last executing test programs: 51.070697921s ago: executing program 2 (id=257): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) recvmmsg(r0, 0x0, 0x0, 0x4ea, 0x0) 50.519716902s ago: executing program 2 (id=259): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff40bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) sigaltstack(&(0x7f0000000400)={&(0x7f0000000640)=""/75, 0x80000000, 0x4b}, 0x0) read(r2, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x7, 0x7, 0x6, 0x2, 0x3, 0x824b}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, r3, &(0x7f00000001c0)='./file0\x00') mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 8.993065576s ago: executing program 0 (id=343): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 8.547976784s ago: executing program 0 (id=345): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000020c0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 7.433267836s ago: executing program 1 (id=348): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r1 = io_uring_setup(0x3e21, &(0x7f0000000480)={0x0, 0xc2dd, 0x1880, 0x4, 0x4000347}) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x9) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20044000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x800) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0xc2d41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a0104000000000c0000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000230c0001400000000000000101500000000c0a010100000000000000000700fffc0900020073797a31000000000900010073797a300000000024000380200000800800034000000002140007800c000100636f756e746572"], 0x100}, 0x1, 0x0, 0x0, 0x4040854}, 0x0) close(r1) listen(r2, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r8 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r8, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x80008) 6.559901463s ago: executing program 0 (id=351): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x3, 0x21f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.swap.current\x00', 0x275a, 0x0) setxattr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6f73782e26d78a601b41f0a2a4"], 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 6.352878557s ago: executing program 0 (id=352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x1000e}], 0x1}}], 0x34000, 0x24005805) 5.66916277s ago: executing program 1 (id=353): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000040)=0x28) r1 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.684005839s ago: executing program 0 (id=354): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x1, 0x1503, &(0x7f0000000580)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0x0) keyctl$link(0x8, r0, r4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a44000dee32f6709025c000201089002090400000102"], &(0x7f0000000800)={0x0, 0x0, 0x12, 0x0, 0x1, [{0x0, 0x0}]}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 4.66134502s ago: executing program 4 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3.5949217s ago: executing program 1 (id=356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) close_range(r1, 0xffffffffffffffff, 0x0) 3.516039602s ago: executing program 3 (id=357): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000740204001c00000008000100", @ANYRES32, @ANYBLOB="0800040000000000080003"], 0x2c}}, 0x0) 3.504964192s ago: executing program 4 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6a}]}}, 0x0, 0x2a, 0x0, 0x1, 0x1}, 0x28) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@init_itable_val}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4ed, &(0x7f00000002c0)="$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") rename(&(0x7f0000000900)='./file1\x00', &(0x7f0000000940)='./file0\x00') syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00']) getpgrp(0x0) 3.257341327s ago: executing program 3 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$dmmidi(0x0, 0x2, 0x80081) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000000)={0x0, 0xe7, 0x4, 0x1, 0x8}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, r5) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0) ptrace$pokeuser(0x6, r4, 0x358, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000000)=0x10000) 2.700025648s ago: executing program 1 (id=360): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close_range(r1, 0xffffffffffffffff, 0x0) 2.097714449s ago: executing program 3 (id=361): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.swap.current\x00', 0x275a, 0x0) setxattr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6f73782e26d78a601b41f0a2a48d"], 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 2.047511s ago: executing program 1 (id=362): creat(0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a"], 0x38}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_open_dev$loop(0x0, 0x81, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2e40ab, &(0x7f0000000080)={[{@noswap}, {@inode32}]}) setns(0xffffffffffffffff, 0x80) 1.989277051s ago: executing program 3 (id=363): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x1000e}], 0x1}}], 0x34000, 0x24005805) 1.53704032s ago: executing program 3 (id=364): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000440)="cb4efbce1cd388a8eef1", 0xa}], 0x2}, 0x0) 1.51443279s ago: executing program 4 (id=365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r2) 1.488917211s ago: executing program 0 (id=366): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4003180000001821606cea"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.368026263s ago: executing program 3 (id=367): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010028bd07000000000000000000", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 529.62446ms ago: executing program 4 (id=368): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 441.717011ms ago: executing program 4 (id=369): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x6, 0x10001) 0s ago: executing program 4 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$dmmidi(0x0, 0x2, 0x80081) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000000)={0x0, 0xe7, 0x4, 0x1, 0x8}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, r5) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0) ptrace$pokeuser(0x6, r4, 0x358, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000000)=0x10000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. [ 81.222691][ T4256] cgroup: Unknown subsys name 'net' [ 81.384812][ T4256] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.946720][ T4256] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 84.972157][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.972421][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.988297][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.988524][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.996737][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.010168][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.011366][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.026515][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.034085][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.043381][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.054264][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.062135][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.068481][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.072495][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.086200][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.093997][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.102309][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.111527][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.119911][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.133802][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.142475][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.157720][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.166373][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.166432][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.182123][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.182162][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.197106][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.198514][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.212768][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.213712][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.727250][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 85.855753][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 85.880656][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 85.922411][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 85.947741][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 86.014386][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.021976][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.030871][ T4267] device bridge_slave_0 entered promiscuous mode [ 86.046640][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.054022][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.062754][ T4267] device bridge_slave_1 entered promiscuous mode [ 86.111424][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.118896][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.126939][ T4271] device bridge_slave_0 entered promiscuous mode [ 86.163070][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.170588][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.180467][ T4271] device bridge_slave_1 entered promiscuous mode [ 86.218548][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.258264][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.285330][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.303251][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.310577][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.319330][ T4278] device bridge_slave_0 entered promiscuous mode [ 86.345650][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.364476][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.372391][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.381526][ T4278] device bridge_slave_1 entered promiscuous mode [ 86.393105][ T4267] team0: Port device team_slave_0 added [ 86.422344][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.430204][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.439215][ T4266] device bridge_slave_0 entered promiscuous mode [ 86.457771][ T4267] team0: Port device team_slave_1 added [ 86.464441][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.471660][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.480649][ T4268] device bridge_slave_0 entered promiscuous mode [ 86.500657][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.508272][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.516470][ T4266] device bridge_slave_1 entered promiscuous mode [ 86.545814][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.553274][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.562014][ T4268] device bridge_slave_1 entered promiscuous mode [ 86.571611][ T4271] team0: Port device team_slave_0 added [ 86.589852][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.626023][ T4271] team0: Port device team_slave_1 added [ 86.643770][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.653970][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.661118][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.693214][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.728229][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.748585][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.755601][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.784610][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.799311][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.813364][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.837635][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.864145][ T4278] team0: Port device team_slave_0 added [ 86.885839][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.893785][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.923998][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.950444][ T4278] team0: Port device team_slave_1 added [ 86.989289][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.997169][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.024320][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.058092][ T4267] device hsr_slave_0 entered promiscuous mode [ 87.066454][ T4267] device hsr_slave_1 entered promiscuous mode [ 87.077925][ T4268] team0: Port device team_slave_0 added [ 87.091383][ T4266] team0: Port device team_slave_0 added [ 87.110170][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.118262][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.146020][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.171714][ T4268] team0: Port device team_slave_1 added [ 