last executing test programs: 39.232687553s ago: executing program 0 (id=86): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 38.864164743s ago: executing program 0 (id=89): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff038}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x12, 0xffff}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@mpls_uc={0x8847, {[], @ipv4=@icmp={{0x5, 0x4, 0x1, 0x1e, 0x30, 0x66, 0x0, 0x3, 0x1, 0x0, @private=0xa010100, @rand_addr=0x64010101}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3c, 0x40db, 0x65, 0x9, 0x9, 0x1, 0x7, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}}, 0x0) 38.53383699s ago: executing program 0 (id=92): r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 38.093526213s ago: executing program 0 (id=94): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$eJzs282O0lAYxvGnlALi99fGlYkL3QiKbtzJBXgD7ghUQixqxA3ExHgpcyfcydwAJDO7WU0nLWUCpMBpOzOF4f9LgDc5fc45JD1wzqICcLAehe+WLDlh5fv+v5eSvn6RVMx5cgCula9zH8Chsk/yngGAfEybdrgPGFvS8enf9iR6OYb7h2mzMCsqkhbyJdP8fyv8fFGUJgv5ctTl1v3L0Sz/Wsv5OwnHr67kq1ty1mV+9v3fvFrO35V0T9J9SQ8kPYzOWo8lPYkZv7My/nPD+QNZBHdfLWs+QwfB6vnW89x3cY329rwT5d/HNy/8hIxjLyhF+YbhfNflP6TMl6N8rf3T68S0F1L2C5go5Lz+benMX13/n83zxc3rH8AGg+Hoe8vz3N8JCicsylEPCeLB5QnHosijqMQ0OSnvlp0ugr+vHZiGaTFftTc5FoDbqv6n/6s+GI7e9vqtrtt1fzQ+fpofu8NzeX3t6RzAnlvenAMAAAAAAAAAAAAAgH30VNKzNEHTB/wAAAAA7IyrfWbIkRT/2B8AAAAAAAAAAAAAAAAAAACA7C4CAAD//3Y4Qng=") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 37.312299734s ago: executing program 0 (id=100): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xa6, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x1000000, 0x0, 0x11}, 0x0) 36.061403989s ago: executing program 0 (id=107): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f0000000300)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_force}, {@flushoncommit}, {@skip_balance}, {@max_inline={'max_inline', 0x3d, [0x38, 0x31, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510f, &(0x7f0000005140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000001380)={&(0x7f0000000080)=[{&(0x7f00000001c0)='t', 0x1}], 0x1, 0xc1, 0x0, 0x0, 0xe1f1, 0x9, 0x5}) 35.209021314s ago: executing program 32 (id=107): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f0000000300)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_force}, {@flushoncommit}, {@skip_balance}, {@max_inline={'max_inline', 0x3d, [0x38, 0x31, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510f, &(0x7f0000005140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000001380)={&(0x7f0000000080)=[{&(0x7f00000001c0)='t', 0x1}], 0x1, 0xc1, 0x0, 0x0, 0xe1f1, 0x9, 0x5}) 5.74896438s ago: executing program 3 (id=238): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@barrier}, {@errors_remount}, {@resgid}, {@barrier}, {@auto_da_alloc}, {@nodelalloc}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x20842, 0x84) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000100)={0xa, 0x4}, 0xc) 4.838274168s ago: executing program 3 (id=242): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000680)={0x5, 0x2}) 4.281603067s ago: executing program 3 (id=243): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x21, 0x23d, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x440, 0x164) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)) 3.525509016s ago: executing program 3 (id=246): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 3.247627151s ago: executing program 2 (id=247): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @dev, 0xfffffffc}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x4000080) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 2.856638231s ago: executing program 2 (id=250): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000800)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x48061}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4011}}], 0x2, 0x444) 2.776819865s ago: executing program 4 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2.662081821s ago: executing program 2 (id=252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8015}, 0x800) 2.469978452s ago: executing program 4 (id=254): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2084) writev(r0, &(0x7f00000036c0)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f00000034c0)="03", 0x1}], 0x2) 2.442281893s ago: executing program 3 (id=255): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000700)={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0}) 2.361367877s ago: executing program 2 (id=256): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 2.219056584s ago: executing program 4 (id=257): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000001f40), &(0x7f00000022c0)=0x30) 2.213152285s ago: executing program 1 (id=258): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes256, 0x10, '\x00', @auto="60c6bb8c0717abdeeb31ffb66731e433"}) 2.009463515s ago: executing program 4 (id=259): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 1.762903088s ago: executing program 4 (id=260): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.581018918s ago: executing program 1 (id=261): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 1.325524211s ago: executing program 2 (id=262): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp949,errors=remount-ro,utf8,errors=remount-ro,dmask=00000000000000000000003,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="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"/308], 0x1, 0x152b, &(0x7f0000002f80)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.066315795s ago: executing program 1 (id=263): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf4240}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x3, 0x9, 0x0, 0xfffffffffffffffc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x1010, &(0x7f0000001880)=""/4112, 0x41100, 0x28}, 0x94) 616.468578ms ago: executing program 1 (id=264): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) 356.217932ms ago: executing program 1 (id=265): r0 = socket$inet(0x2, 0x2, 0x1) readv(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/98, 0x62}], 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x0) 356.108782ms ago: executing program 2 (id=266): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 102.411575ms ago: executing program 1 (id=267): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001200010000000000000000000a0300004e234e2200000100ffff00"/56, @ANYRES32=0x0, @ANYBLOB="0500000003000000080000000000000008000300"], 0x54}}, 0x20004010) 38.156088ms ago: executing program 4 (id=268): syz_mount_image$btrfs(&(0x7f0000000180), &(0x7f0000005140)='./file2\x00', 0x8, &(0x7f0000000380)={[{}, {@nossd}, {@nodatasum}, {@nossd}, {@notreelog}]}, 0x1, 0x50f1, &(0x7f000000f3c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f80)={0x2020}, 0x2020) 0s ago: executing program 3 (id=269): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 80.468392][ T5756] cgroup: Unknown subsys name 'net' [ 80.621543][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.197138][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.154200][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.166343][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.179550][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.191855][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.205276][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.217175][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.228249][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.240051][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.248345][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.264754][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.282926][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.292947][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.313862][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.325867][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.336687][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.350871][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.351306][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.363430][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.376796][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.385333][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.407989][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.421023][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.438708][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.455210][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.042295][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 86.168967][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 86.188897][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 86.259150][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 86.383685][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.395872][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.406881][ T5767] bridge_slave_0: entered allmulticast mode [ 86.416552][ T5767] bridge_slave_0: entered promiscuous mode [ 