last executing test programs: 5.40213051s ago: executing program 0 (id=4265): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 4.471086417s ago: executing program 3 (id=4277): r0 = io_uring_setup(0x705c, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x17, 0x0, 0x0) 4.21923991s ago: executing program 3 (id=4279): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0285628, &(0x7f0000001600)) 3.970362203s ago: executing program 3 (id=4281): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x2, 0x9e8, &(0x7f0000000440)="$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") listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.827665526s ago: executing program 0 (id=4282): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f449487219195806840106a86dd", 0x0, 0xfd33, 0x0, 0xb1, 0xffffffffffffff19, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e0798e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="675901b49f4914256e6e8d2aa26c9567dbec07a38cc0bec64eeba31aad6c0da339f977f6873cf1c73e0218cc94c8c0b4b438ca1e7f4987540d92492448791407e6f37a521ba9b42d969a3ce903efb9a39fa05bdbe7424e36a542c3b00485fcef3be43c5d45a5b3d63291adda6d81d771cacea20e5f33ca681f54a044d1862f38b4dfc849614974842fef9114b4e01d957e5e8c523a62190362cfb27c82bb1d6f9efaada5bccb1ca44f56b191ebcd2580b61194842af36549aa2359742c48ed9d3c2a61c51c1ca0d724cf0bf1c0d6ed1705", 0x0, 0x0, 0x2}, 0x23) 3.493479337s ago: executing program 3 (id=4285): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data}) 3.010018862s ago: executing program 0 (id=4290): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x17b, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x65580000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 2.988219383s ago: executing program 3 (id=4291): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x0, '\x00', @value64}}) 2.793030212s ago: executing program 0 (id=4294): r0 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r0, 0x107, 0x0, 0x0, 0x20601008) 2.737542007s ago: executing program 3 (id=4296): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000140)={[{@journal_async_commit}, {@heartbeat_none}, {@localflocks}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0xfffffffffffffffa}}, {@noacl}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000f00)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff01}) 2.505229078s ago: executing program 0 (id=4299): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000)=0x3, 0x2e32, 0x5) 2.467361622s ago: executing program 2 (id=4300): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f00000014c0)="580000001400192340834b80040d8c560a117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c000100090c100000000000224e0000", 0x58}], 0x1) 2.297077517s ago: executing program 1 (id=4301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x74d4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 2.155415791s ago: executing program 4 (id=4302): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f000012f000/0x2000)=nil, 0xf01204, 0x18) 2.106693735s ago: executing program 2 (id=4312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c000100000000000200000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x94}}, 0x0) 1.848841649s ago: executing program 1 (id=4303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40a03, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 1.684936924s ago: executing program 1 (id=4304): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x4, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 1.656089417s ago: executing program 4 (id=4305): r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f0000000580), 0x4) 1.392756311s ago: executing program 1 (id=4306): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xcc, 0x0, 0x5c) 1.322812127s ago: executing program 4 (id=4307): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) 1.151268114s ago: executing program 1 (id=4308): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000380)={[{@gid}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x101}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@errors_continue}, {@errors_remount}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0x12}}, {@errors_remount}, {@utf8}]}, 0x1, 0x150a, &(0x7f0000002c80)="$eJzs3Au8TtXWMPAx5pyLTdKT5D7HHIsnuUySJJeEXJIkSZLcEpIkSUJyyy0JScg95B6SW0ju9/s9SY4kSUJCkvn9VOd1ztd7vvrec77Pe949/r/fYo69njGesZ6x937WWr+99zftBlaqU7l8LWaGfwr++l9XAEgBgD4AcB0ARABQLFOxTJf3p9PY9Z97EvGv9fDUq92BuJpk/qmbzD91k/mnbjL/1E3mn7rJ/FM3mX/qJvMXIjXbOi379bKl3u3P3/93/+fdcv//35C8//+P9ae+0mT+qZvMP3WT+aduMv/UTeafusn8UzeZf+om8xciNbva95//Dba/vlRXu48/2KL/Ut7V/ewTQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJFanA9XGAD46/pq9yWEEEIIIYQQQoh/nZD2ancghBBCCCGEEEKI//cQwGgwEEEaSAspkA7SwzWQAa6FjHAdJOB6yAQ3QGa4EbJAVsgG2SEH5IRcYIHAAUMMuSEPJOEmyAs3Qz7IDwWgIHgoBIXhFigCt0JRuA2KweyFAHdACSgJpaA03All4C4oC+WgPNwNFaAiVILKcA9UgXuhKtwH1eB+qA4PQA14EGrCQ1ALHoba8AjUgUehLjwG9aA+NICG0Oi/lP8SdIKXoTN0ga7QDbrDK9ADekIv6A194FXoC69BP3gd+sMAGAhvwCB4EwbDWzAEhsIweBuGwwgYCaNgNIyBsfAOjIPxMAHehYkwCSbDFJgK02A6vAczYCbMgvdhNnwAc2AuzIP5sAA+hIWwCBbDR7AEPoalsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDtgJu2A37Cm3Fz6BffAp7IfP4AB8/n+Zfw7+Pr89AgIqVGjQYBpMgymYgukxPWbADJgRM2ICE5gJM2FmzIxZMAtmw2yYA3NgLsyFhISMjLkxNyYxiXkxL+bDfFgAC6BHj4WxMBbBW7EoFsViWAyLY3EsgSWxJJbG0lgGy2BZLIvl75gLgBWwElbCe/AevBerYlWshtWwOlbHGlgDa2JNrIW1sDbWxjpYB+tiXayH9bABNsBG2AgbY2Nsgk2wGTbD5tgcW2ALbIktsRW2wtbYGttgG2yLbbEdtsP22AE74Ev4Er6ML2MXrKC6YXfsjj2wB/bC3tgbX8W++Bq+hq9jfxyAA/ENfAPfxMF4FofgUByGw7CMGoEjcRSyGoNjcSyOw3E4ASfgRJyEk3AKTsVpOB2n4wyciTPxfZyNH+AHOBfn4nxcgAtwIS7CxbgYl+A5XIrLcDmuwJW4ClfiGlyLa3A9bsD1uAk34RbcgttwG+7AHbgLd+Ee3IOf4Cf4KX6K/fEAHsCDeBAP4SE8jIfxCB7Bo3h02zUAeByP4wk8gSfxFJ7GU3gGz+BZPIfn8TxewAt4EV/I8VXtPfnX9Qd1mVFGpVFpVIpKUelVepVBZVAZVUaVUAmVSWVSmVVmlUVlUdlUNpVD5VC5VC5FihSrWOVWuVVSJVVelVflU/lUAVVAeeVVYVVYFVFFVFFVVBVTt6vi6g5VQpVUTX1pVVqVUc18WVVOlVflVQVVUVVSlVVlVUVVUVVVVVVNVVPVVXVVQz2oaqpu2AsfVpcnU0cNwLpqINZT9VUD1VC9iY+rxmowNlFNVTP1pBqKQ7CFauxbqmdUKzUSW6vn1Ch8XrVVY7CdelG1Vx1UR/WS6qSa+M6qi5qI3VR3NQV7qJ6ql+qtZmBFdXlildTrqr8aoAaqN9R8fFMNVm+pIWqoGqbeVsPVCDVSjVKj1Rg1Vr2jxqnxaoJ6V01Uk9RkNUVNVdPUdPWemqFmqlnqfTVbfaDmqLlqnpqvFqgP1UK1SC1WH6kl6mO1VC1Ty9UKtVKtUqvVGrVWrVPr1Qa1UW1Sm9UWtVVtU9vVDrVT7VK71R61V32i9qlP1X71mTqgPlcH1V/UIfWFOqy+VEfUV+qo+lodU9+o4+pbdUJ1USfVKXVafa/OqB/UWXVOnVc/qgvqJ3VR/awuqaBAo1Zaa6MjnUan1Sk6nU6vr9EZ9LU6o75OJ/T1OpO+QWfWN+osOqvOprPrHDqnzqWtJu0061jn1nl0Ut+k8+qbdT6dXxfQBbXXhXRhfYsuom/VRfVtupi+XRfXd+gSuqQupUvrO3UZfZcuq8vp8vpuXUFX1JV0ZX2PrqLv1VX1fbqavl9X1w/oGvpBXVM/pGvph3Vt/Yiuox/VdfVjup6urxvohrqRflw31k/oJrqpbqaf1M31U7qFflq31M/oVvpZ3Vo/p9vo53Vb/YJup1/U7XUH3VH/rC/poDvrLrqr7qa761d0D91T99K9dR/9qu6rX9P99Ou6vx6gB+o39CD9ph6s39JD9FA9TL+th+sReqQepUfrMXqsfkeP0+P1BP2unqgn6cl6ip6qp+lev1Wa9Sfyx/8n+f1+efYteqveprfrHXqn3qV36z16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6BP6pD6lf9Tf6zP6B31Wn9Pn9I/6gr6gL/72GoBBo4w2xkQmjUlrUkw6k95cYzKYa01Gc51JmOtNJnODyWxuNFlMVpPNZDc5TE6Ty1hDxhk2sclt8pikucnkNTebfCa/KWAKGm8KmcLmln86/x/0t2LyrycvppFpZBqbxqaJaWKamWamuWluWpgWpqVpaVqZVqa1aW3amDamrWlr2pl2pr1pbzqajqaT6WQ6I5iupqvpbl4xPUxP08v0Nn3Mq6av6Wv6mX6mv+lvBpqBZpAZZAabwWaIGWIMAAw3w81IM9KMNqPNWDPWjDPjzAQzwUw0E81kM9lMNVPNdDPdzDAzzCwzy8w2s80cM8fMM/PMArPALDQLzWKz2CwxS8xSs8wsMyvMCrPKrDJrzBqzzqwzG8wGs8lsMkvNVrPVbDfbzU6z0+w2u81es9fsM/vMfrPfHDAHzEFz0Bwyh8xhc9gcMUfMUXPUHDPHzHFz3JwwJ8xJc9KcNqfNGXPGnDVnzXlz3lwwF8xFc9FcMpcun/ZFKlKRiUyUJkoTpUQpUfoofZQhyhBljDJGiSgRZYoyRZmjG6MsUdYoW5Q9yhHljHJFNqLIRRzFUe4oT5SMboryRjdH+aL8UYGoYOSjQlHh6JaoSHRrVDS6LSoW3R4Vj+6ISkQlo1JR6ejOqEx0V1Q2KheVj+6OKkQVo0pR5eieqEp0b1Q1ui+qFt0fVY8eiGpED0Y1o4eiWtHDUe3okahO9GhUN3osqhfVjxpEDaNG/9L6IZzN+oTvbLvYtNDNdrev2B62p+1le9s+9lXb175m+9nXbX87wA60b9hB9k072L5lh9ihdph92w63I+xIO8qOtmPsWPuOHWfH2wn2XTvRTrKT7RQ71U6z0+17doadaWfZ9+1s+4GdY+faeXa+XWA/tAvtIrvYfmSX2I/tUrvMLrcr7Eq7yq62a+xau86utxvsRrvJbrZb7Fa7zW63O+xOu8vutnvsXvuJ3Wc/tfvtZ/aA/dwetCm/nd9/aY/Yr+xR+7U9Zr+xx+239oT9zp60p+xp+709Y3+wZ+05e97+aC/Yn+xF+7O9ZMPlk/vLb+9kyFAaSkMplELpKT1loAyUkTJSghKUiTJRZspMWSgLZaNslINyUC7KRZcxMeWm3JSkJOWlvJSP8lEBKkCePBWmwlSEilBRKkrFqBgVp+JUgkpQKSpFd9KddBfdReWoHN1Nd1NFqkiVqTJVoSpUlapSNapG1ak61aAaVJNqUi2qRbWpNtWhOlSX6lI9qkcNqAE1okbUmBpTE2pCzagZNafm1IJaUEtqSa2oFbWm1tSG2lBbakvtqB21p/bUkTpSJ+pEnakzdaWu1J26Uw/qQb2oF/WhPtSX+lI/6kf9qT8NpIE0iAbRYBpMQ2goDaO3aTiNoJE0ikbTGBpLY2kcjaMJNIEm0kSaTJNpKk2l6TSdZtAMmkWzaDbNpjk0h+bRPFpAC2ghLaTFtJiW0BJaSktpOS2nlbSSVtNqWktraT2tp420kTbTZtpKW2k7baedtJN2027aS3tpH+2j/bSfDtABOkgH6RAdosN0mI7QETpKR+kYHaPjdJxO0Ak6SSfpNJ2mM3SGztJZOk/n6QL9RBfpZ7pEgVJcOpfeXeMyuGtdRned+9/jbC67y+FyulzOuiwu69/F5JzL5/K7Aq6g866QK+xu+V1cwpV0pVxpd6cr4+5yZX8XV1m789cfRHf3u8ruHlfF3euquvtcNXe/q+4ecDXco66me8zVcvVdbdfQ1XGPurruMVfP1XcNXEPX3D3lWrinXUv3jGvlnv1dvNAtcmvdOrfebXD73KfuvPvRHXPfuAvuJ9fZdXF93Kuur3vN9XOvu/5uwO/iYe5tN9yNcCPdKDfajfldPNlNcVPdNDfdvedmuJm/ixe4D91st9jNcXPdPDf/l/hyT4vdR26J+9gtdcvccrfCrXSr3Gq35j96XeE2uc1ui9vrPnHb3Q630+1yu92eX+LLx7HffeYOuM/dUfe1O+S+cIfdcXfEffVLfPn4jrtv3Qn3nTvpTrnT7nt3xv3gzrpzvxz/5WP/3v3sLrnggJEVazYccRpOyymcjtPzNZyBr+WMfB0n+HrOxDdwZr6Rs3BWzsbZOQfn5Fxsmdgxc8y5OQ8n+SbOyzdzPs7PBbggey7EhfkWLsK3clG+jYvx7Vyc7+ASXJJLcWm+k8vwXVyWy3F5vpsrcEWuxJX5Hq7C93JVvo+r8f1cnR/gGvwg1+SHuBY/zLX5Ea7Dj3JdfozrcX1uwA25ET/OjfkJbsJNuRk/yc35KW7BT3NLfoZb8bPcmp/jNvw8t+UXuB2/yO25A3fkl7gTv8yduQt35W7cnV/hHtyTe3Fv7sOvcl9+jfvx69yfB/BAfoMH8Zs8mN/iITyUh/HbPJxH8EgexaN5DI/ld3gcj+cJ/C5P5Ek8mafwVJ7G0/k9nsEzeRa/z7P5A57Dc3kez+cF/CEv5EW8mD/iJfwxL+VlvJxX8Epexat5Da/ldbyeN/BG3sSbeQtv5W28nXcw8i7ezXt4L3/C+/hT3s+f8QH+nA/yX/gQf8GH+Us+wl/xUf6aj/E3fJy/5RP8HZ/kU3yav+cz/AOf5XN8nn/kC/wTX+Sf+RIHhhhjFevYxFGcJk4bp8Tp4vTxNXGG+No4Y3xdnIivjzPFN8SZ4xvjLHHWOFucPc4R54xzxTam2MUcx3HuOE+cjG+K88Y3x/ni/HGBuGDs40Jx4fiWuEh8a1w0vi0uFt8eF4/viEvEJeNH7y8d3xmXie+Ky8bl4vLx3XGFuGJcKa4c3xNXie+Nq8b3xdXi++Oi8QNxjfjBuGb8UFwrfjiuHT8S14kfjevGj8X14vpxg7hh3Ch+PG4cPxE3iZvGzeIn4+bxU3GL+Om4ZfxM3Cp+9g/3d427xd3jV+JX4hDu0/OS85MLkh8mFyYXJRcnP0ouSX6cXJpcllyeXJFcmVyVXJ1ck1ybXJdcn9yQ3JjclNyc3JIMoXJa8OiV1974yKfxaX2KT+fT+2t8Bn+tz+iv8wl/vc/kb/CZ/Y0+i8/qs/nsPofP6XN568k7zz72uX0en/Q3+bz+Zp/P5/cFfEHvfSFf2Df0jXwj39g/4Zv4pr6Zf9I/6Z/yT/mn/dP+Gd/KP+tb++d8G/+8b+tf8C/4F31738F39C/5Tv5l39l38V19V9/dd/c9fA/fy/fyfXwf39f39f18P9/f9/cD/UA/yA/yg/1gP8QP8cP8MD/cD/cj/Ug/2o/2Y/1YP86P8xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD8732w/x8/x8/w8v8Av8Av9Qr/YL/ZL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv9dr/T7/S7/W6/1+/1+/w+v9/v9wf8AX/QHzwf/CF/2H/pj/iv/FH/tT/mv/HH/bf+hP/On/Sn/Gn/vT/jf/Bn/Tl/3v/oL/if/EX/s7/kgx+beCcxLjE+MSHxbmJiYlJicmJKYmpiWmJ64r3EjMTMxKzE+4nZiQ8ScxJzE/MS8xMLEh8mFiYWJRYnPkosSXycWJpYllieWJFYmViVCCHn9jjkDnlCMtwU8oabQ76QPxQIBYMPhULhcEsoEm4NRcNtoVi4PRQPd4QSoWQoFR4L9UL90CA0DI3C46FxeCI0CU1Ds/BkaB6eCi3C06FleCa0Cs+G1uG50CY8H9qGF0K78GJoHzqEjuGl0Cm8HDoHHbqGbqF7eCX0CD1Dr9A79Amvhr7htdAvvB76hwFhYHgjDApvhsHhrTAkDA3DwttheBgRRoZRYXQYE8aGd8K4MD5MCO+GiWFSmBymhKlhWpge3gszwswwK7wfZocPwpwwN8wL88OC8GFYGBaFxeGjsCR8HJaGZWF5WBEgZVVYHdaEtWFdWB82hI1hU9gctoStYVvYHnaEnWFX2B32hL3hk7AvfBr2h8/CgfB5OBj+Eg6FL8Lh8GU4Er4KR8PX4Vj4JhwP34YT4btwMpwKp8P34Uz4IZwN58L58GO4EH4KF8PP4ZL8zpoQQgghxJ8y/g/2d/u7SP3Hv+q3j3QHgGt3ZD/yt4/SALAxy6/rnipH8wQAPNOl3cN/3SpU6Nq162+PXaohyjMXABJX8tPAlXgZNIOnoCU0hSL/aX89VYcL/Af1k7cDpP+bnBS4El+pf+s/qD9i9h/WnwuQL8+VnHRwJb5Sv+jvake/1M/a+A/qp/tiLECTv8nLAFfiK/ULwxPwLLT8u0cKIYQQQgghhBC/6qlKtfmj69vL1+c5zJWctHAl/qPrcyGEEEIIIYQQQlx9z3fo+PTjLVs2bfMPFuX+8S5ZpJZFmv8ebfzbLwD+W7Tx5xZX+zuTEEIIIYQQ4l/tykn/1e5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYRIvf5//Dmxq32MQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxNX2vwIAAP//rKwyVA==") statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, &(0x7f0000000240)) 1.019111476s ago: executing program 2 (id=4309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}]}], {0x14}}, 0xec}}, 0x0) 894.179367ms ago: executing program 4 (id=4310): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x18, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x5, 0x12b, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x0) 654.16751ms ago: executing program 0 (id=4311): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) 653.79411ms ago: executing program 2 (id=4313): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1f2, &(0x7f00000002c0)="$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") statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=""/12) 507.832813ms ago: executing program 1 (id=4314): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x14, &(0x7f0000000a40)={[{0xffffffffffffff59}, {0x9, 0x4e00, "1022ae77c54928090c"}]}) 420.655391ms ago: executing program 4 (id=4315): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x101c, 0xffffffffffffffff, 0x0, 0x0}) 225.465439ms ago: executing program 2 (id=4316): r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x4000000, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000001300)=['!\x00'], 0x2}) 10.540569ms ago: executing program 2 (id=4317): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) 0s ago: executing program 4 (id=4318): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000000}}) kernel console output (not intermixed with test programs): .2800,10181,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=32, inode=17057, rec_len=5, name_len=0 [ 285.239182][T10181] (syz.1.2800,10181,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 285.280734][T10181] (syz.1.2800,10181,1):ocfs2_mknod:296 ERROR: status = -2 [ 285.288032][T10181] (syz.1.2800,10181,1):ocfs2_mknod:500 ERROR: status = -2 [ 285.476522][ T3644] ocfs2: Unmounting device (7,1) on (node local) [ 285.743248][T10235] loop2: detected capacity change from 0 to 256 [ 285.788006][T10235] FAT-fs (loop2): Directory bread(block 257) failed [ 285.835342][T10235] FAT-fs (loop2): Directory bread(block 257) failed [ 285.876065][T10235] FAT-fs (loop2): Directory bread(block 257) failed [ 285.916592][T10235] FAT-fs (loop2): Directory bread(block 257) failed [ 286.024610][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2826'. [ 286.039304][T10243] netlink: 'syz.0.2826': attribute type 2 has an invalid length. [ 286.077708][T10243] netlink: 'syz.0.2826': attribute type 1 has an invalid length. [ 286.141322][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2827'. [ 286.369758][T10253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2831'. [ 286.735537][T10267] loop0: detected capacity change from 0 to 64 [ 286.891282][T10233] loop3: detected capacity change from 0 to 32768 [ 287.011895][T10233] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 287.269902][ T3645] ocfs2: Unmounting device (7,3) on (node local) [ 287.306659][T10281] netlink: 'syz.2.2845': attribute type 10 has an invalid length. [ 287.399333][T10283] i2c i2c-0: Invalid block write size 255 [ 287.493622][T10281] team0: Device veth1_macvtap failed to register rx_handler [ 287.844758][ T3643] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 288.123064][T10306] program syz.3.2856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.442933][ T3647] Bluetooth: hci3: command 0x0406 tx timeout [ 288.458391][T10319] tmpfs: Bad value for 'mpol' [ 288.593715][T10325] loop2: detected capacity change from 0 to 256 [ 289.479062][ T4202] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 289.602742][T10367] netlink: 'syz.0.2887': attribute type 10 has an invalid length. [ 289.659783][T10367] team0: Device ipvlan1 failed to register rx_handler [ 289.662425][T10362] loop2: detected capacity change from 0 to 4096 [ 289.804842][T10362] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 290.075580][ T4202] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 290.098039][ T4202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.099701][T10379] loop1: detected capacity change from 0 to 256 [ 290.112816][ T4202] usb 4-1: Product: syz [ 290.117147][ T4202] usb 4-1: Manufacturer: syz [ 290.136959][ T4202] usb 