last executing test programs: 59.63237679s ago: executing program 2 (id=10): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x810, &(0x7f0000000340)={[{@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@datasum}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@barrier}, {@nodiscard}, {@space_cache}, {@notreelog}, {@user_subvol_rm}, {@ssd_spread}, {@noacl}, {@clear_cache}, {@user_subvol_rm}, {@rescan_uuid_tree}, {@nodiscard}, {@nodatacow}]}, 0x1, 0x5102, &(0x7f0000002600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 57.066535049s ago: executing program 2 (id=35): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r1, 0x1, 0xfffffffe, 0x2}, 0x14}}, 0x20000000) io_uring_setup(0x524, 0x0) r2 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 56.432280217s ago: executing program 2 (id=40): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) 54.408286054s ago: executing program 2 (id=59): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc0000000000"], 0x68}, 0x0) 993.381097ms ago: executing program 1 (id=856): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000073) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200), 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB='mode=00000000000000000000321,uid=', @ANYRESHEX=0xee01]) syz_clone(0x4180200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x8}, 0x18) 915.977931ms ago: executing program 5 (id=857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000000000008500000007", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0) 892.900692ms ago: executing program 1 (id=858): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f00000009c0)="8ecf88e6050909", &(0x7f0000000380)=""/67}, 0x20) 829.748004ms ago: executing program 5 (id=859): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0xffffff8c}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x142) 632.289583ms ago: executing program 4 (id=860): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_int(r0, &(0x7f00000001c0)=0xff8, 0x12) write$cgroup_subtree(r0, 0x0, 0x9) 596.932654ms ago: executing program 4 (id=861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 572.118386ms ago: executing program 0 (id=862): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb9d1, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) 488.260299ms ago: executing program 1 (id=863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x74, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x47}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 488.019699ms ago: executing program 3 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 487.873689ms ago: executing program 5 (id=865): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000d0018"], 0x50) 487.796829ms ago: executing program 4 (id=866): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 420.553112ms ago: executing program 0 (id=867): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="5c000000130025cc9e3be35c6e17aa3107cd217a300000007ea60864160af36514000cc008000f000700020006", 0x2d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 399.308143ms ago: executing program 1 (id=868): sendmsg$inet(0xffffffffffffffff, 0x0, 0x408c4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0) 332.279105ms ago: executing program 3 (id=869): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) 332.127926ms ago: executing program 4 (id=870): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f0000001fc0)=""/4071, 0xfe7}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000100)=""/221, 0xdd}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000001ec0)=""/255, 0xff}], 0x8}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 332.045255ms ago: executing program 0 (id=871): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) 284.242908ms ago: executing program 3 (id=872): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x5a) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 277.487928ms ago: executing program 1 (id=873): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xb}, {0xfff1, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000010) 220.067301ms ago: executing program 0 (id=874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x8000) 219.84357ms ago: executing program 4 (id=875): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x26, 0x9, 0x70bd26, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4008050) 202.463011ms ago: executing program 3 (id=876): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d8000000", 0x4}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 149.719924ms ago: executing program 0 (id=877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="25000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0) 76.227577ms ago: executing program 4 (id=878): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%-5lx \x00'}, 0x20) 76.110017ms ago: executing program 5 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000002500010302000020000000000100000008000380"], 0x1c}, 0x1, 0x0, 0x0, 0x20000018}, 0x4004000) 62.305437ms ago: executing program 3 (id=880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000580095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='net_dev_start_xmit\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 47.646528ms ago: executing program 1 (id=881): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffdd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)}, 0x4000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000021aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000040000000000000000000200000000000000000000000000000000000000100000300000000440005000a010101000000000000000000000000000004d62b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r4, &(0x7f0000000a80)={&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x20040044) 211.37µs ago: executing program 0 (id=882): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x20) 0s ago: executing program 5 (id=883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. [ 48.251200][ T4171] cgroup: Unknown subsys name 'net' [ 48.382880][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.602528][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.017014][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 51.050484][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.135526][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 51.172678][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.220933][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.228465][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.236922][ T4189] device bridge_slave_0 entered promiscuous mode [ 51.257870][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.265196][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.272921][ T4188] device bridge_slave_0 entered promiscuous mode [ 51.282990][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 51.293367][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.300620][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.309165][ T4189] device bridge_slave_1 entered promiscuous mode [ 51.325378][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.332548][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.340307][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.401179][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.427784][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.439786][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.453171][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.469701][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.477632][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.486018][ T4181] device bridge_slave_0 entered promiscuous mode [ 51.515996][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.523153][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.531733][ T4181] device bridge_slave_1 entered promiscuous mode [ 51.576240][ T4189] team0: Port device team_slave_0 added [ 51.590546][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.597996][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.606359][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.615093][ T4188] team0: Port device team_slave_0 added [ 51.621075][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.629362][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.637696][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.651194][ T4189] team0: Port device team_slave_1 added [ 51.666307][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.677039][ T4188] team0: Port device team_slave_1 added [ 51.684094][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.700853][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.708095][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.716000][ T4195] device bridge_slave_0 entered promiscuous mode [ 51.747391][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.754471][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.762870][ T4195] device bridge_slave_1 entered promiscuous mode [ 51.770711][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.777844][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.804222][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.832173][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.843373][ T4181] team0: Port device team_slave_0 added [ 51.858102][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.865139][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.891300][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.902792][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.910073][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.936231][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.949074][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.959701][ T4181] team0: Port device team_slave_1 added [ 51.974828][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.981787][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.007865][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.035042][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.052864][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.059958][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.086691][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.116887][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.134422][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.141441][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.172752][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.191461][ T4182] team0: Port device team_slave_0 added [ 52.213888][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.220644][ T4188] device hsr_slave_1 entered promiscuous mode [ 52.228819][ T4182] team0: Port device team_slave_1 added [ 52.243519][ T4189] device hsr_slave_0 entered promiscuous mode [ 52.250330][ T4189] device hsr_slave_1 entered promiscuous mode [ 52.256871][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.264545][ T4189] Cannot create hsr debugfs directory [ 52.287081][ T4195] team0: Port device team_slave_0 added [ 52.319267][ T4195] team0: Port device team_slave_1 added [ 52.327152][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.334102][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.360352][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.372743][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.379783][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.405825][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.433047][ T4181] device hsr_slave_0 entered promiscuous mode [ 52.440040][ T4181] device hsr_slave_1 entered promiscuous mode [ 52.446785][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.454339][ T4181] Cannot create hsr debugfs directory [ 52.522455][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.529240][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.536154][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.543710][ T4182] Cannot create hsr debugfs directory [ 52.551885][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.558963][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.584869][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.597111][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.604056][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.630144][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.705692][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 52.714834][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 52.721722][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 52.762323][ T4195] device hsr_slave_0 entered promiscuous mode [ 52.769123][ T4195] device hsr_slave_1 entered promiscuous mode [ 52.776034][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.783594][ T4195] Cannot create hsr debugfs directory [ 52.784820][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 52.789366][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 