last executing test programs: 4.168398786s ago: executing program 0 (id=203): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00002f00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 3.785907042s ago: executing program 0 (id=209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.967527044s ago: executing program 2 (id=216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 2.961595124s ago: executing program 1 (id=217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x5}]}}}}}}}}, 0x0) 2.832565636s ago: executing program 3 (id=218): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000001440)='./file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.773351837s ago: executing program 2 (id=219): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x2}], 0x1}, 0xff03}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x7d}}], 0x4000070, 0x8000) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000100)=""/42, 0x2a}], 0x1) 2.739983388s ago: executing program 1 (id=220): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x80000, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) 2.625847439s ago: executing program 0 (id=221): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0xda6c}], 0x1, 0x40012002, 0x0) 2.422941753s ago: executing program 2 (id=222): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) 2.347438834s ago: executing program 0 (id=223): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.330663744s ago: executing program 2 (id=224): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 1.825817432s ago: executing program 1 (id=225): prctl$PR_SET_NAME(0xf, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.638130944s ago: executing program 3 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 1.28729499s ago: executing program 0 (id=227): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) 1.257011441s ago: executing program 3 (id=228): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000002140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.066202273s ago: executing program 1 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 909.230546ms ago: executing program 3 (id=230): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xb) 874.561336ms ago: executing program 1 (id=231): r0 = io_uring_setup(0x1ec4, &(0x7f0000000440)={0x0, 0xcba0, 0x80, 0x4, 0x2c0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000003300)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 693.507089ms ago: executing program 3 (id=232): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) poll(&(0x7f0000000080)=[{r2, 0x90a4}], 0x1, 0x100) 273.943106ms ago: executing program 2 (id=233): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x11}}], 0x1, 0x4000800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000002400)=[{{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x7600, @mcast2, 0x32, 0x2}, 0x80, 0x0}}], 0x40000000000018d, 0x40000) 121.807018ms ago: executing program 1 (id=234): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd26, 0x25dfdbff, {0x2, 0x80, 0x0, 0xd, 0xfc, 0x3, 0x0, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c0400000000002000128008000100677470001400028005000500"], 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 95.879309ms ago: executing program 2 (id=235): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x1c, 0x18, 0x1, 0x0, 0x8, {0xa, 0x37}}, 0x1c}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r2, 0x7, 0x1}, 0xc) 8.99921ms ago: executing program 3 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/14, @ANYRES32, @ANYRES32, @ANYBLOB="01a39cb0c58929"], 0x50) 0s ago: executing program 0 (id=237): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 74.387552][ T5759] cgroup: Unknown subsys name 'net' [ 74.552743][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.223823][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.724958][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.735844][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.743756][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.752682][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.760984][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.773662][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.799168][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.807149][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.815425][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.823389][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.823544][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.830827][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.838579][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.851422][ T5770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.853908][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.866866][ T5770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.869260][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.884089][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.886487][ T5770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.891712][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.899896][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.922019][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.932316][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.940269][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.452065][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 78.467201][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 78.488974][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 78.602680][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 78.677228][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.684737][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.692295][ T5771] bridge_slave_0: entered allmulticast mode [ 78.700173][ T5771] bridge_slave_0: entered promiscuous mode [ 78.744745][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.752174][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.759592][ T5771] bridge_slave_1: entered allmulticast mode [ 78.768236][ T5771] bridge_slave_1: entered promiscuous mode [ 78.811071][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.818581][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.825959][ T5774] bridge_slave_0: entered allmulticast mode [ 78.832823][ T5774] bridge_slave_0: entered promiscuous mode [ 78.874743][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.882085][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.889862][ T5774] bridge_slave_1: entered allmulticast mode [ 78.897033][ T5774] bridge_slave_1: entered promiscuous mode [ 78.930625][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.940194][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.948421][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.956284][ T5778] bridge_slave_0: entered allmulticast mode [ 78.963135][ T5778] bridge_slave_0: entered promiscuous mode [ 78.997415][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.004668][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.012672][ T5768] bridge_slave_0: entered allmulticast mode [ 79.020094][ T5768] bridge_slave_0: entered promiscuous mode [ 79.030616][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.053458][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.060959][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.068338][ T5778] bridge_slave_1: entered allmulticast mode [ 79.075915][ T5778] bridge_slave_1: entered promiscuous mode [ 79.085813][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.098148][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.107780][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.114960][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.122302][ T5768] bridge_slave_1: entered allmulticast mode [ 79.129324][ T5768] bridge_slave_1: entered promiscuous mode [ 79.198948][ T5771] team0: Port device team_slave_0 added [ 79.207762][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.242421][ T5771] team0: Port device team_slave_1 added [ 79.251377][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.274104][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.287354][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.300012][ T5774] team0: Port device team_slave_0 added [ 79.352089][ T5774] team0: Port device team_slave_1 added [ 79.367289][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.374738][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.401552][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.416274][ T5768] team0: Port device team_slave_0 added [ 79.438941][ T5778] team0: Port device team_slave_0 added [ 79.455636][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.462814][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.489715][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.503115][ T5768] team0: Port device team_slave_1 added [ 79.526510][ T5778] team0: Port device team_slave_1 added [ 79.574623][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.582004][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.608216][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.622752][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.630041][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.662941][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.674693][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.681950][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.707931][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.748460][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.755616][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.781624][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.794184][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.801504][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.827579][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.841068][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.848521][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.875501][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.886167][ T50] Bluetooth: hci1: command tx timeout [ 79.904676][ T5771] hsr_slave_0: entered promiscuous mode [ 79.911209][ T5771] hsr_slave_1: entered promiscuous mode [ 79.958696][ T5774] hsr_slave_0: entered promiscuous mode [ 79.966000][ T50] Bluetooth: hci3: command tx timeout [ 79.969157][ T5782] Bluetooth: hci2: command tx timeout [ 79.971771][ T5772] Bluetooth: hci0: command tx timeout [ 79.983306][ T5774] hsr_slave_1: entered promiscuous mode [ 79.990606][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.998433][ T5774] Cannot create hsr debugfs directory [ 80.111173][ T5768] hsr_slave_0: entered promiscuous mode [ 80.118938][ T5768] hsr_slave_1: entered promiscuous mode [ 80.125120][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.132952][ T5768] Cannot create hsr debugfs directory [ 80.208330][ T5778] hsr_slave_0: entered promiscuous mode [ 80.214728][ T5778] hsr_slave_1: entered promiscuous mode [ 80.221019][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.229307][ T5778] Cannot create hsr debugfs directory [ 80.539164][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.555103][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.567895][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.579425][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.655141][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.676036][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.695410][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.705966][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.764599][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.784311][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.798250][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.831257][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.921055][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.940661][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.950190][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.969718][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.002101][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.094518][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.116286][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.143717][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.151071][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.162030][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.169200][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.221460][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.237689][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.264543][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.271738][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.282436][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.289631][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.340932][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.357420][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.386233][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.393427][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.448019][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.465921][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.473097][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.496352][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.503639][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.542519][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.549862][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.967093][ T5772] Bluetooth: hci1: command tx timeout [ 82.037625][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.045997][ T5772] Bluetooth: hci2: command tx timeout [ 82.051449][ T5772] Bluetooth: hci0: command tx timeout [ 82.055545][ T5782] Bluetooth: hci3: command tx timeout [ 82.148389][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.184205][ T5774] veth0_vlan: entered promiscuous mode [ 82.234877][ T5774] veth1_vlan: entered promiscuous mode [ 82.282753][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.307681][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.387154][ T5771] veth0_vlan: entered promiscuous mode [ 82.481078][ T5771] veth1_vlan: entered promiscuous mode [ 82.502788][ T5774] veth0_macvtap: entered promiscuous mode [ 82.522116][ T5778] veth0_vlan: entered promiscuous mode [ 82.540336][ T5768] veth0_vlan: entered promiscuous mode [ 82.550676][ T5774] veth1_macvtap: entered promiscuous mode [ 82.584341][ T5778] veth1_vlan: entered promiscuous mode [ 82.637920][ T5768] veth1_vlan: entered promiscuous mode [ 82.661686][ T5771] veth0_macvtap: entered promiscuous mode [ 82.676664][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.716741][ T5771] veth1_macvtap: entered promiscuous mode [ 82.740228][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.800058][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.809141][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.818718][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.828926][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.854750][ T5768] veth0_macvtap: entered promiscuous mode [ 82.893228][ T5778] veth0_macvtap: entered promiscuous mode [ 82.927044][ T5768] veth1_macvtap: entered promiscuous mode [ 82.961908][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.973856][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.989723][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.003567][ T5778] veth1_macvtap: entered promiscuous mode [ 83.029921][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.053936][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.067682][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.099894][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.114386][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.128165][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.139155][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.151091][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.170317][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.181191][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.192237][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.204839][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.215037][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.226945][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.239051][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.252497][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.263514][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.274797][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.286301][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.300882][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.313569][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.323021][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.332375][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.345877][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.367934][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.377199][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.386803][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.396072][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.421171][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.432175][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.442445][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.454387][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.464768][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.475790][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.488440][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.521770][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.540748][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.563245][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.572625][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.583842][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.592848][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.706279][ T3426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.714715][ T3426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.808979][ T3426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.829116][ T3426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.874089][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.893589][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.003305][ T5837] syz.2.3[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.013544][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.042131][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.050745][ T5782] Bluetooth: hci1: command tx timeout [ 84.063604][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.083204][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.126209][ T5782] Bluetooth: hci3: command tx timeout [ 84.126244][ T50] Bluetooth: hci0: command tx timeout [ 84.131667][ T5782] Bluetooth: hci2: command tx timeout [ 84.162428][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.187030][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.204327][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.236084][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.663076][ T5845] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 84.795844][ T5834] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.874897][ T5847] input: syz0 as /devices/virtual/input/input5 [ 85.020707][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.048913][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.072603][ T5837] loop2: detected capacity change from 0 to 40427 [ 85.079192][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.079322][ T5834] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.079347][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.091497][ T5834] usb 4-1: config 0 descriptor?? [ 85.191873][ T5837] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 85.258950][ T5837] F2FS-fs (loop2): invalid crc value [ 85.291387][ T5837] F2FS-fs (loop2): Found nat_bits in checkpoint [ 85.416636][ T5839] loop1: detected capacity change from 0 to 40427 [ 85.444055][ T5837] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 85.452135][ T5833] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.469160][ T5839] F2FS-fs (loop1): invalid crc value [ 85.510198][ T5839] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.647394][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 85.654776][ T5834] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 85.697087][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.724891][ T5834] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 85.745118][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.755108][ T5839] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.777228][ T5833] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.800912][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.816766][ T5833] usb 1-1: config 0 descriptor?? [ 85.831483][ T27] audit: type=1804 audit(1750125362.406:2): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="/newroot/0/file1/file1" dev="loop2" ino=10 res=1 errno=0 [ 85.860249][ T5833] hub 1-1:0.0: USB hub found [ 85.953908][ T5774] syz-executor: attempt to access beyond end of device [ 85.953908][ T5774] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 85.973531][ T5839] syz.1.2: attempt to access beyond end of device [ 85.973531][ T5839] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 85.992712][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 86.017171][ T5839] syz.1.2: attempt to access beyond end of device [ 86.017171][ T5839] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 86.056051][ T5833] hub 1-1:0.0: 1 port detected [ 86.102769][ T5768] syz-executor: attempt to access beyond end of device [ 86.102769][ T5768] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 86.125811][ T5782] Bluetooth: hci1: command tx timeout [ 86.147316][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 86.206221][ T5782] Bluetooth: hci0: command tx timeout [ 86.206253][ T5772] Bluetooth: hci2: command tx timeout [ 86.217681][ T50] Bluetooth: hci3: command tx timeout [ 86.272750][ T5833] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 86.279837][ T5833] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 86.294822][ T5833] usbhid 1-1:0.0: can't add hid device: -71 [ 86.311853][ T5833] usbhid: probe of 1-1:0.0 failed with error -71 [ 86.357678][ T5833] usb 1-1: USB disconnect, device number 2 [ 86.809641][ T5865] syz.1.9[5865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.809917][ T5865] syz.1.9[5865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.168919][ T54] cfg80211: failed to load regulatory.db [ 87.513122][ T5878] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.702865][ T5882] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.911839][ T23] usb 4-1: USB disconnect, device number 2 [ 88.029687][ T5874] loop1: detected capacity change from 0 to 32768 [ 88.056701][ T5874] XFS: noikeep mount option is deprecated. [ 88.132970][ T5874] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 88.341920][ T5874] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 88.403902][ T5882] loop3: detected capacity change from 0 to 32768 [ 88.474307][ T5874] XFS (loop1): Starting recovery (logdev: internal) [ 88.525114][ T5882] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 88.570871][ T5874] XFS (loop1): Ending recovery (logdev: internal) [ 88.652672][ T5882] XFS (loop3): Ending clean mount [ 88.716247][ T5874] XFS (loop1): Metadata corruption detected at xfs_btree_lookup_get_block+0x516/0x640, xfs_bnobt block 0x8 [ 88.753451][ T5874] XFS (loop1): Unmount and run xfs_repair [ 88.803581][ T5874] XFS (loop1): Metadata corruption detected at xfs_inobt_verify+0xc5/0x230, xfs_finobt block 0x8 [ 88.828897][ T5874] XFS (loop1): Unmount and run xfs_repair [ 88.843155][ T5874] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 88.853258][ T5874] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 88.867409][ T5778] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 88.912371][ T5874] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 88.974389][ T5874] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 89.007934][ T5874] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 89.065455][ T5874] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 89.089836][ T5874] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.115666][ T5874] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.124600][ T5874] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.174249][ T5874] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x8 len 8 error 117 [ 89.252469][ T5768] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 89.275956][ T5898] XFS (loop1): Metadata corruption detected at xfs_inobt_verify+0xc5/0x230, xfs_finobt block 0x8 [ 89.305434][ T5898] XFS (loop1): Unmount and run xfs_repair [ 89.311262][ T5898] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 89.340998][ T5898] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 89.365351][ T5898] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 89.387902][ T5898] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 89.411231][ T5898] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 89.445796][ T5898] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 89.465707][ T5898] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.501606][ T5898] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.514171][ T5898] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.524107][ T5898] XFS (loop1): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x203/0x670 (fs/xfs/xfs_buf.c:1559). Shutting down filesystem. [ 89.540515][ T5898] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 89.775547][ T5918] warning: `syz.3.