last executing test programs: 5.685480351s ago: executing program 2: mq_open(0x0, 0x0, 0x0, 0x0) gettid() r0 = semget(0xffffffffffffffff, 0x8, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) shmctl$SHM_LOCK(r0, 0xb) 5.583588497s ago: executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) mlockall(0x1) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004040)='ns/mnt\x00') fsetxattr$trusted_overlay_origin(r1, &(0x7f0000004080), &(0x7f00000040c0), 0x2, 0x0) 4.31782217s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000800)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000005304", @ANYBLOB='%'], 0x14}}, 0x0) 4.169933634s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) 4.002660359s ago: executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x32, &(0x7f0000000080)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1) signalfd4(r2, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 3.827441436s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x1400, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 2.307358208s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) sendmsg$nl_route_sched(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001500)=@newchain={0x24}, 0x24}}, 0x8000) 1.826488342s ago: executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.690470802s ago: executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x79, 0x1a1847}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) 1.517459429s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) 1.472140236s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001000)={0x2c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}}, 0x0) 1.403157796s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0xbbb784e2fb1d5e5e) 1.31437404s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x1400, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 1.298382512s ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB="1900000000000000000001000000080008800400008024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x309, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 1.268126347s ago: executing program 0: syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04040affffffffffff1184f002"], 0xd) syz_emit_vhci(0x0, 0x0) 1.169728962s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) quotactl_fd$Q_SETINFO(r0, 0x3, 0x0, 0x0) 1.079404825s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000680), &(0x7f00000006c0)=0x8) 1.068474227s ago: executing program 3: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) write$char_usb(r2, &(0x7f0000000040)='\x00', 0x1) r3 = socket(0x2b, 0x0, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmsg$xdp(r3, 0x0, 0x24044800) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={0x0}}, 0x0) 1.028080323s ago: executing program 1: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 910.289031ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='cq_poll\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, &(0x7f0000000400), 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x38, 0xa, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40441}, 0x80) 747.227906ms ago: executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) fanotify_init(0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x72, 0x92, 0xbd, 0x40, 0x2040, 0x5530, 0xa882, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdf, 0x7f, 0xa9, 0x0, [], [{{0x9, 0x5, 0x9, 0x0, 0x40}}]}}]}}]}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) read$FUSE(r1, &(0x7f000000c3c0)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r2, 0x0, 0x0, 0x200) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 503.224653ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0x2710}}, 0x0) 420.080426ms ago: executing program 4: set_mempolicy(0x3, &(0x7f0000000080)=0x53, 0x9) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[], 0x0) 344.757368ms ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x0, @loopback}], 0x20) 276.667428ms ago: executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "000022ebffff0000"}}}}}, 0x0) 181.460523ms ago: executing program 4: socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0xaa, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x74, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}, @srh={0x0, 0x0, 0x3}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 172.973574ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_MARK={0x10}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bond\x00'}, @TCA_U32_SEL={0x14}]}}]}, 0x68}}, 0x0) 24.640807ms ago: executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000e00)=@nat={'nat\x00', 0x19, 0x1, 0x17e, [], 0x0, 0x0, &(0x7f0000000c00)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'team0\x00', 'bridge_slave_1\x00', 'veth0_macvtap\x00', 'bond_slave_1\x00', @local, [], @link_local, [], 0xb6, 0xb6, 0xee, [@limit={{'limit\x00', 0x0, 0x20}, {{0x0, 0x0, 0xff}}}], [], @arpreply={'arpreply\x00', 0x10}}]}, {0x0, '\x00', 0x1}]}, 0x1f6) 16.781348ms ago: executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x1e, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 0s ago: executing program 3: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f0000000040)={[{@autodefrag}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nodatacow}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580), 0x4) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000030c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000f40)=ANY=[@ANYRES64=r2, @ANYRES8, @ANYRES64=r4, @ANYRES64=r3, @ANYRES32, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESOCT=r5, @ANYRES8, @ANYRES64=r6], 0x0, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ease wait. [ 49.093671][ T4296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.107196][ T4333] XFS (loop0): Quotacheck: Done. [ 49.161832][ T3990] XFS (loop0): Unmounting Filesystem [ 49.283967][ T4296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.368447][ T4296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.471454][ T4296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.679411][ T4296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.720265][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 49.742931][ T4296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.792214][ T4296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.840193][ T4296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.036951][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.059708][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.060953][ T4379] loop3: detected capacity change from 0 to 40427 [ 50.062360][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.073609][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.089254][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.092260][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.094873][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.096776][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.106076][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.128609][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.131767][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.141107][ T4130] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.142025][ T4379] F2FS-fs (loop3): invalid crc value [ 50.143037][ T4130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.147270][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.168729][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.176667][ T4379] F2FS-fs (loop3): Found nat_bits in checkpoint [ 50.186432][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.201188][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.226624][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.229349][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.232735][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.237794][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.242709][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.246419][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.248924][ T4379] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 50.252943][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.258367][ T4379] F2FS-fs (loop3): Corrupted max_depth of 3: 4294967295 [ 50.259406][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.395123][ T4392] loop1: detected capacity change from 0 to 32768 [ 50.434972][ T4392] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4392) [ 50.446364][ T4392] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 50.454828][ T4392] BTRFS info (device loop1): use zlib compression, level 3 [ 50.461747][ T4392] BTRFS info (device loop1): turning on sync discard [ 50.470781][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.472799][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.480635][ T4392] BTRFS info (device loop1): max_inline at 0 [ 50.485769][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.487843][ T4392] BTRFS info (device loop1): using free space tree [ 50.497896][ T4392] BTRFS info (device loop1): has skinny extents [ 50.532694][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.535364][ T3995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.553048][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.555513][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.558240][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.562400][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.568441][ T4296] device veth0_vlan entered promiscuous mode [ 50.587299][ T4296] device veth1_vlan entered promiscuous mode [ 50.620727][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.623271][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.625753][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.628869][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.675445][ T4392] BTRFS info (device loop1): enabling ssd optimizations [ 50.691594][ T4296] device veth0_macvtap entered promiscuous mode [ 50.709338][ T4296] device veth1_macvtap entered promiscuous mode [ 50.744378][ T4433] tun0: tun_chr_ioctl cmd 2147767519 [ 50.758025][ T4433] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 50.796365][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.799046][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.830034][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.833878][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.835373][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 50.836409][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.836427][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.836445][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.836457][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.836470][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.852308][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.862005][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.865105][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.867637][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.871534][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.898596][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.915157][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.922675][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.925303][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.928004][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.949405][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.958257][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.964430][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.967424][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.975395][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.985473][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.004740][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.135947][ T4296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.138734][ T4296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.145914][ T4296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.150705][ T4296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.159386][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.163895][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.291778][ T4171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.294188][ T4171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.297792][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.346627][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.349053][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.355936][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.801000][ T4130] Bluetooth: hci5: command 0x041b tx timeout [ 51.852710][ T4490] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 51.870808][ T4490] tipc: Started in network mode [ 51.873515][ T4490] tipc: Node identity 6, cluster identity 4711 [ 51.877551][ T4490] tipc: Node number set to 6 [ 52.147435][ T4501] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 52.155023][ T4501] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 52.161200][ T4501] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.1'. [ 52.176968][ T4502] tun0: tun_chr_ioctl cmd 2147767519 [ 52.188904][ T4502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 52.226775][ T4504] loop1: detected capacity change from 0 to 1024 [ 52.245658][ T4462] loop3: detected capacity change from 0 to 40427 [ 52.296885][ T4504] EXT4-fs (loop1): Test dummy encryption mode enabled [ 52.297480][ T4462] F2FS-fs (loop3): invalid crc value [ 52.312346][ T4504] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 52.322566][ T4462] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.326553][ T4504] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 52.345618][ T4462] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 52.347659][ T4504] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 52.357313][ T4462] F2FS-fs (loop3): Corrupted max_depth of 3: 4294967295 [ 52.403005][ T4504] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 52.554502][ T4504] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 52.867191][ T4537] device syzkaller0 entered promiscuous mode [ 53.016443][ T4549] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 53.206973][ T4561] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 53.226222][ T4561] team0: Device ipvlan1 failed to register rx_handler [ 53.376965][ T4566] loop3: detected capacity change from 0 to 8 [ 53.543638][ T4568] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 53.545708][ T4568] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 53.619131][ T4553] loop4: detected capacity change from 0 to 40427 [ 53.687180][ T4553] F2FS-fs (loop4): invalid crc value [ 53.709794][ T4553] F2FS-fs (loop4): Found nat_bits in checkpoint [ 53.732118][ T4553] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 53.749043][ T4553] F2FS-fs (loop4): Corrupted max_depth of 3: 4294967295 [ 53.887909][ T4034] Bluetooth: hci5: command 0x040f tx timeout [ 53.901680][ T4579] tun0: tun_chr_ioctl cmd 2147767519 [ 53.908690][ T4579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 54.100028][ T4587] ubi0: attaching mtd0 [ 54.102222][ T4587] ubi0: scanning is finished [ 54.103417][ T4587] ubi0: empty MTD device detected [ 54.935198][ T4587] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 55.186445][ T4605] loop4: detected capacity change from 0 to 1024 [ 55.244494][ T4605] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 55.249444][ T4605] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.265039][ T4605] EXT4-fs error (device loop4): __ext4_get_inode_loc:4309: comm syz-executor.4: Invalid inode table block 0 in block_group 0 [ 55.272727][ T4605] EXT4-fs (loop4): Remounting filesystem read-only [ 55.274816][ T4605] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 55.282307][ T4605] EXT4-fs error (device loop4): ext4_quota_write:6591: inode #3: comm syz-executor.4: mark_inode_dirty error [ 55.304027][ T4605] Quota error (device loop4): write_blk: dquota write failed [ 55.314479][ T4605] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 55.328915][ T4605] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz-executor.4: Failed to acquire dquot type 0 [ 55.349396][ T4605] EXT4-fs (loop4): 1 truncate cleaned up [ 55.368148][ T4605] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 55.392244][ T4618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 55.669578][ T4618] loop3: detected capacity change from 0 to 32768 [ 55.789164][ T4618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4618) [ 55.800493][ T4618] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 55.805644][ T4618] BTRFS info (device loop3): use zlib compression, level 3 [ 55.808840][ T4618] BTRFS info (device loop3): using free space tree [ 55.812884][ T4618] BTRFS info (device loop3): has skinny extents [ 55.938402][ T4618] BTRFS info (device loop3): enabling ssd optimizations [ 55.961583][ T4034] Bluetooth: hci5: command 0x0419 tx timeout [ 56.416147][ T4647] ubi0: attaching mtd0 [ 56.425175][ T4647] ubi0: scanning is finished [ 57.053953][ T4647] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 57.183926][ T4650] tun0: tun_chr_ioctl cmd 2147767519 [ 57.186371][ T4650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 58.061273][ T4672] ubi0: attaching mtd0 [ 58.067637][ T4672] ubi0: scanning is finished [ 58.400820][ T4672] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 58.411020][ T4674] loop1: detected capacity change from 0 to 256 [ 58.436085][ T4670] loop4: detected capacity change from 0 to 1024 [ 58.462935][ T4674] FAT-fs (loop1): Unrecognized mount option "\ocase" or missing value [ 58.482155][ T4670] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.485326][ T4670] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.503327][ T4670] EXT4-fs error (device loop4): __ext4_get_inode_loc:4309: comm syz-executor.4: Invalid inode table block 0 in block_group 0 [ 58.513131][ T4670] EXT4-fs (loop4): Remounting filesystem read-only [ 58.515030][ T4670] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 58.522620][ T4670] EXT4-fs error (device loop4): ext4_quota_write:6591: inode #3: comm syz-executor.4: mark_inode_dirty error [ 58.610810][ T4670] Quota error (device loop4): write_blk: dquota write failed [ 58.612935][ T4670] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 58.629309][ T4683] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 58.636577][ T4670] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz-executor.4: Failed to acquire dquot type 0 [ 58.642619][ T4670] EXT4-fs (loop4): 1 truncate cleaned up [ 58.659003][ T4670] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 59.299223][ T4691] ubi0: attaching mtd0 [ 59.700059][ T4691] ubi0: scanning is finished [ 59.737031][ T4691] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 59.893198][ T4702] Zero length message leads to an empty skb [ 59.935172][ T4704] sp0: Synchronizing with TNC [ 60.930050][ T4727] ubi0: attaching mtd0 [ 60.935894][ T4727] ubi0: scanning is finished [ 61.236789][ T4727] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 61.300996][ T4733] loop2: detected capacity change from 0 to 256 [ 61.332733][ T4733] FAT-fs (loop2): Unrecognized mount option "\ocase" or missing value [ 61.561143][ T4737] ubi0: attaching mtd0 [ 61.566739][ T4737] ubi0: scanning is finished [ 62.179672][ T4737] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 62.262897][ T4743] loop1: detected capacity change from 0 to 1024 [ 62.313505][ T4743] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 62.322455][ T4743] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.331953][ T4743] EXT4-fs error (device loop1): __ext4_get_inode_loc:4309: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 62.362316][ T4743] EXT4-fs (loop1): Remounting filesystem read-only [ 62.364066][ T4743] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 62.368602][ T4743] EXT4-fs error (device loop1): ext4_quota_write:6591: inode #3: comm syz-executor.1: mark_inode_dirty error [ 62.406320][ T4743] Quota error (device loop1): write_blk: dquota write failed [ 62.408524][ T4743] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 62.411340][ T4743] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz-executor.1: Failed to acquire dquot type 0 [ 62.415692][ T4743] EXT4-fs (loop1): 1 truncate cleaned up [ 62.419462][ T4743] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 62.570498][ T4764] loop4: detected capacity change from 0 to 4096 [ 63.231173][ T4772] ubi0: attaching mtd0 [ 63.237702][ T4772] ubi0: scanning is finished [ 63.530867][ T4772] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 63.584477][ T4764] ntfs: volume version 3.1. [ 63.835893][ T4778] ubi0: attaching mtd0 [ 63.842446][ T4778] ubi0: scanning is finished [ 64.077102][ T4778] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 64.391560][ T4795] loop3: detected capacity change from 0 to 256 [ 64.411424][ T4795] FAT-fs (loop3): Unrecognized mount option "\ocase" or missing value [ 65.365834][ T4806] loop2: detected capacity change from 0 to 1024 [ 65.419754][ T4807] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.428369][ T4806] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 65.432481][ T4806] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.445189][ T4806] EXT4-fs error (device loop2): __ext4_get_inode_loc:4309: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 65.859490][ T4806] EXT4-fs (loop2): Remounting filesystem read-only [ 66.127091][ T4806] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 66.337967][ T4806] EXT4-fs error (device loop2): ext4_quota_write:6591: inode #3: comm syz-executor.2: mark_inode_dirty error [ 66.355269][ T4806] Quota error (device loop2): write_blk: dquota write failed [ 66.370200][ T4806] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 66.373021][ T4806] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz-executor.2: Failed to acquire dquot type 0 [ 66.381452][ T4806] EXT4-fs (loop2): 1 truncate cleaned up [ 66.385515][ T4806] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 66.703651][ T4834] ubi0: attaching mtd0 [ 66.710180][ T4834] ubi0: scanning is finished [ 67.378573][ T4834] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 67.835672][ T4851] ubi0: attaching mtd0 [ 67.837331][ T4851] ubi0: scanning is finished [ 68.534870][ T4851] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 68.683221][ T4861] loop1: detected capacity change from 0 to 256 [ 69.183267][ T4861] FAT-fs (loop1): Unrecognized mount option "\ocase" or missing value [ 69.643475][ T25] cfg80211: failed to load regulatory.db [ 69.733022][ T4873] loop2: detected capacity change from 0 to 512 [ 70.516425][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.518358][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.524913][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.526969][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.562789][ T7] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 70.654266][ T4871] loop2: detected capacity change from 0 to 256 [ 71.153501][ T4885] ubi0: attaching mtd0 [ 71.155463][ T4885] ubi0: scanning is finished [ 71.266517][ T4871] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.378188][ T4871] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 71.559230][ T4885] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 71.632955][ T4882] loop0: detected capacity change from 0 to 1024 [ 71.882274][ T4882] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 71.885081][ T4882] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.908753][ T4882] EXT4-fs error (device loop0): __ext4_get_inode_loc:4309: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 71.927843][ T4900] loop3: detected capacity change from 0 to 1024 [ 71.956412][ T4882] EXT4-fs (loop0): Remounting filesystem read-only [ 71.958324][ T4882] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 71.967627][ T4882] EXT4-fs error (device loop0): ext4_quota_write:6591: inode #3: comm syz-executor.0: mark_inode_dirty error [ 71.987833][ T4900] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 71.987923][ T4882] Quota error (device loop0): write_blk: dquota write failed [ 71.992423][ T4882] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 71.995915][ T4882] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz-executor.0: Failed to acquire dquot type 0 [ 74.113135][ T4905] ubi0: attaching mtd0 [ 74.114783][ T4905] ubi0: scanning is finished [ 74.158880][ T4900] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.229314][ T4882] EXT4-fs (loop0): 1 truncate cleaned up [ 74.252526][ T4882] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 74.263762][ T4900] EXT4-fs error (device loop3): __ext4_get_inode_loc:4309: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 74.281155][ T4905] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 74.283271][ T4905] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 74.285237][ T4905] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 74.287008][ T4905] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 74.288840][ T4905] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 74.290543][ T4905] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 74.292562][ T4905] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3876726487 [ 74.295071][ T4905] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 74.298525][ T4910] ubi0: background thread "ubi_bgt0d" started, PID 4910 [ 74.334914][ T4900] EXT4-fs (loop3): Remounting filesystem read-only [ 74.336828][ T4900] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 74.346233][ T4900] EXT4-fs error (device loop3): ext4_quota_write:6591: inode #3: comm syz-executor.3: mark_inode_dirty error [ 74.351350][ T4900] Quota error (device loop3): write_blk: dquota write failed [ 74.352317][ T4915] loop2: detected capacity change from 0 to 256 [ 74.359861][ T4900] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 74.383829][ T4900] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz-executor.3: Failed to acquire dquot type 0 [ 74.400384][ T4900] EXT4-fs (loop3): 1 truncate cleaned up [ 74.410358][ T4900] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 74.414950][ T4915] FAT-fs (loop2): Unrecognized mount option "\ocase" or missing value [ 75.966920][ T4942] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 76.042980][ T4944] ubi: mtd0 is already attached to ubi0 [ 76.858656][ T4942] udc-core: couldn't find an available UDC or it's busy [ 76.866321][ T4942] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.981787][ T4950] loop1: detected capacity change from 0 to 1024 [ 77.026408][ T4950] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 77.029460][ T4950] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.042958][ T4950] EXT4-fs error (device loop1): __ext4_get_inode_loc:4309: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 77.050507][ T4950] EXT4-fs (loop1): Remounting filesystem read-only [ 77.052535][ T4950] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 77.055531][ T4950] EXT4-fs error (device loop1): ext4_quota_write:6591: inode #3: comm syz-executor.1: mark_inode_dirty error [ 77.078929][ T4950] Quota error (device loop1): write_blk: dquota write failed [ 77.099460][ T4950] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 77.124315][ T4950] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz-executor.1: Failed to acquire dquot type 0 [ 77.160872][ T4950] EXT4-fs (loop1): 1 truncate cleaned up [ 77.171331][ T4950] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 77.413572][ T4921] loop4: detected capacity change from 0 to 32768 [ 78.013938][ T4969] ubi: mtd0 is already attached to ubi0 [ 79.057334][ T4978] ubi: mtd0 is already attached to ubi0 [ 80.641977][ T4993] loop3: detected capacity change from 0 to 512 [ 80.644638][ T4991] loop0: detected capacity change from 0 to 1024 [ 80.683217][ T4998] loop4: detected capacity change from 0 to 256 [ 80.700276][ T4993] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.703852][ T4993] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.728478][ T4993] EXT4-fs (loop3): 1 orphan inode deleted [ 80.731356][ T4998] FAT-fs (loop4): Unrecognized mount option "\ocase" or missing value [ 80.757957][ T4991] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 