last executing test programs: 7.981328868s ago: executing program 1 (id=428): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) truncate(&(0x7f0000000000)='./file1\x00', 0x5e00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 7.130247651s ago: executing program 1 (id=431): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0xb, 0xfff9, 0xfffffffd, 0x1, 0x83}, &(0x7f00000001c0)=0x14) 6.118190767s ago: executing program 1 (id=438): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 5.89481772s ago: executing program 3 (id=441): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 5.766661462s ago: executing program 1 (id=442): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100), 0x0, 0x47b, &(0x7f0000000500)="$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") chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 5.456535096s ago: executing program 4 (id=443): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 5.280111599s ago: executing program 3 (id=445): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x30, 0xfffe, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x1c, 0x0, @opaque="03ff16af31c0d4c489552aed5143313d9126e3f4"}}}}}, 0x0) 5.23247777s ago: executing program 1 (id=446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000008009d000040"]) 5.082201712s ago: executing program 4 (id=447): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) 4.632140219s ago: executing program 1 (id=449): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) 4.54471557s ago: executing program 3 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlockall(0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4.529781881s ago: executing program 4 (id=452): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/150, 0x96, 0x0) 4.008461668s ago: executing program 32 (id=449): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) 3.433359737s ago: executing program 4 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010001fff000000000007000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac1414bb050004000500000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2.637690309s ago: executing program 4 (id=460): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000240)=[0x0, 0x5]) 2.628681339s ago: executing program 0 (id=461): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) 2.305799634s ago: executing program 0 (id=463): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000014006b030231a6080c000af32c0cae88539602000f00e5aa000017d34460bc245111e4f2072b540b0000001356f475ce36c2d13b48dfecf46bb1c48fe13a5e66e672000000008037e78638c3f95ee1e61ad3edbd00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) 2.092488258s ago: executing program 0 (id=465): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000300)={[{@quota}, {@oldalloc}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@usrjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@noblock_validity}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x775, 0x0, 0x0, 'queue0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140400000000001d430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1e, {}, {}, @raw32}], 0xffc8) 1.893832851s ago: executing program 2 (id=466): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_io_uring_setup(0xa02, &(0x7f00000001c0)={0x0, 0x5885, 0x1000, 0xfffffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.558274016s ago: executing program 2 (id=467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0xffffffffffffffa0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.455680518s ago: executing program 3 (id=468): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x10, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) syz_clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.236930061s ago: executing program 0 (id=469): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = dup(r0) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) write$cgroup_int(r1, &(0x7f0000000280)=0x4, 0x12) 1.197846431s ago: executing program 2 (id=470): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000380)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@resuid}, {@sysvgroups}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x409e}}, {@nodiscard}]}, 0xff, 0x480, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) 1.157744512s ago: executing program 3 (id=471): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) r1 = socket$inet(0x2, 0x4000000805, 0x0) listen(r1, 0x5) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844) 940.891095ms ago: executing program 0 (id=472): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x9, r1, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) 909.230446ms ago: executing program 3 (id=473): syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000300)='./bus\x00', 0x2000002, &(0x7f0000000100)=ANY=[], 0xfe, 0x60aa, &(0x7f000000d780)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x104880, 0x0, 0x1, 0x0, &(0x7f0000000200)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 788.591407ms ago: executing program 2 (id=474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xb}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x38}}, 0x0) 551.844991ms ago: executing program 4 (id=475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x80087601, 0x0) 279.150705ms ago: executing program 2 (id=476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x5}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffe, 0x6c}, 0x0, @in6=@dev, 0x3500}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 260.151175ms ago: executing program 0 (id=477): syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@largeio}, {@prjquota}]}, 0x1, 0xb8e1, &(0x7f0000013cc0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file2\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 2 (id=478): syz_open_dev$dri(0x0, 0x1ff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 73.646809][ T4237] cgroup: Unknown subsys name 'net' [ 73.751076][ T4237] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.269109][ T4237] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.701314][ T4248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.719581][ T4255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.728208][ T4255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.736497][ T4255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.747828][ T4255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.756681][ T4255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.764384][ T4255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.773160][ T4255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.781191][ T4255] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.785629][ T4263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.789896][ T4255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.796005][ T4263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.803286][ T4255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.810539][ T4263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.817418][ T4255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.823400][ T4263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.832082][ T4255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.838282][ T4264] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.846073][ T4255] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.859136][ T4255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.859806][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.866515][ T4255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.874870][ T4264] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.881282][ T4255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.887939][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.901908][ T4253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.909254][ T4264] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.925894][ T4264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.966481][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.973923][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.415057][ T4247] chnl_net:caif_netlink_parms(): no params data found [ 77.443403][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 77.468733][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 77.524431][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 77.604338][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 77.657853][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.665291][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.674208][ T4247] device bridge_slave_0 entered promiscuous mode [ 77.687353][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.694658][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.703050][ T4247] device bridge_slave_1 entered promiscuous mode [ 77.759998][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.767496][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.775920][ T4250] device bridge_slave_0 entered promiscuous mode [ 77.807265][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.814664][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.822948][ T4256] device bridge_slave_0 entered promiscuous mode [ 77.830460][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.837741][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.846254][ T4250] device bridge_slave_1 entered promiscuous mode [ 77.866891][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.877312][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.884757][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.893241][ T4256] device bridge_slave_1 entered promiscuous mode [ 77.909307][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.916810][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.925232][ T4249] device bridge_slave_0 entered promiscuous mode [ 77.939483][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.967574][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.974903][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.983202][ T4249] device bridge_slave_1 entered promiscuous mode [ 78.014650][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.026327][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.062042][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.074925][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.099687][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.107028][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.116148][ T4260] device bridge_slave_0 entered promiscuous mode [ 78.126292][ T4247] team0: Port device team_slave_0 added [ 78.151586][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.161708][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.169098][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.177439][ T4260] device bridge_slave_1 entered promiscuous mode [ 78.185897][ T4247] team0: Port device team_slave_1 added [ 78.210040][ T4250] team0: Port device team_slave_0 added [ 78.219285][ T4250] team0: Port device team_slave_1 added [ 78.227387][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.256968][ T4256] team0: Port device team_slave_0 added [ 78.298855][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.310404][ T4256] team0: Port device team_slave_1 added [ 78.327659][ T4249] team0: Port device team_slave_0 added [ 78.334718][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.341695][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.368022][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.381571][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.409457][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.416629][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.442688][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.455610][ T4249] team0: Port device team_slave_1 added [ 78.461922][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.469707][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.496393][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.532008][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.539441][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.566059][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.589762][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.597021][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.623030][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.658332][ T4260] team0: Port device team_slave_0 added [ 78.665131][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.672117][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.698539][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.710443][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.718601][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.744871][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.769625][ T4260] team0: Port device team_slave_1 added [ 78.796437][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.803679][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.830260][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.858603][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.865627][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.891573][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.917687][ T4247] device hsr_slave_0 entered promiscuous mode [ 78.924856][ T4247] device hsr_slave_1 entered promiscuous mode [ 78.941401][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.948514][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.955013][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 78.980808][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 78.980972][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 78.987243][ T4259] Bluetooth: hci3: command 0x0409 tx timeout [ 79.000172][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.014992][ T4250] device hsr_slave_0 entered promiscuous mode [ 79.022510][ T4250] device hsr_slave_1 entered promiscuous mode [ 79.029155][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.037333][ T4259] Bluetooth: hci4: command 0x0409 tx timeout [ 79.043714][ T4250] Cannot create hsr debugfs directory [ 79.084536][ T4256] device hsr_slave_0 entered promiscuous mode [ 79.091489][ T4256] device hsr_slave_1 entered promiscuous mode [ 