ T5933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 146.950355][ T5938] loop3: detected capacity change from 0 to 1024 [ 146.976008][ T5938] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 147.052496][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 147.089066][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.136706][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.160017][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.204687][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.237745][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.254072][ T4973] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 147.294367][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.320226][ C0] ------------[ cut here ]------------ [ 147.324131][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.329071][ C0] WARNING: CPU: 0 PID: 5936 at net/ipv4/route.c:1274 ip_rt_bug+0x25/0xf0 [ 147.339743][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.352459][ C0] Modules linked in: [ 147.367396][ C0] CPU: 0 PID: 5936 Comm: syz.4.562 Not tainted 6.1.129-syzkaller #0 [ 147.377209][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.390102][ C0] RIP: 0010:ip_rt_bug+0x25/0xf0 [ 147.396911][ C0] Code: ff ff 0f 1f 00 41 57 41 56 41 55 41 54 53 48 89 d3 e8 cf 0b 62 f8 66 90 e8 c8 0b 62 f8 48 89 df be 01 00 00 00 e8 9b 10 76 ff <0f> 0b 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 49 bd 00 00 00 00 00 fc [ 147.422881][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.423158][ C0] RSP: 0018:ffffc90000007638 EFLAGS: 00010296 [ 147.440901][ C0] RAX: 6466ee2ee9d4ca01 RBX: ffff888078f31a00 RCX: ffffffff816b145a [ 147.453515][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c1d40 RDI: ffffffff8b5f6d80 [ 147.463582][ C0] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff2256c5f [ 147.473541][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888078f31a00 [ 147.486719][ C0] R13: ffff888078f31a58 R14: ffff888028f98000 R15: ffff88801f680d00 [ 147.499483][ C0] FS: 00007fba267806c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 147.507535][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.509880][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.509902][ C0] CR2: 00007f4b7d2b6fbe CR3: 0000000054373000 CR4: 00000000003506f0 [ 147.509919][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.509931][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.509945][ C0] Call Trace: [ 147.509953][ C0] [ 147.509962][ C0] ? __warn+0x15a/0x520 [ 147.509987][ C0] ? ip_rt_bug+0x25/0xf0 [ 147.510015][ C0] ? report_bug+0x2af/0x500 [ 147.510034][ C0] ? ip_rt_bug+0x25/0xf0 [ 147.510061][ C0] ? handle_bug+0x3d/0x70 [ 147.510079][ C0] ? exc_invalid_op+0x16/0x40 [ 147.510097][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 147.510124][ C0] ? mark_lock+0x9a/0x340 [ 147.510142][ C0] ? ip_rt_bug+0x25/0xf0 [ 147.533565][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.540751][ C0] ? ip_rt_bug+0x25/0xf0 [ 147.540785][ C0] ip_send_skb+0x113/0x1a0 [ 147.540804][ C0] __icmp_send+0x127c/0x17f0 [ 147.540830][ C0] ? __icmp_send+0x211/0x17f0 [ 147.540867][ C0] ? icmp_out_count+0x90/0x90 [ 147.540900][ C0] ? reacquire_held_locks+0x660/0x660 [ 147.541764][ C0] ? look_up_lock_class+0x77/0x140 [ 147.541801][ C0] ? mark_lock+0x9a/0x340 [ 147.541840][ C0] ipv4_link_failure+0x63d/0xa20 [ 147.541919][ C0] ? ipv4_negative_advice+0x1a0/0x1a0 [ 147.541943][ C0] ? do_raw_write_lock+0x143/0x4e0 [ 147.541961][ C0] ? ipv4_negative_advice+0x1a0/0x1a0 [ 147.541983][ C0] arp_error_report+0x112/0x160 [ 147.542009][ C0] neigh_invalidate+0x240/0x460 [ 147.542039][ C0] neigh_timer_handler+0x8a1/0x1010 [ 147.542068][ C0] call_timer_fn+0x1ad/0x6b0 [ 147.542090][ C0] ? neigh_release+0x80/0x80 [ 147.542109][ C0] ? call_timer_fn+0xc2/0x6b0 [ 147.542127][ C0] ? __run_timers+0x890/0x890 [ 147.542149][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 147.542169][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 147.542224][ C0] ? neigh_release+0x80/0x80 [ 147.542246][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 147.542269][ C0] ? neigh_release+0x80/0x80 [ 147.542544][ C0] __run_timers+0x67c/0x890 [ 147.542580][ C0] ? detach_timer+0x380/0x380 [ 147.542607][ C0] ? print_irqtrace_events+0x210/0x210 [ 147.542631][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 147.542662][ C0] run_timer_softirq+0x63/0xf0 [ 147.542681][ C0] handle_softirqs+0x2ee/0xa40 [ 147.542705][ C0] ? __irq_exit_rcu+0x157/0x240 [ 147.542729][ C0] ? do_softirq+0x240/0x240 [ 147.542750][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 147.542774][ C0] __irq_exit_rcu+0x157/0x240 [ 147.542792][ C0] ? irq_exit_rcu+0x20/0x20 [ 147.542821][ C0] irq_exit_rcu+0x5/0x20 [ 147.542837][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 147.542871][ C0] [ 147.542879][ C0] [ 147.542887][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 147.542911][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x60 [ 147.542934][ C0] Code: ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 147.542949][ C0] RSP: 0018:ffffc900038176b0 EFLAGS: 00000246 [ 147.562976][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.564367][ C0] [ 147.567892][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.575266][ C0] RAX: ffffffff81b70657 RBX: 000000000000087f RCX: ffff888073e21dc0 [ 147.575293][ C0] RDX: ffffc9000e562000 RSI: 000000000007ffff RDI: 0000000000000040 [ 147.575306][ C0] RBP: 0000000000000037 R08: ffffffff81b70648 R09: fffff940002a572f [ 147.575319][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003817812 [ 147.575332][ C0] R13: ffffc90003817800 R14: 0000000000000038 R15: ffff888074699660 [ 147.679297][ T4973] usb 2-1: USB disconnect, device number 4 [ 147.680807][ C0] ? xas_next_entry+0x188/0x3d0 [ 147.852201][ T5946] loop3: detected capacity change from 0 to 1024 [ 147.853909][ C0] ? xas_next_entry+0x197/0x3d0 [ 148.140524][ C0] xas_next_entry+0x197/0x3d0 [ 148.146418][ C0] filemap_map_pages+0xeaf/0x12c0 [ 148.153212][ C0] ? filemap_map_pages+0x277/0x12c0 [ 148.158823][ C0] ? filemap_read_folio+0x780/0x780 [ 148.159123][ T5946] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 148.164448][ C0] ? count_memcg_event_mm+0x90/0x410 [ 148.181969][ C0] handle_mm_fault+0x33e0/0x5340 [ 148.187565][ C0] ? follow_page_pte+0x39c/0x1880 [ 148.193462][ C0] ? numa_migrate_prep+0x250/0x250 [ 148.199195][ C0] ? follow_page_mask+0xb8a/0x1420 [ 148.205344][ C0] ? check_vma_flags+0x440/0x4d0 [ 148.211613][ C0] __get_user_pages+0x4f3/0x1190 [ 148.218080][ C0] ? populate_vma_page_range+0x2b0/0x2b0 [ 148.226188][ C0] populate_vma_page_range+0x217/0x2b0 [ 148.232287][ C0] __mm_populate+0x275/0x440 [ 148.237826][ C0] ? check_vma_flags+0x4d0/0x4d0 [ 148.246255][ C0] vm_mmap_pgoff+0x22b/0x2d0 [ 148.254592][ C0] ? account_locked_vm+0xe0/0xe0 [ 148.262211][ C0] ? ksys_mmap_pgoff+0xd8/0x6d0 [ 148.273872][ C0] ? syscall_user_dispatch+0x45/0x90 [ 148.281623][ C0] do_syscall_64+0x3b/0xb0 [ 148.287636][ C0] ? clear_bhb_loop+0x45/0xa0 [ 148.292789][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.301837][ C0] RIP: 0033:0x7fba2598d169 [ 148.308713][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.337928][ C0] RSP: 002b:00007fba26780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 148.350248][ C0] RAX: ffffffffffffffda RBX: 00007fba25ba5fa0 RCX: 00007fba2598d169 [ 148.360147][ C0] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000400000000000 [ 148.372919][ C0] RBP: 00007fba25a0e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 148.378876][ T27] audit: type=1800 audit(1740760146.728:73): pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.568" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 148.383148][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 148.383173][ C0] R13: 0000000000000000 R14: 00007fba25ba5fa0 R15: 00007ffdcdeddd58 [ 148.440953][ C0] [ 148.445304][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 148.457559][ C0] CPU: 0 PID: 5936 Comm: syz.4.562 Not tainted 6.1.129-syzkaller #0 [ 148.467164][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.487554][ C0] Call Trace: [ 148.490857][ C0] [ 148.494571][ C0] dump_stack_lvl+0x1e3/0x2cb [ 148.502905][ C0] ? nf_tcp_handle_invalid+0x647/0x647 [ 148.510575][ C0] ? panic+0x764/0x764 [ 148.517900][ C0] ? vscnprintf+0x59/0x80 [ 148.523431][ C0] panic+0x318/0x764 [ 148.527364][ C0] ? __warn+0x169/0x520 [ 148.531912][ C0] ? memcpy_page_flushcache+0xfc/0xfc [ 148.541329][ C0] __warn+0x348/0x520 [ 148.546306][ C0] ? ip_rt_bug+0x25/0xf0 [ 148.553369][ C0] report_bug+0x2af/0x500 [ 148.561483][ C0] ? ip_rt_bug+0x25/0xf0 [ 148.566457][ C0] handle_bug+0x3d/0x70 [ 148.571859][ C0] exc_invalid_op+0x16/0x40 [ 148.580646][ C0] asm_exc_invalid_op+0x16/0x20 [ 148.588206][ C0] RIP: 0010:ip_rt_bug+0x25/0xf0 [ 148.594143][ C0] Code: ff ff 0f 1f 00 41 57 41 56 41 55 41 54 53 48 89 d3 e8 cf 0b 62 f8 66 90 e8 c8 0b 62 f8 48 89 df be 01 00 00 00 e8 9b 10 76 ff <0f> 0b 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 49 bd 00 00 00 00 00 fc [ 148.625999][ C0] RSP: 0018:ffffc90000007638 EFLAGS: 00010296 [ 148.638454][ C0] RAX: 6466ee2ee9d4ca01 RBX: ffff888078f31a00 RCX: ffffffff816b145a [ 148.651966][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c1d40 RDI: ffffffff8b5f6d80 [ 148.662486][ C0] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff2256c5f [ 148.675970][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888078f31a00 [ 148.684694][ C0] R13: ffff888078f31a58 R14: ffff888028f98000 R15: ffff88801f680d00 [ 148.694077][ C0] ? mark_lock+0x9a/0x340 [ 148.702891][ C0] ? ip_rt_bug+0x25/0xf0 [ 148.707997][ C0] ip_send_skb+0x113/0x1a0 [ 148.713949][ C0] __icmp_send+0x127c/0x17f0 [ 148.722144][ C0] ? __icmp_send+0x211/0x17f0 [ 148.728355][ C0] ? icmp_out_count+0x90/0x90 [ 148.736147][ C0] ? reacquire_held_locks+0x660/0x660 [ 148.743330][ C0] ? look_up_lock_class+0x77/0x140 [ 148.750326][ C0] ? mark_lock+0x9a/0x340 [ 148.756544][ C0] ipv4_link_failure+0x63d/0xa20 [ 148.764457][ C0] ? ipv4_negative_advice+0x1a0/0x1a0 [ 148.773369][ C0] ? do_raw_write_lock+0x143/0x4e0 [ 148.780396][ C0] ? ipv4_negative_advice+0x1a0/0x1a0 [ 148.786677][ C0] arp_error_report+0x112/0x160 [ 148.792032][ C0] neigh_invalidate+0x240/0x460 [ 148.802362][ C0] neigh_timer_handler+0x8a1/0x1010 [ 148.807759][ C0] call_timer_fn+0x1ad/0x6b0 [ 148.812532][ C0] ? neigh_release+0x80/0x80 [ 148.820893][ C0] ? call_timer_fn+0xc2/0x6b0 [ 148.827193][ C0] ? __run_timers+0x890/0x890 [ 148.832242][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 148.842450][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 