last executing test programs: 1m34.866050053s ago: executing program 1 (id=98): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m34.379113021s ago: executing program 1 (id=100): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 1m29.838293008s ago: executing program 2 (id=118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m29.124313019s ago: executing program 2 (id=122): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 1m28.666965815s ago: executing program 2 (id=124): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x0) 1m28.389538519s ago: executing program 2 (id=128): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0x9) 1m27.348614475s ago: executing program 2 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000000001010100000000141a000002000000240001801400018008000100e0000280050001"], 0x88}}, 0x0) 1m25.746699579s ago: executing program 2 (id=137): syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 1m25.280652126s ago: executing program 32 (id=137): syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 1m11.364293982s ago: executing program 1 (id=100): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 51.92007558s ago: executing program 1 (id=100): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 33.738174479s ago: executing program 1 (id=100): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 15.50610423s ago: executing program 1 (id=100): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 7.37406366s ago: executing program 5 (id=511): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRES64=0x0], 0x1, 0xa23, &(0x7f0000000a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f00000006c0)) 6.73699075s ago: executing program 5 (id=516): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x23, 0x7ff, 0x8, 0x2a, 0x4d5, 0x2e}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0x3, 0xa7, 0x101, 0xd8d6, 0x4003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 6.115474499s ago: executing program 5 (id=520): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x12e042, 0x92) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xfc2506386cabaaf4) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwrite64(r0, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) 4.804189389s ago: executing program 4 (id=527): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000540)={0x2, 0x100, 0x591b4a81}) 3.581937117s ago: executing program 5 (id=531): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0xfffffffe, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 2.787345688s ago: executing program 3 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x19, &(0x7f00000006c0)=ANY=[], 0x0, 0x2, 0x82, &(0x7f00000007c0)=""/130, 0x41100, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.610430401s ago: executing program 0 (id=535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) 2.463696014s ago: executing program 3 (id=536): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.455941733s ago: executing program 5 (id=537): ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capget(&(0x7f0000000080)={0x20071026}, 0x0) 2.403784724s ago: executing program 4 (id=538): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r1 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) close_range(r1, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd0c, 0x0}, 0x2) 2.109996229s ago: executing program 0 (id=539): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xf0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0xf0) close(r0) 1.812000153s ago: executing program 0 (id=540): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x3) accept(r0, 0x0, 0x0) shutdown(r0, 0x0) 1.490762388s ago: executing program 0 (id=541): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20000080) 1.311875851s ago: executing program 3 (id=542): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/20, 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/74, 0x4a}], 0x1}}], 0x2, 0x220, 0x0) 1.282524861s ago: executing program 4 (id=543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x3e, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x17}, 0x2}, 0x1c) 1.080591434s ago: executing program 0 (id=544): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@utf8no}, {@uni_xlateno}, {@fat=@errors_remount}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@numtail}, {@numtail}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@shortname_mixed}]}, 0x2a, 0x34c, &(0x7f0000000400)="$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") rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) creat(&(0x7f0000000040)='./bus\x00', 0x0) 1.065626894s ago: executing program 3 (id=545): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000340)=""/48, 0x30}, {&(0x7f0000000380)=""/27, 0x1b}], 0x2) 1.044755594s ago: executing program 4 (id=546): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) close_range(r1, 0xffffffffffffffff, 0x0) 896.815307ms ago: executing program 5 (id=547): syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd5247202104350374db010203010902"], 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000007c0)="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", 0x5c5}], 0x1, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}, 0x0) 848.501537ms ago: executing program 3 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf257a00000008000300", @ANYRES32=r2], 0xc8}}, 0x0) 682.75765ms ago: executing program 4 (id=549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) 390.912574ms ago: executing program 3 (id=550): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 238.719596ms ago: executing program 4 (id=551): ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x0, 0x81}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x16, 0x0, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 0s ago: executing program 0 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004020000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) kernel console output (not intermixed with test programs): man_adv: batadv0: Removing interface: batadv_slave_0 [ 102.937699][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.945257][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.087434][ T64] device bridge_slave_1 left promiscuous mode [ 103.106880][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.206440][ T4750] loop0: detected capacity change from 0 to 256 [ 103.207255][ T64] device bridge_slave_0 left promiscuous mode [ 103.237351][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.265876][ T4750] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.326181][ T4750] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 103.345066][ T64] device veth1_macvtap left promiscuous mode [ 103.350915][ T4746] loop4: detected capacity change from 0 to 4096 [ 103.351992][ T64] device veth0_macvtap left promiscuous mode [ 103.393906][ T4746] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 103.405200][ T4750] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 103.430229][ T64] device veth1_vlan left promiscuous mode [ 103.446679][ T64] device veth0_vlan left promiscuous mode [ 103.603239][ T4746] ntfs: volume version 3.1. [ 103.699004][ T4752] block nbd2: shutting down sockets [ 103.846184][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 104.211551][ T4763] loop4: detected capacity change from 0 to 512 [ 104.266726][ T4763] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 104.369673][ T4763] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.127: invalid indirect mapped block 4278190080 (level 0) [ 104.408856][ T4763] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.127: invalid indirect mapped block 1 (level 1) [ 104.445612][ T4763] EXT4-fs (loop4): 1 truncate cleaned up [ 104.452183][ T4763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 104.541907][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 104.709477][ T4778] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 104.962131][ T64] team0 (unregistering): Port device team_slave_1 removed [ 105.032670][ T64] team0 (unregistering): Port device team_slave_0 removed [ 105.085935][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.154670][ T4780] loop4: detected capacity change from 0 to 32768 [ 105.162936][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.208946][ T4780] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.131 (4780) [ 105.386675][ T4780] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 105.398762][ T4780] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 105.408798][ T4780] BTRFS info (device loop4): using free space tree [ 105.492110][ T4780] BTRFS info (device loop4): enabling ssd optimizations [ 105.936110][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 105.940627][ T4257] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 106.320373][ T64] bond0 (unregistering): Released all slaves [ 106.436712][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.443932][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.453144][ T4614] device bridge_slave_0 entered promiscuous mode [ 106.494917][ T4773] device syzkaller1 entered promiscuous mode [ 106.580561][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.594424][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.621140][ T4614] device bridge_slave_1 entered promiscuous mode [ 106.877241][ T4614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.918728][ T4614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.164041][ T4614] team0: Port device team_slave_0 added [ 107.173698][ T4614] team0: Port device team_slave_1 added [ 107.216214][ T2121] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.219081][ T4614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.242051][ T4614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.296865][ T4614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.342506][ T4614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.357254][ T4614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.406903][ T2121] usb 5-1: Using ep0 maxpacket: 16 [ 107.418571][ T2121] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 107.469909][ T2121] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 107.470506][ T4614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.507462][ T2121] usb 5-1: Product: syz [ 107.511717][ T2121] usb 5-1: Manufacturer: syz [ 107.541716][ T2121] usb 5-1: SerialNumber: syz [ 107.579145][ T2121] usb 5-1: config 0 descriptor?? [ 107.705049][ T4614] device hsr_slave_0 entered promiscuous mode [ 107.738032][ T4614] device hsr_slave_1 entered promiscuous mode [ 107.767298][ T4614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.786162][ T4614] Cannot create hsr debugfs directory [ 107.849939][ T127] usb 5-1: USB disconnect, device number 4 [ 108.006888][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 108.295348][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.306288][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.314783][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.324907][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.342927][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.350728][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.350869][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.642221][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.731513][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 108.744041][ T4848] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 108.744711][ T4845] overlayfs: conflicting lowerdir path [ 108.897690][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.012262][ T4850] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.085608][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.117568][ T4853] input: syz0 as /devices/virtual/input/input12 [ 109.125171][ T4853] input: failed to attach handler leds to device input12, error: -6 [ 109.272098][ T4463] udevd[4463]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 109.392251][ T4860] program syz.0.150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.657646][ T4614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.779865][ T4874] loop3: detected capacity change from 0 to 64 [ 109.932020][ T4614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.003660][ T4614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.127228][ T4836] chnl_net:caif_netlink_parms(): no params data found [ 110.192756][ T4614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.406651][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 110.829889][ T4836] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.837318][ T4836] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.867340][ T4836] device bridge_slave_0 entered promiscuous mode [ 110.956694][ T4836] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.965093][ T4836] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.990719][ T4836] device bridge_slave_1 entered promiscuous mode [ 111.236211][ T4614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.245828][ T4836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.310753][ T4836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.333871][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.386704][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.409390][ T4614] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.495525][ T27] audit: type=1326 audit(1749867199.417:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25b8e929 code=0x7ffc0000 [ 111.553787][ T27] audit: type=1326 audit(1749867199.437:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a25b8e929 code=0x7ffc0000 [ 111.585483][ T27] audit: type=1326 audit(1749867199.437:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25b8e929 code=0x7ffc0000 [ 111.610737][ T27] audit: type=1326 audit(1749867199.437:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a25b8e929 code=0x7ffc0000 [ 111.633487][ T27] audit: type=1326 audit(1749867199.437:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25b8e929 code=0x7ffc0000 [ 111.664847][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.694236][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.744771][ T4697] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.749348][ T27] audit: type=1326 audit(1749867199.437:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a25b8e929 code=0x7ffc0000 [ 111.751984][ T4697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.834819][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.844174][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.862939][ T4697] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.867135][ T27] audit: type=1326 audit(1749867199.477:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25b8e929 code=0x7ffc0000 [ 111.871610][ T4697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.913106][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.939830][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.952139][ T27] audit: type=1326 audit(1749867199.477:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f8a25b8e929 code=0x7ffc0000 [ 111.991670][ T4836] team0: Port device team_slave_0 added [ 112.028830][ T4836] team0: Port device team_slave_1 added [ 112.029777][ T27] audit: type=1326 audit(1749867199.477:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25b8e929 code=0x7ffc0000 [ 112.109989][ T27] audit: type=1326 audit(1749867199.477:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.0.