last executing test programs: 1m34.073611051s ago: executing program 4 (id=277): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0xb, 0x0, 0x2, 0x7, 0x20, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1m9.195588126s ago: executing program 4 (id=277): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0xb, 0x0, 0x2, 0x7, 0x20, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r0, 0x8b32, &(0x7f0000000040)) 49.174116569s ago: executing program 4 (id=277): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0xb, 0x0, 0x2, 0x7, 0x20, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r0, 0x8b32, &(0x7f0000000040)) 32.870283986s ago: executing program 4 (id=277): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0xb, 0x0, 0x2, 0x7, 0x20, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r0, 0x8b32, &(0x7f0000000040)) 12.99403952s ago: executing program 4 (id=277): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0xb, 0x0, 0x2, 0x7, 0x20, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r0, 0x8b32, &(0x7f0000000040)) 4.429623297s ago: executing program 1 (id=729): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="26210600000006230854e1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.921249811s ago: executing program 2 (id=742): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="806d87688c04", 0x6}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 2.749791281s ago: executing program 2 (id=743): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000001000)={{&(0x7f0000b6c000/0x2000)=nil, 0x2000}}) 2.63242586s ago: executing program 2 (id=745): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 2.49566602s ago: executing program 1 (id=746): syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x10000c0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x2a, 0x229, &(0x7f0000000a40)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.433146239s ago: executing program 2 (id=747): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.303575799s ago: executing program 0 (id=748): getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x0, [0x800, 0x14000000, 0x9, 0x8, 0x80, 0xb635], 0x0, &(0x7f00000000c0), 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711233000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000006380)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000001c0), 0x4}}], 0x2, 0x0) 2.209022429s ago: executing program 1 (id=750): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.134660648s ago: executing program 2 (id=751): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x1}, 0x8) 1.992461067s ago: executing program 0 (id=752): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)='\b', 0x1}, {&(0x7f00000000c0)="990d85b7e0a28997ee5bf6a38e16233c29c76b0a47e50c6e", 0x18}, {&(0x7f0000000d40)="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", 0xfe7}], 0x3) 1.817672077s ago: executing program 1 (id=753): r0 = socket(0x840000000002, 0x3, 0xb) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f0000000780)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESDEC=r2, @ANYRESHEX=r1, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT=r3], 0x81, 0x14fb, &(0x7f0000003040)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r4, &(0x7f0000000600)=""/4099, 0x1003, 0x0) 1.733522907s ago: executing program 3 (id=754): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30}], 0x1, 0x0) 1.612512146s ago: executing program 1 (id=755): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x55e, &(0x7f0000001ac0)="$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") setxattr$incfs_id(0x0, &(0x7f00000003c0), 0x0, 0x0, 0x3) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fff, 0x0) getdents(r0, 0x0, 0x58) 1.485835156s ago: executing program 3 (id=756): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000100005040000005f596da40000880900", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280060011004e23000004001200080015"], 0x48}}, 0x0) 1.446778165s ago: executing program 3 (id=757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x209}]}, 0x2c}}, 0x0) 1.374425086s ago: executing program 3 (id=758): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 144.605762][ T4255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.617687][ T4255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.620701][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.636705][ T4255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.644559][ T4255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.656957][ T4255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.712203][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.733620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.763616][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.777990][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.809022][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.827488][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.838379][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.849546][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.863305][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.874983][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.885665][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.897214][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.909964][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.935897][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.967495][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.056633][ T5358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.072440][ T5358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.082268][ T5358] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.097940][ T5358] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.550378][ T4345] pegasus: probe of 3-1:0.0 failed with error -71 [ 145.570162][ T4345] usb 3-1: USB disconnect, device number 4 [ 145.767082][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.775599][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.860054][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.892883][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.906214][ T5642] netlink: 36 bytes leftover after parsing attributes in process `syz.3.391'. [ 145.974205][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.106964][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.540260][ T5629] chnl_net:caif_netlink_parms(): no params data found [ 146.656417][ T5043] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 146.706851][ T4255] Bluetooth: hci0: command 0x0409 tx timeout [ 146.860094][ T5043] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 146.899600][ T5043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.947697][ T5043] usb 2-1: config 0 descriptor?? [ 147.212986][ T5683] loop3: detected capacity change from 0 to 128 [ 147.271771][ T5683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 147.332407][ T5683] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.430108][ T5043] [drm:udl_init] *ERROR* Selecting channel failed [ 147.501031][ T5043] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 147.510976][ T5043] [drm] Initialized udl on minor 2 [ 147.532398][ T5043] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 147.557494][ T5043] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 147.589297][ T5043] usb 2-1: USB disconnect, device number 3 [ 147.669482][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 147.794642][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.824644][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.844207][ T5629] device bridge_slave_0 entered promiscuous mode [ 147.954688][ T9] device hsr_slave_0 left promiscuous mode [ 147.967841][ T9] device hsr_slave_1 left promiscuous mode [ 147.994597][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.036410][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.048958][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.096439][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.117274][ T9] device bridge_slave_1 left promiscuous mode [ 148.123610][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.184683][ T5687] loop2: detected capacity change from 0 to 32768 [ 148.197126][ T9] device bridge_slave_0 left promiscuous mode [ 148.218824][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.234157][ T5687] XFS: ikeep mount option is deprecated. [ 148.264010][ T5687] XFS: noikeep mount option is deprecated. [ 148.323574][ T5699] loop1: detected capacity change from 0 to 1024 [ 148.341354][ T5699] EXT4-fs: Ignoring removed orlov option [ 148.353054][ T5699] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.378034][ T5699] EXT4-fs (loop1): Test dummy encryption mode enabled [ 148.395369][ T9] device veth1_macvtap left promiscuous mode [ 148.446563][ T9] device veth0_macvtap left promiscuous mode [ 148.452775][ T9] device veth1_vlan left promiscuous mode [ 148.476758][ T5687] XFS (loop2): Mounting V5 Filesystem [ 148.497232][ T5699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.569517][ T9] device veth0_vlan left promiscuous mode [ 148.591956][ T5717] loop0: detected capacity change from 0 to 512 [ 148.690796][ T5717] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.725805][ T5687] XFS (loop2): Ending clean mount [ 148.744007][ T5718] loop3: detected capacity change from 0 to 2048 [ 148.747072][ T5687] XFS (loop2): Quotacheck needed: Please wait. [ 148.786693][ T4255] Bluetooth: hci0: command 0x041b tx timeout [ 148.804404][ T5717] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.408: invalid indirect mapped block 4294967295 (level 1) [ 148.878260][ T5358] EXT4-fs (loop1): unmounting filesystem. [ 148.908191][ T5717] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.408: invalid indirect mapped block 4294967295 (level 1) [ 148.931307][ T5717] EXT4-fs (loop0): 2 truncates cleaned up [ 148.937030][ T5687] XFS (loop2): Quotacheck: Done. [ 148.937396][ T5717] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.169480][ T5718] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 0 lbcount: 4096 extent 56+4096 [ 149.203029][ T4250] XFS (loop2): Unmounting Filesystem [ 149.624082][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 150.026476][ T5725] loop1: detected capacity change from 0 to 32768 [ 150.059937][ T5725] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.414 (5725) [ 150.123414][ T5725] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 150.157528][ T5725] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 150.167894][ T5725] BTRFS info (device loop1): force zlib compression, level 3 [ 150.186476][ T5725] BTRFS info (device loop1): using free space tree [ 150.220874][ T5738] loop2: detected capacity change from 0 to 512 [ 150.286199][ T5738] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.418: casefold flag without casefold feature [ 150.320950][ T5738] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.418: couldn't read orphan inode 15 (err -117) [ 150.349892][ T5738] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 150.519734][ T5725] BTRFS info (device loop1): enabling ssd optimizations [ 150.588923][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 150.875520][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 151.030848][ T5358] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 151.278161][ T5762] loop2: detected capacity change from 0 to 32768 [ 151.301229][ T5762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.419 (5762) [ 151.485429][ T5769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.423'. [ 151.609537][ T5762] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.636697][ T5762] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 151.645522][ T5762] BTRFS info (device loop2): setting nodatacow, compression disabled [ 151.677401][ T5762] BTRFS info (device loop2): max_inline at 0 [ 151.683493][ T5762] BTRFS info (device loop2): enabling disk space caching [ 151.704714][ T5762] BTRFS info (device loop2): turning off barriers [ 151.714838][ T5762] BTRFS info (device loop2): turning on flush-on-commit [ 151.736456][ T5762] BTRFS info (device loop2): doing ref verification [ 151.743251][ T5762] BTRFS info (device loop2): force clearing of disk cache [ 151.752154][ T5762] BTRFS info (device loop2): enabling ssd optimizations [ 151.770209][ T9] team0 (unregistering): Port device team_slave_1 removed [ 151.776614][ T5762] BTRFS info (device loop2): max_inline at 4096 [ 151.784426][ T5762] BTRFS info (device loop2): disk space caching is enabled [ 151.934648][ T9] team0 (unregistering): Port device team_slave_0 removed [ 152.065225][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.086957][ T5762] BTRFS info (device loop2): rebuilding free space tree [ 152.148242][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.244692][ T5762] BTRFS info (device loop2): disabling free space tree [ 152.252015][ T5762] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 152.281779][ T5762] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 152.354449][ T5793] loop1: detected capacity change from 0 to 8192 [ 152.463142][ T5793] loop1: p1 p2 < > p3 p4 < p5 > [ 152.472583][ T5793] loop1: p1 size 108986237 extends beyond EOD, truncated [ 152.492545][ T5793] loop1: p3 size 131072 extends beyond EOD, truncated [ 152.531540][ T5793] loop1: p5 size 108986237 extends beyond EOD, truncated [ 152.638162][ T3622] loop1: p1 p2 < > p3 p4 < p5 > [ 152.661104][ T3622] loop1: p1 size 108986237 extends beyond EOD, truncated [ 152.696844][ T3622] loop1: p3 size 131072 extends beyond EOD, truncated [ 152.724924][ T3622] loop1: p5 size 108986237 extends beyond EOD, truncated [ 152.851888][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 152.873291][ T4362] udevd[4362]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 152.873375][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 152.918214][ T4249] udevd[4249]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 152.930206][ T4457] udevd[4457]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 152.947551][ T4255] Bluetooth: hci0: command 0x0419 tx timeout [ 152.974729][ T4250] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.012540][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 153.029348][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 153.043635][ T4457] udevd[4457]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 153.054219][ T4362] udevd[4362]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 153.088743][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 153.796517][ T4314] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.982935][ T4314] usb 3-1: Using ep0 maxpacket: 32 [ 153.995577][ T9] bond0 (unregistering): Released all slaves [ 154.003572][ T4314] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 154.014492][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.063006][ T4314] usb 3-1: config 0 descriptor?? [ 154.080446][ T4314] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 154.130895][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.139708][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.150510][ T5629] device bridge_slave_1 entered promiscuous mode [ 154.407359][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.469279][ T5807] loop0: detected capacity change from 0 to 1024 [ 154.505010][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.714140][ T5629] team0: Port device team_slave_0 added [ 154.731039][ T5629] team0: Port device team_slave_1 added [ 154.809957][ T4302] hfsplus: b-tree write err: -5, ino 4 [ 154.878259][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.900142][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.987097][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.015755][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.076857][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.129454][ T4314] gspca_nw80x: reg_w err -71 [ 155.138017][ T4314] nw80x: probe of 3-1:0.0 failed with error -71 [ 155.191209][ T4314] usb 3-1: USB disconnect, device number 5 [ 155.202365][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.264787][ T5827] loop1: detected capacity change from 0 to 128 [ 155.423561][ T5629] device hsr_slave_0 entered promiscuous mode [ 155.477018][ T5629] device hsr_slave_1 entered promiscuous mode [ 155.718958][ T4345] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.927259][ T4345] usb 1-1: Using ep0 maxpacket: 16 [ 155.934445][ T4345] usb 1-1: config 0 has no interfaces? [ 155.964324][ T4345] usb 1-1: New USB device found, idVendor=0525, idProduct=9ea1, bcdDevice= 0.40 [ 155.991492][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.012293][ T4345] usb 1-1: Product: syz [ 156.012475][ T4255] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 156.026919][ T4255] CPU: 0 PID: 4255 Comm: kworker/u5:3 Not tainted 6.1.127-syzkaller #0 [ 156.034456][ T4345] usb 1-1: Manufacturer: syz [ 156.035190][ T4255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 156.035211][ T4255] Workqueue: hci4 hci_rx_work [ 156.054777][ T4255] Call Trace: [ 156.058090][ T4255] [ 156.061030][ T4255] dump_stack_lvl+0x1e3/0x2cb [ 156.065742][ T4255] ? nf_tcp_handle_invalid+0x642/0x642 [ 156.071227][ T4255] ? panic+0x764/0x764 [ 156.075324][ T4255] sysfs_create_dir_ns+0x2c6/0x390 [ 156.080452][ T4255] ? sysfs_warn_dup+0xa0/0xa0 [ 156.085150][ T4255] kobject_add_internal+0x6df/0xd10 [ 156.090440][ T4255] kobject_add+0x14e/0x210 [ 156.094891][ T4255] ? device_add+0x3c2/0xfd0 [ 156.099419][ T4255] ? kobject_init+0x1d0/0x1d0 [ 156.104114][ T4255] ? __raw_spin_lock_init+0x41/0x100 [ 156.109415][ T4255] ? get_device_parent+0x128/0x400 [ 156.114579][ T4255] device_add+0x476/0xfd0 [ 156.118949][ T4255] hci_conn_add_sysfs+0xe4/0x1f0 [ 156.124033][ T4255] le_conn_complete_evt+0xcc6/0x1320 [ 156.129432][ T4255] ? trace_contention_end+0x61/0x170 [ 156.134746][ T4255] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 156.141019][ T4255] ? __mutex_unlock_slowpath+0x218/0x750 [ 156.146702][ T4255] ? mutex_unlock+0x10/0x10 [ 156.151222][ T4255] ? skb_pull_data+0x10e/0x220 [ 156.156100][ T4255] hci_le_conn_complete_evt+0x188/0x410 [ 156.161782][ T4255] hci_event_packet+0xa40/0x1510 [ 156.166749][ T4255] ? hci_remote_host_features_evt+0x210/0x210 [ 156.172850][ T4255] ? bis_list+0x290/0x290 [ 156.177546][ T4255] ? do_raw_spin_unlock+0x137/0x8a0 [ 156.182768][ T4255] ? kcov_remote_start+0x4ae/0x7c0 [ 156.187902][ T4255] ? lockdep_hardirqs_on+0x30/0x130 [ 156.193144][ T4255] ? hci_send_to_monitor+0x99/0x4d0 [ 156.198377][ T4255] hci_rx_work+0x3a6/0xd10 [ 156.202827][ T4255] ? process_one_work+0x7a9/0x11d0 [ 156.207959][ T4255] process_one_work+0x8a9/0x11d0 [ 156.213017][ T4255] ? worker_detach_from_pool+0x260/0x260 [ 156.218768][ T4255] ? _raw_spin_lock_irqsave+0x120/0x120 [ 156.224370][ T4255] ? kthread_data+0x4e/0xc0 [ 156.228963][ T4255] ? wq_worker_running+0x97/0x190 [ 156.234124][ T4255] worker_thread+0xa47/0x1200 [ 156.238916][ T4255] ? release_firmware_map_entry+0x186/0x186 [ 156.244856][ T4255] kthread+0x28d/0x320 [ 156.248951][ T4255] ? worker_clr_flags+0x190/0x190 [ 156.253996][ T4255] ? kthread_blkcg+0xd0/0xd0 [ 156.258603][ T4255] ret_from_fork+0x1f/0x30 [ 156.263064][ T4255] [ 156.268289][ T4255] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 156.282102][ T4255] Bluetooth: hci4: failed to register connection device [ 156.288470][ T4345] usb 1-1: SerialNumber: syz [ 156.352209][ T4345] usb 1-1: config 0 descriptor?? [ 156.506087][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 156.593143][ T4477] usb 1-1: USB disconnect, device number 7 [ 156.674122][ T5851] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 156.692264][ T5851] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 156.830748][ T5860] loop3: detected capacity change from 0 to 64 [ 157.071637][ T5629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 157.140392][ T5629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 157.166200][ T5629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.206538][ T5629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.325565][ T5870] loop2: detected capacity change from 0 to 512 [ 157.391635][ T5874] loop0: detected capacity change from 0 to 512 [ 157.447769][ T5874] EXT4-fs: Ignoring removed i_version option [ 157.453859][ T5874] EXT4-fs: Ignoring removed nobh option [ 157.489803][ T5870] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 157.516574][ T5870] System zones: 0-2, 18-18, 34-35 [ 157.539150][ T5874] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.550963][ T5870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.631086][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.650076][ T5870] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.682390][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.712562][ T5874] EXT4-fs (loop0): 1 truncate cleaned up [ 157.736044][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.780184][ T5874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 157.815634][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.918180][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.948281][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.999036][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.006413][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.052434][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.070266][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 158.104596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.123455][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 158.123728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.225742][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.233008][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.326143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.380442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.400854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.435159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.462864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.498053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.542100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.580793][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.603229][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.638160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.659534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.192695][ T5914] loop1: detected capacity change from 0 to 512 [ 159.330376][ T5914] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.406682][ T5914] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.470936][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.510864][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.543525][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.564215][ T5927] EXT4-fs (loop1): shut down requested (1) [ 159.772477][ T5358] EXT4-fs (loop1): unmounting filesystem. [ 160.225102][ T5892] loop2: detected capacity