52.975928][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.990533][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.000382][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.015909][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.045498][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.055789][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.076067][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.084497][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.135909][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.150744][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.160342][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.185668][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.264102][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.276149][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.288548][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.299797][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.333303][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.343355][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.356175][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.369992][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.379732][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.396783][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.407758][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.424406][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.434529][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.443458][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.452854][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.460069][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.471473][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.498549][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.507600][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.517607][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.525539][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.534093][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.542821][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.549906][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.557782][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.567523][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.576174][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.585031][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.593374][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.602055][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.610923][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.629860][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.639073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.662850][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.681198][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.696108][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.710370][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.719068][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.728407][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.738697][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.747515][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.754649][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.762271][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.784941][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.799325][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.811910][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.819043][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.850312][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.869877][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.881771][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.896399][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.906180][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.931641][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.939956][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.948673][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.957403][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.967305][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.975736][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.983942][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.995221][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.023016][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.040230][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.054130][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.063790][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.073091][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.081836][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.102434][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.116031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.126386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.135804][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.142849][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.151257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.160248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.169472][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.176610][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.187836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.199811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.244175][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.260981][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.273338][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.284332][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.292555][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.301565][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.311157][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.320373][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.329599][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.339943][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.364278][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.373111][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.382027][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.391031][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.399518][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.408201][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.422605][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.434090][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.447508][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.458601][ T4188] device veth0_vlan entered promiscuous mode [ 54.470497][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.479815][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.488437][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.495550][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.504024][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.512597][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.521210][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.530315][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.538917][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.545991][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.554772][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.562916][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.571424][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.579566][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.587731][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.606182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.615558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.624007][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.631114][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.646073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.660310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.669508][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.676602][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.689397][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.703024][ T4188] device veth1_vlan entered promiscuous mode [ 54.715664][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.724224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.738544][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.746847][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.754279][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.763418][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.773375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.782976][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.792014][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 54.798329][ T4262] Bluetooth: hci2: command 0x041b tx timeout [ 54.804982][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 54.835066][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.843489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.855495][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.864275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.872808][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 54.878025][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.879156][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 54.890504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.901266][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.911636][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.920121][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.928790][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.953125][ T4188] device veth0_macvtap entered promiscuous mode [ 54.964362][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.974476][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.983961][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.993043][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.002064][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.011089][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.020418][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.034231][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.042879][ T4188] device veth1_macvtap entered promiscuous mode [ 55.054389][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.063128][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.071728][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.083583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.094498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.122215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.131470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.146147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.155492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.163794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.172705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.202433][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.220632][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.230363][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.239667][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.249536][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.264055][ T4189] device veth0_vlan entered promiscuous mode [ 55.286879][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.295837][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.308954][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.318080][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.328543][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.338312][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.346713][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.354231][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.362360][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.386594][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.396471][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.405976][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.415584][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.429635][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.444355][ T4189] device veth1_vlan entered promiscuous mode [ 55.451869][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.460625][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.472375][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.481559][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.489757][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.515917][ T4181] device veth0_vlan entered promiscuous mode [ 55.559353][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.566790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.576773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.584209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.628832][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.642329][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.661213][ T4181] device veth1_vlan entered promiscuous mode [ 55.679627][ T4189] device veth0_macvtap entered promiscuous mode [ 55.692238][ T4189] device veth1_macvtap entered promiscuous mode [ 55.718583][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.729028][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.740916][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.753804][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.766887][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.776386][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.808895][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.819920][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.832061][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.847433][ T4181] device veth0_macvtap entered promiscuous mode [ 55.855032][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.863551][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.873020][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.881884][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.891637][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.909525][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.917127][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.925540][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.928265][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.942922][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.958437][ T4181] device veth1_macvtap entered promiscuous mode [ 55.979596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.989016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.999038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.007872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.019034][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.028050][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.037394][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.046503][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.093729][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.097493][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.105441][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.115672][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.129329][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.139954][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.152471][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.160805][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.169265][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.178180][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.187058][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.196144][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.203800][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.212699][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.221305][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.231578][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.249031][ T4195] device veth0_vlan entered promiscuous mode [ 56.262870][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.274137][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.286513][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.297025][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.308605][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.318259][ T4182] device veth0_vlan entered promiscuous mode [ 56.325318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.334069][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.343092][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.353089][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.368405][ T4195] device veth1_vlan entered promiscuous mode [ 56.393229][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.403599][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.412854][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.422756][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.432712][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.441000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.452565][ T4182] device veth1_vlan entered promiscuous mode [ 56.535664][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.544078][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.559666][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.568534][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.578986][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.588123][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.606951][ T4195] device veth0_macvtap entered promiscuous mode [ 56.621534][ T4182] device veth0_macvtap entered promiscuous mode [ 56.663920][ T4195] device veth1_macvtap entered promiscuous mode [ 56.675639][ T4182] device veth1_macvtap entered promiscuous mode [ 56.720239][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.727257][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.740427][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.746045][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.763857][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.774408][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.784513][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.796492][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.808812][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.841917][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.852931][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.865534][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 56.877094][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 56.889747][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.904476][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 56.930557][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.947515][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 56.966341][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 56.974365][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.001948][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.033234][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.071652][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.103140][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.135356][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.154845][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.195562][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.224916][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.247353][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.290803][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.305718][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.313701][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.314158][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.368719][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.402332][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.432676][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.463501][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.487410][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.512027][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.530192][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.548007][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.566888][ T4298] loop3: detected capacity change from 0 to 512 [ 57.578306][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.588943][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.594399][ T4298] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 57.605459][ T4298] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.616921][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.627001][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.639803][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.648643][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.659744][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.670533][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.671471][ T4298] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,bsddf,resgid=0x000000000000ee01,auto_da_alloc,nodelalloc,mblk_io_submit,noinit_itable,,errors=continue. Quota mode: writeback. [ 57.713178][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.714813][ T4298] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.730254][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.753035][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.767078][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.770757][ T26] audit: type=1800 audit(1764991933.946:2): pid=4298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 57.782692][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.809998][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.820004][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.832321][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.843517][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.852352][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.860818][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.870838][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.876666][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.892494][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.913135][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.923088][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.931947][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.941754][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.992732][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.034748][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.065770][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.107341][ T4306] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.163628][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.237185][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.275096][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.283340][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.288645][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.296729][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.311300][ T4311] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9'. [ 58.314952][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.360563][ T4311] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9'. [ 58.385644][ T4311] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9'. [ 58.399678][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.418035][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.484364][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.506528][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.582602][ T4324] loop4: detected capacity change from 0 to 8 [ 58.589162][ T4318] device syzkaller0 entered promiscuous mode [ 58.606683][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.751836][ T4324] SQUASHFS error: zlib decompression failed, data probably corrupt [ 58.779387][ T4324] SQUASHFS error: Failed to read block 0x9b: -5 [ 58.793913][ T4324] SQUASHFS error: Unable to read metadata cache entry [99] [ 58.866944][ T4324] SQUASHFS error: Unable to read inode 0x127 [ 58.869420][ T4326] loop0: detected capacity change from 0 to 32768 [ 58.926900][ T4326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.13 (4326) [ 58.945616][ T1111] Bluetooth: hci0: command 0x0419 tx timeout [ 58.952088][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 59.009178][ T1111] Bluetooth: hci1: command 0x0419 tx timeout [ 59.055619][ T4326] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 59.064743][ T4326] BTRFS error (device loop0): unrecognized mount option 'nomand' [ 59.068521][ T4240] Bluetooth: hci3: command 0x0419 tx timeout [ 59.209155][ T4314] loop2: detected capacity change from 0 to 32768 [ 59.253311][ T4336] loop4: detected capacity change from 0 to 256 [ 59.279585][ T4331] loop3: detected capacity change from 0 to 32768 [ 59.286491][ T4240] Bluetooth: hci4: command 0x0419 tx timeout [ 59.299620][ T4326] BTRFS error (device loop0): open_ctree failed: -22 [ 59.308119][ T4336] ======================================================= [ 59.308119][ T4336] WARNING: The mand mount option has been deprecated and [ 59.308119][ T4336] and is ignored by this kernel. Remove the mand [ 59.308119][ T4336] option from the mount to silence this warning. [ 59.308119][ T4336] ======================================================= [ 59.309394][ T4314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.10 (4314) [ 59.509310][ T4239] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4239) [ 59.530305][ T4331] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.14 (4331) [ 59.541593][ T4337] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4337) [ 59.560417][ T4314] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 59.580001][ T4314] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 59.605376][ T4314] BTRFS info (device loop2): force zstd compression, level 3 [ 59.626111][ T4336] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 59.661831][ T4314] BTRFS info (device loop2): enabling disk space caching [ 59.714912][ T4314] BTRFS info (device loop2): disabling tree log [ 59.721206][ T4314] BTRFS info (device loop2): enabling ssd optimizations [ 59.756176][ T4336] attempt to access beyond end of device [ 59.756176][ T4336] loop4: rw=524288, want=408, limit=256 [ 59.837135][ T4336] attempt to access beyond end of device [ 59.837135][ T4336] loop4: rw=524288, want=664, limit=256 [ 59.839508][ T4314] BTRFS info (device loop2): using spread ssd allocation scheme [ 59.894768][ T4336] attempt to access beyond end of device [ 59.894768][ T4336] loop4: rw=0, want=288, limit=256 [ 59.940720][ T4314] BTRFS info (device loop2): force clearing of disk cache [ 59.981336][ T26] audit: type=1800 audit(1764991936.156:3): pid=4336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.16" name="file1" dev="loop4" ino=1048590 res=0 errno=0 [ 59.983382][ T4314] BTRFS info (device loop2): setting nodatacow [ 60.088022][ T4314] BTRFS info (device loop2): disk