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25b8e929 code=0x7ffc0000 [ 112.257781][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.275810][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.308710][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.383804][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.494400][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 112.521471][ T4943] loop0: detected capacity change from 0 to 128 [ 112.586863][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.593870][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.645935][ T4943] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 112.694480][ T4943] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.699876][ T4836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.757089][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.818100][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.880709][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.903518][ T4949] loop3: detected capacity change from 0 to 512 [ 112.940524][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.984786][ T4949] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.987261][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.035663][ T4953] loop4: detected capacity change from 0 to 512 [ 113.047326][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.080087][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.157238][ T4949] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.174: casefold flag without casefold feature [ 113.166172][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.179028][ T4953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.265639][ T4949] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.174: couldn't read orphan inode 15 (err -117) [ 113.286551][ T4953] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.316216][ T4836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.340556][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.346433][ T4949] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.421664][ T64] device hsr_slave_0 left promiscuous mode [ 113.437066][ T64] device hsr_slave_1 left promiscuous mode [ 113.527574][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.535088][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.546909][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 113.566604][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.575263][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.627529][ T64] device bridge_slave_1 left promiscuous mode [ 113.633890][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.680766][ T64] device bridge_slave_0 left promiscuous mode [ 113.712704][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 113.729747][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.877508][ T64] device veth1_macvtap left promiscuous mode [ 113.885071][ T64] device veth0_macvtap left promiscuous mode [ 113.903570][ T64] device veth1_vlan left promiscuous mode [ 113.911353][ T64] device veth0_vlan left promiscuous mode [ 114.567317][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 114.857921][ T4984] loop4: detected capacity change from 0 to 32768 [ 114.890279][ T4984] JBD2: Ignoring recovery information on journal [ 114.938476][ T4984] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 115.009498][ T4984] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #74: signature = [ 115.026445][ T4984] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 115.038044][ T4984] OCFS2: File system is now read-only. [ 115.043862][ T4984] (syz.4.182,4984,1):ocfs2_assign_bh:2414 ERROR: status = -30 [ 115.068117][ T4984] (syz.4.182,4984,1):ocfs2_inode_lock_full_nested:2509 ERROR: status = -30 [ 115.077209][ T4984] (syz.4.182,4984,1):ocfs2_reserve_suballoc_bits:789 ERROR: status = -30 [ 115.087994][ T4984] (syz.4.182,4984,1):ocfs2_reserve_new_inode:1091 ERROR: status = -30 [ 115.098667][ T4984] (syz.4.182,4984,1):ocfs2_reserve_new_inode:1114 ERROR: status = -30 [ 115.107442][ T4984] (syz.4.182,4984,1):ocfs2_mknod:306 ERROR: status = -30 [ 115.114539][ T4984] (syz.4.182,4984,1):ocfs2_mknod:502 ERROR: status = -30 [ 115.124037][ T4984] (syz.4.182,4984,1):ocfs2_mkdir:659 ERROR: status = -30 [ 115.187091][ T4257] ocfs2: Unmounting device (7,4) on (node local) [ 115.314341][ T64] team0 (unregistering): Port device team_slave_1 removed [ 115.407080][ T64] team0 (unregistering): Port device team_slave_0 removed [ 115.452769][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.505715][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.823061][ T5002] loop4: detected capacity change from 0 to 4096 [ 116.015377][ T5003] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.340755][ T64] bond0 (unregistering): Released all slaves [ 116.438477][ T4963] tipc: Started in network mode [ 116.443621][ T4963] tipc: Node identity 68a, cluster identity 4711 [ 116.454523][ T4963] tipc: Node number set to 1674 [ 116.461048][ T4963] tipc: Cannot configure node identity twice [ 116.648517][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 116.670601][ T4836] device hsr_slave_0 entered promiscuous mode [ 116.688296][ T4836] device hsr_slave_1 entered promiscuous mode [ 117.427978][ T4836] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.479563][ T4836] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.527513][ T4836] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.579334][ T4836] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.596349][ T4339] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.673886][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.692187][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.745763][ T4614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.786137][ T4339] usb 1-1: Using ep0 maxpacket: 16 [ 117.804212][ T4339] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 117.844423][ T4339] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 117.853255][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.872628][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.886320][ T4339] usb 1-1: Product: syz [ 117.890583][ T4339] usb 1-1: Manufacturer: syz [ 117.910916][ T4339] usb 1-1: SerialNumber: syz [ 117.924550][ T4339] usb 1-1: config 0 descriptor?? [ 117.977498][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.998162][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.057325][ T4614] device veth0_vlan entered promiscuous mode [ 118.074424][ T4836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.100215][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.120836][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.165947][ T4614] device veth1_vlan entered promiscuous mode [ 118.201543][ T4836] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.219529][ T4339] usb 1-1: USB disconnect, device number 4 [ 118.225433][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.262850][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.295279][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.352719][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.372253][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.388584][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.403241][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.410556][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.427264][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.442617][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.453992][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.461658][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.490078][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.522624][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.572117][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.607872][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.633207][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.648387][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.691554][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.714780][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.740893][ T4614] device veth0_macvtap entered promiscuous mode [ 118.808485][ T4614] device veth1_macvtap entered promiscuous mode [ 118.838576][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.857171][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.902587][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.929306][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.985262][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.001967][ T5062] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 119.004582][ T5060] loop3: detected capacity change from 0 to 4096 [ 119.033425][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.066366][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.075970][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.102776][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.144832][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.236387][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.256127][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.286192][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.326232][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.337034][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.382632][ T4614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.470963][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.497257][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.560994][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.593777][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.622888][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.645451][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.687236][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.716305][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.756720][ T4614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.769332][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.807707][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.850282][ T4614] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.866757][ T4614] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.885797][ T4614] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.896077][ T4614] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.921762][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 120.311387][ T4705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.346894][ T4705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.404893][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.453751][ T4705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.472873][ T4705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.531659][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.658889][ T5093] loop3: detected capacity change from 0 to 256 [ 120.676988][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.698888][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.723759][ T4836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.742818][ T5093] exfat: Deprecated parameter 'utf8' [ 120.783585][ T5093] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 120.984957][ T5097] loop4: detected capacity change from 0 to 16 [ 121.092285][ T5097] erofs: (device loop4): mounted with root inode @ nid 36. [ 121.272416][ T5097] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 121.385565][ T5097] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 121.455960][ T5097] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 121.545282][ T5097] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 121.585755][ T4694] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.595460][ T5097] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 121.663743][ T5097] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 121.723108][ T27] audit: type=1800 