last executing test programs: 11.728980919s ago: executing program 0 (id=310): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@orlov}, {@jqfmt_vfsold}]}, 0xfe, 0x570, &(0x7f0000000240)="$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") rename(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10.004298313s ago: executing program 2 (id=313): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sync() r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) setreuid(0xee01, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000440)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.79404652s ago: executing program 1 (id=314): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000140)="06", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002580)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002b00)="02", 0x1}], 0x1}}], 0x3, 0x80) clock_gettime(0x0, &(0x7f0000002bc0)) recvmmsg(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000dc0)=""/218, 0xda}], 0x1}, 0x2}, {{0x0, 0x0, 0x0}, 0x4db5}], 0x2, 0x0, 0x0) 9.521458074s ago: executing program 0 (id=315): syz_mount_image$erofs(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x254, &(0x7f0000000600)="$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") r0 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000380)='.\x00', 0xa0000061) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 9.514499168s ago: executing program 4 (id=316): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 9.503700596s ago: executing program 3 (id=317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000810}, 0x8000) 8.762743361s ago: executing program 1 (id=318): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x470bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) 8.499067309s ago: executing program 2 (id=319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB]) 8.445484435s ago: executing program 3 (id=320): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x7, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a7a096", 0x2, 0x3a, 0x0, @local, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 8.277472705s ago: executing program 4 (id=321): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d40)=@bridge_delneigh={0x2c, 0x1c, 0x1, 0x2, 0x0, {0x7, 0x0, 0x0, r2, 0x3, 0x7, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048000) 8.173015362s ago: executing program 0 (id=322): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) utime(0x0, 0x0) 7.750581954s ago: executing program 1 (id=323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 7.047737039s ago: executing program 2 (id=324): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 6.964956929s ago: executing program 0 (id=325): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) 6.908972472s ago: executing program 3 (id=326): syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x10004, &(0x7f0000000040)=ANY=[], 0x2, 0x1ba, &(0x7f0000001880)="$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") sysfs$1(0x1, &(0x7f0000000000)='}\x82])-\x00') r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11, r0, 0xbf7d5000) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xa1641000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(0x0, 0x5, 0x0) getpid() unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 6.763205064s ago: executing program 4 (id=327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) 6.344481561s ago: executing program 1 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) 6.158647195s ago: executing program 2 (id=329): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sync() 6.069175615s ago: executing program 0 (id=330): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.160671913s ago: executing program 4 (id=331): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1c, 0xcafe28741a3524c9, 0x70bd29, 0x20000, {0x7, 0x0, 0x0, 0x0, 0x80, 0x1e, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 2.5985569s ago: executing program 1 (id=332): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 2.555308806s ago: executing program 3 (id=333): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x470bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) 1.998475954s ago: executing program 2 (id=334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000"]) 1.712169843s ago: executing program 4 (id=335): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000000c0)={0xab, 0xff800000}) 1.485585738s ago: executing program 3 (id=336): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0}}], 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x7}, 0x7, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42c, 0x0, 0x0, 0x600, 0x0, 0xed0, 0x3fffffc, 0x0, 0x8], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3e8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x4, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 697.622058ms ago: executing program 4 (id=337): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 659.337919ms ago: executing program 1 (id=338): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000001000)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) pwrite64(r0, &(0x7f0000005680)="a9", 0x1, 0x600000fff) 607.81664ms ago: executing program 2 (id=339): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x11, 0x6e4, &(0x7f0000000d00)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 283.780525ms ago: executing program 3 (id=340): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000800)=ANY=[], 0x1, 0x1df, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000180)='./file0\x00', 0x400, 0x194) getdents(r0, &(0x7f0000000780)=""/206, 0xce) 0s ago: executing program 0 (id=341): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.15.209' (ED25519) to the list of known hosts. [ 196.690935][ T5773] cgroup: Unknown subsys name 'net' [ 196.825458][ T5773] cgroup: Unknown subsys name 'cpuset' [ 196.849740][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.661210][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.668087][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.840760][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 256.463859][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.478055][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.500958][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.511214][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.520490][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.528637][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.539407][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.552932][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.562350][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.574810][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.585687][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.593823][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.594186][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.608069][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.611025][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.619314][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.630059][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.635977][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.642064][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.648451][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.664624][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.673466][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.702947][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.720343][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.758985][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.272950][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 258.459428][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 258.754747][ T5798] Bluetooth: hci0: command tx timeout [ 258.760538][ T5798] Bluetooth: hci3: command tx timeout [ 258.766556][ T5803] Bluetooth: hci1: command tx timeout [ 258.768632][ T5805] Bluetooth: hci2: command tx timeout [ 258.812137][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 258.836578][ T5805] Bluetooth: hci4: command tx timeout [ 258.851119][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 259.144788][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 259.625071][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.632852][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.641340][ T5794] bridge_slave_0: entered allmulticast mode [ 259.651022][ T5794] bridge_slave_0: entered promiscuous mode [ 259.739396][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.747574][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.757882][ T5789] bridge_slave_0: entered allmulticast mode [ 259.767639][ T5789] bridge_slave_0: entered promiscuous mode [ 259.788960][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.799562][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.807514][ T5794] bridge_slave_1: entered allmulticast mode [ 259.817205][ T5794] bridge_slave_1: entered promiscuous mode [ 260.013777][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.021637][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.029701][ T5789] bridge_slave_1: entered allmulticast mode [ 260.039593][ T5789] bridge_slave_1: entered promiscuous mode [ 260.143430][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.153406][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.161140][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.171471][ T5790] bridge_slave_0: entered allmulticast mode [ 260.181171][ T5790] bridge_slave_0: entered promiscuous mode [ 260.347269][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.359319][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.367829][ T5806] bridge_slave_0: entered allmulticast mode [ 260.377401][ T5806] bridge_slave_0: entered promiscuous mode [ 260.436667][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.486678][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.494628][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.502161][ T5790] bridge_slave_1: entered allmulticast mode [ 260.512042][ T5790] bridge_slave_1: entered promiscuous mode [ 260.554558][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.562362][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.570504][ T5806] bridge_slave_1: entered allmulticast mode [ 260.580035][ T5806] bridge_slave_1: entered promiscuous mode [ 260.601316][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.611257][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.619348][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.627324][ T5793] bridge_slave_0: entered allmulticast mode [ 260.636790][ T5793] bridge_slave_0: entered promiscuous mode [ 260.762171][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.812026][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.820183][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.828167][ T5793] bridge_slave_1: entered allmulticast mode [ 260.835203][ T5805] Bluetooth: hci3: command tx timeout [ 260.838148][ T5793] bridge_slave_1: entered promiscuous mode [ 260.840971][ T52] Bluetooth: hci1: command tx timeout [ 260.853390][ T52] Bluetooth: hci0: command tx timeout [ 260.855296][ T5798] Bluetooth: hci2: command tx timeout [ 260.874149][ T5794] team0: Port device team_slave_0 added [ 260.923230][ T5803] Bluetooth: hci4: command tx timeout [ 260.961378][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.055923][ T5794] team0: Port device team_slave_1 added [ 261.073956][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.093497][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.110848][ T5789] team0: Port device team_slave_0 added [ 261.236628][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.291185][ T5789] team0: Port device team_slave_1 added [ 261.301176][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.308560][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.334972][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.410759][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.431619][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.510705][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.518070][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.544489][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.582676][ T5806] team0: Port device team_slave_0 added [ 261.707660][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.715113][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.741575][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.761519][ T5806] team0: Port device team_slave_1 added [ 261.771486][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.779542][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.805991][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.857595][ T5790] team0: Port device team_slave_0 added [ 261.873415][ T5793] team0: Port device team_slave_0 added [ 261.984435][ T5793] team0: Port device team_slave_1 added [ 261.999386][ T5790] team0: Port device team_slave_1 added [ 262.097511][ T5794] hsr_slave_0: entered promiscuous mode [ 262.107940][ T5794] hsr_slave_1: entered promiscuous mode [ 262.122804][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.130497][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.157101][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.287357][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.294663][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.321210][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.342507][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.349938][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.376490][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.460760][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.468267][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.494741][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.530421][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.537871][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.564425][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.654507][ T5789] hsr_slave_0: entered promiscuous mode [ 262.667628][ T5789] hsr_slave_1: entered promiscuous mode [ 262.676538][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.684559][ T5789] Cannot create hsr debugfs directory [ 262.751614][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.759696][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.786320][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.913445][ T5803] Bluetooth: hci2: command tx timeout [ 262.919265][ T5798] Bluetooth: hci3: command tx timeout [ 262.919385][ T5805] Bluetooth: hci0: command tx timeout [ 262.925163][ T5798] Bluetooth: hci1: command tx timeout [ 262.993268][ T5798] Bluetooth: hci4: command tx timeout [ 263.034380][ T5790] hsr_slave_0: entered promiscuous mode [ 263.043580][ T5790] hsr_slave_1: entered promiscuous mode [ 263.052011][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.059938][ T5790] Cannot create hsr debugfs directory [ 263.241442][ T5806] hsr_slave_0: entered promiscuous mode [ 263.251547][ T5806] hsr_slave_1: entered promiscuous mode [ 263.260427][ T5806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.268444][ T5806] Cannot create hsr debugfs directory [ 263.595386][ T5793] hsr_slave_0: entered promiscuous mode [ 263.604815][ T5793] hsr_slave_1: entered promiscuous mode [ 263.612748][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.620836][ T5793] Cannot create hsr debugfs directory [ 264.642117][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.744231][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.764894][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.787259][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.997449][ T5798] Bluetooth: hci1: command tx timeout [ 265.003437][ T5798] Bluetooth: hci2: command tx timeout [ 265.009072][ T5798] Bluetooth: hci0: command tx timeout [ 265.015389][ T5798] Bluetooth: hci3: command tx timeout [ 265.029079][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.051013][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.073914][ T5803] Bluetooth: hci4: command tx timeout [ 265.085130][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.142587][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.287432][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.328536][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.361422][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.410876][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.576779][ T5789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.656350][ T5789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.750648][ T5789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.777183][ T5789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.950307][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.057048][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.087724][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.155299][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.333379][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.529864][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.732322][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.768423][ T4132] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.776547][ T4132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.882774][ T4132] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.890543][ T4132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.937434][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.976711][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.108479][ T4132] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.116414][ T4132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.215321][ T4132] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.223158][ T4132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.276982][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.452721][ T4132] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.460555][ T4132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.558675][ T4132] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.566569][ T4132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.692669][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.897068][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.932173][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.034456][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.042163][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.159829][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.201169][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.209009][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.305211][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.473195][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.480909][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.505766][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.513573][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.628155][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.762145][ T5793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.773313][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.281357][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.829334][ T5794] veth0_vlan: entered promiscuous mode [ 269.926256][ T5794] veth1_vlan: entered promiscuous mode [ 270.097221][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.277434][ T5794] veth0_macvtap: entered promiscuous mode [ 270.376562][ T5794] veth1_macvtap: entered promiscuous mode [ 270.504459][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.610451][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.718672][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.821937][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.840191][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.850244][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.860794][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.870000][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.888657][ T5790] veth0_vlan: entered promiscuous mode [ 270.951874][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.980081][ T5790] veth1_vlan: entered promiscuous mode [ 271.324628][ T5806] veth0_vlan: entered promiscuous mode [ 271.369254][ T5790] veth0_macvtap: entered promiscuous mode [ 271.456500][ T5806] veth1_vlan: entered promiscuous mode [ 271.501005][ T5790] veth1_macvtap: entered promiscuous mode [ 271.649935][ T5793] veth0_vlan: entered promiscuous mode [ 271.779521][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.791372][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.809000][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.860091][ T5793] veth1_vlan: entered promiscuous mode [ 271.990930][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.001950][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.017435][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.032541][ T5806] veth0_macvtap: entered promiscuous mode [ 272.117455][ T5806] veth1_macvtap: entered promiscuous mode [ 272.221464][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.231956][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.241715][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.251008][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.302566][ T5793] veth0_macvtap: entered promiscuous mode [ 272.334589][ T5793] veth1_macvtap: entered promiscuous mode [ 272.391853][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.403852][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.415290][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.426266][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.443619][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.571962][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.582874][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.594538][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.605310][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.622139][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.735202][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.746199][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.757923][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.769864][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.780209][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.791067][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.806469][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.838287][ T5806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.849839][ T5806] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.859676][ T5806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.868913][ T5806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.082525][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.095327][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.105642][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.116555][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.126799][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.137611][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.152735][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.428879][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.439303][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.448780][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.457898][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.732603][ T5789] veth0_vlan: entered promiscuous mode [ 273.853676][ T5789] veth1_vlan: entered promiscuous mode [ 274.230695][ T5789] veth0_macvtap: entered promiscuous mode [ 274.325061][ T5789] veth1_macvtap: entered promiscuous mode [ 274.524672][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.537273][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.547603][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.558497][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.568746][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.579849][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.590081][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.602804][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.618784][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.823762][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.836689][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.847584][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.858452][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.868733][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.879733][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.889982][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.900814][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.916217][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.231834][ T5789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.242624][ T5789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.252152][ T5789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.261461][ T5789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.159997][ T3687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.169302][ T3687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.415037][ T3640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.423499][ T3640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.051875][ T5794] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 279.353489][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.363797][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.731701][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.739956][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.051268][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.059617][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.228977][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.237312][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.291589][ T4077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.302006][ T4077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.582066][ T4035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.595183][ T4035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.141329][ T5987] loop0: detected capacity change from 0 to 256 [ 281.186911][ T5987] ======================================================= [ 281.186911][ T5987] WARNING: The mand mount option has been deprecated and [ 281.186911][ T5987] and is ignored by this kernel. Remove the mand [ 281.186911][ T5987] option from the mount to silence this warning. [ 281.186911][ T5987] ======================================================= [ 281.487304][ T5851] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 281.518737][ T5987] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 281.671126][ T5987] exFAT-fs (loop0): start_clu is invalid cluster(0x0) [ 281.695038][ T5991] Zero length message leads to an empty skb [ 281.723537][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 281.755033][ T5851] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.765839][ T5851] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.807809][ T5851] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.822362][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.832693][ T5851] usb 3-1: Product: syz [ 281.837392][ T5851] usb 3-1: Manufacturer: syz [ 281.842264][ T5851] usb 3-1: SerialNumber: syz [ 282.048690][ T5995] loop1: detected capacity change from 0 to 16 [ 282.126957][ T5995] erofs (device loop1): mounted with root inode @ nid 36. [ 282.336640][ T5993] mmap: syz.1.2 (5993): VmData 37523456 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 282.419369][ T3640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.427750][ T3640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.522480][ T5851] usb 3-1: 0:2 : does not exist [ 282.604395][ T5851] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 282.646092][ T5997] loop3: detected capacity change from 0 to 1024 [ 282.653354][ T5999] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 282.846402][ T5851] usb 3-1: USB disconnect, device number 2 [ 282.909110][ T4035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.918566][ T4035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.929338][ T5997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.745839][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.771259][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.031526][ T6009] loop2: detected capacity change from 0 to 512 [ 284.183794][ T6009] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.9: bad orphan inode 15 [ 284.223532][ T6009] ext4_test_bit(bit=14, block=5) = 0 [ 284.231562][ T6009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.253289][ T6009] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.035002][ T6019] kvm: emulating exchange as write [ 285.637584][ T6025] loop3: detected capacity change from 0 to 512 [ 285.812324][ T6025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 285.825996][ T6025] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 285.884540][ T6029] loop1: detected capacity change from 0 to 512 [ 285.896993][ T6027] loop4: detected capacity change from 0 to 1024 [ 285.970552][ T6029] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.044439][ T6029] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 286.860910][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 287.257990][ T5851] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 287.454978][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 287.503486][ T5851] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.514488][ T5851] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.638357][ T5851] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.648061][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.663617][ T5851] usb 3-1: Product: syz [ 287.670291][ T5851] usb 3-1: Manufacturer: syz [ 287.675352][ T5851] usb 3-1: SerialNumber: syz [ 287.685686][ T6048] loop4: detected capacity change from 0 to 16 [ 287.752181][ T6048] erofs (device loop4): mounted with root inode @ nid 36. [ 287.788123][ T6049] loop3: detected capacity change from 0 