79.098690][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.106607][ T4256] Cannot create hsr debugfs directory [ 79.196554][ T4249] device hsr_slave_0 entered promiscuous mode [ 79.203514][ T4249] device hsr_slave_1 entered promiscuous mode [ 79.210115][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.218198][ T4249] Cannot create hsr debugfs directory [ 79.244763][ T4260] device hsr_slave_0 entered promiscuous mode [ 79.251864][ T4260] device hsr_slave_1 entered promiscuous mode [ 79.258855][ T4260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.266520][ T4260] Cannot create hsr debugfs directory [ 79.579452][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.597049][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.610052][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.621064][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.652686][ T4256] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.662159][ T4256] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.680293][ T4256] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.691925][ T4256] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.772522][ T4249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.798284][ T4249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.825171][ T4249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.835278][ T4249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.887392][ T4247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.897703][ T4247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.914458][ T4247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.940230][ T4247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.013627][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.060221][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.078454][ T4260] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.089077][ T4260] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.114834][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.129759][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.137929][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.146162][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.163138][ T4260] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.175866][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.190277][ T4260] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.201881][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.209386][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.218594][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.228417][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.235782][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.245485][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.281752][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.292102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.301848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.310697][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.317988][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.329134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.339934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.349165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.358815][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.366154][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.378770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.387826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.396549][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.403718][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.429605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.460666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.469224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.477803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.499147][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.515121][ T4247] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.526007][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.535633][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.565301][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.576277][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.587009][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.597977][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.607226][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.616966][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.626079][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.633254][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.641517][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.649899][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.659049][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.683173][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.731000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.740246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.749701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.758930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.769163][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.776346][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.785759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.793981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.801835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.810729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.819542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.829112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.838074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.848053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.856793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.865699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.875232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.883883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.892454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.927997][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.939288][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.948297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.959277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.968602][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.975761][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.984649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.994308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.003087][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.010180][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.019486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.028949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.037425][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 81.039098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.043596][ T4259] Bluetooth: hci0: command 0x041b tx timeout [ 81.043636][ T4259] Bluetooth: hci2: command 0x041b tx timeout [ 81.043679][ T4259] Bluetooth: hci3: command 0x041b tx timeout [ 81.072027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.081290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.090639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.099453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.107680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.115660][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 81.146188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.155621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.168501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.180026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.189277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.199345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.209295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.218287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.227322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.246019][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.260395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.273797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.299624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.311190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.321328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.333924][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.358693][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.404714][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.411746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.433681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.469686][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.479299][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.494139][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.501305][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.534059][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.543900][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.573398][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.580764][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.604891][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.646395][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.666676][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.712454][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.721946][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.783837][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.813352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.833409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.851593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.879344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.903124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.916494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.971882][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.996884][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.031607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.040482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.086531][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.102718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.110282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.119731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.128519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.136507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.145815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.159431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.182974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.194698][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.229052][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.275496][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.283992][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.312964][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.324243][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.343503][ T4250] device veth0_vlan entered promiscuous mode [ 82.364923][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.383761][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.441760][ T4250] device veth1_vlan entered promiscuous mode [ 82.454329][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.480199][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.501992][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.591462][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.600737][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.617325][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.630077][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.639449][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.650353][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.659909][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.670451][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.680413][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.697110][ T4249] device veth0_vlan entered promiscuous mode [ 82.723436][ T4250] device veth0_macvtap entered promiscuous mode [ 82.735100][ T4247] device veth0_vlan entered promiscuous mode [ 82.743995][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.752125][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.760537][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.768752][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.777068][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.786655][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.796110][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.805384][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.814455][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.822923][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.830888][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.846964][ T4249] device veth1_vlan entered promiscuous mode [ 82.862131][ T4250] device veth1_macvtap entered promiscuous mode [ 82.874076][ T4256] device veth0_vlan entered promiscuous mode [ 82.886019][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.919767][ T4256] device veth1_vlan entered promiscuous mode [ 82.930156][ T4247] device veth1_vlan entered promiscuous mode [ 82.970087][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.980130][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.989543][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.004838][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.018047][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.027729][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.038075][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.047509][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.071475][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.098701][ T4249] device veth0_macvtap entered promiscuous mode [ 83.112904][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 83.118983][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 83.125660][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 83.131736][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 83.150117][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.171079][ T4249] device veth1_macvtap entered promiscuous mode [ 