last executing test programs: 3.949498991s ago: executing program 2 (id=349): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.627880791s ago: executing program 3 (id=359): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20040010) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000002b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.612386213s ago: executing program 3 (id=360): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf4, &(0x7f0000000e00)="$eJzs3V2IXFcBAOAzszv7k6RmUhO7prFNrLb1p5tmd40/wSYlQTA0RXwpBF9CmtZgjGAFtRRM8uSbLSWCT1bxqS+limBfJPTJl4INFKH4UH3wwRCxIKLRZMrOnjM7czKTO7M7O7O7831w59x7z7n3nHvnzp37e04ARla5/rmwMFMK4fIbLx/7+4N/m14cc7iRolr/HG8aqoQQSnF4PJvfe2NL4c33XzjdLiyFufpnGg5PXm9MuzWEcCHsDVdCNey+fPWlt+aeOHHx+KV9b7966NraLD0AAIyWr105tLDrL3+8d8eN1+47EibT6MWe+vF5NY7YFo/7j8QD/3T8X45haXJ5nqWm+GQitE43HrvydGu6sTbpmvOpZOnGs/Qp74ks/0qHdJPhzvmPNY1rt9ywkaXtuBpK5dmW4XJ5dnbpnDzUz+snSrPnz5575rkhFRTou3/dH0LY29QdvdQ6vN66wyuetrRWZaofW3SRrjbsdbdRuyODy+tGbcnQl3lAXW37sPdAAEvy+4W3uZBfWVidxtzGu8v/+uPl9tNDHwx6++8p/4kh5x9GPP/8YiWs0mb9/0rLlX5H2+Jwfh8hf36p8++vnM25dWx+P6LSZTk73UfYKPcXOpVzbMDlWKlO5c+3i83qyzFM6+GxLL7595N/pxvlOwba+09+/V+n061ZV+nHfELLcGU186oNef8DrF/5c3O1dH80yp/ry+MnC+KnCuKnC+K3FMRvLYiHUfab7/0kvFhaPs/Pz+l7vR6errPdFcMP9Vie/Hpkr/nnz/32arX5u0TPRvK7U0+d+cLTJ68uPf9famz/t+L2nk43qvG3dSUmSNcL8+vqjWf/q635lDukuzsrz11t0tf7d7amK+1cnk9o2s/cVo6Z1um2d0q3pzVdNUs3HbuprLz58cmWbLp0/JH2q2l9jWfLW8mWYyIrR9qv7IhhXg5YibQ9dnr+P22fM6FSeubsuTOPxuG0nf5hrDK5OP7AgMsNrF637//MhNb3f7Y1xlfKzfuF7cvjS0v7hdfj/FrHzzXyaR0/H4fT/9w3x6br42dPf+fc0/1ffBhpz/3w+W+dOnfuzHd77Fk8Hu19qjv1zE+H0NcZDqznK+WwHorRS086bVkv5dGz7nqGvGMC1tz+Hy0dBDxy9tunnj3z7Jnz8wcPzs/NHfzi/ML++nH9/uaj+2YXhlBaoJ+W//SHXRIAAAAAAAAAAACgW98/fuzqO29+/t2l9/+X3/9L7/+nJ3/T+/8/zt7/z9+TT+/Bp/cAd7SJr6fJKlidyNJVYvfhrLw7s3x2ZdN9JIaNdvzi+/8pu7xe11See7LxlQ6DWXUCt9WXMpHVQZK3F/jxGF6K4S8DDFFpuv3oGBbVb5229VQ/RVO9FDX1A28c6XtLW0OqxyS9/922XqemL3vHAMpI/w3idcJhLyPQ3j9Gqv7vfy4v+NDLouvcjaf+6kDy+9nobhO1jkfp3bZgA9Afw27/M133TOH53391arFLya4/3rq/zOsvhV786Z3W4XXd/uQA8s/b7Rt0/sNY/qke8v/Vxf7m32j/Ltv//TmOvn3/19JiXvuLx13478+vvduUbdjd7f43X/5UD/TO3vK/EfNPS/NQ6C7/2i+y/PMbQl36X5b/li7zv23596ws///H/NNqe/iBbvOvl3gylFvLkV83Tvf/8uvGyc1s+VPdnnfI/+vPt1v+FTbUeCvmD6Nso7Qz26vsOKJx0L7y9n+jC/1t/7dR2Gy3lj+H8bk4nHbE6TmHvL2TXsufnq9I/wO7svmXCv7ftP+7sX0phkW/h9T+b9oeq/Evv2m4vi7TcKXNut2s+xrYqN5b6/t/8/+u1dbBfY6+dSfXPI+poS/juu+OrHoerzzWt/LUxlYwXaOduCGvy1qttrYX1AoMNXOGvv6HfZ4w7PyHvf6L5O3/5sfwefu/eXze/m8en7f/m8dPx2+oU3ze/m++PvP2f/P4e7L55u0DzxTEf7Qgfnf7+MZp+70F0+8piP9YQfy+RvzhlhQp/r6C6e8viL+7IP6BgvhPFMR/siD+wYL4h5vim9uATvGfKph+s0vvo4zq8sMoy9/P8/uH0VG//9PUaH3++0/3hewfYPP56WsHjp789TeqS+//TzSuh6T7eEficCWeP/0gDuf3vUPT8GLcm3H4r1n8er/eAaMkrz8j/39/qCAe2LjSc15+3zCCSlPtR8ewqN6qTsf5bCyfjuFnYvjZGD4Sw9kY7o/hgRjODah8rI2jr//20Iul5fP97Vl8t8+Tl7L3gVrqiQohzHdZnvz6QK/Ps+f1+PVqtfmv8HUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoSnXPxcWZkohXH7j5WNPnTi7f3HM4UaKav1zvGmo0pguhEdjOBbDV2LPzfdfON0c3ophKcyFUig1xocnrzdy2hpCuBD2hiuhGnZfvvrSW3NPnLh4/NK+t189dG3t1gAAAABsfh8EAAD//9SuCeg=") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x3, 0x0, &(0x7f0000006380)) 2.351766168s ago: executing program 2 (id=363): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xd79, 0x40840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000b00)=ANY=[], 0x1e0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.180034965s ago: executing program 3 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000240)=0x9) 1.999971023s ago: executing program 2 (id=368): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x450, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000403000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.742494958s ago: executing program 0 (id=369): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r1, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001100)="f580f3023899", 0xffc3}, {0x0}], 0x2}}], 0x1, 0x804) 1.655557867s ago: executing program 0 (id=371): r0 = io_uring_setup(0x1de0, &(0x7f0000000200)={0x0, 0x446c5}) close(r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 1.52803592s ago: executing program 2 (id=372): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200), 0x0) 1.403328712s ago: executing program 4 (id=375): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r2, 0x1ff}, 0x8) 1.311418801s ago: executing program 4 (id=377): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'rr\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.063130146s ago: executing program 4 (id=379): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4056, &(0x7f0000000280)={[{@noload}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x1ff}}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x451, &(0x7f0000000680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x80) lseek(r0, 0x1, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) getdents(r0, 0x0, 0x58) 1.062783215s ago: executing program 4 (id=380): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x19) 987.901583ms ago: executing program 1 (id=381): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\'', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 933.650428ms ago: executing program 4 (id=382): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) statfs(&(0x7f0000000300)='./file0\x00', 0x0) 905.138151ms ago: executing program 1 (id=383): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x10000001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="9552", 0x2}], 0x1}}], 0x1, 0x4044805) splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 904.767281ms ago: executing program 3 (id=384): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 792.484662ms ago: executing program 2 (id=385): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 703.924391ms ago: executing program 1 (id=386): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) epoll_pwait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x7, 0x0, 0x0) 686.079343ms ago: executing program 0 (id=387): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000b702000003000010850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r0) 645.075437ms ago: executing program 2 (id=388): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="28005080140001004abee33957edf8aaae14574df404000005000200070000000800030008ac0f"], 0x44}}, 0x0) 523.970959ms ago: executing program 1 (id=389): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x40000, 0x0, 0xffff, 0x3, 0x4, 0x1, 0x0, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r0) 523.518699ms ago: executing program 3 (id=390): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 468.635974ms ago: executing program 0 (id=391): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xff0a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/195, 0xc3) getdents64(r1, 0x0, 0x22) 371.807913ms ago: executing program 1 (id=392): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c300000d0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x2d) 235.849167ms ago: executing program 0 (id=393): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000004e2300000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000010000000000000006000000000000000000000000000000080000000100000001000000000000000c001500000004"], 0xc4}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000004c0)='wg2\x00', 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 235.357417ms ago: executing program 4 (id=394): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) 205.38304ms ago: executing program 3 (id=395): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="29f464b7d8", 0x5, 0x40084, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0, 0x6, @multicast}, 0x14) 201.71345ms ago: executing program 1 (id=396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 0s ago: executing program 0 (id=397): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000200)={[{@abort}, {@errors_remount}, {@nomblk_io_submit}, {@bsdgroups}, {@norecovery}, {@minixdf}, {@nobh}]}, 0xfe, 0x7ab, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, r0}) socket$inet6(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. syzkaller login: [ 71.624068][ T4253] cgroup: Unknown subsys name 'net' [ 71.739310][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.242048][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.095646][ T4266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.111625][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.120941][ T4270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.129085][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.151446][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.173038][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.176502][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.181527][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.189569][ T4272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.196294][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.204001][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.210982][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.216918][ T4272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.223061][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.231867][ T4272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.244712][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.246145][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.253163][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.260120][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.267414][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.274630][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.281315][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.287828][ T4272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.303152][ T4272] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.311552][ T4272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.332026][ T4266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.340037][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.348549][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.356565][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.364109][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.874656][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 75.913785][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 75.959423][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 76.020139][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 76.088049][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 76.184792][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.192197][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.201390][ T4264] device bridge_slave_0 entered promiscuous mode [ 76.226528][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.234603][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.243875][ T4273] device bridge_slave_0 entered promiscuous mode [ 76.261653][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.268944][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.277373][ T4264] device bridge_slave_1 entered promiscuous mode [ 76.305756][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.313033][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.321474][ T4273] device bridge_slave_1 entered promiscuous mode [ 76.349921][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.357405][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.365567][ T4279] device bridge_slave_0 entered promiscuous mode [ 76.374326][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.381549][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.389987][ T4277] device bridge_slave_0 entered promiscuous mode [ 76.423739][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.431206][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.439288][ T4279] device bridge_slave_1 entered promiscuous mode [ 76.446851][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.454299][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.462698][ T4277] device bridge_slave_1 entered promiscuous mode [ 76.471861][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.492072][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.504589][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.532613][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.542163][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.549286][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.557749][ T4269] device bridge_slave_0 entered promiscuous mode [ 76.566742][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.574054][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.582773][ T4269] device bridge_slave_1 entered promiscuous mode [ 76.651292][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.664059][ T4264] team0: Port device team_slave_0 added [ 76.672058][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.683869][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.702289][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.716215][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.728043][ T4264] team0: Port device team_slave_1 added [ 76.745840][ T4273] team0: Port device team_slave_0 added [ 76.754450][ T4273] team0: Port device team_slave_1 added [ 76.772180][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.838903][ T4279] team0: Port device team_slave_0 added [ 76.855211][ T4277] team0: Port device team_slave_0 added [ 76.879817][ T4279] team0: Port device team_slave_1 added [ 76.886918][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.894228][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.921187][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.935028][ T4277] team0: Port device team_slave_1 added [ 76.942217][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.949265][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.976387][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.991153][ T4269] team0: Port device team_slave_0 added [ 77.005249][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.012422][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.039075][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.061350][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.068594][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.095004][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.108532][ T4269] team0: Port device team_slave_1 added [ 77.148901][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.156073][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.182295][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.195642][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.202795][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.228847][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.241789][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.248868][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.275049][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.297369][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.304554][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.330863][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.348007][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.355213][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.382116][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 77.388328][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.400142][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.407265][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.433406][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.444424][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 77.451005][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 77.456721][ T4268] Bluetooth: hci1: command 0x0409 tx timeout [ 77.457666][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 77.543159][ T4264] device hsr_slave_0 entered promiscuous mode [ 77.550089][ T4264] device hsr_slave_1 entered promiscuous mode [ 77.569456][ T4273] device hsr_slave_0 entered promiscuous mode [ 77.576606][ T4273] device hsr_slave_1 entered promiscuous mode [ 77.583656][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.591979][ T4273] Cannot create hsr debugfs directory [ 77.601817][ T4277] device hsr_slave_0 entered promiscuous mode [ 77.608857][ T4277] device hsr_slave_1 entered promiscuous mode [ 77.615974][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.623864][ T4277] Cannot create hsr debugfs directory [ 77.635441][ T4279] device hsr_slave_0 entered promiscuous mode [ 77.642581][ T4279] device hsr_slave_1 entered promiscuous mode [ 77.649127][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.656971][ T4279] Cannot create hsr debugfs directory [ 77.728475][ T4269] device hsr_slave_0 entered promiscuous mode [ 77.735842][ T4269] device hsr_slave_1 