to 16 [ 287.905474][ T6049] erofs (device loop3): mounted with root inode @ nid 36. [ 288.082014][ T5851] usb 3-1: 0:2 : does not exist [ 288.296907][ T5851] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 288.494605][ T5851] usb 3-1: USB disconnect, device number 3 [ 288.718817][ T6053] syz.0.24(6053): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 288.863550][ T6053] loop0: detected capacity change from 0 to 1024 [ 288.937627][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.947402][ T6053] ext4: Unknown parameter 'noacl' [ 289.519366][ T6063] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 289.552718][ T6060] loop3: detected capacity change from 0 to 1024 [ 290.355620][ T5851] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 290.580141][ T5851] usb 2-1: Using ep0 maxpacket: 16 [ 290.909824][ T6078] loop3: detected capacity change from 0 to 256 [ 290.982485][ T6076] loop4: detected capacity change from 0 to 1024 [ 291.095241][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.102020][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.229913][ T6078] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 291.789223][ T6080] loop2: detected capacity change from 0 to 2048 [ 291.962922][ T6080] loop2: p1 < > p3 [ 292.066423][ T6080] loop2: p3 size 134217728 extends beyond EOD, truncated [ 292.607059][ T6093] loop4: detected capacity change from 0 to 16 [ 292.666165][ T6093] erofs (device loop4): mounted with root inode @ nid 36. [ 292.788497][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 293.143447][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 293.194167][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.205488][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.352355][ T11] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.362735][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.371374][ T11] usb 1-1: Product: syz [ 293.375983][ T11] usb 1-1: Manufacturer: syz [ 293.380831][ T11] usb 1-1: SerialNumber: syz [ 293.403947][ T5851] usb 2-1: unable to get BOS descriptor or descriptor too short [ 293.430845][ T5851] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 293.439554][ T5851] usb 2-1: can't read configurations, error -71 [ 293.747627][ T11] usb 1-1: 0:2 : does not exist [ 293.828511][ T11] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 294.040527][ T5152] loop2: p1 < > p3 [ 294.084391][ T5152] loop2: p3 size 134217728 extends beyond EOD, truncated [ 294.111276][ T11] usb 1-1: USB disconnect, device number 2 [ 294.193876][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 294.406891][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.40'. [ 294.419990][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 294.463547][ T24] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 294.473130][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.724525][ T24] usb 4-1: config 0 descriptor?? [ 294.741765][ T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 295.001699][ T24] usb 4-1: Detected FT232B [ 295.430747][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 295.483874][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 295.523542][ T24] usb 4-1: USB disconnect, device number 2 [ 295.582395][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 295.596566][ T24] ftdi_sio 4-1:0.0: device disconnected [ 295.739518][ T6116] loop0: detected capacity change from 0 to 8192 [ 295.818304][ T6123] loop2: detected capacity change from 0 to 256 [ 295.979559][ T6123] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 295.993696][ T6123] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 296.050943][ T6121] loop1: detected capacity change from 0 to 4096 [ 296.110727][ T6123] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 296.138973][ T6121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.386304][ T6121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.816255][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.336193][ T6140] loop2: detected capacity change from 0 to 16 [ 297.396209][ T6139] loop3: detected capacity change from 0 to 512 [ 297.428177][ T6140] erofs (device loop2): mounted with root inode @ nid 36. [ 297.503326][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 297.509424][ T6139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.611110][ T6142] loop1: detected capacity change from 0 to 2048 [ 297.708540][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 297.889860][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.007171][ T6142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.088361][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 298.310772][ T6142] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 298.374205][ T6142] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 298.387253][ T6142] EXT4-fs (loop1): This should not happen!! Data will be lost [ 298.387253][ T6142] [ 298.397421][ T6142] EXT4-fs (loop1): Total free blocks count 0 [ 298.412687][ T6142] EXT4-fs (loop1): Free/Dirty block details [ 298.421536][ T6142] EXT4-fs (loop1): free_blocks=2415919104 [ 298.427893][ T6142] EXT4-fs (loop1): dirty_blocks=48 [ 298.433954][ T6142] EXT4-fs (loop1): Block reservation details [ 298.440194][ T6142] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 298.578686][ T6000] udevd[6000]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 299.053499][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.808641][ T6159] capability: warning: `syz.3.60' uses deprecated v2 capabilities in a way that may be insecure [ 300.543253][ T6167] loop4: detected capacity change from 0 to 16 [ 300.703243][ T6167] erofs (device loop4): mounted with root inode @ nid 36. [ 300.899260][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 300.922415][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 300.930565][ T24] usb 1-1: can't read configurations, error -71 [ 301.346083][ T6175] syz.1.66 uses obsolete (PF_INET,SOCK_PACKET) [ 302.142848][ T6000] udevd[6000]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 303.095184][ T11] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 303.299736][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 303.343500][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 303.611407][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.622225][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 303.633519][ T24] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 303.643623][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.711304][ T6202] loop3: detected capacity change from 0 to 512 [ 303.751171][ T6202] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 303.761400][ T6202] syz.3.78: attempt to access beyond end of device [ 303.761400][ T6202] loop20: rw=0, sector=2, nr_sectors = 2 limit=0 [ 303.774632][ T6202] EXT4-fs (loop3): couldn't read superblock of external journal [ 303.942796][ T6206] netlink: 68 bytes leftover after parsing attributes in process `syz.3.78'. [ 303.982202][ T24] usb 5-1: config 0 descriptor?? [ 307.157250][ T11] usb 3-1: unable to get BOS descriptor or descriptor too short [ 307.267899][ T11] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 307.276193][ T11] usb 3-1: can't read configurations, error -71 [ 307.783615][ T24] Bluetooth: Can't get state to change to load ram patch err [ 307.791487][ T24] Bluetooth: Loading patch file failed [ 307.797458][ T24] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 307.883483][ T6208] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 307.990908][ T24] usb 5-1: USB disconnect, device number 2 [ 308.732413][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.044939][ T6022] udevd[6022]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 309.081547][ T6000] udevd[6000]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 309.663869][ T6220] loop2: detected capacity change from 0 to 512 [ 309.787345][ T6220] EXT4-fs: inline encryption not supported [ 310.164659][ T6220] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 310.188269][ T6220] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 310.365282][ T6220] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 310.379265][ T6220] EXT4-fs (loop2): 1 truncate cleaned up [ 310.389953][ T6220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.587456][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.665771][ T6232] loop1: detected capacity change from 0 to 1024 [ 312.971279][ T6237] loop0: detected capacity change from 0 to 512 [ 313.091350][ T6237] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 313.402578][ T6241] loop2: detected capacity change from 0 to 128 [ 313.854250][ T6241] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 313.883571][ T6245] loop3: detected capacity change from 0 to 128 [ 313.944988][ T6245] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 313.957419][ T6241] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 314.153662][ T6245] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.163882][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 314.265890][ T6241] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 314.398538][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.410028][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.420373][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.433803][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.443325][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.594258][ T11] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 314.724137][ T24] usb 2-1: config 0 descriptor?? [ 314.803523][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 314.892836][ T5794] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.986882][ T11] usb 1-1: unable to get BOS descriptor or descriptor too short [ 315.054260][ T11] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 315.062399][ T11] usb 1-1: can't read configurations, error -71 [ 315.268492][ T24] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 315.350497][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 315.424038][ T6246] dccp_invalid_packet: P.Data Offset(0) too