83.179008][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.191242][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.192587][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 83.202041][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.213836][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.229279][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.256233][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.267471][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.278808][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.287673][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.301191][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.318294][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.328286][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.344351][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.361269][ T4247] device veth0_macvtap entered promiscuous mode [ 83.372691][ T4256] device veth0_macvtap entered promiscuous mode [ 83.390408][ T4256] device veth1_macvtap entered promiscuous mode [ 83.407625][ T4247] device veth1_macvtap entered promiscuous mode [ 83.459564][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.470500][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.483434][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.496365][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.506958][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.517881][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.528430][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.540955][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.561411][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.572776][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.583070][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.594358][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.604557][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.615143][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.626412][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.640562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.649454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.661194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.670168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.678877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.689143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.698812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.707996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.718503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.727682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.738808][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.749903][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.761903][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.783355][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.794158][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.804917][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.815550][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.827103][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.840827][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.855999][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.865950][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.876743][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.889044][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.899651][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.911218][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.919722][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.929224][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.938357][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.947415][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.956900][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.966077][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.984493][ T4256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.006011][ T4256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.018754][ T4256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.027723][ T4256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.041329][ T4247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.050546][ T4247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.060216][ T4247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.069401][ T4247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.083603][ T4249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.092626][ T4249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.101349][ T4249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.110737][ T4249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.122904][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.131877][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.239358][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.248931][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.258755][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.267128][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.281740][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.292142][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.299944][ T4260] device veth0_vlan entered promiscuous mode [ 84.329459][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.378345][ T4260] device veth1_vlan entered promiscuous mode [ 84.407936][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.419159][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.441796][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.466756][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.476927][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.482659][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.486561][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.500377][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.568184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.569459][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.576459][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.585067][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.611315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.624325][ T4260] device veth0_macvtap entered promiscuous mode [ 84.637588][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.655709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.675058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.688555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.733932][ T4260] device veth1_macvtap entered promiscuous mode [ 84.765441][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.784962][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.808389][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.808690][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.828108][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.833353][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.839098][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.858642][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.868662][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.879927][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.893018][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.904037][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.916438][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.931406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.945144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.955576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.965050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.978645][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.989951][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.000456][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.014666][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.025000][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.036586][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.046486][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.057211][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.069726][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.098888][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.114253][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.126536][ T4260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.135548][ T4260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.145733][ T4260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.155054][ T4260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.192521][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 85.198617][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 85.205737][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 85.211806][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 85.222803][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.240156][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.274526][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 85.299147][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.408490][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.472904][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.492999][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.496298][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.539905][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.562399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.004936][ T4348] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.517538][ T4337] loop3: detected capacity change from 0 to 32768 [ 86.634625][ T4337] XFS (loop3): Mounting V5 Filesystem [ 86.794980][ T14] cfg80211: failed to load regulatory.db [ 86.824377][ T4337] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 86.901267][ T4337] XFS (loop3): Starting recovery (logdev: internal) [ 87.002512][ T4337] XFS (loop3): Ending recovery (logdev: internal) [ 87.257997][ T27] audit: type=1800 audit(1743485056.943:2): pid=4337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file2" dev="loop3" ino=4423 res=0 errno=0 [ 87.383697][ T4375] loop4: detected capacity change from 0 to 128 [ 87.446163][ T4375] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 87.509672][ T4375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.600873][ T4249] XFS (loop3): Unmounting Filesystem [ 87.727720][ T4357] loop1: detected capacity change from 0 to 32768 [ 87.746577][ T4357] ======================================================= [ 87.746577][ T4357] WARNING: The mand mount option has been deprecated and [ 87.746577][ T4357] and is ignored by this kernel. Remove the mand [ 87.746577][ T4357] option from the mount to silence this warning. [ 87.746577][ T4357] ======================================================= [ 87.872638][ T4298] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.979277][ T4357] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 88.034264][ T4357] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 88.096966][ T4298] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 88.110944][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.136780][ T4298] usb 1-1: config 0 descriptor?? [ 88.325954][ T4247] ocfs2: Unmounting device (7,1) on (node local) [ 88.389051][ T4298] usb 1-1: Cannot read MAC address [ 88.395317][ T4298] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 88.453615][ T4298] usb 1-1: USB disconnect, device number 2 [ 88.806415][ T4385] loop2: detected capacity change from 0 to 32768 [ 88.854848][ T4385] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.19 (4385) [ 88.937060][ T4385] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.995264][ T4385] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 89.046399][ T4385] BTRFS info (device loop2): metadata ratio 4 [ 89.098055][ T4385] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 89.153037][ T4385] BTRFS info (device loop2): force lzo compression, level 0 [ 89.166336][ T4385] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 89.204261][ T4385] BTRFS info (device loop2): trying to use backup root at mount time [ 89.227849][ T4385] BTRFS info (device loop2): doing ref verification [ 89.230677][ T4407] loop3: detected capacity change from 0 to 2048 [ 89.252625][ T4385] BTRFS info (device loop2): disabling tree log [ 89.271820][ T4385] BTRFS info (device loop2): using free space tree [ 89.304915][ T4407] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 89.370952][ T4407] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.388082][ T4393] loop4: detected capacity change from 0 to 32768 [ 89.561192][ T4393] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 89.589987][ T4393] XFS (loop4): Mounting V5 Filesystem [ 89.596401][ T56] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 89.630710][ T4385] BTRFS warning (device loop2): couldn't read tree root [ 89.645523][ T4385] BTRFS warning (device loop2): try to load backup roots slot 1 [ 89.654214][ T4308] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 89.704528][ T4385] BTRFS warning (device loop2): couldn't read tree root [ 89.711895][ T4385] BTRFS warning (device loop2): try to load backup roots slot 2 [ 89.721326][ T4385] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 89.724923][ T4393] XFS (loop4): Ending clean mount [ 89.738832][ T4385] BTRFS warning (device loop2): couldn't read tree root [ 89.761619][ T4385] BTRFS warning (device loop2): try to load backup roots slot 3 [ 89.784317][ T4393] XFS (loop4): Quotacheck needed: Please wait. [ 89.820541][ T4442] loop3: detected capacity change from 0 to 1024 [ 89.828044][ T4442] EXT4-fs: Ignoring removed bh option [ 89.896479][ T4393] XFS (loop4): Quotacheck: Done. [ 89.912048][ T4385] BTRFS info (device loop2): enabling ssd optimizations [ 89.953226][ T4385] BTRFS info (device loop2): rebuilding free space tree [ 90.071814][ T4385] BTRFS info (device loop2): checking UUID tree [ 90.096164][ T4260] XFS (loop4): Unmounting Filesystem [ 90.191648][ T4442] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.257856][ T27] audit: type=1800 audit(1743485059.943:3): pid=4385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19" name="bus" dev="loop2" ino=257 res=0 errno=0 [ 90.372028][ T4442] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.558620][ T4256] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.624771][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 90.648099][ T4459] loop1: detected capacity change from 0 to 64 [ 90.826009][ T27] audit: type=1800 audit(1743485060.513:4): pid=4459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.35" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 90.936051][ T4459] syz.1.35: attempt to access beyond end of device [ 90.936051][ T4459] loop1: rw=34817, sector=14, nr_sectors = 61 limit=64 [ 91.317448][ T4458] loop0: detected capacity change from 0 to 32768 [ 91.356784][ T4458] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.34 (4458) [ 91.435874][ T4458] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 91.475831][ T4458] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 91.534528][ T4458] BTRFS info (device loop0): using free space tree [ 91.821559][ T4458] BTRFS info (device loop0): enabling ssd optimizations [ 92.006951][ T4514] loop3: detected capacity change from 0 to 64 [ 92.211499][ T4512] loop2: detected capacity change from 0 to 4096 [ 92.262771][ T4512] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 92.412061][ T4512] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 92.454926][ T4250] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 92.473861][ T4512] ntfs3: loop2: Failed to load $Extend. [ 93.261105][ T4516] loop4: detected capacity change from 0 to 32768 [ 93.303348][ T4516] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz.4.46 (4516) [ 93.336167][ T4516] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 93.353788][ T4530] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.356733][ T4516] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 93.384694][ T4516] BTRFS info (device loop4): disabling tree log [ 93.462468][ T4516] BTRFS info (device loop4): enabling tree log [ 93.483662][ T4516] BTRFS info (device loop4): using free space tree [ 93.586902][ T4530] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.607676][ T4530] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.640198][ T4530] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.675116][ T4545] loop0: detected capacity change from 0 to 32768 [ 93.683771][ T4545] XFS: attr2 mount option is deprecated. [ 93.708451][ T4530] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 93.753068][ T4516] BTRFS info (device loop4): enabling ssd optimizations [ 93.763097][ T4516] BTRFS info (device loop4): checking UUID tree [ 93.763622][ T4530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.778819][ T4530] usb 4-1: Product: syz [ 93.817200][ T4530] usb 4-1: Manufacturer: syz [ 93.823447][ T4530] usb 4-1: SerialNumber: syz [ 93.843976][ T4545] XFS (loop0): Mounting V5 Filesystem [ 93.938989][ T4545] XFS (loop0): Ending clean mount [ 93.950416][ T4545] XFS (loop0): Quotacheck needed: Please wait. [ 94.017339][ T4260] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 94.072813][ T4545] XFS (loop0): Quotacheck: Done. [ 94.084337][ T4530] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 94.348335][ T4250] XFS (loop0): Unmounting Filesystem [ 94.710552][ T4330] usb 4-1: USB disconnect, device number 2 [ 94.746271][ T4330] usblp0: removed [ 94.794354][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.890573][ T4594] loop4: detected capacity change from 0 to 128 [ 94.911795][ T4594] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.941465][ T4594] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.008403][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.023752][ T4294] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.030401][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.051462][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.075071][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.092331][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.110479][ T4300] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.131737][ T26] usb 2-1: config 0 descriptor?? [ 95.191514][ T4596] syz.4.65 uses obsolete (PF_INET,SOCK_PACKET) [ 95.220719][ T4596] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 108 [ 95.235059][ T4294] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.252479][ T4294] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 95.277832][ T4294] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.308239][ T4294] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 95.344157][ T4294] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 95.385864][ T4294] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.404388][ T4592] loop0: detected capacity change from 0 to 32768 [ 95.407320][ T4598] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 95.440692][ T4592] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.59 (4592) [ 95.440734][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.467107][ T4294] usb 3-1: Product: syz [ 95.473901][ T4294] usb 3-1: Manufacturer: syz [ 95.497296][ T4592] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.501454][ T4294] cdc_wdm 3-1:1.0: skipping garbage [ 95.538143][ T4294] cdc_wdm 3-1:1.0: skipping garbage [ 95.543824][ T4592] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 95.569376][ T4294] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 95.581025][ T4294] cdc_wdm 3-1:1.0: Unknown control protocol [ 95.584312][ T26] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 95.606313][ T4592] BTRFS info (device loop0): using free space tree [ 95.628247][ T26] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 95.665075][ T26] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 95.855670][ T26] usb 2-1: USB disconnect, device number 2 [ 95.902736][ T4592] BTRFS info (device loop0): enabling ssd optimizations [ 96.111291][ T4250] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.377909][ T4634] loop3: detected capacity change from 0 to 16 [ 96.410225][ T4634] erofs: (device loop3): mounted with root inode @ nid 36. [ 96.419049][ T4293] usb 3-1: USB disconnect, device number 2 [ 96.497615][ T4634] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 96.543277][ T4634] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 96.902809][ T4293] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.092368][ T4632] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.092493][ T4293] usb 5-1: Using ep0 maxpacket: 32 [ 97.130508][ T4293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.159194][ T4293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.182349][ T4293] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 97.191457][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.219102][ T4293] usb 5-1: config 0 descriptor?? [ 97.282361][ T4632] usb 2-1: Using ep0 maxpacket: 8 [ 97.291286][ T4632] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 97.323224][ T4632] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 97.351244][ T4632] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.388905][ T4632] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.426965][ T4632] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.453501][ T4632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.692728][ T4632] usb 2-1: GET_CAPABILITIES returned 0 [ 97.699243][ T4632] usbtmc 2-1:16.0: can't read capabilities [ 97.717299][ T4293] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 97.749192][ T4663] loop3: detected capacity change from 0 to 128 [ 97.822644][ T4663] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 97.855658][ T4663] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.016942][ T4330] usb 5-1: USB disconnect, device number 2 [ 98.054752][ T4632] usb 2-1: USB disconnect, device number 3 [ 98.120621][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 98.355081][ T4661] loop0: detected capacity change from 0 to 40427 [ 98.387396][ T4661] F2FS-fs (loop0): invalid crc value [ 98.428790][ T4661] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.526794][ T4661] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 98.606065][ T4661] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.957219][ T4690] netlink: 'syz.1.94': attribute type 29 has an invalid length. [ 98.976107][ T4690] netlink: 'syz.1.94': attribute type 29 has an invalid length. [ 98.988939][ T4250] syz-executor: attempt to access beyond end of device [ 98.988939][ T4250] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.994415][ T4690] netlink: 'syz.1.94': attribute type 29 has an invalid length. [ 99.059677][ T4673] loop3: detected capacity change from 0 to 32768 [ 99.072158][ T4690] netlink: 'syz.1.94': attribute type 29 has an invalid length. [ 99.088522][ T4690] netlink: 'syz.1.94': attribute type 29 has an invalid length. [ 99.130681][ T4695] loop2: detected capacity change from 0 to 128 [ 99.140180][ T4695] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 99.232729][ T4673] XFS (loop3): Mounting V5 Filesystem [ 99.249743][ T4701] wlan0 speed is unknown, defaulting to 1000 [ 99.256956][ T4701] wlan0 speed is unknown, defaulting to 1000 [ 99.270419][ T4701] wlan0 speed is unknown, defaulting to 1000 [ 99.284447][ T4701] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.287627][ T4695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.299567][ T4701] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 99.356011][ T4701] wlan0 speed is unknown, defaulting to 1000 [ 99.365203][ T4701] wlan0 speed is unknown, defaulting to 1000 [ 99.373234][ T4701] wlan0 speed is unknown, defaulting to 1000 [ 99.381946][ T4701] wlan0 speed is unknown, defaulting to 1000 [ 99.389206][ T4701] wlan0 speed is unknown, defaulting to 1000 [ 99.410128][ T4673] XFS (loop3): Ending clean mount [ 99.440303][ T4673] XFS (loop3): Quotacheck needed: Please wait. [ 99.503720][ T4308] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x336/0xfb0, inode 0x427 dinode [ 99.548738][ T4308] XFS (loop3): Unmount and run xfs_repair [ 99.584807][ T4308] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 99.623784][ T4308] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 99.654627][ T4308] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.679929][ T4308] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 99.726305][ T4308] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 23 28 4.Xh..........#( [ 99.746642][ T4308] 00000040: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 99.781580][ T4308] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 4e 73 88 02 ............Ns.. [ 99.812818][ T4308] 00000060: ff ff ff ff a3 23 1a bd 00 00 00 00 00 00 00 06 .....#.......... [ 99.845912][ T4308] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 99.917120][ T4673] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 100.306902][ T4249] XFS (loop3): Unmounting Filesystem [ 100.323859][ T4728] use of bytesused == 0 is deprecated and will be removed in the future, [ 100.386008][ T4728] use the actual size instead. [ 100.859648][ T4746] wlan0 speed is unknown, defaulting to 1000 [ 101.042541][ T3518] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.244493][ T3518] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.291350][ T3518] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 101.319904][ T3518] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.338799][ T3518] usb 2-1: Product: syz [ 101.347006][ T4759] tipc: Started in network mode [ 101.358173][ T3518] usb 2-1: Manufacturer: syz [ 101.362949][ T4759] tipc: Node identity 40000001, cluster identity 4711 [ 101.362968][ T4759] tipc: Node number set to 1073741825 [ 101.376837][ T3518] usb 2-1: SerialNumber: syz [ 101.542382][ T4632] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.610074][ T3518] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 101.613435][ T4767] loop2: detected capacity change from 0 to 512 [ 101.698012][ T4767] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 101.718286][ T4767] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.742423][ T4632] usb 4-1: Using ep0 maxpacket: 16 [ 101.763134][ T4632] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.782285][ T4632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.789274][ T4632] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 101.812281][ T4632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.822518][ T4632] usb 4-1: config 0 descriptor?? [ 101.839012][ T3518] usb 2-1: USB disconnect, device number 4 [ 101.916517][ T4767] EXT4-fs (loop2): shut down requested (2) [ 102.035043][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 102.047960][ T4743] usblp0: removed [ 102.267227][ T4632] hid (null): report_id 3328464267 is invalid [ 102.276900][ T4632] hid (null): unknown global tag 0x1c [ 102.293847][ T4632] hid (null): unknown global tag 0xe [ 102.309440][ T4632] hid (null): global environment stack underflow [ 102.329681][ T4632] hid (null): unknown global tag 0xe [ 102.350263][ T4632] hid (null): unknown global tag 0xe [ 102.364263][ T4632] hid (null): unknown global tag 0xe [ 102.369699][ T4632] hid (null): invalid report_count 1640429044 [ 102.392996][ T4632] hid (null): unknown global tag 0x16 [ 102.399561][ T4785] device pim6reg1 entered promiscuous mode [ 102.409845][ T4632] hid (null): unknown global tag 0xd [ 102.416000][ T4632] hid (null): report_id 2384115945 is invalid [ 102.441848][ T4632] cougar 0003:060B:500A.0003: unknown main item tag 0x6 [ 102.462682][ T4632] cougar 0003:060B:500A.0003: report_id 3328464267 is invalid [ 102.482529][ T4632] cougar 0003:060B:500A.0003: item 0 4 1 8 parsing failed [ 102.503113][ T4632] cougar 0003:060B:500A.0003: parse failed [ 102.509175][ T4632] cougar: probe of 0003:060B:500A.0003 failed with error -22 [ 102.528242][ T4632] usb 4-1: USB disconnect, device number 3 [ 102.942460][ T4330] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.194558][ T4330] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 103.220857][ T4330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.267968][ T4330] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 103.331572][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 103.371259][ T4330] usb 3-1: Product: syz [ 103.398973][ T4330] usb 3-1: Manufacturer: syz [ 103.416629][ T4330] usb 3-1: SerialNumber: syz [ 103.513463][ T4330] usb 3-1: config 0 descriptor?? [ 103.576286][ T4330] usb 3-1: selecting invalid altsetting 0 [ 103.834885][ T4330] usb 3-1: USB disconnect, device number 3 [ 104.062223][ C1] sched: RT throttling activated [ 104.068753][ T4622] udevd[4622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.301533][ T4822] loop1: detected capacity change from 0 to 256 [ 104.429522][ T4822] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 105.140097][ T4810] loop0: detected capacity change from 0 to 262144 [ 105.177264][ T4810] F2FS-fs (loop0): invalid crc value [ 105.234835][ T4810] F2FS-fs (loop0): Found nat_bits in checkpoint [ 105.312384][ T4810] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 105.500147][ T4846] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 106.103900][ T4861] loop3: detected capacity change from 0 to 1024 [ 106.129016][ T4832] loop2: detected capacity change from 0 to 32768 [ 106.173022][ T4832] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.151 (4832) [ 106.291675][ T4832] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 106.328107][ T4832] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 106.369636][ T4832] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 106.392797][ T4861] VFS: Lookup of 'file0' in hfsplus loop3 would have caused loop [ 106.400388][ T4832] BTRFS info (device loop2): use zstd compression, level 3 [ 106.441089][ T4832] BTRFS info (device loop2): using free space tree [ 106.536258][ T4308] hfsplus: b-tree write err: -5, ino 3 [ 106.686821][ T4857] loop4: detected capacity change from 0 to 40427 [ 106.712476][ T4832] BTRFS info (device loop2): enabling ssd optimizations [ 106.721148][ T4857] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 106.740645][ T4857] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 106.773786][ T4857] F2FS-fs (loop4): invalid crc value [ 106.815000][ T4857] F2FS-fs (loop4): Found nat_bits in checkpoint [ 106.863387][ T27] audit: type=1800 audit(1743485076.553:5): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.151" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 106.985340][ T4857] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 107.016792][ T4857] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.217236][ T4256] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 107.233166][ T27] audit: type=1326 audit(1743485076.923:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa9218d169 code=0x7fc00000 [ 107.427427][ T4860] loop1: detected capacity change from 0 to 40427 [ 107.450769][ T4860] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 107.491694][ T4860] F2FS-fs (loop1): invalid crc value [ 107.551174][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 107.560705][ T4860] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.594501][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 107.679483][ T4860] F2FS-fs (loop1): Start checkpoint disabled! [ 107.723431][ T4860] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 107.853915][ T4860] F2FS-fs (loop1) : inject no more block in inc_valid_block_count of __allocate_data_block+0x48d/0xb50 [ 107.929411][ T4860] F2FS-fs (loop1) : inject no more block in inc_valid_block_count of __allocate_data_block+0x48d/0xb50 [ 107.959965][ T27] audit: type=1326 audit(1743485077.633:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa9218d169 code=0x7fc00000 [ 108.022269][ T27] audit: type=1326 audit(1743485077.633:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa9218d169 code=0x7fc00000 [ 108.082347][ T27] audit: type=1326 audit(1743485077.633:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa9218d169 code=0x7fc00000 [ 108.125032][ T27] audit: type=1326 audit(1743485077.633:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa9218d169 code=0x7fc00000 [ 108.132392][ T4471] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 108.173271][ T27] audit: type=1326 audit(1743485077.633:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa9218d169 code=0x7fc00000 [ 108.217352][ T9] kworker/u4:0: attempt to access beyond end of device [ 108.217352][ T9] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 108.237343][ T9] kworker/u4:0: attempt to access beyond end of device [ 108.237343][ T9] loop1: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 108.272820][ T27] audit: type=1326 audit(1743485077.633:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa9218d169 code=0x7fc00000 [ 108.323834][ T27] audit: type=1326 audit(1743485077.633:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa9218d169 code=0x7fc00000 [ 108.387023][ T27] audit: type=1326 audit(1743485077.643:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa9218d169 code=0x7fc00000 [ 108.394386][ T4471] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.449627][ T4471] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.465293][ T4471] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.475668][ T4471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.718006][ T4471] usb 3-1: usb_control_msg returned -32 [ 108.725916][ T4910] program syz.4.170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.725933][ T4471] usbtmc 3-1:16.0: can't read capabilities [ 109.386918][ T4906] loop0: detected capacity change from 0 to 32768 [ 109.407177][ T4463] usb 3-1: USB disconnect, device number 4 [ 109.500213][ T4906] XFS (loop0): Mounting V5 Filesystem [ 109.668591][ T4906] XFS (loop0): Ending clean mount [ 109.688070][ T4906] XFS (loop0): Quotacheck needed: Please wait. [ 109.761809][ T4906] XFS (loop0): Quotacheck: Done. [ 109.779443][ T4945] loop3: detected capacity change from 0 to 1024 [ 109.787032][ T4945] EXT4-fs: Ignoring removed oldalloc option [ 109.833064][ T4293] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.873619][ T4250] XFS (loop0): Unmounting Filesystem [ 109.892354][ T4945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.917529][ T4945] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 109.984644][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 110.035746][ T4293] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 110.081790][ T4293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.110839][ T4293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.127177][ T4293] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 110.163727][ T4293] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 110.182827][ T4293] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 110.183175][ T4956] loop3: detected capacity change from 0 to 1024 [ 110.200586][ T4293] usb 5-1: Manufacturer: syz [ 110.211446][ T4293] usb 5-1: config 0 descriptor?? [ 110.250378][ T4956] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f01cc01c, mo2=0002] [ 110.260578][ T4956] System zones: 0-1, 3-36 [ 110.270003][ T4954] loop2: detected capacity change from 0 to 4096 [ 110.291802][ T4956] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.408052][ T4954] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 110.419861][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 110.669640][ T4293] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 110.689164][ T4293] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 110.735328][ T4293] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 110.960699][ T4297] usb 5-1: USB disconnect, device number 3 [ 111.448781][ T4970] loop1: detected capacity change from 0 to 32768 [ 111.554138][ T4981] loop3: detected capacity change from 0 to 4096 [ 111.557593][ T4970] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.193 (4970) [ 111.658595][ T4970] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.692987][ T4970] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 111.711964][ T4970] BTRFS info (device loop1): turning off barriers [ 111.781001][ T4970] BTRFS info (device loop1): force clearing of disk cache [ 111.822425][ T4970] BTRFS info (device loop1): enabling disk space caching [ 111.829543][ T4970] BTRFS info (device loop1): doing ref verification [ 111.892297][ T4970] BTRFS info (device loop1): disk space caching is enabled [ 112.240949][ T5023] loop0: detected capacity change from 0 to 64 [ 112.268288][ T4970] BTRFS info (device loop1): enabling ssd optimizations [ 112.322738][ T4970] BTRFS info (device loop1): rebuilding free space tree [ 112.382529][ T4970] BTRFS info (device loop1): disabling free space tree [ 112.420192][ T4970] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.454992][ T4970] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.533595][ T4970] BTRFS info (device loop1): checking UUID tree [ 112.957295][ T5037] autofs4:pid:5037:autofs_fill_super: called with bogus options [ 113.008191][ T4247] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.221141][ T5042] loop4: detected capacity change from 0 to 128 [ 113.363091][ T5042] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.430316][ T5042] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.434884][ T5047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 113.629927][ T5050] loop1: detected capacity change from 0 to 164 [ 113.777288][ T5027] loop3: detected capacity change from 0 to 40427 [ 113.809353][ T5027] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 113.837554][ T5027] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 113.878747][ T5027] F2FS-fs (loop3): invalid crc value [ 113.950533][ T5027] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.139402][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 114.171103][ T5065] loop1: detected capacity change from 0 to 256 [ 114.189904][ T5027] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.205705][ T5027] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.229695][ T5065] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1105abd0, checksum : 0x1119abd0) [ 114.287564][ T5065] exFAT-fs (loop1): invalid boot region [ 114.302466][ T5065] exFAT-fs (loop1): failed to recognize exfat type [ 114.519116][ T4249] syz-executor: attempt to access beyond end of device [ 114.519116][ T4249] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 114.642308][ T4293] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.694358][ T4330] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.872490][ T4293] usb 5-1: Using ep0 maxpacket: 16 [ 114.883972][ T4293] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 114.900229][ T4330] usb 2-1: Using ep0 maxpacket: 16 [ 114.909203][ T4293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.936579][ T4330] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 114.956684][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 114.970320][ T4293] usb 5-1: Product: syz [ 114.975503][ T4293] usb 5-1: Manufacturer: syz [ 114.981413][ T4330] usb 2-1: Product: syz [ 114.991376][ T4330] usb 2-1: Manufacturer: syz [ 114.996094][ T4330] usb 2-1: SerialNumber: syz [ 115.001710][ T4293] usb 5-1: SerialNumber: syz [ 115.031070][ T4293] usb 5-1: config 0 descriptor?? [ 115.053030][ T4330] usb 2-1: config 0 descriptor?? [ 115.069565][ T4293] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 115.107214][ T4293] usb 5-1: Detected FT-X [ 115.287771][ T4293] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 115.304853][ T4466] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.319754][ T4330] usb 2-1: USB disconnect, device number 5 [ 115.502293][ T4466] usb 3-1: Using ep0 maxpacket: 16 [ 115.509362][ T4466] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.536495][ T4466] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 115.547120][ T4466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.577493][ T4466] usb 3-1: config 0 descriptor?? [ 115.679644][ T4294] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.710200][ T4293] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 115.864425][ T4294] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 115.879295][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.930061][ T4463] usb 5-1: USB disconnect, device number 4 [ 115.937013][ T4294] usb 4-1: config 0 descriptor?? [ 115.979863][ T4463] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 116.020392][ T4466] hid (null): global environment stack underflow [ 116.031774][ T4463] ftdi_sio 5-1:0.0: device disconnected [ 116.040574][ T4466] hid (null): bogus close delimiter [ 116.051742][ T4466] hid (null): global environment stack underflow [ 116.061029][ T4466] hid (null): global environment stack underflow [ 116.147374][ T5096] loop1: detected capacity change from 0 to 4096 [ 116.159796][ T5098] loop0: detected capacity change from 0 to 64 [ 116.163839][ T5096] __ntfs_warning: 58 callbacks suppressed [ 116.163870][ T5096] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 116.202961][ T5096] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 116.218129][ T5096] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 116.250048][ T4466] usb 3-1: USB disconnect, device number 5 [ 116.273263][ T5096] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 116.287869][ T5096] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 116.318282][ T5096] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 116.341324][ T5096] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 116.389523][ T4294] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 116.418537][ T5096] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 116.442462][ T5096] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 116.518526][ T5096] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 116.569220][ T5096] ntfs: volume version 3.1. [ 116.621911][ T4294] usb 4-1: USB disconnect, device number 4 [ 117.063624][ T5111] loop4: detected capacity change from 0 to 2048 [ 117.211585][ T5111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.364133][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 117.872997][ T5140] loop0: detected capacity change from 0 to 1024 [ 117.889154][ T5140] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.916335][ T5140] EXT4-fs: Ignoring removed nobh option [ 117.921962][ T5140] EXT4-fs: Ignoring removed bh option [ 117.946370][ T5140] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.035489][ T5140] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.118812][ T5140] EXT4-fs (loop0): shut down requested (1) [ 118.142327][ T4466] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.261118][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 118.332696][ T4466] usb 4-1: Using ep0 maxpacket: 8 [ 118.341369][ T4466] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 118.376618][ T4466] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 118.388341][ T4466] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.406506][ T4466] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.426980][ T4466] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.482611][ T4466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.509642][ T5149] loop4: detected capacity change from 0 to 32768 [ 118.531216][ T5149] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.257 (5149) [ 118.562308][ T5149] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 118.573616][ T5149] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 118.584165][ T5149] BTRFS info (device loop4): using free space tree [ 118.710296][ T4466] usb 4-1: GET_CAPABILITIES returned 0 [ 118.732473][ T4466] usbtmc 4-1:16.0: can't read capabilities [ 118.819765][ T5149] BTRFS info (device loop4): enabling ssd optimizations [ 118.928297][ T4466] usb 4-1: USB disconnect, device number 5 [ 119.169585][ T4260] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 119.255785][ T5157] loop2: detected capacity change from 0 to 32768 [ 119.460102][ T5157] XFS (loop2): Mounting V5 Filesystem [ 119.565282][ T5157] XFS (loop2): Ending clean mount [ 119.577777][ T5157] XFS (loop2): Quotacheck needed: Please wait. [ 119.590703][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 119.619811][ T5197] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.635829][ T5197] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.644671][ T5197] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.653509][ T5197] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.667791][ T5157] XFS (loop2): Quotacheck: Done. [ 119.757639][ T5197] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.766963][ T5197] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.775947][ T5197] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.784917][ T5197] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.802132][ T5157] XFS (loop2): User initiated shutdown received. [ 119.824437][ T5157] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 119.871622][ T5157] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 120.009124][ T4256] XFS (loop2): Unmounting Filesystem [ 120.307738][ T5205] loop4: detected capacity change from 0 to 8192 [ 120.354144][ T5205] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 120.421994][ T5205] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 120.464981][ T5205] REISERFS (device loop4): using ordered data mode [ 120.487296][ T5205] reiserfs: using flush barriers [ 120.529901][ T5205] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.581550][ T5218] loop3: detected capacity change from 0 to 64 [ 120.591091][ T5205] REISERFS (device loop4): checking transaction log (loop4) [ 120.637592][ T5218] hfs: unable to locate alternate MDB [ 120.639878][ T5205] REISERFS (device loop4): Using r5 hash to sort names [ 120.670654][ T5218] hfs: continuing without an alternate MDB [ 120.690035][ T5205] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 120.798632][ T5225] loop2: detected capacity change from 0 to 7 [ 120.830928][ T5225] Dev loop2: unable to read RDB block 7 [ 120.852720][ T5225] loop2: AHDI p1 p2 [ 120.856706][ T5225] loop2: partition table partially beyond EOD, truncated [ 120.870842][ T5225] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 121.151520][ T5230] loop0: detected capacity change from 0 to 512 [ 121.158819][ T5230] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.218497][ T5230] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.281: invalid indirect mapped block 10 (level 1) [ 121.246989][ T5230] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.281: invalid indirect mapped block 8 (level 1) [ 121.268567][ T5230] EXT4-fs (loop0): 1 truncate cleaned up [ 121.283627][ T5230] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.451625][ T5241] loop4: detected capacity change from 0 to 128 [ 121.477322][ T5241] EXT4-fs (loop4): Test dummy encryption mode enabled [ 121.495105][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 121.519186][ T5241] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.520320][ T5222] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 121.539372][ T5241] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.815927][ T5239] loop1: detected capacity change from 0 to 32768 [ 121.861637][ T5239] XFS (loop1): Mounting V5 Filesystem [ 121.875129][ T5256] capability: warning: `syz.0.286' uses 32-bit capabilities (legacy support in use) [ 121.890363][ T5256] program syz.0.286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.949975][ T5241] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 122.061459][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 122.071769][ T5264] loop2: detected capacity change from 0 to 128 [ 122.097745][ T5262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.288'. [ 122.110852][ T5239] XFS (loop1): Ending clean mount [ 122.139658][ T5264] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 122.175271][ T5239] XFS (loop1): Quotacheck needed: Please wait. [ 122.216934][ T5264] syz.2.287: attempt to access beyond end of device [ 122.216934][ T5264] loop2: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 122.268998][ T5239] XFS (loop1): Quotacheck: Done. [ 122.280468][ T5264] Buffer I/O error on dev loop2, logical block 2066843070, lost async page write [ 122.312017][ T5264] syz.2.287: attempt to access beyond end of device [ 122.312017][ T5264] loop2: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 122.402607][ T5264] Buffer I/O error on dev loop2, logical block 8767744, lost async page write [ 122.411577][ T5264] syz.2.287: attempt to access beyond end of device [ 122.411577][ T5264] loop2: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 122.462599][ T4247] XFS (loop1): Unmounting Filesystem [ 122.535186][ T5264] Buffer I/O error on dev loop2, logical block 13269809, lost async page write [ 122.550259][ T5264] syz.2.287: attempt to access beyond end of device [ 122.550259][ T5264] loop2: rw=2049, sector=1157, nr_sectors = 1 limit=128 [ 122.569020][ T5264] Buffer I/O error on dev loop2, logical block 1157, lost async page write [ 122.579690][ T5264] syz.2.287: attempt to access beyond end of device [ 122.579690][ T5264] loop2: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 122.594800][ T5264] Buffer I/O error on dev loop2, logical block 3211264, lost async page write [ 122.643527][ T5264] syz.2.287: attempt to access beyond end of device [ 122.643527][ T5264] loop2: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 122.702655][ T5264] Buffer I/O error on dev loop2, logical block 8768635, lost async page write [ 122.712791][ T5264] syz.2.287: attempt to access beyond end of device [ 122.712791][ T5264] loop2: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 122.743812][ T5264] Buffer I/O error on dev loop2, logical block 13466417, lost async page write [ 122.765051][ T5264] syz.2.287: attempt to access beyond end of device [ 122.765051][ T5264] loop2: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 122.796454][ T5264] Buffer I/O error on dev loop2, logical block 209285, lost async page write [ 122.824501][ T5268] syz.2.287: attempt to access beyond end of device [ 122.824501][ T5268] loop2: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 122.854463][ T5268] Buffer I/O error on dev loop2, logical block 2066843070, lost async page write [ 122.988256][ T4256] sysv_free_block: trying to free block not in datazone [ 123.026306][ T4256] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 123.388406][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'. [ 123.460778][ T5294] loop3: detected capacity change from 0 to 2048 [ 123.493086][ T5294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.533205][ T5279] loop4: detected capacity change from 0 to 40427 [ 123.566461][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 123.566478][ T27] audit: type=1800 audit(1743485093.253:75): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.301" name="bus" dev="loop3" ino=1436 res=0 errno=0 [ 123.569203][ T5279] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 123.644112][ T5279] F2FS-fs (loop4): invalid crc value [ 123.699631][ T5279] F2FS-fs (loop4): Found nat_bits in checkpoint [ 123.796817][ T5304] netlink: 220 bytes leftover after parsing attributes in process `syz.3.305'. [ 123.860525][ T5279] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 123.954582][ T27] audit: type=1800 audit(1743485093.643:76): pid=5279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.296" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 123.958905][ T5307] loop3: detected capacity change from 0 to 128 [ 123.988807][ T5279] syz.4.296: attempt to access beyond end of device [ 123.988807][ T5279] loop4: rw=2057, sector=77824, nr_sectors = 8 limit=40427 [ 124.449224][ T5298] loop2: detected capacity change from 0 to 40427 [ 124.482362][ T5298] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 124.523151][ T5298] F2FS-fs (loop2): invalid crc value [ 124.580805][ T5298] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.627943][ T4463] kernel write not supported for file /snd/seq (pid: 4463 comm: kworker/1:9) [ 124.678427][ T5319] capability: warning: `syz.4.307' uses deprecated v2 capabilities in a way that may be insecure [ 124.801329][ T5298] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.892693][ T5327] device batadv_slave_1 entered promiscuous mode [ 124.921424][ T5326] device batadv_slave_1 left promiscuous mode [ 125.591495][ T5347] loop1: detected capacity change from 0 to 512 [ 125.673513][ T5347] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 125.711355][ T5347] EXT4-fs (loop1): group descriptors corrupted! [ 125.730567][ T5351] loop2: detected capacity change from 0 to 1024 [ 125.785372][ T5351] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.021405][ T5351] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 126.140271][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 126.339112][ T5366] Bluetooth: MGMT ver 1.22 [ 126.478408][ T5372] loop4: detected capacity change from 0 to 64 [ 127.105893][ T5383] loop4: detected capacity change from 0 to 512 [ 127.153621][ T5387] loop2: detected capacity change from 0 to 1024 [ 127.303088][ T5387] hfsplus: xattr search failed [ 127.330708][ T5387] hfsplus: xattr searching failed [ 127.366094][ T5383] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.368459][ T5391] loop1: detected capacity change from 0 to 2048 [ 127.375853][ T5383] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.420172][ T5383] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.334: corrupted inode contents [ 127.442106][ T5383] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #2: comm syz.4.334: mark_inode_dirty error [ 127.476077][ T9] hfsplus: b-tree write err: -5, ino 3 [ 127.482656][ T5383] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.334: corrupted inode contents [ 127.538704][ T5399] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.569170][ T5383] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.334: mark_inode_dirty error [ 127.944716][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 128.162363][ T4532] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.304334][ T5420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.351'. [ 128.332435][ T5420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.351'. [ 128.362282][ T4532] usb 4-1: Using ep0 maxpacket: 32 [ 128.363446][ T5420] device netdevsim0 entered promiscuous mode [ 128.369399][ T4532] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.405289][ T5420] device netdevsim0 left promiscuous mode [ 128.430410][ T4532] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.460286][ T4532] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 128.490155][ T4532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.542127][ T5422] loop0: detected capacity change from 0 to 2048 [ 128.547090][ T4532] usb 4-1: config 0 descriptor?? [ 128.565934][ T5404] loop2: detected capacity change from 0 to 32768 [ 128.592636][ T5422] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 128.663687][ T5422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.675804][ T5404] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.343 (5404) [ 128.708810][ T5404] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.760611][ T5404] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 128.778074][ T5404] BTRFS info (device loop2): setting nodatacow, compression disabled [ 128.792609][ T5424] loop1: detected capacity change from 0 to 2048 [ 128.807414][ T5404] BTRFS info (device loop2): max_inline at 0 [ 128.827673][ T5404] BTRFS info (device loop2): enabling disk space caching [ 128.861670][ T5424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.872366][ T5404] BTRFS info (device loop2): turning off barriers [ 128.878998][ T5404] BTRFS info (device loop2): turning on flush-on-commit [ 128.922592][ T5404] BTRFS info (device loop2): doing ref verification [ 128.929308][ T5404] BTRFS info (device loop2): force clearing of disk cache [ 128.976182][ T5404] BTRFS info (device loop2): enabling ssd optimizations [ 129.003606][ T4532] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 129.023413][ T5404] BTRFS info (device loop2): max_inline at 4096 [ 129.043076][ T5404] BTRFS info (device loop2): disk space caching is enabled [ 129.180228][ T5433] device geneve1 entered promiscuous mode [ 129.294921][ T4528] usb 4-1: USB disconnect, device number 6 [ 129.321984][ T5433] device geneve1 left promiscuous mode [ 129.336638][ T5404] BTRFS info (device loop2): rebuilding free space tree [ 129.450780][ T5404] BTRFS info (device loop2): disabling free space tree [ 129.487057][ T5404] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.505771][ T5449] loop1: detected capacity change from 0 to 2048 [ 129.522378][ T5404] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.526070][ T5449] UDF-fs: bad mount option "0xffffffffffffffff00000000000000000000̉aƒûÙ¸w›WÍ)Ò.Noêð›†)‰l_ýSœ€8*" or