space caching is enabled [ 60.141919][ T4314] BTRFS info (device loop2): has skinny extents [ 60.356222][ T4375] netlink: 80 bytes leftover after parsing attributes in process `syz.1.25'. [ 60.512410][ T4389] loop1: detected capacity change from 0 to 2048 [ 60.554303][ T4314] BTRFS info (device loop2): clearing free space tree [ 60.565655][ T4314] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 60.599634][ T4314] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 60.604500][ T4389] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 60.650488][ T4314] BTRFS info (device loop2): checking UUID tree [ 60.674340][ T4389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.778570][ T4398] loop4: detected capacity change from 0 to 2048 [ 60.904244][ T4398] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.237602][ T4412] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.448801][ T4425] overlayfs: failed to clone upperpath [ 61.543410][ T4428] kvm: pic: non byte write [ 61.647067][ T4435] device syzkaller0 entered promiscuous mode [ 61.765578][ T4439] loop0: detected capacity change from 0 to 64 [ 61.784815][ T4421] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 61.820534][ T4439] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 61.932594][ T4443] loop0: detected capacity change from 0 to 1024 [ 61.953729][ T4443] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 61.977838][ T4443] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.002261][ T26] audit: type=1800 audit(1764991938.176:4): pid=4443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.45" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 62.004100][ T4443] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.45: lblock 0 mapped to illegal pblock 0 (length 2) [ 62.053598][ T4443] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.45: Freeing blocks not in datazone - block = 1, count = 1 [ 62.164876][ T4421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 62.179459][ T4421] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 62.189205][ T4421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.206131][ T4421] usb 3-1: config 0 descriptor?? [ 62.225720][ T4433] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 62.288326][ T4449] loop0: detected capacity change from 0 to 8 [ 62.310464][ T4449] squashfs image failed sanity check [ 62.350698][ T4451] loop4: detected capacity change from 0 to 4096 [ 62.431853][ T4451] NILFS (loop4): unrecognized mount option "18446744073709551615" [ 62.695295][ T4453] loop0: detected capacity change from 0 to 40427 [ 62.759169][ T4453] F2FS-fs (loop0): invalid crc value [ 62.777492][ T4421] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 62.820536][ T4457] loop1: detected capacity change from 0 to 4096 [ 62.829893][ T4453] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.892425][ T4453] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 62.909931][ T4453] F2FS-fs (loop0): Corrupted max_depth of 3: 4294967295 [ 62.981794][ T4183] usb 3-1: USB disconnect, device number 2 [ 63.141554][ T4467] fido_id[4467]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 63.533278][ T4481] loop0: detected capacity change from 0 to 16 [ 63.563364][ T4481] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 63.719703][ T4489] netlink: 36 bytes leftover after parsing attributes in process `syz.0.62'. [ 63.733743][ T4489] Zero length message leads to an empty skb [ 63.755224][ T4491] syz.1.63 uses obsolete (PF_INET,SOCK_PACKET) [ 63.934145][ T4500] loop1: detected capacity change from 0 to 512 [ 64.044916][ T4500] EXT4-fs (loop1): Ignoring removed orlov option [ 64.084345][ T4508] loop0: detected capacity change from 0 to 512 [ 64.103755][ T4500] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 64.127266][ T4500] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 64.154717][ T4500] EXT4-fs (loop1): group descriptors corrupted! [ 64.173660][ T4508] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 64.524839][ T4532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.79'. [ 64.534349][ T4532] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 64.560367][ T4530] pit: kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 64.754842][ T4530] pit: kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 64.802726][ T4530] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 64.825172][ T4537] loop1: detected capacity change from 0 to 40427 [ 64.852691][ T4530] pit: kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 64.864330][ T4530] pit: kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 64.882331][ T4537] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 64.882926][ T4530] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 64.960973][ T4530] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 64.986612][ T4530] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 65.001843][ T4530] pit: kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 65.027144][ T4530] pit: kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 65.176259][ T4553] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 65.245926][ T4557] loop3: detected capacity change from 0 to 16 [ 65.249770][ T4555] loop4: detected capacity change from 0 to 4096 [ 65.287895][ T4557] erofs: (device loop3): mounted with root inode @ nid 36. [ 65.337509][ T4557] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 65.421799][ T4564] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.472010][ T26] audit: type=1800 audit(1764991941.646:5): pid=4555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.92" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 65.519609][ T4555] xt_hashlimit: max too large, truncated to 1048576 [ 65.790372][ T4569] loop1: detected capacity change from 0 to 40427 [ 65.816421][ T4575] tipc: Enabling of bearer rejected, failed to enable media [ 65.858050][ T4569] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 65.865986][ T4569] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 65.895816][ T4569] F2FS-fs (loop1): invalid crc value [ 65.963208][ T4569] F2FS-fs (loop1): Found nat_bits in checkpoint [ 66.027330][ T4569] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 66.034453][ T4569] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 66.085524][ T4588] mmap: syz.3.105 (4588) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 66.712536][ T4602] loop3: detected capacity change from 0 to 40427 [ 66.759237][ T4602] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 67.076752][ T4612] loop4: detected capacity change from 0 to 40427 [ 67.192423][ T4610] loop0: detected capacity change from 0 to 65536 [ 67.312253][ T4612] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x1ffff [ 67.425117][ T4609] loop1: detected capacity change from 0 to 32768 [ 67.440388][ T4610] XFS (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 67.449115][ T4610] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 67.459603][ T4610] XFS (loop0): Mounting V5 Filesystem [ 67.546665][ T4609] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 67.600716][ T4610] XFS (loop0): Ending clean mount [ 67.606462][ T4625] loop4: detected capacity change from 0 to 64 [ 67.618207][ T4610] XFS (loop0): User initiated shutdown received. [ 67.625883][ T4610] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 67.640013][ T4610] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 67.681486][ T4181] XFS (loop0): Unmounting Filesystem [ 67.692439][ T4625] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 67.952359][ T4195] ocfs2: Unmounting device (7,1) on (node local) [ 68.050788][ T4632] loop4: detected capacity change from 0 to 1024 [ 68.119127][ T4632] hfsplus: invalid length 32517 has been corrected to 255 [ 68.272391][ T145] hfsplus: b-tree write err: -5, ino 4 [ 68.321869][ T4636] loop0: detected capacity change from 0 to 1024 [ 68.437259][ T4636] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 68.482409][ T4636] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.508679][ T4645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 68.564107][ T26] audit: type=1800 audit(1764991944.736:6): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.116" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 68.567493][ T4636] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.116: lblock 0 mapped to illegal pblock 0 (length 4) [ 68.602453][ T26] audit: type=1800 audit(1764991944.736:7): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.116" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 68.638956][ T4648] loop3: detected capacity change from 0 to 2048 [ 68.669538][ T4636] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 68.733064][ T4636] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.733064][ T4636] [ 68.800426][ T4649] loop1: detected capacity change from 0 to 32768 [ 68.824898][ T4648] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,block_validity,errors=remount-ro,. Quota mode: none. [ 68.856931][ T4648] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.123: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 68.888961][ T4648] EXT4-fs (loop3): Remounting filesystem read-only [ 68.902088][ T4649] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 68.912270][ T4649] BTRFS info (device loop1): using free space tree [ 68.918937][ T4649] BTRFS info (device loop1): has skinny extents [ 68.931615][ T4648] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.123: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 68.968579][ T4648] EXT4-fs (loop3): Remounting filesystem read-only [ 69.011376][ T4648] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.123: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 69.027388][ T4666] loop0: detected capacity change from 0 to 256 [ 69.040692][ T4648] EXT4-fs (loop3): Remounting filesystem read-only [ 69.055327][ T4666] exfat: Deprecated parameter 'namecase' [ 69.092196][ T4666] exfat: Unknown parameter 'sys_tz' [ 69.304370][ T4649] BTRFS info (device loop1): enabling ssd optimizations [ 69.326173][ T26] audit: type=1800 audit(1764991945.506:8): pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.122" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 69.366205][ T4294] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.683113][ T4697] syzkaller0: refused to change device tx_queue_len [ 69.774891][ T4294] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.790687][ T4294] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.872258][ T4699] loop3: detected capacity change from 0 to 40427 [ 69.905957][ T4294] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 69.944529][ T4699] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 69.944663][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 69.974177][ T4712] binder: 4711:4712 unknown command 1074553619 [ 70.004832][ T4712] binder: 4711:4712 ioctl c0306201 200000000640 returned -22 [ 70.040809][ T4294] usb 5-1: SerialNumber: syz [ 70.379566][ T4294] usb 5-1: 0:2 : does not exist [ 70.425707][ T4714] loop1: detected capacity change from 0 to 65536 [ 70.520078][ T4294] usb 5-1: USB disconnect, device number 2 [ 70.694396][ T4731] loop3: detected capacity change from 0 to 1024 [ 70.696966][ T4723] loop0: detected capacity change from 0 to 40427 [ 70.712691][ T4714] XFS (loop1): Mounting V5 Filesystem [ 70.764721][ T4714] XFS (loop1): Ending clean mount [ 70.783820][ T4723] F2FS-fs (loop0): Invalid log blocks per segment (1) [ 70.791289][ T4723] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 70.802199][ T4723] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 70.804204][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.810372][ T4723] F2FS-fs (loop0): Unrecognized mount option "memory=low" or missing value [ 70.969023][ T4195] XFS (loop1): Unmounting Filesystem [ 71.213740][ T4747] loop3: detected capacity change from 0 to 256 [ 71.259195][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.329675][ T4747] FAT-fs (loop3): Directory bread(block 1285) failed [ 71.353143][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.359732][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.390079][ T4747] FAT-fs (loop3): Directory bread(block 1285) failed [ 71.456058][ T4747] FAT-fs (loop3): Directory bread(block 1285) failed [ 71.484750][ T4747] FAT-fs (loop3): Directory bread(block 1285) failed [ 71.745908][ T4753] loop4: detected capacity change from 0 to 4096 [ 71.784055][ T4758] ODEBUG: Out of memory. ODEBUG disabled [ 71.787930][ T4753] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 72.124829][ T4706] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.145940][ T4774] loop0: detected capacity change from 0 to 512 [ 72.206561][ T4774] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.161: bg 0: block 393: padding at end of block bitmap is not set [ 72.251106][ T4774] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 72.266331][ T4774] EXT4-fs (loop0): 2 truncates cleaned up [ 72.272233][ T4774] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.424753][ T4706] usb 2-1: Using ep0 maxpacket: 16 [ 72.565258][ T4706] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 72.667467][ T4807] loop4: detected capacity change from 0 to 22 [ 72.715795][ T4807] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 72.765388][ T4807] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 