last executing test programs: 7.521702845s ago: executing program 0 (id=363): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e2c, 0x0, @remote, 0x7}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0xfa9, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x9}], 0x2c) 7.17116424s ago: executing program 0 (id=364): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6.300039793s ago: executing program 0 (id=369): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x6, 0x551b, &(0x7f0000006100)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) read$FUSE(r0, &(0x7f0000008200)={0x2020}, 0xfffffcd3) 4.55166593s ago: executing program 4 (id=382): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140), 0x0) 3.866689911s ago: executing program 0 (id=385): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d0000090582000000000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000240)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x4010, 0x4, 0x10, 0x602, 0x240, 0xc, 0x213, 0x1008, 0x0, 0xffff, 0xfbff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.947071855s ago: executing program 4 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x2000048, &(0x7f0000000000), 0x1, 0xb950, &(0x7f000000d2c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40305824, 0x0) 2.946574665s ago: executing program 2 (id=393): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r1, 0x787) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.791394558s ago: executing program 3 (id=394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x2ffc, 0x8, 0xd, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x200408c4) 2.474986142s ago: executing program 3 (id=396): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 1.907111361s ago: executing program 4 (id=399): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) 1.894003291s ago: executing program 2 (id=400): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfde, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x4, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10001, 0x2, 0x1, 0x2, 0x5, 0x9, 0x13, 0x2, 0x5, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x6, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0x200, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xc, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x3f, 0xfffffff9, 0xb, 0x1, 0xa9, 0x9, 0x80be, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x7fff, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0xfffffffb, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x240, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x1, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0x9, 0x3, 0xb, 0x10000, 0x6, 0x9, 0x5, 0x5, 0xa6c6, 0x84, 0x401, 0xa177, 0x81, 0x0, 0x9, 0x8000, 0x9, 0x8, 0x4, 0x80000001, 0xfff, 0x9, 0x1, 0x80000000, 0x4, 0x10, 0x7, 0x3, 0x2, 0x91a1, 0x3ff, 0xff, 0x6, 0x1, 0x0, 0xb0d2, 0x2b, 0x6, 0x7, 0x5, 0x7fffffff, 0x4, 0x6e, 0x478, 0xfe000000, 0x8, 0x7e, 0x37, 0x2, 0x800, 0x4, 0x6, 0x800, 0x42, 0xfff80000, 0x7, 0x9, 0x9f1, 0x9, 0x41, 0x8bb2, 0xc3f8, 0x8, 0x81, 0x0, 0x7fffffff, 0x38, 0x0, 0x2, 0x9, 0x80000000, 0x9, 0x4, 0x180000, 0x9, 0x0, 0x3ff, 0x8, 0xa51, 0x4, 0xfffffff8, 0x1, 0x7fff, 0x1, 0x8d26, 0x10000, 0x1, 0x502c, 0xa, 0x0, 0x1, 0x8, 0x80, 0x2, 0x101, 0xb14, 0x60a, 0x2, 0x0, 0x8, 0x8, 0x5, 0x5, 0x0, 0x3, 0xffffffff, 0xfffffff9, 0x836, 0x1b, 0x8000, 0x6, 0x100, 0x9, 0x0, 0x2, 0xfffffff8, 0x87, 0x5, 0x8, 0x0, 0x3, 0x3, 0x3, 0x3f, 0x7ff, 0x753, 0x200000, 0x1, 0x6, 0x9, 0x5, 0x8006, 0xee, 0x1, 0x3e, 0x3, 0x9e0, 0xa1a, 0x3, 0xfffffffd, 0x5, 0x0, 0x6, 0xc513, 0x2, 0x1, 0x5, 0x2, 0x7f, 0x3, 0xd, 0x10000, 0x7fffffff, 0x1ff, 0x47f, 0x9, 0x3, 0x2, 0x7, 0x1, 0xfffffffe, 0x1ff, 0x100, 0x7a, 0x4e1aeaf8, 0xda34, 0x6, 0x8, 0x7fffffff, 0x2d8, 0x0, 0x80000001, 0x3fdb, 0x101, 0x200, 0x6, 0x0, 0x86, 0x8, 0x4572, 0x0, 0x6a, 0x81, 0xd174, 0x80000001, 0x5, 0x4, 0x80000000, 0x3, 0x2, 0x9, 0x8, 0x4, 0x9d0, 0xa, 0x57bf, 0x3, 0x10000, 0x3, 0x46, 0x4, 0x1, 0x0, 0x7, 0x5, 0x621a, 0x4000000, 0x9, 0xffff, 0xbd2f, 0x3, 0x9, 0x1ff, 0x0, 0x7, 0x8, 0x4, 0x3, 0x6, 0xe2bf, 0x0, 0x3, 0xfffffffc, 0x20, 0xb, 0x0, 0x0, 0x533, 0x5, 0x3, 0x7, 0x0, 0x6, 0x33, 0xaa, 0x3, 0x7ff, 0xfffffff8, 0xc, 0x5, 0x81, 0x10, 0xb4e, 0x4, 0x8, 0x7, 0x8, 0x0, 0x9, 0x3, 0x0, 0x5, 0x4, 0x3]}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 1.679456954s ago: executing program 1 (id=401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x20e00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd2, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xc1, 0x29b, &(0x7f00000013c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x30000, 0x8000}) 1.467213958s ago: executing program 2 (id=402): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1.290187321s ago: executing program 3 (id=403): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x9, 0x31, 0xffffffffffffffff, 0xf983e000) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 1.253150501s ago: executing program 1 (id=404): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f00000005c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c747970653dc28607e32c696f636861727365743d6d616363726f617469616e2c636f6465706167653d69736f383835392d31332c66696c655f756d61736b3d30303030303030303030303030303030303030303031352c63726561746f723de62b8eca2c706172743d3078303030303030303030303030303030302c6769643d", @ANYRESHEX=0x0, @ANYBLOB="0100"], 0x2, 0x391, &(0x7f0000000140)="$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") r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00"}) 959.177036ms ago: executing program 1 (id=405): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) 958.828586ms ago: executing program 2 (id=406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x41, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x2d, 0x0, @gue={{0x2, 0x0, 0x1, 0x7, 0x8106}, "134a318536459f4c076600ffeffff600000000a6fd0303e1c95c7cc441"}}}}}}}, 0x53) 958.709686ms ago: executing program 3 (id=407): r0 = socket(0x11, 0xa, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000005c0)={0x2000a210}) 810.923898ms ago: executing program 1 (id=408): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = mq_open(&(0x7f0000000440)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 248.611186ms ago: executing program 2 (id=415): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x2014000, &(0x7f0000000580)=ANY=[], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 163.197248ms ago: executing program 4 (id=416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000540)={0x2e, 0x0, [{0x40000070, 0x0, 0x1000000400004}]}) 162.855738ms ago: executing program 0 (id=417): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[], 0x8b, 0x2cb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000002c0)='./bus\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0) 535.35µs ago: executing program 0 (id=418): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r0, r1, 0x0) 0s ago: executing program 1 (id=419): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.83' (ED25519) to the list of known hosts. [ 76.332554][ T4261] cgroup: Unknown subsys name 'net' [ 76.439781][ T4261] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.950126][ T4261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.426245][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.434145][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.441450][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.449741][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.457647][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.466971][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.466971][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.476778][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.482064][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.496222][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.504024][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.511664][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.533523][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.541107][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.550257][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.561328][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.570847][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.578632][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.586369][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.594283][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.601819][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.609334][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.622049][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.629395][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.644368][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.652249][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.675028][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.684716][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.692751][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.700378][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.050361][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 80.135662][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 80.189659][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 80.261430][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 80.321428][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.329371][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.337763][ T4274] device bridge_slave_0 entered promiscuous mode [ 80.350521][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.358276][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.366823][ T4274] device bridge_slave_1 entered promiscuous mode [ 80.396769][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 80.422924][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.458159][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.512705][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.523266][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.531320][ T4278] device bridge_slave_0 entered promiscuous mode [ 80.553157][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.560296][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.571829][ T4275] device bridge_slave_0 entered promiscuous mode [ 80.591986][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.599850][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.608027][ T4278] device bridge_slave_1 entered promiscuous mode [ 80.626994][ T4274] team0: Port device team_slave_0 added [ 80.642324][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.649553][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.658123][ T4275] device bridge_slave_1 entered promiscuous mode [ 80.685314][ T4274] team0: Port device team_slave_1 added [ 80.691311][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.698683][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.707474][ T4273] device bridge_slave_0 entered promiscuous mode [ 80.748616][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.759222][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.767408][ T4273] device bridge_slave_1 entered promiscuous mode [ 80.785518][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.792654][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.804210][ T4282] device bridge_slave_0 entered promiscuous mode [ 80.813861][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.823978][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.830966][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.856980][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.879973][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.889339][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.896892][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.905428][ T4282] device bridge_slave_1 entered promiscuous mode [ 80.914093][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.924006][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.930994][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.957645][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.982322][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.000644][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.035339][ T4278] team0: Port device team_slave_0 added [ 81.064715][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.075488][ T4278] team0: Port device team_slave_1 added [ 81.096922][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.132894][ T4274] device hsr_slave_0 entered promiscuous mode [ 81.139831][ T4274] device hsr_slave_1 entered promiscuous mode [ 81.159108][ T4275] team0: Port device team_slave_0 added [ 81.167174][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.196156][ T4273] team0: Port device team_slave_0 added [ 81.208001][ T4275] team0: Port device team_slave_1 added [ 81.221943][ T4273] team0: Port device team_slave_1 added [ 81.242149][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.252229][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.278977][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.315628][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.322668][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.349374][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.369246][ T4282] team0: Port device team_slave_0 added [ 81.379842][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.387240][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.413572][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.431398][ T4282] team0: Port device team_slave_1 added [ 81.449146][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.456896][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.483537][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.495936][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.502934][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.529289][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.560279][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.569643][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.596064][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 81.603520][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 81.610013][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.640670][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.648393][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.674524][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 81.674550][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 81.687438][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.709076][ T4278] device hsr_slave_0 entered promiscuous mode [ 81.716293][ T4278] device hsr_slave_1 entered promiscuous mode [ 81.722853][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.731032][ T4278] Cannot create hsr debugfs directory [ 81.741768][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.749176][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 81.753458][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.781508][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.812774][ T4273] device hsr_slave_0 entered promiscuous mode [ 81.822918][ T4273] device hsr_slave_1 entered promiscuous mode [ 81.829907][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.837848][ T4273] Cannot create hsr debugfs directory [ 81.921122][ T4282] device hsr_slave_0 entered promiscuous mode [ 81.928864][ T4282] device hsr_slave_1 entered promiscuous mode [ 81.935771][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.943748][ T4282] Cannot create hsr debugfs directory [ 81.953009][ T4275] device hsr_slave_0 entered promiscuous mode [ 81.960512][ T4275] device hsr_slave_1 entered promiscuous mode [ 81.967426][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.975136][ T4275] Cannot create hsr debugfs directory [ 82.320917][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.343720][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.359331][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.379993][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.399131][ T4278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.409069][ T4278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.423965][ T4278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.433885][ T4278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.506917][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.517772][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.552533][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.597306][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.632000][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.645811][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.669034][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.679697][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.730203][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.758919][ T4282] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.785192][ T4282] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.797434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.808983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.823715][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.842699][ T4282] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.853849][ T4282] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.879644][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.887881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.898170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.907994][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.915368][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.928198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.975044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.983042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.997155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.008656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.019074][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.026249][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.046874][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.063822][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.077529][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.086971][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.096494][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.135322][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.144740][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.154175][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.163985][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.171136][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.180469][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.189863][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.201929][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.209112][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.217709][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.227282][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.235990][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.244996][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.253634][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.262101][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.285774][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.303710][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.319582][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.328517][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.338455][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.359410][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.392256][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.418384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.438435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.451335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.461858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.476250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.489523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.501034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.518178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.529846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.597450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.610343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.622117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.634568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.649245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.659455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.669576][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 83.675978][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 83.683010][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.690212][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.699712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.708995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.718832][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.726016][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.735271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.743588][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 83.749778][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 83.758324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.768719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.781068][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.818298][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.834153][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 83.847927][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.857795][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.867426][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.876702][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.887308][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.898622][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.929724][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.946763][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.964109][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.986355][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.993574][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.010031][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.018966][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.027738][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.036739][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.048038][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.055282][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.069665][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.079423][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.106425][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.183846][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.191079][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.214700][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.234714][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.254241][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.278873][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.289722][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.302556][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.311888][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.325436][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.336407][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.355009][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.376567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.390143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.416570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.437630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.448680][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.455878][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.464134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.473363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.482150][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.489855][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.498343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.516839][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.530969][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.554025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.569966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.578872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.594664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.616434][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.654121][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.714513][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.732108][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.756366][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.789640][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.808052][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.861191][ T4282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.876801][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.905410][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.914138][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.928990][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.938830][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.954260][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.962960][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.971887][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.979778][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.989511][ T4274] device veth0_vlan entered promiscuous mode [ 85.022238][ T4274] device veth1_vlan entered promiscuous mode [ 85.035040][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.043026][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.051232][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.060870][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.069857][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.077914][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.085875][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.112921][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.146745][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.231309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.254534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.277692][ T4274] device veth0_macvtap entered promiscuous mode [ 85.295280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.314736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.352492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.385144][ T4274] device veth1_macvtap entered promiscuous mode [ 85.412134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.435253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.456115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.479134][ T4278] device veth0_vlan entered promiscuous mode [ 85.506756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.521676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.544211][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.552113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.574757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.591391][ T4278] device veth1_vlan entered promiscuous mode [ 85.609668][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.634318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.649801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.658887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.691806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.702883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.744255][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 85.750356][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 85.776735][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.787895][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.799017][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.808104][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.823545][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 85.829614][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 85.842058][ T4278] device veth0_macvtap entered promiscuous mode [ 85.852878][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.888106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.898263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.913806][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 85.924533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.949488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.977618][ T4278] device veth1_macvtap entered promiscuous mode [ 86.066200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.098266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.125694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.159547][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.170754][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.182438][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.216006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.228214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.247909][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.261537][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.274355][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.319247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.331092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.340622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.349466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.358818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.368451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.378045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.386939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.397330][ T4273] device veth0_vlan entered promiscuous mode [ 86.413834][ T4273] device veth1_vlan entered promiscuous mode [ 86.422074][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.431444][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.440756][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.449650][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.469639][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.482789][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.490230][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.491781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.509586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.518042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.526045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.537403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.594557][ T4275] device veth0_vlan entered promiscuous mode [ 86.601424][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.610727][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.640991][ T4275] device veth1_vlan entered promiscuous mode [ 86.654806][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.662699][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.672356][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.683195][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.692094][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.711577][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.721172][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.752320][ T4273] device veth0_macvtap entered promiscuous mode [ 86.764698][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.772577][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.788930][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.799720][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.808948][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.847727][ T4273] device veth1_macvtap entered promiscuous mode [ 86.889479][ T4282] device veth0_vlan entered promiscuous mode [ 86.920220][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.930181][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.946749][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.961895][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.972887][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.992236][ T4275] device veth0_macvtap entered promiscuous mode [ 87.017634][ T4282] device veth1_vlan entered promiscuous mode [ 87.040912][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.055562][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.068084][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.078711][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.115781][ T4275] device veth1_macvtap entered promiscuous mode [ 87.136814][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.149482][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.201781][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.230771][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.251112][ T4360] loop0: detected capacity change from 0 to 8 [ 87.253682][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.287736][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.310037][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.333334][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.341497][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.361044][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.393261][ T4360] SQUASHFS error: zstd decompression error: 10 [ 87.399700][ T4360] SQUASHFS error: zstd decompression failed, data probably corrupt [ 87.412660][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.421043][ T4360] SQUASHFS error: Failed to read block 0x62b: -5 [ 87.441160][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.442681][ T4360] SQUASHFS error: Unable to read metadata cache entry [629] [ 87.468359][ T4361] SQUASHFS error: Unable to read metadata cache entry [629] [ 87.469734][ T4360] SQUASHFS error: Unable to read directory block [629:ff26] [ 87.493329][ T4361] SQUASHFS error: Unable to read directory block [629:ff26] [ 87.505928][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.518398][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.528441][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.529530][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.552776][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.569783][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.582564][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.596031][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.608226][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.618517][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.630065][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.641032][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.651832][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.664814][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.679776][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.691250][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.706378][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.718831][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.730224][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.751746][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.770963][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.785907][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.798043][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.808009][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.817582][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.831946][ T4282] device veth0_macvtap entered promiscuous mode [ 87.834704][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 87.844402][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 87.852432][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.893981][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.913227][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 87.914219][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 87.941420][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.963007][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.979396][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.990947][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.993440][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 88.028744][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.045463][ T4282] device veth1_macvtap entered promiscuous mode [ 