148.851858][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 148.860643][ C0] ? neigh_release+0x80/0x80 [ 148.867469][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 148.874603][ C0] ? neigh_release+0x80/0x80 [ 148.880641][ C0] __run_timers+0x67c/0x890 [ 148.887539][ C0] ? detach_timer+0x380/0x380 [ 148.897889][ C0] ? print_irqtrace_events+0x210/0x210 [ 148.905745][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 148.913506][ C0] run_timer_softirq+0x63/0xf0 [ 148.924242][ C0] handle_softirqs+0x2ee/0xa40 [ 148.930335][ C0] ? __irq_exit_rcu+0x157/0x240 [ 148.937295][ C0] ? do_softirq+0x240/0x240 [ 148.943493][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 148.955759][ C0] __irq_exit_rcu+0x157/0x240 [ 148.963652][ C0] ? irq_exit_rcu+0x20/0x20 [ 148.972981][ C0] irq_exit_rcu+0x5/0x20 [ 148.979754][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 148.989024][ C0] [ 148.992226][ C0] [ 148.997985][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 149.008326][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x60 [ 149.018601][ C0] Code: ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 149.043730][ C0] RSP: 0018:ffffc900038176b0 EFLAGS: 00000246 [ 149.053313][ C0] RAX: ffffffff81b70657 RBX: 000000000000087f RCX: ffff888073e21dc0 [ 149.064927][ C0] RDX: ffffc9000e562000 RSI: 000000000007ffff RDI: 0000000000000040 [ 149.076518][ C0] RBP: 0000000000000037 R08: ffffffff81b70648 R09: fffff940002a572f [ 149.086102][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003817812 [ 149.099491][ C0] R13: ffffc90003817800 R14: 0000000000000038 R15: ffff888074699660 [ 149.110190][ C0] ? xas_next_entry+0x188/0x3d0 [ 149.119868][ C0] ? xas_next_entry+0x197/0x3d0 [ 149.125084][ C0] xas_next_entry+0x197/0x3d0 [ 149.131720][ C0] filemap_map_pages+0xeaf/0x12c0 [ 149.141203][ C0] ? filemap_map_pages+0x277/0x12c0 [ 149.149936][ C0] ? filemap_read_folio+0x780/0x780 [ 149.157069][ C0] ? count_memcg_event_mm+0x90/0x410 [ 149.165439][ C0] handle_mm_fault+0x33e0/0x5340 [ 149.173337][ C0] ? follow_page_pte+0x39c/0x1880 [ 149.180931][ C0] ? numa_migrate_prep+0x250/0x250 [ 149.186556][ C0] ? follow_page_mask+0xb8a/0x1420 [ 149.194071][ C0] ? check_vma_flags+0x440/0x4d0 [ 149.203114][ C0] __get_user_pages+0x4f3/0x1190 [ 149.209620][ C0] ? populate_vma_page_range+0x2b0/0x2b0 [ 149.218168][ C0] populate_vma_page_range+0x217/0x2b0 [ 149.226324][ C0] __mm_populate+0x275/0x440 [ 149.232209][ C0] ? check_vma_flags+0x4d0/0x4d0 [ 149.239763][ C0] vm_mmap_pgoff+0x22b/0x2d0 [ 149.244641][ C0] ? account_locked_vm+0xe0/0xe0 [ 149.250558][ C0] ? ksys_mmap_pgoff+0xd8/0x6d0 [ 149.260524][ C0] ? syscall_user_dispatch+0x45/0x90 [ 149.267252][ C0] do_syscall_64+0x3b/0xb0 [ 149.273174][ C0] ? clear_bhb_loop+0x45/0xa0 [ 149.277977][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.285890][ C0] RIP: 0033:0x7fba2598d169 [ 149.291629][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.322670][ C0] RSP: 002b:00007fba26780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 149.332245][ C0] RAX: ffffffffffffffda RBX: 00007fba25ba5fa0 RCX: 00007fba2598d169 [ 149.343522][ C0] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000400000000000 [ 149.351593][ C0] RBP: 00007fba25a0e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 149.362291][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 149.374731][ C0] R13: 0000000000000000 R14: 00007fba25ba5fa0 R15: 00007ffdcdeddd58 [ 149.385626][ C0] [ 149.391422][ C0] Kernel Offset: disabled [ 149.400859][ C0] Rebooting in 86400 seconds..