4-1: SerialNumber: syz [ 290.154777][T10379] FAT-fs (loop1): Directory bread(block 64) failed [ 290.171331][ T4202] usb 4-1: config 0 descriptor?? [ 290.179112][T10379] FAT-fs (loop1): Directory bread(block 65) failed [ 290.219723][T10379] FAT-fs (loop1): Directory bread(block 66) failed [ 290.226821][T10379] FAT-fs (loop1): Directory bread(block 67) failed [ 290.259925][T10379] FAT-fs (loop1): Directory bread(block 68) failed [ 290.306788][T10379] FAT-fs (loop1): Directory bread(block 69) failed [ 290.328341][T10384] loop0: detected capacity change from 0 to 256 [ 290.331116][T10379] FAT-fs (loop1): Directory bread(block 70) failed [ 290.374511][T10379] FAT-fs (loop1): Directory bread(block 71) failed [ 290.386134][T10379] FAT-fs (loop1): Directory bread(block 72) failed [ 290.407007][T10379] FAT-fs (loop1): Directory bread(block 73) failed [ 290.439447][ T4202] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 290.560042][T10388] loop2: detected capacity change from 0 to 256 [ 290.567113][T10388] exfat: Deprecated parameter 'namecase' [ 290.634077][T10388] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 290.651823][ T4202] usb write operation failed. (-71) [ 290.703458][ T4202] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 290.759132][ T4202] usb write operation failed. (-71) [ 290.790253][ T4202] usb 4-1: USB disconnect, device number 22 [ 291.207601][T10398] loop2: detected capacity change from 0 to 4096 [ 291.230053][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2904'. [ 291.279138][T10398] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 291.329702][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2904'. [ 291.397446][T10411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.459623][T10398] ntfs3: loop2: failed to convert "c46c" to maciceland [ 291.500769][T10414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2910'. [ 291.758198][T10423] netlink: 'syz.0.2916': attribute type 8 has an invalid length. [ 291.789361][T10423] netlink: 'syz.0.2916': attribute type 4 has an invalid length. [ 291.839173][T10423] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.2916'. [ 291.843924][T10426] IPVS: set_ctl: invalid protocol: 43 172.20.20.52:20001 [ 292.400268][T10449] overlayfs: missing 'lowerdir' [ 292.470898][T10453] netlink: 'syz.1.2929': attribute type 10 has an invalid length. [ 292.754644][T10464] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 293.079425][T10473] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 293.079425][T10473] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 293.224168][T10477] loop1: detected capacity change from 0 to 1024 [ 293.280704][T10477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.545741][T10490] ipt_CLUSTERIP: Please specify destination IP [ 293.814688][T10497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:30) already exists on: ipvlan1 [ 293.867422][T10497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.245588][T10516] (syz.2.2960,10516,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 294.286409][T10516] (syz.2.2960,10516,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 294.449396][ T4202] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 294.510956][ T4203] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 294.719197][ T4202] usb 2-1: Using ep0 maxpacket: 32 [ 294.929617][ T4203] usb 1-1: config 0 has no interfaces? [ 295.029424][ T4202] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 295.039399][ T4202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.047963][ T4202] usb 2-1: Product: syz [ 295.062832][ T4202] usb 2-1: Manufacturer: syz [ 295.081295][ T4202] usb 2-1: SerialNumber: syz [ 295.089518][ T4203] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 295.105121][ T4203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.123927][ T4202] usb 2-1: config 0 descriptor?? [ 295.158733][ T4203] usb 1-1: Product: syz [ 295.163845][ T4203] usb 1-1: Manufacturer: syz [ 295.168510][ T4203] usb 1-1: SerialNumber: syz [ 295.203667][ T4203] r8152-cfgselector 1-1: config 0 descriptor?? [ 295.413973][ T4202] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 295.433339][ T4202] eb 9a 3b 80 9b e4 7a f0 [ 295.438158][ T4202] snd-usb-6fire: probe of 2-1:0.0 failed with error -5 [ 295.490358][ T4203] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 295.510263][ T3711] usb 1-1: config 0 descriptor?? [ 295.623067][ T4203] usb 2-1: USB disconnect, device number 14 [ 295.706735][ T4202] usb 1-1: USB disconnect, device number 14 [ 295.719311][ T3711] usb 1-1: can't set config #0, error -71 [ 295.939745][T10549] loop2: detected capacity change from 0 to 32768 [ 295.990987][T10549] JFS: metapage_get_blocks failed [ 296.001764][T10549] ERROR: (device loop2): release_metapage: write_one_page() failed [ 296.001764][T10549] [ 296.033520][T10549] ERROR: (device loop2): remounting filesystem as read-only [ 296.125649][ T132] blkno = 5002c, nblocks = 1 [ 296.127058][T10555] loop3: detected capacity change from 0 to 32768 [ 296.137292][ T132] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 296.137292][ T132] [ 296.199195][ T132] blkno = 5002d, nblocks = 1 [ 296.203995][ T132] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 296.203995][ T132] [ 296.253083][T10555] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 296.479428][ T3639] JFS: metapage_get_blocks failed [ 296.490137][ T3645] ocfs2: Unmounting device (7,3) on (node local) [ 296.629390][T10567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.280942][T10589] loop2: detected capacity change from 0 to 256 [ 297.333045][T10590] loop0: detected capacity change from 0 to 256 [ 297.465688][T10590] FAT-fs (loop0): Directory bread(block 64) failed [ 297.478480][T10589] FAT-fs (loop2): Directory bread(block 64) failed [ 297.505383][T10590] FAT-fs (loop0): Directory bread(block 65) failed [ 297.512391][T10589] FAT-fs (loop2): Directory bread(block 65) failed [ 297.539653][T10590] FAT-fs (loop0): Directory bread(block 66) failed [ 297.546257][T10590] FAT-fs (loop0): Directory bread(block 67) failed [ 297.564898][T10589] FAT-fs (loop2): Directory bread(block 66) failed [ 297.581233][T10589] FAT-fs (loop2): Directory bread(block 67) failed [ 297.587975][T10589] FAT-fs (loop2): Directory bread(block 68) failed [ 297.612800][T10590] FAT-fs (loop0): Directory bread(block 68) failed [ 297.659279][T10590] FAT-fs (loop0): Directory bread(block 69) failed [ 297.666545][T10589] FAT-fs (loop2): Directory bread(block 69) failed [ 297.679492][T10590] FAT-fs (loop0): Directory bread(block 70) failed [ 297.686080][T10590] FAT-fs (loop0): Directory bread(block 71) failed [ 297.693991][T10589] FAT-fs (loop2): Directory bread(block 70) failed [ 297.702549][T10589] FAT-fs (loop2): Directory bread(block 71) failed [ 297.710298][T10589] FAT-fs (loop2): Directory bread(block 72) failed [ 297.716881][T10589] FAT-fs (loop2): Directory bread(block 73) failed [ 297.734678][T10590] FAT-fs (loop0): Directory bread(block 72) failed [ 297.742279][T10590] FAT-fs (loop0): Directory bread(block 73) failed [ 298.551596][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3013'. [ 298.554476][T10629] kernel read not supported for file / 7âW)- (pid: 10629 comm: syz.4.3010) [ 298.603633][T10630] gre0: Master is either lo or non-ether device [ 298.626008][ T26] audit: type=1800 audit(2000000155.060:70): pid=10629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3010" name=20019C1437B3CFFCC3A25729EBC72DEB dev="mqueue" ino=53817 res=0 errno=0 [ 299.108309][T10607] loop1: detected capacity change from 0 to 32768 [ 299.230049][T10607] XFS (loop1): Mounting V5 Filesystem [ 299.381452][T10607] XFS (loop1): Ending clean mount [ 299.532432][ T3644] XFS (loop1): Unmounting Filesystem [ 299.584693][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3026'. [ 299.606309][ T4203] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 299.852277][T10670] tmpfs: Bad value for 'nr_blocks' [ 299.869172][ T4203] usb 1-1: Using ep0 maxpacket: 32 [ 300.000813][ T4203] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.039103][ T4203] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.209616][ T4203] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 300.235791][ T4203] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 300.263000][ T4203] usb 1-1: Product: syz [ 300.267253][ T4203] usb 1-1: Manufacturer: syz [ 300.310923][T10682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.318346][T10682] IPv6: NLM_F_CREATE should be set when creating new route [ 300.360531][ T4203] hub 1-1:4.0: USB hub found [ 300.569207][ T4203] hub 1-1:4.0: 2 ports detected [ 300.581204][T10692] loop3: detected capacity change from 0 to 256 [ 300.779082][ T4203] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 300.790454][ T4203] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 300.835048][T10701] loop3: detected capacity change from 0 to 512 [ 300.849757][ T4203] usb 1-1: USB disconnect, device number 15 [ 300.930672][T10701] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 300.968630][T10707] netlink: 'syz.1.3046': attribute type 30 has an invalid length. [ 300.980407][T10701] ext4 filesystem being mounted at /601/bus supports timestamps until 2038 (0x7fffffff) [ 301.121029][ T3645] EXT4-fs (loop3): unmounting filesystem. [ 301.559159][T10720] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3051'. [ 302.010969][T10741] netlink: 'syz.4.3060': attribute type 21 has an invalid length. [ 303.002598][T10782] syz.4.3076 (10782) used greatest stack depth: 18392 bytes left [ 303.630634][ T52] block nbd3: Attempted send on invalid socket [ 303.636915][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.681950][T10824] hpfs: hpfs_map_sector(): read error [ 303.987416][T10837] loop3: detected capacity change from 0 to 1764 [ 304.050482][T10837] cgroup: none used incorrectly [ 304.169036][ T3687] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 304.539332][ T3687] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 304.547614][ T3687] usb 1-1: config 4 has no interface number 0 [ 304.759356][ T3687] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 304.785301][ T3687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.819483][ T3687] usb 1-1: Product: syz [ 304.823910][ T3687] usb 1-1: Manufacturer: syz [ 304.849285][ T3687] usb 1-1: SerialNumber: syz [ 304.931175][ T3687] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 304.967915][T10866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3103'. [ 305.149412][ T3687] vp7045: USB control message 'out' went wrong. [ 305.155743][ T3687] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 305.199628][ T3687] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 305.238269][ T3687] usb 1-1: USB disconnect, device number 16 [ 305.317683][T10853] loop1: detected capacity change from 0 to 32768 [ 305.342001][T10853] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3097 (10853) [ 305.377342][T10853] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 305.399686][T10853] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 305.408450][T10853] BTRFS info (device loop1): using free space tree [ 305.699118][T10853] BTRFS info (device loop1): enabling ssd optimizations [ 305.916541][ T3644] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 305.929127][ T7067] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 306.179238][ T7067] usb 5-1: Using ep0 maxpacket: 16 [ 306.189369][ T4203] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 306.313036][ T7067] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 306.339286][ T7067] usb 5-1: config 0 has no interface number 0 [ 306.345489][ T7067] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 306.390300][ T7067] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 306.439308][ T4203] usb 1-1: Using ep0 maxpacket: 32 [ 306.549230][ T7067] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 306.558613][ T7067] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 306.610260][ T7067] usb 5-1: Product: syz [ 306.614678][ T7067] usb 5-1: SerialNumber: syz [ 306.653166][ T7067] usb 5-1: config 0 descriptor?? [ 306.691744][ T7067] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 306.735771][ T4203] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 306.761740][ T4203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.795919][ T4203] usb 1-1: Product: syz [ 306.801003][ T4203] usb 1-1: Manufacturer: syz [ 306.805744][ T4203] usb 1-1: SerialNumber: syz [ 306.827942][ T4203] usb 1-1: config 0 descriptor?? [ 306.956725][ T7061] usb 5-1: USB disconnect, device number 11 [ 307.101912][ T4203] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 017 [ 307.176627][T10937] loop3: detected capacity change from 0 to 256 [ 307.206556][T10937] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 307.326839][T10939] loop1: detected capacity change from 0 to 2048 [ 307.336306][ T4203] usb 1-1: USB disconnect, device number 17 [ 307.393645][T10941] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 307.404866][T10939] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.615236][T10945] netlink: 'syz.1.3133': attribute type 2 has an invalid length. [ 307.936379][T10951] loop3: detected capacity change from 0 to 256 [ 307.969908][T10951] exfat: Deprecated parameter 'utf8' [ 307.986155][T10951] exfat: Bad value for 'allow_utime' [ 308.064382][ T4341] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 308.085496][ T1071] block nbd3: Attempted send on invalid socket [ 308.091853][ T1071] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.119023][T10951] MINIX-fs: unable to read superblock [ 309.271480][T10985] netlink: 'syz.1.3153': attribute type 9 has an invalid length. [ 309.429150][ T7061] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 309.523913][T10969] loop3: detected capacity change from 0 to 32768 [ 309.588071][T10969] JBD2: Ignoring recovery information on journal [ 309.688143][T10969] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 309.694074][T10973] loop0: detected capacity change from 0 to 32768 [ 309.830738][T10973] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 309.830738][T10973] [ 309.859125][ T7061] usb 5-1: config 0 interface 0 has no altsetting 0 [ 309.867941][ T7061] usb 5-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 309.896449][ T7061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.896487][T10973] ERROR: (device loop0): remounting filesystem as read-only [ 309.931044][ T7061] usb 5-1: config 0 descriptor?? [ 309.956414][T10973] xtLookup: xtSearch returned -5 [ 309.995276][ T7061] snd_usb_toneport 5-1:0.0: Line 6 POD Studio UX1 found [ 310.020702][ T3645] ocfs2: Unmounting device (7,3) on (node local) [ 310.033371][T11002] netlink: 'syz.2.3157': attribute type 10 has an invalid length. [ 310.080365][T11002] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3157'. [ 310.132682][T11002] batman_adv: batadv0: Adding interface: virt_wifi0 [ 310.149323][T11002] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.209179][T11002] batman_adv: batadv0: Interface activated: virt_wifi0 [ 310.268879][ T7061] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 310.278440][ T7061] snd_usb_toneport 5-1:0.0: Line 6 POD Studio UX1 now disconnected [ 310.321507][ T7061] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 310.530555][ T7061] usb 5-1: USB disconnect, device number 12 [ 310.917836][T11022] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 311.045702][T11022] CIFS mount error: No usable UNC path provided in device string! [ 311.045702][T11022] [ 311.089551][T11022] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 311.108640][T11028] loop2: detected capacity change from 0 to 64 [ 311.320174][ T26] audit: type=1326 audit(2000000167.760:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1b7dff9 code=0x7ffc0000 [ 311.408871][ T26] audit: type=1326 audit(2000000167.760:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f4df1b7dff9 code=0x7ffc0000 [ 311.507625][ T26] audit: type=1326 audit(2000000167.760:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1b7dff9 code=0x7ffc0000 [ 311.583128][ T26] audit: type=1326 audit(2000000167.760:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.1.