entered promiscuous mode [ 77.742858][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.750915][ T4269] Cannot create hsr debugfs directory [ 78.109554][ T4264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.120272][ T4264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.131335][ T4264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.151905][ T4264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.224556][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.235914][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.256495][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.267374][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.328234][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.350280][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.368458][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.379361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.390128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.424222][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.440290][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.456158][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.486950][ T4277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.513228][ T4277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.526722][ T4277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.536711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.545996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.556797][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.564380][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.574233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.606300][ T4277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.648239][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.658987][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.668259][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.675568][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.686806][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.737069][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.749074][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.759397][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.773568][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.813678][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.823735][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.842443][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.853286][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.869973][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.888541][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.898094][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.907675][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.917159][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.950172][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.967489][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.980367][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.990981][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.000335][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.018599][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.038823][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.048441][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.057453][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.068057][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.079272][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.086540][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.118186][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.143743][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.155477][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.165539][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.177257][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.184512][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.196646][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.206425][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.217593][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.226802][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.236668][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.246521][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.254441][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.263827][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.275800][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.291337][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.304517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.320098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.368270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.383313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.398060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.409001][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.416237][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.432957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.441084][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 79.441815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.456048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.474444][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.496799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.506434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.515723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.524154][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 79.524202][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 79.537176][ T4272] Bluetooth: hci4: command 0x041b tx timeout [ 79.537774][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 79.545862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.559508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.596847][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.609622][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.619909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.627803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.635869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.645283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.656169][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.663365][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.672370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.681360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.689942][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.697111][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.705846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.715391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.725280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.736150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.754224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.764885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.774606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.785168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.796181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.805357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.827642][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.853624][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.868521][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.912238][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.931589][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.942418][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.953661][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.964104][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.973735][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.986034][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.023899][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.046618][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.055802][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.064826][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.073699][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.083199][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.093299][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.102830][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.111511][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.119845][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.129110][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.137261][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.153186][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.164395][ T4264] device veth0_vlan entered promiscuous mode [ 80.194853][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.222308][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.256774][ T4264] device veth1_vlan entered promiscuous mode [ 80.276828][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.292358][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.311147][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.329026][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.338726][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.346038][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.355407][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.364665][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.374880][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.382106][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.392092][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.436778][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.451476][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.498039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.512120][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.532163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.544665][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.574936][ T4264] device veth0_macvtap entered promiscuous mode [ 80.593478][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.614783][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.644670][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.652993][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.677583][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.687508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.703070][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.717556][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.730115][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.743854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.753942][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.766027][ T4264] device veth1_macvtap entered promiscuous mode [ 80.779595][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.800408][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.856667][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.869060][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.878505][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.887400][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.899820][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.915522][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.949441][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.973368][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.001367][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.010095][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.044388][ T4264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.061270][ T4264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.070045][ T4264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.093691][ T4264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.117881][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.143792][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.235064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.261490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.278007][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.304263][ T4273] device veth0_vlan entered promiscuous mode [ 81.320394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.339198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.362551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.370183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.422372][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.449492][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.458720][ T4273] device veth1_vlan entered promiscuous mode [ 81.480411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.492503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.521639][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 81.564621][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.582625][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.601016][ T4272] Bluetooth: hci3: command 0x040f tx timeout [ 81.601134][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 81.607106][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 81.620373][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 81.626691][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.665914][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.677287][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.689114][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.700914][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.706430][ T4273] device veth0_macvtap entered promiscuous mode [ 81.726236][ T4277] device veth0_vlan entered promiscuous mode [ 81.744855][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.759887][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.775131][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.784600][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.799336][ T4273] device veth1_macvtap entered promiscuous mode [ 81.833845][ T4277] device veth1_vlan entered promiscuous mode [ 81.853422][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.863056][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.872278][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.884876][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.893994][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.908822][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.930114][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.941845][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.956337][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.967881][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.983500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.995276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.026023][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.060204][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.074548][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.105814][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.115427][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.159656][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.171380][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.181136][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.189913][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.208842][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.218498][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.234728][ T4277] device veth0_macvtap entered promiscuous mode [ 82.263307][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.273431][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.284211][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.294707][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.313461][ T4277] device veth1_macvtap entered promiscuous mode [ 82.347007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.362451][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.378633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.390165][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.399753][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.412538][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.439411][ T4269] device veth0_vlan entered promiscuous mode [ 82.483035][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.497556][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.511425][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.524312][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.535380][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.546497][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.558964][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.589021][ T4279] device veth0_vlan entered promiscuous mode [ 82.598009][ T4382] loop0: detected capacity change from 0 to 32768 [ 82.610114][ T4269] device veth1_vlan entered