87.178450][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 87.178455][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 87.193932][ T4266] team0: Port device team_slave_1 added [ 87.221138][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.229608][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.257542][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 87.259757][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.265977][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 87.285285][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 87.312993][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.320169][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.347236][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.367869][ T4271] device hsr_slave_0 entered promiscuous mode [ 87.375037][ T4271] device hsr_slave_1 entered promiscuous mode [ 87.382103][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.390377][ T4271] Cannot create hsr debugfs directory [ 87.410215][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.417422][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.444108][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.462948][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.470086][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.496474][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.537771][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.545561][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.573029][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.614581][ T4266] device hsr_slave_0 entered promiscuous mode [ 87.623045][ T4266] device hsr_slave_1 entered promiscuous mode [ 87.630581][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.638585][ T4266] Cannot create hsr debugfs directory [ 87.701455][ T4278] device hsr_slave_0 entered promiscuous mode [ 87.709413][ T4278] device hsr_slave_1 entered promiscuous mode [ 87.716075][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.724312][ T4278] Cannot create hsr debugfs directory [ 87.848287][ T4268] device hsr_slave_0 entered promiscuous mode [ 87.856217][ T4268] device hsr_slave_1 entered promiscuous mode [ 87.863666][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.872017][ T4268] Cannot create hsr debugfs directory [ 88.215931][ T4267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.259517][ T4267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.282936][ T4267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.316320][ T4267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.343166][ T4271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.385422][ T4271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.405775][ T4271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.416629][ T4271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.521903][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.552027][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.566528][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.582541][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.611793][ T4278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.643049][ T4278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.653876][ T4278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.686832][ T4278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.734531][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.746507][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.765399][ T4268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.775660][ T4268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.794240][ T4268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.819136][ T4268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.839613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.849726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.861991][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.883820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.893762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.912570][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.926941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.936878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.947352][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.954896][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.001459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.010346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.022208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.032277][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.039595][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.050191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.059215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.068625][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.076333][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.084673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.097985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.114723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.171183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.183318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.193676][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.201478][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.211779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.222484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.232968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.248239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.257449][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 89.257567][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 89.276131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.293181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.326133][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.337358][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 89.343571][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 89.350004][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 89.375874][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.390714][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.401878][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.438722][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.451458][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.479775][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.491074][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.501081][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.510039][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.525111][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.534039][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.543922][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.595821][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.632314][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.644919][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.664988][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.682598][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.712485][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.723865][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.734646][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.771780][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.811848][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.831469][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.854032][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.866101][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.886433][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.894112][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.927316][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.977524][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.073770][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.089755][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.109506][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.128756][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.136207][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.167730][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.200653][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.211750][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.219153][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.230639][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.242638][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.255989][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.263614][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.298609][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.320214][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.339025][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.359081][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.435784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.454021][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.465516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.476822][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.490064][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.499904][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.507146][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.516017][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.532415][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.542836][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.616957][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.638851][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.659450][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.675686][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.683337][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.705245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.728461][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.739142][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.750130][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.761829][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.804245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.822143][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.855132][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.932593][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.974762][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.003269][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.012133][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.025775][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.033678][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.044177][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.058071][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.083458][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.094483][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.115118][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.126409][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.143246][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.152609][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.169488][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.198015][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.222235][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.232627][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.245907][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.262290][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.274325][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.308142][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.342642][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 91.342652][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 91.353772][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.371258][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.388992][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.410396][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.419214][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 91.419239][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 91.425279][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 91.448968][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.458726][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.469021][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.480209][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.502641][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.581665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.607515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.624986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.644133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.714844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.779201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.810509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.824477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.858950][ T4267] device veth0_vlan entered promiscuous mode [ 91.873451][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.891478][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.909036][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.924039][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.940328][ T4271] device veth0_vlan entered promiscuous mode [ 91.960480][ T4267] device veth1_vlan entered promiscuous mode [ 91.985663][ T4271] device veth1_vlan entered promiscuous mode [ 92.006092][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.016168][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.025889][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.033734][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.041642][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.049582][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.073835][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.118063][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.129169][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.140513][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.179231][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.199620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.209495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.221239][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.238541][ T4271] device veth0_macvtap entered promiscuous mode [ 92.253687][ T4267] device veth0_macvtap entered promiscuous mode [ 92.276520][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.296358][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.318371][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.327571][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.336534][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.348302][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.365399][ T4271] device veth1_macvtap entered promiscuous mode [ 92.373626][ T4266] device veth0_vlan entered promiscuous mode [ 92.402130][ T4267] device veth1_macvtap entered promiscuous mode [ 92.428638][ T4266] device veth1_vlan entered promiscuous mode [ 92.441222][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.453114][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.464064][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.474448][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.485071][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.503108][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.521527][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.536532][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.551595][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.567563][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.575665][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.588583][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.600150][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.612082][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.623085][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.641262][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.661519][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.673417][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.688944][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.696592][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.707748][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.717353][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.726649][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.755675][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.765371][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.775479][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.786761][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.810880][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.820316][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.833407][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.851582][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.870298][ T127] cfg80211: failed to load regulatory.db [ 92.897533][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.914550][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.965244][ T4266] device veth0_macvtap entered promiscuous mode [ 92.983432][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.993734][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.004489][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.055875][ T4266] device veth1_macvtap entered promiscuous mode [ 93.072083][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.094468][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.112205][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.122038][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.155838][ T4278] device veth0_vlan entered promiscuous mode [ 93.167343][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.176640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.193913][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.208960][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.220355][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.231460][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.244506][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.287296][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.296339][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.311657][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.324281][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.336011][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.347210][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.359467][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.372371][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.382593][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.392061][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.401278][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.416449][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.425735][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 93.426057][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.437164][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 93.453877][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.465045][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.474657][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.483386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.493351][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.501279][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 93.508375][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 93.511116][ T4278] device veth1_vlan entered promiscuous mode [ 93.514565][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 93.543032][ T4268] device veth0_vlan entered promiscuous mode [ 93.552162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.560638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.569950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.613523][ T4268] device veth1_vlan entered promiscuous mode [ 93.691729][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.701031][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.711747][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.730236][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.739298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.748018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.756357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.766498][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.779724][ T4278] device veth0_macvtap entered promiscuous mode [ 93.792625][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.809068][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.821100][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.824352][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.831189][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.845934][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.864139][ T4278] device veth1_macvtap entered promiscuous mode [ 93.885247][ T4268] device veth0_macvtap entered promiscuous mode [ 93.923929][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.939820][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.970195][ T4268] device veth1_macvtap entered promiscuous mode [ 93.997791][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.014995][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.026419][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.058592][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.072202][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.091815][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.104145][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.113525][ T4376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.124085][ T4376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.135182][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.137475][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.160828][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.171865][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.185044][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.188552][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.208365][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.225551][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.236388][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.246354][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.257526][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.278773][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.308309][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.330233][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.340688][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.366452][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.382598][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.397941][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.409197][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.419864][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.431247][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.441804][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.452947][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.469474][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.481864][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.524790][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.541260][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.570552][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.768356][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.783963][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.806488][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.821259][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.832695][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.844308][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.855787][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.867526][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.884149][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.895863][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.919738][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.943371][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.957697][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.974976][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.997210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.029206][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.072137][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.091660][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.106561][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.116306][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.387837][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.589667][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.712278][ T4399] loop0: detected capacity change from 0 to 1024 [ 96.373040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 96.530379][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.753714][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.766967][ T41] hfsplus: b-tree write err: -5, ino 4 [ 96.788968][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.825396][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.855743][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.884541][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.936010][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.978973][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.059793][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.092561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.565330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.574138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.585191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.601413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 