audit(1749867209.647:16): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.214" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 121.931361][ T4694] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.103959][ T5101] mmap: syz.0.215 (5101) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.181275][ T4694] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.373858][ T4694] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.481591][ T5124] loop3: detected capacity change from 0 to 4096 [ 122.616909][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.637395][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.753973][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.798882][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.852818][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.881783][ T5128] loop4: detected capacity change from 0 to 512 [ 122.890451][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.923735][ T4836] device veth0_vlan entered promiscuous mode [ 122.933996][ T5130] loop0: detected capacity change from 0 to 512 [ 122.981718][ T4836] device veth1_vlan entered promiscuous mode [ 122.991512][ T5128] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.033628][ T5130] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.068733][ T4266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.080529][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.101588][ T4266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.120178][ T4266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.144777][ T4266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 123.152520][ T4266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.183123][ T4836] device veth0_macvtap entered promiscuous mode [ 123.212808][ T5130] EXT4-fs (loop0): 1 truncate cleaned up [ 123.226320][ T5130] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.235429][ T5128] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.220: bad orphan inode 131083 [ 123.302735][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.346971][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.377688][ T5128] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 123.398444][ T4836] device veth1_macvtap entered promiscuous mode [ 123.427833][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.476884][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.567897][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 123.712180][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.744287][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.783220][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.806269][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.836098][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.876113][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.900238][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.943249][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.995977][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.059181][ T5153] loop0: detected capacity change from 0 to 1024 [ 124.136799][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.148952][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.186501][ T5153] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.224240][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.296159][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.304906][ T5160] loop3: detected capacity change from 0 to 512 [ 124.337468][ T27] audit: type=1800 audit(1749867212.267:17): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.225" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 124.376187][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.386859][ T27] audit: type=1800 audit(1749867212.267:18): pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.225" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 124.420274][ T5160] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 124.428052][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.476101][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.526210][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.571413][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.583540][ T5153] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.225: Allocating blocks 497-513 which overlap fs metadata [ 124.616112][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.639834][ T5153] EXT4-fs (loop0): pa ffff888073b558c0: logic 256, phys. 385, len 8 [ 124.648732][ T5153] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 124.661935][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.674793][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 124.806247][ T4339] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.831247][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.842346][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.875146][ T4836] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.904817][ T4836] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.940260][ T4836] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.960608][ T4836] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.023226][ T4339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.054182][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 125.066286][ T4339] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.107544][ T4339] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.166284][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 125.206319][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 125.219334][ T4339] usb 4-1: SerialNumber: syz [ 125.454837][ T4339] usb 4-1: 0:2 : does not exist [ 125.500073][ T5131] chnl_net:caif_netlink_parms(): no params data found [ 125.583133][ T4339] usb 4-1: USB disconnect, device number 3 [ 125.643602][ T4463] udevd[4463]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.916228][ T4260] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 126.103782][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.113438][ T4260] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 126.132134][ T4260] usb 1-1: config 0 has no interface number 0 [ 126.156138][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.164079][ T4260] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 126.164634][ T5131] device bridge_slave_0 entered promiscuous mode [ 126.206418][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.225056][ T4260] usb 1-1: Product: syz [ 126.240475][ T4260] usb 1-1: Manufacturer: syz [ 126.245202][ T4260] usb 1-1: SerialNumber: syz [ 126.274739][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.275284][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.292586][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.301722][ T4260] usb 1-1: config 0 descriptor?? [ 126.310116][ T5131] device bridge_slave_1 entered promiscuous mode [ 126.346987][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.535781][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.560201][ T5131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.615507][ T4703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.620187][ T5131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.632833][ T4703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.803696][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.910490][ T5131] team0: Port device team_slave_0 added [ 126.948409][ T4694] device hsr_slave_0 left promiscuous mode [ 126.972249][ T4694] device hsr_slave_1 left promiscuous mode [ 126.994682][ T4694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.014815][ T4694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.047338][ T4694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.054905][ T4694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.079071][ T4694] device bridge_slave_1 left promiscuous mode [ 127.095814][ T4694] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.138024][ T4694] device bridge_slave_0 left promiscuous mode [ 127.144465][ T4694] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.263948][ T5202] 9pnet_fd: Insufficient options for proto=fd [ 127.273686][ T4694] device veth1_macvtap left promiscuous mode [ 127.286257][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 127.311630][ T4694] device veth0_macvtap left promiscuous mode [ 127.341367][ T4694] device veth1_vlan left promiscuous mode [ 127.358061][ T4260] usb 1-1: Firmware version (0.0) predates our first public release. [ 127.378157][ T4260] usb 1-1: Please update to version 0.2 or newer [ 127.384990][ T4694] device veth0_vlan left promiscuous mode [ 128.920972][ T4694] team0 (unregistering): Port device team_slave_1 removed [ 129.105562][ T4694] team0 (unregistering): Port device team_slave_0 removed [ 129.303818][ T4694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.376451][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 129.465734][ T4694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.647164][ T5232] loop0: detected capacity change from 0 to 32768 [ 129.681243][ T5232] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.245 (5232) [ 129.721523][ T5232] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.755038][ T5232] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 129.764696][ T5232] BTRFS info (device loop0): setting nodatacow, compression disabled [ 129.774216][ T5232] BTRFS info (device loop0): setting datacow [ 129.796495][ T5232] BTRFS info (device loop0): doing ref verification [ 129.803275][ T5232] BTRFS info (device loop0): force clearing of disk cache [ 129.825060][ T5232] BTRFS info (device loop0): turning off barriers [ 129.834172][ T5232] BTRFS info (device loop0): enabling ssd optimizations [ 129.856622][ T5232] BTRFS info (device loop0): using spread ssd allocation scheme [ 129.864555][ T5232] BTRFS info (device loop0): not using ssd optimizations [ 129.872208][ T5232] BTRFS info (device loop0): not using spread ssd allocation scheme [ 129.895639][ T5232] BTRFS info (device loop0): using free space tree [ 130.100957][ T5232] BTRFS info (device loop0): rebuilding free space tree [ 130.294831][ T27] audit: type=1800 audit(1749867218.217:19): pid=5232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.245" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 130.809897][ T4694] bond0 (unregistering): Released all slaves [ 130.859947][ T4250] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 131.006420][ T5131] team0: Port device team_slave_1 added [ 131.180198][ T4260] usb 1-1: USB disconnect, device number 5 [ 131.244323][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.261941][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.328738][ T5131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.402901][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.410552][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.442537][ T5131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.456244][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 131.674364][ T5131] device hsr_slave_0 entered promiscuous mode [ 131.718796][ T5131] device hsr_slave_1 entered promiscuous mode [ 131.739851][ T5131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.793345][ T5131] Cannot create hsr debugfs directory [ 131.930224][ T27] audit: type=1326 audit(1749867219.857:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7568d8e929 code=0x7ffc0000 [ 131.988277][ T27] audit: type=1326 audit(1749867219.857:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7568d8e929 code=0x7ffc0000 [ 132.153547][ T27] audit: type=1326 audit(1749867219.857:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7568d8e929 code=0x7ffc0000 [ 132.366054][ T27] audit: type=1326 audit(1749867219.857:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7568d8e929 code=0x7ffc0000 [ 132.556280][ T27] audit: type=1326 audit(1749867219.857:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f7568d8e929 code=0x7ffc0000 [ 132.739612][ T27] audit: type=1326 audit(1749867219.857:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7568d8e929 code=0x7ffc0000 [ 133.006013][ C1] sched: RT throttling activated [ 133.016955][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.024016][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.088797][ T5131] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.188722][ T5131] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.201870][ T5280] loop5: detected capacity change from 0 to 262144 [ 134.267706][ T5280] F2FS-fs (loop5): invalid crc value [ 134.308317][ T5131] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.316187][ T5280] F2FS-fs (loop5): Found nat_bits in checkpoint [ 134.376549][ T5280] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 134.402633][ T5131] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.534266][ T5285] loop4: detected capacity change from 0 to 32768 [ 134.649126][ T5285] XFS (loop4): Mounting V5 Filesystem [ 134.716140][ T4260] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.809576][ T5131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.815024][ T5285] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 134.827799][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.836049][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.909489][ T4260] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 134.922851][ T5131] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.954507][ T5285] XFS (loop4): Starting recovery (logdev: internal) [ 134.961530][ T4260] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 134.988432][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.006377][ T4260] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 135.036871][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.042146][ T4260] usb 4-1: config 220 has no