last executing test programs: 46.393544165s ago: executing program 2 (id=41): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000540)=0x16) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x200, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0x0, 0x6}, {0x5, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200408d0}, 0x4044000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) socket$alg(0x26, 0x5, 0x0) 45.338046646s ago: executing program 2 (id=54): prlimit64(0x0, 0x0, 0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="9fcef773371e4e035a4ff190bea4efd68642046c23be8a9aae70a0043860f98931e9a9d2a4cb9b6cbfab8d88542eafc9851179a8bc28dad0fbfc05804b2b"], 0x1, 0x8a, &(0x7f0000000180)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x80, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 45.096619089s ago: executing program 2 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001e0001"], 0x24}}, 0x880) 44.826449868s ago: executing program 2 (id=60): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000001c0)='./file0\x00', 0x2000800, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[], [{@obj_role={'obj_role', 0x3d, '/dev/input/event#\x00'}}]}}, 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) r2 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x4009000, 0x0, 0xfffffffffffffec0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) r7 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r7, 0x0) r8 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r6, r8, 0x1, 0x0, @void}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) name_to_handle_at(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x6, 0xc9, 0x8, 0xf, "b23b1ac27eb97604"}}}, 0x10) setresuid(0xee01, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 43.448582858s ago: executing program 2 (id=68): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000380), 0x4) 42.606582716s ago: executing program 2 (id=76): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100013072abd700000000000ffffffff000000000000000000000000ac1e000100b062e0676fbd371098a74f32d00000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414aa000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000100002000000000feffffff0000000002"], 0x144}}, 0x0) 41.978133565s ago: executing program 32 (id=76): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100013072abd700000000000ffffffff000000000000000000000000ac1e000100b062e0676fbd371098a74f32d00000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414aa000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000100002000000000feffffff0000000002"], 0x144}}, 0x0) 17.154272573s ago: executing program 4 (id=265): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0), 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000b00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x2}}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 16.902566725s ago: executing program 4 (id=270): pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0x2) unshare(0x400) fcntl$setpipe(r0, 0x407, 0x6) 16.638572579s ago: executing program 4 (id=274): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1}}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) read(r0, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) 16.290138956s ago: executing program 4 (id=279): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x5000, &(0x7f00000003c0)=ANY=[], 0x11, 0xc38, &(0x7f0000002080)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 15.864016569s ago: executing program 4 (id=284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$inet6(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000300)='\\O=', 0x3}], 0x1}, 0x810) 15.362883717s ago: executing program 4 (id=290): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 15.040755788s ago: executing program 33 (id=290): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 6.538241665s ago: executing program 5 (id=367): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, 0x0, &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 4.949475949s ago: executing program 3 (id=376): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)='\r', 0x1}], 0x1) 4.286375431s ago: executing program 3 (id=380): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) 4.117389873s ago: executing program 3 (id=382): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) 4.042648126s ago: executing program 1 (id=383): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) preadv(r0, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/82, 0x52}], 0x1, 0x9, 0x0) 3.943411153s ago: executing program 3 (id=385): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120110010928fc10ac0591022543010213010902"], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 3.794406054s ago: executing program 1 (id=386): quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000003c0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$tun(r2, 0x0, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') unshare(0x24020400) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) pwritev2(r1, 0x0, 0x0, 0x5405, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10) socket$kcm(0x2, 0xa, 0x2) 3.16052734s ago: executing program 1 (id=389): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="001205"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.866381987s ago: executing program 6 (id=391): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80200) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) 1.688531454s ago: executing program 6 (id=393): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1.586877213s ago: executing program 0 (id=394): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r2}) 1.398636403s ago: executing program 6 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01000400000000000000010000000c00060001000000000000000c0002000000000000000000540007800800", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32], 0x80}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) 1.398464897s ago: executing program 0 (id=396): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) 1.26053428s ago: executing program 6 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 1.259120688s ago: executing program 5 (id=398): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) personality(0x5400004) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211000, &(0x7f00000006c0)=ANY=[@ANYBLOB="23805308c71ebebc4431750f7be86835bb3bb4b158cd58eed26d37b7148a290cd165cc958ccf029a6f9a01e88b4170d7f0f7c62a97f1ae7dc8a8ed0cbfbe679b46da3f4d9228dfcffcec400f2b37c93011bb47f3d5297c80d22ee658dec8a0a4ad7fcf40fe", @ANYRES16, @ANYRES16, @ANYRES16, @ANYBLOB="75b8fdeeab1654b4fb498e37c662c00e75c506cf39096270875d0a02537f71fccf9c1cafa241d2b464c41eafd3a8e7fcd5e6b56f795512c98d115410085aaf9e962f396d7daff254935d6755d3d089f164a6ae605f14be2c090000007e1700000000ce183beb3290da", @ANYRES64, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="450cefe1e809e19f9aadbc89c99e54816863c56624fb0ef2405c59f85e2e0c02c9668d15a26c6cc47b44d8edc12ef5bf53d6a23c2c31b8ce390b611c97983fb71d3e41f4aa00b8ff770ef0398ec5adc27967a3a9c6d4e3615a80ae", @ANYBLOB="7c91a1f5ee5f6b491836cf8dcd550d1c6cbf4868d50472df80829d2c03b12302a05d55143ee732bf63bf5682b09999009c39894d87055315e37b896ca2bbbc6a4ece4af825ab0132f602c11bae881f0acbc7d21ea1ef89db12950cbd075060ed37940a2886e202c102874596838da198f956a10a1262311e78c8b2bc435f3f3ad8e4cf8ffda9bd099bc7c2a2c9e3847f9772df2c983d555ed1f516f238db0a417d57bb4e52cac216dc54f3115cc0fa170a184db813dffd95aca6bd55979b5869", @ANYRES32, @ANYRES16, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX, @ANYRESDEC], 0x45, 0x154a, &(0x7f0000001140)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90a491, &(0x7f0000000580)={[{@dax_never}, {@errors_remount}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvM\x00w\xb1\xe5\xafC\xe9\x84\x01\x97\x98\x95BR\xedh*\xff\xb9k\xd7L\xd7\'K\x18\x7f:X\x1a\xb1\x7f\\\v\xc1\x02\x86~\x87\xf0F\x96o9\xfe\x91\xcf\xaa/\xe5\x96\xbd2\xb4\x17\x05\xec\x03\xe6j]\xb6sV\x9a\x95k\xe5%O\xe0\x13`\xbd\x8b\x91z\x10\x0fZ%\xf8!\x12\x1e\xba\xa5\x14b\xd7\x18\xd0\xa7\xfeq\xcf\xf1W\x81\xea\xda\xc4@\xbd\x84\x81\xf8\x84\x0f\x99^\x8fb\xe0\xd3}\xcf.I\xfdn\x1a\x1f=\x05\xb1\x81\xc7n\xf3\xc3\xc6\xc9$\x18f.\xc4\x8d\x00\xb1\xa5\xae\x87\x16*\xda\xa7\x1b\b\x94\x88\xda\xb3\x9a\x8e@b\xc6\xd7\x0f\n=\x8bO\xb0\xff+s\xcd~4<^:2\x95\x82\xfdLq\xac\vyi\xb0\xc5\x88\xaf\x97[~\xb9cP\xd1X\x99\f(&\x9bQ\xe6\xfc|\f\x14\v\x18@\xf7\xea\xd7\x1f\xb6\xf7\xfe\xe5\x9c'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}]}, 0xe, 0x52e, &(0x7f0000000a40)="$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") 1.240845469s ago: executing program 0 (id=399): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x4004000) r1 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x3fd, @empty, 0x5}, 0x26) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @empty, 0x100}, 0x1c) r5 = socket(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, 0x0, 0x0) 1.162738028s ago: executing program 1 (id=400): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000380)={[{@numtail}, {@shortname_mixed}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@fat=@tz_utc}, {@shortname_win95}, {@rodir}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@fat=@showexec}, {@fat=@usefree}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}]}, 0x26, 0x358, &(0x7f0000000480)="$eJzs3T9oXHUcAPDv9aW5JFhzg1B0Ot0EKU3EQaeEUqGYQSuH/xYPm/ondxZyeBCHXG5RipPiIujk1kHHzuIg4ubgagWpiovdCg0+ubt3/+/sBbxY8fMZwpfv7/d9v+97eeS9hOSXVxuxc+lkXL5162YsLeViYePcRtzORSFORBIdBzHRB4uT8wDAPe52msYfacfdZ3+00o08+wHgv6v9/H/9VD+RP0Lx1fvm0RIAMGczfv//7MTslbm1BQDM0djz/5Gh4ZEf8y/0fiegY3n+DQIA/7jnX3r5mc2tiIvF4lJE9f16qV6Kp/rjm5fjzajEdpyN1TiM6LwodN4WWh+fvrB1/myx5ZdClFoV9VJEtVEvdd4UNpN2fT7WYjUKWX3aq09a9Wvt+mJEHDTa60c1Vy+djJVs/R9XYjvWYzUeGKuPuLB1fr2YHaBU7dY3Ipqx1D2JVv9nYjW+fy2uRCUuRau23//+WrF4Lt0aqq9fy7fnAQAAAAAAAAAAAAAAAAAAAADAPJwp9hR6+9+k1Ub9vYujEwpD++OUOsPZ/kDNzv5Aab67O8/VZHR/oOH9eeqlhTjxr545AAAAAAAAAAAAAAAAAAAA3Dtqe4tRrlS2d2t77+4MBo2BzNvffvH1cnSHFrLSt5J+VWTJoeN0Jw4cOYneEmmvPE2G5mRBEtGdfFC+dr3X8eCcfO8sxspbQX5sKJf1VK5UTj3886eTqv5sBQftTBJjl2U4yGXrDwxV728lliLicFrV9GD9LnNupGk6rXz/k9FMthVD48htzBB8c/ONBx+vnX6infkqW+nRx1ZfuPHx57/tlCvR7FyZSmVxt3aYznDkyEWMDyUD908uu865CXfC5KDZzzR3a3vl5IffX3zow+9GJieT7590MPPO9LW+HM0sdoJcRKF7Ef6u1ZMTbv7JwSt3enfv0T9xpz/bKF/f/+nXWasGvkjYqAMAAAAAAAAAAAAAAAAAAI5F/49+RwbSNG1MrXryubk3BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHqP///weC5lhmluBOI8aH8tu7tamLLx/rqQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/2VwAAAP//wGN9HA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) 785.151436ms ago: executing program 0 (id=401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000019180)={0x1a0003, 0x0, [0x7, 0x2, 0x8, 0x1000000100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x7fffffff]}) 765.510617ms ago: executing program 3 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) 634.227817ms ago: executing program 5 (id=403): ioperm(0x2, 0x7ff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) 507.513097ms ago: executing program 1 (id=404): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 459.095498ms ago: executing program 5 (id=405): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$netlink(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 394.645415ms ago: executing program 6 (id=406): unshare(0x400) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 392.907896ms ago: executing program 0 (id=407): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000006c0)={'veth1_vlan\x00', 0xb1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'unlock', ' ', 'io+mem'}, 0xe) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_DISCONNECT(r2, 0xab08) 229.826266ms ago: executing program 5 (id=408): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000180001002dbd700000000000020ca791"], 0x2c}, 0x1, 0x0, 0x0, 0x4001800}, 0x24040880) 200.663176ms ago: executing program 6 (id=409): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x40400, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8a, &(0x7f0000000040), &(0x7f0000000080)=0x4) 146.594447ms ago: executing program 1 (id=410): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 146.33641ms ago: executing program 3 (id=411): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r1 = eventfd2(0x0, 0x0) flistxattr(r1, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r2 = syz_io_uring_setup(0x4c40, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r5 = openat(0xffffffffffffff9c, 0x0, 0x107042, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000040)={'veth0_to_hsr\x00', {0x2, 0x4e20, @loopback}}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x100, 0x8, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040880}, 0x20000010) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000), 0x1) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000003d80)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/27, 0x1b}, 0x8}], 0x1, 0x45833af92e4b39ff, 0x0) 139.11003ms ago: executing program 0 (id=412): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 0s ago: executing program 5 (id=413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0xffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 63.431898][ T5815] cgroup: Unknown subsys name 'net' [ 63.560311][ T5815] cgroup: Unknown subsys name 'cpuset' [ 63.569046][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.878972][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.378714][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.390659][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.398747][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.405948][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.448737][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.450990][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.456665][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.471424][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.471464][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.487557][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.497211][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.506985][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.542514][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.558416][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.573603][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.582157][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.598160][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.609721][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.618667][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.626444][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.661219][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.669328][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.684251][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.693417][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.724226][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.134530][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 