last executing test programs: 3.56150138s ago: executing program 0 (id=689): socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 3.303295035s ago: executing program 0 (id=693): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 2.415061382s ago: executing program 2 (id=709): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r1) 2.311369174s ago: executing program 0 (id=712): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$eJzs3M1rVFcbAPDn3nwYNb6JL/LyWkoNtGChOBrFSl2py9ZFof0DDHEiIdcPkhRMcBHbhXRVC910UWgXpX9AoetstNBV6aaVFrqXShHdp9zJnWQwM0mqMx4/fj84c8/HZM7z5JK555C5E8BLa6x8yCP2R8S5LGKk6s8jYrBRG4pYWn3eg/vXJh/evzaZxcrKB39nkVV9zdfKquPuqjEUEb+cyeK/n2ycd25hcWaiKOqzVfvw/MUrh+cWFg9NX5y4UL9QvzR+YvzY8RPHjr99pGu5vrv35tmvxk/t+f7Mrauv3fj9yyxOxXA11ppHt4zFWKxUWvv7I2Ki25Ml0lflk7X0Zf0JAwIAYFN5yxrufzESfbG+eBuJW78mDQ4AAADoipW+WPsfFQAAAPCiyuz/AQAA4AXX/BzAg/vXJpsl7ScSnq57pyNitF3+/bHUOA7FQETsepBF622t2eqPPbGxiNj30+iPZYke3Ye8maXrEfH/dvlnjfxHG3dxb8w/j4hu3Jk99kj7ecr/VBfmT50/AC+n5dOrF7KN1798bf0Tba5//W2uXY8j9fWv8/pvPf++Duu/97c5R/3Ap593Gmtd/xXfvnq7nL88PlFS/8K96xGv9Hde/5T5Zx3yP7fNOQb++PmHTmNl/mW+zfK081/5JuJg2/3P+jfaZJt/P9HhqemiXj22nePG7e/2dZq/9fyXpZy/uRd4Gsrzv6tD/lud/yvbnGP5r4N/dhrbOv/87mD2YaM2WPVcnZifnx2PGMzObuw/unkszec0X6PM/83XN//7b5d/+Z6wVP0eyr3A9epYtj9+ZM5D773zxuPn31tl/ucf8/zf3OYcX382e7fTWOr8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+5BExHFleW6vnea0WsTsi9sWuvLg8N//W1OWPLp0vxyJGYyCfmi7qRyJiZLWdle3xRn29ffSR9rGI2BsRX4zsbLRrk5eL86mTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM3uiBiOLK9FRB4RD0fyvFZLHRUAAADQdaOpAwAAAAB6zv4fAAAAXnz2/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTY3gPLd7KIWDq5s1FKg9XYQNLIgF7LUwcAJNOXOgAgmf7UAQDJ2OMD2RbjQx1HdnQ9FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeXQf3L9/JImLp5M5GKQ1WYwNJIwN6LU8dAJBMX+oAgGT6UwcAJGOPD2RbjA91HNnR9VgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHYNN0qW1yIib9TzvFaL2BMRozGQTU0X9SMR8Z+I+G1kYEfZHk8dNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF03t7A4M1EU9VkVFRWVtUrqdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFKYW1icmSiK+uxc6kgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA1OYWFmcmiqI+28NK6hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEjnnwAAAP///JMJmQ==") mkdir(0x0, 0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xc, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000100)="90", 0x0, 0x0, 0x0}) 2.165510727s ago: executing program 2 (id=714): unshare(0x2c020400) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000001180)=0x80, 0x4) 1.980706461s ago: executing program 2 (id=719): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200000000000000010902"], 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x40, 0x10, 0xfe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4e, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x40, 0x12, 0x6, {0x7, 0x25, 0x1, 0x0, 0x3, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x55, 0x2, 0x2, {0x7, 0x25, 0x1, 0x82, 0x2, 0x7}}}}}}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.646272027s ago: executing program 0 (id=724): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 1.159434407s ago: executing program 1 (id=729): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="93378e66cf9b48cb59638401fcd1730172853a9fa89527986442ab60ae29f9c1", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmmsg$unix(r1, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/127, 0x7f}, {0x0}], 0x2}}], 0x1, 0x10, 0x0) 1.058503649s ago: executing program 4 (id=731): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002040)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001940)="08193f", 0x3}], 0x1}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setresuid(0x0, 0xee00, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xf3, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e0ffff00124000632f77fb81371416e000030a94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003005e000000001ec623ec7385000000ae0000009500000000000000"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff810}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) sync_file_range(r8, 0x2, 0x4, 0x6) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000100)) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7], 0x4c}}, 0x0) 1.026889909s ago: executing program 1 (id=732): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00'}, 0x18) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x10, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x5, 0x0, 0x8001, 0x0, 0xfffffff7, 0x1ff, 0x81, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0xfb8d, 0x7b2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x6, 0x0, 0x0, 0xffffffff, 0x3035, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0xe9, 0x3, 0xfffffffe, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x8, 0xff, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2, 0x2, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}, 0x800}}]}}]}, 0x45c}}, 0x0) 929.406872ms ago: executing program 4 (id=733): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") unshare(0x2c060000) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 896.519552ms ago: executing program 1 (id=735): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 796.266864ms ago: executing program 3 (id=736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty, 0x0, 0x0, 0xffff, 0x0, 0xa}, {@in6=@loopback, 0x1, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x4000000000000000, 0xffffffffffffffff}, {0x0, 0x4000000000000000, 0x2}, {0x0, 0x4000000}, 0xfffffffc, 0x0, 0xa, 0x0, 0x0, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x13c}}, 0x8004) 781.183954ms ago: executing program 1 (id=737): sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x11080, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 617.447768ms ago: executing program 3 (id=738): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000680)={0x0, &(0x7f00000005c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000400)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000006c0)={0x0, 0x0, r1, r4, 0x2, 0x7, 0x81, 0x5, {0x4, 0x9, 0x400, 0x4a, 0x8, 0x8, 0xf61b, 0x1, 0x9, 0x0, 0x0, 0xfffffff7, 0x10000, 0x1, "f89cfd4d4ad672245fcf199127f17bee70fcb83a0858d6ddcd4aa43151991f83"}}) 617.330938ms ago: executing program 1 (id=739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) 617.245158ms ago: executing program 4 (id=740): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4a, 0xfec, &(0x7f0000006680)) socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 520.321ms ago: executing program 2 (id=741): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) 505.92738ms ago: executing program 0 (id=742): syz_emit_ethernet(0x46, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x10, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 437.018501ms ago: executing program 3 (id=743): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x66, 0x0, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r0, 0x0, 0x0, 0x5, 0x7) pwritev(r0, 0x0, 0x0, 0x2, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0xa, "09df168a88f985af"}]}}}}}}}, 0x0) 380.559933ms ago: executing program 1 (id=744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$kcm(0x11, 0xa, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="000500"}) 288.942654ms ago: executing program 3 (id=745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206010800000000010000000000fffd14000780080011408856ddb105001500000000000500010006000000050005000a00000005000400000000000900020073797a30000000000c000300686173683a6970"], 0x58}}, 0x80) 288.756124ms ago: executing program 4 (id=746): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00'}, 0x18) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x10, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x5, 0x0, 0x8001, 0x0, 0xfffffff7, 0x1ff, 0x81, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0xfb8d, 0x7b2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x6, 0x0, 0x0, 0xffffffff, 0x3035, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0xe9, 0x3, 0xfffffffe, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x8, 0xff, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2, 0x2, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}, 0x800}}]}}]}, 0x45c}}, 0x0) 276.084795ms ago: executing program 0 (id=747): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 248.231895ms ago: executing program 2 (id=748): socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 153.322297ms ago: executing program 4 (id=749): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000400)='./file0/file1\x00', 0x2000028) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 79.675918ms ago: executing program 3 (id=750): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@getsa={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbff, {@in=@multicast2, 0x4d5, 0xa, 0x3c}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) 60.819289ms ago: executing program 4 (id=751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) 502.82µs ago: executing program 3 (id=752): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x2005}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=753): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. [ 67.458457][ T4255] cgroup: Unknown subsys name 'net' [ 67.569710][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.021223][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.430850][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.438992][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.447424][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.456065][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.463842][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.472028][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.479772][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.481490][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.487169][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.494397][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.501722][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.509270][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.514957][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.522272][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.533101][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.536596][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.544130][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.557414][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.557686][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.564620][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.564834][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.572545][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.579346][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.616778][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.626814][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.634516][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.634521][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.681913][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.689613][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.697245][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.057380][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.063882][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.077463][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 71.103895][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 71.124993][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 71.200319][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 71.299163][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 71.309227][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.316454][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.325861][ T4266] device bridge_slave_0 entered promiscuous mode [ 71.333778][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.341108][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.349388][ T4278] device bridge_slave_0 entered promiscuous mode [ 71.356745][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.363830][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.372109][ T4271] device bridge_slave_0 entered promiscuous mode [ 71.400296][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.407625][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.416757][ T4266] device bridge_slave_1 entered promiscuous mode [ 71.424323][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.431432][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.439767][ T4278] device bridge_slave_1 entered promiscuous mode [ 71.447122][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.454433][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.462233][ T4271] device bridge_slave_1 entered promiscuous mode [ 71.524664][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.561917][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.572740][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.583665][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.593090][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.600298][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.608279][ T4275] device bridge_slave_0 entered promiscuous mode [ 71.632345][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.643273][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.659846][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.667200][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.675166][ T4275] device bridge_slave_1 entered promiscuous mode [ 71.682580][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.690253][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.698239][ T4267] device bridge_slave_0 entered promiscuous mode [ 71.743540][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.750690][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.759075][ T4267] device bridge_slave_1 entered promiscuous mode [ 71.768717][ T4266] team0: Port device team_slave_0 added [ 71.777255][ T4278] team0: Port device team_slave_0 added [ 71.785482][ T4271] team0: Port device team_slave_0 added [ 71.812933][ T4266] team0: Port device team_slave_1 added [ 71.820096][ T4278] team0: Port device team_slave_1 added [ 71.827411][ T4271] team0: Port device team_slave_1 added [ 71.842294][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.882649][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.893401][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.920637][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.927800][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.953798][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.975172][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.984796][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.991760][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.017903][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.029658][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.037073][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.063338][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.085113][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.092082][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.118555][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.148450][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.155625][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.181797][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.193700][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.200770][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.226989][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.243664][ T4275] team0: Port device team_slave_0 added [ 72.267572][ T4267] team0: Port device team_slave_0 added [ 72.280591][ T4275] team0: Port device team_slave_1 added [ 72.289320][ T4267] team0: Port device team_slave_1 added [ 72.375016][ T4271] device hsr_slave_0 entered promiscuous mode [ 72.381795][ T4271] device hsr_slave_1 entered promiscuous mode [ 72.389156][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.396552][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.422657][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.437309][ T4266] device hsr_slave_0 entered promiscuous mode [ 72.444318][ T4266] device hsr_slave_1 entered promiscuous mode [ 72.450879][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.458725][ T4266] Cannot create hsr debugfs directory [ 72.464616][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.471565][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.497680][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.512433][ T4278] device hsr_slave_0 entered promiscuous mode [ 72.519407][ T4278] device hsr_slave_1 entered promiscuous mode [ 72.527034][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.534837][ T4278] Cannot create hsr debugfs directory [ 72.550770][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.557837][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.583843][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.599081][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.606185][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.632143][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.654853][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 72.654856][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 72.734046][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 72.734070][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 72.746335][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 72.757711][ T4275] device hsr_slave_0 entered promiscuous mode [ 72.764938][ T4275] device hsr_slave_1 entered promiscuous mode [ 72.771454][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.779139][ T4275] Cannot create hsr debugfs directory [ 72.801506][ T4267] device hsr_slave_0 entered promiscuous mode [ 72.808311][ T4267] device hsr_slave_1 entered promiscuous mode [ 72.815036][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.822618][ T4267] Cannot create hsr debugfs directory [ 73.072303][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.085728][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.096840][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.106498][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.175961][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.186491][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.201349][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.229705][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.267570][ T4275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.310025][ T4275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.319407][ T4275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.332005][ T4275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.344928][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.391128][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.399671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.409439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.425009][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.434596][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.443519][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.458392][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.506613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.520712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.530230][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.537507][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.546381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.556355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.565160][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.572244][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.580025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.591564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.600748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.631897][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.641106][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.671122][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.679596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.689519][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.724741][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.750556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.759320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.768264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.777293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.788467][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.801915][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.811152][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.828260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.836160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.854284][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.867587][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.879400][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.894468][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.913563][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.933076][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.942568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.955598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.011191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.021532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.036983][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.044110][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.052733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.063184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.071991][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.079126][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.087411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.096996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.106275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.115255][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.122312][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.131411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.140089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.148688][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.155808][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.163562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.178253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.186427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.194651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.202380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.227052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.238929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.251560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.263579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.280520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.290268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.306571][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.322612][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.351014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.360307][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.373800][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.389653][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.399885][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.407032][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.415419][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.424148][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.432546][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.439673][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.447796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.475569][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.487991][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.496569][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.507162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.515681][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.524473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.533159][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.542141][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.550674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.559374][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.567824][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.579256][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.596503][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.604657][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.613420][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.623899][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.632693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.649768][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.672394][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.683521][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.695356][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.709079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.718060][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.733628][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.741438][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 74.745031][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 74.771095][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.787394][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.800163][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.811094][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.818519][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 74.818553][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 74.826482][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 74.832724][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.845289][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.853611][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.862600][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.870449][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.893490][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.909501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.934966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.976186][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.983314][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.042934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.052475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.067654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.080925][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.088103][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.119200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.164513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.175077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.200366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.222422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.231479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.240422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.249870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.272077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.281758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.293543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.312796][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.338336][ T4271] device veth0_vlan entered promiscuous mode [ 75.354151][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.361567][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.369708][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.385727][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.395842][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.403284][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.411391][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.419862][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.449006][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.465353][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.474903][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.483239][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.492107][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.503531][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.514379][ T4271] device veth1_vlan entered promiscuous mode [ 75.539484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.547808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.559088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.569131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.576739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.597847][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.643050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.658365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.668645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.683852][ T4266] device veth0_vlan entered promiscuous mode [ 75.706330][ T4275] device veth0_vlan entered promiscuous mode [ 75.717069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.731389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.741355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.751901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.769035][ T4266] device veth1_vlan entered promiscuous mode [ 75.804502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.812371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.822897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.833242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.843096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.852828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.862551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.891481][ T4275] device veth1_vlan entered promiscuous mode [ 75.901392][ T4271] device veth0_macvtap entered promiscuous mode [ 