86.451131][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.463072][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.473439][ T5767] bridge_slave_1: entered allmulticast mode [ 86.485313][ T5767] bridge_slave_1: entered promiscuous mode [ 86.569193][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.581574][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.602103][ T5770] bridge_slave_0: entered allmulticast mode [ 86.613205][ T5770] bridge_slave_0: entered promiscuous mode [ 86.631535][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.645811][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.656559][ T5768] bridge_slave_0: entered allmulticast mode [ 86.669756][ T5768] bridge_slave_0: entered promiscuous mode [ 86.685614][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.706577][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.718877][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.731086][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.741868][ T5770] bridge_slave_1: entered allmulticast mode [ 86.751183][ T5770] bridge_slave_1: entered promiscuous mode [ 86.789245][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.802131][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.814298][ T5768] bridge_slave_1: entered allmulticast mode [ 86.827134][ T5768] bridge_slave_1: entered promiscuous mode [ 86.878282][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.887820][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.898012][ T5776] bridge_slave_0: entered allmulticast mode [ 86.907498][ T5776] bridge_slave_0: entered promiscuous mode [ 86.941207][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.953352][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.962411][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.974156][ T5776] bridge_slave_1: entered allmulticast mode [ 86.985760][ T5776] bridge_slave_1: entered promiscuous mode [ 87.012467][ T5767] team0: Port device team_slave_0 added [ 87.026650][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.066512][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.084000][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.096652][ T5767] team0: Port device team_slave_1 added [ 87.158276][ T5770] team0: Port device team_slave_0 added [ 87.172441][ T5770] team0: Port device team_slave_1 added [ 87.186181][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.238692][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.268478][ T5768] team0: Port device team_slave_0 added [ 87.277471][ T788] cfg80211: failed to load regulatory.db [ 87.287729][ T5768] team0: Port device team_slave_1 added [ 87.297825][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.307713][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.341118][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.358507][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.368585][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.407445][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.471426][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.482059][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.515062][ T5084] Bluetooth: hci0: command tx timeout [ 87.520295][ T5780] Bluetooth: hci2: command tx timeout [ 87.527292][ T5784] Bluetooth: hci1: command tx timeout [ 87.535541][ T5773] Bluetooth: hci3: command tx timeout [ 87.551099][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.568771][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.578901][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.616793][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.641107][ T5776] team0: Port device team_slave_0 added [ 87.665343][ T5776] team0: Port device team_slave_1 added [ 87.709698][ T5767] hsr_slave_0: entered promiscuous mode [ 87.718945][ T5767] hsr_slave_1: entered promiscuous mode [ 87.730186][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.740511][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.775862][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.818820][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.828056][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.863340][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.880765][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.889597][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.929462][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.948492][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.957902][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.994338][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.095219][ T5776] hsr_slave_0: entered promiscuous mode [ 88.105899][ T5776] hsr_slave_1: entered promiscuous mode [ 88.115842][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.126865][ T5776] Cannot create hsr debugfs directory [ 88.168145][ T5770] hsr_slave_0: entered promiscuous mode [ 88.180118][ T5770] hsr_slave_1: entered promiscuous mode [ 88.190992][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.203653][ T5770] Cannot create hsr debugfs directory [ 88.291259][ T5768] hsr_slave_0: entered promiscuous mode [ 88.299628][ T5768] hsr_slave_1: entered promiscuous mode [ 88.309103][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.321043][ T5768] Cannot create hsr debugfs directory [ 88.851085][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.881322][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.902406][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.932906][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.044111][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.072989][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.089111][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.113169][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.289926][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.317205][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.341762][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.358111][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.491845][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.525337][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.556119][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.591199][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.606474][ T5773] Bluetooth: hci1: command tx timeout [ 89.606559][ T5780] Bluetooth: hci0: command tx timeout [ 89.615079][ T5773] Bluetooth: hci3: command tx timeout [ 89.621892][ T5780] Bluetooth: hci2: command tx timeout [ 89.730152][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.828529][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.886026][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.899509][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.918489][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.928996][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.949281][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.999157][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.077278][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.087389][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.140631][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.151185][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.180955][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.209289][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.244895][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.306864][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.416261][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.426907][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.489988][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.529114][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.539751][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.591261][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.609011][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.682557][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.692063][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.041265][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.129126][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.232000][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.378240][ T5767] veth0_vlan: entered promiscuous mode [ 91.489582][ T5776] veth0_vlan: entered promiscuous mode [ 91.518138][ T5767] veth1_vlan: entered promiscuous mode [ 91.588503][ T5776] veth1_vlan: entered promiscuous mode [ 91.673196][ T5780] Bluetooth: hci2: command tx timeout [ 91.676672][ T5773] Bluetooth: hci3: command tx timeout [ 91.693379][ T5780] Bluetooth: hci0: command tx timeout [ 91.697131][ T5084] Bluetooth: hci1: command tx timeout [ 91.725209][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.796900][ T5767] veth0_macvtap: entered promiscuous mode [ 91.811989][ T5767] veth1_macvtap: entered promiscuous mode [ 91.854627][ T5776] veth0_macvtap: entered promiscuous mode [ 91.888614][ T5776] veth1_macvtap: entered promiscuous mode [ 91.907288][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.999321][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.018488][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.051257][ T5768] veth0_vlan: entered promiscuous mode [ 92.072349][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.086235][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.101080][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.113422][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.137262][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.162308][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.180899][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.205525][ T5768] veth1_vlan: entered promiscuous mode [ 92.261936][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.278775][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.295451][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.312083][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.324717][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.335857][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.348556][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.523902][ T5770] veth0_vlan: entered promiscuous mode [ 92.556601][ T5770] veth1_vlan: entered promiscuous mode [ 92.626773][ T5768] veth0_macvtap: entered promiscuous mode [ 92.666069][ T5768] veth1_macvtap: entered promiscuous mode [ 92.687352][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.702265][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.717911][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.730517][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.748413][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.767053][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.783804][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.821165][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.837623][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.852778][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.867855][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.887640][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.914528][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.927384][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.940382][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.956104][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.992201][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.021879][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.057294][ T5770] veth0_macvtap: entered promiscuous mode [ 93.101935][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.103592][ T5770] veth1_macvtap: entered promiscuous mode [ 93.120571][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.163935][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.194255][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.236752][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.270413][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.287231][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.305821][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.322003][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.336523][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.352230][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.391976][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.413892][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.430502][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.451846][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.467580][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.483905][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.515094][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.550587][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.554615][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.578685][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.583521][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.592100][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.619443][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.636826][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.679684][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.754333][ T5084] Bluetooth: hci1: command tx timeout [ 93.767146][ T5084] Bluetooth: hci3: command tx timeout [ 93.772760][ T5773] Bluetooth: hci0: command tx timeout [ 93.775259][ T5084] Bluetooth: hci2: command tx timeout [ 94.064295][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.111355][ T5843] syz.0.1[5843]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.118348][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.252084][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.282993][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.347789][ T5843] loop0: detected capacity change from 0 to 4096 [ 94.565097][ T5847] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.893062][ T5843] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 94.937364][ T5850] loop2: detected capacity change from 0 to 1024 [ 94.963998][ T5843] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 95.072560][ T5843] Remounting filesystem read-only [ 95.126044][ T5843] NILFS (loop0): error -5 truncating bmap (ino=12) [ 95.285331][ T5768] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 95.342938][ T5768] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 95.381946][ T5768] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 95.414397][ T5768] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 95.457603][ T5768] NILFS (loop0): discard dirty block: blocknr=14, size=4096 [ 95.491165][ T5768] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 95.557615][ T5768] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 95.598669][ T5768] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 95.640929][ T5768] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 95.688138][ T5768] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 95.692012][ T5845] loop3: detected capacity change from 0 to 32768 [ 95.702408][ T5768] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 95.732047][ T5768] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 95.807742][ T5768] NILFS (loop0): discard dirty block: blocknr=28, size=4096 [ 95.818312][ T5768] NILFS (loop0): discard dirty page: offset=4096, ino=3 [ 95.836636][ T5768] NILFS (loop0): discard dirty block: blocknr=29, size=4096 [ 95.849919][ T5768] NILFS (loop0): discard dirty page: offset=270336, ino=3 [ 95.864156][ T5768] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 95.933510][ T5845] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.104056][ T5845] XFS (loop3): Ending clean mount [ 96.319138][ T5866] loop0: detected capacity change from 0 to 1024 [ 96.354029][ T5866] ======================================================= [ 96.354029][ T5866] WARNING: The mand mount option has been deprecated and [ 96.354029][ T5866] and is ignored by this kernel. Remove the mand [ 96.354029][ T5866] option from the mount to silence this warning. [ 96.354029][ T5866] ======================================================= [ 96.459851][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.674237][ T5866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.752954][ T5866] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.843501][ T5852] loop1: detected capacity change from 0 to 32768 [ 97.075792][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 97.164878][ T5854] loop2: detected capacity change from 0 to 32768 [ 97.214660][ T5854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.9 (5854) [ 97.412386][ T5854] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.476020][ T5854] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 97.552853][ T5854] BTRFS info (device loop2): setting nodatasum [ 97.618844][ T5854] BTRFS info (device loop2): force zlib compression, level 3 [ 97.680014][ T5854] BTRFS info (device loop2): turning on flush-on-commit [ 97.709068][ T5854] BTRFS info (device loop2): max_inline at 4096 [ 97.739443][ T5854] BTRFS info (device loop2): using free space tree [ 97.764041][ T5104] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.037138][ T5104] usb 1-1: Using ep0 maxpacket: 8 [ 98.072444][ T5104] usb 1-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 98.095172][ T5854] BTRFS info (device loop2): enabling ssd optimizations [ 98.139378][ T5104] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 98.207816][ T5104] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.252740][ T5104] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.272850][ T5104] usb 1-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 98.314950][ T5104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.370290][ T5104] usb 1-1: config 0 descriptor?? [ 98.501345][ T5770] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.519491][ T5871] loop3: detected capacity change from 0 to 32768 [ 98.543775][ T5871] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.11 (5871) [ 98.618707][ T5871] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 98.677422][ T5871] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 98.704021][ T5871] BTRFS info (device loop3): enabling auto defrag [ 98.741871][ T5871] BTRFS info (device loop3): use no compression [ 98.788734][ T5871] BTRFS info (device loop3): force clearing of disk cache [ 98.819491][ T5871] BTRFS info (device loop3): max_inline at 4096 [ 98.832971][ T5877] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (5877) [ 98.874271][ T5871] BTRFS info (device loop3): disabling free space tree [ 98.977962][ T5104] wacom 0003:056A:00F4.0001: unknown main item tag 0x2 [ 98.989845][ T5104] wacom 0003:056A:00F4.0001: unknown main item tag 0x0 [ 99.026240][ T5104] wacom 0003:056A:00F4.0001: hidraw0: USB HID vff.fc Device [HID 056a:00f4] on usb-dummy_hcd.0-1/input0 [ 99.107913][ T5871] BTRFS info (device loop3): enabling ssd optimizations [ 99.182812][ T5871] BTRFS info (device loop3): auto enabling async discard [ 99.239792][ T5871] BTRFS info (device loop3): rebuilding free space tree [ 99.350181][ T5880] loop1: detected capacity change from 0 to 32768 [ 99.357807][ T5917] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 99.389322][ T5917] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 99.401279][ T5917] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 99.403349][ T5871] BTRFS info (device loop3): disabling free space tree [ 99.450757][ T5917] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 99.471733][ T5917] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 99.480021][ T5871] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.498387][ T9] usb 1-1: USB disconnect, device number 2 [ 99.515191][ T5871] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.563454][ T5917] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 99.631764][ T5880] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.662736][ T5917] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 99.767796][ T5917] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 99.788781][ T5917] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 99.811560][ T5880] XFS (loop1): Ending clean mount [ 99.856101][ T5880] XFS (loop1): Quotacheck needed: Please wait. [ 99.885154][ T5917] netlink: 'syz.2.16': attribute type 3 has an invalid length. [ 99.910765][ T5776] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.042315][ T5880] XFS (loop1): Quotacheck: Done. [ 100.384102][ T5767] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.454050][ T5941] loop0: detected capacity change from 0 to 8192 [ 101.505880][ T5941] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 101.540863][ T5941] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 101.556414][ T5941] REISERFS (device loop0): using ordered data mode [ 101.565970][ T5941] reiserfs: using flush barriers [ 101.578996][ T5941] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.604165][ T5941] REISERFS (device loop0): checking transaction log (loop0) [ 101.878543][ T35] kernel write not supported for file /input/event2 (pid: 35 comm: kworker/1:1) [ 102.061145][ T5961] loop2: detected capacity change from 0 to 2048 [ 102.086317][ T5941] REISERFS (device loop0): Using tea hash to sort names [ 102.115580][ T5941] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 102.217907][ T5961] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.395123][ T5965] loop1: detected capacity change from 0 to 2048 [ 102.556063][ T5969] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.827496][ T5968] loop3: detected capacity change from 0 to 8192 [ 102.873604][ T5968] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 102.894253][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.925454][ T5968] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 103.016794][ T5968] REISERFS (device loop3): using ordered data mode [ 103.040021][ T5976] tipc: Started in network mode [ 103.047175][ T5968] reiserfs: using flush barriers [ 103.057104][ T5976] tipc: Node identity , cluster identity 4711 [ 103.070340][ T5968] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.093412][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.118376][ T5968] REISERFS (device loop3): checking transaction log (loop3) [ 103.203791][ T5968] REISERFS (device loop3): Using rupasov hash to sort names [ 103.236614][ T5979] loop0: detected capacity change from 0 to 256 [ 103.262977][ T5968] REISERFS (device loop3): using 3.5.x disk format [ 103.276698][ T5968] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 103.309991][ T35] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.319067][ T5968] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 103.368870][ T5968] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 103.388371][ T5979] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 103.415375][ T5968] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 103.543215][ T35] usb 2-1: Using ep0 maxpacket: 8 [ 103.577963][ T35] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 103.627837][ T35] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.665524][ T35] usb 2-1: Product: syz [ 103.684026][ T35] usb 2-1: Manufacturer: syz [ 103.704049][ T35] usb 2-1: SerialNumber: syz [ 103.747480][ T35] usb 2-1: config 0 descriptor?? [ 103.795448][ T35] gspca_main: sq930x-2.14.0 probing 2770:930c [ 103.815225][ T5982] tipc: Started in network mode [ 103.842843][ T5982] tipc: Node identity , cluster identity 4711 [ 103.924144][ T5968] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 103.950405][ T5968] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 104.410260][ T5986] warning: `syz.3.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.452842][ T35] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 104.460801][ T35] sq930x: probe of 2-1:0.0 failed with error -71 [ 104.506031][ T35] usb 2-1: USB disconnect, device number 2 [ 104.640229][ T5980] loop2: detected capacity change from 0 to 40427 [ 104.702343][ T5980] F2FS-fs (loop2): invalid crc value [ 104.730024][ T5980] F2FS-fs (loop2): Found nat_bits in checkpoint [ 104.993159][ T5996] loop3: detected capacity change from 0 to 64 [ 105.006125][ T5980] F2FS-fs (loop2): Start checkpoint disabled! [ 105.113760][ T5980] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 105.191067][ T5998] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.704423][ T12] kworker/u4:1: attempt to access beyond end of device [ 105.704423][ T12] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.749088][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 105.773454][ T6008] binder: 6007:6008 ioctl c00c620f 200000000500 returned -22 [ 106.082864][ T6014] validate_nla: 44 callbacks suppressed [ 106.082880][ T6014] netlink: 'syz.0.56': attribute type 3 has an invalid length. [ 106.122868][ T6017] loop1: detected capacity change from 0 to 16 [ 106.139994][ T6014] netlink: 'syz.0.56': attribute type 3 has an invalid length. [ 106.155651][ T6014] netlink: 'syz.0.56': attribute type 3 has an invalid length. [ 106.172874][ T6014] netlink: 'syz.0.56': attribute type 3 has an invalid length. [ 106.194069][ T6014] netlink: 'syz.0.56': attribute type 3 has an invalid length. [ 106.205004][ T6014] netlink: 'syz.0.56': attribute type 3 has an invalid length. [ 106.211020][ T6017] erofs: (device loop1): mounted with root inode @ nid 36. [ 106.237855][ T6014] netlink: 'syz.0.56': attribute type 3 has an invalid length. [ 106.260801][ T6014] netlink: 'syz.0.56': attribute type 3 has an invalid length. [ 106.286273][ T6014] netlink: 'syz.0.56': attribute type 3 has an invalid length. [ 106.337348][ T6014] netlink: 'syz.0.56': attribute type 3 has an invalid length. [ 106.363987][ T6017] syz.1.57: attempt to access beyond end of device [ 106.363987][ T6017] loop1: rw=0, sector=34359214080, nr_sectors = 8 limit=16 [ 106.393780][ T6017] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 106.959796][ T6010] loop3: detected capacity change from 0 to 32768 [ 106.987770][ T6010] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.54 (6010) [ 107.032819][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.084728][ T6010] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.101000][ T6010] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 107.126183][ T6010] BTRFS info (device loop3): using free space tree [ 107.258679][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 107.311915][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 107.342468][ T6010] BTRFS info (device loop3): enabling ssd optimizations [ 107.381678][ T9] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 107.393692][ T6010] BTRFS info (device loop3): auto enabling async discard [ 107.407118][ T6048] loop2: detected capacity change from 0 to 512 [ 107.425564][ T9] usb 2-1: Product: syz [ 107.459929][ T9] usb 2-1: Manufacturer: syz [ 107.477375][ T9] usb 2-1: SerialNumber: syz [ 107.519813][ T9] usb 2-1: config 0 descriptor?? [ 107.596911][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 107.611683][ T6048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.633318][ T6048] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.848151][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.072990][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.117155][ T6061] loop2: detected capacity change from 0 to 1024 [ 108.205387][ T6061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.234947][ T9] gspca_zc3xx: reg_w_i err -71 [ 108.253581][ T9] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 108.285796][ T9] usb 2-1: USB disconnect, device number 3 [ 108.383917][ T6061] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz.2.66: directory missing '..' [ 108.585767][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.095270][ T6072] loop1: detected capacity change from 0 to 512 [ 109.118723][ T6072] EXT4-fs: Ignoring removed oldalloc option [ 109.235066][ T6072] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.71: Parent and EA inode have the same ino 15 [ 109.319205][ T6075] loop2: detected capacity change from 0 to 2048 [ 109.377105][ T6075] EXT4-fs: Ignoring removed i_version option [ 109.433328][ T6075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.439442][ T6072] EXT4-fs (loop1): 1 orphan inode deleted [ 109.499381][ T6075] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.537489][ T6072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.852199][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.925549][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.549168][ T6102] loop2: detected capacity change from 0 to 256 [ 111.316322][ T6116] validate_nla: 98 callbacks suppressed [ 111.316335][ T6116] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 111.348698][ T6116] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 111.372357][ T6116] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 111.388720][ T6116] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 111.415357][ T6116] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 111.446312][ T6116] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 111.473008][ T6116] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 111.498020][ T6116] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 111.514022][ T6116] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 111.530786][ T6116] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 111.865825][ T6125] loop0: detected capacity change from 0 to 64 [ 112.015708][ T6125] overlayfs: upper fs needs to support d_type. [ 112.093012][ T6125] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 112.121952][ T6125] overlayfs: failed to set xattr on upper [ 112.174986][ T6125] overlayfs: ...falling back to redirect_dir=nofollow. [ 112.206764][ T6125] overlayfs: ...falling back to index=off. [ 112.239103][ T6125] overlayfs: ...falling back to uuid=null. [ 112.239945][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 112.512291][ T6134] loop1: detected capacity change from 0 to 1024 [ 112.643587][ T5768] Bad inode number on dev loop0: 4160749571 is out of range [ 112.698528][ T5768] Bad inode number on dev loop0: 4160749571 is out of range [ 113.349884][ T6140] loop3: detected capacity change from 0 to 4096 [ 113.432926][ T6140] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 113.779443][ T6140] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 113.880328][ T1128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.911449][ T6140] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 113.953234][ T6149] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 113.953234][ T6149] The task syz.1.114 (6149) triggered the difference, watch for misbehavior. [ 114.081123][ T27] audit: type=1800 audit(1777079562.315:2): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.103" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 114.235518][ T1128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.479347][ T1128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.686730][ T1128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.076122][ T6148] loop2: detected capacity change from 0 to 32768 [ 115.099875][ T6148] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.106 (6148) [ 115.149282][ T6148] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.205358][ T6148] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 115.268579][ T6148] BTRFS info (device loop2): using free space tree [ 115.563224][ T6148] BTRFS info (device loop2): enabling ssd optimizations [ 115.613988][ T6148] BTRFS info (device loop2): auto enabling async discard [ 115.757671][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.777870][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.803362][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.824559][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.844515][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 115.858468][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.130413][ T5770] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.250675][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.118'. [ 116.933572][ T6195] Bluetooth: MGMT ver 1.22 [ 117.912824][ T5780] Bluetooth: hci1: command tx timeout [ 118.479569][ T6175] chnl_net:caif_netlink_parms(): no params data found [ 118.599891][ T1128] hsr_slave_0: left promiscuous mode [ 118.618286][ T1128] hsr_slave_1: left promiscuous mode [ 118.638389][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.650904][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.665938][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.686443][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.734332][ T1128] bridge_slave_1: left allmulticast mode [ 118.745437][ T1128] bridge_slave_1: left promiscuous mode [ 118.756260][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.788759][ T1128] bridge_slave_0: left allmulticast mode [ 118.803139][ T1128] bridge_slave_0: left promiscuous mode [ 118.813913][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.859704][ T1128] veth1_macvtap: left promiscuous mode [ 118.868673][ T1128] veth0_macvtap: left promiscuous mode [ 118.890571][ T1128] veth1_vlan: left promiscuous mode [ 118.901159][ T1128] veth0_vlan: left promiscuous mode [ 120.003804][ T5780] Bluetooth: hci1: command tx timeout [ 120.100156][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 120.186728][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 120.265890][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.349906][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.942065][ T1128] bond0 (unregistering): Released all slaves [ 121.313425][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.323838][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.334874][ T6175] bridge_slave_0: entered allmulticast mode [ 121.345281][ T6175] bridge_slave_0: entered promiscuous mode [ 121.358087][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.371101][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.381013][ T6175] bridge_slave_1: entered allmulticast mode [ 121.393715][ T6175] bridge_slave_1: entered promiscuous mode [ 121.478780][ T6175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.517969][ T6175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.615152][ T6175] team0: Port device team_slave_0 added [ 121.645436][ T6175] team0: Port device team_slave_1 added [ 121.709889][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.726143][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.778465][ T6175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.824569][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.850508][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.897340][ T6175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.987222][ T6175] hsr_slave_0: entered promiscuous mode [ 121.997889][ T6175] hsr_slave_1: entered promiscuous mode [ 122.006969][ T6175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.018054][ T6175] Cannot create hsr debugfs directory [ 122.080288][ T5780] Bluetooth: hci1: command tx timeout [ 122.396646][ T6175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 122.412126][ T6175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.435520][ T6175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 122.456897][ T6175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 122.621337][ T6175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.657438][ T6175] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.692028][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.701865][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.731457][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.741264][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.136941][ T6175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.678404][ T6175] veth0_vlan: entered promiscuous mode [ 123.707494][ T6175] veth1_vlan: entered promiscuous mode [ 123.761927][ T6175] veth0_macvtap: entered promiscuous mode [ 123.783786][ T6175] veth1_macvtap: entered promiscuous mode [ 