small [ 315.828822][ T6258] netlink: 156 bytes leftover after parsing attributes in process `syz.2.97'. [ 316.407205][ T6258] tipc: Enabling of bearer rejected, failed to enable media [ 316.476477][ T6268] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 316.654859][ T6269] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 317.431942][ T24] usb 2-1: USB disconnect, device number 4 [ 319.674402][ T6280] loop3: detected capacity change from 0 to 1024 [ 319.753440][ T11] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 320.052286][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.063404][ T11] usb 2-1: config 0 has no interfaces? [ 320.224458][ T11] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 320.237665][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.246692][ T11] usb 2-1: Product: syz [ 320.251255][ T11] usb 2-1: Manufacturer: syz [ 320.256428][ T11] usb 2-1: SerialNumber: syz [ 320.508275][ T11] usb 2-1: config 0 descriptor?? [ 321.130995][ T6286] loop4: detected capacity change from 0 to 1024 [ 321.230677][ T6286] EXT4-fs: Ignoring removed orlov option [ 321.237248][ T6286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.422547][ T6289] loop2: detected capacity change from 0 to 512 [ 321.482804][ T6289] EXT4-fs: Ignoring removed oldalloc option [ 321.534866][ T6286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.595932][ T6289] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 321.740777][ T6289] EXT4-fs (loop2): 1 truncate cleaned up [ 321.749153][ T6289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.989906][ T6304] loop0: detected capacity change from 0 to 16 [ 322.019160][ T6304] erofs (device loop0): mounted with root inode @ nid 36. [ 322.349071][ T6286] syz.4.105 (6286) used greatest stack depth: 4736 bytes left [ 322.621204][ T5789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.637347][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.703830][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 322.754769][ T11] usb 2-1: USB disconnect, device number 5 [ 322.903352][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 323.045203][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 323.084997][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 323.093220][ T24] usb 4-1: can't read configurations, error -71 [ 323.251726][ T6317] fuse: Bad value for 'fd' [ 323.296065][ T11] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 323.504448][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 323.557136][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.568589][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.579087][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.592530][ T11] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.607840][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.724314][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 323.795480][ T11] usb 3-1: config 0 descriptor?? [ 323.796067][ T45] usb 5-1: config 0 has no interfaces? [ 323.808844][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 323.822475][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.956555][ T45] usb 5-1: config 0 descriptor?? [ 324.221781][ T24] usb 5-1: USB disconnect, device number 3 [ 324.294329][ T6319] loop1: detected capacity change from 0 to 16 [ 324.345956][ T6319] erofs (device loop1): mounted with root inode @ nid 36. [ 324.357359][ T11] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 324.363973][ T6321] loop0: detected capacity change from 0 to 2048 [ 324.438791][ T11] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 324.471784][ T6310] dccp_invalid_packet: P.Data Offset(0) too small [ 324.556980][ T6321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.611646][ T6324] loop3: detected capacity change from 0 to 1024 [ 324.881414][ T6321] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 325.036389][ T6321] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 325.050194][ T6321] EXT4-fs (loop0): This should not happen!! Data will be lost [ 325.050194][ T6321] [ 325.060615][ T6321] EXT4-fs (loop0): Total free blocks count 0 [ 325.067257][ T6321] EXT4-fs (loop0): Free/Dirty block details [ 325.074475][ T6321] EXT4-fs (loop0): free_blocks=2415919504 [ 325.080717][ T6321] EXT4-fs (loop0): dirty_blocks=48 [ 325.086466][ T6321] EXT4-fs (loop0): Block reservation details [ 325.093167][ T6321] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 325.199618][ T6330] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 325.926855][ T6338] loop3: detected capacity change from 0 to 128 [ 325.985461][ T6338] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 326.471870][ T24] usb 3-1: USB disconnect, device number 6 [ 326.538891][ T4035] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 326.573658][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 326.815127][ T5848] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 326.847620][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 326.861510][ T45] usb 5-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 326.872870][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.995692][ T45] usb 5-1: config 0 descriptor?? [ 327.044495][ T6347] fuse: Invalid rootmode [ 327.091459][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.102254][ T5848] usb 2-1: config 0 has no interfaces? [ 327.200831][ T5848] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.210603][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.219338][ T5848] usb 2-1: Product: syz [ 327.224116][ T5848] usb 2-1: Manufacturer: syz [ 327.229277][ T5848] usb 2-1: SerialNumber: syz [ 327.347809][ T5848] usb 2-1: config 0 descriptor?? [ 327.543901][ T6352] loop3: detected capacity change from 0 to 16 [ 327.570290][ T45] wacom 0003:056A:0307.0003: probe with driver wacom failed with error -22 [ 327.694757][ T6352] erofs (device loop3): mounted with root inode @ nid 36. [ 327.774589][ T45] usb 5-1: USB disconnect, device number 4 [ 328.154180][ T5851] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 328.358621][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 328.468181][ T5851] usb 3-1: unable to get BOS descriptor or descriptor too short [ 328.504777][ T5851] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 328.518429][ T5851] usb 3-1: can't read configurations, error -71 [ 328.543384][ T6358] loop0: detected capacity change from 0 to 16 [ 328.624986][ T6358] erofs (device loop0): mounted with root inode @ nid 36. [ 328.846622][ T6363] loop4: detected capacity change from 0 to 128 [ 329.684649][ T6370] loop0: detected capacity change from 0 to 1024 [ 329.871836][ T5851] usb 2-1: USB disconnect, device number 6 [ 330.462878][ T6380] netlink: 'syz.1.135': attribute type 3 has an invalid length. [ 330.745239][ T5851] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 330.852812][ T6384] fuse: Invalid rootmode [ 331.008327][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.019726][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.030011][ T5851] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.043450][ T5851] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.053189][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.192093][ T5851] usb 3-1: config 0 descriptor?? [ 331.742613][ T5851] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 331.764182][ T6390] loop1: detected capacity change from 0 to 16 [ 331.827553][ T5851] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 331.868129][ T6393] loop0: detected capacity change from 0 to 16 [ 331.876820][ T6390] erofs (device loop1): mounted with root inode @ nid 36. [ 331.901597][ T6397] loop3: detected capacity change from 0 to 512 [ 331.905561][ T6381] dccp_invalid_packet: P.Data Offset(0) too small [ 331.940824][ T6393] erofs (device loop0): mounted with root inode @ nid 36. [ 331.967529][ T6397] ext4: Unknown parameter 'noacl' [ 332.095069][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 332.292945][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 332.395338][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 332.429585][ T45] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 332.437756][ T45] usb 5-1: can't read configurations, error -71 [ 333.248816][ T5851] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 333.445176][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.456164][ T5851] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.513754][ T5851] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 333.523979][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.537929][ T5851] usb 4-1: Product: syz [ 333.542386][ T5851] usb 4-1: Manufacturer: syz [ 333.549064][ T5851] usb 4-1: SerialNumber: syz [ 333.742408][ T5851] usb 4-1: config 0 descriptor?? [ 333.821713][ T6405] loop1: detected capacity change from 0 to 2048 [ 333.894329][ T5848] usb 3-1: USB disconnect, device number 9 [ 333.926495][ T6405] udf: Bad value for 'bs' [ 335.395985][ T6424] fuse: Invalid rootmode [ 336.200736][ T6433] loop1: detected capacity change from 0 to 16 [ 336.257489][ T5851] usb 4-1: USB disconnect, device number 5 [ 336.304559][ T6433] erofs (device loop1): mounted with root inode @ nid 36. [ 336.503755][ T6437] loop2: detected capacity change from 0 to 1024 [ 336.721431][ T6435] loop0: detected capacity change from 0 to 16 [ 336.772911][ T6435] erofs (device loop0): mounted with root inode @ nid 36. [ 336.914500][ T5851] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 337.266839][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.278581][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.289777][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 337.304316][ T5851] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.314785][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.388088][ T6446] loop1: detected capacity change from 0 to 16 [ 337.469030][ T6446] erofs (device loop1): mounted with root inode @ nid 36. [ 337.504510][ T61] hfsplus: b-tree write err: -5, ino 4 [ 337.621273][ T5851] usb 4-1: config 0 descriptor?? [ 338.119105][ T5851] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 