68.199150][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 68.304226][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 68.449503][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.457788][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.465140][ T5825] bridge_slave_0: entered allmulticast mode [ 68.472572][ T5825] bridge_slave_0: entered promiscuous mode [ 68.480855][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 68.502777][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.509964][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.518737][ T5827] bridge_slave_0: entered allmulticast mode [ 68.525665][ T5827] bridge_slave_0: entered promiscuous mode [ 68.533569][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.540992][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.548221][ T5825] bridge_slave_1: entered allmulticast mode [ 68.555130][ T5825] bridge_slave_1: entered promiscuous mode [ 68.610786][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.618408][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.625545][ T5827] bridge_slave_1: entered allmulticast mode [ 68.632985][ T5827] bridge_slave_1: entered promiscuous mode [ 68.664358][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.681355][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.688621][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.695771][ T5839] bridge_slave_0: entered allmulticast mode [ 68.703287][ T5839] bridge_slave_0: entered promiscuous mode [ 68.736063][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.749241][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.756402][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.763883][ T5839] bridge_slave_1: entered allmulticast mode [ 68.772230][ T5839] bridge_slave_1: entered promiscuous mode [ 68.854493][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.867257][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.879213][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.898003][ T5825] team0: Port device team_slave_0 added [ 68.959362][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.969945][ T5825] team0: Port device team_slave_1 added [ 68.985118][ T5839] team0: Port device team_slave_0 added [ 69.050130][ T5839] team0: Port device team_slave_1 added [ 69.073113][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.082046][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.089623][ T5835] bridge_slave_0: entered allmulticast mode [ 69.096618][ T5835] bridge_slave_0: entered promiscuous mode [ 69.125925][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.132940][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.159111][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.176858][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.183821][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.210062][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.228075][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.235194][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.242781][ T5835] bridge_slave_1: entered allmulticast mode [ 69.249731][ T5835] bridge_slave_1: entered promiscuous mode [ 69.259438][ T5827] team0: Port device team_slave_0 added [ 69.278212][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 69.289926][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.297080][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.324325][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.363645][ T5827] team0: Port device team_slave_1 added [ 69.376037][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.383419][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.409982][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.474244][ T5825] hsr_slave_0: entered promiscuous mode [ 69.481379][ T5825] hsr_slave_1: entered promiscuous mode [ 69.491513][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.504227][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.577547][ T5829] Bluetooth: hci2: command tx timeout [ 69.577622][ T5837] Bluetooth: hci0: command tx timeout [ 69.593610][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.600789][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.627054][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.639375][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.646328][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.672537][ T5837] Bluetooth: hci3: command tx timeout [ 69.674883][ T5829] Bluetooth: hci1: command tx timeout [ 69.678294][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.784618][ T5835] team0: Port device team_slave_0 added [ 69.794861][ T5835] team0: Port device team_slave_1 added [ 69.805834][ T5839] hsr_slave_0: entered promiscuous mode [ 69.812829][ T5839] hsr_slave_1: entered promiscuous mode [ 69.818528][ T5829] Bluetooth: hci4: command tx timeout [ 69.819532][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.832218][ T5839] Cannot create hsr debugfs directory [ 69.916929][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.924611][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.932275][ T5843] bridge_slave_0: entered allmulticast mode [ 69.939991][ T5843] bridge_slave_0: entered promiscuous mode [ 69.954272][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.961329][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.987501][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.000169][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.007180][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.033194][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.056184][ T5827] hsr_slave_0: entered promiscuous mode [ 70.063088][ T5827] hsr_slave_1: entered promiscuous mode [ 70.069443][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.077035][ T5827] Cannot create hsr debugfs directory [ 70.082772][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.090892][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.098116][ T5843] bridge_slave_1: entered allmulticast mode [ 70.105024][ T5843] bridge_slave_1: entered promiscuous mode [ 70.205675][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.218414][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.260516][ T5835] hsr_slave_0: entered promiscuous mode [ 70.266764][ T5835] hsr_slave_1: entered promiscuous mode [ 70.272792][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.280496][ T5835] Cannot create hsr debugfs directory [ 70.379628][ T5843] team0: Port device team_slave_0 added [ 70.428775][ T5843] team0: Port device team_slave_1 added [ 70.533218][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.540464][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.566498][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.601831][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.608936][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.634981][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.786306][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.807569][ T5843] hsr_slave_0: entered promiscuous mode [ 70.813756][ T5843] hsr_slave_1: entered promiscuous mode [ 70.821809][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.829464][ T5843] Cannot create hsr debugfs directory [ 70.852564][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.862957][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.873807][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.029933][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.074111][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.085778][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.104891][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.147522][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.160091][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.185856][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.209999][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.304081][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.345550][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.372987][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.385413][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.462673][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.477739][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.492619][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.505694][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.512394][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.524459][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.534090][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.552652][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.640730][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.657419][ T5829] Bluetooth: hci2: command tx timeout [ 71.657492][ T5837] Bluetooth: hci0: command tx timeout [ 71.666622][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.686043][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.693309][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.720406][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.727584][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.736907][ T5837] Bluetooth: hci1: command tx timeout [ 71.743177][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.747912][ T5837] Bluetooth: hci3: command tx timeout [ 71.750329][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.780029][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.787240][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.810901][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.897713][ T5837] Bluetooth: hci4: command tx timeout [ 71.920798][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.932487][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.972216][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.979877][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.004982][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.056282][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.063500][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.079073][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.086413][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.095207][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.102358][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.241632][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.336198][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.403397][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.426548][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.433747][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.472624][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.479791][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.515904][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.600057][ T5827] veth0_vlan: entered promiscuous mode [ 72.711807][ T5827] veth1_vlan: entered promiscuous mode [ 72.731223][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.789308][ T5825] veth0_vlan: entered promiscuous mode [ 72.823582][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.866398][ T5825] veth1_vlan: entered promiscuous mode [ 72.925034][ T5827] veth0_macvtap: entered promiscuous mode [ 72.963995][ T5827] veth1_macvtap: entered promiscuous mode [ 72.981824][ T5835] veth0_vlan: entered promiscuous mode [ 73.025327][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.040976][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.061203][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.079809][ T5835] veth1_vlan: entered promiscuous mode [ 73.105506][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.119007][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.128198][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.138229][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.194096][ T5825] veth0_macvtap: entered promiscuous mode [ 73.214980][ T5843] veth0_vlan: entered promiscuous mode [ 73.248570][ T5825] veth1_macvtap: entered promiscuous mode [ 73.266305][ T5843] veth1_vlan: entered promiscuous mode [ 73.339723][ T5835] veth0_macvtap: entered promiscuous mode [ 73.349727][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.360956][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.372899][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.398427][ T5839] veth0_vlan: entered promiscuous mode [ 73.404545][ T5843] veth0_macvtap: entered promiscuous mode [ 73.434042][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.437205][ T5835] veth1_macvtap: entered promiscuous mode [ 73.448239][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.462559][ T5843] veth1_macvtap: entered promiscuous mode [ 73.470002][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.480748][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.493994][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.512920][ T5839] veth1_vlan: entered promiscuous mode [ 73.545809][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.559753][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.569866][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.582839][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.594105][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.604132][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.613359][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.622334][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.631097][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.648281][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.656329][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.663112][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.674855][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.685391][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.696464][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.708399][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.738268][ T5837] Bluetooth: hci2: command tx timeout [ 73.744760][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.747222][ T5837] Bluetooth: hci0: command tx timeout [ 73.761711][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.770485][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.779803][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.790954][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.802148][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.812686][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.823583][ T5837] Bluetooth: hci3: command tx timeout [ 73.824405][ T5829] Bluetooth: hci1: command tx timeout [ 73.829669][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.844376][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.855181][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.867964][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.906390][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.917339][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.936213][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.946300][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.956857][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.966704][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.977592][ T5829] Bluetooth: hci4: command tx timeout [ 73.977960][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.995152][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.009894][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.019201][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.028397][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.038467][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.111066][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.160433][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.254656][ T5839] veth0_macvtap: entered promiscuous mode [ 74.283826][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.296071][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.308952][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.321456][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.322813][ T5839] veth1_macvtap: entered promiscuous mode [ 74.401678][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.415848][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.426482][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.446311][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.456498][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.469024][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.483763][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.494341][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.504529][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.515138][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.529952][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.541815][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.554791][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.565518][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.576523][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.586521][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.597202][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.607618][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.618472][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.630050][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.670316][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.697728][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.706468][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.726788][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.754566][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.777323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.785867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.794702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.796346][ T5916] loop2: detected capacity change from 0 to 2048 [ 74.817328][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.824379][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.849063][ T5916] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.911759][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.120931][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.140168][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.313803][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.345123][ T5924] loop3: detected capacity change from 0 to 128 [ 75.355482][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.438647][ T5924] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.482832][ T5924] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.735565][ T5935] loop0: detected capacity change from 0 to 1024 [ 75.743245][ T5935] ======================================================= [ 75.743245][ T5935] WARNING: The mand mount option has been deprecated and [ 75.743245][ T5935] and is ignored by this kernel. Remove the mand [ 75.743245][ T5935] option from the mount to silence this warning. [ 75.743245][ T5935] ======================================================= [ 75.778826][ T5935] ext4: Bad value for 'mb_optimize_scan' [ 75.817649][ T5829] Bluetooth: hci0: command tx timeout [ 75.823672][ T5829] Bluetooth: hci2: command tx timeout [ 75.897296][ T5829] Bluetooth: hci1: command tx timeout [ 75.903404][ T5837] Bluetooth: hci3: command tx timeout [ 75.912092][ T5876] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.941925][ T5937] loop4: detected capacity change from 0 to 764 [ 75.998223][ T5878] kernel read not supported for file /dsp1 (pid: 5878 comm: kworker/1:4) [ 76.027548][ T5937] rock: directory entry would overflow storage [ 76.039665][ T5938] loop0: detected capacity change from 0 to 128 [ 76.046416][ T5938] adfs: Bad value for 'uid' [ 76.051016][ T5937] rock: sig=0x4654, size=5, remaining=4 [ 76.056930][ T5938] adfs: Bad value for 'uid' [ 76.062999][ T5837] Bluetooth: hci4: command tx timeout [ 76.097363][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 76.115776][ T5876] usb 4-1: no configurations [ 76.123484][ T5876] usb 4-1: can't read configurations, error -22 [ 76.324548][ T5945] loop1: detected capacity change from 0 to 512 [ 76.337616][ T5876] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.351133][ T5945] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.369279][ T5947] pim6reg1: entered allmulticast mode [ 76.414413][ T5945] EXT4-fs (loop1): 1 orphan inode deleted [ 76.422101][ T5945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.436346][ T13] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 76.437763][ T5945] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.449018][ T13] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 76.473098][ T30] audit: type=1800 audit(1744560771.642:2): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12" name="bus" dev="loop1" ino=16 res=0 errno=0 [ 76.517161][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 76.538257][ T5951] EXT4-fs (loop1): shut down requested (0) [ 76.540461][ T5876] usb 4-1: no configurations [ 76.632123][ T5876] usb 4-1: can't read configurations, error -22 [ 76.641015][ T5876] usb usb4-port1: attempt power cycle [ 76.755749][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.775837][ T5956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.853157][ T5958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 76.988022][ T5876] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 77.066851][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 77.077158][ T5876] usb 4-1: no configurations [ 77.089052][ T5876] usb 4-1: can't read configurations, error -22 [ 77.211839][ T5973] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.247066][ T5876] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 77.297960][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 77.307635][ T5876] usb 4-1: no configurations [ 77.312283][ T5876] usb 4-1: can't read configurations, error -22 [ 77.323202][ T5876] usb usb4-port1: unable to enumerate USB device [ 77.386873][ T5879] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.490618][ T5975] loop1: detected capacity change from 0 to 32768 [ 77.507473][ T5975] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 77.507473][ T5975] [ 77.518089][ T5975] ERROR: (device loop1): remounting filesystem as read-only [ 77.525408][ T5975] xtLookup: xtSearch returned -5 [ 77.530434][ T5975] read_mapping_page failed! [ 77.536452][ T5975] jfs_mount: diMount(ipaimap2) failed, rc = -5 [ 77.544972][ T5975] Mount JFS Failure: -5 [ 77.546875][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 77.549190][ T5975] jfs_mount failed w/return code = -5 [ 77.570614][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.614691][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.676861][ T5879] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 77.718037][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.768146][ T5879] usb 5-1: config 0 descriptor?? [ 77.970575][ T5987] loop2: detected capacity change from 0 to 128 [ 78.005662][ T5987] udf: Unknown parameter '/sys/kernel/debug/bluetooth/6lowpan_control' [ 78.152948][ T5989] loop1: detected capacity change from 0 to 2048 [ 78.211505][ T5989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.219689][ T5879] waterforce 0003:1044:7A4D.0001: collection stack underflow [ 78.242439][ T5879] waterforce 0003:1044:7A4D.0001: item 0 0 0 12 parsing failed [ 78.258258][ T5879] waterforce 0003:1044:7A4D.0001: hid parse failed with -22 [ 78.265685][ T5879] waterforce 0003:1044:7A4D.0001: probe with driver waterforce failed with error -22 [ 78.382915][ T5827] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.436532][ T9] usb 5-1: USB disconnect, device number 2 [ 78.486251][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.669503][ T6003] IPv6: Can't replace route, no match found [ 78.852197][ T6010] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.050324][ T6007] loop0: detected capacity change from 0 to 32768 [ 79.130702][ T6011] loop3: detected capacity change from 0 to 32768 [ 79.197176][ T6007] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 79.285837][ T6018] loop1: detected capacity change from 0 to 2048 [ 79.305380][ T6007] XFS (loop0): Ending clean mount [ 79.321272][ T30] audit: type=1800 audit(1744560774.492:3): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.39" name="file1" dev="loop0" ino=1062 res=0 errno=0 [ 79.343912][ T6018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.618287][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 79.687157][ T6031] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.688239][ T5843] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 79.696163][ T6031] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.713625][ T6031] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.722381][ T6031] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.742208][ T6031] vxlan0: entered promiscuous mode [ 80.073639][ T5879] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.191257][ T6043] loop4: detected capacity change from 0 to 4096 [ 80.204933][ T6045] netlink: 'syz.3.48': attribute type 3 has an invalid length. [ 80.209730][ T6043] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 80.248788][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.259659][ T5879] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 80.265249][ T6043] ntfs3(loop4): ino=19, mi_enum_attr [ 80.288674][ T6043] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 80.297076][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.340614][ T5879] usb 2-1: config 0 descriptor?? [ 80.351541][ T6031] syz.2.41 (6031) used greatest stack depth: 18840 bytes left [ 80.367434][ T5879] pwc: Askey VC010 type 2 USB webcam detected. [ 80.502462][ T6051] loop3: detected capacity change from 0 to 512 [ 80.523078][ T6051] EXT4-fs: Ignoring removed i_version option [ 80.539604][ T6054] usb usb1: check_ctrlrecip: process 6054 (syz.4.53) requesting ep 01 but needs 81 [ 80.549167][ T6054] usb usb1: usbfs: process 6054 (syz.4.53) did not claim interface 0 before use [ 80.566932][ T6055] loop2: detected capacity change from 0 to 64 [ 80.584057][ T6055] bfs: Unknown parameter 's7NZO񐾤ֆBl#p8`1Ҥ˛lT.