88.060608][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.069928][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.079039][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.088990][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.131405][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.157096][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.167177][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.181396][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.272340][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.293329][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.309672][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.321071][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.336858][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.348977][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.364846][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.379007][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.392684][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.419874][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.432446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.460827][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.485277][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.501304][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.512180][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.522464][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.534977][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.546107][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.556980][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.569236][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.582749][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.593736][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.617536][ T4282] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.632788][ T4282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.650675][ T4282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.660184][ T4282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.672071][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.687716][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.710344][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.764768][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.793832][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.822648][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.874682][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.900178][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.941192][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.986089][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.017080][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.034261][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.042173][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.063583][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.081171][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.093549][ T4319] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.138199][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.157347][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.188530][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.323074][ T4380] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.353553][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 89.366785][ T4319] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 89.376255][ T4319] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.405706][ T4319] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.422950][ T4319] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.434183][ T4319] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.447557][ T4319] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.456833][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.709111][ T4392] loop0: detected capacity change from 0 to 128 [ 89.732692][ T4319] usb 3-1: usb_control_msg returned -32 [ 89.749634][ T4319] usbtmc 3-1:16.0: can't read capabilities [ 89.755970][ T4280] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.833837][ T4392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.861994][ T4392] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.953193][ T4280] usb 5-1: Using ep0 maxpacket: 16 [ 89.975842][ T4280] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 90.005559][ T4280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.020943][ T4280] usb 5-1: Product: syz [ 90.027688][ T4280] usb 5-1: Manufacturer: syz [ 90.032444][ T4280] usb 5-1: SerialNumber: syz [ 90.042028][ T4319] usb 3-1: USB disconnect, device number 2 [ 90.184728][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 90.215042][ T4404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15'. [ 90.233223][ T4352] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.437841][ T4352] usb 4-1: Using ep0 maxpacket: 16 [ 90.480534][ T4352] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 90.490372][ T4280] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 90.495831][ T4352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.507064][ T4352] usb 4-1: Product: syz [ 90.511294][ T4352] usb 4-1: Manufacturer: syz [ 90.516067][ T4352] usb 4-1: SerialNumber: syz [ 90.539678][ T4352] usb 4-1: config 0 descriptor?? [ 90.545353][ T4280] usb 5-1: USB disconnect, device number 2 [ 90.607250][ T4352] gspca_main: spca508-2.14.0 probing 041e:4018 [ 90.779285][ T4352] gspca_spca508: reg_read err -32 [ 90.788596][ T4352] gspca_spca508: reg_read err -32 [ 90.810205][ T4352] gspca_spca508: reg_read err -32 [ 90.901860][ T4417] netlink: 'syz.0.21': attribute type 4 has an invalid length. [ 91.032852][ T4352] gspca_spca508: reg_read err -71 [ 91.051382][ T4352] gspca_spca508: reg write: error -71 [ 91.070036][ T4352] spca508: probe of 4-1:0.0 failed with error -71 [ 91.118578][ T4352] usb 4-1: USB disconnect, device number 2 [ 91.241639][ T4280] kernel write not supported for file /dsp (pid: 4280 comm: kworker/0:3) [ 91.449924][ T4437] loop2: detected capacity change from 0 to 128 [ 91.509311][ T4437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.552283][ T4437] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.876272][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 91.913625][ T128] cfg80211: failed to load regulatory.db [ 92.097179][ T4460] loop1: detected capacity change from 0 to 128 [ 92.142051][ T4460] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.219836][ T4460] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.259150][ T128] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.458003][ T128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.472673][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 92.484590][ T4464] netlink: 6 bytes leftover after parsing attributes in process `syz.0.41'. [ 92.502418][ T128] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.542962][ T128] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 92.607993][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.628926][ T128] usb 5-1: Product: syz [ 92.633352][ T128] usb 5-1: Manufacturer: syz [ 92.638015][ T128] usb 5-1: SerialNumber: syz [ 92.684299][ T128] usb 5-1: config 0 descriptor?? [ 92.699766][ T26] audit: type=1326 audit(1782266168.731:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4465 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c0979ce59 code=0x0 [ 92.736844][ T128] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 92.767094][ T128] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.786063][ T128] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 92.806853][ T128] usb 5-1: media controller created [ 92.846645][ T128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.960026][ T4458] loop2: detected capacity change from 0 to 32768 [ 92.987300][ T4474] loop0: detected capacity change from 0 to 512 [ 92.994333][ T4458] ======================================================= [ 92.994333][ T4458] WARNING: The mand mount option has been deprecated and [ 92.994333][ T4458] and is ignored by this kernel. Remove the mand [ 92.994333][ T4458] option from the mount to silence this warning. [ 92.994333][ T4458] ======================================================= [ 93.032993][ T4474] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.082321][ T4474] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.136318][ T4474] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.45: invalid indirect mapped block 4294967295 (level 0) [ 93.161845][ T4474] EXT4-fs (loop0): Remounting filesystem read-only [ 93.169300][ T4474] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.45: invalid indirect mapped block 4294967295 (level 1) [ 93.193273][ T128] DVB: Unable to find symbol tda10046_attach() [ 93.201245][ T4474] EXT4-fs (loop0): Remounting filesystem read-only [ 93.212917][ T4474] EXT4-fs (loop0): 1 orphan inode deleted [ 93.219257][ T4474] EXT4-fs (loop0): 1 truncate cleaned up [ 93.220252][ T128] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 93.225710][ T4474] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.305313][ T4474] EXT4-fs (loop0): shut down requested (2) [ 93.311658][ T128] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 93.325878][ T4458] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 93.416535][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 93.785112][ T4486] loop0: detected capacity change from 0 to 512 [ 93.856522][ T4278] ocfs2: Unmounting device (7,2) on (node local) [ 93.870308][ T4486] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.936297][ T4486] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 93.953369][ T4486] System zones: 1-12 [ 93.958489][ T128] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 93.971759][ T4486] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.023418][ T4486] EXT4-fs (loop0): 1 truncate cleaned up [ 94.029320][ T4486] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.045415][ T128] usb 5-1: USB disconnect, device number 3 [ 94.097819][ T4489] netlink: 392 bytes leftover after parsing attributes in process `syz.3.51'. [ 94.144913][ T4489] netlink: 58 bytes leftover after parsing attributes in process `syz.3.51'. [ 94.258168][ T4498] loop1: detected capacity change from 0 to 2048 [ 94.283396][ T4321] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.345549][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 94.444400][ T4501] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.505678][ T4321] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 94.520031][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.570428][ T4321] usb 3-1: config 0 descriptor?? [ 94.612246][ T4321] cp210x 3-1:0.0: cp210x converter detected [ 94.742911][ T4501] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 94.755707][ T4501] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 94.769123][ T4501] Remounting filesystem read-only [ 94.797925][ T4321] usb 3-1: cp210x converter now attached to ttyUSB0 [ 94.861014][ T4509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 94.956616][ T4282] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 95.010995][ T4321] usb 3-1: USB disconnect, device number 3 [ 95.046260][ T4321] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 95.074544][ T4321] cp210x 3-1:0.0: device disconnected [ 95.175274][ T4517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 95.209322][ T4517] device dummy0 entered promiscuous mode [ 95.225713][ T4517] device macvlan2 entered promiscuous mode [ 95.243811][ T4517] device dummy0 left promiscuous mode [ 95.653363][ T4523] loop3: detected capacity change from 0 to 2048 [ 95.716052][ T4529] loop2: detected capacity change from 0 to 16 [ 95.754104][ T4523] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.841165][ T4529] erofs: (device loop2): mounted with root inode @ nid 36. [ 95.911000][ T4530] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.108184][ T4523] syz.3.63 (4523) used greatest stack depth: 20064 bytes left [ 96.372253][ T4530] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 96.432949][ T4530] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 96.469642][ T4540] loop2: detected capacity change from 0 to 512 [ 96.509780][ T4530] Remounting filesystem read-only [ 96.531538][ T4273] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 96.603881][ T4540] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.633100][ C0] sched: RT throttling activated [ 96.715760][ T4527] loop1: detected capacity change from 0 to 131072 [ 96.726335][ T4540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.754398][ T4540] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.69: invalid indirect mapped block 4294967295 (level 1) [ 96.780512][ T4540] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.69: invalid indirect mapped block 4294967295 (level 1) [ 96.859741][ T4540] EXT4-fs (loop2): 2 truncates cleaned up [ 96.871532][ T4527] XFS (loop1): Mounting V5 Filesystem [ 96.928957][ T4540] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.055390][ T26] audit: type=1800 audit(1782266173.081:3): pid=4540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.69" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 97.075736][ T4527] XFS (loop1): Starting recovery (logdev: internal) [ 97.105904][ T4540] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.69: bg 0: block 5: invalid block bitmap [ 97.146453][ T26] audit: type=1800 audit(1782266173.121:4): pid=4540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.69" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 97.154113][ T4527] XFS (loop1): Ending recovery (logdev: internal) [ 97.414935][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 97.469645][ T4282] XFS (loop1): Unmounting Filesystem [ 97.801052][ T4567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.80'. [ 97.882481][ T4573] loop4: detected capacity change from 0 to 128 [ 97.969533][ T4573] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.016696][ T4280] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.054921][ T4573] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.102087][ T4578] netlink: 104 bytes leftover after parsing attributes in process `syz.2.85'. [ 98.243395][ T4280] usb 4-1: Using ep0 maxpacket: 32 [ 98.250452][ T4280] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 98.271781][ T4280] usb 4-1: config 0 has no interface number 0 [ 98.286626][ T4280] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 98.345572][ T4280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.370458][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 98.389301][ T4280] usb 4-1: Product: syz [ 98.393953][ T4280] usb 4-1: Manufacturer: syz [ 98.439252][ T4280] usb 4-1: SerialNumber: syz [ 98.457210][ T4587] netlink: 76 bytes leftover after parsing attributes in process `syz.2.89'. [ 98.470317][ T4280] usb 4-1: config 0 descriptor?? [ 98.514738][ T4280] smsc95xx v2.0.0 [ 98.917920][ T4597] netlink: 48 bytes leftover after parsing attributes in process `syz.4.93'. [ 98.927753][ T4280] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 98.959747][ T4280] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 99.184140][ T4605] loop4: detected capacity change from 0 to 2048 [ 99.277942][ T4605] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.395775][ T4280] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 99.432129][ T4280] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 99.490701][ T4280] usb 4-1: USB disconnect, device number 3 [ 100.291330][ T4640] loop5: detected capacity change from 0 to 4095 [ 100.557401][ T4646] loop4: detected capacity change from 0 to 1024 [ 100.628543][ T4646] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.660734][ T4646] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.726355][ T4645] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.114: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.750196][ T4645] EXT4-fs (loop4): Remounting filesystem read-only [ 100.799512][ T4646] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.114: Freeing blocks not in datazone - block = 0, count = 1 [ 100.843049][ T4652] loop1: detected capacity change from 0 to 1024 [ 100.854205][ T4646] EXT4-fs (loop4): Remounting filesystem read-only [ 100.920526][ T4652] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.167705][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 101.358945][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 101.969641][ T4670] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.010754][ T4655] loop0: detected capacity change from 0 to 131072 [ 102.019047][ T4655] XFS: ikeep mount option is deprecated. [ 102.097239][ T4675] Zero length message leads to an empty skb [ 102.172205][ T4679] process 'syz.2.126' launched './file0' with NULL argv: empty string added [ 102.183663][ T4679] Invalid argument reading file caps for ./file0 [ 102.198609][ T4655] XFS (loop0): Mounting V5 Filesystem [ 102.284905][ T4686] loop4: detected capacity change from 0 to 512 [ 102.298812][ T4686] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #13: comm syz.4.119: iget: bad i_size value: 12154757448730 [ 102.313471][ T4686] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.119: couldn't read orphan inode 13 (err -117) [ 102.328834][ T4686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.349131][ T4686] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 102.387589][ T4655] XFS (loop0): Starting recovery (logdev: internal) [ 102.427181][ T4655] XFS (loop0): Ending recovery (logdev: internal) [ 102.506529][ T4691] loop2: detected capacity change from 0 to 1024 [ 102.699661][ T4670] syz.3.124 (4670) used greatest stack depth: 19568 bytes left [ 102.937929][ T4274] XFS (loop0): Unmounting Filesystem [ 102.951145][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 103.155011][ T4699] syz.2.132 sent an empty control message without MSG_MORE. [ 103.290550][ T4701] syz.2.134 uses obsolete (PF_INET,SOCK_PACKET) [ 103.373577][ T4370] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.499251][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 103.563242][ T4370] usb 5-1: Using ep0 maxpacket: 8 [ 103.570577][ T4370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.600962][ T4370] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.629686][ T4370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.647192][ T4370] usb 5-1: config 0 descriptor?? [ 104.075659][ T4370] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 104.243364][ T4280] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.297622][ T4319] usb 5-1: USB disconnect, device number 4 [ 104.453383][ T4280] usb 3-1: Using ep0 maxpacket: 32 [ 104.460635][ T4280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.500215][ T4280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.526424][ T4280] usb 3-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 104.545537][ T4280] usb 3-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 104.564318][ T4280] usb 3-1: Product: syz [ 104.569163][ T4280] usb 3-1: Manufacturer: syz [ 104.597301][ T4280] usb 3-1: config 0 descriptor?? [ 104.723800][ T4739] loop0: detected capacity change from 0 to 2048 [ 104.800522][ T4739] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 104.817574][ T4741] loop1: detected capacity change from 0 to 4096 [ 104.833507][ T4741] EXT4-fs: inline encryption not supported [ 104.855804][ T4741] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 104.883482][ T4741] System zones: 0-5 [ 104.890503][ T4739] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 104.938400][ T4741] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.033205][ T4370] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.087582][ T4280] hid-generic 0003:25DD:F3D2.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 105.148193][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 105.224631][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 105.226024][ T4370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.280085][ T4370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.332997][ T4370] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.363198][ T4370] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.378745][ T4370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.402717][ T4280] usb 3-1: USB disconnect, device number 4 [ 105.422403][ T4370] usb 4-1: config 0 descriptor?? [ 105.630121][ T4751] fido_id[4751]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 105.857491][ T4370] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 105.886115][ T4370] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 106.149978][ T128] usb 4-1: USB disconnect, device number 4 [ 106.193769][ T4762] fido_id[4762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 107.353741][ T4800] loop1: detected capacity change from 0 to 256 [ 108.053361][ T4370] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.194217][ T4798] loop2: detected capacity change from 0 to 32768 [ 108.243218][ T4370] usb 2-1: Using ep0 maxpacket: 8 [ 108.251995][ T4370] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 108.263215][ T4370] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.275695][ T4370] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.289580][ T4798] XFS (loop2): Mounting V5 Filesystem [ 108.295444][ T4370] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.308034][ T4370] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.325027][ T4370] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.346528][ T4370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.412761][ T4798] XFS (loop2): Ending clean mount [ 108.484525][ T4834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 108.569826][ T4370] usb 2-1: usb_control_msg returned -32 [ 108.575859][ T4370] usbtmc 2-1:16.0: can't read capabilities [ 108.804152][ T4841] loop0: detected capacity change from 0 to 256 [ 108.826706][ T4278] XFS (loop2): Unmounting Filesystem [ 108.842898][ T4841] exfat: Deprecated parameter 'utf8' [ 108.859126][ T4841] exfat: Deprecated parameter 'utf8' [ 108.951965][ T4846] usbtmc 2-1:16.0: INDICATOR_PULSE returned 0 [ 108.961327][ T4845] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 108.971673][ T4841] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 109.153463][ T4280] usb 2-1: USB disconnect, device number 2 [ 109.194322][ T4848] capability: warning: `syz.3.186' uses deprecated v2 capabilities in a way that may be insecure [ 109.267523][ T4370] libceph: connect (1)[c::]:6789 error -101 [ 109.278368][ T4370] libceph: mon0 (1)[c::]:6789 connect error [ 109.296042][ T4850] ceph: No mds server is up or the cluster is laggy [ 109.314744][ T4370] libceph: connect (1)[c::]:6789 error -101 [ 109.320928][ T4370] libceph: mon0 (1)[c::]:6789 connect error [ 109.759646][ T4868] Invalid ELF header len 9 [ 110.274189][ T4884] Illegal XDP return value 2833028224 on prog (id 15) dev syz_tun, expect packet loss! [ 110.461989][ T4891] loop0: detected capacity change from 0 to 512 [ 110.517022][ T4891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.530342][ T4889] loop1: detected capacity change from 0 to 4096 [ 110.576865][ T4891] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 110.600309][ T4895] loop4: detected capacity change from 0 to 512 [ 110.613905][ T4896] netlink: 'syz.2.204': attribute type 2 has an invalid length. [ 110.636722][ T4891] EXT4-fs (loop0): orphan cleanup on readonly fs [ 110.654457][ T4891] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 110.662541][ T4891] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 110.682562][ T4891] EXT4-fs (loop0): 1 truncate cleaned up [ 110.688474][ T4891] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.788756][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 110.795217][ T4895] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.804465][ T4895] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.898816][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 111.056943][ T4282] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 111.070153][ T4912] loop4: detected capacity change from 0 to 256 [ 111.095913][ T4912] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.111966][ T4282] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 111.718799][ T4911] loop2: detected capacity change from 0 to 32768 [ 111.805102][ T4911] XFS (loop2): Mounting V5 Filesystem [ 111.926682][ T4911] XFS (loop2): Ending clean mount [ 111.963546][ T4911] XFS (loop2): Quotacheck needed: Please wait. [ 112.003250][ T4370] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.074600][ T4911] XFS (loop2): Quotacheck: Done. [ 112.193016][ T4370] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 112.209486][ T4370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.242915][ T4370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.284347][ T4370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.307539][ T4370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.342129][ T4370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.373468][ T4370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.405512][ T4370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.435412][ T4370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.457310][ T4370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.471093][ T4278] XFS (loop2): Unmounting Filesystem [ 112.489393][ T4370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.502422][ T4370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.553173][ T4370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.566874][ T4370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.598606][ T4370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.610241][ T4370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.621897][ T4321] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.642407][ T4370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.661136][ T4370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.693982][ T4370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.717457][ T26] audit: type=1326 audit(1782266188.751:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.225" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f069899ce59 code=0x0 [ 112.743946][ T4370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.752904][ T4370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.774302][ T4370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.799643][ T4370] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.818457][ T4370] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.835704][ T4370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.847742][ T4370] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 112.857339][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.867417][ T4370] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 112.882461][ T4370] usb 2-1: Product: syz [ 112.888701][ T4370] usb 2-1: Manufacturer: syz [ 112.890984][ T4321] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.901550][ T4370] usb 2-1: SerialNumber: syz [ 112.916877][ T4370] usb 2-1: config 0 descriptor?? [ 112.923169][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.950253][ T4370] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 112.972380][ T4321] usb 5-1: config 0 descriptor?? [ 113.151618][ T27] usb 2-1: USB disconnect, device number 3 [ 113.173404][ T27] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 113.352242][ T4952] loop3: detected capacity change from 0 to 32768 [ 113.378025][ T4952] XFS (loop3): Mounting V5 Filesystem [ 113.387211][ T4321] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 113.416375][ T4321] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input5 [ 113.443991][ T4952] XFS (loop3): Ending clean mount [ 113.463501][ T26] audit: type=1800 audit(1782266189.501:6): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.226" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 113.490388][ T4952] XFS (loop3): User initiated shutdown received. [ 113.497538][ T4952] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 113.523948][ T4952] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 113.609833][ T4321] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 113.639495][ T4273] XFS (loop3): Unmounting Filesystem [ 113.815742][ T27] usb 5-1: USB disconnect, device number 5 [ 114.055483][ T4965] fido_id[4965]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 114.394198][ T4977] loop0: detected capacity change from 0 to 4096 [ 114.793297][ T4280] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.896844][ T4997] loop1: detected capacity change from 0 to 512 [ 114.931632][ T4997] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.949538][ T4997] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.956314][ T4997] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 114.972807][ T4997] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 114.981760][ T4997] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.241: bad orphan inode 768 [ 114.993883][ T4997] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.006111][ T4280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.023352][ T4280] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7F, skipping [ 115.039089][ T4280] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.048733][ T4280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.050197][ T4997] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 115.057201][ T4280] usb 3-1: Product: syz [ 115.071197][ T4280] usb 3-1: Manufacturer: syz [ 115.076114][ T4280] usb 3-1: SerialNumber: syz [ 115.209995][ T4997] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 115.237647][ T5004] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 115.255153][ T5004] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 115.315126][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 115.890800][ T5013] loop1: detected capacity change from 0 to 32768 [ 115.898473][ T5017] loop0: detected capacity change from 0 to 512 [ 115.925728][ T5019] netlink: 'syz.4.247': attribute type 4 has an invalid length. [ 116.010438][ T5013] JBD2: Ignoring recovery information on journal [ 116.103730][ T4280] cdc_ncm 3-1:1.0: bind() failure [ 116.124580][ T5024] capability: warning: `syz.3.249' uses 32-bit capabilities (legacy support in use) [ 116.143257][ T4280] usbtest: probe of 3-1:1.1 failed with error -71 [ 116.174172][ T4280] usb 3-1: USB disconnect, device number 5 [ 116.320967][ T5013] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 116.436776][ T5030] overlayfs: failed to verify origin (newroot/50, ino=277, err=-116) [ 116.453230][ T5030] overlayfs: failed to verify upper root origin [ 116.461514][ T5034] loop4: detected capacity change from 0 to 1024 [ 116.510343][ T5034] EXT4-fs: Ignoring removed bh option [ 116.538178][ T4282] ocfs2: Unmounting device (7,1) on (node local) [ 116.685196][ T5034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 116.694026][ T5034] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.756550][ T5041] loop3: detected capacity change from 0 to 64 [ 116.777792][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 117.122141][ T5052] loop0: detected capacity change from 0 to 512 [ 117.201908][ T4495] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.283246][ T4321] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.504295][ T4321] usb 5-1: Using ep0 maxpacket: 8 [ 117.516624][ T4321] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 117.554240][ T4321] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.573447][ T4321] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.616018][ T4321] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.630304][ T5063] loop3: detected capacity change from 0 to 1764 [ 117.651117][ T4321] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.719995][ T4321] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.766994][ T5064] loop0: detected capacity change from 0 to 4096 [ 117.773724][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.820571][ T5064] EXT4-fs: inline encryption not supported [ 118.012472][ T4321] usb 5-1: GET_CAPABILITIES returned 0 [ 118.019917][ T5071] loop1: detected capacity change from 0 to 2048 [ 118.022027][ T4321] usbtmc 5-1:16.0: can't read capabilities [ 118.071146][ T5071] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 118.374829][ T5064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.393126][ T5064] EXT4-fs (loop0): Test dummy encryption mode enabled [ 118.411321][ T5064] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 118.439094][ T5064] System zones: 0-5 [ 118.461778][ T5064] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.578254][ T5064] fs-verity: sha512 using implementation "sha512-avx2" [ 118.579396][ T5089] usbtmc 5-1:16.0: usb_bulk_msg returned -71 [ 118.635252][ T5091] loop1: detected capacity change from 0 to 1024 [ 118.730052][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 118.785646][ T4321] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.802584][ T27] usb 5-1: USB disconnect, device number 6 [ 118.983243][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 118.992828][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.051460][ T4321] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.081100][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.101069][ T4321] usb 3-1: config 0 descriptor?? [ 119.328014][ T4321] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 119.788009][ T5111] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 119.825330][ T14] usb 3-1: USB disconnect, device number 6 [ 120.243354][ T4280] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 120.263210][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.455052][ T27] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.475074][ T4280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.484942][ T27] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 120.496754][ T4280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.513904][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.527394][ T4280] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 120.531151][ T5126] loop0: detected capacity change from 0 to 1024 [ 120.554129][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 120.566275][ T4280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.577962][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 120.599605][ T27] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.616796][ T27] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.625064][ T4280] usb 5-1: config 0 descriptor?? [ 120.639484][ T27] usb 4-1: Product: syz [ 120.646727][ T27] usb 4-1: Manufacturer: syz [ 120.652440][ T5126] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 120.672542][ T27] cdc_wdm 4-1:1.0: skipping garbage [ 120.687451][ T27] cdc_wdm 4-1:1.0: skipping garbage [ 120.697944][ T27] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 120.705767][ T27] cdc_wdm 4-1:1.0: Unknown control protocol [ 120.815862][ T5122] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.285 (5122) [ 120.897285][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 120.904964][ T5122] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.923461][ T5122] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 120.932420][ T5122] BTRFS info (device loop1): setting nodatacow, compression disabled [ 120.989809][ T5122] BTRFS info (device loop1): turning on flush-on-commit [ 120.998236][ T5122] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 121.008678][ T5122] BTRFS info (device loop1): use lzo compression, level 0 [ 121.016494][ T5122] BTRFS info (device loop1): setting nodatasum [ 121.022895][ T5122] BTRFS info (device loop1): use no compression [ 121.030213][ T5122] BTRFS info (device loop1): trying to use backup root at mount time [ 121.062507][ T5122] BTRFS info (device loop1): max_inline at 0 [ 121.073808][ T4280] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 121.091986][ T5122] BTRFS info (device loop1): using free space tree [ 121.105220][ T4280] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 121.143468][ T4280] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0004/input/input6 [ 121.205662][ T4280] cm6533_jd 0003:0D8C:0022.0004: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 121.224673][ T5148] netlink: 'syz.0.290': attribute type 8 has an invalid length. [ 121.246728][ T5148] netlink: 56 bytes leftover after parsing attributes in process `syz.0.290'. [ 121.263348][ T5148] netlink: 64 bytes leftover after parsing attributes in process `syz.0.290'. [ 121.300980][ T4280] usb 5-1: USB disconnect, device number 7 [ 121.367282][ T56] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 121.431223][ T5122] BTRFS warning (device loop1): couldn't read tree root [ 121.462403][ T5122] BTRFS warning (device loop1): try to load backup roots slot 1 [ 121.481408][ T4328] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 121.501337][ T5122] BTRFS warning (device loop1): couldn't read tree root [ 121.511552][ T5122] BTRFS warning (device loop1): try to load backup roots slot 2 [ 121.528011][ T5122] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 121.542096][ T5122] BTRFS warning (device loop1): couldn't read tree root [ 121.554144][ T5122] BTRFS warning (device loop1): try to load backup roots slot 3 [ 121.618619][ T5122] BTRFS info (device loop1): enabling ssd optimizations [ 121.651485][ T4280] usb 4-1: USB disconnect, device number 5 [ 121.665741][ T5157] fido_id[5157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 121.678137][ T5122] BTRFS