338.254075][ T5851] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 338.278856][ T6440] dccp_invalid_packet: P.Data Offset(0) too small [ 338.776086][ T6453] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 338.866233][ T6454] Bluetooth: MGMT ver 1.23 [ 339.129875][ T6457] fuse: Bad value for 'rootmode' [ 339.828038][ T6463] loop2: detected capacity change from 0 to 512 [ 340.036073][ T6463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.049330][ T6463] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.231521][ T6463] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 18: comm syz.2.165: lblock 23 mapped to illegal pblock 18 (length 1) [ 340.282308][ T11] usb 4-1: USB disconnect, device number 6 [ 340.461662][ T6470] loop4: detected capacity change from 0 to 256 [ 340.537813][ T6470] vfat: Unknown parameter 'nonultck' [ 341.363470][ T11] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 341.529699][ T6469] loop0: detected capacity change from 0 to 8192 [ 341.676761][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.507124][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.518998][ T11] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.677289][ T6471] input: syz1 as /devices/virtual/input/input12 [ 342.919873][ T6469] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 342.932574][ T6469] FAT-fs (loop0): Filesystem has been set read-only [ 343.528956][ T11] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 343.539085][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.547820][ T11] usb 4-1: Product: syz [ 343.552372][ T11] usb 4-1: Manufacturer: syz [ 343.557619][ T11] usb 4-1: SerialNumber: syz [ 344.560479][ T11] usb 4-1: config 0 descriptor?? [ 345.773560][ T11] usb 4-1: can't set config #0, error -71 [ 345.783799][ T11] usb 4-1: USB disconnect, device number 7 [ 345.895931][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.170'. [ 346.024923][ T6486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'. [ 346.528140][ T6492] loop4: detected capacity change from 0 to 16 [ 346.614263][ T6492] erofs (device loop4): mounted with root inode @ nid 36. [ 346.804082][ T6495] loop0: detected capacity change from 0 to 16 [ 346.866876][ T6495] erofs (device loop0): mounted with root inode @ nid 36. [ 347.052318][ T6497] loop3: detected capacity change from 0 to 128 [ 347.142886][ T6497] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.166403][ T6501] fuse: Bad value for 'rootmode' [ 347.189925][ T6497] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 347.745095][ T5806] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.916099][ T6506] loop0: detected capacity change from 0 to 1024 [ 348.116703][ T6510] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 348.244828][ T5848] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 348.523461][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 348.902525][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.914637][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.924959][ T5848] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 348.934480][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.332538][ T5848] usb 2-1: config 0 descriptor?? [ 350.010396][ T5848] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0006/input/input14 [ 350.506547][ T5848] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 350.669869][ T6522] loop2: detected capacity change from 0 to 1024 [ 350.751853][ T5848] usb 2-1: USB disconnect, device number 7 [ 350.799998][ T6522] EXT4-fs: Ignoring removed nobh option [ 350.806296][ T6522] EXT4-fs: Ignoring removed bh option [ 351.059498][ T6522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.281777][ T6533] syz.3.184 (6533) used obsolete PPPIOCDETACH ioctl [ 352.547209][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.554174][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.734323][ T6535] cgroup: Unknown subsys name 'cpuset' [ 352.959992][ T6535] loop1: detected capacity change from 0 to 2048 [ 353.039981][ T6523] loop0: detected capacity change from 0 to 8192 [ 353.095323][ T6535] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 353.106635][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.340992][ T6539] loop3: detected capacity change from 0 to 16 [ 353.388806][ T6539] erofs (device loop3): mounted with root inode @ nid 36. [ 354.149574][ T6543] fuse: Bad value for 'rootmode' [ 354.404084][ T6547] loop3: detected capacity change from 0 to 512 [ 354.432510][ T6546] loop2: detected capacity change from 0 to 1024 [ 354.721013][ T6547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.741046][ T6547] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.026748][ T5848] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 355.106777][ T6558] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.191: corrupted xattr block 33: e_value out of bounds [ 355.202418][ T6558] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 355.310261][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.321687][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.331920][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.347585][ T5848] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.357665][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.606539][ T5848] usb 1-1: config 0 descriptor?? [ 356.971538][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.062303][ T5848] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 357.103463][ T5848] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 357.249328][ T6552] dccp_invalid_packet: P.Data Offset(0) too small [ 357.998258][ T6573] loop4: detected capacity change from 0 to 512 [ 358.164093][ T6573] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.171652][ T6573] ext4: Unknown parameter 'seclabel' [ 359.113493][ T6577] loop2: detected capacity change from 0 to 1024 [ 359.192246][ T6577] EXT4-fs: quotafile must be on filesystem root [ 360.265526][ T11] usb 1-1: USB disconnect, device number 7 [ 360.301231][ T6586] loop1: detected capacity change from 0 to 16 [ 361.341766][ T6586] erofs (device loop1): mounted with root inode @ nid 36. [ 362.561320][ T6596] loop4: detected capacity change from 0 to 1024 [ 362.894364][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 362.993706][ T5848] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 363.106558][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 363.167470][ T9] usb 3-1: config 15 has an invalid interface number: 84 but max is 0 [ 363.176333][ T9] usb 3-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 363.187122][ T9] usb 3-1: config 15 has no interface number 0 [ 363.193679][ T9] usb 3-1: config 15 interface 84 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.207350][ T9] usb 3-1: config 15 interface 84 has no altsetting 0 [ 363.253780][ T5848] usb 4-1: config 0 has no interfaces? [ 363.317524][ T5848] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 363.329077][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.338200][ T5848] usb 4-1: Product: syz [ 363.342670][ T5848] usb 4-1: Manufacturer: syz [ 363.347846][ T5848] usb 4-1: SerialNumber: syz [ 363.401079][ T5848] usb 4-1: config 0 descriptor?? [ 363.537531][ T9] usb 3-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=4c.90 [ 363.547370][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=10 [ 363.556062][ T9] usb 3-1: Product: syz [ 363.560509][ T9] usb 3-1: Manufacturer: syz [ 363.565540][ T9] usb 3-1: SerialNumber: syz [ 363.663907][ T5848] usb 4-1: USB disconnect, device number 8 [ 363.695312][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 363.887108][ T9] usb 3-1: bad CDC descriptors [ 363.894979][ T9] cdc_acm 3-1:15.84: Zero length descriptor references [ 363.902145][ T9] cdc_acm 3-1:15.84: probe with driver cdc_acm failed with error -22 [ 363.941630][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.953457][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.963871][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 363.979646][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.989329][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.043873][ T6613] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 364.066083][ T9] usb 3-1: USB disconnect, device number 10 [ 364.283595][ T45] usb 2-1: config 0 descriptor?? [ 365.241746][ T45] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 365.328718][ T45] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 365.422783][ T6610] dccp_invalid_packet: P.Data Offset(0) too small [ 367.252590][ T6627] loop3: detected capacity change from 0 to 764 [ 367.533971][ T6627] rock: directory entry would overflow storage [ 367.540582][ T6627] rock: sig=0x4654, size=5, remaining=4 [ 367.715019][ T11] usb 2-1: USB disconnect, device number 8 [ 369.189636][ T6638] loop3: detected capacity change from 0 to 16 [ 369.259657][ T6638] erofs (device loop3): mounted with root inode @ nid 36. [ 369.280888][ T6637] loop0: detected capacity change from 0 to 1024 [ 369.365553][ T6640] loop2: detected capacity change from 0 to 512 [ 369.452894][ T6640] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 369.705797][ T6640] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 369.841432][ T6640] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.221: corrupted in-inode xattr: e_value size too large [ 369.935036][ T6640] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.221: couldn't read orphan inode 15 (err -117) [ 370.000082][ T6640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.052444][ T6647] loop0: detected capacity change from 0 to 1024 [ 370.225011][ T6647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.447454][ T30] audit: type=1800 audit(1745470861.348:2): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.224" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 370.735464][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.474371][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.513828][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 