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1b7dff9 code=0x7ffc0000 [ 312.930222][T11085] loop3: detected capacity change from 0 to 4096 [ 313.009616][T11085] ntfs: volume version 3.1. [ 313.063546][T11085] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 313.065040][T11060] loop1: detected capacity change from 0 to 32768 [ 313.156944][T11085] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 313.171064][T11060] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3186 (11060) [ 313.250527][T11060] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 313.256483][T11085] ntfs: (device loop3): __ntfs_bitmap_set_bits_in_run(): Failed to map first page (error -5), aborting. [ 313.275800][T11060] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 313.350450][T11085] ntfs: (device loop3): __ntfs_cluster_free(): Failed to clear first run (error -5), aborting. [ 313.357110][T11060] BTRFS info (device loop1): using free space tree [ 313.437673][T11085] ntfs: (device loop3): ntfs_truncate(): Failed to release cluster(s) (error code -5). Unmount and run chkdsk to recover the lost cluster(s). [ 313.575519][ T3645] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 313.629251][T11060] BTRFS info (device loop1): enabling ssd optimizations [ 313.673210][T11083] loop2: detected capacity change from 0 to 32768 [ 313.711926][T11083] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 313.860128][T11122] binfmt_misc: register: failed to install interpreter file ./file0 [ 313.994913][ T3644] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.065192][ T3639] ocfs2: Unmounting device (7,2) on (node local) [ 315.776282][T11175] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3232'. [ 316.045589][T11184] loop3: detected capacity change from 0 to 256 [ 316.064610][T11147] loop2: detected capacity change from 0 to 32768 [ 316.705386][T11206] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 316.778602][T11209] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 316.804461][T11210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3249'. [ 317.026124][T11218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3252'. [ 317.075684][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.082095][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.173439][T11218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3252'. [ 317.181063][T11226] loop0: detected capacity change from 0 to 512 [ 317.194732][T11224] loop1: detected capacity change from 0 to 2048 [ 317.254522][T11226] EXT4-fs: Ignoring removed nobh option [ 317.284273][T11226] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 317.332806][T11231] netlink: 'syz.3.3259': attribute type 32 has an invalid length. [ 317.337695][T11226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.401314][T11224] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 317.482779][T11226] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 317.510650][T11226] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038 (0x7fffffff) [ 317.622134][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 317.661213][ T6632] EXT4-fs (loop0): unmounting filesystem. [ 317.672367][T11243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.079169][T11260] xt_cgroup: xt_cgroup: no path or classid specified [ 318.099030][ T4203] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 318.255944][T11267] loop3: detected capacity change from 0 to 1024 [ 318.339277][ T4203] usb 1-1: Using ep0 maxpacket: 32 [ 318.353328][T11267] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 318.395572][T11274] loop1: detected capacity change from 0 to 256 [ 318.459398][ T4203] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.474013][T11278] IPv6: NLM_F_CREATE should be specified when creating new route [ 318.518137][ T4203] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.558608][ T4203] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 318.576239][ T4203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.603962][ T3645] EXT4-fs (loop3): unmounting filesystem. [ 318.614237][ T4203] usb 1-1: config 0 descriptor?? [ 318.680535][ T4203] hub 1-1:0.0: USB hub found [ 318.899401][ T4203] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 319.206081][ T4203] usbhid 1-1:0.0: can't add hid device: -71 [ 319.212358][ T4203] usbhid: probe of 1-1:0.0 failed with error -71 [ 319.269761][ T4203] usb 1-1: USB disconnect, device number 18 [ 319.318631][T11297] loop1: detected capacity change from 0 to 4096 [ 319.415341][T11297] ntfs3: loop1: Failed to load $Extend. [ 319.474449][T11297] ntfs3: loop1: ino=1f, "file2" attr_set_size [ 320.089194][ T4203] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 320.349040][ T4203] usb 2-1: Using ep0 maxpacket: 32 [ 320.479320][ T4203] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 320.502571][ T4203] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 320.519877][T11308] loop3: detected capacity change from 0 to 32768 [ 320.532031][ T4203] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 320.570143][ T4203] usb 2-1: config 1 has no interface number 0 [ 320.597243][T11308] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3294 (11308) [ 320.602843][ T4203] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 320.671466][ T4203] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 320.720976][ T4203] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 320.749528][ T4203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.793407][ T26] audit: type=1326 audit(2000000177.230:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62a77dff9 code=0x7ffc0000 [ 320.812470][T11346] netlink: 520 bytes leftover after parsing attributes in process `syz.4.3310'. [ 320.819934][T11308] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 320.862146][ T4203] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 320.866100][T11308] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 320.889346][ T26] audit: type=1326 audit(2000000177.230:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fc62a77dff9 code=0x7ffc0000 [ 320.929418][T11308] BTRFS info (device loop3): using free space tree [ 320.969557][ T26] audit: type=1326 audit(2000000177.230:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62a77dff9 code=0x7ffc0000 [ 321.077306][ T26] audit: type=1326 audit(2000000177.230:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62a77dff9 code=0x7ffc0000 [ 321.111085][ T4203] snd_usb_pod 2-1:1.1: invalid control EP [ 321.159180][ T4203] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 321.205542][ T4203] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 321.251821][T11308] BTRFS info (device loop3): enabling ssd optimizations [ 321.269648][ T4203] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 321.338695][T11372] IPv6: sit1: Disabled Multicast RS [ 321.339937][ T4203] usb 2-1: USB disconnect, device number 15 [ 321.419277][ T3645] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 321.647809][T11377] netlink: 'syz.0.3321': attribute type 6 has an invalid length. [ 321.745585][T11381] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 322.404093][T11401] loop0: detected capacity change from 0 to 256 [ 322.466823][T11401] exfat: Deprecated parameter 'utf8' [ 322.529245][T11401] exfat: Deprecated parameter 'namecase' [ 322.535010][T11401] exfat: Deprecated parameter 'utf8' [ 322.577710][T11401] exfat: Deprecated parameter 'namecase' [ 322.637006][T11401] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d) [ 322.854342][T11410] XFS (nullb0): Invalid superblock magic number [ 322.945828][T11419] loop2: detected capacity change from 0 to 4096 [ 323.012637][T11419] ntfs: volume version 3.1. [ 323.044320][T11419] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 323.066180][T11419] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 323.126985][T11419] ntfs: (device loop2): __ntfs_bitmap_set_bits_in_run(): Failed to map first page (error -5), aborting. [ 323.165955][T11419] ntfs: (device loop2): __ntfs_cluster_free(): Failed to clear first run (error -5), aborting. [ 323.208327][T11419] ntfs: (device loop2): ntfs_truncate(): Failed to release cluster(s) (error code -5). Unmount and run chkdsk to recover the lost cluster(s). [ 323.353810][ T3639] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 323.704771][T11406] loop1: detected capacity change from 0 to 32768 [ 323.736565][T11406] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3333 (11406) [ 323.766736][T11437] autofs4:pid:11437:autofs_fill_super: called with bogus options [ 323.816917][T11406] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 323.857769][T11406] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 323.891445][T11406] BTRFS info (device loop1): using free space tree [ 324.011263][T11446] netlink: 'syz.2.3349': attribute type 1 has an invalid length. [ 324.074259][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3350'. [ 324.099523][T11452] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3350'. [ 324.146318][T11452] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 324.279930][T11464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3352'. [ 324.290082][T11406] BTRFS info (device loop1): enabling ssd optimizations [ 324.329100][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3352'. [ 324.359195][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3352'. [ 324.627931][ T3644] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 324.723116][T11435] loop0: detected capacity change from 0 to 32768 [ 324.775800][T11435] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.3345 (11435) [ 324.806573][T11479] loop2: detected capacity change from 0 to 512 [ 324.863702][T11479] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 324.937517][T11479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 324.975875][T11479] ext4 filesystem being mounted at /702/file0 supports timestamps until 2038 (0x7fffffff) [ 325.067458][T11435] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 325.139105][T11435] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 325.158279][T11435] BTRFS info (device loop0): doing ref verification [ 325.194504][T11435] BTRFS info (device loop0): max_inline at 0 [ 325.203928][ T3639] EXT4-fs (loop2): unmounting filesystem. [ 325.221842][T11435] BTRFS info (device loop0): using free space tree [ 325.247262][T11490] loop1: detected capacity change from 0 to 1024 [ 325.499181][T11512] x_tables: unsorted underflow at hook 4 [ 325.609253][T11435] BTRFS info (device loop0): enabling ssd optimizations [ 325.799361][ T6632] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 326.234648][T11537] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 326.305546][T11537] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 326.997200][T11561] hfs: unable to parse mount options [ 327.556694][T11578] netlink: 'syz.3.3394': attribute type 1 has an invalid length. [ 327.589610][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3394'. [ 327.598630][T11578] netlink: 'syz.3.3394': attribute type 1 has an invalid length. [ 327.773599][T11584] loop1: detected capacity change from 0 to 2048 [ 327.841179][T11584] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 327.892107][T11584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.123970][T11595] xt_socket: unknown flags 0x50 [ 328.677391][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3412'. [ 329.572661][T11647] binder: 11646:11647 ioctl c018620c 20000700 returned -22 [ 330.039266][ T3727] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 330.274853][T11674] loop0: detected capacity change from 0 to 256 [ 330.289021][ T3727] usb 4-1: Using ep0 maxpacket: 32 [ 330.357424][T11674] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 330.429372][ T3727] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 330.474655][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3445'. [ 330.629459][ T3727] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 330.648806][ T3727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.664951][T11682] loop0: detected capacity change from 0 to 2048 [ 330.681916][T11686] loop1: detected capacity change from 0 to 256 [ 330.693588][ T3727] usb 4-1: Product: syz [ 330.697818][ T3727] usb 4-1: Manufacturer: syz [ 330.713599][T11682] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 330.728727][ T3727] usb 4-1: SerialNumber: syz [ 330.745972][ T3727] usb 4-1: config 0 descriptor?? [ 330.753397][T11682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.788288][T11687] ALSA: mixer_oss: invalid OSS volume '%' [ 330.800194][T11654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 330.823546][ T3727] hub 4-1:0.0: bad descriptor, ignoring hub [ 330.842282][ T3727] hub: probe of 4-1:0.0 failed with error -5 [ 330.866065][T11682] UDF-fs: unknown compression code (0) [ 330.884889][ T3727] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 331.036035][T11692] netlink: 'syz.2.3452': attribute type 1 has an invalid length. [ 331.067952][ T3727] usb 4-1: USB disconnect, device number 23 [ 331.074002][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 331.396406][T11704] bridge0: port 3(veth0_to_bridge) entered blocking state [ 331.409344][T11704] bridge0: port 3(veth0_to_bridge) entered disabled state [ 331.427960][T11704] device veth0_to_bridge entered promiscuous mode [ 331.445128][T11704] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 331.445840][ T4202] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 331.470704][T11704] bridge0: port 3(veth0_to_bridge) entered blocking state [ 331.478709][T11704] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 331.733786][ T4202] usb 1-1: Using ep0 maxpacket: 8 [ 331.800171][T11710] loop3: detected capacity change from 0 to 256 [ 331.848268][T11710] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 331.869457][ T4202] usb 1-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=d7.cc [ 331.888777][ T4202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.925569][ T4202] usb 1-1: config 0 descriptor?? [ 331.949144][ T3727] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 332.010646][ T4202] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 332.018235][ T4202] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 332.050057][ T4202] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 332.057824][ T4202] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 332.109442][ T4202] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 332.125782][ T4202] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 332.144107][ T4202] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 332.151966][ T4202] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 332.197765][ T4202] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 332.238862][ T4202] usb 1-1: USB disconnect, device number 19 [ 332.245208][ T3727] usb 5-1: Using ep0 maxpacket: 8 [ 332.292364][ T4202] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 332.338783][ T4202] keyspan 