72.774934][ T4706] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 72.783985][ T4706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.792333][ T4706] usb 2-1: Product: syz [ 72.796929][ T4706] usb 2-1: Manufacturer: syz [ 72.801721][ T4706] usb 2-1: SerialNumber: syz [ 72.808236][ T4706] usb 2-1: config 0 descriptor?? [ 73.139327][ T4809] device syzkaller0 entered promiscuous mode [ 73.252309][ T4811] loop3: detected capacity change from 0 to 256 [ 73.288410][ T4811] exfat: Unknown parameter 'zero_size_dir' [ 73.390270][ T4813] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.723508][ T4832] netlink: 14 bytes leftover after parsing attributes in process `syz.0.187'. [ 73.734058][ T4832] device hsr_slave_0 left promiscuous mode [ 73.749758][ T4832] device hsr_slave_1 left promiscuous mode [ 73.814513][ T4706] kernel read not supported for file /dsp (pid: 4706 comm: kworker/0:16) [ 73.847080][ T4830] loop4: detected capacity change from 0 to 32768 [ 73.894099][ T4830] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.186 (4830) [ 73.912562][ T4830] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 73.921401][ T4830] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 73.930848][ T4830] BTRFS info (device loop4): force zstd compression, level 3 [ 73.938324][ T4830] BTRFS info (device loop4): enabling disk space caching [ 73.945990][ T4830] BTRFS info (device loop4): disabling tree log [ 73.952257][ T4830] BTRFS info (device loop4): enabling ssd optimizations [ 73.959300][ T4830] BTRFS info (device loop4): using spread ssd allocation scheme [ 73.966970][ T4830] BTRFS info (device loop4): force clearing of disk cache [ 73.974131][ T4830] BTRFS info (device loop4): setting nodatacow [ 73.980361][ T4830] BTRFS info (device loop4): disk space caching is enabled [ 73.987710][ T4830] BTRFS info (device loop4): has skinny extents [ 74.147969][ T4830] BTRFS info (device loop4): clearing free space tree [ 74.155449][ T4830] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.165235][ T4830] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 74.198401][ T4830] BTRFS info (device loop4): checking UUID tree [ 74.553967][ T4873] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.822629][ T4873] loop0: detected capacity change from 0 to 40427 [ 74.836996][ T4877] loop4: detected capacity change from 0 to 32768 [ 74.869157][ T4421] usb 2-1: USB disconnect, device number 2 [ 74.908491][ T4873] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 74.942161][ T4873] F2FS-fs (loop0): invalid crc value [ 74.968436][ T4877] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 74.987204][ T4873] F2FS-fs (loop0): Found nat_bits in checkpoint [ 75.039271][ T4886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.198'. [ 75.063778][ T4873] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 75.081771][ T4890] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 75.104216][ T4873] attempt to access beyond end of device [ 75.104216][ T4873] loop0: rw=0, want=45072, limit=40427 [ 75.281636][ T4895] loop1: detected capacity change from 0 to 1024 [ 75.318311][ T4896] loop3: detected capacity change from 0 to 7 [ 75.334885][ T4182] ocfs2: Unmounting device (7,4) on (node local) [ 75.354236][ T4895] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.399355][ T4896] Dev loop3: unable to read RDB block 7 [ 75.414806][ T4896] loop3: unable to read partition table [ 75.429590][ T4896] loop3: partition table beyond EOD, truncated [ 75.436778][ T4896] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 75.464291][ T4895] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 75.514523][ T4895] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.203: missing EA_INODE flag [ 75.567076][ T4895] EXT4-fs (loop1): Remounting filesystem read-only [ 75.574038][ T4895] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.203: error while reading EA inode 11 err=-117 [ 75.639094][ T4895] EXT4-fs (loop1): Remounting filesystem read-only [ 75.711074][ T4895] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.781041][ T4895] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.203: missing EA_INODE flag [ 75.810969][ T4913] netlink: 104 bytes leftover after parsing attributes in process `syz.0.207'. [ 75.831857][ T4895] EXT4-fs (loop1): Remounting filesystem read-only [ 75.846549][ T4915] loop3: detected capacity change from 0 to 256 [ 75.853556][ T4895] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.203: error while reading EA inode 11 err=-117 [ 75.887472][ T4895] EXT4-fs (loop1): Remounting filesystem read-only [ 75.998403][ T4915] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.144452][ T4302] kernel write not supported for file /media0 (pid: 4302 comm: kworker/0:9) [ 76.468386][ T7] cfg80211: failed to load regulatory.db [ 76.552821][ T4936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.216'. [ 76.607270][ T4928] loop4: detected capacity change from 0 to 65536 [ 76.819817][ T4928] XFS (loop4): Mounting V5 Filesystem [ 76.891124][ T4928] XFS (loop4): Ending clean mount [ 77.040504][ T4182] XFS (loop4): Unmounting Filesystem [ 77.201915][ T4956] loop0: detected capacity change from 0 to 40427 [ 77.252619][ T4956] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 77.777650][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.019427][ T4984] loop1: detected capacity change from 0 to 256 [ 78.039776][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 78.123673][ T4984] FAT-fs (loop1): Directory bread(block 64) failed [ 78.143759][ T4984] FAT-fs (loop1): Directory bread(block 65) failed [ 78.165059][ T4984] FAT-fs (loop1): Directory bread(block 66) failed [ 78.171630][ T4984] FAT-fs (loop1): Directory bread(block 67) failed [ 78.215195][ T4984] FAT-fs (loop1): Directory bread(block 68) failed [ 78.252995][ T4984] FAT-fs (loop1): Directory bread(block 69) failed [ 78.265707][ T4984] FAT-fs (loop1): Directory bread(block 70) failed [ 78.272858][ T4984] FAT-fs (loop1): Directory bread(block 71) failed [ 78.280166][ T4984] FAT-fs (loop1): Directory bread(block 72) failed [ 78.287052][ T4984] FAT-fs (loop1): Directory bread(block 73) failed [ 78.325008][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 78.334098][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.362032][ T7] usb 1-1: Product: syz [ 78.375850][ T7] usb 1-1: Manufacturer: syz [ 78.382337][ T7] usb 1-1: SerialNumber: syz [ 78.398695][ T7] usb 1-1: config 0 descriptor?? [ 78.630601][ T5001] loop1: detected capacity change from 0 to 2048 [ 78.654810][ T7] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 78.802620][ T4421] Bluetooth: hci0: command 0x0401 tx timeout [ 78.881769][ T5001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.911308][ T26] audit: type=1800 audit(1764991955.086:9): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.239" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 79.438431][ T5032] loop4: detected capacity change from 0 to 256 [ 79.476118][ T5030] loop3: detected capacity change from 0 to 4096 [ 79.525846][ T5032] MINIX-fs: mounting file system with errors, running fsck is recommended [ 79.537870][ T5030] ntfs3: Unknown parameter 'windows_names' [ 79.656399][ T5038] loop4: detected capacity change from 0 to 64 [ 79.677176][ T5045] loop1: detected capacity change from 0 to 256 [ 79.716348][ T5045] exfat: Unknown parameter 'keep_last_dots' [ 79.752085][ T5038] Trying to free block not in datazone [ 79.841013][ T7] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 79.861404][ T7] usb 1-1: USB disconnect, device number 2 [ 79.890636][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.976565][ T5035] chnl_net:caif_netlink_parms(): no params data found [ 80.172812][ T5048] loop3: detected capacity change from 0 to 65536 [ 80.278710][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.301885][ T5048] XFS (loop3): Mounting V5 Filesystem [ 80.327399][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 80.424333][ T5035] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.444223][ T5035] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.445791][ T5048] XFS (loop3): Ending clean mount [ 80.462530][ T5048] XFS (loop3): Quotacheck needed: Please wait. [ 80.465546][ T5035] device bridge_slave_0 entered promiscuous mode [ 80.638835][ T5048] XFS (loop3): Quotacheck: Done. [ 80.699757][ T5071] loop0: detected capacity change from 0 to 32768 [ 80.711080][ T4188] XFS (loop3): Unmounting Filesystem [ 80.719698][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.762759][ T5035] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.774464][ T5035] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.796845][ T5071] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.263 (5071) [ 80.821367][ T5035] device bridge_slave_1 entered promiscuous mode [ 80.848403][ T5071] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 80.857476][ T5071] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 80.866965][ T5071] BTRFS info (device loop0): force zstd compression, level 3 [ 80.874420][ T5071] BTRFS info (device loop0): enabling disk space caching [ 80.881507][ T5071] BTRFS info (device loop0): disabling tree log [ 80.882123][ T5079] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 80.887888][ T5071] BTRFS info (device loop0): enabling ssd optimizations [ 80.887908][ T5071] BTRFS info (device loop0): using spread ssd allocation scheme [ 80.887923][ T5071] BTRFS info (device loop0): force clearing of disk cache [ 80.887947][ T5071] BTRFS info (device loop0): setting nodatacow [ 80.887959][ T5071] BTRFS info (device loop0): disk space caching is enabled [ 80.887973][ T5071] BTRFS info (device loop0): has skinny extents [ 80.888369][ T4423] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.898021][ T5079] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 81.054747][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.173483][ T5035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.319704][ T5035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.360350][ T5071] BTRFS info (device loop0): clearing free space tree [ 81.367398][ T5071] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.378264][ T5071] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.400414][ T5071] BTRFS info (device loop0): checking UUID tree [ 81.514866][ T4421] Bluetooth: hci2: command 0x0409 tx timeout [ 81.530260][ T5035] team0: Port device team_slave_0 added [ 81.568337][ T4247] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.574170][ T5122] loop4: detected capacity change from 0 to 4096 [ 81.685341][ T5122] ntfs3: Unknown parameter 'windows_names' [ 81.696372][ T5035] team0: Port device team_slave_1 added [ 81.780537][ T5124] loop3: detected capacity change from 0 to 32768 [ 81.854485][ T5124] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.277 (5124) [ 81.907886][ T5124] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 81.917524][ T5124] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 81.927170][ T5124] BTRFS info (device loop3): use zstd compression, level 3 [ 81.934877][ T5124] BTRFS info (device loop3): using free space tree [ 81.941572][ T5124] BTRFS info (device loop3): has skinny extents [ 82.009398][ T5035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.049257][ T5035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.075210][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.082839][ T5035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.100255][ T5035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.107688][ T5035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.124848][ T4247] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 82.134411][ T5035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.179660][ T26] audit: type=1326 audit(1764991958.356:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45408f6749 code=0x7ffc0000 [ 82.232976][ T4247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.272507][ T4247] usb 2-1: Product: syz [ 82.277336][ T4247] usb 2-1: Manufacturer: syz [ 82.281957][ T4247] usb 2-1: SerialNumber: syz [ 82.320854][ T5035] device hsr_slave_0 entered promiscuous mode [ 82.344296][ T4247] r8152-cfgselector 2-1: config 0 descriptor?? [ 82.352568][ T5035] device hsr_slave_1 entered promiscuous mode [ 82.368369][ T5035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.407491][ T5035] Cannot create hsr debugfs directory [ 82.413106][ T5124] BTRFS info (device loop3): enabling ssd optimizations [ 82.634948][ T4247] r8152-cfgselector 2-1: Unknown version 0x0000 [ 82.718593][ T4337] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (4337) [ 82.854788][ T4247] r8152-cfgselector 2-1: Unknown version 0x0000 [ 82.861450][ T4247] r8152-cfgselector 2-1: bad CDC descriptors [ 82.908097][ T4247] r8152-cfgselector 2-1: Unknown version 0x0000 [ 82.933615][ T4247] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 83.527368][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 83.527855][ T5035] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.567800][ T5035] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.601751][ T4420] Bluetooth: hci2: command 0x041b tx timeout [ 83.638538][ T5035] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.679008][ T5211] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.682092][ T5035] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.706161][ T5212] loop1: detected capacity change from 0 to 512 [ 83.795762][ T5212] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.853177][ T5212] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.184304][ T5251] loop4: detected capacity change from 0 to 512 [ 84.208286][ T5251] EXT4-fs (loop4): Ignoring removed bh option [ 84.289804][ T5251] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 84.335048][ T5251] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.452607][ T5263] loop3: detected capacity change from 0 to 128 [ 84.584114][ T5263] FAT-fs (loop3): Directory bread(block 25014) failed [ 84.614279][ T144] device hsr_slave_0 left promiscuous mode [ 84.620575][ T5263] FAT-fs (loop3): Directory bread(block 25015) failed [ 84.620752][ T5263] FAT-fs (loop3): Directory bread(block 25016) failed [ 84.679427][ T144] device hsr_slave_1 left promiscuous mode [ 84.686843][ T5263] FAT-fs (loop3): Directory bread(block 25017) failed [ 84.721717][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.732797][ T5263] FAT-fs (loop3): Directory bread(block 25014) failed [ 84.747732][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.771612][ T5263] FAT-fs (loop3): Directory bread(block 25015) failed [ 84.806922][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.821571][ T5263] FAT-fs (loop3): Directory bread(block 25016) failed [ 84.839783][ T5283] FAT-fs (loop3): FAT read failed (blocknr 25012) [ 84.846485][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.856382][ T144] device bridge_slave_1 left promiscuous mode [ 84.864026][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.873018][ T5263] FAT-fs (loop3): Directory bread(block 25017) failed [ 84.908926][ T5263] FAT-fs (loop3): Directory bread(block 25014) failed [ 84.933776][ T144] device bridge_slave_0 left promiscuous mode [ 84.943284][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.957469][ T4294] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 85.009679][ T144] device veth1_macvtap left promiscuous mode [ 85.025224][ T144] device veth0_macvtap left promiscuous mode [ 85.031659][ T144] device veth1_vlan left promiscuous mode [ 85.085901][ T144] device veth0_vlan left promiscuous mode [ 85.184735][ T4422] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.244048][ T5294] process 'syz.3.312' launched './file1' with NULL argv: empty string added [ 85.313599][ T5274] loop0: detected capacity change from 0 to 32768 [ 85.334949][ T4294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 85.361574][ T4294] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 85.381433][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.406356][ T4294] usb 5-1: config 0 descriptor?? [ 85.426951][ T5276] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.435998][ T4422] usb 2-1: Using ep0 maxpacket: 8 [ 85.522429][ T144] team0 (unregistering): Port device team_slave_1 removed [ 85.575807][ T144] team0 (unregistering): Port device team_slave_0 removed [ 85.665286][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.673421][ T5301] loop0: detected capacity change from 0 to 32768 [ 85.685236][ T5127] Bluetooth: hci2: command 0x040f tx timeout [ 85.743242][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.776370][ T5301] XFS (loop0): Mounting V5 Filesystem [ 85.784748][ T4422] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 85.792847][ T4422] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.824125][ T4422] usb 2-1: config 0 has no interface number 0 [ 85.892630][ T4294] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 85.900083][ T5301] XFS (loop0): Ending clean mount [ 85.911428][ T5301] XFS (loop0): Quotacheck needed: Please wait. [ 86.004185][ T5301] XFS (loop0): Quotacheck: Done. [ 86.012092][ T4422] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 86.025297][ T4422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.033605][ T4422] usb 2-1: Product: syz [ 86.038572][ T4422] usb 2-1: Manufacturer: syz [ 86.044154][ T4422] usb 2-1: SerialNumber: syz [ 86.049530][ T144] bond0 (unregistering): Released all slaves [ 86.064421][ T4422] usb 2-1: config 0 descriptor?? [ 86.119178][ T5276] udc-core: couldn't find an available UDC or it's busy [ 86.147653][ T4422] comedi comedi4: Wrong number of endpoints [ 86.155076][ T5276] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 86.161371][ T4422] dt9812 2-1:0.84: driver 'dt9812' failed to auto-configure device. [ 86.183749][ T4181] XFS (loop0): Unmounting Filesystem [ 86.205067][ T4302] usb 5-1: USB disconnect, device number 3 [ 86.303786][ T5035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.354644][ T4423] usb 2-1: USB disconnect, device number 4 [ 86.410781][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.419721][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.443241][ T5035] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.476194][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.525754][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.553059][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.560227][ T5072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.603440][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.624002][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.624131][ T5323] netlink: 40 bytes leftover after parsing attributes in process `syz.0.316'. [ 86.692817][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.702171][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.709290][ T5072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.755905][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.783223][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.835747][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.916126][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.953105][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.000826][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.040434][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.080907][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.111753][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.129508][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.156034][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.173975][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.307400][ T5340] loop1: detected capacity change from 0 to 8192 [ 87.426549][ T5340] attempt to access beyond end of device [ 87.426549][ T5340] loop1: rw=0, want=57848, limit=8192 [ 87.489967][ T5340] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 87.544166][ T5340] FAT-fs (loop1): Filesystem has been set read-only [ 87.580783][ T5340] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 87.614517][ T5340] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 87.680658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.701707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.738117][ T5035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.745256][ T4302] Bluetooth: hci2: command 0x0419 tx timeout [ 88.153514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.172276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.253601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.271279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.303546][ T5035] device veth0_vlan entered promiscuous mode [ 88.330594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.345253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.372978][ T5035] device veth1_vlan entered promiscuous mode [ 88.441830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.464340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.501208][ T5035] device veth0_macvtap entered promiscuous mode [ 88.532175][ T5035] device veth1_macvtap entered promiscuous mode [ 88.576285][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.607129][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.641132][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.682209][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.712783][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.743790][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.757058][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.778528][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.802018][ T5035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.818691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.830764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.872568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.890055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.920537][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.933843][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.976713][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.010351][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.054628][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.074626][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.084453][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.131314][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.158536][ T5035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.190739][ T5035] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.234642][ T5035] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.243799][ T5035] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.269342][ T5035] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.286210][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.325297][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.361295][ T5410] loop3: detected capacity change from 0 to 128 [ 89.396231][ T5410] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.437306][ T5410] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.522677][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.553072][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.582849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.618507][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.645988][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.668397][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.721525][ T4312] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.837940][ T5422] loop1: detected capacity change from 0 to 736 [ 90.174027][ T5438] loop3: detected capacity change from 0 to 512 [ 90.501304][ T5438] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.508631][ T5438] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 90.518119][ T5438] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.527463][ T5438] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 90.710613][ T5458] loop4: detected capacity change from 0 to 4096 [ 90.834122][ T5458] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 90.893864][ T5474] netlink: 332 bytes leftover after parsing attributes in process `syz.0.353'. [ 91.332639][ T5477] loop5: detected capacity change from 0 to 65536 [ 91.375847][ T5477] XFS: attr2 mount option is deprecated. [ 91.461398][ T5485] kvm: pic: single mode not supported [ 91.461596][ T5485] kvm: pic: level sensitive irq not supported [ 91.559624][ T5485] kvm: pic: non byte read [ 91.662162][ T5477] XFS (loop5): Mounting V5 Filesystem [ 91.696162][ T5495] loop3: detected capacity change from 0 to 32768 [ 91.705257][ T5485] kvm: pic: non byte read [ 91.709829][ T5485] kvm: pic: non byte read [ 91.714354][ T5485] kvm: pic: single mode not supported [ 91.714463][ T5485] kvm: pic: non byte read [ 91.739815][ T5507] loop1: detected capacity change from 0 to 64 [ 91.751703][ T5495] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.358 (5495) [ 91.776700][ T5485] kvm: pic: single mode not supported [ 91.776755][ T5485] kvm: pic: non byte read [ 91.787583][ T5485] kvm: pic: non byte read [ 91.792266][ T5485] kvm: pic: non byte read [ 91.799810][ T5485] kvm: pic: non byte read [ 91.808451][ T5495] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 91.817249][ T5495] BTRFS info (device loop3): using free space tree [ 91.823854][ T5495] BTRFS info (device loop3): has skinny extents [ 91.844071][ T5506] netlink: 'syz.0.359': attribute type 4 has an invalid length. [ 91.882466][ T5477] XFS (loop5): Ending clean mount [ 91.891956][ T5477] XFS (loop5): Quotacheck needed: Please wait. [ 91.901502][ T5485] kvm: pic: single mode not supported [ 91.901558][ T5485] kvm: pic: non byte read [ 92.046167][ T5477] XFS (loop5): Quotacheck: Done. [ 92.126323][ T5035] XFS (loop5): Unmounting Filesystem [ 92.439779][ T5495] BTRFS info (device loop3): enabling ssd optimizations [ 92.487964][ T5544] loop4: detected capacity change from 0 to 256 [ 93.321894][ T5567] loop4: detected capacity change from 0 to 1024 [ 93.633184][ T1275] hfsplus: b-tree write err: -5, ino 4 [ 93.860383][ T5588] netlink: 'syz.4.376': attribute type 2 has an invalid length. [ 93.949812][ T5588] netlink: 'syz.4.376': attribute type 1 has an invalid length. [ 94.005889][ T5597] binder: 5593:5597 ioctl c0306201 200000000080 returned -22 [ 94.396380][ T5604] loop0: detected capacity change from 0 to 40427 [ 94.412835][ T5609] loop5: detected capacity change from 0 to 32768 [ 94.420181][ T5601] loop4: detected capacity change from 0 to 2048 [ 94.438477][ T5604] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 94.446282][ T5604] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 