371.774319][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.785803][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.796120][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 371.809611][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.819062][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.038497][ T45] usb 4-1: config 0 descriptor?? [ 372.576517][ T45] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 372.596551][ T6674] loop2: detected capacity change from 0 to 128 [ 372.628564][ T6674] FAT-fs (loop2): bogus logical sector size 256 [ 372.635558][ T6674] FAT-fs (loop2): Can't find a valid FAT filesystem [ 372.668622][ T45] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 372.768850][ T6662] dccp_invalid_packet: P.Data Offset(0) too small [ 372.839259][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 373.994701][ T6688] loop2: detected capacity change from 0 to 256 [ 374.234832][ T6688] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 374.248620][ T6688] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 374.766955][ T5848] usb 4-1: USB disconnect, device number 9 [ 375.539020][ T6700] loop0: detected capacity change from 0 to 164 [ 375.831737][ T6700] rock: directory entry would overflow storage [ 375.839241][ T6700] rock: sig=0x4f50, size=4, remaining=3 [ 375.845388][ T6700] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 375.892244][ T6706] loop4: detected capacity change from 0 to 8 [ 376.019454][ T6706] SQUASHFS error: Unable to read directory block [631:26] [ 377.158370][ T6716] loop0: detected capacity change from 0 to 2048 [ 377.299394][ T6716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.445468][ T6734] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 379.964481][ T6736] loop1: detected capacity change from 0 to 16 [ 379.995262][ T6738] loop3: detected capacity change from 0 to 512 [ 380.074286][ T6736] erofs (device loop1): mounted with root inode @ nid 36. [ 380.143530][ T6740] loop4: detected capacity change from 0 to 256 [ 380.177116][ T6738] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 380.217290][ T6736] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 380.278128][ T5798] erofs (device loop1): failed to decompress -5 in[4096, 0] out[8192] [ 380.371763][ T5808] Bluetooth: hci2: command 0x0406 tx timeout [ 380.378689][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 380.388497][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 380.397634][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 380.460009][ T6738] EXT4-fs (loop3): 1 truncate cleaned up [ 380.468557][ T6738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.561733][ T6740] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 380.590783][ T6736] erofs (device loop1): failed to decompress -5 in[4096, 0] out[8192] [ 380.600565][ T6736] erofs (device loop1): read error -117 @ 0 of nid 89 [ 380.675909][ T6740] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 380.690222][ T6743] loop2: detected capacity change from 0 to 512 [ 380.813630][ T6743] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 380.916884][ T30] audit: type=1800 audit(1745470871.528:3): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.255" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 380.986137][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.308175][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.588050][ T6760] loop3: detected capacity change from 0 to 1024 [ 382.807351][ T6760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.937323][ T6768] loop2: detected capacity change from 0 to 8 [ 383.013524][ T6768] unable to read fragment index table [ 383.363499][ T5848] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 383.608298][ T6771] loop4: detected capacity change from 0 to 512 [ 383.635792][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 383.665481][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.701711][ T5848] usb 1-1: unable to get BOS descriptor or descriptor too short [ 383.791930][ T5848] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.802697][ T5848] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 383.813952][ T5848] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.245915][ T5848] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.258039][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.266615][ T5848] usb 1-1: Product: syz [ 384.271051][ T5848] usb 1-1: Manufacturer: syz [ 384.276063][ T5848] usb 1-1: SerialNumber: syz [ 384.349869][ T6774] loop1: detected capacity change from 0 to 1024 [ 384.704175][ T5848] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 384.711374][ T5848] cdc_ncm 1-1:1.0: bind() failure [ 384.871797][ T5848] usb 1-1: USB disconnect, device number 8 [ 385.881832][ T6787] loop0: detected capacity change from 0 to 256 [ 385.987986][ T6771] EXT4-fs (loop4): Test dummy encryption mode enabled [ 386.071452][ T6771] EXT4-fs error (device loop4): __ext4_fill_super:5502: inode #2: comm syz.4.269: casefold flag without casefold feature [ 386.158652][ T6771] EXT4-fs (loop4): get root inode failed [ 386.166895][ T6771] EXT4-fs (loop4): mount failed [ 386.574521][ T6774] EXT4-fs: test_dummy_encryption requires encrypt feature [ 386.630547][ T6790] loop3: detected capacity change from 0 to 1024 [ 386.693410][ T6790] EXT4-fs: Ignoring removed bh option [ 386.826881][ T6793] netlink: 116 bytes leftover after parsing attributes in process `syz.1.270'. [ 386.922606][ T6790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 387.025409][ T6792] loop2: detected capacity change from 0 to 1024 [ 387.476887][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 387.523872][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 387.721829][ T6803] loop1: detected capacity change from 0 to 164 [ 387.756475][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 387.766861][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 387.778472][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 387.788690][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 387.896480][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 387.911570][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.921787][ T9] usb 1-1: Product: syz [ 387.926312][ T9] usb 1-1: Manufacturer: syz [ 387.931168][ T9] usb 1-1: SerialNumber: syz [ 388.046353][ T6804] loop4: detected capacity change from 0 to 1024 [ 388.137911][ T9] usb 1-1: config 0 descriptor?? [ 388.397764][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 388.444975][ T5137] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 388.523365][ T5137] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 388.557682][ T6810] tipc: Enabling of bearer rejected, failed to enable media [ 388.604550][ T5137] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 389.480862][ T6819] loop3: detected capacity change from 0 to 164 [ 389.655523][ T9] usb 1-1: USB disconnect, device number 9 [ 389.718014][ T6819] Unable to read rock-ridge attributes [ 390.735989][ T30] audit: type=1326 audit(1745470881.628:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.0.284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d25d8e969 code=0x0 [ 390.806838][ T6829] loop2: detected capacity change from 0 to 8 [ 390.916482][ T6829] unable to read fragment index table [ 391.317266][ T6833] loop3: detected capacity change from 0 to 16 [ 391.436245][ T6833] erofs (device loop3): mounted with root inode @ nid 36. [ 392.271270][ T6836] loop1: detected capacity change from 0 to 256 [ 392.396316][ T6836] exfat: Invalid uid '0x00000000ffffffff' [ 394.491785][ T6853] loop3: detected capacity change from 0 to 1024 [ 394.891025][ T6860] tipc: Enabling of bearer rejected, failed to enable media [ 394.945021][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 395.085484][ T11] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 395.180391][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 395.231650][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 395.284791][ T9] usb 3-1: config 103 has an invalid interface number: 143 but max is 2 [ 395.293729][ T9] usb 3-1: config 103 has an invalid interface number: 143 but max is 2 [ 395.302370][ T9] usb 3-1: config 103 has an invalid interface number: 144 but max is 2 [ 395.311322][ T9] usb 3-1: config 103 has 2 interfaces, different from the descriptor's value: 3 [ 395.320898][ T9] usb 3-1: config 103 has no interface number 0 [ 395.327696][ T9] usb 3-1: config 103 has no interface number 1 [ 395.334345][ T9] usb 3-1: config 103 interface 143 altsetting 129 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 395.346169][ T9] usb 3-1: config 103 interface 144 altsetting 5 bulk endpoint 0xD has invalid maxpacket 1023 [ 395.356966][ T9] usb 3-1: config 103 interface 143 has no altsetting 1 [ 395.364438][ T9] usb 3-1: config 103 interface 144 has no altsetting 0 [ 395.433585][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.445002][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.455355][ T11] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 395.465069][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.493970][ T6868] loop0: detected capacity change from 0 to 512 [ 395.510364][ T11] usb 2-1: config 0 descriptor?? [ 395.516748][ T6868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 395.593918][ T9] usb 3-1: string descriptor 0 read error: -22 [ 395.600828][ T9] usb 3-1: New USB device found, idVendor=0b3c, idProduct=c004, bcdDevice=d5.77 [ 395.610615][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.700495][ T6868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.713899][ T6868] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.825501][ T9] option 3-1:103.143: GSM modem (1-port) converter detected [ 395.857834][ T9] option 3-1:103.144: GSM modem (1-port) converter detected [ 396.084468][ T11] sony 0003:054C:024B.000A: unknown main item tag 0x0 [ 396.091647][ T11] sony 0003:054C:024B.000A: unexpected long global item [ 396.165215][ T9] usb 3-1: USB disconnect, device number 11 [ 396.174283][ T9] option 3-1:103.143: device disconnected [ 396.275248][ T11] sony 0003:054C:024B.000A: parse