info (device loop1): rebuilding free space tree [ 121.854377][ T14] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 121.866779][ T5122] BTRFS info (device loop1): checking UUID tree [ 121.949821][ T26] audit: type=1800 audit(1782266197.981:7): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.285" name="file1" dev="loop1" ino=257 res=0 errno=0 [ 122.099044][ T14] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 122.111812][ T14] usb 3-1: can't read configurations, error -71 [ 122.131984][ T4282] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.484125][ T5171] set_capacity_and_notify: 1 callbacks suppressed [ 122.484141][ T5171] loop3: detected capacity change from 0 to 128 [ 122.504237][ T5171] EXT4-fs: Ignoring removed nobh option [ 122.592044][ T5171] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.662730][ T5168] loop4: detected capacity change from 0 to 32768 [ 122.692829][ T5171] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.814152][ T5166] loop0: detected capacity change from 0 to 32768 [ 122.855693][ T5168] XFS (loop4): Mounting V5 Filesystem [ 122.920117][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 122.986223][ T5168] XFS (loop4): Ending clean mount [ 123.011567][ T5166] XFS (loop0): Mounting V5 Filesystem [ 123.050267][ T5200] loop3: detected capacity change from 0 to 256 [ 123.058130][ T5200] exfat: Deprecated parameter 'namecase' [ 123.064288][ T5200] exfat: Deprecated parameter 'namecase' [ 123.121313][ T5200] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 123.264675][ T5166] XFS (loop0): Ending clean mount [ 123.515177][ T4275] XFS (loop4): Unmounting Filesystem [ 123.533469][ T4274] XFS (loop0): Unmounting Filesystem [ 123.593198][ T126] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.659881][ T5210] loop2: detected capacity change from 0 to 4096 [ 123.771131][ T5210] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 123.833147][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 123.840092][ T126] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 123.899493][ T126] usb 4-1: config 0 has no interface number 0 [ 123.929783][ T126] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 123.983465][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.013296][ T126] usb 4-1: Product: syz [ 124.017589][ T126] usb 4-1: Manufacturer: syz [ 124.022243][ T126] usb 4-1: SerialNumber: syz [ 124.067019][ T126] usb 4-1: config 0 descriptor?? [ 124.086431][ T46] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 124.114151][ T4278] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 124.120576][ T4278] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 124.168168][ T4278] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 124.184311][ T4328] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 124.191725][ T4278] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 124.275642][ T126] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 124.282206][ T126] uvcvideo 4-1:0.31: Entity type for entity ⠉ was not initialized! [ 124.496988][ T126] usb 4-1: USB disconnect, device number 6 [ 124.681513][ T5232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.314'. [ 125.245807][ T4352] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.435067][ T4352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.446488][ T4352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.457902][ T4352] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 125.467721][ T4352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.489186][ T4352] usb 3-1: config 0 descriptor?? [ 125.912905][ T4352] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 125.931517][ T4352] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 125.939174][ T4352] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 125.957036][ T4352] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 125.973206][ T4352] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 125.992373][ T4352] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 126.081068][ T5262] loop0: detected capacity change from 0 to 32768 [ 126.115381][ T5262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.327 (5262) [ 126.162608][ T5270] loop4: detected capacity change from 0 to 64 [ 126.173503][ T5262] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.217231][ T5262] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 126.238457][ T5262] BTRFS info (device loop0): setting nodatasum [ 126.252802][ T5262] BTRFS info (device loop0): force zlib compression, level 3 [ 126.280216][ T5262] BTRFS info (device loop0): turning on flush-on-commit [ 126.313901][ T5262] BTRFS info (device loop0): max_inline at 4096 [ 126.336157][ T5262] BTRFS info (device loop0): using free space tree [ 126.479956][ T5266] loop3: detected capacity change from 0 to 32768 [ 126.519221][ T4352] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 5: -71 [ 126.555167][ T4352] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense calibration info: -71 [ 126.589390][ T5262] BTRFS info (device loop0): enabling ssd optimizations [ 126.594523][ T4352] playstation 0003:054C:0DF2.0005: Failed to get calibration data from DualSense [ 126.667811][ T4352] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 126.697575][ T5266] XFS (loop3): Mounting V5 Filesystem [ 126.725252][ T4352] playstation: probe of 0003:054C:0DF2.0005 failed with error -71 [ 126.755300][ T5266] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 126.786283][ T4352] usb 3-1: USB disconnect, device number 9 [ 126.825900][ T5266] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30 [ 126.944612][ T5266] XFS (loop3): Ending clean mount [ 127.008548][ T4274] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.185812][ T5302] fido_id[5302]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 127.542904][ T4273] XFS (loop3): Unmounting Filesystem [ 127.731086][ T5324] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 128.068843][ T5307] loop1: detected capacity change from 0 to 32768 [ 128.266673][ T5307] XFS (loop1): Mounting V5 Filesystem [ 128.364701][ T5307] XFS (loop1): Ending clean mount [ 128.592197][ T4282] XFS (loop1): Unmounting Filesystem [ 129.193033][ T5352] loop3: detected capacity change from 0 to 40427 [ 129.211534][ T5352] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 129.223032][ T5352] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 129.263573][ T14] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 129.269999][ T5352] F2FS-fs (loop3): invalid crc value [ 129.328090][ T5352] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.473048][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.506538][ T5352] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 129.506971][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.522732][ T5352] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.568307][ T14] usb 3-1: string descriptor 0 read error: -22 [ 129.601351][ T14] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 129.623492][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.758469][ T4273] syz-executor: attempt to access beyond end of device [ 129.758469][ T4273] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 129.973462][ T5175] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.131865][ T5389] loop3: detected capacity change from 0 to 4096 [ 130.177249][ T5175] usb 2-1: Using ep0 maxpacket: 32 [ 130.186004][ T5175] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 130.206010][ T5175] usb 2-1: config 0 has no interface number 0 [ 130.212221][ T5175] usb 2-1: config 0 interface 184 has no altsetting 0 [ 130.250764][ T5175] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 130.253187][ T14] usb 3-1: current rate 8706 is different from the runtime rate 48000 [ 130.280924][ T5175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.300876][ T5175] usb 2-1: Product: syz [ 130.311094][ T5175] usb 2-1: Manufacturer: syz [ 130.330202][ T5175] usb 2-1: SerialNumber: syz [ 130.349440][ T5175] usb 2-1: config 0 descriptor?? [ 130.365525][ T5175] smsc75xx v1.0.0 [ 130.488809][ T14] usb 3-1: USB disconnect, device number 10 [ 130.513151][ T5177] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.703556][ T5177] usb 4-1: Using ep0 maxpacket: 16 [ 130.711529][ T5177] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.742662][ T5177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.761682][ T5177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 130.772029][ T5177] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 130.791863][ T5177] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.820501][ T5177] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 130.836703][ T4969] udevd[4969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.862908][ T5177] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 130.871689][ T5177] usb 4-1: Manufacturer: syz [ 130.885135][ T5395] loop4: detected capacity change from 0 to 2048 [ 130.920304][ T5396] loop0: detected capacity change from 0 to 2048 [ 130.938867][ T5177] usb 4-1: config 0 descriptor?? [ 130.987305][ T5398] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.995206][ T5175] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 131.041039][ T5175] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 131.064310][ T5395] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '..' [ 131.095935][ T5395] Remounting filesystem read-only [ 131.192186][ T5396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 131.222194][ T5396] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.265143][ T5175] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 131.286726][ T5175] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 131.307629][ T5175] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 131.328430][ T5175] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 131.358553][ T5175] usb 2-1: USB disconnect, device number 4 [ 131.383442][ T5406] EXT4-fs (loop0): shut down requested (2) [ 131.413744][ T5406] overlayfs: failed to resolve './bus': -2 [ 131.433165][ T5177] rc_core: IR keymap rc-hauppauge not found [ 131.443518][ T5177] Registered IR keymap rc-empty [ 131.448929][ T5177] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.523213][ T5177] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.558981][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 131.566370][ T5177] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 131.596241][ T5177] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 131.653384][ T5177] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.713377][ T5177] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.743234][ T5177] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.793208][ T5177] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.823471][ T5177] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.863400][ T5177] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.893257][ T5177] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.923372][ T5177] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.963227][ T5177] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.009377][ T5421] device batadv_slave_1 entered promiscuous mode [ 132.013685][ T5177] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.060709][ T5420] device batadv_slave_1 left promiscuous mode [ 132.068780][ T5177] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.124941][ T5177] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 132.153158][ T5177] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 132.201115][ T5177] usb 4-1: USB disconnect, device number 7 [ 132.255700][ T5427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 132.693367][ T14] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 132.770465][ T5437] loop4: detected capacity change from 0 to 1024 [ 132.877831][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.884910][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.900431][ T5416] loop0: detected capacity change from 0 to 40427 [ 132.922937][ T5416] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 132.934622][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 132.941660][ T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 132.964284][ T5416] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 132.972674][ T5416] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 132.981537][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 133.011886][ T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 32949, setting to 1024 [ 133.035109][ T5416] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 133.051062][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 133.078404][ T5416] F2FS-fs (loop0): invalid crc value [ 133.090415][ T14] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.129982][ T5416] F2FS-fs (loop0): Found nat_bits in checkpoint [ 133.160293][ T14] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.203123][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.288739][ T5434] loop1: detected capacity change from 0 to 32768 [ 133.320610][ T5434] (syz.1.377,5434,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.374575][ T5416] F2FS-fs (loop0): Start checkpoint disabled! [ 133.429972][ T5434] (syz.1.377,5434,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.469403][ T14] usb 3-1: GET_CAPABILITIES returned 0 [ 133.475034][ T5416] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 133.482697][ T14] usbtmc 3-1:16.0: can't read capabilities [ 133.492463][ T5416] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 133.515165][ T5434] JBD2: Ignoring recovery information on journal [ 133.665063][ T5434] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 133.684092][ T5177] usb 3-1: USB disconnect, device number 11 [ 133.692481][ T5416] F2FS-fs (loop0) : inject checkpoint error in f2fs_balance_fs of f2fs_vm_page_mkwrite+0x3b4/0x1140 [ 133.870590][ T5434] (syz.1.377,5434,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=20946, name_len=138 [ 134.052327][ T4282] ocfs2: Unmounting device (7,1) on (node local) [ 135.260407][ T26] audit: type=1326 audit(1782266211.281:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.1.