80.759862][ T4993] EXT4-fs (loop3): 1 truncate cleaned up [ 80.761498][ T4991] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.761888][ T4993] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 80.771885][ T4991] EXT4-fs error (device loop0): __ext4_get_inode_loc:4309: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 80.780912][ T4991] EXT4-fs (loop0): Remounting filesystem read-only [ 80.783912][ T4991] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 80.789607][ T4991] EXT4-fs error (device loop0): ext4_quota_write:6591: inode #3: comm syz-executor.0: mark_inode_dirty error [ 80.802696][ T4991] Quota error (device loop0): write_blk: dquota write failed [ 80.804674][ T4991] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 80.807459][ T4991] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz-executor.0: Failed to acquire dquot type 0 [ 80.840318][ T4991] EXT4-fs (loop0): 1 truncate cleaned up [ 80.843249][ T4991] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 81.092196][ T4005] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 81.163593][ T4005] EXT4-fs (loop3): Remounting filesystem read-only [ 81.173429][ T5016] loop2: detected capacity change from 0 to 1024 [ 81.181438][ T4005] EXT4-fs error (device loop3): ext4_lookup:1855: inode #16: comm syz-executor.3: iget: bad extra_isize 46 (inode size 256) [ 81.377696][ T5019] ubi: mtd0 is already attached to ubi0 [ 81.595662][ T4005] EXT4-fs error (device loop3): ext4_lookup:1855: inode #16: comm syz-executor.3: iget: bad extra_isize 46 (inode size 256) [ 81.980098][ C0] sched: RT throttling activated [ 82.116105][ T5016] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 82.119512][ T5016] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.127278][ T5016] EXT4-fs error (device loop2): __ext4_get_inode_loc:4309: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 82.142101][ T5016] EXT4-fs (loop2): Remounting filesystem read-only [ 82.143899][ T5016] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 82.152656][ T5016] EXT4-fs error (device loop2): ext4_quota_write:6591: inode #3: comm syz-executor.2: mark_inode_dirty error [ 82.155756][ T5016] Quota error (device loop2): write_blk: dquota write failed [ 82.157851][ T5016] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 82.168925][ T5016] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz-executor.2: Failed to acquire dquot type 0 [ 82.184350][ T5016] EXT4-fs (loop2): 1 truncate cleaned up [ 82.191864][ T5016] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 82.225353][ T5031] loop0: detected capacity change from 0 to 764 [ 82.402230][ T5041] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.414711][ T5031] Symlink component flag not implemented [ 82.466258][ T5031] Symlink component flag not implemented (129) [ 82.629466][ T5049] loop0: detected capacity change from 0 to 256 [ 82.661538][ T5049] FAT-fs (loop0): Unrecognized mount option "\ocase" or missing value [ 83.641759][ T5064] loop0: detected capacity change from 0 to 1024 [ 83.723029][ T5064] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 83.725912][ T5064] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.728976][ T5064] EXT4-fs error (device loop0): __ext4_get_inode_loc:4309: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 83.830212][ T5064] EXT4-fs (loop0): Remounting filesystem read-only [ 83.832053][ T5064] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 83.850701][ T5064] EXT4-fs error (device loop0): ext4_quota_write:6591: inode #3: comm syz-executor.0: mark_inode_dirty error [ 83.873232][ T5064] Quota error (device loop0): write_blk: dquota write failed [ 83.875328][ T5064] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 83.878178][ T5064] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz-executor.0: Failed to acquire dquot type 0 [ 83.908266][ T5064] EXT4-fs (loop0): 1 truncate cleaned up [ 83.915923][ T5064] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 83.927650][ T5076] loop1: detected capacity change from 0 to 1024 [ 83.963568][ T5076] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 84.005701][ T5076] EXT4-fs (loop1): orphan cleanup on readonly fs [ 84.012406][ T5076] EXT4-fs error (device loop1): __ext4_get_inode_loc:4309: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 84.049066][ T5076] EXT4-fs (loop1): Remounting filesystem read-only [ 84.069005][ T5076] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 84.252314][ T5076] EXT4-fs error (device loop1): ext4_quota_write:6591: inode #3: comm syz-executor.1: mark_inode_dirty error [ 84.255785][ T5076] Quota error (device loop1): write_blk: dquota write failed [ 84.259079][ T5076] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 84.281377][ T5076] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz-executor.1: Failed to acquire dquot type 0 [ 84.306727][ T5076] EXT4-fs (loop1): 1 truncate cleaned up [ 84.322893][ T5076] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 84.371191][ T5066] chnl_net:caif_netlink_parms(): no params data found [ 84.828614][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.838759][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.855570][ T5066] device bridge_slave_0 entered promiscuous mode [ 84.863909][ T5066] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.881379][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.885250][ T5066] device bridge_slave_1 entered promiscuous mode [ 84.885334][ T5112] loop0: detected capacity change from 0 to 256 [ 84.921663][ T5112] FAT-fs (loop0): Unrecognized mount option "\ocase" or missing value [ 84.981098][ T5066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.002104][ T5066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.136208][ T5066] team0: Port device team_slave_0 added [ 85.161278][ T5066] team0: Port device team_slave_1 added [ 85.220541][ T5116] tipc: Can't bind to reserved service type 0 [ 85.274574][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.278887][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.294860][ T5066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.303523][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.305687][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.313093][ T5066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.468157][ T5107] loop1: detected capacity change from 0 to 32768 [ 85.643108][ T5066] device hsr_slave_0 entered promiscuous mode [ 85.700692][ T5066] device hsr_slave_1 entered promiscuous mode [ 85.760791][ T5066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.764024][ T5066] Cannot create hsr debugfs directory [ 86.013631][ T4358] Bluetooth: hci3: command 0x0409 tx timeout [ 86.251787][ T5066] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.263334][ T5133] loop2: detected capacity change from 0 to 1024 [ 86.300961][ T5135] loop0: detected capacity change from 0 to 256 [ 86.314767][ T5133] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 86.317462][ T5133] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.326103][ T5133] EXT4-fs error (device loop2): __ext4_get_inode_loc:4309: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 86.350391][ T5133] EXT4-fs (loop2): Remounting filesystem read-only [ 86.352124][ T5133] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 86.356724][ T5066] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.357653][ T5133] EXT4-fs error (device loop2): ext4_quota_write:6591: inode #3: comm syz-executor.2: mark_inode_dirty error [ 86.382945][ T5133] Quota error (device loop2): write_blk: dquota write failed [ 86.385179][ T5133] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 86.404072][ T5135] process 'syz-executor.0' launched '/dev/fd/4' with NULL argv: empty string added [ 86.406209][ T5133] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz-executor.2: Failed to acquire dquot type 0 [ 86.409803][ T5133] EXT4-fs (loop2): 1 truncate cleaned up [ 86.416028][ T5133] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 86.635627][ T5066] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.248659][ T5145] ubi: mtd0 is already attached to ubi0 [ 87.286992][ T5066] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.427328][ T5156] loop4: detected capacity change from 0 to 256 [ 87.481540][ T5156] FAT-fs (loop4): Unrecognized mount option "\ocase" or missing value [ 87.577223][ T5066] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.746275][ T5066] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.782329][ T5066] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.812875][ T5066] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.040252][ T4038] Bluetooth: hci3: command 0x041b tx timeout [ 88.108074][ T5066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.152354][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.154884][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.277471][ T5160] loop2: detected capacity change from 0 to 32768 [ 88.312346][ T5066] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.355700][ T5160] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.362648][ T5160] lbmIODone: I/O error in JFS log [ 88.382715][ T5160] *** Log Format Error ! *** [ 88.384534][ T5160] lmLogInit: exit(-22) [ 88.385916][ T5160] lmLogOpen: exit(-22) [ 88.397236][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.400223][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.406010][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.408012][ T4038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.427283][ T5160] jfs: Unrecognized mount option "ÿÿÿÿ00000000000000000000000ñ¼líXc¥vÌ:ýQºòœÞ"¨C’ôæo÷ï"ªš÷'ήŠŽÉ_Á·0ƒÞ-è% Ë+ çtý³6P×ÚÎ'ÁkÂ;/|·%…T‰9i(Š©%ZŠ’@øG~‚ºͱý\¢ñ«œâÌÄÒÚøÚÇ%S:UVTúõà’OvO7MfO­Jj²NÀè"çùBnŽ]áþXZ [ 88.427283][ T5160] èÇÄÕ°8ö¯Ö4Ôb¹ûL±¡ú–*‹" or missing value [ 88.443510][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.445978][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.448627][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.457536][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.459489][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.472640][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.499409][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.502638][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.509644][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.526879][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.531502][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.538564][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.544663][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.549647][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.561263][ T5066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.583384][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.591470][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.594277][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.761461][ T5188] ubi: mtd0 is already attached to ubi0 [ 89.621433][ T5191] loop2: detected capacity change from 0 to 1024 [ 89.673265][ T5191] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 89.676209][ T5191] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.691901][ T5191] EXT4-fs error (device loop2): __ext4_get_inode_loc:4309: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 89.703371][ T5191] EXT4-fs (loop2): Remounting filesystem read-only [ 89.705371][ T5191] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 89.731941][ T5191] EXT4-fs error (device loop2): ext4_quota_write:6591: inode #3: comm syz-executor.2: mark_inode_dirty error [ 89.752480][ T5191] Quota error (device loop2): write_blk: dquota write failed [ 89.790520][ T5191] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 89.821424][ T5066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.824264][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.826425][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.828686][ T5191] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz-executor.2: Failed to acquire dquot type 0 [ 89.844532][ T5191] EXT4-fs (loop2): 1 truncate cleaned up [ 89.855022][ T5191] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 89.892392][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.895352][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.938818][ T5210] loop1: detected capacity change from 0 to 256 [ 89.956595][ T5205] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 89.961467][ T5210] FAT-fs (loop1): Unrecognized mount option "\ocase" or missing value [ 90.014056][ T5066] device veth0_vlan entered promiscuous mode [ 90.035096][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.042152][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.063413][ T5066] device veth1_vlan entered promiscuous mode [ 90.077890][ T5205] loop4: detected capacity change from 0 to 1024 [ 90.082286][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.084937][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.091567][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.127845][ T3553] Bluetooth: hci3: command 0x040f tx timeout [ 90.196093][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.199196][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.210514][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.227802][ T5066] device veth0_macvtap entered promiscuous mode [ 90.248025][ T5066] device veth1_macvtap entered promiscuous mode [ 90.249570][ T5205] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 90.298263][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.308293][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.321012][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.329384][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.339947][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.347709][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.354947][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.368062][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.377328][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.389555][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.398343][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.405966][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.422873][ T5066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.427562][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.430614][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.433535][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.441936][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.455977][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.469015][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.477630][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.487174][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.494874][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.504910][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.512015][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.517320][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.538535][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.552338][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.558327][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.569351][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.581149][ T4175] hfsplus: b-tree write err: -5, ino 4 [ 90.582915][ T5066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.603043][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.606220][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.631287][ T5066] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.639086][ T5066] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.650817][ T5066] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.660682][ T5066] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.834961][ T4162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.837404][ T4162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.844182][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.929337][ T345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.934000][ T345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.938681][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.081948][ T5229] ubi: mtd0 is already attached to ubi0 [ 92.160570][ T5245] ubi: mtd0 is already attached to ubi0 [ 92.201801][ T4050] Bluetooth: hci3: command 0x0419 tx timeout [ 92.909721][ T5250] loop3: detected capacity change from 0 to 1024 [ 92.915521][ T5249] loop0: detected capacity change from 0 to 1024 [ 92.930821][ T5251] loop2: detected capacity change from 0 to 256 [ 92.962553][ T5251] FAT-fs (loop2): Unrecognized mount option "\ocase" or missing value [ 92.995074][ T5249] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 92.998036][ T5249] EXT4-fs (loop0): orphan cleanup on readonly fs [ 93.005238][ T5249] EXT4-fs error (device loop0): __ext4_get_inode_loc:4309: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 93.018075][ T5249] EXT4-fs (loop0): Remounting filesystem read-only [ 93.021027][ T5249] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 93.034659][ T5249] EXT4-fs error (device loop0): ext4_quota_write:6591: inode #3: comm syz-executor.0: mark_inode_dirty error [ 93.038338][ T5249] Quota error (device loop0): write_blk: dquota write failed [ 93.040585][ T5249] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 93.051092][ T5249] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz-executor.0: Failed to acquire dquot type 0 [ 93.056736][ T5249] EXT4-fs (loop0): 1 truncate cleaned up [ 93.061253][ T5249] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 93.094284][ T1737] hfsplus: b-tree write err: -5, ino 4 [ 94.041796][ T5276] ubi: mtd0 is already attached to ubi0 [ 94.843434][ T5264] loop3: detected capacity change from 0 to 32768 [ 94.863503][ T5264] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5264) [ 94.884732][ T5264] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 94.887138][ T5264] BTRFS info (device loop3): using free space tree [ 94.912394][ T5264] BTRFS info (device loop3): has skinny extents [ 95.244085][ T5299] ubi: mtd0 is already attached to ubi0 [ 95.965988][ T5304] loop1: detected capacity change from 0 to 1024 [ 96.013881][ T5304] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 96.017003][ T5304] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.026768][ T5304] EXT4-fs error (device loop1): __ext4_get_inode_loc:4309: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 96.040021][ T5304] EXT4-fs (loop1): Remounting filesystem read-only [ 96.042908][ T5314] loop4: detected capacity change from 0 to 256 [ 96.046214][ T5304] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 96.049269][ T5304] EXT4-fs error (device loop1): ext4_quota_write:6591: inode #3: comm syz-executor.1: mark_inode_dirty error [ 96.053214][ T5304] Quota error (device loop1): write_blk: dquota write failed [ 96.055504][ T5304] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 96.058571][ T5304] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz-executor.1: Failed to acquire dquot type 0 [ 96.063094][ T5304] EXT4-fs (loop1): 1 truncate cleaned up [ 96.065293][ T5304] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 96.121679][ T5314] FAT-fs (loop4): Unrecognized mount option "\ocase" or missing value [ 96.126514][ T5264] BTRFS info (device loop3): enabling ssd optimizations [ 96.303743][ T5316] device syzkaller0 entered promiscuous mode [ 96.360791][ T5328] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 96.368440][ T5333] loop2: detected capacity change from 0 to 256 [ 96.384612][ T5333] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 96.926075][ T5342] ubi: mtd0 is already attached to ubi0 [ 97.896706][ T5361] ubi: mtd0 is already attached to ubi0 [ 98.745545][ T5367] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 98.756131][ T5370] loop2: detected capacity change from 0 to 128 [ 98.838232][ T5374] loop0: detected capacity change from 0 to 256 [ 98.882105][ T5374] FAT-fs (loop0): Unrecognized mount option "\ocase" or missing value [ 98.947472][ T5367] loop3: detected capacity change from 0 to 4096 [ 100.242643][ T5388] loop1: detected capacity change from 0 to 1024 [ 100.314517][ T5388] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 100.328168][ T5388] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.331642][ T5388] EXT4-fs error (device loop1): __ext4_get_inode_loc:4309: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 100.368566][ T5388] EXT4-fs (loop1): Remounting filesystem read-only [ 100.388449][ T5388] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 100.416267][ T5388] EXT4-fs error (device loop1): ext4_quota_write:6591: inode #3: comm syz-executor.1: mark_inode_dirty error [ 100.437537][ T5388] Quota error (device loop1): write_blk: dquota write failed [ 100.446587][ T5388] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 100.464068][ T5388] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz-executor.1: Failed to acquire dquot type 0 [ 100.482409][ T5388] EXT4-fs (loop1): 1 truncate cleaned up [ 100.491393][ T5388] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 100.662006][ T5407] ubi: mtd0 is already attached to ubi0 [ 101.809843][ T5421] ubi: mtd0 is already attached to ubi0 [ 102.608566][ T5427] loop1: detected capacity change from 0 to 256 [ 102.628142][ T5431] mmap: syz-executor.0 (5431): VmData 37543936 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 102.641816][ T5427] FAT-fs (loop1): Unrecognized mount option "\ocase" or missing value [ 104.845398][ T5448] ubi: mtd0 is already attached to ubi0 [ 105.060474][ T5455] loop4: detected capacity change from 0 to 1024 [ 105.179602][ T5455] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 105.182591][ T5455] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.201256][ T5455] EXT4-fs error (device loop4): __ext4_get_inode_loc:4309: comm syz-executor.4: Invalid inode table block 0 in block_group 0 [ 105.225606][ T5455] EXT4-fs (loop4): Remounting filesystem read-only [ 105.240293][ T5455] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 105.271250][ T5455] EXT4-fs error (device loop4): ext4_quota_write:6591: inode #3: comm syz-executor.4: mark_inode_dirty error [ 105.299466][ T5455] Quota error (device loop4): write_blk: dquota write failed [ 105.322684][ T5455] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 105.350785][ T5455] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz-executor.4: Failed to acquire dquot type 0 [ 105.359335][ T5455] EXT4-fs (loop4): 1 truncate cleaned up [ 105.379663][ T5455] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 105.562342][ T5474] loop2: detected capacity change from 0 to 1024 [ 105.613623][ T5474] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 105.617137][ T5474] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 105.617137][ T5474] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 105.617137][ T5474] [ 105.628756][ T5474] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 105.680065][ T5474] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouser_xattr,jqfmt=vfsv1,max_batch_time=0x0000000000000003,lazytime,delalloc,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 105.795520][ T5466] loop0: detected capacity change from 0 to 32768 [ 105.808379][ T5466] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5466) [ 105.826960][ T5466] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 105.829226][ T5466] BTRFS info (device loop0): use zlib compression, level 3 [ 105.831150][ T5466] BTRFS info (device loop0): using free space tree [ 105.832905][ T5466] BTRFS info (device loop0): has skinny extents [ 105.994002][ T5466] BTRFS info (device loop0): enabling ssd optimizations [ 105.997140][ T5466] BTRFS info (device loop0): checking UUID tree [ 106.017781][ T5459] loop3: detected capacity change from 0 to 32768 [ 106.147474][ T5459] XFS (loop3): Mounting V5 Filesystem [ 106.584361][ T5459] XFS (loop3): Ending clean mount [ 106.606351][ T5459] XFS (loop3): Quotacheck needed: Please wait. [ 106.647695][ T5459] XFS (loop3): Quotacheck: Done. [ 106.841942][ T5522] loop4: detected capacity change from 0 to 256 [ 106.872182][ T5066] XFS (loop3): Unmounting Filesystem [ 106.891394][ T5522] FAT-fs (loop4): Unrecognized mount option "\ocase" or missing value [ 106.961170][ T5525] loop2: detected capacity change from 0 to 2048 [ 107.002981][ T5525] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 107.047025][ T5525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.362809][ T5532] ubi: mtd0 is already attached to ubi0 [ 108.241785][ T5539] loop3: detected capacity change from 0 to 1024 [ 108.334600][ T5539] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 108.337482][ T5539] EXT4-fs (loop3): orphan cleanup on readonly fs [ 108.343073][ T5539] EXT4-fs error (device loop3): __ext4_get_inode_loc:4309: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 108.364719][ T5539] EXT4-fs (loop3): Remounting filesystem read-only [ 108.366564][ T5539] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 108.370691][ T5539] EXT4-fs error (device loop3): ext4_quota_write:6591: inode #3: comm syz-executor.3: mark_inode_dirty error [ 108.375129][ T5539] Quota error (device loop3): write_blk: dquota write failed [ 108.377278][ T5539] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 108.383234][ T5539] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz-executor.3: Failed to acquire dquot type 0 [ 108.387866][ T5539] EXT4-fs (loop3): 1 truncate cleaned up [ 108.392201][ T5539] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 108.432382][ T5548] block nbd4: shutting down sockets [ 108.594075][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.598296][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.600710][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.789080][ T5562] ubi: mtd0 is already attached to ubi0 [ 109.495219][ T5560] device bridge_slave_0 left promiscuous mode [ 109.498227][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.651677][ T5560] device bridge_slave_1 left promiscuous mode [ 109.663207][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.733037][ T5560] bond0: (slave bond_slave_0): Releasing backup interface [ 109.790969][ T5560] bond0: (slave bond_slave_1): Releasing backup interface [ 109.872568][ T5560] team0: Port device team_slave_0 removed [ 109.919000][ T5560] team0: Port device team_slave_1 removed [ 109.926272][ T5560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.933278][ T5560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.953658][ T5560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.959459][ T5560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.017564][ T5569] bridge0: port 1(geneve1) entered blocking state [ 110.026417][ T5569] bridge0: port 1(geneve1) entered disabled state [ 110.044801][ T5569] device geneve1 entered promiscuous mode [ 110.062632][ T5569] bridge0: port 1(geneve1) entered blocking state [ 110.064837][ T5569] bridge0: port 1(geneve1) entered forwarding state [ 110.194560][ T5555] loop0: detected capacity change from 0 to 32768 [ 110.227290][ T5580] bridge0: port 3(syz_tun) entered blocking state [ 110.229221][ T5580] bridge0: port 3(syz_tun) entered disabled state [ 110.240290][ T5555] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5555) [ 110.244897][ T5580] device syz_tun entered promiscuous mode [ 110.248042][ T5580] bridge0: port 3(syz_tun) entered blocking state [ 110.249995][ T5580] bridge0: port 3(syz_tun) entered forwarding state [ 110.275361][ T5555] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 110.277643][ T5555] BTRFS info (device loop0): use zlib compression, level 3 [ 110.279602][ T5555] BTRFS info (device loop0): turning on sync discard [ 110.295535][ T5555] BTRFS info (device loop0): max_inline at 0 [ 110.297288][ T5555] BTRFS info (device loop0): enabling ssd optimizations [ 110.309246][ T5555] BTRFS info (device loop0): using spread ssd allocation scheme [ 110.323582][ T5555] BTRFS info (device loop0): using free space tree [ 110.330828][ T5555] BTRFS info (device loop0): has skinny extents [ 110.576735][ T4171] device hsr_slave_0 left promiscuous mode [ 110.611363][ T4171] device hsr_slave_1 left promiscuous mode [ 110.672175][ T4171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.674321][ T4171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.698404][ T4171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.718686][ T4171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.745786][ T4171] device bridge_slave_1 left promiscuous mode [ 110.757293][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.953011][ T4171] device bridge_slave_0 left promiscuous mode [ 110.954791][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.691440][ T4171] device veth1_macvtap left promiscuous mode [ 111.693378][ T4171] device veth0_macvtap left promiscuous mode [ 111.694934][ T4171] device veth1_vlan left promiscuous mode [ 111.696553][ T4171] device veth0_vlan left promiscuous mode [ 111.901655][ T5635] overlayfs: unrecognized mount option "smackfstransmute=^\,fowner=00000000000000000000" or missing value [ 111.949899][ T5618] loop4: detected capacity change from 0 to 32768 [ 112.023519][ T5618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5618) [ 112.094411][ T5618] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 112.096767][ T5618] BTRFS info (device loop4): using free space tree [ 112.098377][ T5618] BTRFS info (device loop4): has skinny extents [ 113.189915][ T5618] BTRFS info (device loop4): enabling ssd optimizations [ 113.404364][ T4171] team0 (unregistering): Port device team_slave_1 removed [ 114.337385][ T4171] team0 (unregistering): Port device team_slave_0 removed [ 114.358602][ T4171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.550863][ T5659] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 114.553240][ T5659] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.569967][ T4171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.767085][ T4171] bond0 (unregistering): Released all slaves [ 114.913511][ T5625] 8021q: VLANs not supported on hsr0 [ 115.058756][ T5666] loop3: detected capacity change from 0 to 512 [ 115.209255][ T5666] EXT4-fs (loop3): Ignoring removed bh option [ 115.226218][ T5666] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.269364][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.302784][ T5666] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz-executor.3: bad orphan inode 17 [ 115.333659][ T5666] EXT4-fs (loop3): Remounting filesystem read-only [ 115.337898][ T5666] ext4_test_bit(bit=16, block=4) = 1 [ 115.347227][ T5666] is_bad_inode(inode)=0 [ 115.353074][ T5666] NEXT_ORPHAN(inode)=1048336 [ 115.357864][ T5666] max_ino=32 [ 115.358733][ T5666] i_nlink=0 [ 115.365821][ T5666] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,bh,inode_readahead_blks=0x0000000000010000,block_validity,block_validity,. Quota mode: none. [ 115.590937][ T5686] binder: 5685:5686 tried to acquire reference to desc 0, got 1 instead [ 115.598157][ T5686] binder: 5685:5686 got transaction with too large buffer [ 115.604039][ T5686] binder: 5685:5686 transaction failed 29201/-22, size 104-24 line 3350 [ 115.609260][ T3553] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.671505][ T5688] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 115.673581][ T5688] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 115.682873][ T5688] vhci_hcd vhci_hcd.0: Device attached [ 115.692105][ T5688] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.699617][ T5688] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.732870][ T5688] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 115.734640][ T5688] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.736894][ T5688] vhci_hcd vhci_hcd.0: Device attached [ 115.832783][ T5673] loop1: detected capacity change from 0 to 32768 [ 115.845979][ T5688] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.863489][ T5691] vhci_hcd: connection closed [ 115.865725][ T5689] vhci_hcd: connection closed [ 115.871960][ T4162] vhci_hcd: stop threads [ 115.877286][ T4162] vhci_hcd: release socket [ 115.880839][ T3553] vhci_hcd: vhci_device speed not set [ 115.886958][ T4162] vhci_hcd: disconnect device [ 115.898245][ T5673] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5673) [ 115.909339][ T4162] vhci_hcd: stop threads [ 115.919415][ T4162] vhci_hcd: release socket [ 115.928023][ T4162] vhci_hcd: disconnect device [ 115.935239][ T5673] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 115.949289][ T5673] BTRFS info (device loop1): force zlib compression, level 3 [ 115.950380][ T3553] usb 8-1: new full-speed USB device number 2 using vhci_hcd [ 115.953485][ T3553] usb 8-1: enqueue for inactive port 0 [ 115.960211][ T5673] BTRFS info (device loop1): force clearing of disk cache [ 115.966688][ T5673] BTRFS info (device loop1): setting nodatasum [ 115.977317][ T5673] BTRFS info (device loop1): allowing degraded mounts [ 115.982654][ T5673] BTRFS info (device loop1): enabling disk space caching [ 116.004607][ T5673] BTRFS info (device loop1): disk space caching is enabled [ 116.009983][ T5673] BTRFS info (device loop1): has skinny extents [ 116.030471][ T3553] vhci_hcd: vhci_device speed not set [ 116.063051][ T5684] loop0: detected capacity change from 0 to 32768 [ 116.104503][ T5684] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5684) [ 116.150566][ T5682] loop2: detected capacity change from 0 to 32768 [ 116.151829][ T5684] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 116.155058][ T5684] BTRFS error (device loop0): unrecognized mount option 'uid>00000000000000000000' [ 116.218591][ T5684] BTRFS error (device loop0): open_ctree failed [ 116.234603][ T5682] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5682) [ 116.245949][ T5673] BTRFS info (device loop1): clearing free space tree [ 116.248340][ T5673] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 116.268448][ T5673] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.292551][ T5682] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 116.295009][ T5682] BTRFS info (device loop2): enabling disk space caching [ 116.296874][ T5682] BTRFS info (device loop2): force clearing of disk cache [ 116.298676][ T5682] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 116.341522][ T5682] BTRFS info (device loop2): use zstd compression, level 3 [ 116.356103][ T5682] BTRFS info (device loop2): disk space caching is enabled [ 116.385539][ T5682] BTRFS info (device loop2): has skinny extents [ 116.482281][ T5662] BTRFS info (device loop1): balance: start -f -susage=0 [ 116.485381][ T5662] BTRFS info (device loop1): balance: ended with status: 0 [ 116.587762][ T5684] overlayfs: overlapping lowerdir path [ 116.931264][ T5701] loop4: detected capacity change from 0 to 40427 [ 116.973193][ T5701] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 116.975398][ T5701] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 117.053425][ T5682] BTRFS info (device loop2): enabling ssd optimizations [ 117.057021][ T5682] BTRFS info (device loop2): clearing free space tree [ 117.058844][ T5682] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.064684][ T5682] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.074763][ T5701] F2FS-fs (loop4): Found nat_bits in checkpoint [ 117.181663][ T5701] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 117.183812][ T5701] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.744340][ T5770] loop2: detected capacity change from 0 to 256 [ 117.807234][ T5773] ptrace attach of "/root/syz-executor.1 exec"[3994] was attempted by "/root/syz-executor.1 exec"[5773] [ 117.913723][ T5770] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 117.978161][ T5776] ptrace attach of "/root/syz-executor.1 exec"[3994] was attempted by "/root/syz-executor.1 exec"[5776] [ 118.069224][ T5779] udc-core: couldn't find an available UDC or it's busy [ 118.074500][ T5779] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.245176][ T5753] loop0: detected capacity change from 0 to 32768 [ 118.298779][ T5753] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5753) [ 118.335669][ T5753] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 118.346836][ T5753] BTRFS info (device loop0): using free space tree [ 118.352366][ T5753] BTRFS info (device loop0): has skinny extents [ 118.528024][ T5753] BTRFS info (device loop0): enabling ssd optimizations [ 118.993331][ T5817] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.212053][ T5830] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 119.256929][ T5833] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 119.381520][ T5835] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 119.404083][ T5835] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 119.522313][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.021406][ T5863] udc-core: couldn't find an available UDC or it's busy [ 120.027139][ T5863] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.192807][ T5867] udc-core: couldn't find an available UDC or it's busy [ 120.194635][ T5867] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.322136][ T5869] tipc: Failed to remove unknown binding: 66,1,1/6:3545959527/3545959529 [ 120.325527][ T5869] tipc: Failed to remove unknown binding: 66,1,1/6:3545959527/3545959529 [ 120.536929][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.605944][ T5883] udc-core: couldn't find an available UDC or it's busy [ 120.613954][ T5883] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.749760][ T5893] udc-core: couldn't find an available UDC or it's busy [ 120.756498][ T5893] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.823302][ T5899] udc-core: couldn't find an available UDC or it's busy [ 120.830268][ T5899] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 121.140358][ T5676] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.488702][ T5920] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 121.520381][ T5676] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.523494][ T5676] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 121.526026][ T5676] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 121.528566][ T5676] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.545286][ T5676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.767023][ T5676] snd-usb-audio: probe of 1-1:27.0 failed with error -12 [ 121.814096][ T5676] usb 1-1: USB disconnect, device number 2 [ 122.659534][ T5943] udc-core: couldn't find an available UDC or it's busy [ 122.668429][ T5943] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 122.727760][ T5948] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 122.730830][ T5948] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.733535][ T5948] device team0 entered promiscuous mode [ 122.735210][ T5948] device team_slave_0 entered promiscuous mode [ 122.737408][ T5948] device team_slave_1 entered promiscuous mode [ 122.748705][ T5948] bridge0: port 3(team0) entered blocking state [ 122.760392][ T5948] bridge0: port 3(team0) entered disabled state [ 122.764228][ T5948] bridge0: port 3(team0) entered blocking state [ 122.765956][ T5948] bridge0: port 3(team0) entered forwarding state [ 122.827561][ T5951] tipc: Started in network mode [ 122.829298][ T5951] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 122.842700][ T5951] tipc: Enabled bearer , priority 10 [ 123.394861][ T5965] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.421974][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.440680][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.611441][ T5974] udc-core: couldn't find an available UDC or it's busy [ 123.613339][ T5974] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 123.851496][ T5676] tipc: Node number set to 1 [ 123.968704][ T26] audit: type=1326 audit(123.920:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8518f028 code=0x7ffc0000 [ 123.977686][ T26] audit: type=1326 audit(123.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffff8518f028 code=0x7ffc0000 [ 124.004525][ T26] audit: type=1326 audit(123.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8518f028 code=0x7ffc0000 [ 124.037384][ T26] audit: type=1326 audit(123.930:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=145 compat=0 ip=0xffff8518f028 code=0x7ffc0000 [ 124.068774][ T26] audit: type=1326 audit(123.930:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8518f028 code=0x7ffc0000 [ 124.142643][ T26] audit: type=1326 audit(123.930:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffff8518f028 code=0x7ffc0000 [ 124.177866][ T26] audit: type=1326 audit(123.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8518f028 code=0x7ffc0000 [ 124.231046][ T26] audit: type=1326 audit(123.930:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff8518f028 code=0x7ffc0000 [ 124.236859][ T26] audit: type=1326 audit(123.