missing value [ 129.921018][ T4256] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.257345][ T5458] loop3: detected capacity change from 0 to 4096 [ 130.382036][ T5463] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.492273][ T4532] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.528066][ T5457] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 524288 [ 130.567900][ T5457] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 130.601891][ T5457] Remounting filesystem read-only [ 130.624336][ T5457] NILFS (loop3): error -5 truncating bmap (ino=15) [ 130.651012][ T5458] syz.3.363 (5458) used greatest stack depth: 18752 bytes left [ 130.694563][ T4532] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.712299][ T4532] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 130.768771][ T4532] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.799397][ T4532] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.822367][ T4532] usb 1-1: Duplicate descriptor for config 1 interface 2 altsetting 1, skipping [ 130.836363][ T5453] loop1: detected capacity change from 0 to 32768 [ 130.854798][ T4249] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 130.866030][ T4532] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.877065][ T4532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.885431][ T5453] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 scanned by syz.1.358 (5453) [ 130.903266][ T4532] usb 1-1: Product: syz [ 130.924866][ T4532] usb 1-1: Manufacturer: syz [ 130.933957][ T4532] usb 1-1: SerialNumber: syz [ 130.971429][ T5453] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 130.992328][ T4261] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.013721][ T5453] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 131.035328][ T5453] BTRFS info (device loop1): turning on flush-on-commit [ 131.048022][ T5453] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 131.060092][ T5453] BTRFS info (device loop1): trying to use backup root at mount time [ 131.068933][ T5453] BTRFS info (device loop1): disabling tree log [ 131.075865][ T5453] BTRFS info (device loop1): enabling tree log [ 131.082158][ T5453] BTRFS info (device loop1): use zlib compression, level 3 [ 131.090495][ T5453] BTRFS info (device loop1): using free space tree [ 131.206219][ T4261] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.238972][ T4261] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 131.292409][ T5453] BTRFS info (device loop1): enabling ssd optimizations [ 131.311556][ T4532] usb 1-1: USB disconnect, device number 3 [ 131.348886][ T5453] BTRFS info (device loop1): checking UUID tree [ 131.355607][ T4261] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.376640][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.435776][ T5467] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 131.475930][ T5453] fs-verity: sha512 using implementation "sha512-avx2" [ 131.590148][ T5494] loop3: detected capacity change from 0 to 2048 [ 131.629719][ T5453] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 131.660231][ T5494] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.849335][ T27] audit: type=1800 audit(1743485101.533:77): pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.367" name=3ADC332C3F474EEDF6F6B659997387B7E6CCC3A2FDEB79DE8461C7A9982B2246E1D848EDF6533D2E dev="loop3" ino=1367 res=0 errno=0 [ 132.117479][ T4532] usb 3-1: USB disconnect, device number 6 [ 132.169258][ T4247] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 132.343000][ T4577] kernel write not supported for file /fb0 (pid: 4577 comm: kworker/0:16) [ 132.401365][ T5504] loop0: detected capacity change from 0 to 256 [ 132.463246][ T5504] exfat: Deprecated parameter 'namecase' [ 132.529949][ T5504] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 132.877241][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.884299][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.012351][ T4577] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 133.234177][ T4577] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.291185][ T4577] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.314342][ T4577] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.344014][ T4577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.375086][ T4577] usb 5-1: Product: syz [ 133.379330][ T4577] usb 5-1: Manufacturer: syz [ 133.425861][ T4577] usb 5-1: SerialNumber: syz [ 133.651837][ T5531] loop2: detected capacity change from 0 to 16 [ 133.698511][ T5531] erofs: (device loop2): mounted with root inode @ nid 36. [ 133.897266][ T4577] usb 5-1: 0:2 : does not exist [ 134.372262][ T5536] loop2: detected capacity change from 0 to 32768 [ 134.385057][ T5536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.385 (5536) [ 134.404548][ T5536] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.414860][ T5536] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 134.423668][ T5536] BTRFS info (device loop2): force clearing of disk cache [ 134.430824][ T5536] BTRFS info (device loop2): allowing degraded mounts [ 134.438467][ T5536] BTRFS info (device loop2): force zlib compression, level 3 [ 134.446007][ T5536] BTRFS info (device loop2): turning on sync discard [ 134.452834][ T5536] BTRFS info (device loop2): use zlib compression, level 3 [ 134.460089][ T5536] BTRFS info (device loop2): enabling disk space caching [ 134.467254][ T5536] BTRFS info (device loop2): disabling tree log [ 134.473713][ T5536] BTRFS info (device loop2): disk space caching is enabled [ 134.524011][ T22] usb 5-1: USB disconnect, device number 5 [ 134.662955][ T5519] loop1: detected capacity change from 0 to 40427 [ 134.694845][ T5528] loop3: detected capacity change from 0 to 32768 [ 134.732717][ T5528] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.381 (5528) [ 134.758600][ T5519] F2FS-fs (loop1): invalid crc value [ 134.797895][ T5519] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.829958][ T5528] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.851981][ T5536] BTRFS info (device loop2): enabling ssd optimizations [ 134.877948][ T5528] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 134.887265][ T5528] BTRFS info (device loop3): using free space tree [ 134.894234][ T5536] BTRFS info (device loop2): rebuilding free space tree [ 134.918517][ T5536] BTRFS info (device loop2): disabling free space tree [ 134.925599][ T5536] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.935398][ T5536] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.122454][ T5519] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.233278][ T4256] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.252533][ T5528] BTRFS info (device loop3): enabling ssd optimizations [ 135.405609][ T27] audit: type=1800 audit(1743485105.093:78): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.377" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 135.502138][ T5534] loop0: detected capacity change from 0 to 40427 [ 135.579863][ T5534] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 135.627249][ T5534] F2FS-fs (loop0): invalid crc value [ 135.670819][ T4249] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.695609][ T5534] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.867606][ T56] bio_check_eod: 3 callbacks suppressed [ 135.867627][ T56] kworker/u4:4: attempt to access beyond end of device [ 135.867627][ T56] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 135.949507][ T5590] loop2: detected capacity change from 0 to 128 [ 136.035471][ T5534] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.075858][ T5519] VFS:Filesystem freeze failed [ 136.097899][ T5590] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.128123][ T5590] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.271587][ T4250] syz-executor: attempt to access beyond end of device [ 136.271587][ T4250] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.367793][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 137.278628][ T5597] loop2: detected capacity change from 0 to 32768 [ 137.371797][ T5597] XFS (loop2): Mounting V5 Filesystem [ 137.461572][ T5597] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 137.540598][ T5597] XFS (loop2): Starting recovery (logdev: internal) [ 137.587002][ T5597] XFS (loop2): Ending recovery (logdev: internal) [ 137.792084][ T4256] XFS (loop2): Unmounting Filesystem [ 137.932397][ T4532] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.964988][ T5609] loop1: detected capacity change from 0 to 32768 [ 137.979820][ T5609] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.396 (5609) [ 138.000250][ T5609] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.011808][ T5609] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 138.041538][ T5609] BTRFS info (device loop1): turning on sync discard [ 138.052422][ T5609] BTRFS info (device loop1): max_inline at 0 [ 138.069063][ T5609] BTRFS info (device loop1): enabling disk space caching [ 138.079179][ T5609] BTRFS info (device loop1): setting nodatasum [ 138.099414][ T5609] BTRFS info (device loop1): turning on flush-on-commit [ 138.113922][ T5609] BTRFS info (device loop1): setting datasum [ 138.123093][ T5623] loop0: detected capacity change from 0 to 40427 [ 138.130284][ T5609] BTRFS info (device loop1): doing ref verification [ 138.137242][ T4532] usb 4-1: Using ep0 maxpacket: 16 [ 138.144763][ T4532] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 138.150261][ T5623] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 138.173918][ T5609] BTRFS info (device loop1): force clearing of disk cache [ 138.181168][ T5609] BTRFS info (device loop1): enabling ssd optimizations [ 138.189368][ T4532] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.216834][ T5623] F2FS-fs (loop0): invalid crc value [ 138.221168][ T4532] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.239544][ T5609] BTRFS info (device loop1): turning off barriers [ 138.250704][ T5609] BTRFS info (device loop1): max_inline at 4096 [ 138.277040][ T5623] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.277726][ T5609] BTRFS info (device loop1): disk space caching is enabled [ 138.301177][ T4532] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.322977][ T4532] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.331517][ T4532] usb 4-1: Product: syz [ 138.359977][ T4532] usb 4-1: Manufacturer: syz [ 138.383232][ T4532] usb 4-1: SerialNumber: syz [ 138.417300][ T5623] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 138.495509][ T5609] BTRFS info (device loop1): rebuilding free space tree [ 138.514815][ T5623] syz.0.399: attempt to access beyond end of device [ 138.514815][ T5623] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 138.547722][ T5609] BTRFS info (device loop1): disabling free space tree [ 138.580355][ T5609] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.609170][ T4250] syz-executor: attempt to access beyond end of device [ 138.609170][ T4250] loop0: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 138.629881][ T5609] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 138.833971][ T4532] usb 4-1: 0:2 : does not exist [ 138.923251][ T5653] netlink: 'syz.2.404': attribute type 2 has an invalid length. [ 138.935951][ T5655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.405'. [ 138.945655][ T5653] netlink: 32 bytes leftover after parsing attributes in process `syz.2.404'. [ 139.231909][ T4527] kernel read not supported for file 181/task/182/cmdline (pid: 4527 comm: kworker/0:12) [ 139.256550][ T4247] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.506637][ T4532] usb 4-1: USB disconnect, device number 7 [ 140.101062][ T5678] input: syz0 as /devices/virtual/input/input6 [ 140.130551][ T5679] loop1: detected capacity change from 0 to 128 [ 140.180597][ T5679] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.203919][ T5679] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.426350][ T4247] EXT4-fs (loop1): unmounting filesystem. [ 140.721557][ T5669] loop0: detected capacity change from 0 to 32768 [ 140.771763][ T5669] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.402 (5669) [ 140.830741][ T5669] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.858228][ T5669] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 140.881479][ T5669] BTRFS info (device loop0): using free space tree [ 141.096866][ T5669] BTRFS info (device loop0): enabling ssd optimizations [ 141.243980][ T5697] loop1: detected capacity change from 0 to 32768 [ 141.340065][ T5697] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 141.397497][ T5697] (syz.1.422,5697,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1 [ 141.422571][ T4532] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.441083][ T4250] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.456231][ T5697] (syz.1.422,5697,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1 [ 141.606170][ T5728] loop2: detected capacity change from 0 to 256 [ 141.625233][ T5695] loop3: detected capacity change from 0 to 32768 [ 141.637136][ T5695] XFS: noikeep mount option is deprecated. [ 141.647884][ T4532] usb 5-1: Using ep0 maxpacket: 16 [ 141.653416][ T5695] XFS: noikeep mount option is deprecated. [ 141.670526][ T4532] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.685490][ T4532] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 141.721520][ T5728] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 141.779413][ T4532] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 141.791655][ T4532] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 141.825611][ T4532] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.841843][ T4532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 141.842937][ T4247] ocfs2: Unmounting device (7,1) on (node local) [ 141.860297][ T4532] usb 5-1: SerialNumber: syz [ 141.873840][ T5719] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.881371][ T5719] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.895244][ T5695] XFS (loop3): Mounting V5 Filesystem [ 141.935983][ T4532] hub 5-1:1.0: bad descriptor, ignoring hub [ 141.942006][ T4532] hub: probe of 5-1:1.0 failed with error -5 [ 142.113846][ T5695] XFS (loop3): Ending clean mount [ 142.138473][ T5740] loop1: detected capacity change