1-1:0.0: device disconnected [ 332.379571][ T3727] usb 5-1: config 0 has an invalid interface number: 4 but max is 2 [ 332.387809][ T3727] usb 5-1: config 0 has an invalid interface number: 4 but max is 2 [ 332.391190][T11699] loop2: detected capacity change from 0 to 40427 [ 332.417432][ T3727] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 332.439091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.439182][ T3727] usb 5-1: config 0 has no interface number 1 [ 332.451496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.469914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.477815][ T3727] usb 5-1: config 0 interface 4 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 332.482459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.504522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.516975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.523971][ T3727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 332.529382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.551212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.558045][ T3727] usb 5-1: config 0 interface 4 has no altsetting 1 [ 332.563659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.582662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.642283][T11699] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 332.688986][T11699] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 332.723300][T11699] F2FS-fs (loop2): inline encryption not supported [ 332.759438][ T3727] usb 5-1: New USB device found, idVendor=12d1, idProduct=58e0, bcdDevice=45.5e [ 332.786560][ T3727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.809029][ T3727] usb 5-1: Product: syz [ 332.813280][ T3727] usb 5-1: Manufacturer: syz [ 332.834553][ T3727] usb 5-1: SerialNumber: syz [ 332.839924][T11699] F2FS-fs (loop2): invalid crc value [ 332.896522][T11699] F2FS-fs (loop2): Found nat_bits in checkpoint [ 332.906126][ T3727] usb 5-1: config 0 descriptor?? [ 333.215602][T11699] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 333.239029][T11699] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 333.491952][ T4203] usb 5-1: USB disconnect, device number 13 [ 334.082871][T11753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3482'. [ 334.119140][T11753] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3482'. [ 334.781571][T11775] netlink: 'syz.0.3491': attribute type 15 has an invalid length. [ 334.858293][T11775] netlink: 'syz.0.3491': attribute type 29 has an invalid length. [ 334.939363][T11775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3491'. [ 335.272152][ T7051] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 336.004149][ T7051] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 336.023766][ T7051] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 336.044009][ T7051] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.095417][ T7051] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 336.104436][ T7051] usb 4-1: config 0 has no interface number 0 [ 336.146183][ T7051] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 336.179601][ T7051] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 336.204977][ T7051] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 336.298975][ T7051] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 336.308083][ T7051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.360449][ T7051] usb 4-1: config 0 descriptor?? [ 336.412134][T11821] loop1: detected capacity change from 0 to 512 [ 336.500803][T11821] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 336.503627][ T7051] gspca_main: spca561-2.14.0 probing abcd:cdee [ 336.613973][T11821] EXT4-fs (loop1): 1 truncate cleaned up [ 336.619964][T11821] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 336.831894][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 336.857417][ T7051] spca561: probe of 4-1:0.156 failed with error -22 [ 336.903639][ T7051] usb 4-1: MIDIStreaming interface descriptor not found [ 337.018522][ T7051] usb 4-1: USB disconnect, device number 24 [ 337.123155][ T3654] udevd[3654]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.449123][ C0] net_ratelimit: 7518 callbacks suppressed [ 337.449155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.467643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.480541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.493087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.505603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.518257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.544106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.556651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.569320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.581885][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.627762][T11850] qrtr: Invalid version 0 [ 338.024319][T11858] netlink: 'syz.0.3530': attribute type 10 has an invalid length. [ 338.272582][T11858] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 338.760993][T11873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3538'. [ 339.051712][T11848] loop3: detected capacity change from 0 to 32768 [ 339.151284][T11848] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 339.191161][T11884] loop0: detected capacity change from 0 to 1024 [ 339.398769][ T3645] ocfs2: Unmounting device (7,3) on (node local) [ 340.612850][T11887] loop1: detected capacity change from 0 to 32768 [ 340.693133][T11887] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3544 (11887) [ 340.758089][T11887] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 340.778682][T11887] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 340.808248][T11887] BTRFS info (device loop1): using free space tree [ 341.243769][T11887] BTRFS info (device loop1): enabling ssd optimizations [ 341.421156][ T3644] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 341.465547][T11950] x_tables: duplicate entry at hook 2 [ 341.973543][T11961] loop3: detected capacity change from 0 to 1024 [ 342.040760][T11961] hfsplus: Filesystem is marked locked, mounting read-only. [ 342.137312][T11961] hfsplus: filesystem is marked locked, leaving read-only. [ 342.474603][ C0] net_ratelimit: 6671 callbacks suppressed [ 342.474623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.492965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.505392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.517775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.530224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.542617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.555052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.567463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.579890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.592532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.672257][ T2039] pvrusb2: request_firmware fatal error with code=-110 [ 342.689053][ T2039] pvrusb2: Failure uploading firmware1 [ 342.694623][ T2039] pvrusb2: Device initialization was not successful. [ 342.744140][ T2039] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 342.813876][ T2039] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 342.870859][ T4200] pvrusb2: Device being rendered inoperable [ 342.880549][ T4200] pvrusb2: Device being rendered inoperable [ 343.002204][T11984] loop1: detected capacity change from 0 to 256 [ 343.178696][T11986] netlink: 'syz.4.3583': attribute type 10 has an invalid length. [ 343.337148][T11986] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 343.462143][T11962] loop0: detected capacity change from 0 to 32768 [ 343.528803][T11962] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3572 (11962) [ 343.621693][T11962] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 343.659728][T11962] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 343.669661][T11990] loop1: detected capacity change from 0 to 4096 [ 343.714229][T11962] BTRFS info (device loop0): using free space tree [ 343.721455][T11990] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 343.822312][T11974] loop2: detected capacity change from 0 to 32768 [ 343.867235][T11974] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.3577 (11974) [ 343.923398][T11990] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 343.947868][T11841] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (11841) [ 344.115940][T11962] BTRFS info (device loop0): enabling ssd optimizations [ 344.323167][ T26] audit: type=1326 audit(2000000200.760:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12011 comm="syz.2.3587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc62a77dff9 code=0x0 [ 344.345528][ T6632] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 344.681209][T12021] x_tables: duplicate underflow at hook 4 [ 345.535608][T12038] loop0: detected capacity change from 0 to 256 [ 346.111423][T12053] loop0: detected capacity change from 0 to 256 [ 346.343671][ T4196] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 346.407561][T12059] netlink: 'syz.2.3611': attribute type 1 has an invalid length. [ 346.459425][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3611'. [ 346.497703][T12063] loop1: detected capacity change from 0 to 764 [ 346.959350][ T4196] usb 4-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=c8.d3 [ 346.994869][ T4196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.025255][ T4196] usb 4-1: Product: syz [ 347.038363][ T4196] usb 4-1: Manufacturer: syz [ 347.059182][ T4196] usb 4-1: SerialNumber: syz [ 347.108158][ T4196] usb 4-1: config 0 descriptor?? [ 347.292599][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3618'. [ 347.379314][ T4196] cdc_subset: probe of 4-1:0.0 failed with error -22 [ 347.508136][ C0] net_ratelimit: 6673 callbacks suppressed [ 347.508159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.526565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.539034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.551497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.563913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.576321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.589070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.592186][ T4196] usb 4-1: USB disconnect, device number 25 [ 347.601565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.619751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.632146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.985591][T12095] loop0: detected capacity change from 0 to 1764 [ 349.248841][T12093] loop1: detected capacity change from 0 to 32768 [ 349.317158][T12125] loop2: detected capacity change from 0 to 2048 [ 349.350110][T12093] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 349.358601][T12093] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 349.508760][T12125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.579392][T12093] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 349.631448][ T7062] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 349.638278][ T7062] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 349.878744][ T7062] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 240ms [ 349.889030][ T7062] gfs2: fsid=syz:syz.0: jid=0: Done [ 349.894644][T12093] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 350.264019][T12141] loop0: detected capacity change from 0 to 2048 [ 350.397695][T12141] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 350.538697][T12141] syz.0.3650: attempt to access beyond end of device [ 350.538697][T12141] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 350.554565][T12148] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.705441][T12154] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3655'. [ 350.772103][T12119] loop3: detected capacity change from 0 to 40427 [ 350.864500][T12119] F2FS-fs (loop3): invalid crc value [ 350.873843][T12119] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 350.982220][T12119] F2FS-fs (loop3): Found nat_bits in checkpoint [ 351.197428][T12159] loop1: detected capacity change from 0 to 4096 [ 351.263143][T12119] F2FS-fs (loop3): recover fsync data on readonly fs [ 351.270637][T12119] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 351.277487][T12119] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 351.305224][T12164] netlink: 'syz.4.3659': attribute type 21 has an invalid length. [ 351.318965][T12159] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 351.353179][T12119] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 351.413283][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3659'. [ 351.419432][T12167] x_tables: ip_tables: osf match: only valid for protocol 6 [ 351.724244][T12159] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 352.264911][T12184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3672'. [ 352.515795][ C0] net_ratelimit: 5692 callbacks suppressed [ 352.515813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.534342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.546810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.559461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.571891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.584388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.597130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.609698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.622277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.634707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.683305][T12197] loop3: detected capacity change from 0 to 256 [ 353.344883][T12220] ieee802154 phy0 wpan0: encryption failed: -22 [ 353.578055][T12227] program syz.4.3688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.741517][T12232] loop2: detected capacity change from 0 to 256 [ 353.843803][T12229] loop1: detected capacity change from 0 to 4096 [ 353.904739][T12229] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 354.464438][T12250] loop0: detected capacity change from 0 to 64 [ 354.469424][T12252] loop3: detected capacity change from 0 to 64 [ 355.509499][T12284] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (33026) [ 355.549779][T12284] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 355.599444][T12285] loop1: detected capacity change from 0 to 2048 [ 355.839825][T12285] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.196124][T12299] loop1: detected capacity change from 0 to 512 [ 356.297437][T12299] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.3723: bg 0: block 5: invalid block bitmap [ 356.401330][T12299] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 356.517163][T12267] loop0: detected capacity change from 0 to 32768 [ 356.538516][T12299] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3723: invalid indirect mapped block 3 (level 2) [ 356.666108][T12299] EXT4-fs (loop1): 1 orphan inode deleted [ 356.672053][T12299] EXT4-fs (loop1): 1 truncate cleaned up [ 356.679672][T12299] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 356.743719][T12319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3729'. [ 356.799366][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3729'. [ 356.820596][T12267] XFS (loop0): Mounting V5 Filesystem [ 356.987676][T12267] XFS (loop0): Ending clean mount [ 357.016305][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 357.176616][ T7062] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 357.271594][ T6632] XFS (loop0): Unmounting Filesystem [ 357.525234][ C0] net_ratelimit: 5748 callbacks suppressed [ 