interface number 2 [ 135.066746][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.069879][ T4260] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 135.074068][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.074844][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.149736][ T4260] usb 4-1: config 220 interface 0 has no altsetting 0 [ 135.172018][ T4260] usb 4-1: config 220 interface 76 has no altsetting 0 [ 135.240286][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.256599][ T4260] usb 4-1: config 220 interface 1 has no altsetting 0 [ 135.264758][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.298212][ T4260] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 135.318591][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.326074][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.351357][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.364486][ T4260] usb 4-1: Product: syz [ 135.377441][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.385701][ T4260] usb 4-1: Manufacturer: syz [ 135.397627][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.406133][ T4260] usb 4-1: SerialNumber: syz [ 135.427616][ T5285] XFS (loop4): Ending recovery (logdev: internal) [ 135.466736][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.511321][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.589616][ T4257] XFS (loop4): Unmounting Filesystem [ 135.602166][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.632250][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.661052][ T4260] usb 4-1: selecting invalid altsetting 0 [ 135.704890][ T4260] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 135.711850][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.733690][ T5323] Bluetooth: MGMT ver 1.22 [ 135.746239][ T4260] usb 4-1: No valid video chain found. [ 135.752843][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.787150][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.845610][ T5131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.859202][ T4260] usb 4-1: selecting invalid altsetting 0 [ 135.865031][ T4260] usbtest: probe of 4-1:220.1 failed with error -22 [ 135.882491][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.904591][ T4260] usb 4-1: USB disconnect, device number 4 [ 135.924559][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.962411][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.986543][ T5352] loop4: detected capacity change from 0 to 1024 [ 137.169135][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.188379][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.206263][ T5139] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 137.240205][ T5131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.404427][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.406335][ T5139] usb 6-1: Using ep0 maxpacket: 32 [ 137.423670][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.428338][ T5139] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.506113][ T5139] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.549430][ T5139] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 137.578722][ T5139] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.599417][ T5131] device veth0_vlan entered promiscuous mode [ 137.645874][ T5139] usb 6-1: config 0 descriptor?? [ 137.651607][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.664586][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.739913][ T5131] device veth1_vlan entered promiscuous mode [ 137.774047][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.797012][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.831569][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.901987][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.912052][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.935704][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.971967][ T5131] device veth0_macvtap entered promiscuous mode [ 138.038971][ T5131] device veth1_macvtap entered promiscuous mode [ 138.126174][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.163256][ T5139] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 138.200886][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.226093][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.272868][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.370657][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.400293][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.462764][ T4339] usb 6-1: USB disconnect, device number 2 [ 138.479616][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.524852][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.562776][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.630795][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.642157][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.700779][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.706893][ T5376] fido_id[5376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 138.735237][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.787101][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.855034][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.918481][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.976160][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.020184][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.069208][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.106202][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.142886][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.169640][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.192918][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.207393][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.249139][ T5131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.300385][ T5131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.339683][ T5131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.406081][ T5131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.642938][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.696107][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.756157][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.765732][ T4694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.791978][ T5411] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 139.806211][ T4302] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 139.813642][ T4694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.873899][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.996133][ T4302] usb 1-1: Using ep0 maxpacket: 16 [ 140.008279][ T4302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.019727][ T4302] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 140.030097][ T4302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.046254][ T4339] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 140.072576][ T4302] usb 1-1: config 0 descriptor?? [ 140.114304][ T4302] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 140.240398][ T4339] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 140.277321][ T4339] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.308339][ T4339] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.340439][ T4339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.370763][ T4339] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.400903][ T4339] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.425933][ T4339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.463404][ T4339] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.481980][ T4339] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.496111][ T4339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.512800][ T4339] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.536966][ T4339] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.549038][ T4339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.566544][ T3608] bcm5974 1-1:0.0: could not read from device [ 140.572324][ T4339] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.601058][ T4302] usb 1-1: USB disconnect, device number 6 [ 140.607874][ T3608] bcm5974 1-1:0.0: could not read from device [ 140.612090][ T4339] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.678149][ T4339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.691060][ T4339] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.711027][ T4339] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.724776][ T4339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.762372][ T4339] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.775927][ T4339] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.794449][ T4339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.803041][ T4339] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.821536][ T4339] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.834135][ T4339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.859003][ T4339] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 140.892372][ T4339] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 140.913621][ T4339] usb 6-1: Product: syz [ 140.922522][ T4339] usb 6-1: Manufacturer: syz [ 140.928871][ T4339] usb 6-1: SerialNumber: syz [ 140.942269][ T4339] usb 6-1: config 0 descriptor?? [ 140.995234][ T4339] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 141.135587][ T4697] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.364538][ C1] usb 6-1: yurex_control_callback - control failed: -71 [ 141.366617][ T5261] usb 6-1: USB disconnect, device number 3 [ 141.435612][ T5261] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 141.495259][ T4697] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.564601][ T5441] loop3: detected capacity change from 0 to 256 [ 141.753863][ T4697] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.938583][ T4697] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.246878][ T4266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.267104][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.280730][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.298763][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.306798][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 142.314119][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.376133][ T5261] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 143.603762][ T5454] chnl_net:caif_netlink_parms(): no params data found [ 143.610244][ T5261] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.638456][ T5261] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 143.701768][ T5261] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.751004][ T5261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.805755][ T5475] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 144.134364][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 144.330374][ T4297] usb 6-1: USB disconnect, device number 4 [ 144.406156][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 144.672152][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.692321][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.707395][ T5454] device bridge_slave_0 entered promiscuous mode [ 144.747342][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.766216][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.795683][ T5454] device bridge_slave_1 entered promiscuous mode [ 145.106839][ T5523] bridge0: port 3(vlan2) entered blocking state [ 145.121874][ T5523] bridge0: port 3(vlan2) entered disabled state [ 145.133258][ T5523] device vlan2 entered promiscuous mode [ 145.140583][ T5523] bridge0: mtu less than device minimum [ 145.173277][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.414361][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.529631][ T4697] device hsr_slave_0 left promiscuous mode [ 145.548584][ T4697] device hsr_slave_1 left promiscuous mode [ 145.564465][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.574566][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.590470][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.603650][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.619826][ T4697] device bridge_slave_1 left promiscuous mode [ 145.628654][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.639428][ T4697] device bridge_slave_0 left promiscuous mode [ 145.645927][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.697319][ T4697] device veth1_macvtap left promiscuous mode [ 145.703623][ T4697] device veth0_macvtap left promiscuous mode [ 145.712196][ T4697] device veth1_vlan left promiscuous mode [ 145.718282][ T4697] device veth0_vlan left promiscuous mode [ 145.811389][ T5532] loop3: detected capacity change from 0 to 32768 [ 145.831511][ T5532] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.326 (5532) [ 145.878342][ T5532] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 145.900473][ T5532] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 145.912035][ T5532] BTRFS info (device loop3): using free space tree [ 146.141856][ T5532] BTRFS info (device loop3): enabling ssd optimizations [ 146.325621][ T4256] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 146.486830][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 146.715255][ T5563] IPVS: length: 91 != 24 [ 147.780116][ T4697] team0 (unregistering): Port device team_slave_1 removed [ 147.873966][ T4697] team0 (unregistering): Port device team_slave_0 removed [ 147.945469][ T4697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.064882][ T4697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.576872][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 149.239443][ T5608] loop5: detected capacity change from 0 to 512 [ 149.269325][ T5608] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.316686][ T5608] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 149.329259][ T5608] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.351: invalid indirect mapped block 2683928664 (level 1) [ 149.354032][ T5608] EXT4-fs (loop5): Remounting filesystem read-only [ 149.372538][ T5608] EXT4-fs (loop5): 1 truncate cleaned up [ 149.379799][ T5608] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 149.509260][ T4836] EXT4-fs (loop5): unmounting filesystem. [ 149.529573][ T4697] bond0 (unregistering): Released all slaves [ 149.694697][ T5454] team0: Port device team_slave_0 added [ 149.737469][ T5454] team0: Port device team_slave_1 added [ 149.865545][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.902419][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.972864][ T5616] loop0: detected capacity change from 0 to 128 [ 150.012697][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.028154][ T5616] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 150.039935][ T5619] loop4: detected capacity change from 0 to 1024 [ 150.064045][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.102508][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.193206][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.435284][ T5454] device hsr_slave_0 entered promiscuous mode [ 150.456395][ T5623] hfsplus: xattr search failed [ 150.516607][ T5454] device hsr_slave_1 entered promiscuous mode [ 150.556442][ T5454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.596591][ T5454] Cannot create hsr debugfs directory [ 150.646211][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 150.738510][ T4257] hfsplus: node 4:3 still has 1 user(s)! [ 151.113203][ T5641] capability: warning: `syz.3.362' uses 32-bit capabilities (legacy support in use) [ 151.476709][ T5652] netlink: 'syz.0.364': attribute type 12 has an invalid length. [ 151.488119][ T5652] netlink: 'syz.0.364': attribute type 29 has an invalid length. [ 151.537714][ T5652] netlink: 148 bytes leftover after parsing attributes in process `syz.0.364'. [ 151.723563][ T5656] loop3: detected capacity change from 0 to 2048 [ 151.809747][ T5656] loop3: p1 < > p3 [ 151.855146][ T5656] loop3: p3 size 134217728 extends beyond EOD, truncated [ 151.864634][ T5454] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 151.890932][ T5454] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 151.962147][ T5454] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.041507][ T5454] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 152.362742][ T4463] udevd[4463]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 152.383228][ T4524] udevd[4524]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 152.440418][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.520864][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.542119][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.601048][ T5454] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.642353][ T5677] loop4: detected capacity change from 0 to 128 [ 152.645450][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.687558][ T5677] EXT4-fs: Ignoring removed nobh option [ 152.697531][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.747304][ T4694] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.755116][ T4694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.781988][ T5677] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 152.803191][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.823477][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.852326][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.876530][ T5677] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.956788][ T4694] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.965712][ T4694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.016603][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.071157][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.123242][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.162922][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.203947][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.234567][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.289246][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.322456][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.383051][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.421712][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.451121][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.455527][ T5663] loop5: detected capacity change from 0 to 32768 [ 153.489733][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.529784][ T5663] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.368 (5663) [ 153.608566][ T5663] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.640236][ T5663] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 153.685663][ T5663] BTRFS info (device loop5): force clearing of disk cache [ 153.719432][ T5663] BTRFS info (device loop5): enabling auto defrag [ 153.746166][ T5663] BTRFS info (device loop5): max_inline at 0 [ 153.773457][ T5663] BTRFS info (device loop5): enabling disk space caching [ 153.796461][ T5663] BTRFS info (device loop5): disk space caching is enabled [ 153.956294][ T4339] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 154.116127][ T5663] BTRFS info (device loop5): enabling ssd optimizations [ 154.156823][ T4339] usb 1-1: Using ep0 maxpacket: 8 [ 154.157131][ T5663] BTRFS info (device loop5): rebuilding free space tree [ 154.165009][ T4339] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 154.196104][ T4339] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.221268][ T4339] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.252680][ T5663] BTRFS info (device loop5): disabling free space tree [ 154.282224][ T5663] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 154.301237][ T4339] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.327184][ T5663] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.356200][ T4339] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.419296][ T4339] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.458513][ T4339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.520802][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 154.624393][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.643110][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.708380][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.722658][ T4339] usb 1-1: usb_control_msg returned -32 [ 154.736244][ T4339] usbtmc 1-1:16.0: can't read capabilities [ 154.862818][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.928721][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.937175][ T4836] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.004384][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.036795][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.091661][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.131097][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.155345][ T5736] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 155.170012][ T5454] device veth0_vlan entered promiscuous mode [ 155.263940][ T5454] device veth1_vlan entered promiscuous mode [ 155.354672][ T5746] usb 1-1: USB disconnect, device number 7 [ 155.398294][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.477953][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.536951][ T5454] device veth0_macvtap entered promiscuous mode [ 155.580223][ T5454] device veth1_macvtap entered promiscuous mode [ 155.669835][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.698509][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.736175][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.803776][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.824851][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.837818][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.848654][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.859963][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.873340][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.898464][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.915428][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.947537][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.966348][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.002449][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.024004][ T5734] loop3: detected capacity change from 0 to 32768 [ 156.035362][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.066199][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.086795][ T5734] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.382 (5734) [ 156.137993][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.162355][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.203352][ T5734] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 156.224526][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.259936][ T5734] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 156.285738][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.309451][ T5734] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 156.320064][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.350600][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.358983][ T5734] BTRFS info (device loop3): use zstd compression, level 3 [ 156.371009][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.388871][ T5751] loop5: detected capacity change from 0 to 32768 [ 156.426345][ T5751] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.383 (5751) [ 156.437483][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.439390][ T5734] BTRFS info (device loop3): using free space tree [ 156.498493][ T5751] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 156.513270][ T5454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.566123][ T5751] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 156.575907][ T5751] BTRFS info (device loop5): using free space tree [ 156.603451][ T5751] BTRFS info (device loop5): enabling ssd optimizations [ 156.607476][ T5454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.642430][ T5793] loop0: detected capacity change from 0 to 128 [ 156.728410][ T5454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.738754][ T5793] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 156.746801][ T5734] BTRFS info (device loop3): enabling ssd optimizations [ 156.756338][ T5793] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.810946][ T5454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.943935][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 157.195738][ T4687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.232053][ T4687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.300318][ T4256] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 157.332800][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.332888][ T4699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.403000][ T4836] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 157.509168][ T4699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.565173][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.252183][ T4265] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 158.619712][ T5819] loop0: detected capacity change from 0 to 8192 [ 159.015545][ T4694] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.136544][ T5828] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 159.186563][ T5828] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.228393][ T4694] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.528261][ T4694] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.682781][ T4694] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.794765][ T5824] loop5: detected capacity change from 0 to 32768 [ 159.829411][ T5824] XFS: ikeep mount option is deprecated. [ 159.841760][ T5821] loop3: detected capacity change from 0 to 40427 [ 159.848105][ T5824] XFS: noikeep mount option is deprecated. [ 159.899134][ T5826] loop4: detected capacity change from 0 to 32768 [ 159.960697][ T5821] F2FS-fs (loop3): invalid crc value [ 159.980510][ T5824] XFS (loop5): Mounting V5 Filesystem [ 160.042042][ T5826] XFS (loop4): Mounting V5 Filesystem [ 160.081198][ T5821] F2FS-fs (loop3): Found nat_bits in checkpoint [ 160.105129][ T5857] loop0: detected capacity change from 0 to 256 [ 160.217977][ T5824] XFS (loop5): Ending clean mount [ 160.219972][ T5821] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 160.269394][ T5826] XFS (loop4): Ending clean mount [ 160.279206][ T5821] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 160.321647][ T5826] XFS (loop4): Quotacheck needed: Please wait. [ 160.331642][ T5824] XFS (loop5): Quotacheck needed: Please wait. [ 160.476902][ T5824] XFS (loop5): Quotacheck: Done. [ 160.514054][ T5826] XFS (loop4): Quotacheck: Done. [ 160.975289][ T4256] syz-executor: attempt to access beyond end of device [ 160.975289][ T4256] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.226133][ T4257] XFS (loop4): Unmounting Filesystem [ 161.263321][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.280308][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.294905][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.306694][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.316781][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.324902][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.338536][ T4836] XFS (loop5): Unmounting Filesystem [ 161.823589][ T5875] loop0: detected capacity change from 0 to 2048 [ 161.896489][ T5875] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 161.983958][ T5875] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 