97.609890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 98.120704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 98.129202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 98.137607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 98.146166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 99.092793][ T4421] loop0: detected capacity change from 0 to 128 [ 99.158931][ T4421] ======================================================= [ 99.158931][ T4421] WARNING: The mand mount option has been deprecated and [ 99.158931][ T4421] and is ignored by this kernel. Remove the mand [ 99.158931][ T4421] option from the mount to silence this warning. [ 99.158931][ T4421] ======================================================= [ 99.277708][ T4421] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 99.317653][ T4421] hpfs: filesystem error: improperly stopped [ 99.334243][ T4421] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 99.349015][ T4421] hpfs: You really don't want any checks? You are crazy... [ 99.367572][ T4421] hpfs: hpfs_map_sector(): read error [ 99.373393][ T4421] hpfs: code page support is disabled [ 99.388021][ T4421] hpfs: hpfs_map_4sectors(): unaligned read [ 99.415023][ T4421] hpfs: hpfs_map_4sectors(): unaligned read [ 99.437577][ T4421] hpfs: filesystem error: unable to find root dir [ 99.514114][ T4412] loop3: detected capacity change from 0 to 32768 [ 99.754883][ T4428] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 101.542072][ T4412] XFS (loop3): Mounting V5 Filesystem [ 101.886001][ T4412] XFS (loop3): log mount failed [ 102.632265][ T4438] loop4: detected capacity change from 0 to 128 [ 102.775128][ T4438] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.796432][ T4438] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.116201][ T4447] loop3: detected capacity change from 0 to 4096 [ 103.166069][ T4447] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 103.351505][ T4447] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 103.709053][ T4452] loop0: detected capacity change from 0 to 32768 [ 103.722925][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.998531][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 104.036375][ T22] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 104.051429][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.061047][ T22] usb 3-1: Product: syz [ 104.065400][ T22] usb 3-1: Manufacturer: syz [ 104.071498][ T22] usb 3-1: SerialNumber: syz [ 104.103089][ T22] usb 3-1: config 0 descriptor?? [ 104.261306][ T4452] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.17 (4452) [ 104.293436][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 104.394034][ T4452] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.404856][ T4452] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 104.413889][ T4452] BTRFS info (device loop0): using free space tree [ 104.458797][ T22] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.209309][ T4468] loop1: detected capacity change from 0 to 1024 [ 106.567031][ C1] sched: RT throttling activated [ 106.605635][ T4452] BTRFS error (device loop0): open_ctree failed: -12 [ 106.755646][ T4468] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 107.598527][ T4466] EXT4-fs (loop1): shut down requested (2) [ 108.047881][ T4440] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4440) [ 109.584686][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 109.600707][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 109.628628][ T22] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 109.658805][ T4491] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 109.983849][ T22] usb 3-1: USB disconnect, device number 2 [ 110.138666][ T2165] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.331260][ T2165] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 110.343084][ T2165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.352170][ T2165] usb 5-1: Product: syz [ 110.356399][ T2165] usb 5-1: Manufacturer: syz [ 110.361440][ T2165] usb 5-1: SerialNumber: syz [ 110.416227][ T2165] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 110.535227][ T2165] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 110.548144][ T4505] process 'syz.3.26' launched './file1' with NULL argv: empty string added [ 111.064399][ T4348] usb 5-1: USB disconnect, device number 2 [ 111.940091][ T2165] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 111.949748][ T2165] ath9k_htc: Failed to initialize the device [ 111.957928][ T4348] usb 5-1: ath9k_htc: USB layer deinitialized [ 112.128405][ T4522] loop1: detected capacity change from 0 to 256 [ 112.143193][ T4523] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 112.168094][ T4522] exfat: Deprecated parameter 'utf8' [ 112.173500][ T4522] exfat: Deprecated parameter 'namecase' [ 112.222397][ T4522] exfat: Deprecated parameter 'utf8' [ 112.297652][ T4522] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 112.650682][ T4335] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.834879][ T4528] loop2: detected capacity change from 0 to 2048 [ 113.018111][ T4531] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 113.676476][ T4528] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 113.877474][ T4348] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 114.125154][ T4348] usb 2-1: unable to get BOS descriptor or descriptor too short [ 114.171123][ T4528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.211132][ T4348] usb 2-1: too many configurations: 103, using maximum allowed: 8 [ 114.250317][ T4537] loop3: detected capacity change from 0 to 256 [ 114.268020][ T4537] exfat: Deprecated parameter 'utf8' [ 114.273453][ T4537] exfat: Deprecated parameter 'namecase' [ 114.284191][ T4348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.290068][ T4537] exfat: Deprecated parameter 'utf8' [ 114.314783][ T4537] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 114.337129][ T4335] usb 5-1: Using ep0 maxpacket: 32 [ 114.354821][ T4335] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.423927][ T4348] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.462453][ T4335] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.525586][ T4335] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 114.603976][ T4335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.624871][ T4348] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.644251][ T4348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.655557][ T4348] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.666894][ T4348] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.684627][ T4348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.692103][ T4335] usb 5-1: Product: syz [ 114.741711][ T4348] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.945714][ T4348] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.349835][ T4348] usb 2-1: unable to read config index 3 descriptor/start: -71 [ 115.358928][ T4335] usb 5-1: Manufacturer: syz [ 115.364062][ T4335] usb 5-1: SerialNumber: syz [ 115.384979][ T4335] usb 5-1: config 0 descriptor?? [ 115.397879][ T4335] usb 5-1: can't set config #0, error -71 [ 115.403365][ T4348] usb 2-1: can't read configurations, error -71 [ 115.418254][ T4335] usb 5-1: USB disconnect, device number 3 [ 116.829696][ T4561] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 116.975834][ T4565] loop3: detected capacity change from 0 to 4096 [ 117.094476][ T4565] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 117.162903][ T4565] ntfs3: loop3: Failed to load $Extend. [ 117.254314][ T27] audit: type=1800 audit(1759351713.501:2): pid=4565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.48" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 117.478693][ T4551] loop1: detected capacity change from 0 to 32768 [ 117.521622][ T4551] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.40 (4551) [ 117.555039][ T4546] loop2: detected capacity change from 0 to 32768 [ 117.610272][ T4551] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.625267][ T4546] (syz.2.39,4546,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.652130][ T4551] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 117.667178][ T4551] BTRFS info (device loop1): force clearing of disk cache [ 117.691797][ T4546] (syz.2.39,4546,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.700772][ T4551] BTRFS error (device loop1): unrecognized metadata_ratio value 0x0000000080000000 [ 117.725040][ T4551] BTRFS error (device loop1): open_ctree failed: -34 [ 117.892756][ T4546] JBD2: Ignoring recovery information on journal [ 118.156738][ T4579] loop0: detected capacity change from 0 to 128 [ 118.224442][ T4440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4440) [ 118.592540][ T4579] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.617759][ T4546] JBD2: recovery failed [ 118.627975][ T4546] (syz.2.39,4546,0):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 118.647766][ T4546] (syz.2.39,4546,0):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 118.667225][ T4546] (syz.2.39,4546,0):ocfs2_check_volume:2489 ERROR: status = -5 [ 118.685247][ T4546] (syz.2.39,4546,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 118.734063][ T4546] (syz.2.39,4546,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 118.846684][ T4579] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.902515][ T4587] loop3: detected capacity change from 0 to 128 [ 119.177217][ T4286] Bluetooth: hci5: command 0x1003 tx timeout [ 119.397167][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 119.877156][ T4587] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 119.886928][ T4587] System zones: 1-3, 19-19, 35-36 [ 119.944618][ T4587] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.992755][ T4577] netlink: 'syz.0.51': attribute type 21 has an invalid length. [ 120.011204][ T4577] netlink: 128 bytes leftover after parsing attributes in process `syz.0.51'. [ 120.021520][ T4587] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.037476][ T4577] netlink: 'syz.0.51': attribute type 5 has an invalid length. [ 120.075714][ T4577] netlink: 'syz.0.51': attribute type 6 has an invalid length. [ 120.085889][ T4577] netlink: 3 bytes leftover after parsing attributes in process `syz.0.51'. [ 120.409151][ T4587] EXT4-fs warning (device loop3): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new) [ 120.437880][ T4587] EXT4-fs warning (device loop3): ext4_group_extend:1899: can't read last block, resize aborted [ 120.514221][ T4605] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 120.552080][ T4576] fscrypt: Error allocating hmac(sha512): -2 [ 120.590185][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 120.650734][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 120.727096][ T4360] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.904674][ T4615] loop1: detected capacity change from 0 to 256 [ 121.313182][ T4360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.327919][ T4360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 121.536594][ T4360] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 121.877605][ T4335] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.001928][ T4622] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 122.043157][ T4615] FAT-fs (loop1): Directory bread(block 64) failed [ 122.107884][ T4615] FAT-fs (loop1): Directory bread(block 65) failed [ 122.135197][ T4615] FAT-fs (loop1): Directory bread(block 66) failed [ 122.171734][ T4615] FAT-fs (loop1): Directory bread(block 67) failed [ 122.207216][ T4335] usb 4-1: Using ep0 maxpacket: 32 [ 122.224235][ T4335] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 122.242053][ T4615] FAT-fs (loop1): Directory bread(block 68) failed [ 122.264868][ T4627] loop0: detected capacity change from 0 to 736 [ 122.277468][ T4615] FAT-fs (loop1): Directory bread(block 69) failed [ 122.282413][ T4360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.295436][ T4360] usb 5-1: config 0 descriptor?? [ 122.320629][ T4335] usb 4-1: config 0 has no interface number 0 [ 122.335849][ T4615] FAT-fs (loop1): Directory bread(block 70) failed [ 122.343333][ T4615] FAT-fs (loop1): Directory bread(block 71) failed [ 122.351303][ T4615] FAT-fs (loop1): Directory bread(block 72) failed [ 122.358290][ T4615] FAT-fs (loop1): Directory bread(block 73) failed [ 122.362061][ T4335] usb 4-1: config 0 interface 115 has no altsetting 0 [ 122.458806][ T4335] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff55, bcdDevice=72.3e [ 122.502924][ T4627] rock: directory entry would overflow storage [ 122.517452][ T4335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.556834][ T4627] rock: sig=0x3b10, size=4, remaining=3 [ 122.567072][ T4335] usb 4-1: Product: syz [ 122.571411][ T4335] usb 4-1: Manufacturer: syz [ 122.576056][ T4335] usb 4-1: SerialNumber: syz [ 122.718338][ T4335] usb 4-1: config 0 descriptor?? [ 122.762767][ T4335] option 4-1:0.115: GSM modem (1-port) converter detected [ 124.444071][ T14] usb 4-1: USB disconnect, device number 2 [ 124.529404][ T14] option 4-1:0.115: device disconnected [ 124.583737][ T4360] usbhid 5-1:0.0: can't add hid device: -71 [ 124.607363][ T4360] usbhid: probe of 5-1:0.0 failed with error -71 [ 124.707530][ T4360] usb 5-1: USB disconnect, device number 4 [ 124.907376][ T4649] loop3: detected capacity change from 0 to 128 [ 124.930038][ T4649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 124.998647][ T4649] System zones: 1-3, 19-19, 35-36 [ 125.071804][ T4649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.165697][ T4658] loop4: detected capacity change from 0 to 128 [ 125.456598][ T4649] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.511713][ T4658] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 125.676128][ T4658] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.743758][ T4666] hsr0 speed is unknown, defaulting to 1000 [ 125.825198][ T4666] hsr0 speed is unknown, defaulting to 1000 [ 125.881760][ T4657] netlink: 'syz.4.71': attribute type 21 has an invalid length. [ 125.952271][ T4657] netlink: 128 bytes leftover after parsing attributes in process `syz.4.71'. [ 126.004801][ T4657] netlink: 'syz.4.71': attribute type 5 has an invalid length. [ 126.023797][ T4657] netlink: 'syz.4.71': attribute type 6 has an invalid length. [ 126.042135][ T4657] netlink: 3 bytes leftover after parsing attributes in process `syz.4.71'. [ 126.289199][ T4650] fscrypt: Error allocating hmac(sha512): -2 [ 127.193350][ T4666] hsr0 speed is unknown, defaulting to 1000 [ 127.252611][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 127.270653][ T4649] EXT4-fs warning (device loop3): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new) [ 127.377431][ T4681] loop0: detected capacity change from 0 to 256 [ 127.383940][ T4649] EXT4-fs warning (device loop3): ext4_group_extend:1899: can't read last block, resize aborted [ 127.401927][ T4666] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.431786][ T4681] exfat: Deprecated parameter 'utf8' [ 127.467416][ T4681] exfat: Deprecated parameter 'namecase' [ 127.482112][ T4666] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 127.490340][ T4681] exfat: Deprecated parameter 'utf8' [ 127.535173][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 127.595498][ T4681] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 129.503557][ T4691] loop4: detected capacity change from 0 to 256 [ 129.536218][ T4691] exfat: Deprecated parameter 'utf8' [ 129.567629][ T4691] exfat: Deprecated parameter 'namecase' [ 129.573456][ T4691] exfat: Deprecated parameter 'utf8' [ 129.650601][ T4691] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 129.659141][ T4666] hsr0 speed is unknown, defaulting to 1000 [ 129.687389][ T22] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 129.703508][ T4666] hsr0 speed is unknown, defaulting to 1000 [ 131.432688][ T22] usb 1-1: device not accepting address 2, error -71 [ 131.488005][ T4666] hsr0 speed is unknown, defaulting to 1000 [ 131.508378][ T4666] hsr0 speed is unknown, defaulting to 1000 [ 131.596599][ T4666] hsr0 speed is unknown, defaulting to 1000 [ 134.438075][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.444855][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.129975][ T4394] Process accounting resumed [ 135.185516][ T4732] loop3: detected capacity change from 0 to 256 [ 135.253447][ T4732] exfat: Deprecated parameter 'utf8' [ 135.262858][ T4735] loop1: detected capacity change from 0 to 256 [ 135.272659][ T4732] exfat: Deprecated parameter 'namecase' [ 135.300764][ T4732] exfat: Deprecated parameter 'utf8' [ 135.327137][ T4731] Process accounting resumed [ 135.334261][ T4732] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 135.348056][ T4735] exfat: Deprecated parameter 'utf8' [ 135.375573][ T4735] exfat: Deprecated parameter 'namecase' [ 135.437929][ T4735] exfat: Deprecated parameter 'utf8' [ 135.508808][ T4735] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 138.415795][ T4759] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 140.188362][ T4776] loop2: detected capacity change from 0 to 256 [ 140.228260][ T4776] exfat: Deprecated parameter 'utf8' [ 140.268831][ T4776] exfat: Deprecated parameter 'namecase' [ 140.322471][ T4776] exfat: Deprecated parameter 'utf8' [ 140.352655][ T4776] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 140.487116][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.677109][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 140.686118][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.721583][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.738793][ T4766] loop3: detected capacity change from 0 to 40427 [ 140.754320][ T14] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 140.781617][ T4766] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 140.811275][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.859774][ T14] usb 1-1: config 0 descriptor?? [ 141.304657][ T14] hid-generic 0003:04D8:00DF.0001: unknown main item tag 0x2 [ 141.342809][ T14] hid-generic 0003:04D8:00DF.0001: item fetching failed at offset 4/5 [ 141.380373][ T14] hid-generic: probe of 0003:04D8:00DF.0001 failed with error -22 [ 142.065961][ T4791] loop3: detected capacity change from 0 to 256 [ 142.127331][ T4791] exfat: Deprecated parameter 'utf8' [ 142.130304][ T4793] loop2: detected capacity change from 0 to 512 [ 142.187207][ T4791] exfat: Deprecated parameter 'namecase' [ 142.222189][ T4791] exfat: Deprecated parameter 'utf8' [ 142.234896][ T4793] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.254353][ T4793] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.313041][ T4791] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 142.365498][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 144.453726][ T2165] usb 1-1: USB disconnect, device number 4 [ 144.497178][ T22] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 144.820948][ T4812] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 145.903358][ T4818] loop2: detected capacity change from 0 to 128 [ 145.924375][ T4820] loop0: detected capacity change from 0 to 128 [ 145.987243][ T22] usb 4-1: device not accepting address 4, error -71 [ 146.667886][ T48] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 146.732670][ T4820] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 146.861669][ T4820] System zones: 1-3, 19-19, 35-36 [ 146.905806][ T4820] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 146.906162][ T4820] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.207138][ T4832] loop4: detected capacity change from 0 to 256 [ 147.219190][ T4832] exfat: Deprecated parameter 'utf8' [ 147.231120][ T4830] netlink: 60 bytes leftover after parsing attributes in process `syz.0.117'. [ 147.275166][ T4832] exfat: Deprecated parameter 'namecase' [ 147.300959][ T4417] kworker/u4:9: attempt to access beyond end of device [ 147.300959][ T4417] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 147.343143][ T4832] exfat: Deprecated parameter 'utf8' [ 147.365448][ T4832] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 147.652103][ T4820] EXT4-fs warning (device loop0): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new) [ 147.664168][ T4820] EXT4-fs warning (device loop0): ext4_group_extend:1899: can't read last block, resize aborted [ 148.990742][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 149.398051][ T4327] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.562821][ T4862] loop3: detected capacity change from 0 to 256 [ 149.618908][ T4327] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 149.646714][ T4327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.664112][ T4862] exfat: Deprecated parameter 'utf8' [ 149.680489][ T4862] exfat: Deprecated parameter 'namecase' [ 149.698613][ T4327] usb 5-1: config 0 descriptor?? [ 149.724262][ T4862] exfat: Deprecated parameter 'utf8' [ 149.813778][ T4862] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 150.240760][ T4856] loop2: detected capacity change from 0 to 40427 [ 150.280549][ T4856] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 150.353249][ T4856] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 150.376289][ T4856] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 150.965602][ T4872] loop4: detected capacity change from 0 to 256 [ 151.061206][ T4856] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 151.267443][ T2165] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 151.563296][ T2165] usb 4-1: unable to get BOS descriptor or descriptor too short [ 151.606025][ T4856] F2FS-fs (loop2): invalid crc value [ 151.701724][ T2165] usb 4-1: too many configurations: 103, using maximum allowed: 8 [ 151.962958][ T2165] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.212833][ T4856] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.292639][ T2165] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.860282][ T2165] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.905263][ T2165] usb 4-1: unable to read config index 1 descriptor/start: -71 [ 152.916757][ T2165] usb 4-1: can't read configurations, error -71 [ 153.147790][ T4327] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 153.367740][ T4327] asix: probe of 5-1:0.0 failed with error -71 [ 153.381214][ T4327] usb 5-1: USB disconnect, device number 5 [ 153.555829][ T4884] Zero length message leads to an empty skb [ 153.599971][ T4856] F2FS-fs (loop2): Start checkpoint disabled! [ 155.193049][ T4892] loop1: detected capacity change from 0 to 128 [ 155.319354][ T4893] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 155.863344][ T48] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 156.419950][ T4903] loop4: detected capacity change from 0 to 256 [ 156.497979][ T4903] exfat: Deprecated parameter 'utf8' [ 156.567217][ T4903] exfat: Deprecated parameter 'namecase' [ 156.573086][ T4903] exfat: Deprecated parameter 'utf8' [ 156.623889][ T4903] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 158.037981][ T4918] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 161.206887][ T4297] kworker/u4:5: attempt to access beyond end of device [ 161.206887][ T4297] loop1: rw=1048577, sector=145, nr_sectors = 896 limit=128 [ 162.467238][ T4937] netlink: 'syz.2.146': attribute type 4 has an invalid length. [ 163.616011][ T4948] loop2: detected capacity change from 0 to 256 [ 163.662298][ T4948] exfat: Deprecated parameter 'utf8' [ 163.697879][ T4948] exfat: Deprecated parameter 'namecase' [ 163.703636][ T4948] exfat: Deprecated parameter 'utf8' [ 164.448705][ T4948] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 164.461378][ T4952] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 164.757672][ T4955] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.839392][ T4955] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.651074][ T4978] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 169.971848][ T4989] netlink: 'syz.1.160': attribute type 4 has an invalid length. [ 170.252362][ T4923] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 170.423523][ T4996] loop2: detected capacity change from 0 to 256 [ 170.439167][ T4997] loop4: detected capacity change from 0 to 64 [ 170.446555][ T4996] exfat: Deprecated parameter 'utf8' [ 170.452814][ T4996] exfat: Deprecated parameter 'namecase' [ 170.460721][ T4923] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 170.475594][ T4923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.490245][ T4996] exfat: Deprecated parameter 'utf8' [ 170.514809][ T4923] usb 1-1: config 0 descriptor?? [ 170.536424][ T4996] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 170.554645][ T4999] loop1: detected capacity change from 0 to 512 [ 170.592894][ T5001] loop3: detected capacity change from 0 to 128 [ 170.630890][ T4999] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.779850][ T4999] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 170.798271][ T5001] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 171.746171][ T5001] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.419581][ T5012] loop0: detected capacity change from 0 to 256 [ 173.586005][ T4999] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.165: attempt to clear invalid blocks 2 len 1 [ 174.610482][ T4999] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 174.900129][ T4999] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.165: invalid indirect mapped block 1819239214 (level 0) [ 174.914616][ T4440] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.720047][ T4923] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 175.737831][ T4923] asix: probe of 1-1:0.0 failed with error -71 [ 