357.525257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.543632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.556099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.568533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.581182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.593770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.606686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.619126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.631615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.644032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.765668][ T7062] usb 5-1: Using ep0 maxpacket: 16 [ 357.978562][ T7062] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 358.277630][ T7062] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 358.313815][ T7062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.363986][ T7062] usb 5-1: Product: syz [ 358.382242][ T7062] usb 5-1: Manufacturer: syz [ 358.387000][ T7062] usb 5-1: SerialNumber: syz [ 358.439832][ T7062] usb 5-1: config 0 descriptor?? [ 358.538738][ T7062] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 358.557459][ T7062] usb 5-1: Detected FT232R [ 358.655969][T12359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3747'. [ 358.988443][ T7062] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 359.008221][ T4202] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 359.068470][ T7062] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 359.091868][ T7062] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 359.155474][ T7062] usb 5-1: USB disconnect, device number 14 [ 359.191276][ T7062] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 359.223023][T12374] loop2: detected capacity change from 0 to 256 [ 359.223320][ T7062] ftdi_sio 5-1:0.0: device disconnected [ 359.420574][ T4202] usb 4-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 359.631678][ T4202] usb 4-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d [ 359.651981][ T4202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.709359][ T4202] usb 4-1: Product: syz [ 359.716723][ T4202] usb 4-1: Manufacturer: syz [ 359.774486][ T4202] usb 4-1: SerialNumber: syz [ 360.074663][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3764'. [ 360.120002][ T4202] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 360.136412][ T4202] dvb_usb_af9035: probe of 4-1:164.0 failed with error -22 [ 360.155042][T12392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3764'. [ 360.182901][ T4202] usb 4-1: USB disconnect, device number 26 [ 361.209192][ T4202] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 361.349348][T12428] netlink: 'syz.0.3781': attribute type 2 has an invalid length. [ 361.490182][ T4202] usb 2-1: Using ep0 maxpacket: 16 [ 361.619247][ T4202] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.641481][ T4202] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.840448][T12447] netlink: 131996 bytes leftover after parsing attributes in process `syz.2.3790'. [ 361.880326][ T4202] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.908344][ T4202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.954731][ T4202] usb 2-1: Product: syz [ 361.985652][ T4202] usb 2-1: Manufacturer: syz [ 362.007684][ T4202] usb 2-1: SerialNumber: syz [ 362.255404][T12454] IPv6: sit1: Disabled Multicast RS [ 362.383729][ T4202] usb 2-1: 0:2 : does not exist [ 362.486696][ T4202] usb 2-1: USB disconnect, device number 16 [ 362.533705][ C0] net_ratelimit: 7209 callbacks suppressed [ 362.533723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.552070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.564502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.576920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.589421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.602126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.615046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.627609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.640020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.652800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.071310][ T4196] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 363.361565][T12484] loop2: detected capacity change from 0 to 256 [ 363.489186][T12486] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 363.520596][ T4196] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.539054][T12486] vhci_hcd: invalid port number 129 [ 363.565420][ T4196] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 363.575266][T12486] vhci_hcd: invalid port number 129 [ 363.585395][T12488] loop1: detected capacity change from 0 to 1024 [ 363.599098][ T4196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.628434][ T4196] usb 5-1: config 0 descriptor?? [ 363.637014][T12488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 363.701563][ T4196] go7007: probe of 5-1:0.0 failed with error -12 [ 363.815160][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 364.069750][ T4202] usb 5-1: USB disconnect, device number 15 [ 364.267747][ T4203] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 364.549175][ T4203] usb 4-1: Using ep0 maxpacket: 8 [ 364.691255][ T4203] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 364.879124][ T4203] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 364.916790][ T4203] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 364.955795][ T4203] usb 4-1: Product: syz [ 364.979040][ T4203] usb 4-1: Manufacturer: syz [ 364.983792][ T4203] usb 4-1: SerialNumber: syz [ 365.038286][T12522] netlink: 'syz.0.3825': attribute type 24 has an invalid length. [ 365.329255][ T4203] usb 4-1: Invalid connection information received from device [ 365.546252][ T4200] usb 4-1: USB disconnect, device number 27 [ 365.590674][T12539] netlink: 'syz.2.3832': attribute type 4 has an invalid length. [ 366.679034][T12579] dlm: non-version read from control device 0 [ 366.835784][T12583] loop3: detected capacity change from 0 to 256 [ 367.268538][T12583] FAT-fs (loop3): Directory bread(block 64) failed [ 367.298361][T12583] FAT-fs (loop3): Directory bread(block 65) failed [ 367.349147][T12583] FAT-fs (loop3): Directory bread(block 66) failed [ 367.355920][T12583] FAT-fs (loop3): Directory bread(block 67) failed [ 367.417747][T12583] FAT-fs (loop3): Directory bread(block 68) failed [ 367.424897][T12583] FAT-fs (loop3): Directory bread(block 69) failed [ 367.479774][T12583] FAT-fs (loop3): Directory bread(block 70) failed [ 367.536899][T12583] FAT-fs (loop3): Directory bread(block 71) failed [ 367.539222][ C0] net_ratelimit: 6613 callbacks suppressed [ 367.539239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.561862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.580037][T12583] FAT-fs (loop3): Directory bread(block 72) failed [ 367.605658][T12583] FAT-fs (loop3): Directory bread(block 73) failed [ 367.607327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.624774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.637212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.649681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.662089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.674478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.687034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.699448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.009065][T12620] netlink: 'syz.2.3873': attribute type 1 has an invalid length. [ 368.054277][T12618] loop0: detected capacity change from 0 to 2048 [ 368.103796][T12618] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.125660][T12625] netlink: 'syz.3.3874': attribute type 21 has an invalid length. [ 368.138519][T12623] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3871'. [ 368.158787][T12625] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3874'. [ 368.204439][T12618] Invalid option length (0) for dns_resolver key [ 368.277182][T12628] x_tables: unsorted underflow at hook 2 [ 368.989628][ T4202] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 369.338463][ T7051] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 369.369346][ T4202] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.418375][T12662] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3893'. [ 369.446914][T12665] loop0: detected capacity change from 0 to 256 [ 369.609236][ T4202] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 369.618599][ T4202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.679783][ T4202] usb 5-1: Product: syz [ 369.694330][ T4202] usb 5-1: Manufacturer: syz [ 369.708434][ T7051] usb 4-1: Using ep0 maxpacket: 16 [ 369.714557][ T4202] usb 5-1: SerialNumber: syz [ 369.930903][ T7051] usb 4-1: config 8 has an invalid interface number: 179 but max is 0 [ 369.958933][ T7051] usb 4-1: config 8 has no interface number 0 [ 370.029578][ T4202] cdc_ncm 5-1:1.0: bind() failure [ 370.040480][ T4202] usbtest 5-1:1.0: Linux gadget zero [ 370.062945][ T4202] usbtest 5-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 370.095014][ T4202] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 370.126992][ T4202] cdc_ncm 5-1:1.1: bind() failure [ 370.137105][ T4203] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 370.179360][ T4202] usbtest 5-1:1.1: couldn't get endpoints, -71 [ 370.194973][ T4202] usbtest: probe of 5-1:1.1 failed with error -71 [ 370.225414][ T4202] usb 5-1: USB disconnect, device number 16 [ 370.231646][ T7051] usb 4-1: New USB device found, idVendor=c21c, idProduct=79d3, bcdDevice=56.9d [ 370.254250][ T7051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.289754][ T7051] usb 4-1: Product: syz [ 370.346340][ T7051] usb 4-1: Manufacturer: syz [ 370.376779][ T7051] usb 4-1: SerialNumber: syz [ 370.390263][ T3643] Bluetooth: hci5: command 0x0406 tx timeout [ 370.426521][ T4203] usb 1-1: Using ep0 maxpacket: 32 [ 370.441155][ T7051] usb 4-1: bad CDC descriptors [ 370.562140][ T4203] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 370.587588][ T4203] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 370.654131][ T4203] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.692350][ T4203] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 370.721878][ T4203] usb 1-1: config 1 has no interface number 0 [ 370.728642][ T7051] usb 4-1: USB disconnect, device number 28 [ 370.758951][ T4203] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 370.809050][ T4203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.892436][ T4203] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 371.099260][ T4203] snd_usb_pod 1-1:1.1: set_interface failed [ 371.107521][ T4203] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 371.144002][ T4203] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 371.189850][ T4203] usb 1-1: USB disconnect, device number 20 [ 371.397519][T12701] loop3: detected capacity change from 0 to 256 [ 371.538182][T12701] FAT-fs (loop3): Directory bread(block 64) failed [ 371.563946][T12701] FAT-fs (loop3): Directory bread(block 65) failed [ 371.576954][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3914'. [ 371.579555][T12701] FAT-fs (loop3): Directory bread(block 66) failed [ 371.636633][T12701] FAT-fs (loop3): Directory bread(block 67) failed [ 371.651955][T12701] FAT-fs (loop3): Directory bread(block 68) failed [ 371.658634][T12701] FAT-fs (loop3): Directory bread(block 69) failed [ 371.696910][T12701] FAT-fs (loop3): Directory bread(block 70) failed [ 371.744283][T12701] FAT-fs (loop3): Directory bread(block 71) failed [ 371.776332][T12701] FAT-fs (loop3): Directory bread(block 72) failed [ 371.798046][T12701] FAT-fs (loop3): Directory bread(block 73) failed [ 371.855012][T12689] loop2: detected capacity change from 0 to 32768 [ 372.059663][T12711] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3918'. [ 372.068687][T12711] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3918'. [ 372.119257][T12711] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3918'. [ 372.272001][T12689] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 372.427995][T12689] OCFS2: ERROR (device loop2): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 372.529308][T12689] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 372.549257][ C0] net_ratelimit: 6485 callbacks suppressed [ 372.549277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.567772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 372.568517][T12689] OCFS2: File system is now read-only. [ 372.581617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.599724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.612338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 372.625629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.638117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.650646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 372.663271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.666406][T12689] (syz.2.3907,12689,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 372.675701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.721051][T12689] (syz.2.3907,12689,0):ocfs2_reserve_new_inode:1091 ERROR: status = -30 [ 372.736698][T12689] (syz.2.3907,12689,0):ocfs2_reserve_new_inode:1114 ERROR: status = -30 [ 372.789179][T12689] (syz.2.3907,12689,1):ocfs2_mknod:304 ERROR: status = -30 [ 372.830560][T12689] (syz.2.3907,12689,1):ocfs2_mknod:500 ERROR: status = -30 [ 372.909070][T12689] (syz.2.3907,12689,1):ocfs2_create:674 ERROR: status = -30 [ 373.045351][T12737] loop3: detected capacity change from 0 to 128 [ 373.186056][ T7064] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 373.221447][ T3639] ocfs2: Unmounting device (7,2) on (node local) [ 373.659131][T12748] x_tables: unsorted underflow at hook 3 [ 373.667023][ T7064] usb 2-1: Using ep0 maxpacket: 16 [ 374.440009][ T7064] usb 2-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 374.455989][ T7064] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.499089][ T7064] usb 2-1: Product: syz [ 374.503320][ T7064] usb 2-1: Manufacturer: syz [ 374.507962][ T7064] usb 2-1: SerialNumber: syz [ 374.561895][ T7064] usb 2-1: config 0 descriptor?? [ 374.642309][ T7064] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 374.928297][ T7064] pwc: Warning: more than 1 configuration available. [ 374.968268][ T7064] pwc: Failed to set LED on/off time (-71) [ 375.049530][ T7064] pwc: send_video_command error -71 [ 375.054808][ T7064] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 375.069017][ T7064] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 375.126787][ T7064] usb 2-1: USB disconnect, device number 17 [ 375.774052][ T26] audit: type=1326 audit(2000000232.210:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12803 comm="syz.2.3961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62a77dff9 code=0x7ffc0000 [ 375.877823][ T26] audit: type=1326 audit(2000000232.280:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12803 comm="syz.2.3961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fc62a77dff9 code=0x7ffc0000 [ 375.994486][ T26] audit: type=1326 audit(2000000232.280:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12803 comm="syz.2.3961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62a77dff9 code=0x7ffc0000 [ 376.078988][ T26] audit: type=1326 audit(2000000232.280:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12803 comm="syz.2.3961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62a77dff9 code=0x7ffc0000 [ 376.357815][T12823] loop0: detected capacity change from 0 to 8 [ 376.727799][T12826] loop3: detected capacity change from 0 to 4096 [ 377.522432][T12856] netlink: 'syz.2.3987': attribute type 2 has an invalid length. [ 377.559233][ C0] net_ratelimit: 7431 callbacks suppressed [ 377.559253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 377.577743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.590545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.603055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 377.615500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.628198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.640717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 377.653167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.665966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.677144][T12860] cgroup: none used incorrectly [ 377.678466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 377.738063][T12856] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3987'. [ 377.882632][T12863] loop1: detected capacity change from 0 to 256 [ 377.964780][ T7062] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 378.061886][T12868] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3992'. [ 378.553121][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.568758][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.618355][ T7062] usb 1-1: config 0 has an invalid interface number: 124 but max is 0 [ 378.644891][ T7062] usb 1-1: config 0 has no interface number 0 [ 378.651217][ T7062] usb 1-1: config 0 interface 124 has no altsetting 0 [ 378.850896][ T7062] usb 1-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=32.00 [ 378.860077][ T7062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.901320][ T7062] usb 1-1: Product: syz [ 378.905557][ T7062] usb 1-1: Manufacturer: syz [ 378.919804][ T7062] usb 1-1: SerialNumber: syz [ 378.933686][ T7062] usb 1-1: config 0 descriptor?? [ 379.138524][ T26] audit: type=1326 audit(2000000235.570:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.1.