promiscuous mode [ 82.624555][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.633626][ T4382] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4382) [ 82.649145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.658065][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.673579][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.688736][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.690109][ T4382] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.755024][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.767498][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.772286][ T4382] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 82.779217][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.799449][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.812861][ T4382] BTRFS info (device loop0): setting nodatacow, compression disabled [ 82.818787][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.825184][ T4382] BTRFS info (device loop0): turning on flush-on-commit [ 82.833200][ T4279] device veth1_vlan entered promiscuous mode [ 82.851086][ T4382] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 82.861478][ T4382] BTRFS info (device loop0): use lzo compression, level 0 [ 82.869409][ T4382] BTRFS info (device loop0): setting nodatasum [ 82.877107][ T4382] BTRFS info (device loop0): use no compression [ 82.894023][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.896635][ T4382] BTRFS info (device loop0): trying to use backup root at mount time [ 82.911934][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.925827][ T4382] BTRFS info (device loop0): max_inline at 0 [ 82.931764][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.933843][ T4382] BTRFS info (device loop0): using free space tree [ 82.948921][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.968768][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.984445][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.997213][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.009895][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.038470][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.055163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.069173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.109743][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.113204][ T4269] device veth0_macvtap entered promiscuous mode [ 83.129259][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.179093][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.196314][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.206865][ T4362] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 83.223241][ T4382] BTRFS warning (device loop0): couldn't read tree root [ 83.233580][ T4269] device veth1_macvtap entered promiscuous mode [ 83.252204][ T4382] BTRFS warning (device loop0): try to load backup roots slot 1 [ 83.261372][ T46] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 83.279286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.303317][ T4382] BTRFS warning (device loop0): couldn't read tree root [ 83.310360][ T4382] BTRFS warning (device loop0): try to load backup roots slot 2 [ 83.318273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.319830][ T4382] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 83.339772][ T4382] BTRFS warning (device loop0): couldn't read tree root [ 83.347117][ T4382] BTRFS warning (device loop0): try to load backup roots slot 3 [ 83.376423][ T4382] BTRFS info (device loop0): enabling ssd optimizations [ 83.400343][ T4279] device veth0_macvtap entered promiscuous mode [ 83.410331][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.426759][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.432647][ T4382] BTRFS info (device loop0): rebuilding free space tree [ 83.452979][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.472162][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.493532][ T4279] device veth1_macvtap entered promiscuous mode [ 83.517517][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.549682][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.562747][ T4382] BTRFS info (device loop0): checking UUID tree [ 83.569803][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.587332][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.597334][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.608722][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 83.615972][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.637455][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.648042][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.658692][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.668764][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.680168][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.690400][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 83.696704][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 83.703257][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 83.703271][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 83.709614][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.726592][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.738641][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.762351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.791854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.815441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.844704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.858757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.879584][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.894320][ T4264] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.901285][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.916486][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.926608][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.986842][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.020576][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.052020][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.082342][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.095917][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.122815][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.148110][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.163174][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.179348][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.189991][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.227423][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.269100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.293164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.325383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.357699][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.388996][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.410636][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.424159][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.434531][ T4420] loop0: detected capacity change from 0 to 8 [ 84.436870][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.452819][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.463129][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.475630][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.491046][ T128] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.494648][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.547179][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.557966][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.588267][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.600160][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.611224][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.620399][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.671887][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.680338][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.717245][ T128] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 84.728360][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.740913][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.779865][ T128] usb 3-1: config 0 descriptor?? [ 84.801939][ T128] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 