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.961949][ T5914] loop0: detected capacity change from 0 to 32768 [ 89.980776][ T5914] ======================================================= [ 89.980776][ T5914] WARNING: The mand mount option has been deprecated and [ 89.980776][ T5914] and is ignored by this kernel. Remove the mand [ 89.980776][ T5914] option from the mount to silence this warning. [ 89.980776][ T5914] ======================================================= [ 90.094657][ T5914] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.247845][ T5932] loop1: detected capacity change from 0 to 16 [ 90.308740][ T5932] erofs: (device loop1): mounted with root inode @ nid 36. [ 90.357564][ T5914] XFS (loop0): Ending clean mount [ 90.410536][ T5914] XFS (loop0): Quotacheck needed: Please wait. [ 90.580033][ T5914] XFS (loop0): Quotacheck: Done. [ 90.866260][ T5771] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 91.310704][ T5930] loop3: detected capacity change from 0 to 32768 [ 91.908529][ T5949] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 92.202004][ T5953] loop0: detected capacity change from 0 to 512 [ 92.237897][ T5955] Bluetooth: MGMT ver 1.22 [ 92.274276][ T5955] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 92.292613][ T3426] wlan1: Trigger new scan to find an IBSS to join [ 92.358553][ T5953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.445780][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.40'. [ 92.462895][ T5953] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.466910][ T5967] trusted_key: syz.2.43 sent an empty control message without MSG_MORE. [ 92.772245][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.884401][ T5972] process 'syz.3.46' launched './file2' with NULL argv: empty string added [ 92.999010][ T5977] netlink: 'syz.0.45': attribute type 10 has an invalid length. [ 93.032180][ T5977] syz_tun: entered promiscuous mode [ 93.096097][ T5977] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 93.214350][ T5979] loop3: detected capacity change from 0 to 256 [ 93.266117][ T5979] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 93.281139][ T5979] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 93.787971][ T5989] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 94.035678][ T5997] batadv0: entered promiscuous mode [ 94.059347][ T5997] batadv_slave_1: entered promiscuous mode [ 94.093163][ T5996] batadv_slave_1: left promiscuous mode [ 94.129444][ T5996] batadv0: left promiscuous mode [ 95.022873][ T6018] loop2: detected capacity change from 0 to 2048 [ 95.081236][ T6018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.170698][ T27] audit: type=1804 audit(1750125371.746:3): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.62" name="/newroot/18/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 95.214514][ T6028] loop0: detected capacity change from 0 to 1024 [ 95.238258][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.247863][ T1126] wlan1: Trigger new scan to find an IBSS to join [ 96.473400][ T6058] loop2: detected capacity change from 0 to 128 [ 96.486140][ T54] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.692189][ T54] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.707009][ T54] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 96.734562][ T54] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.744781][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.755044][ T54] usb 1-1: Product: syz [ 96.761306][ T54] usb 1-1: Manufacturer: syz [ 96.782421][ T54] usb 1-1: SerialNumber: syz [ 96.797494][ T54] cdc_mbim 1-1:1.0: skipping garbage [ 96.815402][ T5833] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.012664][ T6048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.018920][ T5833] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 97.037451][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.057601][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.074262][ T5833] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 97.108464][ T5833] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 97.130269][ T5833] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 97.149023][ T5833] usb 2-1: Manufacturer: syz [ 97.175292][ T5833] usb 2-1: config 0 descriptor?? [ 97.649693][ T6048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.667737][ T5833] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 97.682638][ T54] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 97.692699][ T5833] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 97.722477][ T54] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 97.740941][ T5833] appleir 0003:05AC:8243.0002: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 97.761591][ T54] wwan wwan0: port wwan0mbim0 attached [ 97.815002][ T54] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, ce:b3:23:18:93:ae [ 98.092548][ T6093] loop2: detected capacity change from 0 to 1024 [ 98.127289][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 98.134238][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 98.141501][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 98.148244][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 98.154701][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 98.161414][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 98.167812][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 98.174523][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 98.185951][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 98.192704][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 98.205409][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 98.212172][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 98.218463][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 98.249384][ T23] usb 1-1: USB disconnect, device number 3 [ 98.289599][ T23] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 98.306428][ T6093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.363100][ T6099] loop3: detected capacity change from 0 to 1024 [ 98.419041][ T23] wwan wwan0: port wwan0mbim0 disconnected [ 98.610740][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.672609][ T6099] mmap: syz.3.96 (6099) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.575622][ T5833] usb 2-1: USB disconnect, device number 2 [ 100.036807][ T6138] loop3: detected capacity change from 0 to 40427 [ 100.064385][ T6138] F2FS-fs (loop3): invalid crc value [ 100.091210][ T6138] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.150601][ T6138] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.257312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.266402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.287524][ T48] wlan1: Trigger new scan to find an IBSS to join [ 100.341904][ T6138] syz.3.106: attempt to access beyond end of device [ 100.341904][ T6138] loop3: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 100.580734][ T5778] syz-executor: attempt to access beyond end of device [ 100.580734][ T5778] loop3: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 100.641039][ T5778] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 100.689696][ T6169] loop0: detected capacity change from 0 to 128 [ 100.766475][ T6170] loop1: detected capacity change from 0 to 512 [ 100.773726][ T6169] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 100.829465][ T6170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.901249][ T6169] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.915322][ T5833] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.938184][ T6170] EXT4-fs (loop1): orphan cleanup on readonly fs [ 101.004220][ T6170] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 101.062753][ T6170] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 101.130827][ T6170] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.119: Failed to acquire dquot type 1 [ 101.173568][ T5833] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 101.187060][ T5833] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.205376][ T5833] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.218747][ T6170] EXT4-fs (loop1): 1 truncate cleaned up [ 101.225369][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.244381][ T5833] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.249614][ T6170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.264376][ T5833] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.290569][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.312127][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.312961][ T5833] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.366764][ T5833] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.408448][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.431441][ T5833] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.452046][ T5833] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.494441][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.523461][ T5833] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.565256][ T5833] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.594188][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.609417][ T5833] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.620667][ T5833] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.645429][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.665607][ T5833] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.684830][ T5833] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.705332][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.713445][ T5833] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.735625][ T5833] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.761685][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.783107][ T5833] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 101.817990][ T5833] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 101.849914][ T5833] usb 3-1: Product: syz [ 101.854166][ T5833] usb 3-1: Manufacturer: syz [ 101.880353][ T5833] usb 3-1: SerialNumber: syz [ 101.896476][ T5833] usb 3-1: config 0 descriptor?? [ 101.919044][ T5833] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 102.000839][ T27] audit: type=1326 audit(1750125378.576:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f398e929 code=0x7ffc0000 [ 102.068893][ T27] audit: type=1326 audit(1750125378.576:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f398e929 code=0x7ffc0000 [ 102.130832][ T6182] loop0: detected capacity change from 0 to 4096 [ 102.168492][ T27] audit: type=1326 audit(1750125378.576:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc4f398e929 code=0x7ffc0000 [ 102.273679][ T27] audit: type=1326 audit(1750125378.576:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f398e929 code=0x7ffc0000 [ 102.332183][ T27] audit: type=1326 audit(1750125378.576:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f398e929 code=0x7ffc0000 [ 102.369391][ T5808] usb 3-1: USB disconnect, device number 2 [ 102.402124][ T5808] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 102.424925][ T27] audit: type=1326 audit(1750125378.576:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc4f398e929 code=0x7ffc0000 [ 102.460958][ T27] audit: type=1326 audit(1750125378.576:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f398e929 code=0x7ffc0000 [ 102.490937][ T27] audit: type=1326 audit(1750125378.576:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f398e929 code=0x7ffc0000 [ 103.067644][ T6198] vcan0: entered allmulticast mode [ 103.083620][ T6197] vcan0: left allmulticast mode [ 103.335396][ T5807] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.441246][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 103.457493][ T6206] xfrm1: entered promiscuous mode [ 103.462820][ T6206] xfrm1: entered allmulticast mode [ 103.469002][ T6206] Zero length message leads to an empty skb [ 103.528453][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.555513][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.585304][ T5807] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.605253][ T5807] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.635605][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.649894][ T5807] usb 3-1: config 0 descriptor?? [ 103.929814][ T6212] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.107999][ T5807] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xe [ 104.129959][ T5807] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 104.140142][ T5807] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 104.166415][ T5807] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 104.435113][ T5807] usb 3-1: USB disconnect, device number 3 [ 104.455483][ T5808] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.649901][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.675285][ T5808] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 104.684408][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.708066][ T5808] usb 4-1: config 0 descriptor?? [ 105.004369][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.129839][ T5808] dragonrise 0003:0079:0006.0004: unknown main item tag 0x0 [ 105.170731][ T5808] dragonrise 0003:0079:0006.0004: item fetching failed at offset 2/5 [ 105.196287][ T5808] dragonrise 0003:0079:0006.0004: parse failed [ 105.213430][ T5808] dragonrise: probe of 0003:0079:0006.0004 failed with error -22 [ 105.325458][ T11] wlan1: Trigger new scan to find an IBSS to join [ 105.355465][ T23] usb 4-1: USB disconnect, device number 3 [ 105.548239][ T5807] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.569609][ T5808] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.745368][ T5807] usb 1-1: Using ep0 maxpacket: 8 [ 105.752612][ T5807] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.762218][ T5807] usb 1-1: config 0 has no interface number 0 [ 105.765267][ T5808] usb 3-1: Using ep0 maxpacket: 32 [ 105.768450][ T5807] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.784674][ T5807] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.793802][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.804649][ T5808] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 105.816431][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.820627][ T5807] usb 1-1: config 0 descriptor?? [ 105.833935][ T5808] usb 3-1: config 0 descriptor?? [ 105.841990][ T5807] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 106.092775][ T5807] usb 1-1: USB disconnect, device number 4 [ 106.105436][ T5808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 106.150329][ T5808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.190816][ T5808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 106.206656][ T5808] usb 3-1: media controller created [ 106.234686][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.314521][ T3426] wlan1: Creating new IBSS network, BSSID 8e:93:5f:d5:fe:b8 [ 106.343076][ T5808] az6027: usb out operation failed. (-71) [ 106.366024][ T5808] az6027: usb out operation failed. (-71) [ 106.379699][ T5808] stb0899_attach: Driver disabled by Kconfig [ 106.389686][ T5808] az6027: no front-end attached [ 106.389686][ T5808] [ 106.401894][ T6237] input: syz1 as /devices/virtual/input/input6 [ 106.409100][ T5808] az6027: usb out operation failed. (-71) [ 106.418451][ T5808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 106.463418][ T5808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 106.500368][ T5808] dvb-usb: schedule remote query interval to 400 msecs. [ 106.507744][ T5808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 106.541088][ T5808] usb 3-1: USB disconnect, device number 4 [ 106.666832][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 106.666847][ T27] audit: type=1326 audit(1750125383.246:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.1.144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6838e929 code=0x0 [ 106.741671][ T5808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 106.852088][ T6244] syz.0.145 uses obsolete (PF_INET,SOCK_PACKET) [ 107.310043][ T6246] loop3: detected capacity change from 0 to 32768 [ 107.365573][ T6246] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.443925][ T6246] XFS (loop3): Ending clean mount [ 107.620526][ T5778] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.842528][ T6248] loop0: detected capacity change from 0 to 32768 [ 107.872642][ T6248] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.147 (6248) [ 107.940603][ T6248] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.959574][ T6248] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 107.971137][ T6248] BTRFS info (device loop0): using free space tree [ 108.094122][ T6248] BTRFS info (device loop0): enabling ssd optimizations [ 108.116500][ T6248] BTRFS info (device loop0): auto enabling async discard [ 108.192418][ T27] audit: type=1326 audit(1750125384.766:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6838e929 code=0x7ffc0000 [ 108.275307][ T27] audit: type=1326 audit(1750125384.796:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6838e929 code=0x7ffc0000 [ 108.354241][ T27] audit: type=1326 audit(1750125384.796:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf6838e929 code=0x7ffc0000 [ 108.421895][ T27] audit: type=1326 audit(1750125384.796:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6838e929 code=0x7ffc0000 [ 108.468267][ T27] audit: type=1326 audit(1750125384.796:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6838e929 code=0x7ffc0000 [ 108.507998][ T27] audit: type=1326 audit(1750125384.796:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf6838e929 code=0x7ffc0000 [ 108.565224][ T27] audit: type=1326 audit(1750125384.796:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6838e929 code=0x7ffc0000 [ 108.602455][ T6290] loop2: detected capacity change from 0 to 4096 [ 108.639612][ T27] audit: type=1326 audit(1750125384.796:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6838e929 code=0x7ffc0000 [ 108.714134][ T27] audit: type=1326 audit(1750125384.806:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf6838e929 code=0x7ffc0000 [ 108.836757][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.273794][ T6304] netlink: 96 bytes leftover after parsing attributes in process `syz.1.160'. [ 109.968528][ T6302] loop3: detected capacity change from 0 to 32768 [ 109.988430][ T6302] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.158 (6302) [ 110.029384][ T6302] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.039962][ T6302] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 110.050270][ T6302] BTRFS info (device loop3): using free space tree [ 110.107830][ T6302] BTRFS info (device loop3): enabling ssd optimizations [ 110.115108][ T6302] BTRFS info (device loop3): auto enabling async discard [ 110.601549][ T5778] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.890412][ T6369] binder: 6367:6369 ioctl 4018620d 0 returned -22 [ 111.971605][ T6370] binder: 6367:6370 ioctl c018620c 0 returned -14 [ 112.384321][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.184'. [ 112.500297][ T6364] loop0: detected capacity change from 0 to 32768 [ 112.541154][ T6382] loop3: detected capacity change from 0 to 512 [ 112.583044][ T6364] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 112.629618][ T6364] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.668405][ T6382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.700153][ T6382] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.703591][ T6364] XFS (loop0): Ending clean mount [ 112.740581][ T6364] XFS (loop0): Quotacheck needed: Please wait. [ 112.848707][ T6364] XFS (loop0): Quotacheck: Done. [ 112.904263][ T6382] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.185: corrupted inode contents [ 112.966321][ T23] libceph: connect (1)[c::]:6789 error -101 [ 112.973304][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 113.071635][ T6398] ceph: No mds server is up or the cluster is laggy [ 113.111766][ T6382] EXT4-fs error (device loop3): ext4_dirty_inode:6100: inode #2: comm syz.3.185: mark_inode_dirty error [ 113.190431][ T6382] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.185: corrupted inode