from 0 to 64 [ 142.154940][ T5695] XFS (loop3): Quotacheck needed: Please wait. [ 142.206119][ T5719] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 142.278036][ T5719] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 142.295998][ T5695] XFS (loop3): Quotacheck: Done. [ 142.548433][ T4249] XFS (loop3): Unmounting Filesystem [ 142.725907][ T4532] cdc_ether 5-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 143.087127][ T5189] usb 5-1: USB disconnect, device number 6 [ 143.098510][ T5189] cdc_ether 5-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 143.794723][ T5778] loop3: detected capacity change from 0 to 512 [ 143.878074][ T5784] loop1: detected capacity change from 0 to 512 [ 143.885709][ T5778] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.441: casefold flag without casefold feature [ 143.908664][ T5778] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.441: couldn't read orphan inode 15 (err -117) [ 143.923762][ T5778] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 143.974666][ T5784] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.442: inode #13: comm syz.1.442: iget: illegal inode # [ 144.038102][ T5784] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.442: couldn't read orphan inode 13 (err -117) [ 144.118230][ T5784] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 144.282984][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 144.358060][ T4247] EXT4-fs (loop1): unmounting filesystem. [ 144.755471][ T5793] netlink: 64 bytes leftover after parsing attributes in process `syz.3.445'. [ 144.801223][ T5765] loop2: detected capacity change from 0 to 40427 [ 144.804056][ T5795] device bridge2 entered promiscuous mode [ 144.893189][ T5765] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 144.901074][ T5765] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 145.035146][ T5765] F2FS-fs (loop2): invalid crc value [ 145.098149][ T5765] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 145.166628][ T5765] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 145.218259][ T4307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.344881][ T5765] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 145.352088][ T5765] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 145.430234][ T4307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.621862][ T4307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.804475][ T4307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.337727][ T5833] device ip6tnl1 entered promiscuous mode [ 146.469224][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.481678][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.491996][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.503137][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.510923][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.522830][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.552025][ T5840] loop0: detected capacity change from 0 to 64 [ 146.739337][ T5840] minix_free_block (loop0:2): bit already cleared [ 146.780514][ T5840] minix_free_block (loop0:3): bit already cleared [ 146.802379][ T5840] minix_free_block (loop0:4): bit already cleared [ 146.956515][ T5846] input: syz0 as /devices/virtual/input/input7 [ 147.076456][ T5834] wlan0 speed is unknown, defaulting to 1000 [ 147.278671][ T4296] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 147.496328][ T4296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.533462][ T4296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.582426][ T4296] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 147.617019][ T5866] loop0: detected capacity change from 0 to 512 [ 147.622403][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.648143][ T4296] usb 5-1: config 0 descriptor?? [ 147.665942][ T5866] EXT4-fs: Ignoring removed oldalloc option [ 147.734853][ T5866] EXT4-fs (loop0): Test dummy encryption mode enabled [ 147.744131][ T5866] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 147.839444][ T5866] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.937352][ T5866] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 148.046680][ T5866] EXT4-fs (loop0): 1 truncate cleaned up [ 148.062516][ T5866] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 148.117885][ T4296] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 148.146295][ T4296] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 148.186060][ T4296] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0008/input/input8 [ 148.259977][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 148.274298][ T4296] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 148.309039][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 148.362010][ T4296] usb 5-1: USB disconnect, device number 7 [ 148.527493][ T5881] loop2: detected capacity change from 0 to 512 [ 148.560599][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 148.600124][ T5881] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.470: inline data xattr refers to an external xattr inode [ 148.636204][ T5881] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.470: couldn't read orphan inode 12 (err -117) [ 148.695760][ T5881] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.776281][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 149.249691][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.313297][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.343844][ T5834] device bridge_slave_0 entered promiscuous mode [ 149.366864][ T5903] loop4: detected capacity change from 0 to 8192 [ 149.372158][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.422158][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.450037][ T5903] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 149.472533][ T5903] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 149.477419][ T5834] device bridge_slave_1 entered promiscuous mode [ 149.524915][ T5903] REISERFS (device loop4): using ordered data mode [ 149.531513][ T5903] reiserfs: using flush barriers [ 149.613613][ T5903] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.652961][ T5903] REISERFS (device loop4): checking transaction log (loop4) [ 149.692100][ T5903] REISERFS (device loop4): Using r5 hash to sort names [ 149.712793][ T5903] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 149.890013][ T5189] wlan0 speed is unknown, defaulting to 1000 [ 149.901085][ T5189] ================================================================== [ 149.909205][ T5189] BUG: KASAN: use-after-free in siw_query_port+0x342/0x430 [ 149.916444][ T5189] Read of size 4 at addr ffff8880560240e0 by task kworker/0:17/5189 [ 149.924442][ T5189] [ 149.926812][ T5189] CPU: 0 PID: 5189 Comm: kworker/0:17 Not tainted 6.1.132-syzkaller #0 [ 149.935082][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.945173][ T5189] Workqueue: infiniband ib_cache_event_task [ 149.951137][ T5189] Call Trace: [ 149.954437][ T5189] [ 149.957389][ T5189] dump_stack_lvl+0x1e3/0x2cb [ 149.962076][ T5189] ? nf_tcp_handle_invalid+0x647/0x647 [ 149.967543][ T5189] ? panic+0x764/0x764 [ 149.971616][ T5189] ? _printk+0xd1/0x111 [ 149.975776][ T5189] ? __virt_addr_valid+0x17f/0x530 [ 149.980903][ T5189] ? __virt_addr_valid+0x17f/0x530 [ 149.986031][ T5189] print_report+0x15f/0x4f0 [ 149.990544][ T5189] ? __virt_addr_valid+0x17f/0x530 [ 149.995664][ T5189] ? __virt_addr_valid+0x17f/0x530 [ 150.000786][ T5189] ? __virt_addr_valid+0x45b/0x530 [ 150.005913][ T5189] ? __phys_addr+0xb6/0x170 [ 150.010428][ T5189] ? siw_query_port+0x342/0x430 [ 150.015290][ T5189] kasan_report+0x136/0x160 [ 150.019802][ T5189] ? siw_query_port+0x342/0x430 [ 150.024664][ T5189] siw_query_port+0x342/0x430 [ 150.029349][ T5189] ib_cache_update+0x1a8/0xaf0 [ 150.034128][ T5189] ? ib_cache_setup_one+0x5b0/0x5b0 [ 150.039336][ T5189] ? read_lock_is_recursive+0x10/0x10 [ 150.044727][ T5189] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 150.050721][ T5189] ? print_irqtrace_events+0x210/0x210 [ 150.056189][ T5189] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 150.062091][ T5189] ib_cache_event_task+0xef/0x1e0 [ 150.067125][ T5189] ? process_one_work+0x806/0x1260 [ 150.072245][ T5189] process_one_work+0x917/0x1260 [ 150.077200][ T5189] ? worker_detach_from_pool+0x260/0x260 [ 150.082844][ T5189] ? _raw_spin_lock_irqsave+0x120/0x120 [ 150.088395][ T5189] ? kthread_data+0x4e/0xc0 [ 150.092913][ T5189] ? wq_worker_running+0x97/0x190 [ 150.097942][ T5189] worker_thread+0xa47/0x1200 [ 150.102632][ T5189] ? _raw_spin_unlock+0x40/0x40 [ 150.107489][ T5189] kthread+0x28d/0x320 [ 150.111557][ T5189] ? worker_clr_flags+0x190/0x190 [ 150.116590][ T5189] ? kthread_blkcg+0xd0/0xd0 [ 150.121183][ T5189] ret_from_fork+0x1f/0x30 [ 150.125616][ T5189] [ 150.128633][ T5189] [ 150.130957][ T5189] The buggy address belongs to the physical page: [ 150.137379][ T5189] page:ffffea0001580900 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56024 [ 150.147548][ T5189] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 150.154666][ T5189] raw: 00fff00000000000 ffffea0001554908 ffff8880b8f411f0 0000000000000000 [ 150.163254][ T5189] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 150.171830][ T5189] page dumped because: kasan: bad access detected [ 150.178247][ T5189] page_owner tracks the page as freed [ 150.183611][ T5189] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ZERO), pid 4247, tgid 4247 (syz-executor), ts 84445677433, free_ts 149897514462 [ 150.205232][ T5189] post_alloc_hook+0x18d/0x1b0 [ 150.209999][ T5189] get_page_from_freelist+0x3731/0x38d0 [ 150.215547][ T5189] __alloc_pages+0x28d/0x770 [ 150.220138][ T5189] __kmalloc_large_node+0x91/0x1d0 [ 150.225254][ T5189] __kmalloc_node+0x111/0x230 [ 150.229936][ T5189] kvmalloc_node+0x6e/0x180 [ 150.234444][ T5189] alloc_netdev_mqs+0x85/0xef0 [ 150.239208][ T5189] ieee80211_if_add+0xee0/0x1940 [ 150.244151][ T5189] ieee80211_register_hw+0x32ff/0x3f10 [ 150.249614][ T5189] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 150.255343][ T5189] hwsim_new_radio_nl+0xc54/0x1190 [ 150.260461][ T5189] genl_rcv_msg+0xbfa/0xf50 [ 150.264986][ T5189] netlink_rcv_skb+0x1cd/0x410 [ 150.269748][ T5189] genl_rcv+0x24/0x40 [ 150.273731][ T5189] netlink_unicast+0x7e2/0x970 [ 150.278497][ T5189] netlink_sendmsg+0xa26/0xd60 [ 150.283262][ T5189] page last free stack trace: [ 150.287927][ T5189] free_unref_page_prepare+0x12a6/0x15b0 [ 150.293566][ T5189] free_unref_page+0x33/0x3e0 [ 150.298248][ T5189] free_large_kmalloc+0xfb/0x190 [ 150.303192][ T5189] device_release+0x91/0x1c0 [ 150.307790][ T5189] kobject_put+0x224/0x460 [ 150.312211][ T5189] netdev_run_todo+0xe19/0xf20 [ 150.316973][ T5189] ieee80211_unregister_hw+0xfc/0x290 [ 150.322347][ T5189] mac80211_hwsim_del_radio+0x2be/0x4a0 [ 150.327900][ T5189] hwsim_exit_net+0x5bd/0x660 [ 150.332606][ T5189] cleanup_net+0x7f1/0xd20 [ 150.337021][ T5189] process_one_work+0x917/0x1260 [ 150.341984][ T5189] worker_thread+0xa47/0x1200 [ 150.346661][ T5189] kthread+0x28d/0x320 [ 150.350729][ T5189] ret_from_fork+0x1f/0x30 [ 150.355151][ T5189] [ 150.357471][ T5189] Memory state around the buggy address: [ 150.363097][ T5189] ffff888056023f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.371156][ T5189] ffff888056024000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 150.379214][ T5189] >ffff888056024080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 150.387268][ T5189] ^ [ 150.394460][ T5189] ffff888056024100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 150.402519][ T5189] ffff888056024180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 150.410574][ T5189] ================================================================== [ 150.479478][ T5894] loop3: detected capacity change from 0 to 32768 [ 150.632508][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 150.816255][ T5894] find_entry called with index = 0 [ 150.824312][ T5894] find_entry called with index = 0 [ 150.865353][ T5189] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.872609][ T5189] CPU: 0 PID: 5189 Comm: kworker/0:17 Not tainted 6.1.132-syzkaller #0 [ 150.880867][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.890925][ T5189] Workqueue: infiniband ib_cache_event_task [ 150.896833][ T5189] Call Trace: [ 150.900107][ T5189] [ 150.903044][ T5189] dump_stack_lvl+0x1e3/0x2cb [ 150.907745][ T5189] ? nf_tcp_handle_invalid+0x647/0x647 [ 150.913225][ T5189] ? panic+0x764/0x764 [ 150.917314][ T5189] ? preempt_schedule_common+0xa6/0xd0 [ 150.922788][ T5189] ? vscnprintf+0x59/0x80 [ 150.927129][ T5189] panic+0x318/0x764 [ 150.931033][ T5189] ? check_panic_on_warn+0x1d/0xa0 [ 150.936152][ T5189] ? memcpy_page_flushcache+0xfc/0xfc [ 150.941544][ T5189] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 150.947526][ T5189] ? _raw_spin_unlock+0x40/0x40 [ 150.952379][ T5189] ? print_report+0x4a3/0x4f0 [ 150.957062][ T5189] check_panic_on_warn+0x7e/0xa0 [ 150.962017][ T5189] ? siw_query_port+0x342/0x430 [ 150.966893][ T5189] end_report+0x66/0x110 [ 150.971134][ T5189] kasan_report+0x143/0x160 [ 150.975640][ T5189] ? siw_query_port+0x342/0x430 [ 150.980498][ T5189] siw_query_port+0x342/0x430 [ 150.985182][ T5189] ib_cache_update+0x1a8/0xaf0 [ 150.989956][ T5189] ? ib_cache_setup_one+0x5b0/0x5b0 [ 150.995165][ T5189] ? read_lock_is_recursive+0x10/0x10 [ 151.000546][ T5189] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 151.006542][ T5189] ? print_irqtrace_events+0x210/0x210 [ 151.012026][ T5189] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 151.017922][ T5189] ib_cache_event_task+0xef/0x1e0 [ 151.022957][ T5189] ? process_one_work+0x806/0x1260 [ 151.028091][ T5189] process_one_work+0x917/0x1260 [ 151.033041][ T5189] ? worker_detach_from_pool+0x260/0x260 [ 151.038682][ T5189] ? _raw_spin_lock_irqsave+0x120/0x120 [ 151.044235][ T5189] ? kthread_data+0x4e/0xc0 [ 151.048747][ T5189] ? wq_worker_running+0x97/0x190 [ 151.053784][ T5189] worker_thread+0xa47/0x1200 [ 151.058469][ T5189] ? _raw_spin_unlock+0x40/0x40 [ 151.063344][ T5189] kthread+0x28d/0x320 [ 151.067412][ T5189] ? worker_clr_flags+0x190/0x190 [ 151.072444][ T5189] ? kthread_blkcg+0xd0/0xd0 [ 151.077040][ T5189] ret_from_fork+0x1f/0x30 [ 151.081471][ T5189] [ 151.084873][ T5189] Kernel Offset: disabled [ 151.089198][ T5189] Rebooting in 86400 seconds..