change from 0 to 65536 [ 160.280046][ T5947] loop1: detected capacity change from 0 to 512 [ 160.336163][ T5947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.444889][ T5892] XFS (loop2): Mounting V5 Filesystem [ 160.460570][ T5947] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 160.488168][ T5947] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.579188][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.589387][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.594859][ T5892] XFS (loop2): Ending clean mount [ 160.624239][ T5892] XFS (loop2): Quotacheck needed: Please wait. [ 160.686418][ T4239] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 160.704330][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.715807][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.729597][ T5892] XFS (loop2): Quotacheck: Done. [ 160.740497][ T5629] device veth0_vlan entered promiscuous mode [ 160.753564][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.763115][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.794161][ T5629] device veth1_vlan entered promiscuous mode [ 160.873535][ T5358] EXT4-fs (loop1): unmounting filesystem. [ 160.876788][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.888997][ T4239] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.915904][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.929251][ T4239] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.947754][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.955857][ T4239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.977601][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.986904][ T4239] usb 1-1: Product: syz [ 160.991308][ T4239] usb 1-1: Manufacturer: syz [ 160.995947][ T4239] usb 1-1: SerialNumber: syz [ 161.025244][ T5629] device veth0_macvtap entered promiscuous mode [ 161.068554][ T4250] XFS (loop2): Unmounting Filesystem [ 161.112438][ T5629] device veth1_macvtap entered promiscuous mode [ 161.175481][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.187739][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.198485][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.216187][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.233572][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.245162][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.276906][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.295889][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.351139][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.399974][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.410949][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.450070][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.460038][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.473620][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.507461][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.520683][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.532241][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.542514][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.553419][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.563806][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.574713][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.624574][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.655497][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.708571][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.741759][ T5629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.773900][ T5629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.809913][ T5629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.835875][ T5629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.853463][ T11] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 161.977632][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.003717][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.114888][ T4239] cdc_ncm 1-1:1.0: failed to get mac address [ 162.163200][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.172727][ T4239] cdc_ncm 1-1:1.0: bind() failure [ 162.183817][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.235962][ T4239] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 162.245340][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.268729][ T4239] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 162.306063][ T4239] usbtest: probe of 1-1:1.1 failed with error -71 [ 162.323995][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.363885][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.373224][ T4239] usb 1-1: USB disconnect, device number 8 [ 162.386458][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 162.413386][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.693119][ T6000] loop2: detected capacity change from 0 to 2048 [ 162.801502][ T6000] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 162.839132][ T4268] udevd[4268]: incorrect nilfs2 checksum on /dev/loop2 [ 162.866647][ T6000] NILFS (loop2): mounting unchecked fs [ 162.951624][ T6000] NILFS (loop2): recovery complete [ 162.997582][ T6007] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.112952][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.253865][ T6000] syz.2.467 (6000) used greatest stack depth: 19424 bytes left [ 163.399477][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.584326][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.750295][ T6020] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 163.791917][ T5995] loop3: detected capacity change from 0 to 40427 [ 163.833072][ T5995] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 163.844191][ T6019] loop2: detected capacity change from 0 to 4096 [ 163.896547][ T5995] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 163.959435][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.970393][ T5995] F2FS-fs (loop3): invalid crc value [ 164.004360][ T6023] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.085317][ T5995] F2FS-fs (loop3): Found nat_bits in checkpoint [ 164.259634][ T6019] overlayfs: upper fs does not support tmpfile. [ 164.375865][ T5995] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 164.408722][ T5995] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 164.824608][ T4255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.839341][ T4255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.848583][ T4255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.857124][ T4255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.867354][ T4255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.874784][ T4255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.981148][ T6046] loop2: detected capacity change from 0 to 2048 [ 165.011966][ T6046] NILFS (loop2): invalid segment: Sequence number mismatch [ 165.027193][ T6046] NILFS (loop2): trying rollback from an earlier position [ 165.085818][ T6046] NILFS (loop2): recovery complete [ 165.125277][ T6049] loop0: detected capacity change from 0 to 64 [ 165.141909][ T6050] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.328129][ T6053] mmap: syz.1.485 (6053) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.252876][ T6074] loop0: detected capacity change from 0 to 1024 [ 166.275328][ T6070] loop3: detected capacity change from 0 to 1024 [ 166.301631][ T6074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.334298][ T6070] EXT4-fs: Ignoring removed i_version option [ 166.365661][ T6070] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.420034][ T6074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 166.588500][ T6070] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 166.612583][ T6070] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 166.623359][ T6070] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.483: Failed to acquire dquot type 0 [ 166.639075][ T6086] loop1: detected capacity change from 0 to 512 [ 166.668031][ T6070] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 166.715259][ T6086] EXT4-fs: Ignoring removed bh option [ 166.730020][ T6040] chnl_net:caif_netlink_parms(): no params data found [ 166.752048][ T6070] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #13: comm syz.3.483: corrupted inode contents [ 166.791100][ T6086] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.852324][ T6070] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #13: comm syz.3.483: mark_inode_dirty error [ 166.856466][ T6086] EXT4-fs (loop1): 1 truncate cleaned up [ 166.873749][ T6070] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #13: comm syz.3.483: corrupted inode contents [ 166.887482][ T6070] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #13: comm syz.3.483: mark_inode_dirty error [ 166.894635][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 166.904881][ T6070] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #13: comm syz.3.483: corrupted inode contents [ 166.930328][ T6070] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 166.932564][ T6086] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 166.956462][ T4255] Bluetooth: hci0: command 0x0409 tx timeout [ 167.034987][ T6070] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #13: comm syz.3.483: corrupted inode contents [ 167.110302][ T6070] EXT4-fs error (device loop3): ext4_truncate:4311: inode #13: comm syz.3.483: mark_inode_dirty error [ 167.137565][ T6070] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 167.177626][ T6070] EXT4-fs (loop3): 1 truncate cleaned up [ 167.202885][ T6070] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 167.228184][ T5358] EXT4-fs (loop1): unmounting filesystem. [ 167.380633][ T6100] loop0: detected capacity change from 0 to 256 [ 167.422255][ T6070] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 167.433572][ T6070] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 167.454699][ T6070] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 167.467009][ T6070] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 167.477215][ T6070] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.483: Failed to acquire dquot type 0 [ 167.512166][ T6070] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 167.595132][ T9] device hsr_slave_0 left promiscuous mode [ 167.610850][ T9] device hsr_slave_1 left promiscuous mode [ 167.642151][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 167.648543][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.667255][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.744760][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.756110][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.784261][ T9] device bridge_slave_1 left promiscuous mode [ 167.804479][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.832892][ T9] device bridge_slave_0 left promiscuous mode [ 167.847386][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.929632][ T9] device veth1_macvtap left promiscuous mode [ 167.935719][ T9] device veth0_macvtap left promiscuous mode [ 167.942186][ T9] device veth1_vlan left promiscuous mode [ 167.948249][ T9] device veth0_vlan left promiscuous mode [ 168.663993][ T9] team0 (unregistering): Port device team_slave_1 removed [ 168.785949][ T9] team0 (unregistering): Port device team_slave_0 removed [ 168.908606][ T6114] Driver unsupported XDP return value 0 on prog (id 65) dev N/A, expect packet loss! [ 168.934199][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.030918][ T4255] Bluetooth: hci0: command 0x041b tx timeout [ 169.038919][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.859218][ T9] bond0 (unregistering): Released all slaves [ 169.985834][ T6103] device macvlan2 entered promiscuous mode [ 169.994287][ T6103] device team_slave_0 entered promiscuous mode [ 170.001205][ T6103] device team_slave_1 entered promiscuous mode [ 170.008154][ T6103] device team0 entered promiscuous mode [ 170.014639][ T6103] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.037144][ T6103] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 170.046123][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.059009][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.074276][ T6040] device bridge_slave_0 entered promiscuous mode [ 170.093699][ T6112] netlink: 'syz.0.499': attribute type 4 has an invalid length. [ 170.143014][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.185711][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.208674][ T6040] device bridge_slave_1 entered promiscuous mode [ 170.383139][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.497173][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.707402][ T6040] team0: Port device team_slave_0 added [ 170.759808][ T6040] team0: Port device team_slave_1 added [ 170.891760][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.924199][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.016795][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.060109][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.081546][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.106490][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 171.130206][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.227630][ T6040] device hsr_slave_0 entered promiscuous mode [ 171.245055][ T6040] device hsr_slave_1 entered promiscuous mode [ 171.681109][ T6126] loop1: detected capacity change from 0 to 40427 [ 171.810167][ T6126] F2FS-fs (loop1): Found nat_bits in checkpoint [ 171.865394][ T6138] loop0: detected capacity change from 0 to 32768 [ 171.977208][ T6138] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 172.032969][ T6126] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 172.041675][ T6138] XFS (loop0): Mounting V5 Filesystem [ 172.174751][ T4296] kernel write not supported for file bpf-prog (pid: 4296 comm: kworker/1:3) [ 172.175494][ T6138] XFS (loop0): Ending clean mount [ 172.197568][ T6138] XFS (loop0): Quotacheck needed: Please wait. [ 172.256096][ T6138] XFS (loop0): Quotacheck: Done. [ 172.356216][ T5358] syz-executor: attempt to access beyond end of device [ 172.356216][ T5358] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.489396][ T4254] XFS (loop0): Unmounting Filesystem [ 173.186525][ T4255] Bluetooth: hci0: command 0x0419 tx timeout [ 173.501591][ T6189] loop2: detected capacity change from 0 to 64 [ 173.513253][ T6040] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.579929][ T6040] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.657716][ T6040] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.685723][ T6040] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.835588][ T4250] hfs: node 4:3 still has 1 user(s)! [ 174.018247][ T6204] loop1: detected capacity change from 0 to 2048 [ 174.027642][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.066200][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.101962][ T6204] NILFS (loop1): invalid segment: Sequence number mismatch [ 174.112146][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.126165][ T6204] NILFS (loop1): trying rollback from an earlier position [ 174.139108][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.153400][ T6204] NILFS (loop1): recovery complete [ 174.190261][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.200977][ T6210] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.261671][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.292721][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.299972][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.364188][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.395732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.434208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.455836][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.463440][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.503186][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.545895][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.573782][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.603516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.632487][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.690303][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.731380][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.777773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.804067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.836253][ T6222] netlink: 165 bytes leftover after parsing attributes in process `syz.3.527'. [ 174.851254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.872204][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.923622][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.393600][ T6237] loop1: detected capacity change from 0 to 2048 [ 175.447929][ T6247] loop3: detected capacity change from 0 to 128 [ 175.484910][ T6237] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.793084][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.833047][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.846830][ T5358] EXT4-fs (loop1): unmounting filesystem. [ 175.861318][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.008925][ T6243] loop2: detected capacity change from 0 to 32768 [ 176.164507][ T6243] XFS (loop2): Mounting V5 Filesystem [ 176.453033][ T6243] XFS (loop2): Ending clean mount [ 176.518849][ T6243] XFS (loop2): Quotacheck needed: Please wait. [ 176.674692][ T6243] XFS (loop2): Quotacheck: Done. [ 176.846851][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.901710][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.967512][ T4250] XFS (loop2): Unmounting Filesystem [ 177.040297][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.065647][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.109415][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.127612][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.162307][ T6040] device veth0_vlan entered promiscuous mode [ 177.188230][ T6040] device veth1_vlan entered promiscuous mode [ 177.318865][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.357145][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.367986][ T6274] loop3: detected capacity change from 0 to 32768 [ 177.384666][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.404294][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.435298][ T6040] device veth0_macvtap entered promiscuous mode [ 177.458138][ T6040] device veth1_macvtap entered promiscuous mode [ 177.463839][ T6274] XFS (loop3): Mounting V5 Filesystem [ 177.481012][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.491891][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.502669][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.514205][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.525476][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.536978][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.547201][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.558857][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.571122][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.585932][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.606834][ T4314] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.636478][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.636555][ T6274] XFS (loop3): Ending clean mount [ 177.651623][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.663048][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.674149][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.695884][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.706539][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.722349][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.754080][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.764114][ T6274] syz.3.537 (6274) used greatest stack depth: 18936 bytes left [ 177.779553][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.797589][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.806134][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.816489][ T4314] usb 2-1: Using ep0 maxpacket: 32 [ 177.832243][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.838255][ T4314] usb 2-1: config 0 interface 0 has no altsetting 0 [ 177.853889][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.868890][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.884430][ T6040] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.893696][ T6040] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.903172][ T6040] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.912637][ T4259] XFS (loop3): Unmounting Filesystem [ 177.914753][ T4314] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 177.927792][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.935825][ T4314] usb 2-1: Product: syz [ 177.944808][ T4314] usb 2-1: Manufacturer: syz [ 177.949718][ T4314] usb 2-1: SerialNumber: syz [ 177.955379][ T6040] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.961549][ T4314] usb 2-1: config 0 descriptor?? [ 178.368697][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.397327][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.420856][ T4314] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 178.460986][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.462849][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.490442][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.561750][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.059512][ T22] usb 2-1: USB disconnect, device number 4 [ 179.643455][ T5765] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.860143][ T5765] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.138982][ T5765] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.291341][ T5765] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.839291][ T6377] loop3: detected capacity change from 0 to 2048 [ 180.897974][ T6377] NILFS (loop3): invalid segment: Sequence number mismatch [ 180.952103][ T6377] NILFS (loop3): trying rollback from an earlier position [ 181.007402][ T6377] NILFS (loop3): recovery complete [ 181.055658][ T6383] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.452030][ T4255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.463756][ T4255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.484785][ T4255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.507928][ T4255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.523665][ T4255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 181.532152][ T4255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.577747][ T6364] loop1: detected capacity change from 0 to 32768 [ 181.740768][ T6364] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 181.929093][ T6364] (syz.1.555,6364,0):ocfs2_rename:1282 ERROR: status = -2 [ 181.960653][ T6364] (syz.1.555,6364,0):ocfs2_rename:1687 ERROR: status = -2 [ 182.204401][ T6417] loop3: detected capacity change from 0 to 1024 [ 182.233110][ T5358] ocfs2: Unmounting device (7,1) on (node local) [ 182.913204][ T6438] bond0: (slave macvlan2): Error: Slave device does not support XDP [ 183.053084][ T6391] chnl_net:caif_netlink_parms(): no