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0979ce59 code=0x7ffc0000 [ 135.340588][ T26] audit: type=1326 audit(1782266211.281:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.1.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0979ce59 code=0x7ffc0000 [ 135.453264][ T5470] loop4: detected capacity change from 0 to 65536 [ 135.463705][ T26] audit: type=1326 audit(1782266211.281:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.1.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0979ce59 code=0x7ffc0000 [ 135.488055][ T26] audit: type=1326 audit(1782266211.281:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.1.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1c0979ce59 code=0x7ffc0000 [ 135.513035][ T26] audit: type=1326 audit(1782266211.281:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.1.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0979ce59 code=0x7ffc0000 [ 135.537849][ T26] audit: type=1326 audit(1782266211.331:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.1.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0979ce59 code=0x7ffc0000 [ 135.562241][ T26] audit: type=1326 audit(1782266211.331:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.1.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0979ce59 code=0x7ffc0000 [ 135.586969][ T26] audit: type=1326 audit(1782266211.331:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.1.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0979ce59 code=0x7ffc0000 [ 135.611540][ T5177] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 135.632585][ T5470] XFS (loop4): Mounting V5 Filesystem [ 135.640881][ T26] audit: type=1326 audit(1782266211.331:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.1.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c0979ce59 code=0x7ffc0000 [ 135.667678][ T26] audit: type=1326 audit(1782266211.331:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.1.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0979ce59 code=0x7ffc0000 [ 135.729577][ T5470] XFS (loop4): Ending clean mount [ 135.738964][ T5470] XFS (loop4): syz.4.391 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 135.815240][ T5493] loop1: detected capacity change from 0 to 512 [ 135.835227][ T5177] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.853543][ T5493] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.853809][ T5177] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 135.875142][ T5177] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.886237][ T5177] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.912331][ T5177] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.914974][ T4275] XFS (loop4): Unmounting Filesystem [ 135.932144][ T5177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.955533][ T5177] usb 1-1: Product: syz [ 135.964018][ T5493] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.398: bad orphan inode 131083 [ 135.974987][ T5177] usb 1-1: Manufacturer: syz [ 135.981921][ T5177] usb 1-1: SerialNumber: syz [ 136.002458][ T5493] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.038499][ T5468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.232102][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 136.407094][ T5499] loop1: detected capacity change from 0 to 256 [ 136.696358][ T5508] loop1: detected capacity change from 0 to 64 [ 136.713939][ T5508] hfs: unable to parse mount options [ 136.964726][ T5516] mmap: syz.1.405 (5516) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.074796][ T5177] cdc_ncm 1-1:1.0: bind() failure [ 137.099744][ T5177] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 137.139499][ T5177] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 137.148462][ T5177] usbtest: probe of 1-1:1.1 failed with error -71 [ 137.186324][ T5177] usb 1-1: USB disconnect, device number 2 [ 137.341913][ T5524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 137.361270][ T5526] loop1: detected capacity change from 0 to 128 [ 137.472363][ T5530] loop3: detected capacity change from 0 to 512 [ 137.566710][ T5530] EXT4-fs (loop3): Test dummy encryption mode enabled [ 137.676939][ T5530] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.413: inode #1: comm syz.3.413: iget: illegal inode # [ 137.718635][ T5538] loop0: detected capacity change from 0 to 64 [ 137.743002][ T5538] hfs: hfs: Invalid key length: 94 [ 137.772581][ T5530] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.413: error while reading EA inode 1 err=-117 [ 137.828237][ T5530] EXT4-fs (loop3): 1 orphan inode deleted [ 137.863630][ T4344] ------------[ cut here ]------------ [ 137.869174][ T4344] kernel BUG at fs/hfs/inode.c:449! [ 137.881973][ T5541] loop2: detected capacity change from 0 to 2048 [ 137.903400][ T5530] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 137.922325][ T4344] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 137.928495][ T4344] CPU: 0 PID: 4344 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 137.936101][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.946292][ T4344] Workqueue: writeback wb_workfn (flush-7:0) [ 137.952359][ T4344] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 137.957964][ T4344] Code: 87 ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 91 2e 87 ff e9 43 fe ff ff e8 d7 06 36 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 137.977632][ T4344] RSP: 0018:ffffc900040373a0 EFLAGS: 00010293 [ 137.983756][ T4344] RAX: ffffffff824c1a39 RBX: ffff8880285a2898 RCX: ffff8880267e8000 [ 137.991875][ T4344] RDX: 0000000000000000 RSI: ffffffff8cd25960 RDI: 0000000000000000 [ 137.999989][ T4344] RBP: ffffc90004037530 R08: ffff8880267e8000 R09: 0000000000000003 [ 138.008020][ T4344] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 138.016044][ T4344] R13: 1ffff92000806e78 R14: 0000000000000000 R15: ffff8880285a2858 [ 138.024072][ T4344] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 138.033249][ T4344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.039885][ T4344] CR2: 00007f1c099e8158 CR3: 000000005bab8000 CR4: 00000000003526f0 [ 138.047917][ T4344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.055945][ T4344] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.063969][ T4344] Call Trace: [ 138.067301][ T4344] [ 138.070041][ T5530] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #13: comm syz.3.413: corrupted inode contents [ 138.070262][ T4344] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 138.087421][ T4344] ? __writeback_single_inode+0x4bc/0x1170 [ 138.093301][ T4344] ? __rwlock_init+0x140/0x140 [ 138.098127][ T4344] __writeback_single_inode+0x76c/0x1170 [ 138.103829][ T4344] writeback_sb_inodes+0xad5/0x17f0 [ 138.109101][ T4344] ? queue_io+0x570/0x570 [ 138.113493][ T4344] ? move_expired_inodes+0x722/0x770 [ 138.118869][ T4344] ? rcu_is_watching+0x11/0xa0 [ 138.123695][ T4344] ? queue_io+0x37a/0x570 [ 138.128101][ T4344] wb_writeback+0x470/0xd40 [ 138.132670][ T4344] ? percpu_ref_tryget+0x250/0x250 [ 138.137845][ T4344] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.143892][ T4344] ? __lock_acquire+0x7bd0/0x7bd0 [ 138.148985][ T4344] ? _raw_spin_unlock_irq+0x1f/0x40 [ 138.154257][ T4344] wb_workfn+0x423/0xee0 [ 138.158569][ T4344] ? inode_wait_for_writeback+0x220/0x220 [ 138.164362][ T4344] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.170419][ T4344] ? __lock_acquire+0x7bd0/0x7bd0 [ 138.175600][ T4344] ? read_lock_is_recursive+0x10/0x10 [ 138.181036][ T4344] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 138.186987][ T4344] ? _raw_spin_unlock+0x40/0x40 [ 138.191894][ T4344] ? _raw_spin_unlock_irq+0x1f/0x40 [ 138.197158][ T4344] ? process_one_work+0x7b4/0x1160 [ 138.202338][ T4344] process_one_work+0x8ab/0x1160 [ 138.207337][ T4344] ? worker_detach_from_pool+0x240/0x240 [ 138.213030][ T4344] ? _raw_spin_lock_irq+0xb7/0xf0 [ 138.218115][ T4344] ? _raw_spin_lock_irqsave+0x100/0x100 [ 138.223737][ T4344] ? wq_worker_running+0x97/0x190 [ 138.228818][ T4344] worker_thread+0xaf5/0x12a0 [ 138.233552][ T4344] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 138.239498][ T4344] kthread+0x29d/0x330 [ 138.243603][ T4344] ? worker_clr_flags+0x1a0/0x1a0 [ 138.248661][ T4344] ? kthread_blkcg+0xd0/0xd0 [ 138.253316][ T4344] ret_from_fork+0x1f/0x30 [ 138.257775][ T4344] [ 138.260826][ T4344] Modules linked in: [ 138.271160][ T5541] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 138.283907][ T5530] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #13: comm syz.3.413: mark_inode_dirty error [ 138.294024][ T4344] ---[ end trace 0000000000000000 ]--- [ 138.300778][ T4344] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 138.311120][ T5530] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.413: invalid indirect mapped block 234881024 (level 0) [ 138.326742][ T5541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.335991][ T4344] Code: 87 ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 91 2e 87 ff e9 43 fe ff ff e8 d7 06 36 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 138.357904][ T4344] RSP: 0018:ffffc900040373a0 EFLAGS: 00010293 [ 138.366209][ T4344] RAX: ffffffff824c1a39 RBX: ffff8880285a2898 RCX: ffff8880267e8000 [ 138.379559][ T5530] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #13: comm syz.3.413: corrupted inode contents [ 138.403242][ T4344] RDX: 0000000000000000 RSI: ffffffff8cd25960 RDI: 0000000000000000 [ 138.411782][ T4344] RBP: ffffc90004037530 R08: ffff8880267e8000 R09: 0000000000000003 [ 138.423579][ T4344] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 138.431949][ T5530] EXT4-fs error (device loop3): ext4_truncate:4325: inode #13: comm syz.3.413: mark_inode_dirty error [ 138.447399][ T4344] R13: 1ffff92000806e78 R14: 0000000000000000 R15: ffff8880285a2858 [ 138.473135][ T4344] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 138.482521][ T5530] EXT4-fs error (device loop3) in ext4_setattr:5695: Corrupt filesystem [ 138.502187][ T4344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.510110][ T5547] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #13: comm syz.3.413: corrupted inode contents [ 138.524068][ T4344] CR2: 00007f1c099e8158 CR3: 000000005bab8000 CR4: 00000000003506f0 [ 138.532214][ T4344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.542173][ T5547] EXT4-fs error (device loop3): ext4_rename:3994: inode #13: comm syz.3.413: mark_inode_dirty error [ 138.554292][ T4344] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.562345][ T4344] Kernel panic - not syncing: Fatal exception [ 138.569017][ T4344] Kernel Offset: disabled [ 138.573363][ T4344] Rebooting in 86400 seconds..