Ʌy(K+' [ 80.611732][ T6051] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.613139][ T6057] loop0: detected capacity change from 0 to 128 [ 80.637505][ T6051] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.51: bg 0: block 131: padding at end of block bitmap is not set [ 80.676458][ T6057] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 80.713402][ T6060] netlink: 132 bytes leftover after parsing attributes in process `syz.4.56'. [ 80.722810][ T6051] EXT4-fs (loop3): Remounting filesystem read-only [ 80.729960][ T6051] EXT4-fs (loop3): 1 truncate cleaned up [ 80.738336][ T6051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.761999][ T5879] pwc: recv_control_msg error -32 req 02 val 2b00 [ 80.779416][ T5879] pwc: recv_control_msg error -32 req 02 val 2700 [ 80.786144][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 80.806894][ T5879] pwc: recv_control_msg error -32 req 02 val 2c00 [ 80.816202][ T5879] pwc: recv_control_msg error -32 req 04 val 1000 [ 80.970267][ T6051] kvm: pic: non byte write [ 81.035411][ T5879] pwc: recv_control_msg error -32 req 04 val 1400 [ 81.053726][ T5879] pwc: recv_control_msg error -32 req 02 val 2000 [ 81.088232][ T5879] pwc: recv_control_msg error -71 req 02 val 2100 [ 81.136178][ T5879] pwc: recv_control_msg error -71 req 04 val 1500 [ 81.158020][ T5879] pwc: recv_control_msg error -71 req 02 val 2500 [ 81.169323][ T6070] loop2: detected capacity change from 0 to 2048 [ 81.181635][ T6068] loop4: detected capacity change from 0 to 32768 [ 81.192612][ T6068] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.59 (6068) [ 81.196487][ T5879] pwc: recv_control_msg error -71 req 02 val 2400 [ 81.225110][ T6068] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.235560][ T6068] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 81.245116][ T6068] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 81.265453][ T6070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.274180][ T6068] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 81.287476][ T5879] pwc: recv_control_msg error -71 req 02 val 2600 [ 81.308586][ T5879] pwc: recv_control_msg error -71 req 02 val 2900 [ 81.325312][ T6068] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 81.327892][ T5879] pwc: recv_control_msg error -71 req 02 val 2800 [ 81.356648][ T6068] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 81.359041][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.383129][ T5879] pwc: recv_control_msg error -71 req 04 val 1100 [ 81.390625][ T6068] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 81.402438][ T5879] pwc: recv_control_msg error -71 req 04 val 1200 [ 81.420232][ T6068] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 81.435666][ T5879] pwc: Registered as video103. [ 81.445078][ T6068] workqueue: max_active 16777219 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 81.493513][ T5879] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 81.575819][ T6068] BTRFS info (device loop4): rebuilding free space tree [ 81.596931][ T5879] usb 2-1: USB disconnect, device number 2 [ 81.607203][ T6068] BTRFS info (device loop4): disabling free space tree [ 81.614168][ T6068] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.624089][ T6068] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.962233][ T5839] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 82.010107][ T6101] loop0: detected capacity change from 0 to 256 [ 82.048125][ T6101] exfat: Deprecated parameter 'utf8' [ 82.054863][ T30] audit: type=1800 audit(1744560777.212:4): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.60" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 82.133745][ T6101] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 82.441939][ T5825] UDF-fs: error (device loop2): udf_read_inode: (ino 1410) failed !bh [ 82.455951][ T6110] loop0: detected capacity change from 0 to 2048 [ 82.488987][ T5825] UDF-fs: error (device loop2): udf_read_inode: (ino 1410) failed !bh [ 82.548210][ T6110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.581806][ T6110] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.697900][ T30] audit: type=1800 audit(1744560777.872:5): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.67" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 82.869246][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.878581][ T6116] loop1: detected capacity change from 0 to 8192 [ 83.349211][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.78'. [ 83.492165][ T4402] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.596764][ T4402] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.720659][ T4402] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.751231][ T4402] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.931480][ T4402] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.974759][ T4402] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.121168][ T6152] loop4: detected capacity change from 0 to 1024 [ 84.133468][ T4402] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.184975][ T4402] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.414187][ T6158] loop0: detected capacity change from 0 to 256 [ 84.467941][ T6158] exfat: Deprecated parameter 'utf8' [ 84.485969][ T6158] exfat: Deprecated parameter 'utf8' [ 84.517686][ T6158] exfat: Deprecated parameter 'namecase' [ 84.606229][ T6158] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 84.766945][ T6170] netlink: 48 bytes leftover after parsing attributes in process `syz.4.90'. [ 84.806211][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.815863][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.823904][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.834964][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.843744][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.890176][ T6166] loop1: detected capacity change from 0 to 32768 [ 84.911278][ T6173] netlink: 'syz.4.90': attribute type 10 has an invalid length. [ 84.919140][ T6166] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.89 (6166) [ 84.957426][ T6166] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.960462][ T4402] bridge_slave_1: left allmulticast mode [ 84.968237][ T6166] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 84.982572][ T6166] BTRFS info (device loop1): disk space caching is enabled [ 84.990004][ T6166] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 84.996277][ T4402] bridge_slave_1: left promiscuous mode [ 85.063754][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.149768][ T6166] BTRFS info (device loop1): rebuilding free space tree [ 85.177621][ T6166] BTRFS info (device loop1): disabling free space tree [ 85.184594][ T6166] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.194348][ T6166] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.195962][ T4402] bridge_slave_0: left allmulticast mode [ 85.263582][ T4402] bridge_slave_0: left promiscuous mode [ 85.288858][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.330743][ T5835] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.427006][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.543982][ T6199] loop3: detected capacity change from 0 to 1024 [ 85.578417][ T6199] hfsplus: request for non-existent node 24 in B*Tree [ 85.585370][ T6199] hfsplus: request for non-existent node 24 in B*Tree [ 85.647508][ T24] usb 1-1: config 0 has an invalid interface number: 54 but max is 1 [ 85.655643][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.691225][ T24] usb 1-1: config 0 has no interface number 1 [ 85.707808][ T24] usb 1-1: config 0 interface 54 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 85.729962][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice=c7.66 [ 85.743238][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.752184][ T24] usb 1-1: Product: syz [ 85.756390][ T24] usb 1-1: Manufacturer: syz [ 85.765197][ T24] usb 1-1: SerialNumber: syz [ 85.780152][ T24] usb 1-1: config 0 descriptor?? [ 86.223727][ T2155] usb 1-1: USB disconnect, device number 2 [ 86.490951][ T4402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.560371][ T4402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.575810][ T4402] bond0 (unregistering): Released all slaves [ 86.674681][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.683594][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.717945][ T6223] loop1: detected capacity change from 0 to 32768 [ 86.720899][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.731659][ T6173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.739954][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.747157][ T6173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.749223][ T6223] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.104 (6223) [ 86.782839][ T6223] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.793168][ T6223] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 86.802906][ T6223] BTRFS info (device loop1): disk space caching is enabled [ 86.811775][ T6223] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 86.837733][ T6173] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 86.931889][ T979] cfg80211: failed to load regulatory.db [ 86.938140][ T5829] Bluetooth: hci0: command tx timeout [ 87.003631][ T6223] BTRFS info (device loop1): rebuilding free space tree [ 87.036257][ T6223] BTRFS info (device loop1): disabling free space tree [ 87.043281][ T6223] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.053149][ T6223] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.206882][ T5835] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.418205][ T6250] mmap: syz.0.110 (6250): VmData 175878144 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 87.546005][ T6255] capability: warning: `syz.3.111' uses 32-bit capabilities (legacy support in use) [ 88.009951][ T6271] loop3: detected capacity change from 0 to 16 [ 88.057477][ T6271] erofs: Unknown parameter '' [ 88.387690][ T4402] hsr_slave_0: left promiscuous mode [ 88.427054][ T4402] hsr_slave_1: left promiscuous mode [ 88.442046][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.459012][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.474550][ T6279] loop1: detected capacity change from 0 to 4096 [ 88.482391][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.500163][ T6290] Zero length message leads to an empty skb [ 88.506531][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.608821][ T4402] veth1_macvtap: left promiscuous mode [ 88.623424][ T4402] veth0_macvtap: left promiscuous mode [ 88.623457][ T6279] ntfs3(loop1): ino=1a, mi_enum_attr [ 88.636821][ T4402] veth1_vlan: left promiscuous mode [ 88.648797][ T4402] veth0_vlan: left promiscuous mode [ 88.668367][ T6279] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 89.017872][ T5829] Bluetooth: hci0: command tx timeout [ 89.094067][ T6302] loop4: detected capacity change from 0 to 256 [ 89.142990][ T6302] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 89.467483][ T6306] loop0: detected capacity change from 0 to 32768 [ 89.477268][ T6306] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.126 (6306) [ 89.753432][ T6306] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 89.763792][ T6306] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 89.772639][ T6306] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 89.787112][ T6308] loop4: detected capacity change from 0 to 32768 [ 89.796001][ T6306] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 89.809166][ T6308] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.127 (6308) [ 89.831586][ T6308] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.841829][ T6308] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 89.850560][ T6308] BTRFS info (device loop4): disk space caching is enabled [ 89.857934][ T6308] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 89.933714][ T6306] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 89.969507][ T6306] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 89.988733][ T6306] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 90.037538][ T6306] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 90.053732][ T6306] workqueue: max_active 16777219 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 90.185012][ T6306] BTRFS info (device loop0): rebuilding free space tree [ 90.203173][ T6306] BTRFS info (device loop0): disabling free space tree [ 90.210182][ T6306] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.219989][ T6306] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.285137][ T6308] BTRFS info (device loop4): rebuilding free space tree [ 90.306147][ T6308] BTRFS info (device loop4): disabling free space tree [ 90.313632][ T6308] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.323447][ T6308] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.354940][ T6347] loop1: detected capacity change from 0 to 1024 [ 90.418961][ T5839] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.611233][ T6347] hfsplus: xattr searching failed [ 90.612200][ T5843] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.637573][ T6348] hfsplus: xattr searching failed [ 91.004152][ T6354] loop1: detected capacity change from 0 to 256 [ 91.045764][ T6352] loop4: detected capacity change from 0 to 4096 [ 91.058345][ T6354] exfat: Deprecated parameter 'utf8' [ 91.078199][ T6354] exfat: Deprecated parameter 'utf8' [ 91.093962][ T6354] exfat: Deprecated parameter 'namecase' [ 91.108694][ T5829] Bluetooth: hci0: command tx timeout [ 91.143228][ T6354] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 91.178804][ T6352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.211465][ T4402] team0 (unregistering): Port device team_slave_1 removed [ 91.328700][ T30] audit: type=1800 audit(1744560786.502:6): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.134" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 91.492375][ T4402] team0 (unregistering): Port device team_slave_0 removed [ 91.493464][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.726784][ T2155] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.909909][ T2155] usb 2-1: Using ep0 maxpacket: 8 [ 91.947538][ T2155] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 91.969891][ T2155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.986610][ T2155] usb 2-1: Product: syz [ 92.000097][ T2155] usb 2-1: Manufacturer: syz [ 92.005867][ T2155] usb 2-1: SerialNumber: syz [ 92.025527][ T2155] usb 2-1: config 0 descriptor?? [ 92.247234][ T2155] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 92.346855][ T6167] chnl_net:caif_netlink_parms(): no params data found [ 92.494885][ T6373] loop3: detected capacity change from 0 to 1024 [ 92.749078][ T6375] loop4: detected capacity change from 0 to 32768 [ 92.757288][ T6375] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.140 (6375) [ 92.773771][ T6375] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.784252][ T6375] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 92.794765][ T6375] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 92.817543][ T6375] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 92.867406][ T6375] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 92.881419][ T6375] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 92.905694][ T6375] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 92.927890][ T6375] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 92.957322][ T6375] workqueue: max_active 16777219 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 93.020870][ T6375] BTRFS info (device loop4): rebuilding free space tree [ 93.037879][ T6375] BTRFS info (device loop4): disabling free space tree [ 93.044828][ T6375] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.054849][ T6375] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 93.176810][ T5829] Bluetooth: hci0: command tx timeout [ 93.186861][ T6375] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 2048 [ 93.199894][ T6375] BTRFS info (device loop4): scrub: started on devid 1 [ 93.240339][ T6375] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 93.247759][ T6375] BTRFS info (device loop4): space_info SYSTEM has 0 free, is not full [ 93.256260][ T6375] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 93.269988][ T6375] BTRFS info (device loop4): global_block_rsv: size 1048576 reserved 1048576 [ 93.279099][ T6375] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 93.286835][ T6375] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 93.294493][ T6375] BTRFS info (device loop4): delayed_block_rsv: size 32768 reserved 32768 [ 93.304525][ T6375] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 93.334884][ T6375] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 93.492828][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.504438][ T5839] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.529861][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.563444][ T6167] bridge_slave_0: entered allmulticast mode [ 93.614337][ T6167] bridge_slave_0: entered promiscuous mode [ 93.718105][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.725339][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.766950][ T2155] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 93.776929][ T6167] bridge_slave_1: entered allmulticast mode [ 93.784774][ T6167] bridge_slave_1: entered promiscuous mode [ 93.824863][ T2155] usb 2-1: USB disconnect, device number 3 [ 94.106062][ T6420] loop0: detected capacity change from 0 to 1024 [ 94.143614][ T6167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.187267][ T6422] loop8: detected capacity change from 0 to 8 [ 94.216472][ T6167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.250972][ T6422] Dev loop8: unable to read RDB block 8 [ 94.287076][ T6422] loop8: unable to read partition table [ 94.337142][ T6422] loop8: partition table beyond EOD, truncated [ 94.374741][ T6420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.395008][ T6422] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 94.416403][ T6420] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.503937][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.521976][ T6167] team0: Port device team_slave_0 added [ 94.619790][ T6167] team0: Port device team_slave_1 added [ 94.780197][ T6431] loop4: detected capacity change from 0 to 4096 [ 94.827134][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.844320][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.870301][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.935620][ T6167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.957027][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 94.975998][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.983847][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.986919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.044839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 95.065429][ T6167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.130878][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 95.155701][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.166276][ T6452] loop4: detected capacity change from 0 to 512 [ 95.188898][ T6452] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.157: invalid indirect mapped block 4294967295 (level 1) [ 95.210754][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.221057][ T10] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 95.222575][ T6452] EXT4-fs (loop4): Remounting filesystem read-only [ 95.230672][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.255261][ T10] usb 4-1: config 0 descriptor?? [ 95.261527][ T6167] hsr_slave_0: entered promiscuous mode [ 95.272133][ T6167] hsr_slave_1: entered promiscuous mode [ 95.307605][ T6452] EXT4-fs (loop4): 2 truncates cleaned up [ 95.346096][ T6452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.407075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.513169][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.617060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.716615][ T6464] loop4: detected capacity change from 0 to 164 [ 95.756892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.835164][ T6464] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 96.055132][ T6167] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.103470][ T6167] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.138098][ T6167] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.175364][ T6167] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.232633][ T6475] loop4: detected capacity change from 0 to 512 [ 96.249139][ T6475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.336520][ T6475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.425295][ T6167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.441714][ T10] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 96.469803][ T10] letsketch 0003:6161:4D15.0002: probe with driver letsketch failed with error -71 [ 96.471527][ T6475] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.514536][ T10] usb 4-1: USB disconnect, device number 6 [ 96.560746][ T6167] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.587159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.595842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.728266][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.735456][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.815274][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.822604][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.017017][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.105604][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.126421][ T6167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.231810][ T47] usb 1-1: config 0 has an invalid interface number: 248 but max is 0 [ 97.265030][ T47] usb 1-1: config 0 has no interface number 0 [ 97.374124][ T6504] loop4: detected capacity change from 0 to 128 [ 97.387075][ T47] usb 1-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=c4.ff [ 97.396153][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.419906][ T47] usb 1-1: Product: syz [ 97.432432][ T6504] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.523419][ T6504] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.526355][ T47] usb 1-1: Manufacturer: syz [ 97.543331][ T47] usb 1-1: SerialNumber: syz [ 97.635061][ T47] usb 1-1: config 0 descriptor?? [ 97.667802][ T47] hub 1-1:0.248: bad descriptor, ignoring hub [ 97.673935][ T47] hub 1-1:0.248: probe with driver hub failed with error -5 [ 97.723550][ T6167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.748356][ T5839] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.757417][ T6514] loop3: detected capacity change from 0 to 64 [ 97.996238][ T47] usb 1-1: USB disconnect, device number 3 [ 98.227712][ T6525] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 98.308866][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.248/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.576094][ T6167] veth0_vlan: entered promiscuous mode [ 98.644800][ T6167] veth1_vlan: entered promiscuous mode [ 98.703067][ T6538] netlink: 112 bytes leftover after parsing attributes in process `syz.3.174'. [ 98.765157][ T6167] veth0_macvtap: entered promiscuous mode [ 98.788337][ T6167] veth1_macvtap: entered promiscuous mode [ 98.822577][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.862398][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.876120][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.910896][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.934131][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.956052][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.995597][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.029669][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.052268][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.139823][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.176537][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.241997][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.275413][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.291999][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.372299][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.418222][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.443462][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.463888][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.490844][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.179'. [ 99.505696][ T6167] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.526404][ T6167] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.546766][ T6167] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.588528][ T6167] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.616949][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 99.779812][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.790340][ T6567] syz.4.181 uses obsolete (PF_INET,SOCK_PACKET) [ 99.819206][ T30] audit: type=1326 audit(1744560794.992:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f238d169 code=0x7ffc0000 [ 99.820975][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.862923][ T30] audit: type=1326 audit(1744560795.022:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f55f238d169 code=0x7ffc0000 [ 99.874649][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.885967][ T30] audit: type=1326 audit(1744560795.022:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f238d169 code=0x7ffc0000 [ 99.892724][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.920099][ T30] audit: type=1326 audit(1744560795.022:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f238d169 code=0x7ffc0000 [ 99.981687][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.993132][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.044377][ T10] usb 1-1: Product: syz [ 100.054287][ T10] usb 1-1: Manufacturer: syz [ 100.066623][ T10] usb 1-1: SerialNumber: syz [ 100.140141][ T6571] loop1: detected capacity change from 0 to 4096 [ 100.211489][ T6571] ntfs3(loop1): ino=1a, mi_enum_attr [ 100.223379][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.228084][ T6571] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 100.255892][ T30] audit: type=1800 audit(1744560795.422:11): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.183" name="file0" dev="loop1" ino=0 res=0 errno=0 [ 100.295321][ T10] usb 1-1: 0:2 : does not exist [ 100.319175][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 100.351779][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.448447][ T10] usb 1-1: USB disconnect, device number 4 [ 100.614841][ T6559] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.631246][ T6559] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.642255][ T6559] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.651965][ T6559] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.718313][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.841139][ T6581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.970775][ T6583] loop3: detected capacity change from 0 to 2048 [ 101.074739][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.127153][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.167995][ T6591] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.281084][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.315323][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.315868][ T6583] syz.3.185 (6583) used greatest stack depth: 18672 bytes left [ 101.534526][ T6600] loop3: detected capacity change from 0 to 2048 [ 101.582834][ T6600] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 101.609077][ T6600] UDF-fs: Scanning with blocksize 512 failed [ 101.615240][ T5877] kernel write not supported for file /3/attr/exec (pid: 5877 comm: kworker/0:5) [ 101.625887][ T6574] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 101.648365][ T6600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.838322][ T6574] usb 1-1: config 3 has an invalid interface number: 15 but max is 0 [ 101.853033][ T6574] usb 1-1: config 3 has no interface number 0 [ 101.857302][ T5827] UDF-fs: warning (device loop3): udf_evict_inode: Inode 851 (mode 100000) has inode size 549789401094 different from extent length 549789402112. Filesystem need not be standards compliant. [ 101.866326][ T6574] usb 1-1: config 3 interface 15 has no altsetting 0 [ 101.887375][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 101.941441][ T6616] loop4: detected capacity change from 0 to 1024 [ 101.948986][ T6613] loop5: detected capacity change from 0 to 2048 [ 101.961243][ T6574] usb 1-1: New USB device found, idVendor=17cc, idProduct=0839, bcdDevice=6d.a8 [ 101.999597][ T6574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.015325][ T6613] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 102.038915][ T6574] usb 1-1: Product: syz [ 102.043119][ T6574] usb 1-1: Manufacturer: syz [ 102.050579][ T6616] hfsplus: xattr searching failed [ 102.059597][ T6616] hfsplus: xattr searching failed [ 102.069696][ T6616] hfsplus: bad catalog file entry [ 102.093115][ T6574] usb 1-1: SerialNumber: syz [ 102.138818][ T6622] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.224268][ T13] hfsplus: b-tree write err: -5, ino 3 [ 102.244509][ T13] hfsplus: bad catalog file entry [ 102.308902][ T6625] loop8: detected capacity change from 0 to 8 [ 102.346973][ T6625] Dev loop8: unable to read RDB block 8 [ 102.352594][ T6625] loop8: unable to read partition table [ 102.352736][ T6574] snd-usb-caiaq 1-1:3.15: can't set alt interface. [ 102.404266][ T6625] loop8: partition table beyond EOD, truncated [ 102.425013][ T6574] usb 1-1: unable to init card! (ret=-5) [ 102.436813][ T6625] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 102.480104][ T6574] snd-usb-caiaq 1-1:3.15: probe with driver snd-usb-caiaq failed with error -5 [ 102.501751][ T6630] loop4: detected capacity change from 0 to 128 [ 102.550230][ T6574] usb 1-1: USB disconnect, device number 5 [ 102.562368][ T6630] hpfs: Unknown parameter 'rootcontext' [ 102.796966][ T6637] loop8: detected capacity change from 0 to 7 [ 102.819198][ T6637] Dev loop8: unable to read RDB block 7 [ 102.853769][ T6637] loop8: unable to read partition table [ 102.875775][ T6637] loop8: partition table beyond EOD, truncated [ 102.903674][ T6637] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 102.913834][ T30] audit: type=1326 