75.921516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.930127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.941773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.950160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.961283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.969823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.978747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.987481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.996429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.007979][ T4266] device veth0_macvtap entered promiscuous mode [ 76.017555][ T4278] device veth0_vlan entered promiscuous mode [ 76.039029][ T4271] device veth1_macvtap entered promiscuous mode [ 76.050522][ T4278] device veth1_vlan entered promiscuous mode [ 76.061985][ T4266] device veth1_macvtap entered promiscuous mode [ 76.071296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.081253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.090450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.098887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.107868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.116516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.124085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.142669][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.156288][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.170612][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.218820][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.246085][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.278729][ T4275] device veth0_macvtap entered promiscuous mode [ 76.302342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.312382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.321907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.331523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.348472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.362019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.371850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.388807][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.401050][ T4278] device veth0_macvtap entered promiscuous mode [ 76.411361][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.428522][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.442481][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.455934][ T4275] device veth1_macvtap entered promiscuous mode [ 76.468077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.476910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.485980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.498674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.507762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.517564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.530356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.542936][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.552581][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.561590][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.571277][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.585947][ T4278] device veth1_macvtap entered promiscuous mode [ 76.602764][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.614791][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.625038][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.635690][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.647670][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.657107][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.666712][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.675755][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.685165][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.703170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.719296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.772059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.781289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.822577][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.833846][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 76.833854][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 76.850580][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.861161][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.871674][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.882860][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.894630][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 76.894647][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 76.900646][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 76.938049][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.966476][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.976982][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.987505][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.997497][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.007960][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.019709][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.033413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.048181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.059637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.073242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.089979][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.098830][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.107928][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.117226][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.142445][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.151335][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.175464][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.186064][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.197319][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.207937][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.218378][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.229141][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.240663][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.268467][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.285356][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.297660][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.306557][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.316717][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.325539][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.414463][ T4267] device veth0_vlan entered promiscuous mode [ 77.426448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.436177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.451968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.460405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.475175][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.483161][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.486870][ T4267] device veth1_vlan entered promiscuous mode [ 77.512081][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.518218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.533456][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.564818][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.572790][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.573209][ T4267] device veth0_macvtap entered promiscuous mode [ 77.590670][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.599010][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.610999][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.620158][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.628843][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.643022][ T4267] device veth1_macvtap entered promiscuous mode [ 77.693127][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.704518][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.716704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.725425][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.725443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.753805][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.767920][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.775902][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.786234][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.796749][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.807906][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.818937][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.829093][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.839742][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.857238][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.882237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.891308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.900438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.911920][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.924462][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.935330][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.945973][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.955972][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.966596][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.977071][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.987682][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.998812][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.026756][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.031417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.038006][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.057844][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.063498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.089301][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.104226][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.117495][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.129998][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.139457][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.164952][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.181451][ T4387] loop1: detected capacity change from 0 to 256 [ 78.186353][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.211686][ T4387] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.258356][ T4387] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 78.343008][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.345450][ T4387] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 78.367733][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.460093][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.512658][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.527358][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.547509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.679856][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.696657][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.727111][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.868470][ T4401] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 78.895330][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 78.902441][ T4401] device syzkaller1 entered promiscuous mode [ 78.908892][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 78.974699][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 78.974721][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 78.980928][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 79.111193][ T4410] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.174125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.224175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.232536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.240901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 79.249206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 79.257559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.349270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.374326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.382703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.390998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 80.327854][ T4433] loop1: detected capacity change from 0 to 136 [ 80.349862][ T4433] Attempt to read inode for relocated directory [ 80.632115][ T4442] loop1: detected capacity change from 0 to 512 [ 80.655368][ T4384] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.679836][ T4436] loop0: detected capacity change from 0 to 8192 [ 80.705308][ T4436] ======================================================= [ 80.705308][ T4436] WARNING: The mand mount option has been deprecated and [ 80.705308][ T4436] and is ignored by this kernel. Remove the mand [ 80.705308][ T4436] option from the mount to silence this warning. [ 80.705308][ T4436] ======================================================= [ 80.798265][ T4442] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.815370][ T4442] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.860383][ T4348] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 80.868781][ T4348] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 80.877085][ T4348] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 80.878515][ T4384] usb 3-1: config 0 has no interfaces? [ 80.885706][ T4348] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 80.898078][ T4348] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 80.910770][ T4348] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 80.947595][ T4449] netlink: 260 bytes leftover after parsing attributes in process `syz.4.20'. [ 80.977841][ T4384] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 81.009767][ T4384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.054289][ T4384] usb 3-1: Product: syz [ 81.058639][ T4384] usb 3-1: Manufacturer: syz [ 81.095212][ T4384] usb 3-1: SerialNumber: syz [ 81.153402][ T4384] usb 3-1: config 0 descriptor?? [ 81.157162][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 81.306238][ T7] cfg80211: failed to load regulatory.db [ 81.451314][ T4450] fido_id[4450]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.578703][ T4461] loop3: detected capacity change from 0 to 256 [ 81.592588][ T4461] exfat: Bad value for 'gid' [ 81.677312][ T4464] loop0: detected capacity change from 0 to 256 [ 83.309551][ T4428] device veth0_macvtap left promiscuous mode [ 83.504413][ T4325] usb 3-1: USB disconnect, device number 2 [ 83.928875][ T4479] loop1: detected capacity change from 0 to 1024 [ 83.936202][ T4479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.921586][ T4479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 85.052140][ T4485] process 'syz.0.30' launched './file0' with NULL argv: empty string added [ 85.162841][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 86.461266][ T4496] befs: (nbd3): No write support. Marking filesystem read-only [ 86.472355][ T52] block nbd3: Attempted send on invalid socket [ 86.479140][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.489528][ T4496] befs: (nbd3): unable to read superblock [ 86.768160][ T4498] fuse: Bad value for 'fd' [ 88.446325][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 89.244117][ T26] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.425565][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 