175.760521][ T4923] usb 1-1: USB disconnect, device number 5 [ 175.768645][ T4999] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.165: invalid indirect mapped block 1819239214 (level 1) [ 175.785331][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 175.870306][ T4999] EXT4-fs (loop1): 1 truncate cleaned up [ 176.084496][ T4999] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 176.832074][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 177.505840][ T5044] netlink: 'syz.4.173': attribute type 4 has an invalid length. [ 177.604322][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 177.627355][ T27] audit: type=1326 audit(1759351773.821:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4004f8eec9 code=0x7ffc0000 [ 177.701968][ T27] audit: type=1326 audit(1759351773.821:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f4004f8eec9 code=0x7ffc0000 [ 177.724196][ T27] audit: type=1326 audit(1759351773.821:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4004f8eec9 code=0x7ffc0000 [ 177.751338][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 177.868627][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 177.870468][ T5050] loop3: detected capacity change from 0 to 512 [ 177.941402][ T5050] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.953855][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 178.014018][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 178.026935][ T5050] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 178.029885][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 178.048183][ T5050] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 178.083861][ T5052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.177'. [ 178.095276][ T5050] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.176: Failed to acquire dquot type 1 [ 178.108893][ T5052] netlink: 52 bytes leftover after parsing attributes in process `syz.4.177'. [ 178.132243][ T5052] loop4: detected capacity change from 0 to 512 [ 178.139737][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 178.155729][ T5052] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.180447][ T5059] loop0: detected capacity change from 0 to 128 [ 178.312665][ T5052] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.323297][ T5052] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.414551][ T5050] EXT4-fs (loop3): 1 truncate cleaned up [ 178.529109][ T5050] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 178.559515][ T48] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 179.294107][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 179.375579][ T5066] netlink: 'syz.2.180': attribute type 16 has an invalid length. [ 179.446363][ T5066] netlink: 156 bytes leftover after parsing attributes in process `syz.2.180'. [ 179.473713][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 179.667141][ T2165] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 179.859578][ T2165] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 180.033154][ T2165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.837935][ T2165] usb 2-1: config 0 descriptor?? [ 183.087253][ T5090] loop1: detected capacity change from 0 to 256 [ 184.575125][ T75] kworker/u4:4: attempt to access beyond end of device [ 184.575125][ T75] loop0: rw=1048577, sector=145, nr_sectors = 896 limit=128 [ 184.931385][ T2165] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 184.945215][ T2165] asix: probe of 2-1:0.0 failed with error -71 [ 184.964279][ T2165] usb 2-1: USB disconnect, device number 4 [ 185.107861][ T14] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 185.218392][ T5100] loop2: detected capacity change from 0 to 128 [ 185.332206][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.400324][ T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 185.514298][ T14] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 185.655513][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.841065][ T14] usb 4-1: config 0 descriptor?? [ 185.961989][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 186.051975][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 186.139081][ T5092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.158195][ T5092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.182457][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 186.251606][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 186.312987][ T14] usb 4-1: media controller created [ 186.344683][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.525300][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 186.550197][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 186.710869][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 186.761711][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 186.785732][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 187.275666][ T14] usb 4-1: USB disconnect, device number 8 [ 187.456561][ T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 187.635565][ T4923] Process accounting resumed [ 189.263592][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.359954][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.634466][ T5094] Process accounting resumed [ 189.743408][ T5136] loop0: detected capacity change from 0 to 128 [ 190.107112][ T4349] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 190.792468][ T4349] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 190.838097][ T4349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.049176][ T4349] usb 3-1: config 0 descriptor?? [ 191.395858][ T5146] loop3: detected capacity change from 0 to 64 [ 191.966881][ T5157] loop2: detected capacity change from 0 to 256 [ 194.125464][ T4450] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.237099][ T4349] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.259367][ T4349] asix: probe of 3-1:0.0 failed with error -71 [ 194.280384][ T4349] usb 3-1: USB disconnect, device number 3 [ 194.674271][ T5171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'. [ 194.684504][ T5171] netlink: 52 bytes leftover after parsing attributes in process `syz.1.207'. [ 194.703192][ T5171] loop1: detected capacity change from 0 to 512 [ 195.136704][ T5171] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.368746][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.375100][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.469898][ T5171] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.479247][ T5171] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.718255][ T48] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 196.543708][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 199.526548][ T4923] Process accounting resumed [ 199.577903][ T4436] kworker/u4:14: attempt to access beyond end of device [ 199.577903][ T4436] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 199.646318][ T5206] Process accounting resumed [ 199.705264][ T5201] loop1: detected capacity change from 0 to 64 [ 199.996394][ T5214] loop0: detected capacity change from 0 to 128 [ 201.253653][ T5234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.224'. [ 201.263987][ T5234] netlink: 52 bytes leftover after parsing attributes in process `syz.3.224'. [ 201.928455][ T5241] dlm: no local IP address has been set [ 201.934644][ T5241] dlm: cannot start dlm midcomms -107 [ 202.532092][ T48] Bluetooth: hci2: unexpected cc 0x0809 length: 68 > 4 [ 203.696695][ T5250] loop0: detected capacity change from 0 to 64 [ 205.528718][ T5275] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 207.587296][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 207.593523][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 207.599755][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 207.605966][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 207.612417][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 207.749915][ T5280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.240'. [ 208.007204][ T5284] dlm: no local IP address has been set [ 208.013106][ T5284] dlm: cannot start dlm midcomms -107 [ 208.523118][ T5285] loop4: detected capacity change from 0 to 512 [ 208.546102][ T5285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 208.653764][ T5285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 208.664503][ T5285] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.925297][ T5281] netlink: 52 bytes leftover after parsing attributes in process `syz.4.240'. [ 210.780070][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 211.947877][ T5311] hsr0 speed is unknown, defaulting to 1000 [ 214.758712][ T5339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.255'. [ 214.944708][ T5341] netlink: 52 bytes leftover after parsing attributes in process `syz.4.255'. [ 215.093708][ T5346] loop4: detected capacity change from 0 to 512 [ 215.188303][ T5346] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 215.313321][ T5346] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 215.337845][ T5346] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.860093][ T27] audit: type=1326 audit(1759351812.111:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5361 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5487f8eec9 code=0x7ffc0000 [ 216.014710][ T27] audit: type=1326 audit(1759351812.111:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5361 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5487f8eec9 code=0x7ffc0000 [ 216.087020][ T27] audit: type=1326 audit(1759351812.111:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5361 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f5487f8eec9 code=0x7ffc0000 [ 216.532832][ T27] audit: type=1326 audit(1759351812.111:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5361 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5487f8eec9 code=0x7ffc0000 [ 216.657361][ T27] audit: type=1326 audit(1759351812.111:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5361 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5487f8eec9 code=0x7ffc0000 [ 216.693352][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 216.697108][ T27] audit: type=1326 audit(1759351812.111:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5361 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5487f8eec9 code=0x7ffc0000 [ 216.787224][ T27] audit: type=1326 audit(1759351812.111:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5361 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5487f8eec9 code=0x7ffc0000 [ 216.877052][ T27] audit: type=1326 audit(1759351812.111:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5361 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5487f8eec9 code=0x7ffc0000 [ 216.955129][ T27] audit: type=1326 audit(1759351812.111:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5361 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5487f8eec9 code=0x7ffc0000 [ 216.996800][ T27] audit: type=1326 audit(1759351812.111:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5361 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5487f8eec9 code=0x7ffc0000 [ 218.920591][ T5387] hsr0 speed is unknown, defaulting to 1000 [ 220.603605][ T5406] loop1: detected capacity change from 0 to 128 [ 220.686594][ T4283] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 221.534998][ T5412] loop2: detected capacity change from 0 to 128 [ 221.742368][ T4283] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 223.360753][ T41] kworker/u4:2: attempt to access beyond end of device [ 223.360753][ T41] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 224.572811][ T46] kworker/u4:3: attempt to access beyond end of device [ 224.572811][ T46] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 224.635712][ T5438] loop1: detected capacity change from 0 to 128 [ 224.661537][ T5438] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 224.669896][ T5438] System zones: 1-3, 19-19, 35-36 [ 224.706655][ T5438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 224.749431][ T5438] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 224.795554][ T5444] loop4: detected capacity change from 0 to 128 [ 225.135901][ T5438] EXT4-fs warning (device loop1): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new) [ 225.206884][ T5438] EXT4-fs warning (device loop1): ext4_group_extend:1899: can't read last block, resize aborted [ 225.474909][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 225.540756][ T5459] blktrace: Concurrent blktraces are not allowed on loop8 [ 225.768524][ T5441] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.776679][ T5441] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 226.223439][ T5459] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 226.250400][ T5441] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 226.259481][ T5441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 226.266069][ T5441] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 226.364064][ T5464] netlink: 14 bytes leftover after parsing