failed [ 396.281577][ T11] sony 0003:054C:024B.000A: probe with driver sony failed with error -22 [ 396.337099][ T9] option 3-1:103.144: device disconnected [ 396.470079][ T11] usb 2-1: USB disconnect, device number 9 [ 396.629679][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.684426][ T6878] loop4: detected capacity change from 0 to 2048 [ 396.855338][ T6878] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 397.161036][ T6878] UDF-fs: unknown compression code (0) [ 397.750343][ T6889] loop1: detected capacity change from 0 to 512 [ 397.821676][ T6889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 398.027565][ T6895] loop4: detected capacity change from 0 to 8 [ 398.030511][ T6889] EXT4-fs (loop1): 1 truncate cleaned up [ 398.045348][ T6889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.126823][ T6895] unable to read fragment index table [ 398.184601][ T6889] EXT4-fs error (device loop1): ext4_generic_delete_entry:2670: inode #2: block 13: comm syz.1.305: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 398.390631][ T6889] EXT4-fs error (device loop1) in ext4_delete_entry:2741: Corrupt filesystem [ 398.461790][ T6889] EXT4-fs warning (device loop1): ext4_rename_delete:3728: inode #2: comm syz.1.305: Deleting old file: nlink 4, error=-117 [ 398.810121][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.011727][ T6903] loop3: detected capacity change from 0 to 1024 [ 400.033801][ T6904] loop0: detected capacity change from 0 to 1024 [ 400.166054][ T6904] EXT4-fs: Ignoring removed orlov option [ 400.431664][ T6904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.432667][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.841732][ T6919] loop4: detected capacity change from 0 to 128 [ 402.010229][ T6919] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 402.040182][ T6919] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 402.107437][ T6923] loop0: detected capacity change from 0 to 16 [ 402.194340][ T6923] erofs (device loop0): mounted with root inode @ nid 36. [ 402.754690][ T5789] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 403.172234][ T6932] loop3: detected capacity change from 0 to 1024 [ 403.246425][ T6932] EXT4-fs: Ignoring removed nobh option [ 403.252324][ T6932] EXT4-fs: Ignoring removed bh option [ 403.436563][ T6937] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.450432][ T6937] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 403.463590][ T6937] bridge_slave_0: default FDB implementation only supports local addresses [ 403.493810][ T6932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.096602][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.751900][ T6950] loop3: detected capacity change from 0 to 8 [ 404.888610][ T6950] unable to read fragment index table [ 408.463950][ T6961] netlink: 'syz.0.330': attribute type 27 has an invalid length. [ 408.762078][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 408.901528][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.911539][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.152160][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.181339][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.540737][ T6969] loop1: detected capacity change from 0 to 2048 [ 409.720814][ T6969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.721638][ T6961] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.739480][ T6961] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.749069][ T6961] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.758453][ T6961] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.029071][ T6978] input: syz0 as /devices/virtual/input/input20 [ 410.481190][ T6962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.496181][ T6962] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.570371][ T6962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.897559][ T6981] loop2: detected capacity change from 0 to 1024 [ 410.933535][ T6987] loop3: detected capacity change from 0 to 8 [ 410.949805][ T6985] loop1: detected capacity change from 0 to 128 [ 411.074755][ T6985] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 411.174408][ T6985] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 411.292824][ T6991] ===================================================== [ 411.300364][ T6991] BUG: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid+0x27a/0x3f0 [ 411.309123][ T6991] hfs_find_1st_rec_by_cnid+0x27a/0x3f0 [ 411.315123][ T6991] __hfsplus_brec_find+0x26f/0x7b0 [ 411.320501][ T6991] hfsplus_brec_find+0x445/0x970 [ 411.326257][ T6991] hfsplus_delete_all_attrs+0x282/0x410 [ 411.332080][ T6991] hfsplus_delete_cat+0x126a/0x1340 [ 411.337724][ T6991] hfsplus_unlink+0x4da/0xd20 [ 411.342645][ T6991] hfsplus_rename+0x161/0x2e0 [ 411.347782][ T6991] vfs_rename+0x1d9d/0x2280 [ 411.356279][ T6991] do_renameat2+0x1874/0x1d70 [ 411.361224][ T6991] __x64_sys_rename+0xe8/0x140 [ 411.367566][ T6991] x64_sys_call+0x3a1e/0x3c80 [ 411.372600][ T6991] do_syscall_64+0xcd/0x1b0 [ 411.377526][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.383939][ T6991] [ 411.386390][ T6991] Uninit was created at: [ 411.390958][ T6991] __kmalloc_noprof+0x946/0x1260 [ 411.396687][ T6991] hfsplus_find_init+0x97/0x1d0 [ 411.401823][ T6991] hfsplus_delete_all_attrs+0xc8/0x410 [ 411.407765][ T6991] hfsplus_delete_cat+0x126a/0x1340 [ 411.413311][ T6991] hfsplus_unlink+0x4da/0xd20 [ 411.418200][ T6991] hfsplus_rename+0x161/0x2e0 [ 411.423274][ T6991] vfs_rename+0x1d9d/0x2280 [ 411.428047][ T6991] do_renameat2+0x1874/0x1d70 [ 411.433139][ T6991] __x64_sys_rename+0xe8/0x140 [ 411.438171][ T6991] x64_sys_call+0x3a1e/0x3c80 [ 411.444637][ T6991] do_syscall_64+0xcd/0x1b0 [ 411.449365][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.459243][ T6991] [ 411.461744][ T6991] CPU: 0 UID: 0 PID: 6991 Comm: syz.2.339 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(undef) [ 411.475863][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 411.486317][ T6991] ===================================================== [ 411.493603][ T6991] Disabling lock debugging due to kernel taint [ 411.499910][ T6991] Kernel panic - not syncing: kmsan.panic set ... [ 411.506522][ T6991] CPU: 0 UID: 0 PID: 6991 Comm: syz.2.339 Tainted: G B 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(undef) [ 411.520339][ T6991] Tainted: [B]=BAD_PAGE [ 411.524646][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 411.534906][ T6991] Call Trace: [ 411.538339][ T6991] [ 411.541417][ T6991] dump_stack_lvl+0x216/0x2d0 [ 411.546355][ T6991] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 411.552414][ T6991] dump_stack+0x1e/0x24 [ 411.556826][ T6991] panic+0x4e5/0xcf0 [ 411.560980][ T6991] ? __pfx_kmsan_save_stack_with_flags+0x10/0x10 [ 411.567663][ T6991] kmsan_report+0x2ca/0x2d0 [ 411.572407][ T6991] ? kmsan_get_metadata+0x13e/0x1c0 [ 411.577855][ T6991] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 411.583892][ T6991] ? __msan_warning+0x95/0x120 [ 411.588926][ T6991] ? hfs_find_1st_rec_by_cnid+0x27a/0x3f0 [ 411.594933][ T6991] ? __hfsplus_brec_find+0x26f/0x7b0 [ 411.600507][ T6991] ? hfsplus_brec_find+0x445/0x970 [ 411.605893][ T6991] ? hfsplus_delete_all_attrs+0x282/0x410 [ 411.611903][ T6991] ? hfsplus_delete_cat+0x126a/0x1340 [ 411.617571][ T6991] ? hfsplus_unlink+0x4da/0xd20 [ 411.622674][ T6991] ? hfsplus_rename+0x161/0x2e0 [ 411.627764][ T6991] ? vfs_rename+0x1d9d/0x2280 [ 411.632708][ T6991] ? do_renameat2+0x1874/0x1d70 [ 411.637822][ T6991] ? __x64_sys_rename+0xe8/0x140 [ 411.643005][ T6991] ? x64_sys_call+0x3a1e/0x3c80 [ 411.648095][ T6991] ? do_syscall_64+0xcd/0x1b0 [ 411.652967][ T6991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.659258][ T6991] ? kmsan_get_metadata+0x13e/0x1c0 [ 411.664667][ T6991] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 411.670678][ T6991] ? hfsplus_bnode_read_u16+0x3d/0x90 [ 411.676265][ T6991] ? kmsan_get_metadata+0x13e/0x1c0 [ 411.681661][ T6991] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 411.688172][ T6991] ? kmsan_get_metadata+0x13e/0x1c0 [ 411.693570][ T6991] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 411.700065][ T6991] ? kmsan_get_metadata+0x13e/0x1c0 [ 411.705466][ T6991] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 411.711487][ T6991] __msan_warning+0x95/0x120 [ 411.716315][ T6991] hfs_find_1st_rec_by_cnid+0x27a/0x3f0 [ 411.722123][ T6991] __hfsplus_brec_find+0x26f/0x7b0 [ 411.727460][ T6991] ? __pfx_hfs_find_1st_rec_by_cnid+0x10/0x10 [ 411.733787][ T6991] hfsplus_brec_find+0x445/0x970 [ 411.738951][ T6991] ? __pfx_hfs_find_1st_rec_by_cnid+0x10/0x10 [ 411.745299][ T6991] hfsplus_delete_all_attrs+0x282/0x410 [ 411.751481][ T6991] hfsplus_delete_cat+0x126a/0x1340 [ 411.756951][ T6991] hfsplus_unlink+0x4da/0xd20 [ 411.761862][ T6991] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 411.767882][ T6991] hfsplus_rename+0x161/0x2e0 [ 411.772768][ T6991] ? __pfx_hfsplus_rename+0x10/0x10 [ 411.778178][ T6991] vfs_rename+0x1d9d/0x2280 [ 411.782922][ T6991] ? end_current_label_crit_section+0x124/0x2a0 [ 411.789489][ T6991] do_renameat2+0x1874/0x1d70 [ 411.794464][ T6991] __x64_sys_rename+0xe8/0x140 [ 411.799471][ T6991] x64_sys_call+0x3a1e/0x3c80 [ 411.804381][ T6991] do_syscall_64+0xcd/0x1b0 [ 411.809092][ T6991] ? clear_bhb_loop+0x25/0x80 [ 411.813954][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.820062][ T6991] RIP: 0033:0x7ffa8db8e969 [ 411.824641][ T6991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.844494][ T6991] RSP: 002b:00007ffa8ea4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 411.853115][ T6991] RAX: ffffffffffffffda RBX: 00007ffa8ddb6080 RCX: 00007ffa8db8e969 [ 411.861283][ T6991] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000580 [ 411.869420][ T6991] RBP: 00007ffa8dc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 411.877565][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.885674][ T6991] R13: 0000000000000001 R14: 00007ffa8ddb6080 R15: 00007fffc07ff728 [ 411.893836][ T6991] [ 411.897344][ T6991] Kernel Offset: disabled [ 411.901765][ T6991] Rebooting in 86400 seconds..