162.046542][ T5875] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 162.113089][ T5875] UDF-fs: Scanning with blocksize 512 failed [ 162.134270][ T5881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.400'. [ 162.158342][ T5881] netlink: 32 bytes leftover after parsing attributes in process `syz.4.400'. [ 162.173479][ T5875] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.183793][ T5881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.400'. [ 162.223239][ T5881] netlink: 32 bytes leftover after parsing attributes in process `syz.4.400'. [ 162.745565][ T5888] loop5: detected capacity change from 0 to 2048 [ 162.853214][ T5888] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=4096, location=4096 [ 162.892588][ T5888] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 162.947580][ T5888] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 163.006347][ T5888] UDF-fs: Scanning with blocksize 512 failed [ 163.031885][ T5888] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 163.060705][ T5888] UDF-fs: Scanning with blocksize 1024 failed [ 163.091001][ T5888] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 163.124780][ T5888] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 163.148532][ T5888] UDF-fs: Scanning with blocksize 2048 failed [ 163.169239][ T5888] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 163.240879][ T5888] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 163.287446][ T5888] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 163.341510][ T5888] UDF-fs: Scanning with blocksize 4096 failed [ 163.387722][ T5888] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 163.446325][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 163.469525][ T5901] loop0: detected capacity change from 0 to 32768 [ 163.481680][ T5901] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.406 (5901) [ 163.487848][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 163.510393][ T5901] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 163.521536][ T5901] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 163.532891][ T5901] BTRFS info (device loop0): force clearing of disk cache [ 163.541050][ T5901] BTRFS info (device loop0): enabling ssd optimizations [ 163.549091][ T5901] BTRFS info (device loop0): using spread ssd allocation scheme [ 163.557280][ T5901] BTRFS info (device loop0): using free space tree [ 163.824688][ T5901] BTRFS info (device loop0): rebuilding free space tree [ 164.026339][ T5261] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.114034][ T4250] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 164.246462][ T5261] usb 5-1: Using ep0 maxpacket: 32 [ 164.257240][ T5261] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 164.265764][ T5261] usb 5-1: config 0 has no interface number 0 [ 164.330260][ T5261] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 164.355684][ T5261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.370559][ T5261] usb 5-1: Product: syz [ 164.375059][ T5261] usb 5-1: Manufacturer: syz [ 164.392568][ T5261] usb 5-1: SerialNumber: syz [ 164.414413][ T5261] usb 5-1: config 0 descriptor?? [ 164.434185][ T5261] smsc95xx v2.0.0 [ 164.697777][ T4694] device hsr_slave_0 left promiscuous mode [ 164.716841][ T4694] device hsr_slave_1 left promiscuous mode [ 164.727657][ T4694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.755151][ T4694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.777608][ T4694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.794038][ T4694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.814486][ T4694] device bridge_slave_1 left promiscuous mode [ 164.826360][ T4694] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.847517][ T4694] device bridge_slave_0 left promiscuous mode [ 164.900527][ T5746] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 164.906586][ T4694] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.024394][ T4694] device veth1_macvtap left promiscuous mode [ 165.032844][ T4694] device veth0_macvtap left promiscuous mode [ 165.039274][ T4694] device veth1_vlan left promiscuous mode [ 165.045348][ T4694] device veth0_vlan left promiscuous mode [ 165.088211][ T5746] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.101443][ T5954] loop3: detected capacity change from 0 to 512 [ 165.119659][ T5746] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.202329][ T5746] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 165.229904][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.266859][ T5954] EXT4-fs (loop3): 1 orphan inode deleted [ 165.274729][ T5746] usb 6-1: SerialNumber: syz [ 165.288382][ T5954] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.306897][ T4697] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 165.361742][ T4697] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:22: Failed to release dquot type 1 [ 165.367638][ T5954] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.460856][ T5261] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 165.492340][ T5261] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 165.508753][ T5261] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 165.523136][ T5261] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 165.528005][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 165.559678][ T5261] usb 5-1: USB disconnect, device number 5 [ 166.213755][ T4694] team0 (unregistering): Port device team_slave_1 removed [ 166.335269][ T4694] team0 (unregistering): Port device team_slave_0 removed [ 166.365144][ T5964] loop4: detected capacity change from 0 to 2048 [ 166.429655][ T4694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.490247][ T5964] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 166.506172][ T5964] UDF-fs: Scanning with blocksize 512 failed [ 166.530153][ T4694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.551360][ T5964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.490187][ T4694] bond0 (unregistering): Released all slaves [ 167.597937][ T5968] loop8: detected capacity change from 0 to 1 [ 167.618491][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 167.631836][ T5968] Dev loop8: unable to read RDB block 1 [ 167.639266][ T5968] loop8: unable to read partition table [ 167.645749][ T5968] loop8: partition table beyond EOD, truncated [ 167.665877][ T5968] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 167.774652][ T5746] usb 6-1: 0:2 : does not exist [ 167.793051][ T5956] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 167.808818][ T5746] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 167.838470][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.838636][ T5746] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 167.867830][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.887415][ T5867] device bridge_slave_0 entered promiscuous mode [ 167.946584][ T5746] usb 6-1: USB disconnect, device number 5 [ 168.021963][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.030031][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.049316][ T5867] device bridge_slave_1 entered promiscuous mode [ 168.204526][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.216785][ T4463] udevd[4463]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.292267][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.414499][ T5867] team0: Port device team_slave_0 added [ 168.435517][ T5867] team0: Port device team_slave_1 added [ 168.571140][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.609186][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.670375][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.696762][ T5975] device syzkaller1 entered promiscuous mode [ 168.712486][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.726928][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.816652][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.085769][ T5867] device hsr_slave_0 entered promiscuous mode [ 169.135779][ T5867] device hsr_slave_1 entered promiscuous mode [ 169.143756][ T5867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.143902][ T5867] Cannot create hsr debugfs directory [ 169.159844][ T5974] loop5: detected capacity change from 0 to 32768 [ 169.258792][ T5974] XFS (loop5): Mounting V5 Filesystem [ 169.387891][ T5974] XFS (loop5): Ending clean mount [ 169.419619][ T5974] XFS (loop5): Quotacheck needed: Please wait. [ 169.578875][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 169.673588][ T5974] XFS (loop5): Quotacheck: Done. [ 169.686520][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 170.116798][ T4836] XFS (loop5): Unmounting Filesystem [ 170.526255][ T6027] device syzkaller1 entered promiscuous mode [ 171.000718][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.059078][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.104219][ T6039] loop4: detected capacity change from 0 to 512 [ 171.106662][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.197194][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.253663][ T6039] EXT4-fs (loop4): 1 orphan inode deleted [ 171.266053][ T6039] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.285066][ T4703] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 171.321016][ T4703] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:24: Failed to release dquot type 1 [ 171.354445][ T6039] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.543831][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.612458][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 171.677344][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.696516][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.754554][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.962933][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.983800][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.013956][ T4699] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.021768][ T4699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.076477][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.101245][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.174625][ T4699] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.182080][ T4699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.215184][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.239345][ T6073] loop3: detected capacity change from 0 to 512 [ 172.293659][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.322438][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.336246][ T6073] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 172.377145][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.412552][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.437601][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.485034][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.495749][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.548146][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.578673][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.591507][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 172.666344][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.728096][ T5867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.776085][ T5738] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 172.803312][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.828691][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.873761][ T6087] loop3: detected capacity change from 0 to 512 [ 172.981751][ T6087] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 173.009422][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.032652][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.049465][ T5738] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.057443][ T6087] fs-verity: sha512 using implementation "sha512-avx2" [ 173.083944][ T5738] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.106063][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.121128][ T5738] usb 1-1: config 0 descriptor?? [ 173.146367][ T6087] EXT4-fs warning (device loop3): ext4_begin_enable_verity:137: inode #13: comm syz.3.451: verity is only allowed on extent-based files [ 173.378243][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 173.547733][ T5738] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 173.576874][ T5738] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 173.662636][ T5738] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 173.991812][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.026785][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.096835][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.185168][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.204338][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.313377][ T5867] device veth0_vlan entered promiscuous mode [ 174.353758][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.373942][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.412812][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.427425][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.437647][ T5741] Process accounting resumed [ 174.469495][ T5867] device veth1_vlan entered promiscuous mode [ 174.595737][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.612905][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.636961][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.648286][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.661929][ T5867] device veth0_macvtap entered promiscuous mode [ 174.689310][ T5867] device veth1_macvtap entered promiscuous mode [ 174.725503][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.767482][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.786122][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.823398][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.836281][ T5740] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 174.896181][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.927224][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.944406][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.973173][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.991695][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.004034][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.021845][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.042932][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.068062][ T5740] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 175.085594][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.087033][ T5740] usb 5-1: config 179 has no interface number 0 [ 175.104479][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.136370][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.147529][ T5740] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 175.166057][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.180832][ T5740] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 175.214836][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.226156][ T5740] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 175.237450][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.252446][ T5740] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 175.272923][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.287985][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.295431][ T5740] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 175.303214][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.325278][ T5740] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 175.342491][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.370462][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.380541][ T6124] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 175.400972][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.412596][ T6124] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 175.474229][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.559098][ T5867] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.593403][ T5867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.662588][ T5867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.713696][ T4799] usb 1-1: USB disconnect, device number 8 [ 175.727055][ T5867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.946065][ T127] usb 5-1: USB disconnect, device number 6 [ 175.946142][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 175.993558][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 176.234535][ T4705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.265690][ T4705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.325124][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.361125][ T4687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.388560][ T4687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.470805][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.241303][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.449569][ T6160] loop0: detected capacity change from 0 to 32768 [ 177.593305][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.632416][ T6160] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 177.795231][ T6166] loop3: detected capacity change from 0 to 32768 [ 177.850500][ T4250] ocfs2: Unmounting device (7,0) on (node local) [ 177.890667][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.932688][ T6166] XFS (loop3): Mounting V5 Filesystem [ 178.008338][ T6166] XFS (loop3): Ending clean mount [ 178.076423][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.214256][ T4256] XFS (loop3): Unmounting Filesystem [ 179.156332][ T5812] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 179.180674][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 179.230533][ T6218] batman_adv: batadv0: Adding interface: macsec1 [ 179.242896][ T6218] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.280279][ T6218] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 179.371535][ T5812] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.386129][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.400756][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.402553][ T5812] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.421313][ T4266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.430945][ T4266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.444642][ T4266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.457120][ T4266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.466484][ T5812] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 179.477560][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.489358][ T5812] usb 6-1: SerialNumber: syz [ 179.708525][ T5812] usb 6-1: 0:2 : does not exist [ 179.753526][ T5812] usb 6-1: USB disconnect, device number 6 [ 179.902508][ T27] audit: type=1326 audit(1749867267.827:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717cd8e929 code=0x7ffc0000 [ 180.062766][ T27] audit: type=1326 audit(1749867267.827:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717cd8e929 code=0x7ffc0000 [ 180.097203][ T4463] udevd[4463]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.189822][ T27] audit: type=1326 audit(1749867267.897:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f717cd8e929 code=0x7ffc0000 [ 180.287751][ T27] audit: type=1326 audit(1749867267.907:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717cd8e929 code=0x7ffc0000 [ 180.475606][ T27] audit: type=1326 audit(1749867267.907:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717cd8e929 code=0x7ffc0000 [ 180.543125][ T27] audit: type=1326 audit(1749867267.907:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f717cd8e929 code=0x7ffc0000 [ 180.633999][ T27] audit: type=1326 audit(1749867267.947:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717cd8e929 code=0x7ffc0000 [ 180.764970][ T27] audit: type=1326 audit(1749867267.947:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717cd8e929 code=0x7ffc0000 [ 180.869121][ T27] audit: type=1326 audit(1749867267.947:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f717cd8e929 code=0x7ffc0000 [ 180.913942][ T27] audit: type=1326 audit(1749867267.947:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717cd8e929 code=0x7ffc0000 [ 181.003538][ T6220] chnl_net:caif_netlink_parms(): no params data found [ 181.074925][ T51] device hsr_slave_0 left promiscuous mode [ 181.083910][ T51] device hsr_slave_1 left promiscuous mode [ 181.112501][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.153943][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.164800][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.181464][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.215385][ T51] device bridge_slave_1 left promiscuous mode [ 181.223987][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.256114][ T51] device bridge_slave_0 left promiscuous mode [ 181.269515][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.303565][ T6260] loop4: detected capacity change from 0 to 2048 [ 181.318101][ T6260] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 181.349895][ T6260] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 181.382808][ T51] device veth1_macvtap left promiscuous mode [ 181.390688][ T51] device veth0_macvtap left promiscuous mode [ 181.401476][ T51] device veth1_vlan left promiscuous mode [ 181.409996][ T51] device veth0_vlan left promiscuous mode [ 181.413277][ T6260] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.526520][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 181.910026][ T6267] program syz.3.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.225088][ T5812] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 182.252895][ T4799] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 182.419982][ T5812] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 182.438577][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.453071][ T4799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.471207][ T4799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.492481][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.505826][ T4799] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 182.518308][ T5812] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 182.533876][ T4799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.546027][ T5812] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 182.563748][ T4799] usb 6-1: config 0 descriptor?? [ 182.569680][ T5812] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 182.585830][ T5812] usb 1-1: Manufacturer: syz [ 182.593380][ T5812] usb 1-1: config 0 descriptor?? [ 182.675337][ T51] team0 (unregistering): Port device team_slave_1 removed [ 182.768485][ T51] team0 (unregistering): Port device team_slave_0 removed [ 182.848636][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.937612][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.021240][ T5812] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 183.030677][ T5812] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 183.073941][ T5812] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 183.409236][ T4799] letsketch 0003:6161:4D15.0004: Device info: ф [ 183.606388][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 183.699811][ T4799] usb 6-1: Max retries (5) exceeded reading string descriptor 201 [ 183.717803][ T4799] letsketch: probe of 0003:6161:4D15.0004 failed with error -71 [ 183.745032][ T4799] usb 6-1: USB disconnect, device number 7 [ 183.863136][ T51] bond0 (unregistering): Released all slaves [ 184.197225][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.204961][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.257878][ T6220] device bridge_slave_0 entered promiscuous mode [ 184.304018][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.356753][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.390269][ T6284] loop5: detected capacity change from 0 to 64 [ 184.402548][ T6220] device bridge_slave_1 entered promiscuous mode [ 184.499336][ T6220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.532874][ T6220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.689532][ T6220] team0: Port device team_slave_0 added [ 184.721666][ T6220] team0: Port device team_slave_1 added [ 184.856702][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.912652][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.012785][ T6220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.067819][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.074848][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.110076][ T5740] usb 1-1: USB disconnect, device number 9 [ 185.221383][ T6220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.435005][ T6311] loop5: detected capacity change from 0 to 1024 [ 185.518945][ T6311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.551353][ T6220] device hsr_slave_0 entered promiscuous mode [ 185.581656][ T6220] device hsr_slave_1 entered promiscuous mode [ 185.603645][ T6220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.632217][ T6220] Cannot create hsr debugfs directory [ 185.686315][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 185.766255][ T5740] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.966242][ T5740] usb 1-1: Using ep0 maxpacket: 16 [ 185.977607][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.026104][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.056852][ T5740] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 186.068834][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.098795][ T5740] usb 1-1: config 0 descriptor?? [ 186.378972][ T6338] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 186.427202][ T6338] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 186.532129][ T5740] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 186.620557][ T5740] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 186.658063][ T5740] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 186.744529][ T4799] usb 1-1: USB disconnect, device number 10 [ 187.004088][ T6353] loop4: detected capacity change from 0 to 512 [ 187.094231][ T6353] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 187.132857][ T6353] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 187.146890][ T6353] System zones: 0-1, 15-15, 18-18, 34-34 [ 187.160056][ T6220] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.207498][ T6353] EXT4-fs (loop4): orphan cleanup on readonly fs [ 187.214569][ T6353] __quota_error: 2 callbacks suppressed [ 187.214586][ T6353] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 187.232555][ T6353] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 187.251280][ T6220] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.267514][ T6360] loop3: detected capacity change from 0 to 512 [ 187.274746][ T6353] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 187.321990][ T6220] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.323559][ T6353] EXT4-fs (loop4): 1 truncate cleaned up [ 187.385944][ T6360] EXT4-fs (loop3): 1 orphan inode deleted [ 187.426253][ T4697] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 187.461971][ T6220] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.476083][ T6360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 187.496174][ T6353] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 187.542279][ T4697] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:22: Failed to release dquot type 1 [ 187.546498][ T6360] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.575610][ T6353] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 187.755271][ T6344] loop5: detected capacity change from 0 to 40427 [ 187.766098][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 187.778521][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 187.820787][ T6344] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 187.920691][ T6344] F2FS-fs (loop5): invalid crc value [ 187.996658][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.011609][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 188.014409][ T6344] F2FS-fs (loop5): Found nat_bits in checkpoint [ 188.023196][ T4703] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 188.063057][ T4703] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:24: Failed to release dquot type 1 [ 188.085913][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.134969][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.187501][ T6220] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.237382][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.244926][ T6344] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 188.248281][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.254506][ T5741] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 188.298593][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.305868][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.343376][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.376945][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.402214][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.410980][ T27] audit: type=1800 audit(1749867276.327:38): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.520" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 188.439126][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.446647][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.455288][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.474175][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.476296][ T5741] usb 5-1: Using ep0 maxpacket: 32 [ 188.486070][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.501333][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.527307][ T5741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.540288][ T6344] syz.5.520: attempt to access beyond end of device [ 188.540288][ T6344] loop5: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 188.567345][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.572472][ T5741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.606539][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.609245][ T6344] syz.5.520: attempt to access beyond end of device [ 188.609245][ T6344] loop5: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 188.630968][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.636633][ T5741] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 188.690601][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.720901][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.751526][ T5741] usb 5-1: config 0 descriptor?? [ 188.776937][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.812828][ T6220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.837402][ T6220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.872817][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.884255][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.985744][ T4836] syz-executor: attempt to access beyond end of device [ 188.985744][ T4836] loop5: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 189.196911][ T5741] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 189.561451][ T5740] usb 5-1: USB disconnect, device number 7 [ 189.983973][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.994012][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.034736][ T6220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.162821][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.197862][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.281417][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.320725][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.342563][ T6220] device veth0_vlan entered promiscuous mode [ 190.353373][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.375265][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.403105][ T6220] device veth1_vlan entered promiscuous mode [ 190.482469][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.505927][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 190.539351][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.568853][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.618648][ T6220] device veth0_macvtap entered promiscuous mode [ 190.670102][ T6220] device veth1_macvtap entered promiscuous mode [ 190.739150][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.803387][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.843022][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.873467][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.903691][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.934663][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.955347][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.996233][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.023407][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.074829][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.098107][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.157620][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.181822][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.209314][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.239582][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.258605][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.316555][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.354304][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.369556][ T6423] capability: warning: `syz.5.537' uses deprecated v2 capabilities in a way that may be insecure [ 191.383057][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.425216][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.448060][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.508854][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.564010][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.594149][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.638433][ T6220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.650170][ T6449] loop0: detected capacity change from 0 to 256 [ 191.680358][ T6220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.698108][ T6220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.715948][ T6220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.789277][ T6449] FAT-fs (loop0): Directory bread(block 64) failed [ 191.795919][ T6449] FAT-fs (loop0): Directory bread(block 65) failed [ 191.836328][ T6449] FAT-fs (loop0): Directory bread(block 66) failed [ 191.852755][ T6449] FAT-fs (loop0): Directory bread(block 67) failed [ 191.902867][ T6449] FAT-fs (loop0): Directory bread(block 68) failed [ 191.941011][ T6456] netlink: 172 bytes leftover after parsing attributes in process `syz.3.548'. [ 191.961691][ T6449] FAT-fs (loop0): Directory bread(block 69) failed [ 191.973199][ T4697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.003678][ T4697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.030594][ T6449] FAT-fs (loop0): Directory bread(block 70) failed [ 192.055178][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.070118][ T6449] FAT-fs (loop0): Directory bread(block 71) failed [ 192.102897][ T6449] FAT-fs (loop0): Directory bread(block 72) failed [ 192.114263][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.126047][ T5261] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 192.136643][ T6449] FAT-fs (loop0): Directory bread(block 73) failed [ 192.152225][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.210138][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.326498][ T5261] usb 6-1: Using ep0 maxpacket: 32 [ 192.344693][ T5261] usb 6-1: config 0 has no interfaces? [ 192.369989][ T5261] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 192.412105][ T5261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.434062][ T5261] usb 6-1: Product: syz [ 192.447694][ T5261] usb 6-1: Manufacturer: syz [ 192.476250][ T5261] usb 6-1: SerialNumber: syz [ 192.500497][ T5261] usb 6-1: config 0 descriptor?? [ 192.577987][ T6220] general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN [ 192.590405][ T6220] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 192.598975][ T6220] CPU: 1 PID: 6220 Comm: syz-executor Not tainted 6.1.141-syzkaller #0 [ 192.607707][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.618267][ T6220] RIP: 0010:klist_remove+0x158/0x380 [ 192.623718][ T6220] Code: 80 3c 04 00 74 08 4c 89 f7 e8 34 da d6 f7 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 0d da d6 f7 49 8b 47 58 48 89 44 24 10 4c 89 [ 192.645112][ T6220] RSP: 0018:ffffc9000380f8c0 EFLAGS: 00010202 [ 192.651317][ T6220] RAX: 000000000000000b RBX: ffff88802bb99dc0 RCX: dffffc0000000000 [ 192.660291][ T6220] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 192.669060][ T6220] RBP: ffffc9000380f9c0 R08: dffffc0000000000 R09: fffffbfff1bce611 [ 192.677837][ T6220] R10: fffffbfff1bce611 R11: 1ffffffff1bce610 R12: 1ffff1100ae21d8c [ 192.688336][ T6220] R13: dffffc0000000000 R14: ffff88805710ec60 R15: 0000000000000000 [ 192.696742][ T6220] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 192.706864][ T6220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.714038][ T6220] CR2: 0000555563f055c8 CR3: 000000005fa57000 CR4: 00000000003506e0 [ 192.723473][ T6220] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.731493][ T6220] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.739942][ T6220] Call Trace: [ 192.742776][ T4799] usb 6-1: USB disconnect, device number 8 [ 192.744174][ T6220] [ 192.753330][ T6220] ? klist_del+0x110/0x110 [ 192.758009][ T6220] ? kobject_move+0x593/0x6d0 [ 192.763082][ T6220] ? kobject_put+0x460/0x460 [ 192.768638][ T6220] ? get_device_parent+0x288/0x3f0 [ 192.774249][ T6220] device_move+0x18f/0x6f0 [ 192.778814][ T6220] hci_conn_del_sysfs+0xab/0x160 [ 192.784171][ T6220] hci_conn_cleanup+0x575/0x730 [ 192.789452][ T6220] hci_conn_del+0x515/0x720 [ 192.794468][ T6220] ? sco_connect_cfm+0xad0/0xad0 [ 192.799884][ T6220] hci_conn_hash_flush+0x203/0x290 [ 192.805817][ T6220] hci_dev_close_sync+0x930/0xf40 [ 192.811073][ T6220] ? blocking_notifier_chain_unregister+0x115/0x210 [ 192.817723][ T6220] hci_unregister_dev+0x202/0x4f0 [ 192.823241][ T6220] vhci_release+0x7f/0xd0 [ 192.827904][ T6220] ? vhci_open+0x360/0x360 [ 192.832645][ T6220] __fput+0x22c/0x920 [ 192.836868][ T6220] task_work_run+0x1ca/0x250 [ 192.841727][ T6220] ? task_work_cancel+0x230/0x230 [ 192.846899][ T6220] ? do_exit+0x931/0x2400 [ 192.851334][ T6220] ? kmem_cache_free+0xf7/0x290 [ 192.856239][ T6220] do_exit+0x936/0x2400 [ 192.860579][ T6220] ? put_task_struct+0x80/0x80 [ 192.865397][ T6220] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 192.871442][ T6220] ? lock_chain_count+0x20/0x20 [ 192.876352][ T6220] ? _raw_spin_lock_irq+0xab/0xe0 [ 192.881521][ T6220] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 192.887045][ T6220] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 192.893084][ T6220] ? _raw_spin_unlock_irq+0x1f/0x40 [ 192.898342][ T6220] ? lockdep_hardirqs_on+0x94/0x140 [ 192.903693][ T6220] do_group_exit+0x217/0x2d0 [ 192.908341][ T6220] __x64_sys_exit_group+0x3b/0x40 [ 192.913411][ T6220] do_syscall_64+0x4c/0xa0 [ 192.917850][ T6220] ? clear_bhb_loop+0x60/0xb0 [ 192.922543][ T6220] ? clear_bhb_loop+0x60/0xb0 [ 192.927261][ T6220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.933184][ T6220] RIP: 0033:0x7f7902f8e929 [ 192.937730][ T6220] Code: Unable to access opcode bytes at 0x7f7902f8e8ff. [ 192.944787][ T6220] RSP: 002b:00007ffc5696e4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 192.953246][ T6220] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7902f8e929 [ 192.961315][ T6220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 192.969486][ T6220] RBP: 00007f7902fee8f0 R08: 00007ffc5696c247 R09: 0000000000000003 [ 192.977558][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.985649][ T6220] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc5696e660 [ 192.993854][ T6220] [ 192.997102][ T6220] Modules linked in: [ 193.109311][ T6220] ---[ end trace 0000000000000000 ]--- [ 193.115148][ T6220] RIP: 0010:klist_remove+0x158/0x380 [ 193.122511][ T6220] Code: 80 3c 04 00 74 08 4c 89 f7 e8 34 da d6 f7 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 0d da d6 f7 49 8b 47 58 48 89 44 24 10 4c 89 [ 193.148635][ T6220] RSP: 0018:ffffc9000380f8c0 EFLAGS: 00010202 [ 193.155329][ T6220] RAX: 000000000000000b RBX: ffff88802bb99dc0 RCX: dffffc0000000000 [ 193.165175][ T6220] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 193.176232][ T6220] RBP: ffffc9000380f9c0 R08: dffffc0000000000 R09: fffffbfff1bce611 [ 193.184933][ T6220] R10: fffffbfff1bce611 R11: 1ffffffff1bce610 R12: 1ffff1100ae21d8c [ 193.193976][ T6220] R13: dffffc0000000000 R14: ffff88805710ec60 R15: 0000000000000000 [ 193.202413][ T6220] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 193.212648][ T6220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.219721][ T6220] CR2: 00007f44f19f2e9c CR3: 000000007cb89000 CR4: 00000000003506f0 [ 193.228416][ T6220] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 193.237478][ T6220] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 193.245892][ T6220] Kernel panic - not syncing: Fatal exception [ 193.252454][ T6220] Kernel Offset: disabled [ 193.256978][ T6220] Rebooting in 86400 seconds..