attributes in process `syz.1.284'. [ 226.392112][ T5441] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 226.410106][ T5464] device hsr_slave_0 left promiscuous mode [ 226.440336][ T5441] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.465883][ T5464] device hsr_slave_1 left promiscuous mode [ 226.466558][ T5441] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 226.685192][ T5441] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 226.700756][ T5441] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.706912][ T5441] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 226.938943][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 226.970840][ T5441] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 227.049025][ T5441] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 227.110164][ T5441] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 227.202154][ T5441] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 228.453104][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 228.469992][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 229.276029][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 229.285059][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 229.292551][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 229.729826][ T5488] loop4: detected capacity change from 0 to 128 [ 229.894379][ T4282] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 230.545271][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 230.551458][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 231.475201][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 231.475242][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 231.983597][ T4349] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 232.632467][ T4349] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 232.648388][ T4349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.656517][ T4349] usb 4-1: Product: syz [ 232.660871][ T4349] usb 4-1: Manufacturer: syz [ 232.665518][ T4349] usb 4-1: SerialNumber: syz [ 232.753606][ T4349] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 232.779692][ T4349] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 233.357728][ T4360] usb 4-1: USB disconnect, device number 9 [ 233.667703][ T4314] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 234.268950][ T4349] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 234.397105][ T4349] ath9k_htc: Failed to initialize the device [ 234.464958][ T4360] usb 4-1: ath9k_htc: USB layer deinitialized [ 234.497106][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 234.516998][ T4314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.531918][ T4314] usb 5-1: config 0 has no interfaces? [ 234.545428][ T4314] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 234.704733][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.713437][ T4314] usb 5-1: Product: syz [ 234.717760][ T4314] usb 5-1: Manufacturer: syz [ 234.722476][ T4314] usb 5-1: SerialNumber: syz [ 234.738065][ T4314] usb 5-1: config 0 descriptor?? [ 236.103164][ T5543] hsr0 speed is unknown, defaulting to 1000 [ 236.722863][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 236.860151][ T1200] usb 5-1: USB disconnect, device number 6 [ 236.981953][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 238.307352][ T5567] loop4: detected capacity change from 0 to 128 [ 240.642134][ T4282] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 241.450186][ T41] kworker/u4:2: attempt to access beyond end of device [ 241.450186][ T41] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 241.482876][ T5461] Set syz1 is full, maxelem 65536 reached [ 241.636084][ T5577] loop1: detected capacity change from 0 to 128 [ 241.714859][ T4282] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 243.988165][ T4351] kworker/u4:6: attempt to access beyond end of device [ 243.988165][ T4351] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 244.041234][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.282946][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.295187][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.323218][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.342791][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 244.358224][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.967180][ T5604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 246.457776][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 247.464556][ T5604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 247.531932][ T5594] hsr0 speed is unknown, defaulting to 1000 [ 247.552749][ T5605] netlink: 'syz.4.324': attribute type 4 has an invalid length. [ 247.571530][ T5461] syz.2.283 (5461) used greatest stack depth: 20816 bytes left [ 247.790264][ T4485] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 248.015717][ T4485] usb 1-1: unable to get BOS descriptor or descriptor too short [ 248.056502][ T4485] usb 1-1: too many configurations: 103, using maximum allowed: 8 [ 248.164570][ T4485] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.761822][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 249.039690][ T4485] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 249.204494][ T4485] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.474938][ T4485] usb 1-1: unable to read config index 1 descriptor/start: -71 [ 249.621616][ T4485] usb 1-1: can't read configurations, error -71 [ 249.851602][ T4500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.777414][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 251.239249][ T4500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.288430][ T5631] netlink: 'syz.4.327': attribute type 10 has an invalid length. [ 251.296381][ T5631] netlink: 40 bytes leftover after parsing attributes in process `syz.4.327'. [ 251.420793][ T5633] loop4: detected capacity change from 0 to 512 [ 251.465757][ T5631] batman_adv: batadv0: Adding interface: virt_wifi0 [ 251.505711][ T5631] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.594352][ T5642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.331'. [ 251.657577][ T5631] batman_adv: batadv0: Interface activated: virt_wifi0 [ 251.678438][ T5645] netlink: 52 bytes leftover after parsing attributes in process `syz.1.331'. [ 251.705305][ T5642] loop1: detected capacity change from 0 to 512 [ 251.738504][ T5642] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 251.788784][ T5633] EXT4-fs error (device loop4): ext4_quota_enable:7024: inode #4: comm syz.4.327: iget: bogus i_mode (4200) [ 251.805364][ T5642] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 251.814654][ T5642] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.878814][ T4500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.906282][ T5633] EXT4-fs error (device loop4): ext4_quota_enable:7027: comm syz.4.327: Bad quota inode: 4, type: 1 [ 252.004187][ T5633] EXT4-fs warning (device loop4): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 252.069250][ T5633] EXT4-fs (loop4): mount failed [ 252.150430][ T4500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.408945][ T5594] chnl_net:caif_netlink_parms(): no params data found [ 252.592533][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 252.867494][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 253.592099][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.650681][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.662348][ T127] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 253.717155][ T5594] device bridge_slave_0 entered promiscuous mode [ 253.750433][ T5674] loop1: detected capacity change from 0 to 128 [ 253.780787][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.817407][ T127] usb 1-1: device descriptor read/64, error -71 [ 253.829154][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.844351][ T5594] device bridge_slave_1 entered promiscuous mode [ 254.005366][ T5676] loop4: detected capacity change from 0 to 128 [ 254.013883][ T48] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 254.087192][ T127] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 254.260307][ T5676] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 254.287182][ T127] usb 1-1: device descriptor read/64, error -71 [ 254.416496][ T5676] System zones: [ 254.418033][ T127] usb usb1-port1: attempt power cycle [ 254.428608][ T5676] 1-3, 19-19, 35-36 [ 254.555563][ T5676] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 254.588308][ T5676] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.887142][ T127] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 255.018221][ T127] usb 1-1: device descriptor read/8, error -71 [ 255.133104][ T4430] kworker/u4:12: attempt to access beyond end of device [ 255.133104][ T4430] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 255.449027][ T127] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 255.494275][ T127] usb 1-1: device descriptor read/8, error -71 [ 255.693674][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.767954][ T127] usb usb1-port1: unable to enumerate USB device [ 255.807132][ T4923] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 255.917898][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'. [ 256.030843][ T5684] EXT4-fs warning (device loop4): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new) [ 256.057883][ T5684] EXT4-fs warning (device loop4): ext4_group_extend:1899: can't read last block, resize aborted [ 256.082544][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.119762][ T4923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 256.140648][ T4923] usb 4-1: too many configurations: 103, using maximum allowed: 8 [ 256.171571][ T4923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.205588][ T5694] loop1: detected capacity change from 0 to 128 [ 256.210652][ T4923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.240981][ T4923] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.397506][ T4923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.700860][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.707306][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.723917][ T4923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.748146][ T4923] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.765470][ T4923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.785055][ T5594] team0: Port device team_slave_0 added [ 256.795644][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 256.808488][ T4923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.884228][ T4923] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.018833][ T4923] usb 4-1: unable to read config index 3 descriptor/start: -71 [ 257.026851][ T4923] usb 4-1: can't read configurations, error -71 [ 257.221891][ T5709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.344'. [ 257.448384][ T5594] team0: Port device team_slave_1 added [ 257.681798][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.699163][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.725106][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.740567][ T5718] loop1: detected capacity change from 0 to 2048 [ 257.826125][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.868901][ T5718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 257.896778][ T5718] EXT4-fs (loop1): unmounting filesystem. [ 257.988812][ T5729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.346'. [ 258.018272][ T5729] netlink: 52 bytes leftover after parsing attributes in process `syz.3.346'. [ 258.127942][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.153951][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.435874][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.486729][ T5741] loop1: detected capacity change from 0 to 128 [ 259.572972][ T5743] loop4: detected capacity change from 0 to 128 [ 259.591097][ T5594] device hsr_slave_0 entered promiscuous mode [ 259.604871][ T5741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 259.613417][ T5741] System zones: 1-3, 19-19, 35-36 [ 259.636266][ T5594] device hsr_slave_1 entered promiscuous mode [ 259.656638][ T5743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 259.687145][ T5741] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 259.697022][ T4923] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 259.720710][ T5743] System zones: 1-3, 19-19, 35-36 [ 259.737492][ T5741] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.772137][ T5743] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 259.836710][ T5743] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.867362][ T4923] usb 4-1: device descriptor read/64, error -71 [ 259.989032][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'. [ 260.192401][ T5750] EXT4-fs warning (device loop1): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new) [ 260.204680][ T5750] EXT4-fs warning (device loop1): ext4_group_extend:1899: can't read last block, resize aborted [ 