params data found [ 183.596674][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 183.636388][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 183.828022][ T6464] loop0: detected capacity change from 0 to 2048 [ 183.836519][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 183.852831][ T22] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 183.883182][ T6464] NILFS (loop0): invalid segment: Sequence number mismatch [ 183.890721][ T22] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 183.932336][ T6464] NILFS (loop0): trying rollback from an earlier position [ 183.944290][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 184.001484][ T6449] loop2: detected capacity change from 0 to 32768 [ 184.020552][ T22] usb 2-1: config 1 has no interface number 0 [ 184.028618][ T6464] NILFS (loop0): recovery complete [ 184.047495][ T22] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.058542][ T22] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 184.063317][ T6471] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.071661][ T22] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 184.100003][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.122239][ T22] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 184.157046][ T6449] XFS (loop2): Mounting V5 Filesystem [ 184.237722][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.267491][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.278781][ T6391] device bridge_slave_0 entered promiscuous mode [ 184.294807][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.305045][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.339138][ T22] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 184.355757][ T6449] XFS (loop2): Ending clean mount [ 184.371800][ T6391] device bridge_slave_1 entered promiscuous mode [ 184.404574][ T5765] device hsr_slave_0 left promiscuous mode [ 184.486073][ T5765] device hsr_slave_1 left promiscuous mode [ 184.507758][ T5765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.560395][ T5765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.580512][ T5765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.591151][ T5765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.618839][ T5765] device bridge_slave_1 left promiscuous mode [ 184.651120][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.690926][ T5765] device bridge_slave_0 left promiscuous mode [ 184.709086][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.799106][ T6449] XFS (loop2): Unmounting Filesystem [ 184.815341][ T4479] usb 2-1: USB disconnect, device number 5 [ 184.845658][ T4479] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 184.977886][ T5765] device veth1_macvtap left promiscuous mode [ 184.984022][ T5765] device veth0_macvtap left promiscuous mode [ 185.008359][ T5765] device veth1_vlan left promiscuous mode [ 185.014294][ T5765] device veth0_vlan left promiscuous mode [ 185.180884][ T6491] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 185.680785][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 186.942251][ T6522] Falling back ldisc for ptm0. [ 187.004259][ T6519] loop0: detected capacity change from 0 to 40427 [ 187.067101][ T6519] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 187.087370][ T6519] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 187.133843][ T6519] F2FS-fs (loop0): invalid crc value [ 187.190569][ T6519] F2FS-fs (loop0): Found nat_bits in checkpoint [ 187.266853][ T6543] loop3: detected capacity change from 0 to 128 [ 187.321254][ T6543] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 187.375391][ T6519] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 187.412422][ T6519] F2FS-fs (loop0): Start checkpoint disabled! [ 187.496994][ T6519] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 187.506568][ T6519] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 187.687367][ T27] audit: type=1800 audit(1738025635.077:18): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.588" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 187.730641][ T6519] syz.0.588: attempt to access beyond end of device [ 187.730641][ T6519] loop0: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 187.750227][ T6548] loop3: detected capacity change from 0 to 512 [ 187.772081][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 187.793965][ T6548] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.813949][ T6548] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 187.844795][ T6548] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 187.853418][ T6519] syz.0.588: attempt to access beyond end of device [ 187.853418][ T6519] loop0: rw=2049, sector=45128, nr_sectors = 96 limit=40427 [ 187.876756][ T6548] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 187.884879][ T6548] System zones: 0-2, 18-18, 34-34 [ 187.907013][ T6519] syz.0.588: attempt to access beyond end of device [ 187.907013][ T6519] loop0: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 187.911455][ T5765] team0 (unregistering): Port device team_slave_1 removed [ 187.934495][ T6548] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 187.983837][ T6548] EXT4-fs (loop3): 1 truncate cleaned up [ 187.996490][ T6548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 188.140287][ T5765] team0 (unregistering): Port device team_slave_0 removed [ 188.158882][ T6548] EXT4-fs warning (device loop3): ext4_group_extend:1899: can't read last block, resize aborted [ 188.279613][ T5765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.295160][ T4329] kworker/u4:8: attempt to access beyond end of device [ 188.295160][ T4329] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 188.339797][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 188.432222][ T5765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.021799][ T6567] loop0: detected capacity change from 0 to 128 [ 189.070414][ T6567] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 189.085550][ T6567] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 189.161000][ T27] audit: type=1800 audit(1738025636.547:19): pid=6567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.602" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 189.364508][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 189.699365][ T5765] bond0 (unregistering): Released all slaves [ 189.826532][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 190.082435][ T6557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.122032][ T6391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.248247][ T6391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.301888][ T6557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.401997][ T6391] team0: Port device team_slave_0 added [ 190.456487][ T4297] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 190.521467][ T6557] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.558007][ T6391] team0: Port device team_slave_1 added [ 190.648292][ T4297] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.676434][ T4297] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 190.703147][ T4297] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.736549][ T4297] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 190.776388][ T4297] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 190.819472][ T4297] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.845122][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.876387][ T4297] usb 3-1: Product: syz [ 190.880867][ T4297] usb 3-1: Manufacturer: syz [ 190.886889][ T6594] loop3: detected capacity change from 0 to 1024 [ 190.904627][ T4297] cdc_wdm 3-1:1.0: skipping garbage [ 190.914848][ T6594] EXT4-fs: Ignoring removed orlov option [ 190.933968][ T4297] cdc_wdm 3-1:1.0: skipping garbage [ 190.942573][ T6594] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.958142][ T4297] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 190.961850][ T6594] EXT4-fs (loop3): Test dummy encryption mode enabled [ 190.964192][ T4297] cdc_wdm 3-1:1.0: Unknown control protocol [ 190.990412][ T6581] loop0: detected capacity change from 0 to 32768 [ 191.001372][ T6594] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 191.007613][ T6581] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.606 (6581) [ 191.039606][ T6594] EXT4-fs (loop3): shut down requested (2) [ 191.069362][ T6581] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.083635][ T6557] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.087897][ T6581] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 191.107015][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 191.121994][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.139234][ T6581] BTRFS info (device loop0): setting nodatacow, compression disabled [ 191.144941][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.148083][ T6581] BTRFS info (device loop0): max_inline at 0 [ 191.203507][ T6581] BTRFS info (device loop0): enabling disk space caching [ 191.217173][ T4345] usb 3-1: USB disconnect, device number 6 [ 191.236651][ T6391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.239149][ T6581] BTRFS info (device loop0): turning off barriers [ 191.269219][ T6581] BTRFS info (device loop0): turning on flush-on-commit [ 191.272038][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.290086][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.296892][ T6581] BTRFS info (device loop0): doing ref verification [ 191.325123][ T6391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.363651][ T6581] BTRFS info (device loop0): force clearing of disk cache [ 191.402686][ T6581] BTRFS info (device loop0): enabling ssd optimizations [ 191.428056][ T6581] BTRFS info (device loop0): max_inline at 4096 [ 191.444491][ T6581] BTRFS info (device loop0): disk space caching is enabled [ 191.459174][ T6391] device hsr_slave_0 entered promiscuous mode [ 191.478081][ T6391] device hsr_slave_1 entered promiscuous mode [ 191.590451][ T6557] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.648452][ T6557] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.674181][ T6557] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.694042][ T6581] BTRFS info (device loop0): rebuilding free space tree [ 191.737928][ T6581] BTRFS info (device loop0): disabling free space tree [ 191.744963][ T6581] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 191.755830][ T6581] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 191.761069][ T6557] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.000752][ T6631] netlink: 'syz.3.614': attribute type 4 has an invalid length. [ 192.018711][ T6631] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.614'. [ 192.158556][ T4254] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.503264][ T6391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.544117][ T6391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.605751][ T6391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.631015][ T6391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.362894][ T6391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.390951][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.397880][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.448214][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.487146][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.522105][ T6391] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.555914][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.587912][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.617566][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.624806][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.671193][ T6683] loop1: detected capacity change from 0 to 40427 [ 194.678688][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.698568][ T6683] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 194.708158][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.725841][ T6683] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 194.733944][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.743840][ T6683] F2FS-fs (loop1): invalid crc value [ 194.758176][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.765395][ T5765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.795404][ T6683] F2FS-fs (loop1): Found nat_bits in checkpoint [ 194.803252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.830128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.868289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.919211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.976030][ T6683] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 194.978518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.983445][ T6683] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 195.031645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.064641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.092036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.113037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.155567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.162363][ T6725] loop2: detected capacity change from 0 to 128 [ 195.178622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.195072][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.500798][ T6736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.647'. [ 195.733650][ T6746] loop2: detected capacity change from 0 to 164 [ 195.886877][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.894653][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.945203][ T6391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.452310][ T6770] loop2: detected capacity change from 0 to 512 [ 196.466529][ T4265] Bluetooth: hci2: command 0x0406 tx timeout [ 196.466598][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 196.472711][ T4265] Bluetooth: hci3: command 0x0406 tx timeout [ 196.533326][ T6770] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 196.648034][ T6770] EXT4-fs (loop2): 1 truncate cleaned up [ 196.653786][ T6770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 196.820587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.838761][ T6787] input: syz0 as /devices/virtual/input/input8 [ 196.847603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.916460][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 196.926204][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.961995][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.003265][ T6391] device veth0_vlan entered promiscuous mode [ 197.023629][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.045738][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.075242][ T6391] device veth1_vlan entered promiscuous mode [ 197.112273][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.664'. [ 197.172646][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.183503][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.224647][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.262117][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.302838][ T6391] device veth0_macvtap entered promiscuous mode [ 197.342408][ T6391] device veth1_macvtap entered promiscuous mode [ 197.433689][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.480006][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.513038][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.542860][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.564665][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.577890][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.588319][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.599126][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.622634][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.644944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.663963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.687959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.713365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.748946][ T6818] Bluetooth: MGMT ver 1.22 [ 197.815175][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.836089][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.856383][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.878286][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.891485][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.916338][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.936356][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.957171][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.957522][ T6823] loop0: detected capacity change from 0 to 64 [ 197.996588][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.013089][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.028991][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.087173][ T6391] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.096016][ T6391] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.105867][ T6391] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.114927][ T6391] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.291963][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 198.373104][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.401130][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.492553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.524001][ T5765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.558685][ T5765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.611942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.262663][ T4329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.419141][ T4329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.746233][ T4329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.866116][ T4329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.225705][ T6861] loop2: detected capacity change from 0 to 256 [ 200.386223][ T6863] loop0: detected capacity change from 0 to 4096 [ 200.423731][ T6863] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 200.506521][ T6863] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 200.540581][ T6863] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 200.586439][ T6863] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 200.630768][ T6863] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 200.656588][ T6863] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 200.676522][ T6863] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 200.694220][ T4255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.707359][ T6863] ntfs: volume version 3.1. [ 200.713833][ T6863] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 200.716719][ T4255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.736968][ T4255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.751948][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.761458][ T4255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.772058][ T4255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.772200][ T6863] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 200.856038][ T6871] loop5: detected capacity change from 0 to 6 [ 200.873648][ T6859] loop3: detected capacity change from 0 to 32768 [ 200.962684][ T6859] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.685 (6859) [ 201.010154][ T6863] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp437. You might want to try to use the mount option nls=utf8. [ 201.052127][ T6859] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 201.057481][ T6873] loop1: detected capacity change from 0 to 2048 [ 201.093244][ T6859] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 201.114037][ T6859] BTRFS info (device loop3): using free space tree [ 201.115031][ T6873] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.155768][ T6875] loop2: detected capacity change from 0 to 512 [ 201.163636][ T6875] EXT4-fs: Ignoring removed bh option [ 201.218760][ T6875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 201.256497][ T6875] System zones: 1-12 [ 201.292469][ T6875] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.692: corrupted in-inode xattr [ 201.314877][ T6875] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.692: couldn't read orphan inode 15 (err -117) [ 201.395433][ T6875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 201.434849][ T6859] BTRFS info (device loop3): enabling ssd optimizations [ 201.487009][ T6875] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.692: Unrecognised inode hash code 4 [ 201.505871][ T6868] chnl_net:caif_netlink_parms(): no params data found [ 201.543054][ T6875] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.692: Corrupt directory, running e2fsck is recommended [ 201.669955][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 201.750162][ T4259] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 201.873124][ T4477] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 202.036474][ T4299] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 202.068156][ T4477] usb 1-1: Using ep0 maxpacket: 8 [ 202.081048][ T4477] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 202.105688][ T4477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 202.122301][ T4477] usb 1-1: Product: syz [ 202.127900][ T4477] usb 1-1: Manufacturer: syz [ 202.132544][ T4477] usb 1-1: SerialNumber: syz [ 202.145027][ T4477] usb 1-1: config 0 descriptor?? [ 202.166245][ T4477] gspca_main: sq905-2.14.0 probing 2770:9120 [ 202.231904][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.239448][ T4299] usb 3-1: Using ep0 maxpacket: 16 [ 202.241687][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.247364][ T4299] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 202.258315][ T6868] device bridge_slave_0 entered promiscuous mode [ 202.261399][ T4299] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 202.277305][ T4299] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 202.280430][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.294357][ T4299] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 202.301239][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.304249][ T4299] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 202.319927][ T6868] device bridge_slave_1 entered promiscuous mode [ 202.321405][ T4299] usb 3-1: config 1 interface 0 has no altsetting 0 [ 202.334297][ T4299] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 202.343710][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.367036][ T4299] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 202.369892][ T129] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 202.486734][ T6868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.506485][ T4479] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 202.507130][ T6868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.545414][ T4329] device hsr_slave_0 left promiscuous mode [ 202.559331][ T4329] device hsr_slave_1 left promiscuous mode [ 202.577163][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.585033][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.585112][ T4299] scsi host1: usb-storage 3-1:1.0 [ 202.596318][ T129] usb 2-1: Using ep0 maxpacket: 32 [ 202.607142][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.614901][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.623047][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.634802][ T4329] device bridge_slave_1 left promiscuous mode [ 202.641031][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.651061][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.658807][ T129] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 202.668192][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.678988][ T4329] device bridge_slave_0 left promiscuous mode [ 202.685290][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.693754][ T129] usb 2-1: config 0 descriptor?? [ 202.696623][ T4479] usb 4-1: Using ep0 maxpacket: 16 [ 202.704396][ T129] hub 2-1:0.0: USB hub found [ 202.707930][ T4479] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 202.717644][ T4479] usb 4-1: config 0 has no interface number 0 [ 202.723895][ T4479] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 202.734272][ T4479] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 202.744629][ T4479] usb 4-1: config 0 interface 41 has no altsetting 0 [ 202.755083][ T4479] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 202.764329][ T4479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.773342][ T4329] device veth1_macvtap left promiscuous mode [ 202.773575][ T4479] usb 4-1: Product: syz [ 202.784944][ T4479] usb 4-1: Manufacturer: syz [ 202.789805][ T4479] usb 4-1: SerialNumber: syz [ 202.798363][ T4479] usb 4-1: config 0 descriptor?? [ 202.803146][ T4329] device veth0_macvtap left promiscuous mode [ 202.804372][ T6914] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 202.817029][ T4329] device veth1_vlan left promiscuous mode [ 202.823367][ T4329] device veth0_vlan left promiscuous mode [ 202.836655][ T6914] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 202.852497][ T4299] usb 3-1: USB disconnect, device number 7 [ 202.877874][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 202.910529][ T129] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 203.084330][ T6914] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 203.092153][ T6914] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 203.176055][ T4477] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 203.184125][ T4477] sq905: probe of 1-1:0.0 failed with error -71 [ 203.193164][ T4477] usb 1-1: USB disconnect, device number 9 [ 203.345567][ T129] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 203.696762][ T4299] usb 2-1: USB disconnect, device number 6 [ 203.830844][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 203.937647][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 203.940103][ T4479] CoreChips: probe of 4-1:0.41 failed with error -71 [ 203.962329][ T4479] usb 4-1: USB disconnect, device number 4 [ 204.029279][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.103311][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.213112][ T6927] loop1: detected capacity change from 0 to 1764 [ 204.953432][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 205.500203][ T4329] bond0 (unregistering): Released all slaves [ 205.640824][ T6868] team0: Port device team_slave_0 added [ 205.656034][ T6940] Zero length message leads to an empty skb [ 205.690577][ T6868] team0: Port device team_slave_1 added [ 205.760319][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.790089][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.837160][ T6868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.859494][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.866590][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.893656][ T6868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.985315][ T6868] device hsr_slave_0 entered promiscuous mode [ 206.010187][ T6868] device hsr_slave_1 entered promiscuous mode [ 206.119696][ T129] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 206.235270][ T6962] loop0: detected capacity change from 0 to 128 [ 206.289865][ T6962] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 206.304048][ T6962] FAT-fs (loop0): Filesystem has been set read-only [ 206.351594][ T129] usb 2-1: Using ep0 maxpacket: 8 [ 206.361715][ T129] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 206.380452][ T129] usb 2-1: config 179 has no interface number 0 [ 206.393296][ T129] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 206.417612][ T129] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 206.450731][ T129] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 206.452966][ T6964] loop3: detected capacity change from 0 to 164 [ 206.467505][ T129] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 206.480356][ T129] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 206.494530][ T129] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 206.503707][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.511899][ T6964] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 206.529879][ T6952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.545863][ T6964] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 206.624699][ T6964] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 206.845402][ T6868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.863166][ T6969] loop0: detected capacity change from 0 to 256 [ 206.874221][ T6868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.884477][ T129] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input9 [ 206.899771][ T6868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.915481][ T6868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.026686][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 207.057194][ T4297] usb 2-1: USB disconnect, device number 7 [ 207.060388][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 207.075477][ T4297] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 207.085803][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 207.234920][ T6975] loop3: detected capacity change from 0 to 1024 [ 207.243132][ T6868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.261861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.272816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.293745][ T6868] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.329239][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.343774][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.352957][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.360146][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.371184][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.423186][ T6982] loop3: detected capacity change from 0 to 512 [ 207.454088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.464653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.473805][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.481042][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.486890][ T4479] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 207.500359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.531222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.565099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.592803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.607175][ T9] __quota_error: 1 callbacks suppressed [ 207.607193][ T9] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 207.612996][ T6982] EXT4-fs (loop3): 1 orphan inode deleted [ 207.639929][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6817: comm kworker/u4:0: Failed to release dquot type 1 [ 207.663214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.686485][ T4479] usb 1-1: Using ep0 maxpacket: 16 [ 207.691904][ T6982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 207.703840][ T4479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.715248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.723640][ T6982] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.735682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.746961][ T4479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.758613][ T4479] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 207.767999][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.787275][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.795896][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.806429][ T4479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.824520][ T4479] usb 1-1: config 0 descriptor?? [ 207.827390][ T6991] loop2: detected capacity change from 0 to 512 [ 207.834504][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.847762][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.868657][ T4302] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 207.889367][ T6991] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 207.908406][ T6991] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.912278][ T4302] EXT4-fs error (device loop3): ext4_release_dquot:6817: comm kworker/u4:5: Failed to release dquot type 1 [ 207.932344][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 207.976763][ T129] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 208.071966][ T6996] loop3: detected capacity change from 0 to 1024 [ 208.080928][ T6996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.082352][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 208.105443][ T6996] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 208.217336][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 208.223102][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.223145][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.223184][ T129] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 208.278627][ T4479] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0004/input/input10 [ 208.292880][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.308885][ T129] usb 2-1: config 0 descriptor?? [ 208.389500][ T4479] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 208.420072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.435569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.450693][ T6868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.522932][ T4479] usb 1-1: USB disconnect, device number 10 [ 208.729901][ T129] logitech-hidpp-device 0003:046D:C086.0005: item fetching failed at offset 4/5 [ 208.752703][ T129] logitech-hidpp-device 0003:046D:C086.0005: hidpp_probe:parse failed [ 208.768115][ T129] logitech-hidpp-device: probe of 0003:046D:C086.0005 failed with error -22 [ 208.986791][ T129] usb 2-1: USB disconnect, device number 8 [ 209.043442][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.053762][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.085099][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.101037][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.109562][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 209.135768][ T6868] device veth0_vlan entered promiscuous mode [ 209.168945][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.197290][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.218616][ T6868] device veth1_vlan entered promiscuous mode [ 209.252498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.262471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.264334][ T7030] loop0: detected capacity change from 0 to 1024 [ 209.271953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.289220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.298727][ T7030] EXT4-fs: Ignoring removed nobh option [ 209.304341][ T7030] EXT4-fs: Ignoring removed bh option [ 209.322778][ T6868] device veth0_macvtap entered promiscuous mode [ 209.335394][ T6868] device veth1_macvtap entered promiscuous mode [ 209.352805][ T7030] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.388561][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.394833][ T7030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 209.417614][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.437265][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.448146][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.458514][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.469282][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.479808][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.490594][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.502603][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.519428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.571224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.600264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.622345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.622635][ T7040] loop1: detected capacity change from 0 to 64 [ 209.648771][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.666472][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.676894][ T7041] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 209.697620][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.725611][ T7043] input: syz1 as /devices/virtual/input/input11 [ 209.743941][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.768313][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.782383][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.795270][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.808388][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.823418][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 209.839227][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.873052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.894483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.945578][ T6868] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.967103][ T6868] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.975877][ T6868] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.018274][ T6868] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.186778][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.216358][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.242715][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.256652][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.284881][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.304970][ T7058] loop1: detected capacity change from 0 to 256 [ 210.310878][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.339290][ T7058] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0e5ad3fb, utbl_chksum : 0xe619d30d) [ 210.528082][ T7062] loop1: detected capacity change from 0 to 512 [ 210.551666][ T7062] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 210.567897][ T7062] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.597761][ T7062] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.755: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 210.625656][ T7062] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.755: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 210.648554][ T7062] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz.1.755: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 210.671055][ T7062] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz.1.755: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 210.693227][ T7062] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz.1.755: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 210.720286][ T7062] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz.1.755: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 210.787342][ T7062] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #2: block 18: comm syz.1.755: lblock 23 mapped to illegal pblock 18 (length 1) [ 210.814816][ T7062] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 19: comm syz.1.755: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 210.846406][ T7062] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 20: comm syz.1.755: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 210.907595][ T7062] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 21: comm syz.1.755: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 211.439787][ T5358] EXT4-fs (loop1): unmounting filesystem. [ 211.753186][ T7078] loop3: detected capacity change from 0 to 40427 [ 211.780760][ T7078] F2FS-fs (loop3): invalid crc value [ 211.834760][ T7078] F2FS-fs (loop3): Found nat_bits in checkpoint [ 211.958419][ T7078] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 211.985642][ T7078] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 212.021241][ T7078] syz.3.762: attempt to access beyond end of device [ 212.021241][ T7078] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 212.061302][ T7092] loop0: detected capacity change from 0 to 4096 [ 212.121719][ T7092] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 212.161208][ T7085] loop1: detected capacity change from 0 to 32768 [ 212.192327][ T7085] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.763 (7085) [ 212.224457][ T4329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.246787][ T7085] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.286534][ T7085] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 212.317119][ T7085] BTRFS info (device loop1): setting nodatacow, compression disabled [ 212.336146][ T7085] BTRFS info (device loop1): max_inline at 0 [ 212.346383][ T7085] BTRFS info (device loop1): enabling disk space caching [ 212.353502][ T7085] BTRFS info (device loop1): turning off barriers [ 212.380636][ T7085] BTRFS info (device loop1): turning on flush-on-commit [ 212.395621][ T7085] BTRFS info (device loop1): doing ref verification [ 212.416812][ T7085] BTRFS info (device loop1): force clearing of disk cache [ 212.440946][ T7085] BTRFS info (device loop1): enabling ssd optimizations [ 212.458487][ T7085] BTRFS info (device loop1): max_inline at 4096 [ 212.464800][ T7085] BTRFS info (device loop1): disk space caching is enabled [ 212.475631][ T7092] ntfs3: loop0: ino=5, "/" attr_set_size [ 212.513278][ T7092] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 212.678833][ T7085] BTRFS info (device loop1): rebuilding free space tree [ 212.730883][ T4329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.732014][ T11] ------------[ cut here ]------------ [ 212.747421][ T11] kernel BUG at fs/notify/dnotify/dnotify.c:136! [ 212.754265][ T7085] BTRFS info (device loop1): disabling free space tree [ 212.761565][ T11] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 212.762785][ T7085] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.767671][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.127-syzkaller #0 [ 212.767694][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 212.767708][ T11] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 212.767745][ T11] RIP: 0010:dnotify_free_mark+0x53/0x60 [ 212.767777][ T11] Code: 48 89 df e8 9f e6 dd ff 48 83 3b 00 75 17 e8 a4 53 86 ff 48 8b 3d 9d 0f 97 0c 4c 89 f6 5b 41 5e e9 a2 0f dd ff e8 8d 53 86 ff <0f> 0b cc cc cc cc cc cc cc cc cc cc cc 55 41 57 41 56 41 55 41 54 [ 212.767795][ T11] RSP: 0018:ffffc90000107b88 EFLAGS: 00010293 [ 212.767813][ T11] RAX: ffffffff82044913 RBX: ffff8880689e0080 RCX: ffff888017f53b80 [ 212.767829][ T11] RDX: 0000000000000000 RSI: ffffffff8b0c0340 RDI: ffff8880689e0000 [ 212.767844][ T11] RBP: ffffc90000107c50 R08: dffffc0000000000 R09: fffffbfff224a064 [ 212.767861][ T11] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888144e9d800 [ 212.767876][ T11] R13: ffffc90000107be0 R14: ffff8880689e0000 R15: ffff8880689e0000 [ 212.767892][ T11] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 212.767910][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.767924][ T11] CR2: 00007f01ded79178 CR3: 000000005d0c2000 CR4: 00000000003506f0 [ 212.767942][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.767955][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.767968][ T11] Call Trace: [ 212.767974][ T11] [ 212.767982][ T11] ? __die_body+0x5e/0xa0 [ 212.768013][ T11] ? die+0x83/0xb0 [ 212.768042][ T11] ? do_trap+0x11e/0x350 [ 212.796308][ T7085] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.802877][ T11] ? dnotify_free_mark+0x53/0x60 [ 212.948042][ T11] ? dnotify_free_mark+0x53/0x60 [ 212.953051][ T11] ? do_error_trap+0x13d/0x1e0 [ 212.957879][ T11] ? dnotify_free_mark+0x53/0x60 [ 212.962841][ T11] ? do_int3+0x30/0x30 [ 212.966924][ T11] ? report_bug+0x3e0/0x500 [ 212.971438][ T11] ? rcu_is_watching+0x11/0xb0 [ 212.976232][ T11] ? handle_invalid_op+0x2c/0x40 [ 212.981180][ T11] ? dnotify_free_mark+0x53/0x60 [ 212.986129][ T11] ? exc_invalid_op+0x2f/0x40 [ 212.990834][ T11] ? asm_exc_invalid_op+0x16/0x20 [ 212.995873][ T11] ? dnotify_free_mark+0x53/0x60 [ 213.000823][ T11] ? dnotify_free_mark+0x53/0x60 [ 213.005777][ T11] ? dnotify_free_mark+0x53/0x60 [ 213.010740][ T11] fsnotify_mark_destroy_workfn+0x2c7/0x340 [ 213.016679][ T11] ? fsnotify_connector_destroy_workfn+0xa0/0xa0 [ 213.023100][ T11] ? process_one_work+0x7a9/0x11d0 [ 213.028320][ T11] process_one_work+0x8a9/0x11d0 [ 213.033319][ T11] ? worker_detach_from_pool+0x260/0x260 [ 213.038963][ T11] ? _raw_spin_lock_irqsave+0x120/0x120 [ 213.044517][ T11] ? kthread_data+0x4e/0xc0 [ 213.049035][ T11] ? wq_worker_running+0x97/0x190 [ 213.054149][ T11] worker_thread+0xa47/0x1200 [ 213.058843][ T11] kthread+0x28d/0x320 [ 213.062914][ T11] ? worker_clr_flags+0x190/0x190 [ 213.067941][ T11] ? kthread_blkcg+0xd0/0xd0 [ 213.072531][ T11] ret_from_fork+0x1f/0x30 [ 213.076984][ T11] SYZFAIL: failed to send rpc fd=3 want=296 sent=0 n=-1 (errno 32: Broken pipe) [ 213.080095][ T11] Modules linked in: [ 213.090855][ T11] ---[ end trace 0000000000000000 ]--- [ 213.096793][ T11] RIP: 0010:dnotify_free_mark+0x53/0x60 [ 213.102400][ T11] Code: 48 89 df e8 9f e6 dd ff 48 83 3b 00 75 17 e8 a4 53 86 ff 48 8b 3d 9d 0f 97 0c 4c 89 f6 5b 41 5e e9 a2 0f dd ff e8 8d 53 86 ff <0f> 0b cc cc cc cc cc cc cc cc cc cc cc 55 41 57 41 56 41 55 41 54 [ 213.174340][ T4329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.204915][ T7114] loop0: detected capacity change from 0 to 1024 [ 213.211577][ T11] RSP: 0018:ffffc90000107b88 EFLAGS: 00010293 [ 213.235825][ T11] RAX: ffffffff82044913 RBX: ffff8880689e0080 RCX: ffff888017f53b80 [ 213.257371][ T11] RDX: 0000000000000000 RSI: ffffffff8b0c0340 RDI: ffff8880689e0000 [ 213.265423][ T11] RBP: ffffc90000107c50 R08: dffffc0000000000 R09: fffffbfff224a064 [ 213.306311][ T11] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888144e9d800 [ 213.315051][ T11] R13: ffffc90000107be0 R14: ffff8880689e0000 R15: ffff8880689e0000 [ 213.338192][ T11] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 213.351288][ T4329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.384405][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.398776][ T11] CR2: 0000001b2d518ff8 CR3: 000000001ffdd000 CR4: 00000000003506f0 [ 213.422244][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.438031][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.458167][ T11] Kernel panic - not syncing: Fatal exception [ 213.464422][ T11] Kernel Offset: disabled [ 213.468773][ T11] Rebooting in 86400 seconds..