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8518f028 code=0x7ffc0000 [ 124.277128][ T26] audit: type=1326 audit(123.930:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=262 compat=0 ip=0xffff8518f028 code=0x7ffc0000 [ 124.661631][ T5986] chnl_net:caif_netlink_parms(): no params data found [ 124.813006][ T6013] udc-core: couldn't find an available UDC or it's busy [ 124.815234][ T6013] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 124.909112][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.911522][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.931246][ T5986] device bridge_slave_0 entered promiscuous mode [ 124.957254][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.967674][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.982690][ T5986] device bridge_slave_1 entered promiscuous mode [ 125.079033][ T5986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.103746][ T5986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.199152][ T5986] team0: Port device team_slave_0 added [ 125.224579][ T5986] team0: Port device team_slave_1 added [ 125.292588][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.300383][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.327146][ T5986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.349285][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.358136][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.386312][ T5986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.542726][ T5986] device hsr_slave_0 entered promiscuous mode [ 125.555972][ T6034] loop2: detected capacity change from 0 to 512 [ 125.578673][ T6034] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 125.580631][ T5986] device hsr_slave_1 entered promiscuous mode [ 125.611548][ T6034] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.620942][ T5986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.623067][ T5986] Cannot create hsr debugfs directory [ 125.640783][ T6034] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 248: padding at end of block bitmap is not set [ 125.659381][ T6034] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz-executor.2: Failed to acquire dquot type 1 [ 125.674477][ T6034] EXT4-fs (loop2): 1 truncate cleaned up [ 125.687046][ T6034] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,grpquota,quota,noblock_validity,nodiscard,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 125.856705][ T6040] udc-core: couldn't find an available UDC or it's busy [ 125.866801][ T6040] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.909012][ T5986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.968832][ T5986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.039108][ T5986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.109326][ T5986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.120592][ T4125] Bluetooth: hci0: command 0x0409 tx timeout [ 126.559892][ T5986] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.594194][ T5986] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.672482][ T5986] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 126.704286][ T5986] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 126.946157][ T5986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.984361][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.986985][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.007262][ T5986] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.034301][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.037231][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.039675][ T4123] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.041632][ T4123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.061683][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.070006][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.078746][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.088340][ T4123] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.090255][ T4123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.143094][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.145969][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.149606][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.159381][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.175847][ T5986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.178599][ T5986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.205309][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.207746][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.210982][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.217233][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.226719][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.236966][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.244538][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.269209][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.546809][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.549022][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.695964][ T5986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.972196][ T6108] 9pnet: Insufficient options for proto=fd [ 127.980983][ T6108] udc-core: couldn't find an available UDC or it's busy [ 127.986497][ T6108] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 128.052334][ T4171] device hsr_slave_0 left promiscuous mode [ 128.100720][ T4171] device hsr_slave_1 left promiscuous mode [ 128.200447][ T4171] device geneve1 left promiscuous mode [ 128.200480][ T4034] Bluetooth: hci0: command 0x041b tx timeout [ 128.202084][ T4171] bridge0: port 1(geneve1) entered disabled state [ 128.330501][ T4171] device veth1_macvtap left promiscuous mode [ 128.332181][ T4171] device veth0_macvtap left promiscuous mode [ 128.333791][ T4171] device veth1_vlan left promiscuous mode [ 128.335317][ T4171] device veth0_vlan left promiscuous mode [ 129.934967][ T4171] bond0 (unregistering): Released all slaves [ 130.078668][ T6109] device syzkaller0 entered promiscuous mode [ 130.218631][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.221411][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.239739][ T5986] device veth0_vlan entered promiscuous mode [ 130.259402][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.262405][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.265434][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.273817][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.298006][ T5986] device veth1_vlan entered promiscuous mode [ 130.313659][ T6139] deleting an unspecified loop device is not supported. [ 130.389941][ T4034] Bluetooth: hci0: command 0x040f tx timeout [ 130.410824][ T6142] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.422129][ T5986] device veth0_macvtap entered promiscuous mode [ 130.427697][ T5986] device veth1_macvtap entered promiscuous mode [ 130.430455][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.432935][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.435442][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.437985][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.481803][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.314054][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.315726][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.316383][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.359790][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.373841][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.378919][ T6145] loop1: detected capacity change from 0 to 256 [ 131.381838][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.386789][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.389928][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.393734][ T6147] loop3: detected capacity change from 0 to 256 [ 131.400337][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.463932][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.467131][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.469667][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.472503][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.476726][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.484656][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.487382][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.493859][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.496570][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.499125][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.502208][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.506984][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.509828][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.512459][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.515226][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.517645][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.550518][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.557444][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.581507][ T6145] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 131.591432][ T5986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.599501][ T5986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.608843][ T5986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.617133][ T5986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.680556][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.683531][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.609603][ T4123] Bluetooth: hci0: command 0x0419 tx timeout [ 132.715964][ T6145] loop1: detected capacity change from 0 to 1024 [ 132.730907][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.733150][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.739253][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.856004][ T6145] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.869140][ T6135] loop0: detected capacity change from 0 to 40427 [ 132.917881][ T6145] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #2: comm syz-executor.1: corrupted in-inode xattr [ 132.936028][ T345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.940760][ T345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.945857][ T4128] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.890866][ T6135] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 133.893112][ T6135] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 133.913261][ T6135] F2FS-fs (loop0): invalid crc value [ 133.916965][ T6135] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 133.968507][ T6165] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 134.131009][ T6175] udc-core: couldn't find an available UDC or it's busy [ 134.136629][ T6175] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.419293][ T6190] syz-executor.0 (pid 6190) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 136.179893][ T6217] loop0: detected capacity change from 0 to 2048 [ 136.290379][ T6217] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 136.372008][ T6217] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 136.660195][ T4128] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.020500][ T4128] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.023504][ T4128] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 137.026880][ T4128] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 137.200340][ T4128] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.202876][ T4128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.205131][ T4128] usb 1-1: Product: syz [ 137.206261][ T4128] usb 1-1: Manufacturer: syz [ 137.207494][ T4128] usb 1-1: SerialNumber: syz [ 138.490434][ T4128] usb 1-1: unknown interface protocol 0x1, assuming v1 [ 138.492853][ T4128] usb 1-1: cannot find UAC_HEADER [ 138.622539][ T4128] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 138.649247][ T6233] loop4: detected capacity change from 0 to 40427 [ 138.657533][ T4128] usb 1-1: USB disconnect, device number 3 [ 138.684713][ T6233] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 138.691888][ T6233] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 138.708659][ T6233] F2FS-fs (loop4): invalid crc value [ 138.713377][ T4095] udevd[4095]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.733446][ T6233] F2FS-fs (loop4): Found nat_bits in checkpoint [ 138.767691][ T6233] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 138.770923][ T6233] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 138.902808][ T5986] attempt to access beyond end of device [ 138.902808][ T5986] loop4: rw=2049, want=45104, limit=40427 [ 138.981042][ T6260] loop1: detected capacity change from 0 to 512 [ 139.064938][ T6260] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 139.102346][ T6260] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 139.116884][ T6260] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.178113][ T6260] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 139.294990][ T6273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.317109][ T6260] EXT4-fs (loop1): Remounting filesystem read-only [ 139.318810][ T6260] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6184: Corrupt filesystem [ 139.334670][ T6260] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz-executor.1: attempt to clear invalid blocks 33619980 len 1 [ 139.359141][ T6260] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1811939328 (level 0) [ 139.385903][ T6260] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 2185560079 (level 1) [ 139.402874][ T6260] EXT4-fs (loop1): 1 truncate cleaned up [ 139.417629][ T6260] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 139.456524][ T6259] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 140.789341][ T6289] loop0: detected capacity change from 0 to 2048 [ 140.960848][ T6264] loop2: detected capacity change from 0 to 32768 [ 140.963016][ T6289] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 141.033649][ T6264] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6264) [ 141.090579][ T6289] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 141.110887][ T6264] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 141.113152][ T6264] BTRFS info (device loop2): setting nodatacow, compression disabled [ 141.115294][ T6264] BTRFS info (device loop2): setting datasum, datacow enabled [ 141.117209][ T6264] BTRFS info (device loop2): doing ref verification [ 141.118947][ T6264] BTRFS info (device loop2): force clearing of disk cache [ 141.130273][ T6264] BTRFS info (device loop2): turning off barriers [ 141.132356][ T6264] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 141.135165][ T6264] BTRFS info (device loop2): trying to use backup root at mount time [ 141.137190][ T6264] BTRFS info (device loop2): enabling ssd optimizations [ 141.139007][ T6264] BTRFS info (device loop2): using spread ssd allocation scheme [ 141.163283][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 141.163293][ T26] audit: type=1326 audit(141.120:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaccec028 code=0x0 [ 141.185372][ T6264] BTRFS info (device loop2): not using ssd optimizations [ 141.208353][ T6264] BTRFS info (device loop2): not using spread ssd allocation scheme [ 141.224520][ T6264] BTRFS info (device loop2): using free space tree [ 141.240424][ T6264] BTRFS info (device loop2): has skinny extents [ 141.251721][ T6307] loop4: detected capacity change from 0 to 256 [ 141.364965][ T6307] FAT-fs (loop4): Directory bread(block 64) failed [ 141.367036][ T6307] FAT-fs (loop4): Directory bread(block 65) failed [ 141.389789][ T6307] FAT-fs (loop4): Directory bread(block 66) failed [ 141.414040][ T6307] FAT-fs (loop4): Directory bread(block 67) failed [ 141.422987][ T6307] FAT-fs (loop4): Directory bread(block 68) failed [ 141.430215][ T4037] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.433036][ T6307] FAT-fs (loop4): Directory bread(block 69) failed [ 141.440914][ T6307] FAT-fs (loop4): Directory bread(block 70) failed [ 141.450519][ T6307] FAT-fs (loop4): Directory bread(block 71) failed [ 141.462104][ T6307] FAT-fs (loop4): Directory bread(block 72) failed [ 141.471084][ T6307] FAT-fs (loop4): Directory bread(block 73) failed [ 141.549510][ T6307] attempt to access beyond end of device [ 141.549510][ T6307] loop4: rw=0, want=1772, limit=256 [ 141.556538][ T6264] BTRFS info (device loop2): clearing free space tree [ 141.559304][ T6264] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.561763][ T6307] attempt to access beyond end of device [ 141.561763][ T6307] loop4: rw=0, want=1772, limit=256 [ 141.562278][ T6307] Buffer I/O error on dev loop4, logical block 442, async page read [ 141.587671][ T6264] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.613249][ T6264] BTRFS info (device loop2): creating free space tree [ 141.621909][ T6264] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.624620][ T6264] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.850911][ T4037] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.854444][ T4037] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 141.857320][ T4037] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 142.048053][ T4037] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.051285][ T4037] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.053875][ T4037] usb 1-1: Product: syz [ 142.056529][ T4037] usb 1-1: Manufacturer: syz [ 142.059314][ T4037] usb 1-1: SerialNumber: syz [ 142.087794][ T6312] loop1: detected capacity change from 0 to 32768 [ 142.147653][ T6347] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551608) [ 142.151520][ T6347] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 142.159079][ T6312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6312) [ 142.166362][ T6312] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 142.185758][ T6312] BTRFS info (device loop1): turning off barriers [ 142.188460][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.193516][ T6312] BTRFS info (device loop1): setting nodatasum [ 142.195308][ T6312] BTRFS info (device loop1): use zlib compression, level 3 [ 142.198558][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.203771][ T6312] BTRFS info (device loop1): using free space tree [ 142.209801][ T6312] BTRFS info (device loop1): has skinny extents [ 142.298166][ T6361] loop2: detected capacity change from 0 to 512 [ 142.358297][ T6361] EXT4-fs (nvme0n1p2): changing journal_checksum during remount not supported; ignoring [ 142.361883][ T6361] EXT4-fs (nvme0n1p2): re-mounted. Opts: nojournal_checksum,grpjquota=grpid,noinit_itable,jqfmt=vfsv0,prjquota,norecovery,nojournal_checksum,nobarrier,resuid=0x0000000000000000,noquota,data=ordered,,errors=continue. Quota mode: none. [ 142.462211][ T4037] usb 1-1: unknown interface protocol 0x1, assuming v1 [ 142.464585][ T4037] usb 1-1: cannot find UAC_HEADER [ 142.477417][ T4037] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 142.496658][ T4037] usb 1-1: USB disconnect, device number 4 [ 142.549310][ T6377] loop3: detected capacity change from 0 to 128 [ 142.572962][ T5074] udevd[5074]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.604678][ T6378] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.932655][ T6382] team0: Port device syz_tun added [ 143.046499][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.085022][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.086859][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.088599][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.090325][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.092096][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.093854][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.095657][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.097343][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.099143][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.100899][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.102679][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.104320][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.105984][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.107722][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.109362][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.111074][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.112794][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.114436][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.116075][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.117719][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.119489][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.121225][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.122896][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.124571][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.126257][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.127882][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.129552][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.131308][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.133004][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.134737][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.136333][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.137951][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.139593][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.141217][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.142897][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.144498][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.146188][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.147799][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.149549][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.151221][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.152903][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.154511][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.156264][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.157879][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.159613][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.161301][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.163175][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.164771][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.166453][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.168076][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.169722][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.171413][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.173167][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.174914][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.176579][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.178171][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.179968][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.181712][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.183615][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.185271][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.187000][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.188650][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.190328][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 143.191963][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 143.239029][ T6395] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 143.240847][ T6395] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 143.249774][ T6395] vhci_hcd vhci_hcd.0: Device attached [ 143.260863][ T6389] device batadv_slave_1 entered promiscuous mode [ 143.273729][ T6396] vhci_hcd: connection closed [ 143.275742][ T4175] vhci_hcd: stop threads [ 143.281873][ T4175] vhci_hcd: release socket [ 143.289216][ T4175] vhci_hcd: disconnect device [ 143.350811][ T6400] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.394043][ T6387] device batadv_slave_1 left promiscuous mode [ 143.602656][ T6409] loop2: detected capacity change from 0 to 512 [ 143.662336][ T6409] EXT4-fs (nvme0n1p2): changing journal_checksum during remount not supported; ignoring [ 143.671450][ T6409] EXT4-fs (nvme0n1p2): re-mounted. Opts: nojournal_checksum,grpjquota=grpid,noinit_itable,jqfmt=vfsv0,prjquota,norecovery,nojournal_checksum,nobarrier,resuid=0x0000000000000000,noquota,data=ordered,,errors=continue. Quota mode: none. [ 143.875061][ T6416] loop0: detected capacity change from 0 to 2048 [ 144.006667][ T6416] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 144.065465][ T6416] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 144.068763][ T6430] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 144.152504][ T6430] batman_adv: batadv0: Adding interface: team0 [ 144.168036][ T6430] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.176396][ T6430] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 144.193852][ T6433] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 144.201884][ T6433] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.205148][ T6433] device team0 entered promiscuous mode [ 144.208784][ T6433] device team_slave_0 entered promiscuous mode [ 144.210718][ T6433] device team_slave_1 entered promiscuous mode [ 144.218051][ T6433] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.230035][ T6433] batman_adv: batadv0: Interface activated: team0 [ 144.236119][ T6433] batman_adv: batadv0: Interface deactivated: team0 [ 144.238111][ T6433] batman_adv: batadv0: Removing interface: team0 [ 144.254288][ T6433] bridge0: port 3(team0) entered blocking state [ 144.256538][ T6433] bridge0: port 3(team0) entered disabled state [ 144.270474][ T6433] bridge0: port 3(team0) entered blocking state [ 144.272289][ T6433] bridge0: port 3(team0) entered forwarding state [ 144.400218][ T4040] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 144.439063][ T6442] device syzkaller0 entered promiscuous mode [ 144.743160][ T6459] loop4: detected capacity change from 0 to 1024 [ 144.813627][ T6455] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 144.814341][ T4040] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.818393][ T4040] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 144.824884][ T6459] EXT4-fs (loop4): Ignoring removed nobh option [ 144.846723][ T4040] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 144.885707][ T6459] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000003,nobh,usrquota,inode_readahead_blks=0x0000000000010000,max_dir_size_kb=0x00000000000007b1,nogrpid,min_batch_time=0x000000000000088d,delalloc,discard,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 144.906909][ T6459] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 144.926915][ T6466] loop3: detected capacity change from 0 to 512 [ 144.995439][ T6466] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 145.014544][ T6466] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 145.028553][ T6466] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz-executor.3: bad orphan inode 13 [ 145.039454][ T6466] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,bsdgroups,noblock_validity,,errors=continue. Quota mode: writeback. [ 145.045815][ T4040] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.048216][ T4040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.050824][ T4040] usb 1-1: Product: syz [ 145.052034][ T4040] usb 1-1: Manufacturer: syz [ 145.055549][ T4040] usb 1-1: SerialNumber: syz [ 145.491010][ T4040] usb 1-1: unknown interface protocol 0x1, assuming v1 [ 145.492840][ T4040] usb 1-1: cannot find UAC_HEADER [ 145.509753][ T6455] bridge0: port 3(syz_tun) entered disabled state [ 145.526055][ T4040] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 145.544491][ T4040] usb 1-1: USB disconnect, device number 5 [ 145.604603][ T6481] loop3: detected capacity change from 0 to 1024 [ 145.662928][ T6481] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 145.666831][ T6481] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 145.680518][ T6481] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.685914][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.688523][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.711973][ T6481] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 145.724659][ T6481] System zones: 0-1, 3-36 [ 145.726817][ T4095] udevd[4095]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.735725][ T6481] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 146.900420][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.003314][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.996474][ T6455] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.998867][ T6455] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.009342][ T6455] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.020920][ T6455] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.860979][ T6526] loop4: detected capacity change from 0 to 2048 [ 150.000456][ T6526] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 150.083418][ T6526] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 150.149668][ T6526] udc-core: couldn't find an available UDC or it's busy [ 150.160391][ T6526] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 152.031118][ T6543] device syzkaller0 entered promiscuous mode [ 152.040910][ T6545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.464518][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 152.653506][ T6564] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.864097][ T6569] loop2: detected capacity change from 0 to 2048 [ 153.011827][ T6569] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 153.113395][ T6569] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 153.193781][ T6566] loop0: detected capacity change from 0 to 32768 [ 153.224435][ T6569] udc-core: couldn't find an available UDC or it's busy [ 153.239523][ T6569] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 153.272039][ T6566] (syz-executor.0,6566,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 153.274731][ T6566] (syz-executor.0,6566,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 