123.825798][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.844940][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.864933][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.883994][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.898205][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.921106][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.937900][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.962591][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.991640][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.018949][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.039340][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.058393][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.088162][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.116029][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.153160][ T5780] Bluetooth: hci1: command tx timeout [ 124.177086][ T6175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.191562][ T6175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.205018][ T6175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.218107][ T6175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.388387][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.422478][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.469764][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.485855][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.006427][ T6298] loop2: detected capacity change from 0 to 256 [ 125.040364][ T6298] exfat: Deprecated parameter 'namecase' [ 125.168012][ T6298] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 126.242535][ T6295] loop4: detected capacity change from 0 to 32768 [ 126.294944][ T6295] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.121 (6295) [ 126.298633][ T6325] loop3: detected capacity change from 0 to 4096 [ 126.382700][ T6295] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.422247][ T6295] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 126.437367][ T6295] BTRFS info (device loop4): using free space tree [ 126.550578][ T6295] BTRFS info (device loop4): enabling ssd optimizations [ 126.563826][ T6295] BTRFS info (device loop4): auto enabling async discard [ 126.575707][ T6346] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.731595][ T6325] NILFS (loop3): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=2048, cno=5, offset=63330, blocknr=0, vblocknr=34359803903 [ 126.798597][ T6325] NILFS (loop3): error -2 preparing GC: cannot read source blocks [ 127.082909][ T6353] validate_nla: 98 callbacks suppressed [ 127.082932][ T6353] netlink: 'syz.2.139': attribute type 1 has an invalid length. [ 127.553648][ T6175] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.304188][ T6374] loop3: detected capacity change from 0 to 2048 [ 128.509918][ T6374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.539690][ T6380] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.149'. [ 128.591392][ T6380] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 128.643929][ T6380] openvswitch: netlink: Message has 1 unknown bytes. [ 128.654778][ T6374] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.162769][ T27] audit: type=1326 audit(1777079577.395:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e7b9cdd9 code=0x7ffc0000 [ 129.289703][ T27] audit: type=1326 audit(1777079577.455:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e7b9cdd9 code=0x7ffc0000 [ 129.354893][ T27] audit: type=1326 audit(1777079577.455:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e7b9cdd9 code=0x7ffc0000 [ 129.376873][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.384864][ T27] audit: type=1326 audit(1777079577.465:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4e7b9cdd9 code=0x7ffc0000 [ 129.506054][ T27] audit: type=1326 audit(1777079577.465:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e7b9cdd9 code=0x7ffc0000 [ 129.663053][ T27] audit: type=1326 audit(1777079577.465:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e7b9cdd9 code=0x7ffc0000 [ 129.807559][ T27] audit: type=1326 audit(1777079577.465:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e7b9cdd9 code=0x7ffc0000 [ 129.923991][ T27] audit: type=1326 audit(1777079577.465:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff4e7b9cdd9 code=0x7ffc0000 [ 130.047730][ T27] audit: type=1326 audit(1777079577.465:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e7b9cdd9 code=0x7ffc0000 [ 130.171197][ T27] audit: type=1326 audit(1777079577.465:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e7b9cdd9 code=0x7ffc0000 [ 130.793472][ T6428] capability: warning: `syz.1.164' uses deprecated v2 capabilities in a way that may be insecure [ 130.847961][ T6391] loop2: detected capacity change from 0 to 32768 [ 130.929996][ T6391] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.152 (6391) [ 131.046201][ T6391] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.119377][ T6391] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 131.174766][ T6391] BTRFS info (device loop2): using free space tree [ 131.512295][ T6391] BTRFS info (device loop2): enabling ssd optimizations [ 131.566398][ T6391] BTRFS info (device loop2): auto enabling async discard [ 131.608606][ T6461] loop1: detected capacity change from 0 to 256 [ 131.699742][ T6461] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfe5fe6b3, utbl_chksum : 0xe619d30d) [ 132.113264][ T5814] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 132.362792][ T5814] usb 4-1: Using ep0 maxpacket: 32 [ 132.404535][ T5770] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.444174][ T5814] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 132.462460][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.493586][ T5814] usb 4-1: Product: syz [ 132.530954][ T5814] usb 4-1: Manufacturer: syz [ 132.562785][ T5814] usb 4-1: SerialNumber: syz [ 132.612383][ T5814] usb 4-1: config 0 descriptor?? [ 132.676500][ T5814] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 132.753511][ T5814] dvb-usb: bulk message failed: -22 (4/0) [ 132.773503][ T5814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 132.796723][ T5814] dvb-usb: bulk message failed: -22 (5/0) [ 132.808763][ T5814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 132.939614][ T5814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.989199][ T5814] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 133.033360][ T5814] usb 4-1: media controller created [ 133.160612][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.221008][ T2179] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.357613][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.371999][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.397171][ T5814] usb 4-1: selecting invalid altsetting 3 [ 133.414112][ T5814] ttusb2: set interface to alts=3 failed [ 133.443712][ T2179] usb 3-1: Using ep0 maxpacket: 8 [ 133.464404][ T2179] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 133.500451][ T2179] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 133.566107][ T2179] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 133.631761][ T5814] DVB: Unable to find symbol tda10086_attach() [ 133.645495][ T2179] usb 3-1: Product: syz [ 133.659838][ T5814] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 133.678459][ T2179] usb 3-1: Manufacturer: syz [ 133.695324][ T2179] usb 3-1: SerialNumber: syz [ 133.733166][ T5814] dvb-usb: bulk message failed: -22 (4/0) [ 133.797985][ T5814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 133.844964][ T6466] loop4: detected capacity change from 0 to 32768 [ 133.889830][ T6494] loop1: detected capacity change from 0 to 256 [ 133.893551][ T5814] dvb-usb: bulk message failed: -22 (5/0) [ 133.982957][ T6466] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 134.036171][ T6494] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d) [ 134.036797][ T6466] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.073433][ T2179] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 134.094562][ T5814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 134.132078][ T2179] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 134.143570][ T6466] XFS (loop4): Ending clean mount [ 134.187527][ T5814] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 134.209111][ T6466] XFS (loop4): Quotacheck needed: Please wait. [ 134.242037][ T2179] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 134.312331][ T2179] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 134.325793][ T5814] usb 4-1: USB disconnect, device number 2 [ 134.372817][ T6466] XFS (loop4): Quotacheck: Done. [ 134.382122][ T6507] loop3: detected capacity change from 0 to 2048 [ 134.390420][ T2179] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 134.491442][ T2179] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 134.518839][ T6507] EXT4-fs: Ignoring removed oldalloc option [ 134.589879][ T2179] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 134.683045][ T6507] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 134.715458][ T6507] System zones: 0-7 [ 134.737384][ T6507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.745787][ T5814] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 134.828141][ T2179] usb 3-1: USB disconnect, device number 2 [ 134.887200][ T6175] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.936988][ T2179] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 