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1b7dff9 code=0x7ffc0000 [ 379.230967][ T26] audit: type=1326 audit(2000000235.570:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.1.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f4df1b7dff9 code=0x7ffc0000 [ 379.296059][ T7062] ftdi_sio 1-1:0.124: FTDI USB Serial Device converter detected [ 379.312065][ T7062] usb 1-1: Detected FT233HP [ 379.348981][ T26] audit: type=1326 audit(2000000235.570:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.1.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1b7dff9 code=0x7ffc0000 [ 379.381319][ T7062] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 379.412164][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4010'. [ 379.418725][ T7062] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 379.453699][ T7062] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 379.461895][ T26] audit: type=1326 audit(2000000235.570:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.1.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1b7dff9 code=0x7ffc0000 [ 379.462746][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4010'. [ 379.567864][ T7062] usb 1-1: USB disconnect, device number 21 [ 379.630772][ T7062] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 379.642332][ T7062] ftdi_sio 1-1:0.124: device disconnected [ 379.666757][T12903] netlink: 'syz.1.4010': attribute type 6 has an invalid length. [ 379.731680][T12909] loop2: detected capacity change from 0 to 1024 [ 379.820235][T12909] hfsplus: Filesystem is marked locked, mounting read-only. [ 379.915153][T12909] hfsplus: invalid catalog entry type in lookup [ 380.554111][T12926] loop0: detected capacity change from 0 to 2048 [ 380.705419][T12926] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 380.779034][T12926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.829239][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4023'. [ 381.676351][T12957] loop2: detected capacity change from 0 to 256 [ 381.705731][T12958] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 381.715290][T12957] exfat: Deprecated parameter 'namecase' [ 381.751930][T12957] exfat: Deprecated parameter 'utf8' [ 381.791103][T12957] exfat: Deprecated parameter 'namecase' [ 381.865532][T12958] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 381.902688][T12957] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 381.978968][T12958] overlayfs: missing 'lowerdir' [ 382.114216][T12966] netlink: 121244 bytes leftover after parsing attributes in process `syz.1.4041'. [ 382.569083][ C0] net_ratelimit: 7867 callbacks suppressed [ 382.569103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.587453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 382.599913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.612802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.625357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 382.637970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.650389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.662892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 382.675448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.687906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.729469][ T3639] bond0: (slave syz_tun): Releasing backup interface [ 383.128337][T12986] loop0: detected capacity change from 0 to 1024 [ 383.398302][T10810] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.535340][ T6658] hfsplus: b-tree write err: -5, ino 4 [ 383.764463][T10810] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.797638][T13000] netlink: 'syz.4.4060': attribute type 2 has an invalid length. [ 383.836660][T13000] netlink: 'syz.4.4060': attribute type 1 has an invalid length. [ 383.860878][T13002] netlink: 'syz.1.4061': attribute type 3 has an invalid length. [ 383.938947][T13000] netlink: 'syz.4.4060': attribute type 1 has an invalid length. [ 384.061995][ T7064] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 384.188766][T10810] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.534606][T10810] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.627231][ T3643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.639371][ T3643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.659398][ T3643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.681038][ T3643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.690237][ T3643] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 384.698021][ T3643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.854235][T13018] lo speed is unknown, defaulting to 1000 [ 384.865140][T13008] infiniband syz1: set active [ 384.888348][ T7064] usb 4-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 384.926997][T13008] infiniband syz1: added bond0 [ 384.942137][ T7064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.963493][ T7064] usb 4-1: Product: syz [ 384.970101][ T7064] usb 4-1: Manufacturer: syz [ 384.987148][ T7064] usb 4-1: SerialNumber: syz [ 384.993960][T13018] lo speed is unknown, defaulting to 1000 [ 385.007418][ T7064] usb 4-1: config 0 descriptor?? [ 385.104428][T13018] lo speed is unknown, defaulting to 1000 [ 385.390352][T13008] RDS/IB: syz1: added [ 385.420853][T13008] smc: adding ib device syz1 with port count 1 [ 385.433699][T13008] smc: ib device syz1 port 1 has pnetid [ 385.574646][ T7064] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.584962][ T7064] asix: probe of 4-1:0.0 failed with error -71 [ 385.621830][ T7064] usb 4-1: USB disconnect, device number 29 [ 386.151137][T13013] chnl_net:caif_netlink_parms(): no params data found [ 386.623880][T13013] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.644112][T13013] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.702848][T13013] device bridge_slave_0 entered promiscuous mode [ 386.735651][T13013] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.777912][ T3647] Bluetooth: hci0: command tx timeout [ 386.778516][T13013] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.823351][T13013] device bridge_slave_1 entered promiscuous mode [ 387.047135][T13013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.101083][T13013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.261077][T13013] team0: Port device team_slave_0 added [ 387.297158][T13013] team0: Port device team_slave_1 added [ 387.472027][T13013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.518109][T13013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.578939][ C0] net_ratelimit: 8594 callbacks suppressed [ 387.578959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.584480][T13013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.585327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 387.622731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.635878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.648478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 387.660969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.673414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.685881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 387.698471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.711456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.732808][T13013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.751376][T13013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.849005][T13013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.082775][T13013] device hsr_slave_0 entered promiscuous mode [ 388.119737][T13013] device hsr_slave_1 entered promiscuous mode [ 388.139989][T13013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.179674][T13013] Cannot create hsr debugfs directory [ 388.848321][ T3647] Bluetooth: hci0: command tx timeout [ 389.031423][T13093] loop3: detected capacity change from 0 to 1024 [ 389.280123][T13093] hfsplus: keylen 65060 too large [ 389.875048][T13018] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 389.963732][T13018] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 390.118090][T13018] lo speed is unknown, defaulting to 1000 [ 390.554758][T13018] lo speed is unknown, defaulting to 1000 [ 390.676695][ T7062] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 390.759299][T13018] lo speed is unknown, defaulting to 1000 [ 390.764632][T13115] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4097'. [ 390.942580][ T3647] Bluetooth: hci0: command tx timeout [ 390.995848][T13018] lo speed is unknown, defaulting to 1000 [ 391.109596][T13018] lo speed is unknown, defaulting to 1000 [ 391.118528][T13018] lo speed is unknown, defaulting to 1000 [ 391.150498][T13018] lo speed is unknown, defaulting to 1000 [ 391.280859][ T7062] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 391.304534][ T7062] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.337462][ T7062] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 391.371182][ T7062] usb 4-1: config 1 has no interface number 1 [ 391.661318][T13139] loop1: detected capacity change from 0 to 8 [ 391.736496][T13144] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4105'. [ 391.836344][ T7062] usb 4-1: string descriptor 0 read error: -22 [ 391.859005][ T7062] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.908930][ T7062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.247614][T13013] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 392.479788][T13013] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 392.557556][ T7062] usb 4-1: USB disconnect, device number 30 [ 392.590735][ C0] net_ratelimit: 6792 callbacks suppressed [ 392.590757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.611849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 392.624281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.636758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.649236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 392.654093][T13159] loop0: detected capacity change from 0 to 256 [ 392.661781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.680380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.692817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 392.705200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.717572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.792974][T13013] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 392.836257][T13013] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 393.000428][ T3647] Bluetooth: hci0: command tx timeout [ 393.197932][T13013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.311132][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 393.338063][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 393.397469][T13013] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.405696][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4118'. [ 393.728247][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 393.747226][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.832046][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.839317][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.896671][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 393.950259][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 393.987124][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.994377][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.051663][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 394.094418][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 394.157640][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 394.184807][T13198] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4125'. [ 394.243729][T13198] tc_dump_action: action bad kind [ 394.297165][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 394.368040][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 394.440971][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 394.489515][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 394.569815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 394.598642][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 394.660817][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 394.708605][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 394.740102][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 394.802603][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 395.120970][ T7064] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 395.711360][T13241] program syz.3.4142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.819816][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 395.833063][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 395.905119][T13013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.020573][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 396.078799][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 396.176013][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 396.189899][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 396.241235][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 396.270417][ T7064] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 396.289452][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 396.306958][ T7064] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.356652][ T7064] usb 5-1: Product: syz [ 396.361233][ T7064] usb 5-1: Manufacturer: syz [ 396.365862][ T7064] usb 5-1: SerialNumber: syz [ 396.392107][T13013] device veth0_vlan entered promiscuous mode [ 396.416548][ T7064] usb 5-1: config 0 descriptor?? [ 396.426959][T13253] x_tables: duplicate entry at hook 3 [ 396.451730][T13013] device veth1_vlan entered promiscuous mode [ 396.503331][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 396.610042][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.620439][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.651017][T13013] device veth0_macvtap entered promiscuous mode [ 396.679359][T13013] device veth1_macvtap entered promiscuous mode [ 