84.816466][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.839978][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.871753][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.941231][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.961187][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.015691][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.067522][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.090836][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.139073][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.152622][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.201702][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.237474][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.237500][ T128] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 85.659251][ T128] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 85.890093][ T4255] usb 3-1: USB disconnect, device number 2 [ 86.036946][ T4432] loop4: detected capacity change from 0 to 32768 [ 86.146492][ T26] audit: type=1800 audit(1760366792.573:2): pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 86.177906][ T4433] loop1: detected capacity change from 0 to 32768 [ 86.189234][ T4433] ======================================================= [ 86.189234][ T4433] WARNING: The mand mount option has been deprecated and [ 86.189234][ T4433] and is ignored by this kernel. Remove the mand [ 86.189234][ T4433] option from the mount to silence this warning. [ 86.189234][ T4433] ======================================================= [ 86.315932][ T4433] XFS (loop1): Mounting V5 Filesystem [ 86.434651][ T4433] XFS (loop1): Ending clean mount [ 86.477522][ T4433] XFS (loop1): Quotacheck needed: Please wait. [ 86.616466][ T4447] binder: 4446:4447 ioctl c018620c 200000000000 returned -1 [ 86.698421][ T4433] XFS (loop1): Quotacheck: Done. [ 86.892051][ T126] cfg80211: failed to load regulatory.db [ 87.136835][ T4269] XFS (loop1): Unmounting Filesystem [ 87.338412][ T4459] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 87.760123][ T4449] loop2: detected capacity change from 0 to 32768 [ 88.002848][ T4449] XFS (loop2): Mounting V5 Filesystem [ 88.117489][ T4472] loop0: detected capacity change from 0 to 2048 [ 88.162079][ T4478] loop1: detected capacity change from 0 to 1024 [ 88.219086][ T4478] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.241237][ T4449] XFS (loop2): Ending clean mount [ 88.283006][ T4478] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 88.299226][ T4472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.308629][ T26] audit: type=1800 audit(1760366794.723:3): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 88.356955][ T4478] JBD2: no valid journal superblock found [ 88.372584][ T4478] EXT4-fs (loop1): error loading journal [ 88.584949][ T4273] XFS (loop2): Unmounting Filesystem [ 89.104831][ T4487] Zero length message leads to an empty skb [ 89.105019][ T4486] netlink: 'syz.3.23': attribute type 4 has an invalid length. [ 89.131658][ T4486] netlink: 17 bytes leftover after parsing attributes in process `syz.3.23'. [ 90.050855][ T4520] netlink: 'syz.1.37': attribute type 1 has an invalid length. [ 90.181852][ T4499] loop2: detected capacity change from 0 to 32768 [ 90.244714][ T4529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 90.279658][ T4499] XFS (loop2): Mounting V5 Filesystem [ 90.376791][ T4538] netlink: 220 bytes leftover after parsing attributes in process `syz.3.41'. [ 90.380848][ T4499] XFS (loop2): Ending clean mount [ 90.637680][ T4541] mkiss: ax0: crc mode is auto. [ 90.676208][ T4273] XFS (loop2): Unmounting Filesystem [ 90.823956][ T4546] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.882272][ T4545] sctp: [Deprecated]: syz.3.46 (pid 4545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.882272][ T4545] Use struct sctp_sack_info instead [ 91.011430][ T4550] netlink: 'syz.1.48': attribute type 8 has an invalid length. [ 91.346091][ T4558] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 91.942908][ T4577] netlink: 140 bytes leftover after parsing attributes in process `syz.3.58'. [ 91.961827][ T4577] netlink: 140 bytes leftover after parsing attributes in process `syz.3.58'. [ 91.995667][ T4577] netlink: 140 bytes leftover after parsing attributes in process `syz.3.58'. [ 92.065776][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.085746][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.290273][ T4587] loop4: detected capacity change from 0 to 512 [ 92.424254][ T4565] loop2: detected capacity change from 0 to 40427 [ 92.453034][ T4587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.465435][ T4565] F2FS-fs (loop2): invalid crc value [ 92.517823][ T4587] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.551478][ T4565] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.715125][ T4587] EXT4-fs (loop4): shut down requested (2) [ 92.757451][ T4565] F2FS-fs (loop2): Start checkpoint disabled! [ 92.816749][ T4565] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 92.878345][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 92.979331][ T26] audit: type=1800 audit(1760366799.403:4): pid=4565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.44" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 93.018682][ T4565] syz.2.44: attempt to access beyond end of device [ 93.018682][ T4565] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 93.305071][ T4584] loop0: detected capacity change from 0 to 32768 [ 93.382666][ T26] audit: type=1800 audit(1760366799.813:5): pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.61" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 93.436752][ T28] kworker/u4:2: attempt to access beyond end of device [ 93.436752][ T28] loop2: rw=1, sector=45104, nr_sectors = 56 limit=40427 [ 93.507824][ T28] kworker/u4:2: attempt to access beyond end of device [ 93.507824][ T28] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 93.553888][ T28] kworker/u4:2: attempt to access beyond end of device [ 93.553888][ T28] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 93.624984][ T4599] loop1: detected capacity change from 0 to 32768 [ 93.665908][ T4599] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.66 (4599) [ 93.716026][ T4599] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.756390][ T4599] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 93.782679][ T4599] BTRFS info (device loop1): enabling ssd optimizations [ 93.789802][ T4599] BTRFS info (device loop1): using spread ssd allocation scheme [ 93.828845][ T4599] BTRFS info (device loop1): setting nodatacow, compression disabled [ 93.849586][ T4599] BTRFS info (device loop1): not using ssd optimizations [ 93.868111][ T4599] BTRFS info (device loop1): not using spread ssd allocation scheme [ 93.888292][ T4599] BTRFS info (device loop1): max_inline at 0 [ 93.914887][ T4599] BTRFS info (device loop1): using free space tree [ 94.171511][ T4602] loop4: detected capacity change from 0 to 40427 [ 94.210110][ T4602] F2FS-fs (loop4): invalid crc value [ 94.251163][ T4602] F2FS-fs (loop4): Found nat_bits in checkpoint [ 94.315396][ T4269] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.384913][ T4602] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.555086][ T4602] syz.4.67: attempt to access beyond end of device [ 94.555086][ T4602] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 94.637992][ T4279] syz-executor: attempt to access beyond end of device [ 94.637992][ T4279] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.012507][ T4609] loop0: detected capacity change from 0 to 32768 [ 95.042142][ T4648] loop1: detected capacity change from 0 to 1024 [ 95.070252][ T26] audit: type=1800 audit(1760366801.493:6): pid=4609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.69" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 95.236777][ T4648] hfsplus: xattr searching failed [ 95.337138][ T4648] hfsplus: xattr searching failed [ 95.351781][ T26] audit: type=1800 audit(1760366801.783:7): pid=4648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.80" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 95.353679][ T4648] hfsplus: xattr searching failed [ 95.667733][ T11] hfsplus: b-tree write err: -5, ino 3 [ 95.833001][ T4659] loop1: detected capacity change from 0 to 256 [ 95.952348][ T4663] loop2: detected capacity change from 0 to 64 [ 96.008972][ T4665] loop0: detected capacity change from 0 to 2048 [ 96.077864][ T4665] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.387296][ T4683] loop1: detected capacity change from 0 to 64 [ 96.419182][ T4682] loop2: detected capacity change from 0 to 256 [ 96.444505][ T26] audit: type=1800 audit(1760366802.873:8): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.96" name="bus" dev="loop1" ino=22 res=0 errno=0 [ 96.494167][ T4682] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 96.695581][ T4692] loop8: detected capacity change from 0 to 7 [ 96.712361][ T4692] Dev loop8: unable to read RDB block 7 [ 96.725330][ T4692] loop8: unable to read partition table [ 96.736044][ T4690] loop1: detected capacity change from 0 to 4096 [ 96.742267][ T4692] loop8: partition table beyond EOD, truncated [ 96.752338][ T4692] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 96.796534][ T4255] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.810141][ T4690] ntfs: volume version 3.1. [ 96.841361][ T4255] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.884494][ T4690] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 96.899985][ T4690] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 96.918546][ T4690] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 96.954403][ T4698] loop0: detected capacity change from 0 to 128 [ 96.988778][ T4698] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 97.073377][ T4698] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.266428][ T4706] loop1: detected capacity change from 0 to 512 [ 97.286651][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 97.312624][ T4706] EXT4-fs: Ignoring removed oldalloc option [ 97.318647][ T4706] EXT4-fs: Ignoring removed bh option [ 97.399354][ T4706] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.104: corrupted in-inode xattr [ 97.489726][ T4706] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.104: couldn't read orphan inode 15 (err -117) [ 97.529082][ T4706] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 97.764961][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 98.259510][ T4712] loop0: detected capacity change from 0 to 32768 [ 98.267005][ T4735] loop4: detected capacity change from 0 to 4096 [ 98.298640][ T4735] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 98.334016][ T4735] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 98.349087][ T4735] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 98.377925][ T4735] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 98.393114][ T4735] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 98.424471][ T4735] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 98.436638][ T4735] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 98.485072][ T4735] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 98.500806][ T4735] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 98.559937][ T4735] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 98.597497][ T4735] ntfs: volume version 3.1. [ 98.680295][ T4749] loop3: detected capacity change from 0 to 8192 [ 98.700619][ T126] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.738854][ T4749] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 98.764800][ T4749] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 98.774666][ T4749] REISERFS (device loop3): using ordered data mode [ 98.781538][ T4749] reiserfs: using flush barriers [ 98.802977][ T4749] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.821620][ T4749] REISERFS (device loop3): checking transaction log (loop3) [ 98.848046][ T4749] REISERFS (device loop3): Using r5 hash to sort names [ 98.891641][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 98.903162][ T126] usb 2-1: config 0 has no interfaces? [ 98.912947][ T4749] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 98.945526][ T126] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 98.979864][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.994876][ T126] usb 2-1: Product: syz [ 99.005854][ T126] usb 2-1: Manufacturer: syz [ 99.015770][ T126] usb 2-1: SerialNumber: syz [ 99.030386][ T126] usb 2-1: config 0 descriptor?? [ 99.156750][ T4754] loop2: detected capacity change from 0 to 32768 [ 99.164379][ T4754] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.128 (4754) [ 99.185788][ T4754] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.197036][ T4754] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 99.206149][ T4754] BTRFS info (device loop2): turning off barriers [ 99.213989][ T4754] BTRFS info (device loop2): setting nodatasum [ 99.220421][ T4754] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 99.230383][ T4754] BTRFS info (device loop2): use zstd compression, level 3 [ 99.237794][ T4754] BTRFS info (device loop2): using free space tree [ 99.469388][ T4746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.486145][ T4746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.496444][ T14] usb 2-1: USB disconnect, device number 2 [ 99.646896][ T4273] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.122850][ T4786] loop4: detected capacity change from 0 to 512 [ 100.131937][ T4786] EXT4-fs: Ignoring removed orlov option [ 100.138154][ T4784] device syzkaller1 entered promiscuous mode [ 100.143468][ T4780] loop8: detected capacity change from 0 to 8 [ 100.150962][ T4786] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 100.173443][ T4780] Dev loop8: unable to read RDB block 8 [ 100.179114][ T4780] loop8: unable to read partition table [ 100.191747][ T4780] loop8: partition table beyond EOD, truncated [ 100.208044][ T4786] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 100.252485][ T4780] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 100.360690][ T4786] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.133: corrupted in-inode xattr [ 100.390070][ T4786] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.133: couldn't read orphan inode 15 (err -117) [ 100.417742][ T4786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.746886][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 100.763890][ T4802] loop1: detected capacity change from 0 to 4096 [ 100.833495][ T4802] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 100.862530][ T4802] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 100.890660][ T4802] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 100.910577][ T4802] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 100.930602][ T4802] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 100.957238][ T4802] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 100.975019][ T4802] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 100.983313][ T4802] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 100.991433][ T4802] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 100.999713][ T4802] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00 [ 101.989127][ T4823] loop2: detected capacity change from 0 to 32768 [ 102.099388][ T4823] XFS (loop2): Mounting V5 Filesystem [ 102.222342][ T4823] XFS (loop2): Ending clean mount [ 102.250066][ T4318] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.275857][ T4823] XFS (loop2): Quotacheck needed: Please wait. [ 102.345020][ T4823] XFS (loop2): Quotacheck: Done. [ 102.460735][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 102.467960][ T4318] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.498359][ T4318] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 102.518878][ T4318] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.542154][ T4273] XFS (loop2): Unmounting Filesystem [ 102.554730][ T4318] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 102.576363][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.605285][ T4318] usb 5-1: Product: syz [ 102.609578][ T4318] usb 5-1: Manufacturer: syz [ 102.635937][ T4318] usb 5-1: SerialNumber: syz [ 102.652393][ T4318] usb 5-1: config 0 descriptor?? [ 102.700796][ T4326] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 102.905055][ T4326] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.925297][ T4326] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 102.945027][ T4326] usb 4-1: can't read configurations, error -71 [ 102.957175][ T4869] loop1: detected capacity change from 0 to 32768 [ 103.014040][ T4872] loop0: detected capacity change from 0 to 32768 [ 103.030994][ T4872] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.163 (4872) [ 103.063850][ T4872] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.078228][ T4318] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 