94.457726][ T5604] F2FS-fs (loop0): invalid crc value [ 94.470306][ T5609] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.387 (5609) [ 94.472612][ T5601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.545869][ T5609] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 94.552131][ T5604] F2FS-fs (loop0): Found nat_bits in checkpoint [ 94.555406][ T5609] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 94.555454][ T5609] BTRFS info (device loop5): use zstd compression, level 3 [ 94.555473][ T5609] BTRFS info (device loop5): using free space tree [ 94.555486][ T5609] BTRFS info (device loop5): has skinny extents [ 94.632654][ T5604] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 94.640105][ T5604] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.680220][ T5617] loop3: detected capacity change from 0 to 2048 [ 94.701457][ T5625] netlink: 'syz.1.390': attribute type 4 has an invalid length. [ 94.820043][ T5630] loop1: detected capacity change from 0 to 2048 [ 94.865100][ T5634] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.906097][ T5617] NILFS (loop3): failed to count free inodes: err=-34 [ 94.984838][ T5604] netlink: 'syz.0.384': attribute type 49 has an invalid length. [ 94.992899][ T5630] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 95.058681][ T5609] BTRFS info (device loop5): enabling ssd optimizations [ 95.177292][ T5654] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.208258][ T4188] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 95.235104][ T5654] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 144 with error 28 [ 95.327220][ T4188] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 95.339320][ T5654] EXT4-fs (loop1): This should not happen!! Data will be lost [ 95.339320][ T5654] [ 95.530276][ T5654] EXT4-fs (loop1): Total free blocks count 0 [ 95.538026][ T4188] Remounting filesystem read-only [ 95.564109][ T4188] NILFS (loop3): error -5 truncating bmap (ino=16) [ 95.580698][ T5129] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop5 scanned by udevd (5129) [ 95.582851][ T5125] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 95.609851][ T5654] EXT4-fs (loop1): Free/Dirty block details [ 95.616397][ T5125] Bluetooth: hci1: Injecting HCI hardware error event [ 95.625103][ T5654] EXT4-fs (loop1): free_blocks=2415919104 [ 95.626048][ T4196] Bluetooth: hci1: hardware error 0x00 [ 95.681022][ T5654] EXT4-fs (loop1): dirty_blocks=144 [ 95.718371][ T4188] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 95.776314][ T26] audit: type=1326 audit(1764991971.956:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797e6e8749 code=0x7ffc0000 [ 95.813225][ T5654] EXT4-fs (loop1): Block reservation details [ 95.823343][ T5654] EXT4-fs (loop1): i_reserved_data_blocks=9 [ 95.863100][ T5655] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 95.878474][ T26] audit: type=1326 audit(1764991972.006:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f797e6e8749 code=0x7ffc0000 [ 95.910052][ T5655] EXT4-fs (loop1): This should not happen!! Data will be lost [ 95.910052][ T5655] [ 95.937723][ T26] audit: type=1326 audit(1764991972.006:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797e6e8749 code=0x7ffc0000 [ 96.028841][ T26] audit: type=1326 audit(1764991972.006:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f797e6e8749 code=0x7ffc0000 [ 96.151720][ T26] audit: type=1326 audit(1764991972.006:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797e6e8749 code=0x7ffc0000 [ 96.254633][ T4247] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 96.282497][ T26] audit: type=1326 audit(1764991972.006:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f797e6e8749 code=0x7ffc0000 [ 96.448104][ T26] audit: type=1326 audit(1764991972.006:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797e6e8749 code=0x7ffc0000 [ 96.619463][ T5683] loop0: detected capacity change from 0 to 40427 [ 96.627449][ T26] audit: type=1326 audit(1764991972.006:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f797e6e8749 code=0x7ffc0000 [ 96.649437][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.657843][ T26] audit: type=1326 audit(1764991972.006:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797e6e8749 code=0x7ffc0000 [ 96.658451][ T4247] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 96.689342][ T26] audit: type=1326 audit(1764991972.006:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f797e6e8749 code=0x7ffc0000 [ 96.708637][ T5690] loop3: detected capacity change from 0 to 512 [ 96.820705][ T4247] usb 6-1: config 0 has no interface number 0 [ 96.850226][ T4247] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 97.049224][ T4247] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 97.088056][ T4247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.139667][ T4247] usb 6-1: Product: syz [ 97.162700][ T4247] usb 6-1: Manufacturer: syz [ 97.176144][ T5705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.413'. [ 97.200628][ T4247] usb 6-1: SerialNumber: syz [ 97.339080][ T5696] loop0: detected capacity change from 0 to 65536 [ 97.341545][ T4247] usb 6-1: config 0 descriptor?? [ 97.370879][ T5704] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.413'. [ 97.384987][ T5672] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.440233][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 97.452059][ T4247] usb-storage 6-1:0.20: USB Mass Storage device detected [ 97.504416][ T5713] loop3: detected capacity change from 0 to 4096 [ 97.557806][ T4247] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 97.589015][ T5696] XFS (loop0): Mounting V5 Filesystem [ 97.685447][ T4247] usb 6-1: USB disconnect, device number 2 [ 97.784374][ T5721] loop1: detected capacity change from 0 to 40427 [ 97.799153][ T5721] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 97.848269][ T5696] XFS (loop0): Ending clean mount [ 97.954105][ T4181] XFS (loop0): Unmounting Filesystem [ 98.028027][ T5729] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 98.330128][ T5740] loop5: detected capacity change from 0 to 512 [ 98.411108][ T5745] capability: warning: `syz.0.420' uses 32-bit capabilities (legacy support in use) [ 98.428871][ T5740] EXT4-fs (loop5): Test dummy encryption mode enabled [ 98.436234][ T5740] EXT4-fs (loop5): Encoding requested by superblock is unknown [ 98.746698][ T5749] loop4: detected capacity change from 0 to 40427 [ 98.839780][ T5749] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x1ffff [ 98.869021][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 98.887889][ T5759] loop0: detected capacity change from 0 to 128 [ 98.964682][ T4183] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 98.983566][ T4413] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.234763][ T4413] usb 2-1: Using ep0 maxpacket: 16 [ 99.344869][ T4183] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.360032][ T4183] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 99.369340][ T4183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.374785][ T4413] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 99.390120][ T4183] usb 6-1: config 0 descriptor?? [ 99.434833][ T4419] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.439420][ T4183] pwc: Askey VC010 type 2 USB webcam detected. [ 99.534667][ T4423] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.564755][ T4413] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 99.573956][ T4413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.582565][ T4413] usb 2-1: Product: syz [ 99.586837][ T4413] usb 2-1: Manufacturer: syz [ 99.591434][ T4413] usb 2-1: SerialNumber: syz [ 99.598847][ T4413] usb 2-1: config 0 descriptor?? [ 99.636112][ T4413] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 99.648745][ T4413] usb 2-1: Detected FT232RL [ 99.694678][ T4419] usb 1-1: Using ep0 maxpacket: 16 [ 99.774864][ T4423] usb 5-1: Using ep0 maxpacket: 8 [ 99.814890][ T4419] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.826393][ T4419] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 99.836856][ T4419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.848980][ T4419] usb 1-1: config 0 descriptor?? [ 99.855132][ T4183] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.904836][ T4183] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.904969][ T4423] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 99.925519][ T4423] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.935879][ T4423] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.939199][ T5777] netlink: 64 bytes leftover after parsing attributes in process `syz.3.441'. [ 99.945931][ T4423] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.945960][ T4423] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.974695][ T4183] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.978806][ T4423] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.994085][ T4423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.038060][ T4183] pwc: recv_control_msg error -32 req 04 val 1000 [ 100.084797][ T4183] pwc: recv_control_msg error -32 req 04 val 1300 [ 100.124755][ T4183] pwc: recv_control_msg error -32 req 04 val 1400 [ 100.164797][ T4183] pwc: recv_control_msg error -32 req 02 val 2000 [ 100.203335][ T5779] loop3: detected capacity change from 0 to 40427 [ 100.211281][ T4413] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 100.214771][ T4183] pwc: recv_control_msg error -32 req 02 val 2100 [ 100.234830][ T4413] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 100.242823][ T4413] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 100.253043][ T4413] usb 2-1: USB disconnect, device number 5 [ 100.267025][ T4413] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 100.277207][ T4413] ftdi_sio 2-1:0.0: device disconnected [ 100.294864][ T4423] usb 5-1: GET_CAPABILITIES returned 0 [ 100.301042][ T4423] usbtmc 5-1:16.0: can't read capabilities [ 100.312070][ T5779] F2FS-fs (loop3): Invalid segment/section count (31, 0 x 1) [ 100.319639][ T5779] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 100.328051][ T5779] F2FS-fs (loop3): Unrecognized mount option "al†oc_mode=default" or missing value [ 100.345382][ T4419] hid-generic 0003:28BD:0933.0003: hidraw0: USB HID v0.00 Device [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 100.477241][ T5781] loop3: detected capacity change from 0 to 4096 [ 100.490629][ T4183] pwc: recv_control_msg error -71 req 02 val 2500 [ 100.520413][ T4413] usb 5-1: USB disconnect, device number 4 [ 100.534715][ T4183] pwc: recv_control_msg error -71 req 02 val 2400 [ 100.539064][ T4419] usb 1-1: USB disconnect, device number 3 [ 100.548105][ T5781] ntfs3: Unknown parameter 'windows_names' [ 100.564812][ T4183] pwc: recv_control_msg error -71 req 02 val 2600 [ 100.584691][ T4183] pwc: recv_control_msg error -71 req 02 val 2900 [ 100.604744][ T4183] pwc: recv_control_msg error -71 req 02 val 2800 [ 100.644809][ T4183] pwc: recv_control_msg error -71 req 04 val 1100 [ 100.680020][ T4183] pwc: recv_control_msg error -71 req 04 val 1200 [ 100.705776][ T4183] pwc: Registered as video103. [ 100.722337][ T4183] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5 [ 100.780692][ T4183] usb 6-1: USB disconnect, device number 3 [ 100.979327][ T5792] loop1: detected capacity change from 0 to 32768 [ 101.025426][ T5792] XFS: noattr2 mount option is deprecated. [ 101.219826][ T5792] XFS (loop1): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 101.360246][ T5813] loop5: detected capacity change from 0 to 32768 [ 101.492560][ T5813] XFS (loop5): Mounting V5 Filesystem [ 101.723157][ T5813] XFS (loop5): Ending clean mount [ 101.809927][ T5827] loop3: detected capacity change from 0 to 4096 [ 101.870321][ T5822] loop0: detected capacity change from 0 to 32768 [ 101.911246][ T5035] XFS (loop5): Unmounting Filesystem [ 101.980255][ T5835] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.085531][ T5822] XFS (loop0): Mounting V5 Filesystem [ 102.181563][ T5846] loop4: detected capacity change from 0 to 64 [ 102.411355][ T5822] XFS (loop0): Ending clean mount [ 102.441063][ T5822] XFS (loop0): Quotacheck needed: Please wait. [ 102.469574][ T5855] loop1: detected capacity change from 0 to 1024 [ 102.528297][ T5822] XFS (loop0): Quotacheck: Done. [ 102.531532][ T5859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.465'. [ 102.569093][ T5855] EXT4-fs (loop1): Ignoring removed nobh option [ 102.601592][ T147] block nbd0: Receive control failed (result -107) [ 102.604658][ T5855] EXT4-fs (loop1): Ignoring removed oldalloc option [ 102.645342][ T5855] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.727260][ T5863] loop4: detected capacity change from 0 to 1024 [ 102.762699][ T5863] hfsplus: invalid gid specified [ 102.768428][ T5863] hfsplus: unable to parse mount options [ 102.777619][ T5855] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,bsdgroups,barrier=0x0000000000000003,dioread_lock,data_err=ignore,usrjquota=,data_err=ignore,grpquota,nobh,grpid,oldalloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 102.811842][ T4181] XFS (loop0): Unmounting Filesystem [ 102.947676][ T5868] overlayfs: './file0' not a directory [ 103.228213][ T5885] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.477'. [ 103.266971][ T5888] netlink: 'syz.3.479': attribute type 2 has an invalid