396.802235][T13013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.849240][T13013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.879124][T13013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.924159][T13013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.974200][T13013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.029753][T13013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.049112][T13013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.068966][T13013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.100617][ T7064] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 397.156821][ T7064] asix: probe of 5-1:0.0 failed with error -71 [ 397.169175][T13013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.195919][ T7064] usb 5-1: USB disconnect, device number 17 [ 397.246917][T13013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.330042][T13013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.366924][T13013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.385316][T13234] loop1: detected capacity change from 0 to 32768 [ 397.394873][T13013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.599021][ C0] net_ratelimit: 6578 callbacks suppressed [ 397.599042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.601275][T13234] JBD2: Ignoring recovery information on journal [ 397.605278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 397.635826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.650145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.662624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 397.675201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.687614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.700624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 397.713001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.725587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.769500][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 397.792946][T13269] loop3: detected capacity change from 0 to 1024 [ 397.806217][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 397.854945][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 397.860312][T13238] loop0: detected capacity change from 0 to 40427 [ 397.882049][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.890338][T13234] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 397.913958][T13013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.927169][T13013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.968558][T13013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.987779][T13238] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 398.008954][T13238] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 398.010498][T13013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.049430][T13013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.069717][T13269] hfsplus: xattr searching failed [ 398.075894][T13013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.116600][T13238] F2FS-fs (loop0): invalid crc value [ 398.128021][T13013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.196161][T13013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.198081][T13238] F2FS-fs (loop0): Found nat_bits in checkpoint [ 398.225147][T13013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.273875][T13013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.292825][T13013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.315210][T13013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.340715][ T3644] ocfs2: Unmounting device (7,1) on (node local) [ 398.358215][T13013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.367007][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.429326][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.523090][T13013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.573843][T13013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.628943][T13013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.637725][T13013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.670055][T13238] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 398.677276][T13238] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 398.952065][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.982443][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.064608][T13290] loop1: detected capacity change from 0 to 256 [ 399.089079][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 399.149902][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.180381][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.247187][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.622116][T13301] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4159'. [ 399.709240][T13301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4159'. [ 399.718247][T13301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4159'. [ 400.085008][T13319] loop2: detected capacity change from 0 to 16 [ 400.127008][T13319] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 400.523454][T13329] libceph: resolve 'c' (ret=-3): failed [ 401.214950][T13357] netlink: 'syz.3.4180': attribute type 95 has an invalid length. [ 401.330795][T13360] netlink: 'syz.2.4182': attribute type 21 has an invalid length. [ 401.474469][T13366] netlink: 'syz.0.4183': attribute type 32 has an invalid length. [ 401.628632][T13372] loop2: detected capacity change from 0 to 1024 [ 401.850261][T13372] hfsplus: xattr searching failed [ 402.409241][ T3688] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 402.439753][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4194'. [ 402.448772][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4194'. [ 402.648653][ C0] net_ratelimit: 5911 callbacks suppressed [ 402.648673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 402.667162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.679571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.689397][ T3688] usb 2-1: Using ep0 maxpacket: 16 [ 402.692064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 402.709236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.721748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.734369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 402.746872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.759602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.772709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 402.792470][ T7064] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 402.839155][ T3688] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 402.871552][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.901019][ T3688] usb 2-1: config 0 descriptor?? [ 402.990709][ T3688] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 403.206264][T13400] loop0: detected capacity change from 0 to 1764 [ 403.327656][T13400] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 403.389221][ T3688] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 403.396502][ T3688] sq905c 2-1:0.0: Reading version command failed [ 403.436493][ T3688] sq905c: probe of 2-1:0.0 failed with error -71 [ 403.467944][T13379] loop3: detected capacity change from 0 to 32768 [ 403.477422][ T3688] usb 2-1: USB disconnect, device number 18 [ 403.578266][ T7064] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 403.711865][T13379] XFS (loop3): Mounting V5 Filesystem [ 403.857432][ T7064] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.906766][ T7064] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.915953][ T7064] usb 5-1: Product: syz [ 403.920487][ T7064] usb 5-1: Manufacturer: syz [ 403.925139][ T7064] usb 5-1: SerialNumber: syz [ 403.930385][T13379] XFS (loop3): Ending clean mount [ 404.081952][ T7064] usb 5-1: bad CDC descriptors [ 404.286300][ T3645] XFS (loop3): Unmounting Filesystem [ 404.301760][ T7064] usb 5-1: USB disconnect, device number 18 [ 404.529079][ T3688] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 404.739436][T13433] tmpfs: Bad value for 'mpol' [ 404.949234][ T3688] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 404.968265][ T3688] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.004893][ T3688] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 405.029007][ T3688] usb 3-1: config 1 has no interface number 1 [ 405.329256][ T3688] usb 3-1: string descriptor 0 read error: -22 [ 405.347416][ T3688] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.405042][ T3688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.592930][T13448] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4215'. [ 405.963594][ T3688] usb 3-1: USB disconnect, device number 18 [ 406.539229][T13464] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4225'. [ 406.571864][T13464] netlink: 'syz.4.4225': attribute type 1 has an invalid length. [ 406.604444][T13439] loop1: detected capacity change from 0 to 32768 [ 406.629269][T13464] netlink: 'syz.4.4225': attribute type 2 has an invalid length. [ 406.698965][T13464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4225'. [ 406.708202][T13439] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.4214 (13439) [ 406.792319][T13439] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 406.859247][T13439] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 406.868123][T13439] BTRFS info (device loop1): using free space tree [ 407.231081][T13496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4234'. [ 407.266506][T13499] siw: device registration error -23 [ 407.374328][T13439] BTRFS info (device loop1): enabling ssd optimizations [ 407.650279][ C0] net_ratelimit: 6991 callbacks suppressed [ 407.650301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.668611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.681203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 407.693601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.706131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.718582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 407.731450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.743954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.756934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 407.769621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.864686][T13515] netlink: 484 bytes leftover after parsing attributes in process `syz.3.4242'. [ 407.900792][ T3644] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 408.068374][T13516] IPv6: sit2: Disabled Multicast RS [ 408.133121][T13520] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 408.649772][T13529] siw: device registration error -23 [ 408.955667][T10810] device hsr_slave_0 left promiscuous mode [ 408.982159][T10810] device hsr_slave_1 left promiscuous mode [ 409.002544][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.010095][T10810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.028328][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.057380][T10810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.107762][T10810] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 409.139003][T10810] batman_adv: batadv0: Removing interface: virt_wifi0 [ 409.179687][ T4200] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 409.195791][T10810] device bridge_slave_1 left promiscuous mode [ 409.228070][T10810] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.250742][T10810] device bridge_slave_0 left promiscuous mode [ 409.257067][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.292136][T13541] loop2: detected capacity change from 0 to 1764 [ 409.400198][T13541] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 409.519952][T10810] device veth0_macvtap left promiscuous mode [ 409.529048][T10810] device veth1_vlan left promiscuous mode [ 409.535262][T10810] device veth0_vlan left promiscuous mode [ 409.590062][ T4200] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 409.597998][ T4200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 409.648990][ T4200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59357, setting to 1024 [ 409.690164][ T4200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 409.931344][ T4200] usb 2-1: New USB device found, idVendor=0f11, idProduct=2051, bcdDevice=79.c5 [ 409.955095][ T4200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.975715][ T4200] usb 2-1: Product: syz [ 409.994442][ T4200] usb 2-1: Manufacturer: syz [ 410.016011][ T4200] usb 2-1: SerialNumber: syz [ 410.030834][T13547] rdma_rxe: rxe_register_device failed with error -23 [ 410.049086][T13547] rdma_rxe: failed to add bond0 [ 410.049295][ T4200] usb 2-1: config 0 descriptor?? [ 410.111438][T13535] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 410.176266][ T4200] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 410.202052][T10810] bond2 (unregistering): Released all slaves [ 410.254656][T10810] bond1 (unregistering): Released all slaves [ 410.431178][ T4200] usb 2-1: USB disconnect, device number 19 [ 410.440508][ T4200] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 410.551304][T13538] loop3: detected capacity change from 0 to 32768 [ 412.670588][ C0] net_ratelimit: 7732 callbacks suppressed [ 412.670611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 412.690391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.703310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.716216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 412.728993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.741661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.754984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 412.768263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.781158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.794290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 412.829751][T10810] team0 (unregistering): Port device team_slave_1 removed [ 412.946911][T10810] team0 (unregistering): Port device team_slave_0 removed [ 413.119212][T10810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.301627][T10810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.471301][T10810] bond0 (unregistering): Released all slaves [ 416.266643][T13578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.409222][ T4198] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 416.531920][T13583] netlink: 'syz.3.4274': attribute type 7 has an invalid length. [ 416.679107][ T4198] usb 5-1: Using ep0 maxpacket: 8 [ 417.109290][ T4198] usb 5-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 417.143589][ T4198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.168924][ T4198] usb 5-1: Product: syz [ 417.173207][ T4198] usb 5-1: Manufacturer: syz [ 417.177900][ T4198] usb 5-1: SerialNumber: syz [ 417.254275][ T4198] usb 5-1: config 0 descriptor?? [ 417.331282][ T4198] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 417.435633][T13597] loop3: detected capacity change from 0 to 1764 [ 417.674408][T13604] usb usb9: usbfs: process 13604 (syz.1.4284) did not claim interface 0 before use [ 417.684866][ C0] net_ratelimit: 9812 callbacks suppressed [ 417.684885][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 417.703308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.715740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.728258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 417.740651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.753076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.765653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 417.778057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.790561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.803090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 417.859160][ T4198] gspca_sonixj: reg_r err -71 [ 417.863984][ T4198] sonixj: probe of 5-1:0.0 failed with error -71 [ 417.940527][ T4198] usb 5-1: USB disconnect, device number 19 [ 418.756556][ T26] audit: type=1326 audit(2000000275.190:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13630 comm="syz.1.