audit(1744560798.072:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c478d169 code=0x7ffc0000 [ 102.950661][ T30] audit: type=1326 audit(1744560798.092:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01c478d169 code=0x7ffc0000 [ 102.978773][ T30] audit: type=1326 audit(1744560798.092:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c478d169 code=0x7ffc0000 [ 103.150289][ T30] audit: type=1326 audit(1744560798.092:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c478d169 code=0x7ffc0000 [ 103.173979][ T47] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 103.296402][ T30] audit: type=1326 audit(1744560798.092:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f01c478d169 code=0x7ffc0000 [ 103.371832][ T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.382359][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.408827][ T1335] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 103.415050][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.458832][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.493060][ T47] usb 4-1: Product: syz [ 103.506794][ T47] usb 4-1: Manufacturer: syz [ 103.521937][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.525153][ T47] usb 4-1: SerialNumber: syz [ 103.551906][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.683555][ T6668] loop8: detected capacity change from 0 to 8 [ 103.725008][ T6672] erofs (device nbd4): cannot find valid erofs superblock [ 103.745348][ T6668] Dev loop8: unable to read RDB block 8 [ 103.759796][ T6665] block nbd4: shutting down sockets [ 103.779223][ T6668] loop8: unable to read partition table [ 103.807022][ T47] usb 4-1: 0:2 : does not exist [ 103.822789][ T6668] loop8: partition table beyond EOD, truncated [ 103.841474][ T6675] loop1: detected capacity change from 0 to 1024 [ 103.842810][ T47] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 103.868587][ T6668] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 103.913145][ T6675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.956911][ T6675] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.981711][ T47] usb 4-1: USB disconnect, device number 7 [ 104.076293][ T6685] loop8: detected capacity change from 0 to 7 [ 104.106293][ T6685] Dev loop8: unable to read RDB block 7 [ 104.112971][ T6685] loop8: unable to read partition table [ 104.118995][ T6685] loop8: partition table beyond EOD, truncated [ 104.125199][ T6685] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 104.125199][ T6685] ) failed (rc=-5) [ 104.185249][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.251575][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.347531][ T6691] syz_tun: entered allmulticast mode [ 104.395935][ T6691] dvmrp1: entered allmulticast mode [ 104.512684][ T6690] syz_tun: left allmulticast mode [ 104.524939][ T6690] dvmrp1: left allmulticast mode [ 105.174186][ T6706] loop5: detected capacity change from 0 to 32768 [ 105.288401][ T6706] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 105.305691][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.223'. [ 105.410633][ T6706] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 105.655538][ T6167] ocfs2: Unmounting device (7,5) on (node local) [ 105.755039][ T6717] capability: warning: `syz.4.224' uses deprecated v2 capabilities in a way that may be insecure [ 105.968022][ T6731] Bluetooth: MGMT ver 1.23 [ 106.112640][ T6737] netlink: 156 bytes leftover after parsing attributes in process `syz.5.226'. [ 106.132513][ T6737] warning: `syz.5.226' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.538919][ T6753] loop8: detected capacity change from 0 to 8 [ 106.569315][ T6753] Dev loop8: unable to read RDB block 8 [ 106.574938][ T6753] loop8: unable to read partition table [ 106.614306][ T6753] loop8: partition table beyond EOD, truncated [ 106.632193][ T6753] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 106.894510][ T6767] loop3: detected capacity change from 0 to 64 [ 106.984446][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 106.984462][ T30] audit: type=1800 audit(1744560802.152:19): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.239" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 107.156469][ T6771] "syz.0.241" (6771) uses obsolete ecb(arc4) skcipher [ 107.690808][ T6806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.071405][ T6823] program syz.5.257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.492563][ T6836] process 'syz.3.260' launched './file0' with NULL argv: empty string added [ 108.998233][ T6848] loop0: detected capacity change from 0 to 2048 [ 109.063673][ T6858] netlink: 'syz.1.271': attribute type 4 has an invalid length. [ 109.081155][ T6848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.608800][ T6878] loop4: detected capacity change from 0 to 128 [ 109.609342][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 109.686152][ T6878] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.748671][ T6878] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.923212][ T5839] FAT-fs (loop4): error, invalid access to FAT (entry 0xffff0000) [ 109.949560][ T5839] FAT-fs (loop4): Filesystem has been set read-only [ 110.086846][ T6889] loop3: detected capacity change from 0 to 512 [ 110.156866][ T6889] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.285: invalid block [ 110.189614][ T6889] EXT4-fs (loop3): Remounting filesystem read-only [ 110.205945][ T6889] EXT4-fs (loop3): 2 truncates cleaned up [ 110.234918][ T6889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.319263][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.361878][ T6895] loop5: detected capacity change from 0 to 4096 [ 110.435999][ T30] audit: type=1800 audit(1744560805.602:20): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.287" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 110.515309][ T6901] loop3: detected capacity change from 0 to 2048 [ 110.559555][ T6901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.110828][ T6922] kvm: pic: non byte write [ 111.237146][ T5941] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.265080][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.279868][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.292740][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.305433][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.313428][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.327811][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.421532][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 111.447166][ T5941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.502620][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.560992][ T6936] loop5: detected capacity change from 0 to 512 [ 111.567653][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.603711][ T6928] chnl_net:caif_netlink_parms(): no params data found [ 111.616018][ T5941] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 111.645562][ T6936] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 111.655999][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.675751][ T6936] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.303: bad orphan inode 13 [ 111.687928][ T5941] usb 1-1: config 0 descriptor?? [ 111.717058][ T6936] EXT4-fs (loop5): Remounting filesystem read-only [ 111.725350][ T6936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.833110][ T6167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.902769][ T6956] loop5: detected capacity change from 0 to 1024 [ 111.911117][ T6928] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.916165][ T6956] hfsplus: bad catalog file entry [ 111.924264][ T6956] hfsplus: failed to load root directory [ 111.926331][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.945859][ T6928] bridge_slave_0: entered allmulticast mode [ 111.954776][ T6928] bridge_slave_0: entered promiscuous mode [ 111.971561][ T6928] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.984111][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.993022][ T6928] bridge_slave_1: entered allmulticast mode [ 112.007793][ T6575] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.022892][ T6928] bridge_slave_1: entered promiscuous mode [ 112.060291][ T6956] netlink: 'syz.5.309': attribute type 4 has an invalid length. [ 112.095065][ T6928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.112378][ T6928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.156796][ T6575] usb 4-1: Using ep0 maxpacket: 16 [ 112.169353][ T6575] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.189505][ T6575] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 112.200434][ T6928] team0: Port device team_slave_0 added [ 112.206290][ T6575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.218286][ T6928] team0: Port device team_slave_1 added [ 112.220645][ T5941] maltron 0003:058F:9410.0003: unknown main item tag 0x0 [ 112.227182][ T6575] usb 4-1: Product: syz [ 112.235087][ T6575] usb 4-1: Manufacturer: syz [ 112.247275][ T5941] maltron 0003:058F:9410.0003: unknown main item tag 0x0 [ 112.251001][ T6575] usb 4-1: SerialNumber: syz [ 112.254486][ T5941] maltron 0003:058F:9410.0003: unknown main item tag 0x0 [ 112.270468][ T5941] maltron 0003:058F:9410.0003: unknown main item tag 0x0 [ 112.279366][ T5941] maltron 0003:058F:9410.0003: unknown main item tag 0x0 [ 112.291320][ T6575] usb 4-1: config 0 descriptor?? [ 112.297079][ T5941] maltron 0003:058F:9410.0003: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.0-1/input0 [ 112.323573][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.334183][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.361585][ T6928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.386320][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.399432][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.434737][ T5941] usb 1-1: USB disconnect, device number 6 [ 112.444484][ T6928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.622560][ T6961] loop1: detected capacity change from 0 to 32768 [ 112.626911][ T6928] hsr_slave_0: entered promiscuous mode [ 112.641758][ T6928] hsr_slave_1: entered promiscuous mode [ 112.644116][ T6961] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 112.644116][ T6961] [ 112.651790][ T6928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.659866][ T6961] ERROR: (device loop1): remounting filesystem as read-only [ 112.671390][ T6928] Cannot create hsr debugfs directory [ 112.927041][ T6971] batadv0: entered promiscuous mode [ 112.934171][ T6971] macsec1: entered promiscuous mode [ 112.946180][ T6971] batadv0: left promiscuous mode [ 113.077736][ T6928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.093918][ T6928] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.108744][ T6928] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.123078][ T6928] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 113.130123][ T6575] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.290647][ T6575] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 113.303813][ T6575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.317793][ T6575] usb 6-1: Product: syz [ 113.325393][ T6575] usb 6-1: Manufacturer: syz [ 113.344701][ T6575] usb 6-1: SerialNumber: syz [ 113.360728][ T6575] usb 6-1: config 0 descriptor?? [ 113.388100][ T6928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.425340][ T5837] Bluetooth: hci3: command tx timeout [ 113.454131][ T6928] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.480600][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.487754][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.507194][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.514325][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.792237][ T6575] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 113.812829][ T6575] usb 6-1: Firmware version (0.0) predates our first public release. [ 113.827537][ T6575] usb 6-1: Please update to version 0.2 or newer [ 113.906897][ T6928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.036550][ T6997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.320'. [ 114.049380][ T6575] usb 6-1: USB disconnect, device number 2 [ 114.057399][ T6997] netlink: 'syz.1.320': attribute type 7 has an invalid length. [ 114.065066][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.320'. [ 114.176879][ T6568] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.189897][ T7002] netlink: 60 bytes leftover after parsing attributes in process `syz.1.321'. [ 114.201179][ T7002] netlink: 60 bytes leftover after parsing attributes in process `syz.1.321'. [ 114.313917][ T6928] veth0_vlan: entered promiscuous mode [ 114.332833][ T6568] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.333180][ T6928] veth1_vlan: entered promiscuous mode [ 114.353928][ T6568] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 114.381222][ T6928] veth0_macvtap: entered promiscuous mode [ 114.392479][ T6568] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.399886][ T6928] veth1_macvtap: entered promiscuous mode [ 114.403758][ T6568] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 114.424794][ T6568] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 114.435183][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.440348][ T6568] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.453266][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.455617][ T6568] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.466983][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.478833][ T6568] usb 1-1: Product: syz [ 114.484595][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.491031][ T6568] usb 1-1: Manufacturer: syz [ 114.502137][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.513512][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.517503][ T6568] cdc_wdm 1-1:1.0: skipping garbage [ 114.528438][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.543236][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.547053][ T6568] cdc_wdm 1-1:1.0: skipping garbage [ 114.578145][ T6568] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 114.584101][ T6568] cdc_wdm 1-1:1.0: Unknown control protocol [ 114.592840][ T6928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.643272][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.667990][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.679000][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.689759][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.743782][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.763578][ T7014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.326'. [ 114.772667][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.783477][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 114.792668][ T6928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.803326][ T6928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.813738][ T6575] usb 1-1: USB disconnect, device number 7 [ 114.816073][ T6928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.835381][ T6990] lo: entered allmulticast mode [ 114.844195][ T5877] usb 4-1: USB disconnect, device number 8 [ 114.872193][ T6990] tunl0: entered allmulticast mode [ 114.883283][ T6990] gre0: entered allmulticast mode [ 114.894350][ T6990] gretap0: entered allmulticast mode [ 114.902605][ T6990] erspan0: entered allmulticast mode [ 114.912997][ T6990] ip_vti0: entered allmulticast mode [ 114.920248][ T6990] ip6_vti0: entered allmulticast mode [ 114.928527][ T6990] sit0: entered allmulticast mode [ 114.936233][ T6990] ip6tnl0: entered allmulticast mode [ 114.944258][ T6990] ip6gre0: entered allmulticast mode [ 114.955145][ T6990] syz_tun: entered allmulticast mode [ 114.964702][ T6990] ip6gretap0: entered allmulticast mode [ 114.975491][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.982900][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.993376][ T6990] bridge0: entered allmulticast mode [ 115.002166][ T6990] vcan0: entered allmulticast mode [ 115.011514][ T6990] bond0: entered allmulticast mode [ 115.016633][ T6990] bond_slave_0: entered allmulticast mode [ 115.023020][ T6990] bond_slave_1: entered allmulticast mode [ 115.033353][ T6990] team0: entered allmulticast mode [ 115.039240][ T6990] team_slave_0: entered allmulticast mode [ 115.044965][ T6990] team_slave_1: entered allmulticast mode [ 115.055342][ T6990] dummy0: entered allmulticast mode [ 115.063912][ T6990] nlmon0: entered allmulticast mode [ 115.071291][ T6990] caif0: entered allmulticast mode [ 115.077398][ T6990] batadv0: entered allmulticast mode [ 115.085211][ T6990] vxcan0: entered allmulticast mode [ 115.091524][ T6990] vxcan1: entered allmulticast mode [ 115.102480][ T6990] veth0: entered allmulticast mode [ 115.110357][ T6990] veth1: entered allmulticast mode [ 115.120532][ T6990] wg0: entered allmulticast mode [ 115.127919][ T6990] wg1: entered allmulticast mode [ 115.134750][ T6990] wg2: entered allmulticast mode [ 115.142477][ T6990] veth0_to_bridge: entered allmulticast mode [ 115.152434][ T6990] veth1_to_bridge: entered allmulticast mode [ 115.165229][ T6990] veth0_to_bond: entered allmulticast mode [ 115.174159][ T6990] veth1_to_bond: entered allmulticast mode [ 115.185468][ T6990] veth0_to_team: entered allmulticast mode [ 115.195648][ T6990] veth1_to_team: entered allmulticast mode [ 115.205573][ T6990] veth0_to_batadv: entered allmulticast mode [ 115.215864][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.224162][ T6990] batadv_slave_0: entered allmulticast mode [ 115.232618][ T6990] veth1_to_batadv: entered allmulticast mode [ 115.242345][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.250397][ T6990] batadv_slave_1: entered allmulticast mode [ 115.260251][ T6990] xfrm0: entered allmulticast mode [ 115.269300][ T6990] veth0_to_hsr: entered allmulticast mode [ 115.278775][ T6990] hsr_slave_0: entered allmulticast mode [ 115.288360][ T6990] veth1_to_hsr: entered allmulticast mode [ 115.302862][ T6990] hsr_slave_1: entered allmulticast mode [ 115.312233][ T6990] hsr0: entered allmulticast mode [ 115.330975][ T6990] veth1_virt_wifi: entered allmulticast mode [ 115.346237][ T6990] veth0_virt_wifi: entered allmulticast mode [ 115.355484][ T6990] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 115.368513][ T6990] veth1_vlan: entered allmulticast mode [ 115.383695][ T6990] veth0_vlan: entered allmulticast mode [ 115.400243][ T6990] vlan0: entered allmulticast mode [ 115.405486][ T6990] vlan1: entered allmulticast mode [ 115.416532][ T7019] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 115.436524][ T6990] macvlan0: entered allmulticast mode [ 115.455853][ T6990] macvlan1: entered allmulticast mode [ 115.466867][ T6990] ipvlan0: entered allmulticast mode [ 115.472373][ T6990] ipvlan1: entered allmulticast mode [ 115.483834][ T6990] veth1_macvtap: entered allmulticast mode [ 115.492719][ T6990] veth0_macvtap: entered allmulticast mode [ 115.497051][ T5837] Bluetooth: hci3: command tx timeout [ 115.540715][ T6990] macvtap0: entered allmulticast mode [ 115.572948][ T6990] macsec0: entered allmulticast mode [ 115.583759][ T6990] geneve0: entered allmulticast mode [ 115.602222][ T6990] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.616375][ T6990] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.628535][ T6990] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.632513][ T7023] xt_hashlimit: size too large, truncated to 1048576 [ 115.637802][ T6990] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.655538][ T6990] geneve1: entered allmulticast mode [ 115.666279][ T6990] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 115.689890][ T6990] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 115.712125][ T6990] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 115.722514][ T6990] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 115.763454][ T6990] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 115.781647][ T6990] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 115.809449][ T6990] vlan2: entered allmulticast mode [ 115.815124][ T7014] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 115.839742][ T6928] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.856979][ T6928] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.882004][ T6928] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.900968][ T6928] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.200944][ T6493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.224497][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.237395][ T6493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.256578][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.365689][ T7034] loop1: detected capacity change from 0 to 32768 [ 116.575506][ T7046] loop6: detected capacity change from 0 to 524287999 [ 116.595122][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.604552][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.621169][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.630350][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.642441][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.651620][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.660581][ T6493] loop: Write error at byte offset 1, length 1024. [ 116.676435][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 0 [ 116.685991][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 0 [ 116.695922][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.705102][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.714180][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.723352][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.736349][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.745530][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.753934][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.763134][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.782880][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.792117][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.800185][ T7046] ldm_validate_partition_table(): Disk read failed. [ 116.826714][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.834973][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.845399][ T7046] Dev loop6: unable to read RDB block 0 [ 116.871815][ T7046] loop6: unable to read partition table [ 116.892259][ T7046] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 116.974213][ T5837] Bluetooth: hci3: Malformed Event: 0x02 [ 116.986926][ T47] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 117.166570][ T7075] loop6: detected capacity change from 0 to 1024 [ 117.181957][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 117.198284][ T47] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 117.225799][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.242182][ T47] usb 6-1: Product: syz [ 117.246377][ T47] usb 6-1: Manufacturer: syz [ 117.251871][ T47] usb 6-1: SerialNumber: syz [ 117.287132][ T6569] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 117.289488][ T47] usb 6-1: config 0 descriptor?? [ 117.461278][ T6569] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.479647][ T6569] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.541400][ T6569] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.578879][ T5837] Bluetooth: hci3: command tx timeout [ 117.589555][ T6569] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 117.599066][ T6569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.609995][ T6569] usb 4-1: Product: syz [ 117.614288][ T6569] usb 4-1: Manufacturer: syz [ 117.619311][ T6569] usb 4-1: SerialNumber: syz [ 117.624733][ T7093] loop0: detected capacity change from 0 to 128 [ 117.653576][ T6569] cdc_subset 4-1:1.0: probe with driver cdc_subset failed with error -22 [ 117.683290][ T6569] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 117.690234][ T7089] loop1: detected capacity change from 0 to 4096 [ 117.695545][ T6569] cdc_ncm 4-1:1.0: bind() failure [ 117.721420][ T6569] cdc_subset 4-1:1.1: probe with driver cdc_subset failed with error -22 [ 117.723930][ T47] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 117.745628][ T6569] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 117.773732][ T47] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 117.794434][ T6569] cdc_ncm 4-1:1.1: bind() failure [ 118.055503][ T6569] usb 4-1: USB disconnect, device number 9 [ 118.887614][ T47] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 118.911286][ T47] usb 6-1: USB disconnect, device number 3 [ 119.196387][ T7127] loop0: detected capacity change from 0 to 1024 [ 119.268223][ T1335] hfsplus: b-tree write err: -5, ino 4 [ 119.320280][ T1335] hfsplus: b-tree write err: -5, ino 4 [ 119.440278][ T7148] netlink: 'syz.5.367': attribute type 4 has an invalid length. [ 119.657022][ T5837] Bluetooth: hci3: command tx timeout [ 119.913334][ T7157] loop0: detected capacity change from 0 to 32768 [ 120.059611][ T7164] loop3: detected capacity change from 0 to 2048 [ 120.323161][ T7164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.369690][ T7168] loop6: detected capacity change from 0 to 40427 [ 120.382401][ T7164] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.402584][ T7168] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(67108866) root(3) [ 120.411285][ T7168] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 120.434129][ T7168] F2FS-fs (loop6): invalid crc value [ 120.529755][ T30] audit: type=1800 audit(1744560815.642:21): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.361" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 120.546999][ T5837] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 120.559128][ T5837] Bluetooth: hci0: Injecting HCI hardware error event [ 120.570488][ T5829] Bluetooth: hci0: hardware error 0x00 [ 120.625907][ T7168] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 120.633560][ T7168] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 120.690789][ T7168] syz.6.373: attempt to access beyond end of device [ 120.690789][ T7168] loop6: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 120.781736][ T6928] syz-executor: attempt to access beyond end of device [ 120.781736][ T6928] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.797679][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 120.832005][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 120.832033][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.832043][ T6928] Call Trace: [ 120.832050][ T6928] [ 120.832057][ T6928] dump_stack_lvl+0x241/0x360 [ 120.832100][ T6928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.832124][ T6928] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 120.832142][ T6928] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 120.832160][ T6928] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 120.832192][ T6928] f2fs_handle_critical_error+0x392/0x5a0 [ 120.832225][ T6928] f2fs_write_end_io+0x58f/0x7d0 [ 120.832250][ T6928] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 120.832272][ T6928] ? bio_endio+0x7e4/0x890 [ 120.832298][ T6928] ? bio_endio+0x82a/0x890 [ 120.832325][ T6928] __submit_merged_bio+0x2a9/0x710 [ 120.832344][ T6928] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 120.832373][ T6928] f2fs_submit_merged_write_cond+0x29f/0x380 [ 120.832409][ T6928] f2fs_write_data_pages+0x2f99/0x3910 [ 120.832471][ T6928] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.832505][ T6928] ? __pfx_stack_trace_save+0x10/0x10 [ 120.832523][ T6928] ? __bfs+0x14a/0x270 [ 120.832577][ T6928] ? __bfs+0x14a/0x270 [ 120.832616][ T6928] ? __lock_acquire+0xad5/0xd80 [ 120.832638][ T6928] ? do_raw_spin_lock+0x151/0x370 [ 120.832669][ T6928] ? do_raw_spin_unlock+0x13c/0x8b0 [ 120.832699][ T6928] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.832719][ T6928] do_writepages+0x38c/0x640 [ 120.832741][ T6928] ? __lock_acquire+0xad5/0xd80 [ 120.832762][ T6928] ? __pfx_do_writepages+0x10/0x10 [ 120.832781][ T6928] ? do_raw_spin_lock+0x151/0x370 [ 120.832816][ T6928] ? do_raw_spin_unlock+0x13c/0x8b0 [ 120.832847][ T6928] filemap_fdatawrite+0x1f2/0x2a0 [ 120.832868][ T6928] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 120.832938][ T6928] ? do_raw_spin_unlock+0x13c/0x8b0 [ 120.832969][ T6928] f2fs_sync_dirty_inodes+0x34f/0x860 [ 120.833006][ T6928] f2fs_write_checkpoint+0x857/0x1da0 [ 120.833049][ T6928] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 120.833125][ T6928] ? kill_f2fs_super+0x290/0x6d0 [ 120.833150][ T6928] kill_f2fs_super+0x2b8/0x6d0 [ 120.833175][ T6928] ? __pfx_kill_f2fs_super+0x10/0x10 [ 120.833203][ T6928] ? shrinker_free+0x2ca/0x3d0 [ 120.833225][ T6928] deactivate_locked_super+0xc4/0x130 [ 120.833246][ T6928] cleanup_mnt+0x422/0x4c0 [ 120.833264][ T6928] ? lockdep_hardirqs_on+0x9d/0x150 [ 120.833287][ T6928] task_work_run+0x251/0x310 [ 120.833316][ T6928] ? __pfx_task_work_run+0x10/0x10 [ 120.833342][ T6928] ? syscall_exit_to_user_mode+0xa3/0x340 [ 120.833365][ T6928] syscall_exit_to_user_mode+0x13f/0x340 [ 120.833387][ T6928] do_syscall_64+0x100/0x230 [ 120.833406][ T6928] ? clear_bhb_loop+0x45/0xa0 [ 120.833426][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.833447][ T6928] RIP: 0033:0x7f3a63f8e497 [ 120.833468][ T6928] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 120.833481][ T6928] RSP: 002b:00007ffdf38d56e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 120.833506][ T6928] RAX: 0000000000000000 RBX: 00007f3a6400e77c RCX: 00007f3a63f8e497 [ 120.833517][ T6928] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf38d57a0 [ 120.833527][ T6928] RBP: 00007ffdf38d57a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.833537][ T6928] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf38d6830 [ 120.833547][ T6928] R13: 00007f3a6400e77c R14: 000000000001d770 R15: 00007ffdf38d6870 [ 120.833580][ T6928] [ 120.853094][ T6928] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 121.048392][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.126520][ T7221] loop1: detected capacity change from 0 to 128 [ 122.151905][ T7221] vfat: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff18446744073709551615' [ 122.281403][ T6569] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 122.451212][ T5879] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 122.484421][ T6569] usb 4-1: Using ep0 maxpacket: 16 [ 122.502213][ T6569] usb 4-1: config 0 has no interfaces? [ 122.527785][ T6569] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 122.546724][ T6569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 122.596719][ T6569] usb 4-1: Product: syz [ 122.611121][ T6569] usb 4-1: Manufacturer: syz [ 122.617254][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 122.624002][ T6569] usb 4-1: SerialNumber: syz [ 122.658287][ T6569] usb 4-1: config 0 descriptor?? [ 122.666805][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.691518][ T5879] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 122.698461][ T5829] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 122.711969][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.732283][ T5879] usb 1-1: config 0 descriptor?? [ 122.806909][ T47] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 122.958785][ T7223] netlink: 'syz.0.387': attribute type 16 has an invalid length. [ 122.966602][ T7223] netlink: 'syz.0.387': attribute type 17 has an invalid length. [ 122.973672][ T47] usb 7-1: config 0 has an invalid interface number: 72 but max is 0 [ 122.974995][ T6569] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.000912][ T47] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 123.011598][ T47] usb 7-1: config 0 has no interface number 0 [ 123.034135][ T47] usb 7-1: New USB device found, idVendor=12d1, idProduct=d03d, bcdDevice=2f.07 [ 123.052378][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.086188][ T7223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.094896][ T7223] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.110732][ T47] usb 7-1: config 0 descriptor?? [ 123.116270][ T7223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.145693][ T5879] usbhid 1-1:0.0: can't add hid device: -71 [ 123.152597][ T5879] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 123.165888][ T5879] usb 1-1: USB disconnect, device number 8 [ 123.297734][ T6569] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 123.318807][ T6569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.356882][ T47] usb 7-1: string descriptor 0 read error: -71 [ 123.359699][ T6569] usb 2-1: config 0 descriptor?? [ 123.364571][ T47] cdc_mbim 7-1:0.72: skipping garbage [ 123.373710][ T47] cdc_mbim 7-1:0.72: CDC Union missing and no IAD found [ 123.389619][ T47] cdc_mbim 7-1:0.72: bind() failure [ 123.417252][ T47] usb 7-1: USB disconnect, device number 2 [ 123.795509][ T7260] netlink: 'syz.0.390': attribute type 1 has an invalid length. [ 123.814560][ T6569] saitek 0003:06A3:0CD0.0004: unknown main item tag 0x0 [ 123.828468][ T7260] netlink: 'syz.0.390': attribute type 2 has an invalid length. [ 123.833429][ T6569] saitek 0003:06A3:0CD0.0004: unknown main item tag 0x0 [ 123.888239][ T6569] saitek 0003:06A3:0CD0.0004: unknown main item tag 0x0 [ 123.908807][ T6569] saitek 0003:06A3:0CD0.0004: unknown main item tag 0x0 [ 123.928205][ T6569] saitek 0003:06A3:0CD0.0004: unknown main item tag 0x0 [ 123.973651][ T6569] saitek 0003:06A3:0CD0.0004: hidraw0: USB HID v1.01 Device [HID 06a3:0cd0] on usb-dummy_hcd.1-1/input0 [ 124.027236][ T6569] usb 2-1: USB disconnect, device number 4 [ 124.494503][ T7287] nbd: socks must be embedded in a SOCK_ITEM attr [ 124.692351][ T7290] loop5: detected capacity change from 0 to 256 [ 124.759034][ T7295] loop1: detected capacity change from 0 to 256 [ 124.823836][ T7295] FAT-fs (loop1): Directory bread(block 64) failed [ 124.843342][ T7295] FAT-fs (loop1): Directory bread(block 65) failed [ 124.860010][ T7295] FAT-fs (loop1): Directory bread(block 66) failed [ 124.866571][ T7295] FAT-fs (loop1): Directory bread(block 67) failed [ 124.879453][ T7295] FAT-fs (loop1): Directory bread(block 68) failed [ 124.886058][ T7295] FAT-fs (loop1): Directory bread(block 69) failed [ 124.894513][ T7295] FAT-fs (loop1): Directory bread(block 70) failed [ 124.900967][ T7290] loop5: detected capacity change from 0 to 512 [ 124.904861][ T7295] FAT-fs (loop1): Directory bread(block 71) failed [ 124.928925][ T7295] FAT-fs (loop1): Directory bread(block 72) failed [ 124.935605][ T7295] FAT-fs (loop1): Directory bread(block 73) failed [ 124.979871][ T5878] usb 4-1: USB disconnect, device number 10 [ 125.088392][ T7295] FAT-fs (loop1): Filesystem has been set read-only [ 125.127083][ T30] audit: type=1800 audit(1744560820.292:22): pid=7295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.400" name="pids.events" dev="loop1" ino=20 res=0 errno=0 [ 125.168671][ T7295] FAT-fs (loop1): error, invalid access to FAT (entry 0x00007973) [ 125.190114][ T7303] tipc: Started in network mode [ 125.195022][ T7303] tipc: Node identity 8a67337cc638, cluster identity 4711 [ 125.241539][ T7303] tipc: Enabled bearer , priority 0 [ 125.280906][ T7303] : renamed from syzkaller0 [ 125.328012][ T7303] tipc: Disabling bearer [ 125.453766][ T7317] loop1: detected capacity change from 0 to 256 [ 125.703787][ T7329] netlink: 16 bytes leftover after parsing attributes in process `syz.5.408'. [ 125.815790][ T7336] ------------[ cut here ]------------ [ 125.821348][ T7336] Please remove unsupported % in format string [ 125.828427][ T7336] WARNING: CPU: 1 PID: 7336 at lib/vsprintf.c:2701 format_decode+0x8a9/0xcb0 [ 125.837263][ T7336] Modules linked in: [ 125.841517][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.3.411 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 125.852943][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.863106][ T7336] RIP: 0010:format_decode+0x8a9/0xcb0 [ 125.868567][ T7336] Code: 33 1b 04 01 90 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 f0 03 00 00 41 0f b6 37 48 c7 c7 20 e0 77 8d e8 18 80 53 f5 90 <0f> 0b 90 90 e9 9c fc ff ff e8 b9 6a 94 f5 4d 89 ee 4c 8b 6c 24 08 [ 125.888242][ T7336] RSP: 0018:ffffc90003117660 EFLAGS: 00010246 [ 125.894336][ T7336] RAX: e6900d29473b2900 RBX: ffffffff8d77db21 RCX: 0000000000080000 [ 125.902367][ T7336] RDX: ffffc9000cc13000 RSI: 0000000000004465 RDI: 0000000000004466 [ 125.910397][ T7336] RBP: ffffffff8d77db20 R08: ffffffff81829232 R09: fffffbfff1d7ab08 [ 125.918435][ T7336] R10: dffffc0000000000 R11: fffffbfff1d7ab08 R12: dffffc0000000000 [ 125.926429][ T7336] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc9000311790c [ 125.934458][ T7336] FS: 00007f5ababee6c0(0000) GS:ffff888125080000(0000) knlGS:0000000000000000 [ 125.943439][ T7336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.950076][ T7336] CR2: 0000200000001000 CR3: 000000003254e000 CR4: 00000000003526f0 [ 125.958103][ T7336] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.966092][ T7336] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 125.974120][ T7336] Call Trace: [ 125.977443][ T7336] [ 125.980399][ T7336] bstr_printf+0x167/0xef0 [ 125.984854][ T7336] ? __pfx_bstr_printf+0x10/0x10 [ 125.989862][ T7336] ? bpf_trace_printk+0x117/0x230 [ 125.994913][ T7336] bpf_trace_printk+0x1a3/0x230 [ 125.999824][ T7336] ? ktime_get+0x102/0x200 [ 126.004263][ T7336] ? __pfx_bpf_trace_printk+0x10/0x10 [ 126.009696][ T7336] ? ktime_get+0x102/0x200 [ 126.014138][ T7336] ? bpf_test_run+0x36f/0xa90 [ 126.018882][ T7336] ? read_tsc+0x9/0x20 [ 126.022987][ T7336] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 126.028493][ T7336] bpf_test_run+0x4ea/0xa90 [ 126.033021][ T7336] ? bpf_test_run+0x36f/0xa90 [ 126.037765][ T7336] ? __pfx_bpf_test_run+0x10/0x10 [ 126.042831][ T7336] ? __pfx_eth_type_trans+0x10/0x10 [ 126.048095][ T7336] ? convert___skb_to_skb+0x41/0x630 [ 126.053405][ T7336] bpf_prog_test_run_skb+0xc3e/0x1770 [ 126.058858][ T7336] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 126.064697][ T7336] ? __fget_files+0x2a/0x420 [ 126.069357][ T7336] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 126.075192][ T7336] bpf_prog_test_run+0x2d8/0x350 [ 126.080202][ T7336] __sys_bpf+0x4ee/0x8b0 [ 126.084466][ T7336] ? __pfx___sys_bpf+0x10/0x10 [ 126.089321][ T7336] __x64_sys_bpf+0x7c/0x90 [ 126.093766][ T7336] do_syscall_64+0xf3/0x230 [ 126.098330][ T7336] ? clear_bhb_loop+0x45/0xa0 [ 126.103034][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.108990][ T7336] RIP: 0033:0x7f5ab9d8d169 [ 126.113422][ T7336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.133095][ T7336] RSP: 002b:00007f5ababee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.141581][ T7336] RAX: ffffffffffffffda RBX: 00007f5ab9fa5fa0 RCX: 00007f5ab9d8d169 [ 126.149610][ T7336] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 126.157642][ T7336] RBP: 00007f5ab9e0e990 R08: 0000000000000000 R09: 0000000000000000 [ 126.165630][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.173672][ T7336] R13: 0000000000000000 R14: 00007f5ab9fa5fa0 R15: 00007ffebc0f4bf8 [ 126.181726][ T7336] [ 126.184765][ T7336] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.192061][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.3.411 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 126.203445][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.213522][ T7336] Call Trace: [ 126.216821][ T7336] [ 126.219764][ T7336] dump_stack_lvl+0x241/0x360 [ 126.224468][ T7336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.229688][ T7336] ? __pfx__printk+0x10/0x10 [ 126.234307][ T7336] ? vscnprintf+0x5d/0x90 [ 126.238660][ T7336] panic+0x349/0x880 [ 126.242580][ T7336] ? __warn+0x174/0x4d0 [ 126.246755][ T7336] ? __pfx_panic+0x10/0x10 [ 126.251208][ T7336] __warn+0x344/0x4d0 [ 126.255223][ T7336] ? format_decode+0x8a9/0xcb0 [ 126.260023][ T7336] report_bug+0x2b3/0x500 [ 126.264366][ T7336] ? format_decode+0x8a9/0xcb0 [ 126.269162][ T7336] ? format_decode+0x8a9/0xcb0 [ 126.273950][ T7336] ? format_decode+0x8ab/0xcb0 [ 126.278728][ T7336] handle_bug+0x89/0x170 [ 126.282995][ T7336] exc_invalid_op+0x1a/0x50 [ 126.287516][ T7336] asm_exc_invalid_op+0x1a/0x20 [ 126.292390][ T7336] RIP: 0010:format_decode+0x8a9/0xcb0 [ 126.297784][ T7336] Code: 33 1b 04 01 90 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 f0 03 00 00 41 0f b6 37 48 c7 c7 20 e0 77 8d e8 18 80 53 f5 90 <0f> 0b 90 90 e9 9c fc ff ff e8 b9 6a 94 f5 4d 89 ee 4c 8b 6c 24 08 [ 126.317408][ T7336] RSP: 0018:ffffc90003117660 EFLAGS: 00010246 [ 126.323501][ T7336] RAX: e6900d29473b2900 RBX: ffffffff8d77db21 RCX: 0000000000080000 [ 126.331491][ T7336] RDX: ffffc9000cc13000 RSI: 0000000000004465 RDI: 0000000000004466 [ 126.339478][ T7336] RBP: ffffffff8d77db20 R08: ffffffff81829232 R09: fffffbfff1d7ab08 [ 126.347463][ T7336] R10: dffffc0000000000 R11: fffffbfff1d7ab08 R12: dffffc0000000000 [ 126.355450][ T7336] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc9000311790c [ 126.363452][ T7336] ? __warn_printk+0x2a2/0x360 [ 126.368264][ T7336] bstr_printf+0x167/0xef0 [ 126.372727][ T7336] ? __pfx_bstr_printf+0x10/0x10 [ 126.377695][ T7336] ? bpf_trace_printk+0x117/0x230 [ 126.382755][ T7336] bpf_trace_printk+0x1a3/0x230 [ 126.387624][ T7336] ? ktime_get+0x102/0x200 [ 126.392063][ T7336] ? __pfx_bpf_trace_printk+0x10/0x10 [ 126.397460][ T7336] ? ktime_get+0x102/0x200 [ 126.401898][ T7336] ? bpf_test_run+0x36f/0xa90 [ 126.406601][ T7336] ? read_tsc+0x9/0x20 [ 126.410697][ T7336] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 126.416179][ T7336] bpf_test_run+0x4ea/0xa90 [ 126.420710][ T7336] ? bpf_test_run+0x36f/0xa90 [ 126.425423][ T7336] ? __pfx_bpf_test_run+0x10/0x10 [ 126.430494][ T7336] ? __pfx_eth_type_trans+0x10/0x10 [ 126.435719][ T7336] ? convert___skb_to_skb+0x41/0x630 [ 126.441030][ T7336] bpf_prog_test_run_skb+0xc3e/0x1770 [ 126.446444][ T7336] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 126.452267][ T7336] ? __fget_files+0x2a/0x420 [ 126.456902][ T7336] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 126.462729][ T7336] bpf_prog_test_run+0x2d8/0x350 [ 126.467691][ T7336] __sys_bpf+0x4ee/0x8b0 [ 126.471955][ T7336] ? __pfx___sys_bpf+0x10/0x10 [ 126.476766][ T7336] __x64_sys_bpf+0x7c/0x90 [ 126.481206][ T7336] do_syscall_64+0xf3/0x230 [ 126.485725][ T7336] ? clear_bhb_loop+0x45/0xa0 [ 126.490414][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.496317][ T7336] RIP: 0033:0x7f5ab9d8d169 [ 126.500745][ T7336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.520369][ T7336] RSP: 002b:00007f5ababee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.528780][ T7336] RAX: ffffffffffffffda RBX: 00007f5ab9fa5fa0 RCX: 00007f5ab9d8d169 [ 126.536748][ T7336] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 126.544723][ T7336] RBP: 00007f5ab9e0e990 R08: 0000000000000000 R09: 0000000000000000 [ 126.552689][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.560650][ T7336] R13: 0000000000000000 R14: 00007f5ab9fa5fa0 R15: 00007ffebc0f4bf8 [ 126.568624][ T7336] [ 126.571770][ T7336] Kernel Offset: disabled [ 126.576082][ T7336] Rebooting in 86400 seconds..