135.049008][ T2179] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 135.106325][ T2179] visor 3-1:1.0: device disconnected [ 135.496418][ T6507] EXT4-fs error (device loop3): ext4_find_extent:945: inode #2: comm syz.3.181: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 135.644932][ T6507] EXT4-fs (loop3): Remounting filesystem read-only [ 135.899887][ T6529] loop1: detected capacity change from 0 to 764 [ 135.910793][ T6531] loop2: detected capacity change from 0 to 512 [ 135.997305][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.052313][ T6529] rock: directory entry would overflow storage [ 136.127610][ T6529] rock: sig=0x4654, size=5, remaining=4 [ 136.192883][ T6531] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.186: bg 0: block 393: padding at end of block bitmap is not set [ 136.322537][ T6531] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 136.366118][ T6531] EXT4-fs (loop2): 2 truncates cleaned up [ 136.402013][ T6531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.803591][ T6531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.878978][ T6531] EXT4-fs (loop2): can't enable nombcache during remount [ 137.114722][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.307895][ T6550] loop3: detected capacity change from 0 to 256 [ 137.350960][ T6550] exfat: Deprecated parameter 'namecase' [ 137.427436][ T6550] exfat: Deprecated parameter 'namecase' [ 137.488936][ T6550] exfat: Deprecated parameter 'namecase' [ 137.531453][ T6550] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 137.618592][ T6550] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 137.685959][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 137.906756][ T6559] loop3: detected capacity change from 0 to 512 [ 137.975316][ T6559] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.986148][ T6561] netlink: 52 bytes leftover after parsing attributes in process `syz.4.195'. [ 138.082598][ T6559] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 138.195148][ T6559] __quota_error: 3 callbacks suppressed [ 138.195168][ T6559] Quota error (device loop3): write_blk: dquota write failed [ 138.262775][ T6559] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 138.319668][ T6559] Quota error (device loop3): write_blk: dquota write failed [ 138.355931][ T6559] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 138.403795][ T6559] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.196: Failed to acquire dquot type 1 [ 138.445471][ T6559] EXT4-fs (loop3): 1 truncate cleaned up [ 138.505287][ T6559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.803815][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.458305][ T6599] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 139.458305][ T6599] program syz.3.212 not setting count and/or reply_len properly [ 139.467218][ T6597] loop1: detected capacity change from 0 to 256 [ 140.192911][ T6612] netlink: 44 bytes leftover after parsing attributes in process `syz.3.219'. [ 140.213553][ T6613] loop2: detected capacity change from 0 to 256 [ 140.231297][ T6612] netlink: 'syz.3.219': attribute type 6 has an invalid length. [ 140.260586][ T6612] netlink: 'syz.3.219': attribute type 5 has an invalid length. [ 140.319498][ T6588] loop4: detected capacity change from 0 to 32768 [ 140.325265][ T6613] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 140.330064][ T6612] netlink: 'syz.3.219': attribute type 4 has an invalid length. [ 140.460589][ T6588] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.648461][ T6588] XFS (loop4): Ending clean mount [ 141.096180][ T6175] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.553730][ T6605] loop1: detected capacity change from 0 to 40427 [ 141.628413][ T6605] F2FS-fs (loop1): invalid crc value [ 141.703155][ T6605] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.985566][ T6605] F2FS-fs (loop1): Start checkpoint disabled! [ 142.065937][ T6605] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 142.212752][ T788] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 142.445154][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.454218][ T6658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.232'. [ 142.481171][ T49] kworker/u4:3: attempt to access beyond end of device [ 142.481171][ T49] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 142.512778][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.533633][ T788] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= c.00 [ 142.549855][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 142.561087][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.572154][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 142.605122][ T788] usb 5-1: config 0 descriptor?? [ 143.015761][ T6665] loop3: detected capacity change from 0 to 16 [ 143.049164][ T6665] erofs: (device loop3): mounted with root inode @ nid 36. [ 143.070438][ T788] asus 0003:0B05:18C6.0002: ignoring exceeding usage max [ 143.120283][ T788] asus 0003:0B05:18C6.0002: hidraw0: USB HID v0.06 Device [HID 0b05:18c6] on usb-dummy_hcd.4-1/input0 [ 143.148715][ T27] audit: type=1800 audit(1777079591.385:16): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.235" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 143.155568][ T788] asus 0003:0B05:18C6.0002: Asus input not registered [ 143.376546][ T788] asus: probe of 0003:0B05:18C6.0002 failed with error -12 [ 143.428639][ T788] usb 5-1: USB disconnect, device number 2 [ 143.532814][ T6666] fido_id[6666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 143.549346][ T6668] loop1: detected capacity change from 0 to 1024 [ 143.618224][ T6668] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 143.639297][ T6655] loop2: detected capacity change from 0 to 40427 [ 143.653778][ T6655] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 143.667383][ T6655] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 143.747495][ T6655] F2FS-fs (loop2): invalid crc value [ 143.785909][ T6668] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.233: lblock 2 mapped to illegal pblock 2 (length 1) [ 143.841500][ T6655] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.884025][ T6668] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 143.922903][ T6668] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.233: lblock 0 mapped to illegal pblock 48 (length 1) [ 144.011163][ T6668] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 144.102564][ T6668] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.233: Failed to acquire dquot type 0 [ 144.189643][ T6668] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 144.238166][ T6655] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 144.242871][ T6668] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.233: mark_inode_dirty error [ 144.267098][ T6655] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 144.321479][ T6683] loop3: detected capacity change from 0 to 1024 [ 144.330072][ T6668] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 144.435393][ T6668] EXT4-fs (loop1): 1 orphan inode deleted [ 144.477489][ T753] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.518327][ T6668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.538300][ T6683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.560568][ T753] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 144.582485][ T753] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 144.635751][ T6683] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.652804][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 144.704207][ T6683] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.238: lblock 0 mapped to illegal pblock 0 (length 1) [ 144.738100][ T5770] syz-executor: attempt to access beyond end of device [ 144.738100][ T5770] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.773572][ T6683] EXT4-fs (loop3): Remounting filesystem read-only [ 144.795964][ T5770] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 144.877443][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.941351][ T33] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.964497][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.012759][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.018738][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 145.046227][ T33] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 145.058092][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 145.092931][ T33] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0 [ 145.117286][ T9] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 145.144152][ T5767] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 145.170710][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.202762][ T5767] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 145.221350][ T9] usb 5-1: config 0 descriptor?? [ 145.241711][ T5767] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 145.578233][ T6690] loop1: detected capacity change from 0 to 256 [ 145.654136][ T6690] exfat: Deprecated parameter 'namecase' [ 145.690526][ T6690] exfat: Deprecated parameter 'namecase' [ 145.710827][ T6690] exfat: Deprecated parameter 'namecase' [ 145.779321][ T9] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 145.787480][ T6690] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd6f0c8a0, utbl_chksum : 0xe619d30d) [ 145.811807][ T6692] loop3: detected capacity change from 0 to 512 [ 145.824876][ T9] steelseries 0003:1038:1410.0003: not enough fields in HID_OUTPUT_REPORT 0 [ 145.850806][ T6692] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 145.962831][ T9] usb 5-1: USB disconnect, device number 3 [ 146.672334][ T6702] loop1: detected capacity change from 0 to 4096 [ 147.686099][ T6741] loop1: detected capacity change from 0 to 512 [ 147.726670][ T6741] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.749158][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 147.789890][ T6741] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 147.803126][ T6741] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 147.845551][ T6741] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.258: attempt to clear invalid blocks 2 len 1 [ 147.861403][ T6741] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.258: invalid indirect mapped block 1819239214 (level 0) [ 147.887133][ T6741] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.258: invalid indirect mapped block 1819239214 (level 1) [ 147.925944][ T6741] EXT4-fs (loop1): 1 truncate cleaned up [ 147.944509][ T6741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.003586][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 148.043678][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 148.096536][ T9] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 148.134894][ T9] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 148.153349][ T9] usb 4-1: Product: syz [ 148.158186][ T9] usb 4-1: Manufacturer: syz [ 148.167951][ T9] usb 4-1: SerialNumber: syz [ 148.183711][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.333387][ T6735] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 148.438193][ T9] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 148.470674][ T6749] loop4: detected capacity change from 0 to 8192 [ 148.474521][ T9] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 148.497427][ T9] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 148.555324][ T9] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 148.565200][ T6749] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 148.595842][ T6749] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 148.655307][ T9] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 148.664999][ T6758] loop2: detected capacity change from 0 to 256 [ 148.689673][ T6758] exfat: Deprecated parameter 'utf8' [ 148.699280][ T6749] REISERFS (device loop4): using ordered data mode [ 148.736891][ T6749] reiserfs: using flush barriers [ 148.748698][ T6758] exfat: Deprecated parameter 'utf8' [ 148.755875][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 148.785706][ T6758] exfat: Deprecated parameter 'utf8' [ 148.821467][ T6749] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.848077][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 148.907563][ T9] usb 4-1: USB disconnect, device number 3 [ 148.922594][ T6749] REISERFS (device loop4): checking transaction log (loop4) [ 148.937137][ T6758] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 148.998216][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 149.055264][ T6749] REISERFS (device loop4): Using r5 hash to sort names [ 149.088784][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 149.154939][ T9] visor 4-1:1.0: device disconnected [ 149.168612][ T6749] reiserfs: enabling write barrier flush mode [ 149.193264][ T6749] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 149.242852][ T6749] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 149.293539][ T6749] REISERFS (device loop4): Remounting filesystem read-only [ 149.316620][ T6749] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 149.341854][ T6749] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 149.385321][ T6749] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 149.400611][ T6749] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 149.416274][ T6749] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 149.440631][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.488622][ T6749] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 149.532808][ T6749] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 149.533577][ T6749] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 149.723674][ T6175] ------------[ cut here ]------------ [ 149.731553][ T6175] kernel BUG at fs/reiserfs/journal.c:1916! [ 149.773008][ T6175] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 149.780561][ T6175] CPU: 0 PID: 6175 Comm: syz-executor Not tainted syzkaller #0 [ 149.789787][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.801462][ T6175] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 149.808369][ T6175] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 44 db b5 ff e9 f9 fc ff ff e8 ca a3 5d ff <0f> 0b e8 c3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 149.830421][ T6175] RSP: 0018:ffffc90003337b00 EFLAGS: 00010293 [ 149.837932][ T6175] RAX: ffffffff82297e36 RBX: 1ffff92000666f64 RCX: ffff888028ef8000 [ 149.848674][ T6175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.859166][ T6175] RBP: ffffc90003337bf8 R08: ffffc90003337b77 R09: 0000000000000000 [ 149.868877][ T6175] R10: ffffc90003337b40 R11: fffff52000666f6f R12: ffffc9000ba79000 [ 149.879448][ T6175] R13: dffffc0000000000 R14: ffff88807ad78630 R15: 0000000000000000 [ 149.889335][ T6175] FS: 0000555575ec0500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 149.901212][ T6175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.908944][ T6175] CR2: 00007f95343456b8 CR3: 000000006b211000 CR4: 00000000003506f0 [ 149.919759][ T6175] Call Trace: [ 149.923951][ T6175] [ 149.927562][ T6175] ? journal_release+0x30/0x30 [ 149.933349][ T6175] journal_release+0x1f/0x30 [ 149.939259][ T6175] reiserfs_put_super+0x26b/0x510 [ 149.945235][ T6175] ? hook_inode_free_security+0xb0/0xb0 [ 149.952377][ T6175] ? evict_inodes+0x63c/0x6a0 [ 149.958252][ T6175] ? reiserfs_dirty_inode+0x270/0x270 [ 149.967723][ T6175] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 149.977443][ T6175] ? reiserfs_dirty_inode+0x270/0x270 [ 149.986632][ T6175] generic_shutdown_super+0x134/0x2b0 [ 149.993934][ T6175] kill_block_super+0x44/0x90 [ 149.999889][ T6175] deactivate_locked_super+0x97/0x100 [ 150.007816][ T6175] cleanup_mnt+0x43b/0x4d0 [ 150.015276][ T6175] task_work_run+0x1d4/0x260 [ 150.022455][ T6175] ? task_work_cancel+0x220/0x220 [ 150.030598][ T6175] ? exit_to_user_mode_loop+0x3b/0x110 [ 150.038205][ T6175] exit_to_user_mode_loop+0xe6/0x110 [ 150.045652][ T6175] exit_to_user_mode_prepare+0xee/0x180 [ 150.052316][ T6175] syscall_exit_to_user_mode+0x1a/0x50 [ 150.059742][ T6175] do_syscall_64+0x61/0xa0 [ 150.065667][ T6175] ? clear_bhb_loop+0x40/0x90 [ 150.073491][ T6175] ? clear_bhb_loop+0x40/0x90 [ 150.079285][ T6175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.087066][ T6175] RIP: 0033:0x7ff4e7b9e017 [ 150.092926][ T6175] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 150.117133][ T6175] RSP: 002b:00007fff557f2298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 150.128216][ T6175] RAX: 0000000000000000 RBX: 00007ff4e7c32120 RCX: 00007ff4e7b9e017 [ 150.136857][ T6175] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff557f2350 [ 150.148970][ T6175] RBP: 00007fff557f2350 R08: 00007fff557f3350 R09: 00000000ffffffff [ 150.160266][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff557f33e0 [ 150.169816][ T6175] R13: 00007ff4e7c32120 R14: 0000000000024850 R15: 00007fff557f3420 [ 150.181419][ T6175] [ 150.186661][ T6175] Modules linked in: [ 150.256159][ T6175] ---[ end trace 0000000000000000 ]--- [ 150.264424][ T6175] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 150.274155][ T6175] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 44 db b5 ff e9 f9 fc ff ff e8 ca a3 5d ff <0f> 0b e8 c3 a3 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 150.300556][ T6175] RSP: 0018:ffffc90003337b00 EFLAGS: 00010293 [ 150.308153][ T6175] RAX: ffffffff82297e36 RBX: 1ffff92000666f64 RCX: ffff888028ef8000 [ 150.318989][ T6175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.329165][ T6175] RBP: ffffc90003337bf8 R08: ffffc90003337b77 R09: 0000000000000000 [ 150.343041][ T2179] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.355494][ T6175] R10: ffffc90003337b40 R11: fffff52000666f6f R12: ffffc9000ba79000 [ 150.368874][ T6175] R13: dffffc0000000000 R14: ffff88807ad78630 R15: 0000000000000000 [ 150.382515][ T6175] FS: 0000555575ec0500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 150.396997][ T6175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.406920][ T6175] CR2: 000055dfff166950 CR3: 000000006b211000 CR4: 00000000003506e0 [ 150.421711][ T6175] Kernel panic - not syncing: Fatal exception [ 150.432805][ T6175] Kernel Offset: disabled [ 150.438517][ T6175] Rebooting in 86400 seconds..