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1b7dff9 code=0x7ffc0000 [ 418.818391][ T26] audit: type=1326 audit(2000000275.190:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13630 comm="syz.1.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1b7dff9 code=0x7ffc0000 [ 418.939221][ T26] audit: type=1326 audit(2000000275.190:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13630 comm="syz.1.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f4df1b7dff9 code=0x7ffc0000 [ 419.049671][ T26] audit: type=1326 audit(2000000275.190:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13630 comm="syz.1.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1b7dff9 code=0x7ffc0000 [ 419.138948][ T26] audit: type=1326 audit(2000000275.190:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13630 comm="syz.1.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1b7dff9 code=0x7ffc0000 [ 419.165809][T13634] loop0: detected capacity change from 0 to 8192 [ 419.191566][T13640] device vlan2 entered promiscuous mode [ 419.254113][T13634] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 419.310869][T13634] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 419.355820][T13634] REISERFS (device loop0): using ordered data mode [ 419.386855][T13634] reiserfs: using flush barriers [ 419.408218][T13634] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 419.530372][T13634] REISERFS (device loop0): checking transaction log (loop0) [ 420.015988][T13634] REISERFS (device loop0): Using tea hash to sort names [ 420.022214][ T26] audit: type=1326 audit(2000000276.460:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66c37dff9 code=0x7ffc0000 [ 420.027467][T13634] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 420.103849][T13655] loop1: detected capacity change from 0 to 256 [ 420.113917][T13628] loop3: detected capacity change from 0 to 32768 [ 420.137003][ T26] audit: type=1326 audit(2000000276.490:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc66c37dff9 code=0x7ffc0000 [ 420.160695][T13655] exfat: Deprecated parameter 'namecase' [ 420.166530][T13655] exfat: Deprecated parameter 'utf8' [ 420.203696][T13628] (syz.3.4296,13628,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 420.267148][ T26] audit: type=1326 audit(2000000276.490:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66c37dff9 code=0x7ffc0000 [ 420.308971][T13628] (syz.3.4296,13628,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 420.323691][ T26] audit: type=1326 audit(2000000276.490:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66c37dff9 code=0x7ffc0000 [ 420.401820][T13655] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 420.483589][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4310'. [ 420.607639][T13662] loop2: detected capacity change from 0 to 8 [ 420.773663][T13628] JBD2: Ignoring recovery information on journal [ 420.962443][T13628] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 421.024514][ T22] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 421.202599][T13628] [ 421.204994][T13628] ====================================================== [ 421.212037][T13628] WARNING: possible circular locking dependency detected [ 421.219178][T13628] 6.1.112-syzkaller #0 Not tainted [ 421.224322][T13628] ------------------------------------------------------ [ 421.231382][T13628] syz.3.4296/13628 is trying to acquire lock: [ 421.237581][T13628] ffff888072b43f60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x221/0x2a0 [ 421.248616][T13628] [ 421.248616][T13628] but task is already holding lock: [ 421.256141][T13628] ffff888072b442c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 421.269019][T13628] [ 421.269019][T13628] which lock already depends on the new lock. [ 421.269019][T13628] [ 421.279464][T13628] [ 421.279464][T13628] the existing dependency chain (in reverse order) is: [ 421.288516][T13628] [ 421.288516][T13628] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}: [ 421.299086][T13628] lock_acquire+0x1f8/0x5a0 [ 421.304172][T13628] down_write+0x36/0x60 [ 421.308928][T13628] ocfs2_lock_global_qf+0x202/0x2a0 [ 421.314706][T13628] ocfs2_acquire_dquot+0x2ad/0xb60 [ 421.320503][T13628] dqget+0x762/0xe90 [ 421.324996][T13628] dquot_set_dqblk+0x27/0xf20 [ 421.330340][T13628] quota_setquota+0x6d3/0x840 [ 421.335590][T13628] __se_sys_quotactl+0x2b1/0x770 [ 421.341182][T13628] do_syscall_64+0x3b/0xb0 [ 421.346317][T13628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.352787][T13628] [ 421.352787][T13628] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 421.360480][T13628] lock_acquire+0x1f8/0x5a0 [ 421.365567][T13628] __mutex_lock+0x132/0xd80 [ 421.370629][T13628] dquot_commit+0x57/0x510 [ 421.375608][T13628] ext4_write_dquot+0x1fd/0x360 [ 421.381025][T13628] mark_all_dquot_dirty+0xf7/0x400 [ 421.386731][T13628] __dquot_free_space+0x956/0xe70 [ 421.392331][T13628] ext4_free_blocks+0x1fb8/0x3020 [ 421.397915][T13628] ext4_ext_remove_space+0x22bb/0x4f30 [ 421.403942][T13628] ext4_ext_truncate+0x201/0x360 [ 421.409449][T13628] ext4_truncate+0xa1d/0x1290 [ 421.414691][T13628] ext4_evict_inode+0xb68/0x1150 [ 421.420213][T13628] evict+0x529/0x930 [ 421.424680][T13628] do_unlinkat+0x509/0x820 [ 421.429671][T13628] __x64_sys_unlink+0x45/0x50 [ 421.434905][T13628] do_syscall_64+0x3b/0xb0 [ 421.439872][T13628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.446333][T13628] [ 421.446333][T13628] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 421.454215][T13628] lock_acquire+0x1f8/0x5a0 [ 421.459287][T13628] down_write+0x36/0x60 [ 421.463999][T13628] ext4_truncate+0x999/0x1290 [ 421.469366][T13628] ext4_setattr+0x10f5/0x1a00 [ 421.474702][T13628] notify_change+0xce3/0xfc0 [ 421.480048][T13628] do_truncate+0x21c/0x300 [ 421.485037][T13628] do_sys_ftruncate+0x2e2/0x380 [ 421.490500][T13628] do_syscall_64+0x3b/0xb0 [ 421.495471][T13628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.501933][T13628] [ 421.501933][T13628] -> #3 (jbd2_handle){++++}-{0:0}: [ 421.509273][T13628] lock_acquire+0x1f8/0x5a0 [ 421.514387][T13628] start_this_handle+0x1f71/0x21b0 [ 421.520158][T13628] jbd2__journal_start+0x2d1/0x5c0 [ 421.525832][T13628] jbd2_journal_start+0x25/0x30 [ 421.531295][T13628] ocfs2_start_trans+0x3c0/0x6f0 [ 421.536802][T13628] ocfs2_setattr+0xd99/0x1f80 [ 421.542043][T13628] notify_change+0xce3/0xfc0 [ 421.547206][T13628] chmod_common+0x2a7/0x4b0 [ 421.552283][T13628] __x64_sys_fchmodat+0x117/0x1a0 [ 421.557963][T13628] do_syscall_64+0x3b/0xb0 [ 421.562936][T13628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.569537][T13628] [ 421.569537][T13628] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 421.578115][T13628] lock_acquire+0x1f8/0x5a0 [ 421.583184][T13628] down_read+0xad/0xa30 [ 421.587996][T13628] ocfs2_start_trans+0x3b5/0x6f0 [ 421.593587][T13628] ocfs2_setattr+0xd99/0x1f80 [ 421.598915][T13628] notify_change+0xce3/0xfc0 [ 421.604073][T13628] chmod_common+0x2a7/0x4b0 [ 421.609149][T13628] __x64_sys_fchmodat+0x117/0x1a0 [ 421.614737][T13628] do_syscall_64+0x3b/0xb0 [ 421.619794][T13628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.626260][T13628] [ 421.626260][T13628] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 421.633786][T13628] lock_acquire+0x1f8/0x5a0 [ 421.638855][T13628] ocfs2_start_trans+0x2b0/0x6f0 [ 421.644351][T13628] ocfs2_write_info+0x124/0x3a0 [ 421.649765][T13628] dquot_set_dqinfo+0x488/0x6f0 [ 421.655446][T13628] quota_setinfo+0x3d6/0x4f0 [ 421.660623][T13628] __se_sys_quotactl+0x2b1/0x770 [ 421.666127][T13628] do_syscall_64+0x3b/0xb0 [ 421.671098][T13628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.677557][T13628] [ 421.677557][T13628] -> #0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 421.686552][T13628] validate_chain+0x1661/0x5950 [ 421.691964][T13628] __lock_acquire+0x125b/0x1f80 [ 421.697553][T13628] lock_acquire+0x1f8/0x5a0 [ 421.702618][T13628] down_write+0x36/0x60 [ 421.707330][T13628] ocfs2_lock_global_qf+0x221/0x2a0 [ 421.713648][T13628] ocfs2_acquire_dquot+0x2ad/0xb60 [ 421.719522][T13628] dqget+0x762/0xe90 [ 421.724080][T13628] dquot_set_dqblk+0x27/0xf20 [ 421.729314][T13628] quota_setquota+0x6d3/0x840 [ 421.734557][T13628] __se_sys_quotactl+0x2b1/0x770 [ 421.740147][T13628] do_syscall_64+0x3b/0xb0 [ 421.745119][T13628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.751585][T13628] [ 421.751585][T13628] other info that might help us debug this: [ 421.751585][T13628] [ 421.761978][T13628] Chain exists of: [ 421.761978][T13628] &ocfs2_quota_ip_alloc_sem_key --> &dquot->dq_lock --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8 [ 421.761978][T13628] [ 421.779169][T13628] Possible unsafe locking scenario: [ 421.779169][T13628] [ 421.786740][T13628] CPU0 CPU1 [ 421.792170][T13628] ---- ---- [ 421.797598][T13628] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8); [ 421.804931][T13628] lock(&dquot->dq_lock); [ 421.811991][T13628] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8); [ 421.821881][T13628] lock(&ocfs2_quota_ip_alloc_sem_key); [ 421.827688][T13628] [ 421.827688][T13628] *** DEADLOCK *** [ 421.827688][T13628] [ 421.835945][T13628] 3 locks held by syz.3.4296/13628: [ 421.841179][T13628] #0: ffff88807bf3a0e0 (&type->s_umount_key#48){++++}-{3:3}, at: user_get_super+0x11a/0x250 [ 421.851438][T13628] #1: ffff88804f8b00a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x2a0/0xb60 [ 421.861694][T13628] #2: ffff888072b442c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 421.874744][T13628] [ 421.874744][T13628] stack backtrace: [ 421.880663][T13628] CPU: 1 PID: 13628 Comm: syz.3.4296 Not tainted 6.1.112-syzkaller #0 [ 421.889039][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 421.899139][T13628] Call Trace: [ 421.902553][T13628] [ 421.905515][T13628] dump_stack_lvl+0x1e3/0x2cb [ 421.910290][T13628] ? nf_tcp_handle_invalid+0x642/0x642 [ 421.915981][T13628] ? print_circular_bug+0x12b/0x1a0 [ 421.921216][T13628] check_noncircular+0x2fa/0x3b0 [ 421.926191][T13628] ? add_chain_block+0x850/0x850 [ 421.931170][T13628] ? lockdep_lock+0x11f/0x2a0 [ 421.935897][T13628] ? _find_first_zero_bit+0xd0/0x100 [ 421.941346][T13628] validate_chain+0x1661/0x5950 [ 421.946226][T13628] ? kernel_text_address+0x9f/0xd0 [ 421.951402][T13628] ? stack_trace_save+0x113/0x1c0 [ 421.956465][T13628] ? reacquire_held_locks+0x660/0x660 [ 421.961969][T13628] ? stack_trace_snprint+0xe0/0xe0 [ 421.967126][T13628] ? lockdep_unlock+0x165/0x300 [ 421.972044][T13628] ? lockdep_unlock+0x165/0x300 [ 421.977119][T13628] ? mark_lock+0x9a/0x340 [ 421.981539][T13628] __lock_acquire+0x125b/0x1f80 [ 421.986474][T13628] lock_acquire+0x1f8/0x5a0 [ 421.991017][T13628] ? ocfs2_lock_global_qf+0x221/0x2a0 [ 421.996436][T13628] ? read_lock_is_recursive+0x10/0x10 [ 422.001940][T13628] ? ocfs2_lock_global_qf+0x1cb/0x2a0 [ 422.007353][T13628] ? __might_sleep+0xb0/0xb0 [ 422.011969][T13628] ? rwsem_write_trylock+0x166/0x210 [ 422.017294][T13628] ? clear_nonspinnable+0x60/0x60 [ 422.022356][T13628] ? do_raw_spin_unlock+0x137/0x8a0 [ 422.027588][T13628] down_write+0x36/0x60 [ 422.031781][T13628] ? ocfs2_lock_global_qf+0x221/0x2a0 [ 422.037196][T13628] ocfs2_lock_global_qf+0x221/0x2a0 [ 422.042531][T13628] ? lock_buffer+0x80/0x80 [ 422.046988][T13628] ? trace_contention_end+0x61/0x170 [ 422.052404][T13628] ocfs2_acquire_dquot+0x2ad/0xb60 [ 422.057565][T13628] ? ocfs2_destroy_dquot+0x40/0x40 [ 422.062716][T13628] ? percpu_counter_add_batch+0x142/0x160 [ 422.068574][T13628] dqget+0x762/0xe90 [ 422.072512][T13628] dquot_set_dqblk+0x27/0xf20 [ 422.077245][T13628] ? __might_fault+0xbd/0x110 [ 422.081957][T13628] quota_setquota+0x6d3/0x840 [ 422.086679][T13628] ? quota_getnextquota+0x6b0/0x6b0 [ 422.091931][T13628] ? bpf_lsm_capable+0x5/0x10 [ 422.096632][T13628] ? security_capable+0x86/0xb0 [ 422.101533][T13628] ? do_quotactl+0x4e1/0x6c0 [ 422.106174][T13628] __se_sys_quotactl+0x2b1/0x770 [ 422.111247][T13628] ? __x64_sys_quotactl+0xa0/0xa0 [ 422.116326][T13628] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 422.122369][T13628] ? print_irqtrace_events+0x210/0x210 [ 422.127871][T13628] ? print_irqtrace_events+0x210/0x210 [ 422.133377][T13628] ? syscall_enter_from_user_mode+0x2e/0x230 [ 422.139405][T13628] ? lockdep_hardirqs_on+0x94/0x130 [ 422.144734][T13628] ? syscall_enter_from_user_mode+0x2e/0x230 [ 422.150761][T13628] do_syscall_64+0x3b/0xb0 [ 422.155215][T13628] ? clear_bhb_loop+0x45/0xa0 [ 422.159946][T13628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.165898][T13628] RIP: 0033:0x7f160997dff9 [ 422.170357][T13628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.190095][T13628] RSP: 002b:00007f160a7a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 422.198556][T13628] RAX: ffffffffffffffda RBX: 00007f1609b35f80 RCX: 00007f160997dff9 [ 422.206567][T13628] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffff80000801 [ 422.214577][T13628] RBP: 00007f16099f0296 R08: 0000000000000000 R09: 0000000000000000 [ 422.222586][T13628] R10: 0000000020000f00 R11: 0000000000000246 R12: 0000000000000000 [ 422.231030][T13628] R13: 0000000000000000 R14: 00007f1609b35f80 R15: 00007ffd66f64408 [ 422.239053][T13628] [ 422.242191][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.346918][ T3645] ocfs2: Unmounting device (7,3) on (node local) [ 422.601735][ T22] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 422.621111][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.638955][ T22] usb 2-1: Product: syz [ 422.643247][ T22] usb 2-1: Manufacturer: syz [ 422.647963][ T22] usb 2-1: SerialNumber: syz [ 422.688963][ C0] net_ratelimit: 10221 callbacks suppressed [ 422.688986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.707492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.719858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 422.729877][ T22] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 422.732432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.752695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.766012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 422.778361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.791064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.803422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 422.815730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.369013][ T22] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 423.608983][ C1] usb 2-1: ath9k_htc: invalid pkt_len (ff59) [ 423.816149][ T3726] usb 2-1: USB disconnect, device number 20 [ 424.431624][ T22] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 424.442543][ T22] ath9k_htc: Failed to initialize the device [ 424.459120][ T3726] usb 2-1: ath9k_htc: USB layer deinitialized [ 427.699640][ C0] net_ratelimit: 23706 callbacks suppressed [ 427.699663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.718129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 427.730684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.743209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.756356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 427.769883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.782464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.794917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 427.807328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.820570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)