contents [ 113.336214][ T6382] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.185: mark_inode_dirty error [ 113.589895][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.690517][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.939994][ T6412] loop3: detected capacity change from 0 to 2048 [ 114.084072][ T6412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.409047][ T6407] loop2: detected capacity change from 0 to 32768 [ 114.429892][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.435597][ T6407] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.190 (6407) [ 114.538361][ T6407] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.588216][ T6407] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 114.626907][ T6407] BTRFS info (device loop2): using free space tree [ 114.809521][ T6407] BTRFS info (device loop2): enabling ssd optimizations [ 114.841416][ T6407] BTRFS info (device loop2): auto enabling async discard [ 115.210139][ T6418] loop0: detected capacity change from 0 to 32768 [ 115.282151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.395606][ T6418] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 115.405740][ T6438] loop3: detected capacity change from 0 to 32768 [ 115.436897][ T6418] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 115.491180][ T6438] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 115.528034][ T6438] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 115.572558][ T5774] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.591523][ T6418] XFS (loop0): Ending clean mount [ 115.628173][ T6418] XFS (loop0): Quotacheck needed: Please wait. [ 115.643366][ T6438] XFS (loop3): Ending clean mount [ 115.707024][ T6438] XFS (loop3): Quotacheck needed: Please wait. [ 115.759688][ T5808] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 115.788830][ T5808] XFS (loop3): Unmount and run xfs_repair [ 115.801285][ T6418] XFS (loop0): Quotacheck: Done. [ 115.845360][ T5808] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 115.852867][ T5808] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 115.905392][ T5808] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 115.929759][ T5808] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 115.975635][ T5808] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 115.986878][ T5808] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 116.000385][ T5808] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 116.007068][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 116.007082][ T27] audit: type=1804 audit(1750125392.576:35): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.191" name="/newroot/43/file0/memory.stat" dev="loop0" ino=4427 res=1 errno=0 [ 116.011304][ T5808] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 116.057287][ T5808] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 116.069712][ T42] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74 [ 116.097190][ T6438] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 116.155754][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.322866][ T6465] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 116.355575][ T6438] XFS (loop3): User initiated shutdown received. [ 116.416669][ T6438] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 116.440918][ T6438] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 116.549199][ T5778] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.255062][ T6485] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 117.584050][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 117.844878][ T6501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.860866][ T6501] bond1: (slave bond2): Enslaving as an active interface with an up link [ 118.020372][ T6508] capability: warning: `syz.1.214' uses 32-bit capabilities (legacy support in use) [ 118.382980][ T6516] loop3: detected capacity change from 0 to 2048 [ 118.426022][ T6516] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 118.447732][ T6516] NILFS (loop3): mounting unchecked fs [ 118.556421][ T6516] NILFS (loop3): recovery complete [ 118.583086][ T6524] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.832096][ T27] audit: type=1800 audit(1750125395.406:36): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.218" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 119.145322][ T5808] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.339904][ T5808] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.369334][ T5808] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.390292][ T5808] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.402679][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.424634][ T6530] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 119.465992][ T5808] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 119.886134][ T5807] usb 3-1: USB disconnect, device number 5 [ 121.025593][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 133.255937][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.262835][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.386323][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 167.717320][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.706211][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.712582][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.046398][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 201.886082][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 201.889926][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 201.892265][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 201.899826][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 230.586286][ T3484] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 256.129255][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.145147][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.300405][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 293.976667][ T1126] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 317.585682][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.592070][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.556542][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 356.966416][ T1126] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 379.015603][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.021997][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.135357][ T5834] kworker/dying (5834) used greatest stack depth: 20504 bytes left [ 388.572136][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 420.377348][ T1126] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)