length. [ 103.313100][ T5888] netlink: 164 bytes leftover after parsing attributes in process `syz.3.479'. [ 103.338481][ T5885] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.477'. [ 103.370251][ T5889] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.477'. [ 103.439923][ T5893] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.477'. [ 103.657595][ T5914] netlink: 'syz.4.490': attribute type 10 has an invalid length. [ 103.678695][ T5914] netlink: 40 bytes leftover after parsing attributes in process `syz.4.490'. [ 103.690114][ T5914] device dummy0 entered promiscuous mode [ 103.700843][ T5914] bridge0: port 3(dummy0) entered blocking state [ 103.707757][ T5914] bridge0: port 3(dummy0) entered disabled state [ 103.741813][ T5914] bridge0: port 3(dummy0) entered blocking state [ 103.748582][ T5914] bridge0: port 3(dummy0) entered forwarding state [ 103.922102][ T5929] delete_channel: no stack [ 104.367625][ T5960] netlink: 104 bytes leftover after parsing attributes in process `syz.4.511'. [ 104.473702][ T5966] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.514'. [ 104.773284][ T5987] netlink: 60 bytes leftover after parsing attributes in process `syz.4.523'. [ 106.140689][ T6106] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 106.177969][ T6106] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 108.242402][ T6258] __nla_validate_parse: 16 callbacks suppressed [ 108.242419][ T6258] netlink: 96 bytes leftover after parsing attributes in process `syz.3.644'. [ 108.342374][ T6264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.647'. [ 108.367204][ T6264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.647'. [ 108.393492][ T6267] netlink: 60 bytes leftover after parsing attributes in process `syz.4.647'. [ 108.436302][ T6264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.647'. [ 108.844110][ T6300] netlink: 60 bytes leftover after parsing attributes in process `syz.4.665'. [ 108.908584][ T6300] netlink: 60 bytes leftover after parsing attributes in process `syz.4.665'. [ 108.926184][ T6307] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.667'. [ 109.040803][ T6306] netlink: 60 bytes leftover after parsing attributes in process `syz.4.665'. [ 109.069373][ T6300] netlink: 60 bytes leftover after parsing attributes in process `syz.4.665'. [ 109.201767][ T6326] netlink: 'syz.4.675': attribute type 29 has an invalid length. [ 109.260063][ T6326] netlink: 'syz.4.675': attribute type 29 has an invalid length. [ 109.298276][ T6329] netlink: 'syz.4.675': attribute type 29 has an invalid length. [ 110.536530][ T6390] device syzkaller0 entered promiscuous mode [ 110.771862][ T6408] netlink: 'syz.5.714': attribute type 46 has an invalid length. [ 111.490535][ T6453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.962624][ T6534] netlink: 'syz.4.771': attribute type 29 has an invalid length. [ 112.985104][ T6534] netlink: 'syz.4.771': attribute type 29 has an invalid length. [ 113.539370][ T6561] netlink: 'syz.3.783': attribute type 29 has an invalid length. [ 113.599230][ T6561] netlink: 'syz.3.783': attribute type 29 has an invalid length. [ 113.651200][ T6563] netlink: 'syz.3.783': attribute type 29 has an invalid length. [ 113.701631][ T6567] netlink: 'syz.4.785': attribute type 12 has an invalid length. [ 113.751602][ T6567] __nla_validate_parse: 16 callbacks suppressed [ 113.751619][ T6567] netlink: 132 bytes leftover after parsing attributes in process `syz.4.785'. [ 113.768134][ T6569] netlink: 60 bytes leftover after parsing attributes in process `syz.1.787'. [ 113.828360][ T6569] netlink: 60 bytes leftover after parsing attributes in process `syz.1.787'. [ 113.916376][ T6574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.789'. [ 113.949841][ T6570] netlink: 60 bytes leftover after parsing attributes in process `syz.1.787'. [ 113.985223][ T6574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.789'. [ 114.014815][ T6577] netlink: 60 bytes leftover after parsing attributes in process `syz.0.789'. [ 114.052928][ T6580] netlink: 60 bytes leftover after parsing attributes in process `syz.0.789'. [ 114.298422][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 115.828699][ T6662] netlink: 'syz.3.832': attribute type 12 has an invalid length. [ 115.863188][ T6662] netlink: 132 bytes leftover after parsing attributes in process `syz.3.832'. [ 116.051219][ T6674] xt_socket: unknown flags 0x24 [ 116.151373][ T6682] netlink: 'syz.3.840': attribute type 10 has an invalid length. [ 116.381048][ T6682] device veth0_vlan left promiscuous mode [ 116.520748][ T6682] device veth0_vlan entered promiscuous mode [ 116.587140][ T6682] team0: Device veth0_vlan failed to register rx_handler [ 116.954384][ T6477] Set syz1 is full, maxelem 65536 reached [ 117.325926][ T6682] syz.3.840 (6682) used greatest stack depth: 20104 bytes left [ 117.350372][ T6684] device veth1_macvtap left promiscuous mode [ 117.525004][ T6740] netlink: 'syz.4.866': attribute type 21 has an invalid length. [ 117.882054][ T6765] ------------[ cut here ]------------ [ 117.916067][ T6765] trace type BPF program uses run-time allocation [ 117.922605][ T6765] WARNING: CPU: 1 PID: 6765 at kernel/bpf/verifier.c:11750 check_map_prog_compatibility+0x6cf/0x870 [ 117.983131][ T6765] Modules linked in: [ 118.005333][ T6765] CPU: 1 PID: 6765 Comm: syz.4.878 Not tainted syzkaller #0 [ 118.034069][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.066266][ T6765] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 118.073086][ T6765] Code: ff e8 65 e2 ef ff 48 c7 c6 00 37 11 8a e9 0d fd ff ff e8 54 e2 ef ff c6 05 ec 0d ce 0b 01 48 c7 c7 60 33 11 8a e8 21 be 16 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 118.165268][ T6765] RSP: 0018:ffffc9000300f450 EFLAGS: 00010246 [ 118.171502][ T6765] RAX: cba779cbec5c5e00 RBX: 0000000000000001 RCX: 0000000000080000 [ 118.180438][ T6765] RDX: ffffc9000dc31000 RSI: 00000000000046fc RDI: 00000000000046fd [ 118.189249][ T6765] RBP: ffff8880503f0000 R08: dffffc0000000000 R09: ffffed1017224f2c [ 118.198120][ T6765] R10: ffffed1017224f2c R11: 1ffff11017224f2b R12: ffffc90000d1e038 [ 118.206483][ T6765] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff920001a3c07 [ 118.214908][ T6765] FS: 00007f453eb5d6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 118.224070][ T6765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.233517][ T6765] CR2: 0000000000000000 CR3: 00000000222ea000 CR4: 00000000003506f0 [ 118.242079][ T6765] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.255578][ T6765] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.263697][ T6765] Call Trace: [ 118.271698][ T6765] [ 118.276091][ T6765] resolve_pseudo_ldimm64+0x691/0x1030 [ 118.281916][ T6765] ? check_attach_btf_id+0xe60/0xe60 [ 118.292394][ T6765] ? __mark_reg_known+0x1a0/0x1a0 [ 118.299041][ T6765] bpf_check+0x30a4/0xf090 [ 118.303678][ T6765] ? mark_lock+0x94/0x320 [ 118.313339][ T6765] ? bpf_get_btf_vmlinux+0x10/0x10 [ 118.320160][ T6765] ? mark_lock+0x94/0x320 [ 118.329205][ T6765] ? verify_lock_unused+0x140/0x140 [ 118.334886][ T6765] ? verify_lock_unused+0x140/0x140 [ 118.340333][ T6765] ? rcu_lock_release+0x5/0x20 [ 118.353371][ T6765] ? __lock_acquire+0x7c60/0x7c60 [ 118.359367][ T6765] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 118.370929][ T6765] ? lock_chain_count+0x20/0x20 [ 118.376242][ T6765] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 118.382664][ T6765] ? lockdep_hardirqs_on+0x94/0x140 [ 118.389356][ T6765] ? ktime_get_with_offset+0xff/0x320 [ 118.395119][ T6765] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 118.401949][ T6765] ? ktime_get_real_ts64+0x420/0x420 [ 118.407724][ T6765] ? __might_fault+0xb3/0x110 [ 118.412914][ T6765] ? memset+0x1e/0x40 [ 118.417544][ T6765] ? bpf_obj_name_cpy+0x190/0x1d0 [ 118.422802][ T6765] bpf_prog_load+0x1043/0x1550 [ 118.428140][ T6765] ? map_freeze+0x350/0x350 [ 118.432832][ T6765] ? __might_fault+0xb7/0x110 [ 118.438102][ T6765] ? __might_fault+0xb3/0x110 [ 118.442945][ T6765] ? bpf_lsm_bpf+0x5/0x10 [ 118.447857][ T6765] ? security_bpf+0x7a/0xa0 [ 118.452610][ T6765] __sys_bpf+0x4c2/0x670 [ 118.459662][ T6765] ? bpf_link_show_fdinfo+0x340/0x340 [ 118.465950][ T6765] ? vtime_user_exit+0x2dc/0x400 [ 118.471095][ T6765] __x64_sys_bpf+0x78/0x90 [ 118.484793][ T6765] do_syscall_64+0x4c/0xa0 [ 118.492975][ T6765] ? clear_bhb_loop+0x30/0x80 [ 118.503392][ T6765] ? clear_bhb_loop+0x30/0x80 [ 118.513838][ T6765] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.526742][ T6765] RIP: 0033:0x7f45408f6749 [ 118.536838][ T6765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.574643][ T6765] RSP: 002b:00007f453eb5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.609713][ T6765] RAX: ffffffffffffffda RBX: 00007f4540b4cfa0 RCX: 00007f45408f6749 [ 118.617847][ T6765] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 118.650341][ T6765] RBP: 00007f454097af91 R08: 0000000000000000 R09: 0000000000000000 [ 118.664701][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.672710][ T6765] R13: 00007f4540b4d038 R14: 00007f4540b4cfa0 R15: 00007ffd3ce7bc88 [ 118.706061][ T6765] [ 118.709183][ T6765] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.716477][ T6765] CPU: 1 PID: 6765 Comm: syz.4.878 Not tainted syzkaller #0 [ 118.723770][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.733847][ T6765] Call Trace: [ 118.737138][ T6765] [ 118.740077][ T6765] dump_stack_lvl+0x168/0x230 [ 118.744775][ T6765] ? show_regs_print_info+0x20/0x20 [ 118.749991][ T6765] ? load_image+0x3b0/0x3b0 [ 118.754531][ T6765] panic+0x2c9/0x7f0 [ 118.758440][ T6765] ? bpf_jit_dump+0xd0/0xd0 [ 118.762964][ T6765] ? check_map_prog_compatibility+0x6cf/0x870 [ 118.769054][ T6765] __warn+0x248/0x2b0 [ 118.773053][ T6765] ? check_map_prog_compatibility+0x6cf/0x870 [ 118.779165][ T6765] report_bug+0x1b7/0x2e0 [ 118.783516][ T6765] handle_bug+0x3a/0x70 [ 118.787684][ T6765] exc_invalid_op+0x16/0x40 [ 118.792197][ T6765] asm_exc_invalid_op+0x16/0x20 [ 118.797058][ T6765] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 118.803757][ T6765] Code: ff e8 65 e2 ef ff 48 c7 c6 00 37 11 8a e9 0d fd ff ff e8 54 e2 ef ff c6 05 ec 0d ce 0b 01 48 c7 c7 60 33 11 8a e8 21 be 16 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 118.823373][ T6765] RSP: 0018:ffffc9000300f450 EFLAGS: 00010246 [ 118.829458][ T6765] RAX: cba779cbec5c5e00 RBX: 0000000000000001 RCX: 0000000000080000 [ 118.837443][ T6765] RDX: ffffc9000dc31000 RSI: 00000000000046fc RDI: 00000000000046fd [ 118.845431][ T6765] RBP: ffff8880503f0000 R08: dffffc0000000000 R09: ffffed1017224f2c [ 118.853417][ T6765] R10: ffffed1017224f2c R11: 1ffff11017224f2b R12: ffffc90000d1e038 [ 118.861494][ T6765] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff920001a3c07 [ 118.869501][ T6765] resolve_pseudo_ldimm64+0x691/0x1030 [ 118.875012][ T6765] ? check_attach_btf_id+0xe60/0xe60 [ 118.880313][ T6765] ? __mark_reg_known+0x1a0/0x1a0 [ 118.885366][ T6765] bpf_check+0x30a4/0xf090 [ 118.889817][ T6765] ? mark_lock+0x94/0x320 [ 118.894181][ T6765] ? bpf_get_btf_vmlinux+0x10/0x10 [ 118.899313][ T6765] ? mark_lock+0x94/0x320 [ 118.903769][ T6765] ? verify_lock_unused+0x140/0x140 [ 118.908998][ T6765] ? verify_lock_unused+0x140/0x140 [ 118.914212][ T6765] ? rcu_lock_release+0x5/0x20 [ 118.918999][ T6765] ? __lock_acquire+0x7c60/0x7c60 [ 118.924051][ T6765] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 118.930053][ T6765] ? lock_chain_count+0x20/0x20 [ 118.934925][ T6765] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 118.941212][ T6765] ? lockdep_hardirqs_on+0x94/0x140 [ 118.946425][ T6765] ? ktime_get_with_offset+0xff/0x320 [ 118.951810][ T6765] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 118.958071][ T6765] ? ktime_get_real_ts64+0x420/0x420 [ 118.963382][ T6765] ? __might_fault+0xb3/0x110 [ 118.968075][ T6765] ? memset+0x1e/0x40 [ 118.972070][ T6765] ? bpf_obj_name_cpy+0x190/0x1d0 [ 118.977107][ T6765] bpf_prog_load+0x1043/0x1550 [ 118.981901][ T6765] ? map_freeze+0x350/0x350 [ 118.986413][ T6765] ? __might_fault+0xb7/0x110 [ 118.991107][ T6765] ? __might_fault+0xb3/0x110 [ 118.995786][ T6765] ? bpf_lsm_bpf+0x5/0x10 [ 119.000124][ T6765] ? security_bpf+0x7a/0xa0 [ 119.004646][ T6765] __sys_bpf+0x4c2/0x670 [ 119.008904][ T6765] ? bpf_link_show_fdinfo+0x340/0x340 [ 119.014299][ T6765] ? vtime_user_exit+0x2dc/0x400 [ 119.019430][ T6765] __x64_sys_bpf+0x78/0x90 [ 119.023853][ T6765] do_syscall_64+0x4c/0xa0 [ 119.028273][ T6765] ? clear_bhb_loop+0x30/0x80 [ 119.032959][ T6765] ? clear_bhb_loop+0x30/0x80 [ 119.037651][ T6765] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.043554][ T6765] RIP: 0033:0x7f45408f6749 [ 119.047979][ T6765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.067678][ T6765] RSP: 002b:00007f453eb5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.076123][ T6765] RAX: ffffffffffffffda RBX: 00007f4540b4cfa0 RCX: 00007f45408f6749 [ 119.084108][ T6765] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 119.092093][ T6765] RBP: 00007f454097af91 R08: 0000000000000000 R09: 0000000000000000 [ 119.100105][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.108097][ T6765] R13: 00007f4540b4d038 R14: 00007f4540b4cfa0 R15: 00007ffd3ce7bc88 [ 119.116191][ T6765] [ 119.119459][ T6765] Kernel Offset: disabled [ 119.123783][ T6765] Rebooting in 86400 seconds..