260.247080][ T4923] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 260.432242][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 260.485395][ T5752] EXT4-fs warning (device loop4): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new) [ 260.503096][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 260.513034][ T5752] EXT4-fs warning (device loop4): ext4_group_extend:1899: can't read last block, resize aborted [ 260.523991][ T4923] usb 4-1: device descriptor read/64, error -71 [ 260.647472][ T4923] usb usb4-port1: attempt power cycle [ 261.485828][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 261.497162][ T4923] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 261.721541][ T4923] usb 4-1: device descriptor read/8, error -71 [ 261.997350][ T4923] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 262.156530][ T4923] usb 4-1: device descriptor read/8, error -71 [ 262.419975][ T4923] usb usb4-port1: unable to enumerate USB device [ 262.717282][ T4485] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 262.946079][ T5777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.358'. [ 262.972962][ T5777] netlink: 52 bytes leftover after parsing attributes in process `syz.4.358'. [ 262.996297][ T5777] loop4: detected capacity change from 0 to 512 [ 263.008330][ T5777] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 263.467443][ T4500] device hsr_slave_0 left promiscuous mode [ 263.533217][ T4500] device hsr_slave_1 left promiscuous mode [ 263.614654][ T4500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.683206][ T4500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.863995][ T4500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.889714][ T4500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.909176][ T4500] device bridge_slave_1 left promiscuous mode [ 263.929241][ T4500] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.005914][ T5777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 264.015329][ T5777] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.050353][ T4500] device bridge_slave_0 left promiscuous mode [ 264.076031][ T4500] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.166098][ T4500] device veth1_macvtap left promiscuous mode [ 264.174681][ T4500] device veth0_macvtap left promiscuous mode [ 264.181402][ T4500] device veth1_vlan left promiscuous mode [ 264.187917][ T4500] device veth0_vlan left promiscuous mode [ 264.634797][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 265.177545][ T4485] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 265.205486][ T4500] team0 (unregistering): Port device team_slave_1 removed [ 265.258341][ T4500] team0 (unregistering): Port device team_slave_0 removed [ 265.309129][ T4500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.350602][ T4485] usb 1-1: device descriptor read/64, error -71 [ 265.368560][ T4500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.477273][ T4485] usb usb1-port1: attempt power cycle [ 265.738643][ T5808] loop4: detected capacity change from 0 to 1024 [ 265.746238][ T5808] EXT4-fs: Ignoring removed orlov option [ 265.791350][ T5808] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 265.887137][ T4485] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 265.966358][ T4485] usb 1-1: device descriptor read/8, error -71 [ 266.156754][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 266.189453][ T4500] bond0 (unregistering): Released all slaves [ 266.247247][ T4485] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 266.278075][ T4485] usb 1-1: device descriptor read/8, error -71 [ 266.393051][ T5803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.367'. [ 266.395687][ T14] hsr0 speed is unknown, defaulting to 1000 [ 266.409210][ T4485] usb usb1-port1: unable to enumerate USB device [ 266.575845][ T14] ================================================================== [ 266.584192][ T14] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 266.591576][ T14] Read of size 4 at addr ffff88805675a0e0 by task kworker/0:1/14 [ 266.599327][ T14] [ 266.601708][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted syzkaller #0 [ 266.609034][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 266.619297][ T14] Workqueue: infiniband ib_cache_event_task [ 266.625249][ T14] Call Trace: [ 266.628586][ T14] [ 266.631730][ T14] dump_stack_lvl+0x168/0x22e [ 266.636496][ T14] ? __lock_acquire+0x7c50/0x7c50 [ 266.641585][ T14] ? show_regs_print_info+0x12/0x12 [ 266.646823][ T14] ? load_image+0x3b0/0x3b0 [ 266.651730][ T14] ? __virt_addr_valid+0x465/0x540 [ 266.656975][ T14] ? siw_query_port+0x358/0x450 [ 266.661876][ T14] print_report+0xa8/0x210 [ 266.666379][ T14] kasan_report+0x10b/0x140 [ 266.670945][ T14] ? siw_query_port+0x358/0x450 [ 266.675857][ T14] siw_query_port+0x358/0x450 [ 266.680591][ T14] ? ib_query_port+0x372/0x820 [ 266.685398][ T14] ib_cache_update+0x1bb/0x980 [ 266.690200][ T14] ? lock_acquire+0x20f/0x490 [ 266.694943][ T14] ? ib_cache_setup_one+0x5d0/0x5d0 [ 266.700213][ T14] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 266.706256][ T14] ? read_lock_is_recursive+0x10/0x10 [ 266.711673][ T14] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 266.717624][ T14] ? _raw_spin_unlock+0x40/0x40 [ 266.722778][ T14] ib_cache_event_task+0xd4/0x1c0 [ 266.728361][ T14] ? process_one_work+0x7a1/0x1160 [ 266.733609][ T14] process_one_work+0x898/0x1160 [ 266.738725][ T14] ? worker_detach_from_pool+0x240/0x240 [ 266.744398][ T14] ? _raw_spin_lock_irq+0xab/0xe0 [ 266.749471][ T14] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 266.754897][ T14] ? kthread_data+0x4b/0xc0 [ 266.759449][ T14] worker_thread+0xaa2/0x1250 [ 266.764175][ T14] kthread+0x29d/0x330 [ 266.768291][ T14] ? worker_clr_flags+0x1a0/0x1a0 [ 266.773367][ T14] ? kthread_blkcg+0xd0/0xd0 [ 266.778032][ T14] ret_from_fork+0x1f/0x30 [ 266.782553][ T14] [ 266.785598][ T14] [ 266.787945][ T14] Allocated by task 4278: [ 266.792400][ T14] kasan_set_track+0x4b/0x70 [ 266.797046][ T14] __kasan_kmalloc+0x8e/0xa0 [ 266.801689][ T14] __kmalloc_node+0xb0/0x240 [ 266.806421][ T14] kvmalloc_node+0x6c/0x180 [ 266.810986][ T14] alloc_netdev_mqs+0x84/0xf00 [ 266.815916][ T14] rtnl_create_link+0x2fb/0xb80 [ 266.820833][ T14] rtnl_newlink+0x13ca/0x1ff0 [ 266.825759][ T14] rtnetlink_rcv_msg+0x79b/0xed0 [ 266.830757][ T14] netlink_rcv_skb+0x1de/0x420 [ 266.835600][ T14] netlink_unicast+0x74d/0x8d0 [ 266.840449][ T14] netlink_sendmsg+0x89e/0xbc0 [ 266.845248][ T14] __sys_sendto+0x44f/0x5c0 [ 266.850231][ T14] __x64_sys_sendto+0xda/0xf0 [ 266.854965][ T14] do_syscall_64+0x4c/0xa0 [ 266.859516][ T14] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.865538][ T14] [ 266.867884][ T14] Freed by task 4500: [ 266.871886][ T14] kasan_set_track+0x4b/0x70 [ 266.876528][ T14] kasan_save_free_info+0x2d/0x50 [ 266.881615][ T14] ____kasan_slab_free+0x126/0x1e0 [ 266.886791][ T14] slab_free_freelist_hook+0x131/0x1a0 [ 266.892314][ T14] __kmem_cache_free+0xb6/0x1f0 [ 266.897236][ T14] device_release+0x92/0x1c0 [ 266.901907][ T14] kobject_put+0x21d/0x460 [ 266.906361][ T14] netdev_run_todo+0xc8f/0xd80 [ 266.910793][ T5594] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.911146][ T14] default_device_exit_batch+0x9c8/0xa50 [ 266.923552][ T14] cleanup_net+0x77b/0xb80 [ 266.928013][ T14] process_one_work+0x898/0x1160 [ 266.932986][ T14] worker_thread+0xaa2/0x1250 [ 266.937704][ T14] kthread+0x29d/0x330 [ 266.941826][ T14] ret_from_fork+0x1f/0x30 [ 266.946383][ T14] [ 266.948739][ T14] The buggy address belongs to the object at ffff88805675a000 [ 266.948739][ T14] which belongs to the cache kmalloc-cg-4k of size 4096 [ 266.963110][ T14] The buggy address is located 224 bytes inside of [ 266.963110][ T14] 4096-byte region [ffff88805675a000, ffff88805675b000) [ 266.976515][ T14] [ 266.978875][ T14] The buggy address belongs to the physical page: [ 266.985338][ T14] page:ffffea000159d600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56758 [ 266.995530][ T14] head:ffffea000159d600 order:3 compound_mapcount:0 compound_pincount:0 [ 267.003980][ T14] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 267.012107][ T14] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801744c280 [ 267.020736][ T14] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 267.029346][ T14] page dumped because: kasan: bad access detected [ 267.035964][ T14] page_owner tracks the page as allocated [ 267.041754][ T14] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4267, tgid 4267 (syz-executor), ts 87682413305, free_ts 29063707750 [ 267.063585][ T14] post_alloc_hook+0x173/0x1a0 [ 267.068386][ T14] get_page_from_freelist+0x1a26/0x1ac0 [ 267.074123][ T14] __alloc_pages+0x1df/0x4e0 [ 267.078820][ T14] alloc_slab_page+0x5d/0x160 [ 267.083605][ T14] new_slab+0x87/0x2c0 [ 267.087687][ T14] ___slab_alloc+0xbc6/0x1230 [ 267.092492][ T14] __kmem_cache_alloc_node+0x1a0/0x260 [ 267.097996][ T14] __kmalloc_node_track_caller+0x9e/0x230 [ 267.103936][ T14] kmemdup+0x27/0x60 [ 267.107865][ T14] __addrconf_sysctl_register+0x99/0x3d0 [ 267.113545][ T14] addrconf_sysctl_register+0x15c/0x1b0 [ 267.119126][ T14] ipv6_add_dev+0xbe0/0x1120 [ 267.123764][ T14] addrconf_notify+0x634/0xf40 [ 267.128553][ T14] raw_notifier_call_chain+0xcb/0x160 [ 267.133933][ T14] register_netdevice+0x1600/0x1aa0 [ 267.139147][ T14] macvlan_common_newlink+0x10b3/0x1830 [ 267.144719][ T14] page last free stack trace: [ 267.149394][ T14] free_unref_page_prepare+0x8b4/0x9a0 [ 267.154874][ T14] free_unref_page+0x2e/0x3f0 [ 267.159568][ T14] free_contig_range+0x9d/0x150 [ 267.164436][ T14] destroy_args+0x100/0xa31 [ 267.168963][ T14] debug_vm_pgtable+0x32a/0x37e [ 267.173909][ T14] do_one_initcall+0x214/0x7a0 [ 267.178709][ T14] do_initcall_level+0x137/0x1e4 [ 267.183870][ T14] do_initcalls+0x4b/0x8a [ 267.188308][ T14] kernel_init_freeable+0x3fa/0x5ac [ 267.193619][ T14] kernel_init+0x19/0x1b0 [ 267.198229][ T14] ret_from_fork+0x1f/0x30 [ 267.202695][ T14] [ 267.205030][ T14] Memory state around the buggy address: [ 267.210767][ T14] ffff888056759f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 267.218839][ T14] ffff88805675a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.227015][ T14] >ffff88805675a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.235084][ T14] ^ [ 267.242550][ T14] ffff88805675a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.250624][ T14] ffff88805675a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.258692][ T14] ================================================================== [ 267.274842][ T5821] loop1: detected capacity change from 0 to 128 [ 267.293546][ T5594] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.315909][ T5594] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.334559][ T14] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 267.341832][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted syzkaller #0 [ 267.349243][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.359424][ T14] Workqueue: infiniband ib_cache_event_task [ 267.365366][ T14] Call Trace: [ 267.368767][ T14] [ 267.371731][ T14] dump_stack_lvl+0x168/0x22e [ 267.376434][ T14] ? memcpy+0x3c/0x60 [ 267.380440][ T14] ? show_regs_print_info+0x12/0x12 [ 267.385678][ T14] ? load_image+0x3b0/0x3b0 [ 267.390218][ T14] panic+0x2c9/0x710 [ 267.394235][ T14] ? bpf_jit_dump+0xd0/0xd0 [ 267.398756][ T14] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 267.404778][ T14] ? _raw_spin_unlock+0x40/0x40 [ 267.409702][ T14] ? print_memory_metadata+0x314/0x400 [ 267.415222][ T14] check_panic_on_warn+0x80/0xa0 [ 267.420186][ T14] ? siw_query_port+0x358/0x450 [ 267.425156][ T14] end_report+0x66/0x110 [ 267.429424][ T14] kasan_report+0x118/0x140 [ 267.433945][ T14] ? siw_query_port+0x358/0x450 [ 267.438823][ T14] siw_query_port+0x358/0x450 [ 267.443527][ T14] ? ib_query_port+0x372/0x820 [ 267.448321][ T14] ib_cache_update+0x1bb/0x980 [ 267.453103][ T14] ? lock_acquire+0x20f/0x490 [ 267.457800][ T14] ? ib_cache_setup_one+0x5d0/0x5d0 [ 267.463026][ T14] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 267.469042][ T14] ? read_lock_is_recursive+0x10/0x10 [ 267.474443][ T14] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 267.480365][ T14] ? _raw_spin_unlock+0x40/0x40 [ 267.485237][ T14] ib_cache_event_task+0xd4/0x1c0 [ 267.490287][ T14] ? process_one_work+0x7a1/0x1160 [ 267.495410][ T14] process_one_work+0x898/0x1160 [ 267.500371][ T14] ? worker_detach_from_pool+0x240/0x240 [ 267.506545][ T14] ? _raw_spin_lock_irq+0xab/0xe0 [ 267.511588][ T14] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 267.516979][ T14] ? kthread_data+0x4b/0xc0 [ 267.521538][ T14] worker_thread+0xaa2/0x1250 [ 267.526254][ T14] kthread+0x29d/0x330 [ 267.530345][ T14] ? worker_clr_flags+0x1a0/0x1a0 [ 267.535474][ T14] ? kthread_blkcg+0xd0/0xd0 [ 267.540107][ T14] ret_from_fork+0x1f/0x30 [ 267.544546][ T14] [ 267.547837][ T14] Kernel Offset: disabled [ 267.552176][ T14] Rebooting in 86400 seconds..