153.315697][ T6584] udc-core: couldn't find an available UDC or it's busy [ 153.317470][ T6584] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 153.344449][ T6583] device syzkaller0 entered promiscuous mode [ 153.733930][ T6590] loop0: detected capacity change from 0 to 2048 [ 153.832275][ T6590] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 153.923571][ T6590] Process accounting resumed [ 155.562742][ T6605] udc-core: couldn't find an available UDC or it's busy [ 155.564727][ T6605] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 155.783234][ T6592] loop1: detected capacity change from 0 to 40427 [ 155.847849][ T6592] F2FS-fs (loop1): Invalid log blocks per segment (5) [ 155.849874][ T6592] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 155.851237][ T6601] loop3: detected capacity change from 0 to 32768 [ 155.898278][ T6592] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.917078][ T6601] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6601) [ 155.924458][ T6601] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 155.930939][ T6601] BTRFS info (device loop3): using free space tree [ 155.943855][ T6601] BTRFS info (device loop3): has skinny extents [ 155.956916][ T6592] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 155.959310][ T6592] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 155.982652][ T6588] loop4: detected capacity change from 0 to 65536 [ 156.065516][ T6588] XFS (loop4): Deprecated V4 format (crc=0) not supported by kernel. [ 156.233015][ T6601] BTRFS info (device loop3): enabling ssd optimizations [ 156.717541][ T6648] udc-core: couldn't find an available UDC or it's busy [ 156.719850][ T6648] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 156.955925][ T6654] udc-core: couldn't find an available UDC or it's busy [ 156.957982][ T6654] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 157.011966][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.117475][ T6645] loop2: detected capacity change from 0 to 32768 [ 157.139381][ T6645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6645) [ 157.166910][ T6645] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 157.169428][ T6645] BTRFS info (device loop2): using free space tree [ 157.187554][ T6645] BTRFS info (device loop2): has skinny extents [ 157.300578][ T6675] loop4: detected capacity change from 0 to 512 [ 157.330440][ T6645] BTRFS info (device loop2): enabling ssd optimizations [ 157.339019][ T6675] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 157.354503][ T6675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 157.357757][ T6675] EXT4-fs (loop4): orphan cleanup on readonly fs [ 157.361697][ T6675] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 361: padding at end of block bitmap is not set [ 157.368226][ T6675] EXT4-fs (loop4): Remounting filesystem read-only [ 157.370909][ T6675] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6184: Corrupt filesystem [ 157.374069][ T6675] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz-executor.4: attempt to clear invalid blocks 33619980 len 1 [ 157.379986][ T6675] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 1811939328 (level 0) [ 157.385118][ T6675] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 2185560079 (level 1) [ 157.392934][ T6675] EXT4-fs (loop4): 1 truncate cleaned up [ 157.394744][ T6675] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 157.418842][ T6664] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 157.706812][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.848673][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.118426][ T6704] loop3: detected capacity change from 0 to 256 [ 158.301445][ T6704] FAT-fs (loop3): Directory bread(block 64) failed [ 158.303478][ T6704] FAT-fs (loop3): Directory bread(block 65) failed [ 158.305335][ T6704] FAT-fs (loop3): Directory bread(block 66) failed [ 158.307211][ T6704] FAT-fs (loop3): Directory bread(block 67) failed [ 158.317369][ T6704] FAT-fs (loop3): Directory bread(block 68) failed [ 158.324147][ T6704] FAT-fs (loop3): Directory bread(block 69) failed [ 158.330322][ T6704] FAT-fs (loop3): Directory bread(block 70) failed [ 158.337138][ T6704] FAT-fs (loop3): Directory bread(block 71) failed [ 158.345407][ T6704] FAT-fs (loop3): Directory bread(block 72) failed [ 158.351541][ T6704] FAT-fs (loop3): Directory bread(block 73) failed [ 158.483872][ T6714] loop1: detected capacity change from 0 to 1764 [ 158.505377][ T6716] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 158.806487][ T6723] loop4: detected capacity change from 0 to 256 [ 160.000364][ T6725] loop3: detected capacity change from 0 to 32768 [ 160.110701][ T6725] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6725) [ 160.148747][ T6725] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 160.164966][ T6725] BTRFS info (device loop3): using free space tree [ 160.173851][ T6725] BTRFS info (device loop3): has skinny extents [ 160.405331][ T6725] BTRFS info (device loop3): enabling ssd optimizations [ 160.799510][ T26] audit: type=1107 audit(160.750:14): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 161.042576][ T6779] loop0: detected capacity change from 0 to 512 [ 161.116728][ T6779] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.136698][ T6779] EXT4-fs (loop0): orphan cleanup on readonly fs [ 161.201558][ T6779] EXT4-fs (loop0): 1 truncate cleaned up [ 161.239999][ T9] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 161.243576][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6219: comm kworker/u4:0: Failed to release dquot type 1 [ 161.313873][ T9] EXT4-fs (loop0): Remounting filesystem read-only [ 161.327892][ T6779] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,errors=remount-ro,noinit_itable,noinit_itable,noauto_da_alloc,resgid=0x0000000000000000,resgid=0x000000000000ee002. Quota mode: writeback. [ 161.814664][ T4296] team0: Port device syz_tun removed [ 162.166190][ T6797] chnl_net:caif_netlink_parms(): no params data found [ 162.347200][ T6797] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.352601][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.359917][ T6797] device bridge_slave_0 entered promiscuous mode [ 162.384289][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.388476][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.394578][ T6797] device bridge_slave_1 entered promiscuous mode [ 162.436625][ T6797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.493260][ T6797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.614832][ T6797] team0: Port device team_slave_0 added [ 162.643752][ T6797] team0: Port device team_slave_1 added [ 162.718518][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.732641][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.763955][ T6797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.782278][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.792606][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.825069][ T6797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.963224][ T6797] device hsr_slave_0 entered promiscuous mode [ 163.000836][ T6797] device hsr_slave_1 entered promiscuous mode [ 163.058581][ T6797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.063492][ T6797] Cannot create hsr debugfs directory [ 163.461598][ T4175] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.589722][ T4175] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.645182][ T4175] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.679066][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.712207][ T4175] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.800592][ T4125] Bluetooth: hci4: command 0x0409 tx timeout [ 163.882295][ T4125] Bluetooth: hci2: command 0x0406 tx timeout [ 163.883980][ T4125] Bluetooth: hci1: command 0x0406 tx timeout [ 164.140326][ T6866] udc-core: couldn't find an available UDC or it's busy [ 164.142319][ T6866] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 164.224539][ T6871] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 164.226879][ T6871] netlink: 'syz-executor.4': attribute type 20 has an invalid length. [ 164.229072][ T6871] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.640357][ T4125] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 164.976599][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.000771][ T4125] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 165.003303][ T4125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.012372][ T4125] usb 1-1: config 0 descriptor?? [ 165.055218][ T4125] smsusb:smsusb_probe: board id=8, interface number 0 [ 165.068945][ T5986] [ 165.069640][ T5986] ====================================================== [ 165.070225][ T4125] smsusb:smsusb_probe: Device initialized with return code -19 [ 165.071506][ T5986] WARNING: possible circular locking dependency detected [ 165.071513][ T5986] 5.15.160-syzkaller #0 Not tainted [ 165.071519][ T5986] ------------------------------------------------------ [ 165.071523][ T5986] syz-executor.4/5986 is trying to acquire lock: [ 165.071529][ T5986] ffff0000d3fda3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x1a4/0x5cc [ 165.082962][ T5986] [ 165.082962][ T5986] but task is already holding lock: [ 165.085135][ T5986] ffff0000ece3dda8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_unlink+0xd8/0x508 [ 165.087809][ T5986] [ 165.087809][ T5986] which lock already depends on the new lock. [ 165.087809][ T5986] [ 165.090525][ T5986] [ 165.090525][ T5986] the existing dependency chain (in reverse order) is: [ 165.092931][ T5986] [ 165.092931][ T5986] -> #1 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 165.095188][ T5986] down_read+0xc0/0x398 [ 165.096438][ T5986] ext4_bmap+0x58/0x36c [ 165.097709][ T5986] bmap+0xa8/0xe8 [ 165.098841][ T5986] jbd2_journal_flush+0x63c/0xaa0 [ 165.100324][ T5986] ext4_ioctl+0x3454/0x61bc [ 165.101630][ T5986] __arm64_sys_ioctl+0x14c/0x1c8 [ 165.103061][ T5986] invoke_syscall+0x98/0x2b8 [ 165.104408][ T5986] el0_svc_common+0x138/0x258 [ 165.105590][ T6797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.105790][ T5986] do_el0_svc+0x58/0x14c [ 165.108828][ T5986] el0_svc+0x7c/0x1f0 [ 165.110009][ T5986] el0t_64_sync_handler+0x84/0xe4 [ 165.111478][ T5986] el0t_64_sync+0x1a0/0x1a4 [ 165.112756][ T5986] [ 165.112756][ T5986] -> #0 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 165.115061][ T5986] __lock_acquire+0x32d4/0x7638 [ 165.116536][ T5986] lock_acquire+0x240/0x77c [ 165.117966][ T5986] __mutex_lock_common+0x194/0x2154 [ 165.119464][ T5986] mutex_lock_io_nested+0xcc/0x12c [ 165.120997][ T5986] __jbd2_log_wait_for_space+0x1a4/0x5cc [ 165.122714][ T5986] add_transaction_credits+0x814/0xb90 [ 165.124324][ T5986] start_this_handle+0x578/0x12a4 [ 165.125818][ T5986] jbd2__journal_start+0x29c/0x7b4 [ 165.127431][ T5986] __ext4_journal_start_sb+0x358/0x70c [ 165.129162][ T5986] __ext4_unlink+0x2e4/0x90c [ 165.130529][ T5986] ext4_unlink+0x1b4/0x6a0 [ 165.131800][ T5986] vfs_unlink+0x2f0/0x508 [ 165.133098][ T5986] do_unlinkat+0x4cc/0x830 [ 165.134381][ T5986] __arm64_sys_unlinkat+0xcc/0xfc [ 165.135783][ T5986] invoke_syscall+0x98/0x2b8 [ 165.137115][ T5986] el0_svc_common+0x138/0x258 [ 165.138500][ T5986] do_el0_svc+0x58/0x14c [ 165.139824][ T5986] el0_svc+0x7c/0x1f0 [ 165.141032][ T5986] el0t_64_sync_handler+0x84/0xe4 [ 165.142430][ T5986] el0t_64_sync+0x1a0/0x1a4 [ 165.143808][ T5986] [ 165.143808][ T5986] other info that might help us debug this: [ 165.143808][ T5986] [ 165.146494][ T5986] Possible unsafe locking scenario: [ 165.146494][ T5986] [ 165.148433][ T5986] CPU0 CPU1 [ 165.149853][ T5986] ---- ---- [ 165.151260][ T5986] lock(&sb->s_type->i_mutex_key#9); [ 165.152741][ T5986] lock(&journal->j_checkpoint_mutex); [ 165.154957][ T5986] lock(&sb->s_type->i_mutex_key#9); [ 165.157082][ T5986] lock(&journal->j_checkpoint_mutex); [ 165.158619][ T5986] [ 165.158619][ T5986] *** DEADLOCK *** [ 165.158619][ T5986] [ 165.160745][ T5986] 3 locks held by syz-executor.4/5986: [ 165.162224][ T5986] #0: ffff0000d3fd4460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 165.164615][ T5986] #1: ffff0000ece3b5c8 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x2d0/0x830 [ 165.167344][ T5986] #2: ffff0000ece3dda8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_unlink+0xd8/0x508 [ 165.170047][ T5986] [ 165.170047][ T5986] stack backtrace: [ 165.171681][ T5986] CPU: 0 PID: 5986 Comm: syz-executor.4 Not tainted 5.15.160-syzkaller #0 [ 165.173929][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 165.176675][ T5986] Call trace: [ 165.177493][ T5986] dump_backtrace+0x0/0x530 [ 165.178695][ T5986] show_stack+0x2c/0x3c [ 165.179749][ T5986] dump_stack_lvl+0x108/0x170 [ 165.180992][ T5986] dump_stack+0x1c/0x58 [ 165.182112][ T5986] print_circular_bug+0x150/0x1b8 [ 165.183393][ T5986] check_noncircular+0x2cc/0x378 [ 165.184699][ T5986] __lock_acquire+0x32d4/0x7638 [ 165.186024][ T5986] lock_acquire+0x240/0x77c [ 165.187257][ T5986] __mutex_lock_common+0x194/0x2154 [ 165.188624][ T5986] mutex_lock_io_nested+0xcc/0x12c [ 165.189954][ T5986] __jbd2_log_wait_for_space+0x1a4/0x5cc [ 165.191428][ T5986] add_transaction_credits+0x814/0xb90 [ 165.192892][ T5986] start_this_handle+0x578/0x12a4 [ 165.194267][ T5986] jbd2__journal_start+0x29c/0x7b4 [ 165.195654][ T5986] __ext4_journal_start_sb+0x358/0x70c [ 165.197092][ T5986] __ext4_unlink+0x2e4/0x90c [ 165.198326][ T5986] ext4_unlink+0x1b4/0x6a0 [ 165.199576][ T5986] vfs_unlink+0x2f0/0x508 [ 165.200764][ T5986] do_unlinkat+0x4cc/0x830 [ 165.201856][ T5986] __arm64_sys_unlinkat+0xcc/0xfc [ 165.203160][ T5986] invoke_syscall+0x98/0x2b8 [ 165.204389][ T5986] el0_svc_common+0x138/0x258 [ 165.205625][ T5986] do_el0_svc+0x58/0x14c [ 165.206737][ T5986] el0_svc+0x7c/0x1f0 [ 165.207784][ T5986] el0t_64_sync_handler+0x84/0xe4 [ 165.209140][ T5986] el0t_64_sync+0x1a0/0x1a4 1970/01/01 00:02:45 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 165.266461][ T6797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.336993][ T6797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.375754][ T6797] netdevsim netdevsim2 netdevsim3: renamed from eth3