72, setting to 64 [ 89.468903][ T26] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 89.478453][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.487287][ T26] usb 3-1: Product: syz [ 89.491656][ T26] usb 3-1: Manufacturer: syz [ 89.496544][ T26] usb 3-1: SerialNumber: syz [ 89.518170][ T26] usb 3-1: config 0 descriptor?? [ 89.608045][ T4528] loop3: detected capacity change from 0 to 2048 [ 89.678090][ T4528] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.786755][ T4278] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 89.895638][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 90.011332][ T4535] loop1: detected capacity change from 0 to 256 [ 90.023710][ T26] usb 3-1: USB disconnect, device number 3 [ 90.068084][ T4535] FAT-fs (loop1): Directory bread(block 64) failed [ 90.079733][ T4535] FAT-fs (loop1): Directory bread(block 65) failed [ 90.090425][ T4535] FAT-fs (loop1): Directory bread(block 66) failed [ 90.102211][ T4535] FAT-fs (loop1): Directory bread(block 67) failed [ 90.109990][ T4535] FAT-fs (loop1): Directory bread(block 68) failed [ 90.121108][ T4535] FAT-fs (loop1): Directory bread(block 69) failed [ 90.129777][ T4535] FAT-fs (loop1): Directory bread(block 70) failed [ 90.140193][ T4535] FAT-fs (loop1): Directory bread(block 71) failed [ 90.148053][ T4535] FAT-fs (loop1): Directory bread(block 72) failed [ 90.161462][ T4535] FAT-fs (loop1): Directory bread(block 73) failed [ 90.343034][ T4257] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.389966][ T4542] loop4: detected capacity change from 0 to 2048 [ 90.450507][ T4542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.469194][ T4543] loop1: detected capacity change from 0 to 4096 [ 90.534317][ T4257] usb 4-1: Using ep0 maxpacket: 8 [ 91.434552][ T4257] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 91.535877][ T4281] Bluetooth: hci4: command 0x0405 tx timeout [ 91.626358][ T4550] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 91.686213][ T4257] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 91.892058][ T4257] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.941388][ T4257] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.996331][ T4257] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.021391][ T4257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.073971][ T4543] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 92.163858][ T4543] ntfs3: loop1: Failed to load $Extend. [ 92.189908][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 92.286426][ T4257] usb 4-1: usb_control_msg returned -32 [ 92.292240][ T4257] usbtmc 4-1:16.0: can't read capabilities [ 92.316965][ T27] audit: type=1800 audit(1757818322.075:2): pid=4543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.49" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 92.363883][ T4559] loop7: detected capacity change from 0 to 16384 [ 92.614697][ T4562] loop7: detected capacity change from 16384 to 0 [ 92.678115][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 94.140584][ T4347] usb 4-1: USB disconnect, device number 2 [ 94.315863][ T4580] loop0: detected capacity change from 0 to 4096 [ 94.417405][ T4588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 94.418945][ T4580] NILFS (loop0): invalid segment: Checksum error in segment payload [ 94.434031][ T4588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 94.477181][ T4580] NILFS (loop0): trying rollback from an earlier position [ 94.492780][ T4587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 94.527537][ T4580] NILFS (loop0): recovery complete [ 94.556269][ T4593] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.443933][ C0] sched: RT throttling activated [ 97.823794][ T4614] loop4: detected capacity change from 0 to 256 [ 97.872200][ T4614] FAT-fs (loop4): Directory bread(block 64) failed [ 97.879920][ T4614] FAT-fs (loop4): Directory bread(block 65) failed [ 97.893290][ T4614] FAT-fs (loop4): Directory bread(block 66) failed [ 97.900417][ T4614] FAT-fs (loop4): Directory bread(block 67) failed [ 97.907762][ T4614] FAT-fs (loop4): Directory bread(block 68) failed [ 97.935668][ T4614] FAT-fs (loop4): Directory bread(block 69) failed [ 97.944128][ T4614] FAT-fs (loop4): Directory bread(block 70) failed [ 97.954072][ T4614] FAT-fs (loop4): Directory bread(block 71) failed [ 97.963253][ T4614] FAT-fs (loop4): Directory bread(block 72) failed [ 97.970437][ T4614] FAT-fs (loop4): Directory bread(block 73) failed [ 100.414038][ T4628] tmpfs: Unknown parameter 'usrquota' [ 102.036048][ T4645] genirq: Flags mismatch irq 10. 00000000 (aio_iiro_16) vs. 00000080 (virtio2) [ 102.054190][ T4646] loop2: detected capacity change from 0 to 512 [ 102.069317][ T4646] EXT4-fs: Ignoring removed nobh option [ 102.127214][ T4646] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 102.236923][ T4646] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 102.271863][ T4646] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 102.462562][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 104.680684][ T4667] loop2: detected capacity change from 0 to 262144 [ 104.731003][ T27] audit: type=1804 audit(1757818334.485:3): pid=4650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.81" name="file0" dev="ramfs" ino=35135 res=1 errno=0 [ 104.816865][ T4667] F2FS-fs (loop2): Found nat_bits in checkpoint [ 104.870715][ T4667] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.926777][ T4673] loop4: detected capacity change from 0 to 4096 [ 104.985747][ T4673] ntfs3: loop4: ino=3, Correct links count -> 2. [ 105.005574][ T27] audit: type=1800 audit(1757818334.765:4): pid=4667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.86" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 106.113631][ T4689] loop4: detected capacity change from 0 to 1024 [ 106.171428][ T4689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.211484][ T4689] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.288510][ T4689] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 106.328123][ T4689] System zones: 0-1, 3-36 [ 106.397602][ T4689] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.325112][ T4708] capability: warning: `syz.4.93' uses deprecated v2 capabilities in a way that may be insecure [ 108.562690][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 108.835719][ T4716] loop1: detected capacity change from 0 to 512 [ 108.888341][ T4716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.933500][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 108.995636][ T4716] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.363715][ T4726] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 109.408096][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 109.592415][ T4734] loop2: detected capacity change from 0 to 1024 [ 109.672444][ T4734] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.821688][ T4723] loop0: detected capacity change from 0 to 32768 [ 109.833250][ T4723] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.101 (4723) [ 109.914273][ T4723] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.944187][ T4723] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 109.973424][ T4723] BTRFS info (device loop0): enabling ssd optimizations [ 110.013828][ T4723] BTRFS info (device loop0): using spread ssd allocation scheme [ 110.027881][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 110.034235][ T4723] BTRFS info (device loop0): setting nodatacow, compression disabled [ 110.042348][ T4723] BTRFS info (device loop0): not using ssd optimizations [ 110.053976][ T126] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.073999][ T4723] BTRFS info (device loop0): not using spread ssd allocation scheme [ 110.097047][ T4723] BTRFS info (device loop0): max_inline at 0 [ 110.113331][ T4723] BTRFS info (device loop0): using free space tree [ 110.304010][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 110.313209][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.366198][ T126] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.398073][ T4752] Bluetooth: MGMT ver 1.22 [ 110.398979][ T126] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 110.420954][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.436740][ T126] usb 5-1: Product: syz [ 110.447273][ T126] usb 5-1: Manufacturer: syz [ 110.457649][ T126] usb 5-1: SerialNumber: syz [ 110.480662][ T126] usb 5-1: config 0 descriptor?? [ 110.710496][ T4736] loop1: detected capacity change from 0 to 40427 [ 110.733529][ T4736] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 110.752688][ T4736] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 110.810138][ T4736] F2FS-fs (loop1): invalid crc value [ 110.851291][ T4736] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.979264][ T4275] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.998703][ T4736] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 111.007171][ T4736] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.248601][ T4771] loop2: detected capacity change from 0 to 2048 [ 111.376670][ T4771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.415539][ T22] usb 5-1: USB disconnect, device number 2 [ 111.644819][ T4271] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 111.644876][ T4271] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 111.668755][ T4271] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 111.708900][ T4271] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 111.727595][ T4271] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 111.743972][ T4271] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 111.770248][ T4271] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 112.013951][ T4780] loop2: detected capacity change from 0 to 32768 [ 112.035478][ T4780] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.112 (4780) [ 112.051731][ T4780] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 112.061968][ T4780] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 112.071473][ T4780] BTRFS info (device loop2): enabling disk space caching [ 112.078624][ T4780] BTRFS info (device loop2): enabling auto defrag [ 112.085172][ T4780] BTRFS info (device loop2): doing ref verification [ 112.091787][ T4780] BTRFS info (device loop2): use no compression [ 112.098111][ T4780] BTRFS info (device loop2): force clearing of disk cache [ 112.105357][ T4780] BTRFS info (device loop2): disabling disk space caching [ 113.069704][ T4780] BTRFS info (device loop2): enabling ssd optimizations [ 113.079809][ T4780] BTRFS info (device loop2): rebuilding free space tree [ 113.123877][ T4780] BTRFS info (device loop2): disabling free space tree [ 113.130980][ T4780] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.142283][ T4780] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.275279][ T27] audit: type=1800 audit(1757818343.035:5): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.112" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 113.525988][ T4815] loop1: detected capacity change from 0 to 1024 [ 113.568497][ T4815] hfsplus: gid requires an argument [ 113.622822][ T4815] hfsplus: unable to parse mount options [ 113.671694][ T4266] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.743766][ T4815] Process accounting resumed [ 113.963819][ T4830] loop1: detected capacity change from 0 to 1024 [ 114.001790][ T4830] EXT4-fs: Ignoring removed bh option [ 114.028729][ T4830] EXT4-fs: inline encryption not supported [ 114.056277][ T4830] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 114.095125][ T4830] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.121: lblock 2 mapped to illegal pblock 2 (length 1) [ 114.163005][ T4836] loop2: detected capacity change from 0 to 128 [ 114.172402][ T4830] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 114.196773][ T4835] loop4: detected capacity change from 0 to 512 [ 114.223560][ T4830] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.121: lblock 0 mapped to illegal pblock 48 (length 1) [ 114.249713][ T4836] EXT4-fs: Ignoring removed nobh option [ 114.268594][ T4835] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.289866][ T4830] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 114.301740][ T4836] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.316991][ T4835] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.323539][ T4830] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.121: Failed to acquire dquot type 0 [ 114.338685][ T4836] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.349139][ T4830] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 114.390839][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 114.398952][ T4835] EXT4-fs (loop4): 1 truncate cleaned up [ 114.417735][ T4830] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.121: mark_inode_dirty error [ 114.455654][ T4835] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 114.485853][ T4830] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 114.525495][ T4830] EXT4-fs (loop1): 1 orphan inode deleted [ 114.531304][ T4830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.568873][ T4685] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 114.596748][ T27] audit: type=1800 audit(1757818344.355:6): pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.122" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 114.651430][ T4685] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 114.719449][ T4685] EXT4-fs error (device loop1): ext4_release_dquot:6852: comm kworker/u4:16: Failed to release dquot type 0 [ 114.751411][ T4844] loop0: detected capacity change from 0 to 1024 [ 114.779349][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 114.779426][ T4830] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 114.971655][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 115.049185][ T4844] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 115.067311][ T4844] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 115.900674][ T4844] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 116.341501][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 116.569167][ T4868] loop0: detected capacity change from 0 to 2048 [ 116.591053][ T4868] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.602739][ T4870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.133'. [ 116.793056][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 117.858897][ T4268] Bluetooth: hci5: command 0x1003 tx timeout [ 117.867069][ T4281] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 119.444267][ T4893] Falling back ldisc for ttynull. [ 119.599291][ T4773] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.712295][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 119.722240][ T4905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.143'. [ 119.784143][ T4773] usb 3-1: Using ep0 maxpacket: 8 [ 119.790779][ T4773] usb 3-1: config 0 has no interfaces? [ 119.808817][ T4773] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 119.824167][ T4773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 119.850611][ T4907] loop1: detected capacity change from 0 to 2048 [ 119.864061][ T4773] usb 3-1: Product: syz [ 119.868256][ T4773] usb 3-1: Manufacturer: syz [ 119.883156][ T4773] usb 3-1: SerialNumber: syz [ 119.902271][ T4773] usb 3-1: config 0 descriptor?? [ 119.913380][ T4911] loop3: detected capacity change from 0 to 2048 [ 119.923270][ T4907] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.927413][ T4913] loop0: detected capacity change from 0 to 256 [ 119.955010][ T4913] exfat: Deprecated parameter 'namecase' [ 119.978451][ T4913] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 120.007672][ T4911] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.200917][ T27] audit: type=1800 audit(1757818349.955:7): pid=4911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.146" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 120.231690][ T4773] usb 3-1: USB disconnect, device number 4 [ 120.241966][ T4911] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.146: bg 0: block 234: padding at end of block bitmap is not set [ 120.504112][ T4911] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 120.629992][ T4911] EXT4-fs (loop3): This should not happen!! Data will be lost [ 120.629992][ T4911] [ 120.682292][ T4911] EXT4-fs (loop3): Total free blocks count 0 [ 120.699205][ T4911] EXT4-fs (loop3): Free/Dirty block details [ 120.715740][ T4911] EXT4-fs (loop3): free_blocks=0 [ 120.775075][ T4911] EXT4-fs (loop3): dirty_blocks=16 [ 120.780263][ T4911] EXT4-fs (loop3): Block reservation details [ 120.806479][ T4911] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 120.874018][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 120.879972][ T4829] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.063975][ T4829] usb 5-1: Using ep0 maxpacket: 32 [ 121.091852][ T4829] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 122.242621][ T4934] loop2: detected capacity change from 0 to 1024 [ 122.249935][ T4934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.303415][ T4829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.368947][ T4829] usb 5-1: config 0 descriptor?? [ 122.398968][ T4829] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 122.439380][ T4936] loop1: detected capacity change from 0 to 256 [ 122.552056][ T4934] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 122.611673][ T4936] FAT-fs (loop1): Directory bread(block 64) failed [ 122.664766][ T4936] FAT-fs (loop1): Directory bread(block 65) failed [ 122.671413][ T4936] FAT-fs (loop1): Directory bread(block 66) failed [ 122.786249][ T4936] FAT-fs (loop1): Directory bread(block 67) failed [ 122.801414][ T4936] FAT-fs (loop1): Directory bread(block 68) failed [ 122.802976][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 122.808047][ T4936] FAT-fs (loop1): Directory bread(block 69) failed [ 122.821548][ T4936] FAT-fs (loop1): Directory bread(block 70) failed [ 122.829037][ T4936] FAT-fs (loop1): Directory bread(block 71) failed [ 122.835679][ T4936] FAT-fs (loop1): Directory bread(block 72) failed [ 122.842216][ T4936] FAT-fs (loop1): Directory bread(block 73) failed [ 122.966894][ T4947] kernel profiling enabled (shift: 17) [ 123.171569][ T4947] device gre2 entered promiscuous mode [ 123.351713][ T4257] kernel write not supported for file /amidi2 (pid: 4257 comm: kworker/0:3) [ 123.462782][ T4965] loop2: detected capacity change from 0 to 2048 [ 123.490952][ T4965] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.745852][ T4969] loop3: detected capacity change from 0 to 16 [ 123.782197][ T4969] erofs: (device loop3): mounted with root inode @ nid 36. [ 124.613156][ T4984] autofs4:pid:4984:autofs_fill_super: called with bogus options [ 124.678891][ T4829] gspca_vc032x: reg_w err -71 [ 124.753834][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.787984][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.837357][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.842824][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.904151][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.935040][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.940374][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.017073][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.067375][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.072722][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.145408][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.153333][ T27] audit: type=1326 audit(1757818354.905:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4987 comm="syz.2.169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f786f18eba9 code=0x0 [ 125.179859][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.180213][ T5000] loop0: detected capacity change from 0 to 64 [ 125.191099][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.197391][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.203158][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.218876][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.225681][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.231186][ T4829] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.241485][ T4829] gspca_vc032x: Unknown sensor... [ 125.247044][ T4829] vc032x: probe of 5-1:0.0 failed with error -22 [ 125.286959][ T4829] usb 5-1: USB disconnect, device number 3 [ 125.476115][ T5008] fuse: Unknown parameter 'bn³YùÃÇ™[ÊÝ;²bd0x0000000000000003' [ 125.504390][ T5010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.175'. [ 125.771321][ T5010] team0 (unregistering): Port device team_slave_0 removed [ 125.786005][ T4829] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.827015][ T5010] team0 (unregistering): Port device team_slave_1 removed [ 125.827410][ T5015] loop3: detected capacity change from 0 to 2048 [ 125.883632][ T5015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.984004][ T4829] usb 5-1: Using ep0 maxpacket: 32 [ 125.993170][ T4829] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.011399][ T27] audit: type=1800 audit(1757818355.705:9): pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.177" name="file1" dev="loop3" ino=1335 res=0 errno=0 [ 126.016113][ T5013] Zero length message leads to an empty skb [ 126.056036][ T4829] usb 5-1: config 0 has no interface number 0 [ 126.067271][ T4829] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 126.832329][ T5021] loop3: detected capacity change from 0 to 1024 [ 126.855440][ T4829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.864665][ T4829] usb 5-1: Product: syz [ 126.869003][ T4829] usb 5-1: Manufacturer: syz [ 126.873620][ T4829] usb 5-1: SerialNumber: syz [ 126.880162][ T4829] usb 5-1: config 0 descriptor?? [ 126.900677][ T4829] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 126.909642][ T4829] usb 5-1: selecting invalid altsetting 1 [ 126.915720][ T4829] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 126.927814][ T4829] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.938599][ T4829] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 126.947529][ T4829] usb 5-1: media controller created [ 126.952624][ T5021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 126.968794][ T4829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.997021][ T5021] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.025573][ T5030] loop2: detected capacity change from 0 to 16 [ 127.036221][ T5026] loop0: detected capacity change from 0 to 2048 [ 127.057774][ T5021] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.179: bg 0: block 480: padding at end of block bitmap is not set [ 127.073003][ T5030] erofs: (device loop2): mounted with root inode @ nid 36. [ 127.111742][ T5026] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.231438][ T5021] EXT4-fs (loop3): Remounting filesystem read-only [ 127.243739][ T5033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 127.398548][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 127.434142][ T5035] autofs4:pid:5035:autofs_fill_super: called with bogus options [ 127.970567][ T5037] loop1: detected capacity change from 0 to 256 [ 128.094226][ T4829] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 128.125190][ T4829] zl10353_read_register: readreg error (reg=127, ret==-110) [ 128.146044][ T4829] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 128.229439][ T4829] usb 5-1: USB disconnect, device number 4 [ 128.388173][ T5048] syz.2.189[5048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.388273][ T5048] syz.2.189[5048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.576424][ T4281] Bluetooth: hci4: link tx timeout [ 128.594262][ T4281] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.611932][ T4281] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 128.616620][ T5054] loop3: detected capacity change from 0 to 136 [ 128.697494][ T4388] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.415537][ T26] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 129.787628][ T26] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 129.807894][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.833963][ T26] usb 4-1: Product: syz [ 129.838176][ T26] usb 4-1: Manufacturer: syz [ 129.870098][ T26] usb 4-1: SerialNumber: syz [ 129.882225][ T5065] loop2: detected capacity change from 0 to 512 [ 129.884725][ T5066] loop1: detected capacity change from 0 to 1024 [ 129.900228][ T26] usb 4-1: config 0 descriptor?? [ 129.918102][ T5066] EXT4-fs: Ignoring removed bh option [ 129.985978][ T5065] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.196: bad orphan inode 11862016 [ 130.031404][ T5066] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.065231][ T5065] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.097144][ T5065] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.113037][ T26] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 130.170565][ T27] audit: type=1800 audit(1757818359.925:10): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.196" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 130.255899][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 130.295279][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 130.654370][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 130.718224][ T5091] loop0: detected capacity change from 0 to 128 [ 130.718529][ T5088] loop2: detected capacity change from 0 to 1024 [ 130.810459][ T5091] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 130.880720][ T5088] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.205: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 130.930238][ T5091] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.952989][ T5088] EXT4-fs (loop2): get root inode failed [ 130.959388][ T5088] EXT4-fs (loop2): mount failed [ 131.340285][ T26] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 131.630798][ T26] usb 4-1: USB disconnect, device number 3 [ 131.728077][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 131.996796][ T5108] tipc: Started in network mode [ 132.017241][ T5108] tipc: Node identity eee0aef8e3d, cluster identity 4711 [ 132.184207][ T5108] tipc: Enabled bearer , priority 0 [ 132.504456][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.510801][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.223317][ T4332] tipc: Node number set to 221294328 [ 135.210314][ T5108] tipc: Disabling bearer [ 135.403481][ T5117] loop4: detected capacity change from 0 to 32768 [ 135.436585][ T5117] (syz.4.215,5117,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.453554][ T5117] (syz.4.215,5117,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.502133][ T1042] block nbd2: Attempted send on invalid socket [ 135.508433][ T1042] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 135.518378][ T1042] block nbd2: Attempted send on invalid socket [ 135.527456][ T1042] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 135.537273][ T5119] Mount JFS Failure: -5 [ 135.666302][ T5117] JBD2: Ignoring recovery information on journal [ 135.828093][ T5135] loop1: detected capacity change from 0 to 1024 [ 135.847126][ T5135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.177817][ T5135] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.495006][ T5117] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 136.538050][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 137.797919][ T4267] ocfs2: Unmounting device (7,4) on (node local) [ 138.132834][ T5165] loop3: detected capacity change from 0 to 2048 [ 138.216872][ T5165] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.229047][ T5173] netlink: 64 bytes leftover after parsing attributes in process `syz.1.231'. [ 138.482018][ T5178] netlink: 72 bytes leftover after parsing attributes in process `syz.2.232'. [ 138.532079][ T5178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.232'. [ 138.572692][ T5179] netlink: set zone limit has 4 unknown bytes [ 138.622668][ T5178] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 138.663759][ T5181] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.234'. [ 138.693345][ T5184] loop4: detected capacity change from 0 to 64 [ 138.801599][ T5179] loop2: detected capacity change from 0 to 512 [ 138.872333][ T5187] loop0: detected capacity change from 0 to 16 [ 138.907121][ T5187] erofs: (device loop0): mounted with root inode @ nid 36. [ 139.054752][ T5114] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.221994][ T5194] autofs4:pid:5194:autofs_fill_super: called with bogus options [ 140.004391][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 140.273975][ T4827] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.466209][ T4827] usb 3-1: Using ep0 maxpacket: 16 [ 140.473852][ T4827] usb 3-1: unable to get BOS descriptor or descriptor too short [ 140.530026][ T4827] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 140.553964][ T4827] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 140.583990][ T4827] usb 3-1: config 13 has no interface number 0 [ 140.611114][ T4827] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 140.631825][ T4827] usb 3-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0 [ 140.655288][ T4827] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0 [ 140.677202][ T4827] usb 3-1: config 13 interface 50 has no altsetting 0 [ 140.717207][ T4827] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 140.734095][ T4827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.762434][ T4827] usb 3-1: Product: syz [ 140.771656][ T4827] usb 3-1: Manufacturer: syz [ 140.784060][ T4827] usb 3-1: SerialNumber: syz [ 140.792411][ T5203] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.052615][ T4827] usb 3-1: MIDIStreaming interface descriptor not found [ 141.127906][ T4827] usb 3-1: USB disconnect, device number 5 [ 141.196416][ T5240] loop1: detected capacity change from 0 to 128 [ 141.278643][ T5240] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.293774][ T5240] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.440148][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 141.478270][ T5241] udevd[5241]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.152849][ T5276] loop0: detected capacity change from 0 to 1024 [ 142.164867][ T5276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.509139][ T5276] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 142.821485][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 142.959345][ T5280] loop4: detected capacity change from 0 to 2048 [ 143.059781][ T5280] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.251873][ T5291] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 144.284040][ T4827] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 144.404749][ T5319] loop1: detected capacity change from 0 to 1024 [ 144.416438][ T5319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.701764][ T5319] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 144.971835][ T5314] loop2: detected capacity change from 0 to 8192 [ 145.069543][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 145.076845][ T5314] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.235932][ T4827] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.290115][ T4827] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 145.324944][ T4827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.332996][ T4827] usb 1-1: Product: syz [ 145.383985][ T4827] usb 1-1: Manufacturer: syz [ 145.419552][ T4827] usb 1-1: SerialNumber: syz [ 145.424142][ T5330] fuse: Bad value for 'fd' [ 145.654332][ T5333] loop2: detected capacity change from 0 to 1024 [ 145.664206][ T4827] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 145.714044][ T4469] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 145.874722][ T26] usb 1-1: USB disconnect, device number 2 [ 145.903594][ T26] usblp0: removed [ 145.906881][ T4469] usb 2-1: Using ep0 maxpacket: 8 [ 145.921891][ T4469] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.051147][ T4469] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.169658][ T4469] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 146.275207][ T4469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.367348][ T4469] usb 2-1: Product: syz [ 146.413153][ T4469] usb 2-1: Manufacturer: syz [ 146.495511][ T4469] usb 2-1: SerialNumber: syz [ 146.616516][ T4469] usb 2-1: config 0 descriptor?? [ 146.940659][ T4324] usb 2-1: USB disconnect, device number 2 [ 147.238057][ T5358] loop0: detected capacity change from 0 to 512 [ 147.259188][ T5355] fuse: Bad value for 'fd' [ 147.477636][ T5361] loop2: detected capacity change from 0 to 1024 [ 147.488642][ T5361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.116157][ T5361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.160466][ T5365] loop4: detected capacity change from 0 to 2048 [ 148.340574][ T5365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 148.351644][ T5376] loop0: detected capacity change from 0 to 128 [ 148.402292][ T27] audit: type=1800 audit(1757818378.155:11): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.300" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 148.435957][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 148.481537][ T5376] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 148.531293][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 148.550724][ T5376] FAT-fs (loop0): Filesystem has been set read-only [ 148.689814][ T5383] loop2: detected capacity change from 0 to 16 [ 148.849852][ T5383] erofs: (device loop2): mounted with root inode @ nid 36. [ 149.442240][ T5388] autofs4:pid:5388:autofs_fill_super: called with bogus options [ 149.921216][ T5390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.309'. [ 149.979831][ T5392] loop0: detected capacity change from 0 to 128 [ 150.019308][ T5392] EXT4-fs: Ignoring removed nobh option [ 150.080584][ T5392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 150.119684][ T5392] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.291080][ T4268] Bluetooth: hci4: link tx timeout [ 150.296405][ T4268] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.631271][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 151.331817][ T5417] loop4: detected capacity change from 0 to 16 [ 151.534544][ T5417] erofs: (device loop4): mounted with root inode @ nid 36. [ 151.839739][ T5426] autofs4:pid:5426:autofs_fill_super: called with bogus options [ 152.241150][ T5429] loop0: detected capacity change from 0 to 2048 [ 152.299518][ T5429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.164169][ T4257] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.316739][ T5452] loop0: detected capacity change from 0 to 512 [ 153.396172][ T4257] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 153.439936][ T4257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.449539][ T4257] usb 3-1: Product: syz [ 153.453736][ T4257] usb 3-1: Manufacturer: syz [ 153.465481][ T5452] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 153.474859][ T5452] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.739714][ T5452] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 154.131376][ T4257] usb 3-1: SerialNumber: syz [ 154.222437][ T4257] usb 3-1: config 0 descriptor?? [ 154.265627][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 154.470910][ T4257] usb 3-1: ignoring: probably an ADSL modem [ 154.478726][ T5461] loop1: detected capacity change from 0 to 16 [ 154.519636][ T5461] erofs: (device loop1): mounted with root inode @ nid 36. [ 154.540489][ T5463] syz.0.333 (5463): drop_caches: 0 [ 154.817713][ T27] audit: type=1326 audit(1757818384.575:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 154.902152][ T5476] autofs4:pid:5476:autofs_fill_super: called with bogus options [ 154.972709][ T27] audit: type=1326 audit(1757818384.575:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 155.190091][ T27] audit: type=1326 audit(1757818384.585:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 155.359787][ T27] audit: type=1326 audit(1757818384.585:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 155.476403][ T4257] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 155.489746][ T27] audit: type=1326 audit(1757818384.585:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 155.496497][ T4257] usb 3-1: USB disconnect, device number 6 [ 155.555228][ T5479] loop0: detected capacity change from 0 to 512 [ 155.595927][ T5479] EXT4-fs: Ignoring removed oldalloc option [ 155.630988][ T27] audit: type=1326 audit(1757818384.585:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 155.692899][ T27] audit: type=1326 audit(1757818384.585:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 155.711312][ T5479] EXT4-fs (loop0): 1 truncate cleaned up [ 155.715940][ T27] audit: type=1326 audit(1757818384.585:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 155.743354][ T5479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 155.745318][ T27] audit: type=1326 audit(1757818384.585:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 155.784395][ T27] audit: type=1326 audit(1757818384.585:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5468 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 155.846849][ T5482] loop1: detected capacity change from 0 to 4096 [ 155.878213][ T5488] loop4: detected capacity change from 0 to 1024 [ 155.897774][ T5482] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 155.905004][ T5488] EXT4-fs: Ignoring removed bh option [ 155.927060][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 156.022264][ T5488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.073517][ T5482] ntfs3: loop1: ino=5, "/" directory corrupted [ 156.189085][ T4271] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 156.234528][ T4271] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 156.245083][ T4271] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 156.274648][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 156.427103][ T5502] loop0: detected capacity change from 0 to 1024 [ 156.439160][ T5502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.775371][ T5502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 157.081989][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 157.182333][ T5511] loop2: detected capacity change from 0 to 16 [ 157.198704][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 157.213766][ T5511] erofs: (device loop2): mounted with root inode @ nid 36. [ 157.437155][ T5513] syz.0.351 (5513) used greatest stack depth: 17056 bytes left [ 158.057195][ T5527] loop0: detected capacity change from 0 to 128 [ 158.585277][ T5541] loop2: detected capacity change from 0 to 1024 [ 158.597044][ T5541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.878004][ T5541] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 159.152343][ T5548] loop1: detected capacity change from 0 to 256 [ 159.213600][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 159.254995][ T5548] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 159.459249][ T5559] loop0: detected capacity change from 0 to 16 [ 159.500985][ T5559] erofs: (device loop0): mounted with root inode @ nid 36. [ 159.670642][ T5563] loop4: detected capacity change from 0 to 512 [ 159.710481][ T5565] loop0: detected capacity change from 0 to 2048 [ 159.753484][ T5563] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.847058][ T5563] EXT4-fs (loop4): 1 truncate cleaned up [ 159.853154][ T5569] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.867990][ T5571] loop1: detected capacity change from 0 to 1024 [ 159.975020][ T5563] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 160.039525][ T5565] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=255 [ 160.509978][ T5565] Remounting filesystem read-only [ 160.548848][ T5565] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=255 [ 160.563839][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 160.563853][ T27] audit: type=1800 audit(1757818390.175:34): pid=5563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.372" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 160.635244][ T5565] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=255 [ 160.705037][ T5574] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=255 [ 160.724850][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 161.185562][ T5588] loop1: detected capacity change from 0 to 1024 [ 161.195968][ T5588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.456814][ T4268] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 161.466086][ T4268] Bluetooth: hci2: Injecting HCI hardware error event [ 161.477213][ T4268] Bluetooth: hci2: hardware error 0x00 [ 161.690414][ T5588] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 161.702215][ T4281] Bluetooth: hci3: hardware error 0xf4 [ 161.755789][ T5592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.941027][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 161.971585][ T5595] loop2: detected capacity change from 0 to 32768 [ 162.059896][ T5603] loop4: detected capacity change from 0 to 16 [ 162.101320][ T5595] XFS (loop2): Mounting V5 Filesystem [ 162.117042][ T5603] erofs: (device loop4): mounted with root inode @ nid 36. [ 162.250416][ T5595] XFS (loop2): Ending clean mount [ 162.352114][ T5613] loop1: detected capacity change from 0 to 64 [ 162.596115][ T4266] XFS (loop2): Unmounting Filesystem [ 163.544139][ T4268] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 163.622203][ T5632] loop0: detected capacity change from 0 to 1024 [ 163.635789][ T5632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.645904][ T4332] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 163.774037][ T4281] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 163.844009][ T4332] usb 2-1: Using ep0 maxpacket: 32 [ 163.856851][ T4332] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 163.874861][ T4332] usb 2-1: config 0 has no interface number 0 [ 163.968905][ T4332] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 164.058256][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.137070][ T5632] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 164.163984][ T4332] usb 2-1: Product: syz [ 164.168361][ T4332] usb 2-1: Manufacturer: syz [ 164.173198][ T4332] usb 2-1: SerialNumber: syz [ 164.208873][ T4332] usb 2-1: config 0 descriptor?? [ 164.252877][ T4332] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 164.378266][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 164.447403][ T4332] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 164.517181][ T4332] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 164.648128][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 164.752205][ T5652] loop0: detected capacity change from 0 to 16 [ 164.773063][ T5652] erofs: (device loop0): mounted with root inode @ nid 36. [ 164.849100][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 164.864369][ T4332] usb 2-1: USB disconnect, device number 3 [ 164.983725][ T4332] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 165.130798][ T4332] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 165.443564][ T4332] quatech2 2-1:0.51: device disconnected [ 165.769402][ T5665] loop2: detected capacity change from 0 to 764 [ 166.226739][ T5676] loop1: detected capacity change from 0 to 1024 [ 166.234013][ T5676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.990687][ T5676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.056522][ T5686] loop0: detected capacity change from 0 to 136 [ 167.226175][ T5686] Attempt to read inode for relocated directory [ 167.241312][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 168.268376][ T5703] loop4: detected capacity change from 0 to 2048 [ 168.342707][ T5703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.928598][ T5729] loop4: detected capacity change from 0 to 1024 [ 168.935880][ T5729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.094305][ T4281] Bluetooth: hci4: link tx timeout [ 170.100432][ T4281] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.349895][ T5729] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 170.434609][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 170.608274][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 170.613433][ T5740] loop1: detected capacity change from 0 to 16 [ 170.623982][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 170.639410][ T5740] erofs: (device loop1): mounted with root inode @ nid 36. [ 170.667749][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.689007][ T26] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.866105][ T26] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 170.880721][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.891733][ T5744] loop4: detected capacity change from 0 to 128 [ 171.272306][ T26] usb 1-1: Product: syz [ 171.311661][ T26] usb 1-1: Manufacturer: syz [ 171.564447][ T26] usb 1-1: SerialNumber: syz [ 171.578877][ T5744] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 171.594836][ T26] usb 1-1: config 0 descriptor?? [ 171.660165][ T5744] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.703293][ T26] usb 1-1: can't set config #0, error -71 [ 171.713642][ T26] usb 1-1: USB disconnect, device number 3 [ 171.736995][ T5741] loop2: detected capacity change from 0 to 8192 [ 171.897585][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 172.086451][ T5752] loop1: detected capacity change from 0 to 32768 [ 172.126937][ T5752] (syz.1.435,5752,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.140436][ T5752] (syz.1.435,5752,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.163596][ T5752] JBD2: Ignoring recovery information on journal [ 172.252040][ T5752] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 172.593419][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 172.644951][ T5774] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.440'. [ 173.061073][ T5773] loop2: detected capacity change from 0 to 4096 [ 173.208674][ T5773] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 173.731897][ T5773] ntfs3: loop2: ino=5, "/" directory corrupted [ 173.875329][ T4266] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 173.912618][ T4266] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 173.928667][ T4266] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 174.136634][ T5802] loop4: detected capacity change from 0 to 256 [ 174.469363][ T5817] input: syz1 as /devices/virtual/input/input7 [ 175.314803][ T27] audit: type=1326 audit(1757818405.075:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220478eba9 code=0x7ffc0000 [ 175.389846][ T5824] loop4: detected capacity change from 0 to 512 [ 175.397462][ T27] audit: type=1326 audit(1757818405.075:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f220478eba9 code=0x7ffc0000 [ 175.420449][ T5824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.430278][ T27] audit: type=1326 audit(1757818405.075:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220478eba9 code=0x7ffc0000 [ 175.463784][ T27] audit: type=1326 audit(1757818405.075:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f220478eba9 code=0x7ffc0000 [ 175.486598][ T27] audit: type=1326 audit(1757818405.075:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220478eba9 code=0x7ffc0000 [ 175.516715][ T27] audit: type=1326 audit(1757818405.075:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f220478eba9 code=0x7ffc0000 [ 175.554217][ T5824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 175.568381][ T5824] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.606382][ T27] audit: type=1326 audit(1757818405.075:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220478eba9 code=0x7ffc0000 [ 175.938481][ T27] audit: type=1326 audit(1757818405.075:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f220478eba9 code=0x7ffc0000 [ 176.230194][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 176.276261][ T27] audit: type=1326 audit(1757818405.075:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220478eba9 code=0x7ffc0000 [ 176.456270][ T27] audit: type=1326 audit(1757818405.075:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f220478eba9 code=0x7ffc0000 [ 176.804933][ T5845] KVM: debugfs: duplicate directory 5845-5 [ 177.197114][ T5864] input: syz1 as /devices/virtual/input/input8 [ 177.208976][ T5863] netlink: 64 bytes leftover after parsing attributes in process `syz.4.472'. [ 179.166307][ T5878] loop2: detected capacity change from 0 to 128 [ 179.173364][ T5878] EXT4-fs: Ignoring removed nobh option [ 179.179441][ T5876] misc userio: No port type given on /dev/userio [ 179.270868][ T5878] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 179.289302][ T5878] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.305721][ T5878] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 179.332755][ T5878] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 179.355547][ T5890] IPv6: Can't replace route, no match found [ 179.482900][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 179.731149][ T5900] loop2: detected capacity change from 0 to 2048 [ 179.790307][ T5900] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 180.011526][ T5910] input: syz1 as /devices/virtual/input/input9 [ 180.065987][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 183.106819][ T5949] loop0: detected capacity change from 0 to 2048 [ 183.249032][ T5949] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 184.389852][ T5958] befs: (nbd1): No write support. Marking filesystem read-only [ 184.404307][ T52] block nbd1: Attempted send on invalid socket [ 184.410787][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.421100][ T5958] befs: (nbd1): unable to read superblock [ 184.612988][ T5960] fuse: Bad value for 'fd' [ 184.778402][ T4275] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 185.960306][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 186.664080][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 186.754605][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 186.871067][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 72, setting to 64 [ 186.900177][ T26] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 186.902618][ T5892] Set syz1 is full, maxelem 65536 reached [ 186.918269][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.937466][ T26] usb 2-1: Product: syz [ 186.944126][ T26] usb 2-1: Manufacturer: syz [ 186.954135][ T26] usb 2-1: SerialNumber: syz [ 186.969672][ T26] usb 2-1: config 0 descriptor?? [ 187.374068][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 187.438207][ T4317] usb 2-1: USB disconnect, device number 4 [ 187.501027][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 187.594185][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 187.617176][ T26] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 187.646431][ T26] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 187.662036][ T26] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.707731][ T26] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.728631][ T26] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 187.740571][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.309634][ T26] usb 5-1: usb_control_msg returned -32 [ 188.318184][ T26] usbtmc 5-1:16.0: can't read capabilities [ 190.244756][ T6009] loop2: detected capacity change from 0 to 64 [ 190.314971][ T26] usb 5-1: USB disconnect, device number 5 [ 190.478771][ T6014] loop4: detected capacity change from 0 to 1024 [ 190.581010][ T6014] EXT4-fs: Ignoring removed bh option [ 190.599109][ T6014] EXT4-fs: inline encryption not supported [ 190.657616][ T6014] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 191.237869][ T6014] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.529: lblock 2 mapped to illegal pblock 2 (length 1) [ 191.274657][ T6014] __quota_error: 4 callbacks suppressed [ 191.274670][ T6014] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 191.357298][ T6014] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.529: lblock 0 mapped to illegal pblock 48 (length 1) [ 191.429433][ T6014] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 191.457736][ T6014] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.529: Failed to acquire dquot type 0 [ 191.472275][ T6027] loop1: detected capacity change from 0 to 2048 [ 191.490811][ T6014] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 191.501658][ T6014] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.529: mark_inode_dirty error [ 191.517203][ T6014] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 191.531340][ T6014] EXT4-fs (loop4): 1 orphan inode deleted [ 191.544328][ T4422] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.570217][ T6014] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.585827][ T4422] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 191.600544][ T4422] EXT4-fs error (device loop4): ext4_release_dquot:6852: comm kworker/u4:12: Failed to release dquot type 0 [ 191.647532][ T6027] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 191.769493][ T6014] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.529: lblock 0 mapped to illegal pblock 48 (length 1) [ 191.824364][ T6014] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 191.873315][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 192.056337][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 192.116074][ T6039] loop2: detected capacity change from 0 to 164 [ 192.685171][ C0] Unknown status report in ack skb [ 192.783519][ T6061] input: syz1 as /devices/virtual/input/input10 [ 193.941350][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.950797][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.827839][ T6063] netlink: 124 bytes leftover after parsing attributes in process `syz.2.547'. [ 195.093403][ T6070] loop4: detected capacity change from 0 to 512 [ 195.663928][ T6081] tmpfs: Unknown parameter 'usrquota' [ 196.015091][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 196.021833][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 196.754370][ T6084] loop1: detected capacity change from 0 to 32768 [ 196.772984][ T6084] syz.1.556: attempt to access beyond end of device [ 196.772984][ T6084] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=32768 [ 196.808601][ T6084] metapage_read_end_io: I/O error [ 196.841937][ T6084] read_mapping_page failed! [ 196.864315][ T6084] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 196.886738][ T6084] Mount JFS Failure: -5 [ 196.908113][ T6084] jfs_mount failed w/return code = -5 [ 197.212596][ T6107] loop1: detected capacity change from 0 to 2048 [ 197.286161][ T6107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.220614][ T6128] loop1: detected capacity change from 0 to 4096 [ 199.339671][ T6128] ntfs3: loop1: ino=3, Correct links count -> 2. [ 199.859080][ T6134] tmpfs: Unknown parameter 'usrquota' [ 200.088886][ T6147] loop0: detected capacity change from 0 to 256 [ 200.168995][ T6147] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xc0e7db9a, utbl_chksum : 0xe619d30d) [ 200.173104][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 200.238271][ T6147] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 200.306937][ T27] audit: type=1800 audit(1757818430.065:49): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.583" name="file2" dev="loop0" ino=1048608 res=0 errno=0 [ 200.327634][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.589180][ T6157] loop2: detected capacity change from 0 to 512 [ 200.687043][ T6157] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 200.703218][ T6157] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.085970][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 201.412842][ T6171] loop4: detected capacity change from 0 to 2048 [ 201.481617][ T6171] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.645256][ T6194] sctp: [Deprecated]: syz.3.600 (pid 6194) Use of int in max_burst socket option. [ 202.645256][ T6194] Use struct sctp_assoc_value instead [ 203.038645][ T6208] loop2: detected capacity change from 0 to 2048 [ 203.097188][ T6208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.313267][ T6218] loop4: detected capacity change from 0 to 128 [ 203.361505][ T6218] EXT4-fs: Ignoring removed nobh option [ 203.406443][ T6218] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 203.441680][ T6218] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.477720][ T6228] misc userio: Invalid payload size [ 203.494437][ T6228] misc userio: No port type given on /dev/userio [ 203.837809][ T6238] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 203.848416][ T6238] device lo entered promiscuous mode [ 203.888723][ T27] audit: type=1326 audit(1757818433.645:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 203.896952][ T6238] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.910833][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.959917][ T27] audit: type=1326 audit(1757818433.645:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 204.013966][ T27] audit: type=1326 audit(1757818433.645:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 204.094840][ T27] audit: type=1326 audit(1757818433.645:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 204.139312][ T27] audit: type=1326 audit(1757818433.645:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 204.161897][ T27] audit: type=1326 audit(1757818433.675:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 204.207970][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 204.410005][ T27] audit: type=1326 audit(1757818433.675:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 204.518885][ T27] audit: type=1326 audit(1757818433.675:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 204.611253][ T27] audit: type=1326 audit(1757818433.675:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb69338eba9 code=0x7ffc0000 [ 205.978328][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.639'. [ 206.171739][ T6293] loop1: detected capacity change from 0 to 2048 [ 206.209932][ T6293] NILFS (loop1): invalid segment: Magic number mismatch [ 206.224927][ T6293] NILFS (loop1): trying rollback from an earlier position [ 206.272881][ T6293] NILFS (loop1): recovery complete [ 206.291706][ T6300] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.594085][ T6305] loop4: detected capacity change from 0 to 4096 [ 206.608611][ T6309] loop1: detected capacity change from 0 to 1024 [ 206.637409][ T6309] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 206.666494][ T6309] EXT4-fs (loop1): invalid journal inode [ 206.673512][ T6312] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.689796][ T6309] EXT4-fs (loop1): can't get journal size [ 206.698833][ T6309] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #2: comm syz.1.648: blocks 48-48 from inode overlap system zone [ 206.713359][ T6309] EXT4-fs (loop1): failed to initialize system zone (-117) [ 206.744672][ T6309] EXT4-fs (loop1): mount failed [ 207.130868][ T6327] misc userio: Invalid payload size [ 207.194597][ T6330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.285615][ T6334] netlink: 156 bytes leftover after parsing attributes in process `syz.0.659'. [ 207.571319][ T6348] loop2: detected capacity change from 0 to 1024 [ 207.651869][ T6348] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.663097][ T6348] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.710537][ T6348] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 207.729261][ T6348] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 207.754134][ T6348] EXT4-fs (loop2): This should not happen!! Data will be lost [ 207.754134][ T6348] [ 207.766525][ T6348] EXT4-fs (loop2): Total free blocks count 0 [ 207.772546][ T6348] EXT4-fs (loop2): Free/Dirty block details [ 207.789933][ T6348] EXT4-fs (loop2): free_blocks=4293918720 [ 207.796280][ T6348] EXT4-fs (loop2): dirty_blocks=96 [ 207.801788][ T6348] EXT4-fs (loop2): Block reservation details [ 207.808549][ T6348] EXT4-fs (loop2): i_reserved_data_blocks=7 [ 207.817071][ T6356] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 3: comm syz.2.666: lblock 3 mapped to illegal pblock 3 (length 3) [ 207.886878][ T6356] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 207.895198][ T6361] misc userio: Invalid payload size [ 207.957316][ T4365] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 208.076241][ T6368] loop2: detected capacity change from 0 to 256 [ 208.091926][ T6368] exfat: Deprecated parameter 'namecase' [ 208.123077][ T6368] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 208.301578][ T6376] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 208.513290][ T6380] device gre1 entered promiscuous mode [ 208.714427][ T6391] misc userio: Invalid payload size [ 208.841695][ T6395] loop4: detected capacity change from 0 to 1024 [ 208.892703][ T6392] loop1: detected capacity change from 0 to 4096 [ 209.010412][ T6392] NILFS (loop1): invalid segment: Checksum error in segment payload [ 209.066730][ T6392] NILFS (loop1): trying rollback from an earlier position [ 209.101005][ T9] hfsplus: b-tree write err: -5, ino 4 [ 209.141276][ T6392] NILFS (loop1): recovery complete [ 209.219135][ T6404] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.263594][ T6405] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 209.611209][ T6421] tmpfs: Unknown parameter 'usrquota' [ 209.768456][ T6423] loop2: detected capacity change from 0 to 2048 [ 209.815186][ T6423] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 209.830875][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 209.830887][ T27] audit: type=1800 audit(1757818439.585:61): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.700" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 209.868875][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 210.122993][ T6441] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 210.533141][ T6451] loop0: detected capacity change from 0 to 4096 [ 210.632815][ T6451] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 210.725776][ T6451] fs-verity: sha512 using implementation "sha512-avx2" [ 210.792619][ T6470] loop4: detected capacity change from 0 to 256 [ 210.841092][ T6470] FAT-fs (loop4): Directory bread(block 64) failed [ 210.852819][ T6470] FAT-fs (loop4): Directory bread(block 65) failed [ 210.889076][ T6470] FAT-fs (loop4): Directory bread(block 66) failed [ 210.912747][ T6470] FAT-fs (loop4): Directory bread(block 67) failed [ 210.919839][ T4324] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 210.959514][ T6470] FAT-fs (loop4): Directory bread(block 68) failed [ 210.969436][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 210.975228][ T6470] FAT-fs (loop4): Directory bread(block 69) failed [ 210.980648][ T6470] FAT-fs (loop4): Directory bread(block 70) failed [ 211.000011][ T6470] FAT-fs (loop4): Directory bread(block 71) failed [ 211.021159][ T6470] FAT-fs (loop4): Directory bread(block 72) failed [ 211.045480][ T6470] FAT-fs (loop4): Directory bread(block 73) failed [ 211.116926][ T4324] usb 3-1: Using ep0 maxpacket: 8 [ 211.125353][ T4324] usb 3-1: config 0 has no interfaces? [ 211.130860][ T4324] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 211.168077][ T6470] syz.4.722: attempt to access beyond end of device [ 211.168077][ T6470] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 211.183012][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.198860][ T4324] usb 3-1: config 0 descriptor?? [ 211.208306][ T6470] syz.4.722: attempt to access beyond end of device [ 211.208306][ T6470] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 211.242888][ T27] audit: type=1800 audit(1757818440.995:62): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.722" name="/" dev="loop4" ino=1048609 res=0 errno=0 [ 211.410272][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.432627][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.443682][ T4268] Bluetooth: hci0: adv larger than maximum supported [ 211.443748][ T4268] Bluetooth: hci0: Malformed LE Event: 0x0d [ 211.444679][ T4324] usb 3-1: USB disconnect, device number 7 [ 211.726073][ T6494] loop4: detected capacity change from 0 to 2048 [ 211.766139][ T6494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 211.942806][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 212.376640][ T6521] loop0: detected capacity change from 0 to 512 [ 212.468776][ T6521] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.747: bad orphan inode 11862016 [ 212.548746][ T6521] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 212.562048][ T6530] device syzkaller0 entered promiscuous mode [ 212.604115][ T6521] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.638268][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 212.687829][ T27] audit: type=1800 audit(1757818442.445:63): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.747" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 212.713629][ T6521] [ 212.716006][ T6521] ====================================================== [ 212.723047][ T6521] WARNING: possible circular locking dependency detected [ 212.730080][ T6521] syzkaller #0 Not tainted [ 212.734502][ T6521] ------------------------------------------------------ [ 212.741536][ T6521] syz.0.747/6521 is trying to acquire lock: [ 212.747443][ T6521] ffff8880551ea7a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 212.756369][ T6521] [ 212.756369][ T6521] but task is already holding lock: [ 212.763747][ T6521] ffff88805502a0a0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x903/0x1b60 [ 212.773279][ T6521] [ 212.773279][ T6521] which lock already depends on the new lock. [ 212.773279][ T6521] [ 212.783695][ T6521] [ 212.783695][ T6521] the existing dependency chain (in reverse order) is: [ 212.792719][ T6521] [ 212.792719][ T6521] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 212.800579][ T6521] down_write+0x36/0x60 [ 212.805284][ T6521] ext4_map_blocks+0x903/0x1b60 [ 212.810690][ T6521] ext4_getblk+0x1ab/0x6d0 [ 212.815656][ T6521] ext4_bread+0x26/0x170 [ 212.820448][ T6521] ext4_quota_write+0x230/0x570 [ 212.825840][ T6521] find_free_dqentry+0x673/0xc20 [ 212.831323][ T6521] do_insert_tree+0x70d/0x1040 [ 212.836641][ T6521] do_insert_tree+0x9ae/0x1040 [ 212.841966][ T6521] do_insert_tree+0x9ae/0x1040 [ 212.847271][ T6521] do_insert_tree+0x9ae/0x1040 [ 212.852576][ T6521] qtree_write_dquot+0x48d/0x5b0 [ 212.858059][ T6521] v2_write_dquot+0x108/0x190 [ 212.863274][ T6521] dquot_acquire+0x2d5/0x520 [ 212.868399][ T6521] ext4_acquire_dquot+0x2d9/0x4a0 [ 212.873962][ T6521] dqget+0x778/0xeb0 [ 212.878389][ T6521] __dquot_initialize+0x328/0xcb0 [ 212.883950][ T6521] ext4_file_open+0x2cb/0x6a0 [ 212.889196][ T6521] do_dentry_open+0x7e9/0x10d0 [ 212.894508][ T6521] path_openat+0x25c6/0x2e70 [ 212.899641][ T6521] do_filp_open+0x1c1/0x3c0 [ 212.904688][ T6521] do_sys_openat2+0x142/0x490 [ 212.909907][ T6521] __x64_sys_openat+0x135/0x160 [ 212.915290][ T6521] do_syscall_64+0x4c/0xa0 [ 212.920230][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.926659][ T6521] [ 212.926659][ T6521] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 212.934744][ T6521] down_read+0x42/0x2d0 [ 212.939427][ T6521] v2_read_dquot+0x4a/0x110 [ 212.944449][ T6521] dquot_acquire+0x152/0x520 [ 212.949561][ T6521] ext4_acquire_dquot+0x2d9/0x4a0 [ 212.955107][ T6521] dqget+0x778/0xeb0 [ 212.959522][ T6521] __dquot_initialize+0x328/0xcb0 [ 212.965070][ T6521] ext4_file_open+0x2cb/0x6a0 [ 212.970274][ T6521] do_dentry_open+0x7e9/0x10d0 [ 212.975563][ T6521] path_openat+0x25c6/0x2e70 [ 212.980684][ T6521] do_filp_open+0x1c1/0x3c0 [ 212.985707][ T6521] do_sys_openat2+0x142/0x490 [ 212.990913][ T6521] __x64_sys_openat+0x135/0x160 [ 212.996290][ T6521] do_syscall_64+0x4c/0xa0 [ 213.001246][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.007671][ T6521] [ 213.007671][ T6521] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 213.015317][ T6521] __lock_acquire+0x2cf8/0x7c50 [ 213.020697][ T6521] lock_acquire+0x1b4/0x490 [ 213.025728][ T6521] __mutex_lock+0x120/0xaf0 [ 213.030754][ T6521] dquot_commit+0x5a/0x410 [ 213.035691][ T6521] ext4_write_dquot+0x1f0/0x360 [ 213.041065][ T6521] mark_all_dquot_dirty+0xf9/0x400 [ 213.046731][ T6521] __dquot_alloc_space+0x5fc/0xe60 [ 213.052361][ T6521] ext4_mb_new_blocks+0xf74/0x4720 [ 213.058005][ T6521] ext4_ext_map_blocks+0x143c/0x66d0 [ 213.063814][ T6521] ext4_map_blocks+0x9d1/0x1b60 [ 213.069229][ T6521] ext4_iomap_begin+0x7d2/0xae0 [ 213.074606][ T6521] iomap_iter+0x6c6/0x1040 [ 213.079544][ T6521] __iomap_dio_rw+0xcba/0x1dd0 [ 213.084844][ T6521] iomap_dio_rw+0x41/0xa0 [ 213.089698][ T6521] ext4_file_write_iter+0x1262/0x16e0 [ 213.095590][ T6521] do_iter_write+0x62d/0xaf0 [ 213.100705][ T6521] do_pwritev+0x201/0x340 [ 213.105563][ T6521] do_syscall_64+0x4c/0xa0 [ 213.110500][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.116924][ T6521] [ 213.116924][ T6521] other info that might help us debug this: [ 213.116924][ T6521] [ 213.127146][ T6521] Chain exists of: [ 213.127146][ T6521] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 213.127146][ T6521] [ 213.140798][ T6521] Possible unsafe locking scenario: [ 213.140798][ T6521] [ 213.148241][ T6521] CPU0 CPU1 [ 213.153599][ T6521] ---- ---- [ 213.158953][ T6521] lock(&ei->i_data_sem/2); [ 213.163542][ T6521] lock(&s->s_dquot.dqio_sem); [ 213.170911][ T6521] lock(&ei->i_data_sem/2); [ 213.178027][ T6521] lock(&dquot->dq_lock); [ 213.182442][ T6521] [ 213.182442][ T6521] *** DEADLOCK *** [ 213.182442][ T6521] [ 213.190581][ T6521] 4 locks held by syz.0.747/6521: [ 213.195603][ T6521] #0: ffff888052d4c460 (sb_writers#4){.+.+}-{0:0}, at: do_pwritev+0x1ef/0x340 [ 213.204584][ T6521] #1: ffff88805502a218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_file_write_iter+0x64b/0x16e0 [ 213.215722][ T6521] #2: ffff88805502a0a0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x903/0x1b60 [ 213.225651][ T6521] #3: ffffffff8cc72e88 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x173/0xe60 [ 213.235217][ T6521] [ 213.235217][ T6521] stack backtrace: [ 213.241112][ T6521] CPU: 0 PID: 6521 Comm: syz.0.747 Not tainted syzkaller #0 [ 213.248394][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.258451][ T6521] Call Trace: [ 213.261731][ T6521] [ 213.264662][ T6521] dump_stack_lvl+0x168/0x22e [ 213.269347][ T6521] ? load_image+0x3b0/0x3b0 [ 213.273855][ T6521] ? show_regs_print_info+0x12/0x12 [ 213.279061][ T6521] ? print_circular_bug+0x12b/0x1a0 [ 213.284265][ T6521] check_noncircular+0x274/0x310 [ 213.289212][ T6521] ? add_chain_block+0x940/0x940 [ 213.294152][ T6521] ? lockdep_lock+0xdc/0x1e0 [ 213.298749][ T6521] ? mark_lock+0x94/0x320 [ 213.303090][ T6521] ? _find_first_zero_bit+0xcf/0x100 [ 213.308384][ T6521] __lock_acquire+0x2cf8/0x7c50 [ 213.313242][ T6521] ? add_chain_block+0x940/0x940 [ 213.318188][ T6521] ? lockdep_unlock+0x133/0x2d0 [ 213.323040][ T6521] ? lockdep_lock+0x1e0/0x1e0 [ 213.327717][ T6521] ? check_noncircular+0x16f/0x310 [ 213.332833][ T6521] ? verify_lock_unused+0x140/0x140 [ 213.338032][ T6521] ? mark_lock+0x94/0x320 [ 213.342361][ T6521] ? __lock_acquire+0x13c0/0x7c50 [ 213.347398][ T6521] lock_acquire+0x1b4/0x490 [ 213.351902][ T6521] ? dquot_commit+0x5a/0x410 [ 213.356490][ T6521] ? __might_sleep+0xd0/0xd0 [ 213.361085][ T6521] ? read_lock_is_recursive+0x10/0x10 [ 213.366465][ T6521] __mutex_lock+0x120/0xaf0 [ 213.370973][ T6521] ? dquot_commit+0x5a/0x410 [ 213.375574][ T6521] ? __might_sleep+0xd0/0xd0 [ 213.380173][ T6521] ? dquot_commit+0x5a/0x410 [ 213.384763][ T6521] ? mutex_lock_nested+0x10/0x10 [ 213.389707][ T6521] ? ext4_journal_check_start+0x17e/0x240 [ 213.395440][ T6521] dquot_commit+0x5a/0x410 [ 213.399857][ T6521] ext4_write_dquot+0x1f0/0x360 [ 213.404710][ T6521] mark_all_dquot_dirty+0xf9/0x400 [ 213.409824][ T6521] __dquot_alloc_space+0x5fc/0xe60 [ 213.414941][ T6521] ? _raw_spin_unlock+0x40/0x40 [ 213.419803][ T6521] ? __dquot_alloc_space+0x173/0xe60 [ 213.425094][ T6521] ext4_mb_new_blocks+0xf74/0x4720 [ 213.430211][ T6521] ? ext4_find_extent+0x367/0xe00 [ 213.435237][ T6521] ? rcu_is_watching+0x11/0xa0 [ 213.440007][ T6521] ? ext4_find_extent+0x367/0xe00 [ 213.445033][ T6521] ? __kmalloc+0xe1/0x240 [ 213.449368][ T6521] ? ext4_mb_pa_callback+0xd0/0xd0 [ 213.454484][ T6521] ? ext4_ext_check_overlap+0x15f/0x560 [ 213.460028][ T6521] ? ext4_inode_to_goal_block+0x313/0x450 [ 213.465753][ T6521] ext4_ext_map_blocks+0x143c/0x66d0 [ 213.471040][ T6521] ? __lock_acquire+0x13c0/0x7c50 [ 213.476082][ T6521] ? ext4_ext_release+0x10/0x10 [ 213.480947][ T6521] ? rwsem_write_trylock+0x12f/0x1b0 [ 213.486255][ T6521] ext4_map_blocks+0x9d1/0x1b60 [ 213.491113][ T6521] ? __might_sleep+0xd0/0xd0 [ 213.495720][ T6521] ? ext4_issue_zeroout+0x250/0x250 [ 213.500926][ T6521] ? ext4_journal_check_start+0x17e/0x240 [ 213.506666][ T6521] ext4_iomap_begin+0x7d2/0xae0 [ 213.511535][ T6521] ? ext4_alloc_da_blocks+0x2c0/0x2c0 [ 213.516927][ T6521] ? filemap_write_and_wait_range+0x141/0x1d0 [ 213.522998][ T6521] ? xas_next_entry+0x3d0/0x3d0 [ 213.527852][ T6521] ? ext4_alloc_da_blocks+0x2c0/0x2c0 [ 213.533237][ T6521] iomap_iter+0x6c6/0x1040 [ 213.537662][ T6521] ? blk_start_plug+0x94/0x110 [ 213.542441][ T6521] __iomap_dio_rw+0xcba/0x1dd0 [ 213.547259][ T6521] ? iomap_dio_complete_work+0x70/0x70 [ 213.552737][ T6521] ? __mark_inode_dirty+0x7f4/0xe90 [ 213.557960][ T6521] ? __mnt_drop_write_file+0xbc/0xf0 [ 213.563272][ T6521] ? ext4_fc_replay_link_internal+0x280/0x280 [ 213.569343][ T6521] ? ext4_journal_check_start+0x17e/0x240 [ 213.575070][ T6521] iomap_dio_rw+0x41/0xa0 [ 213.579407][ T6521] ? ext4_file_write_iter+0x9d1/0x16e0 [ 213.584872][ T6521] ext4_file_write_iter+0x1262/0x16e0 [ 213.590253][ T6521] ? ext4_file_write_iter+0x9d1/0x16e0 [ 213.595721][ T6521] ? ext4_file_read_iter+0x650/0x650 [ 213.601012][ T6521] ? end_current_label_crit_section+0x14b/0x170 [ 213.607350][ T6521] ? common_file_perm+0x171/0x1c0 [ 213.612389][ T6521] ? fsnotify_perm+0x5a/0x550 [ 213.617065][ T6521] do_iter_write+0x62d/0xaf0 [ 213.621659][ T6521] ? vfs_iter_write+0xa0/0xa0 [ 213.626335][ T6521] ? rcu_read_lock_any_held+0xb0/0x120 [ 213.631799][ T6521] do_pwritev+0x201/0x340 [ 213.636137][ T6521] ? do_preadv+0x330/0x330 [ 213.640576][ T6521] ? do_sys_openat2+0x1fe/0x490 [ 213.645435][ T6521] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 213.651432][ T6521] ? lock_chain_count+0x20/0x20 [ 213.656316][ T6521] ? lockdep_hardirqs_on+0x94/0x140 [ 213.661521][ T6521] ? __x64_sys_pwritev2+0xba/0x100 [ 213.666634][ T6521] do_syscall_64+0x4c/0xa0 [ 213.671060][ T6521] ? clear_bhb_loop+0x60/0xb0 [ 213.675741][ T6521] ? clear_bhb_loop+0x60/0xb0 [ 213.680418][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.686317][ T6521] RIP: 0033:0x7f1c8ff8eba9 [ 213.690751][ T6521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.710357][ T6521] RSP: 002b:00007f1c90d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 213.718767][ T6521] RAX: ffffffffffffffda RBX: 00007f1c901d5fa0 RCX: 00007f1c8ff8eba9 [ 213.726733][ T6521] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000004 [ 213.734698][ T6521] RBP: 00007f1c90011e19 R08: 0000000000000000 R09: 0000000000000003 [ 213.742668][ T6521] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000000 [ 213.750646][ T6521] R13: 00007f1c901d6038 R14: 00007f1c901d5fa0 R15: 00007ffccecbea88 [ 213.758635][ T6521] [ 213.828757][ T6547] loop2: detected capacity change from 0 to 1024 [ 213.840004][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 213.851034][ T6547] hfsplus: unable to parse mount options [ 216.733941][ T4282] Bluetooth: hci4: command 0x0406 tx timeout