103.091309][ T4872] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 103.102305][ T4872] BTRFS info (device loop0): using free space tree [ 103.143206][ T4872] BTRFS info (device loop0): enabling ssd optimizations [ 103.265315][ T4264] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.486092][ T4318] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 103.564632][ T4318] usb 5-1: USB disconnect, device number 2 [ 104.105759][ T4909] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 104.269369][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 104.302532][ T4909] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.317011][ T4909] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.351714][ T4909] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.366504][ T4326] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.412416][ T4909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.447182][ T4936] loop3: detected capacity change from 0 to 1024 [ 104.582211][ T4326] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 104.610594][ T4326] usb 5-1: config 0 has no interface number 0 [ 104.619557][ T4326] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 104.641205][ T4909] usb 2-1: usb_control_msg returned -32 [ 104.646866][ T4909] usbtmc 2-1:16.0: can't read capabilities [ 104.647956][ T4940] loop3: detected capacity change from 0 to 256 [ 104.674029][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.705173][ T4326] usb 5-1: Product: syz [ 104.709431][ T4326] usb 5-1: Manufacturer: syz [ 104.723246][ T4326] usb 5-1: SerialNumber: syz [ 104.728574][ T4932] loop0: detected capacity change from 0 to 40427 [ 104.739882][ T4326] usb 5-1: config 0 descriptor?? [ 104.759055][ T4932] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 104.779636][ T4932] F2FS-fs (loop0): invalid crc value [ 104.788912][ T4932] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.897970][ T4932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.954998][ T4326] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 104.965165][ T4326] usb 5-1: No valid video chain found. [ 104.979040][ T4326] usb 5-1: USB disconnect, device number 3 [ 105.049911][ T4264] syz-executor: attempt to access beyond end of device [ 105.049911][ T4264] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.226985][ T4957] loop2: detected capacity change from 0 to 4096 [ 105.554424][ T4965] program syz.4.189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.720625][ T4326] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.916009][ T4326] usb 1-1: Using ep0 maxpacket: 32 [ 105.923880][ T4326] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 105.958129][ T4326] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 105.989020][ T4326] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 106.029041][ T4326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.064865][ T4326] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.097978][ T4326] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.144317][ T4326] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 106.177380][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.215160][ T4326] usb 1-1: config 0 descriptor?? [ 106.463731][ T4326] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.679882][ T4326] usb 1-1: USB disconnect, device number 2 [ 106.700940][ T4326] usblp1: removed [ 106.719035][ T4908] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.843970][ T4997] Illegal XDP return value 4294967274 on prog (id 20) dev syz_tun, expect packet loss! [ 106.912897][ T4908] usb 5-1: Using ep0 maxpacket: 16 [ 106.918716][ T4910] usb 2-1: USB disconnect, device number 3 [ 106.929779][ T4908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.970896][ T4908] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.018205][ T4908] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.035950][ T4908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.060693][ T4908] usb 5-1: Product: syz [ 107.065047][ T4908] usb 5-1: Manufacturer: syz [ 107.069701][ T4908] usb 5-1: SerialNumber: syz [ 107.303688][ T4908] usb 5-1: cannot find UAC_HEADER [ 107.384261][ T4908] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 107.411896][ T4908] usb 5-1: USB disconnect, device number 4 [ 107.432263][ T4999] loop2: detected capacity change from 0 to 32768 [ 107.447857][ T4999] XFS (loop2): Mounting V5 Filesystem [ 107.518222][ T4999] XFS (loop2): Ending clean mount [ 107.543445][ T4999] XFS (loop2): Quotacheck needed: Please wait. [ 107.589453][ T4999] XFS (loop2): Quotacheck: Done. [ 107.648726][ T4273] XFS (loop2): Unmounting Filesystem [ 107.654489][ T4414] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.872169][ T4414] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.878917][ T5027] loop1: detected capacity change from 0 to 256 [ 107.899736][ T4414] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.927944][ T4414] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 107.930403][ T5027] exfat: Deprecated parameter 'utf8' [ 107.955864][ T4414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.963236][ T5027] exfat: Deprecated parameter 'utf8' [ 107.989707][ T4414] usb 1-1: SerialNumber: syz [ 108.028983][ T5027] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 108.074663][ T5033] loop2: detected capacity change from 0 to 1024 [ 108.173160][ T5035] device syzkaller1 entered promiscuous mode [ 108.234967][ T4414] usb 1-1: 0:2 : does not exist [ 108.300834][ T4414] usb 1-1: USB disconnect, device number 3 [ 108.339214][ T28] hfsplus: b-tree write err: -5, ino 8 [ 108.654293][ T5046] loop3: detected capacity change from 0 to 4096 [ 108.769814][ T5054] loop4: detected capacity change from 0 to 1024 [ 108.829793][ T5054] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.847285][ T5054] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.125563][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 109.370847][ T5078] loop0: detected capacity change from 0 to 16 [ 109.412163][ T5078] erofs: (device loop0): mounted with root inode @ nid 36. [ 109.655312][ T5086] loop0: detected capacity change from 0 to 128 [ 109.690935][ T5086] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 109.699980][ T5086] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.782446][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 109.846274][ T5074] loop1: detected capacity change from 0 to 40427 [ 109.867117][ T5074] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 109.901836][ T5074] F2FS-fs (loop1): invalid crc value [ 109.933151][ T5074] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.018427][ T5074] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.115160][ T4269] syz-executor: attempt to access beyond end of device [ 110.115160][ T4269] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 110.127383][ T5100] device gretap0 entered promiscuous mode [ 110.149931][ T5102] loop0: detected capacity change from 0 to 512 [ 110.155199][ T5100] batman_adv: batadv0: Adding interface: macvlan2 [ 110.161860][ T5102] EXT4-fs: Ignoring removed nobh option [ 110.169657][ T5100] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.169722][ T5102] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 110.202283][ T5100] batman_adv: batadv0: Interface activated: macvlan2 [ 110.460102][ T5108] loop3: detected capacity change from 0 to 256 [ 110.471512][ T5108] exfat: Deprecated parameter 'utf8' [ 110.476936][ T5108] exfat: Deprecated parameter 'utf8' [ 110.509269][ T5108] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 110.553168][ T5111] loop4: detected capacity change from 0 to 1024 [ 110.572024][ T5108] process 'syz.3.244' launched '/dev/fd/3' with NULL argv: empty string added [ 110.583699][ T5111] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.636533][ T5111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.661110][ T5117] loop2: detected capacity change from 0 to 128 [ 110.798889][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 111.110745][ T4414] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.145298][ T5127] loop3: detected capacity change from 0 to 32768 [ 111.151875][ T4908] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.305106][ T4414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.336550][ T4414] usb 3-1: New USB device found, idVendor=056a, idProduct=032d, bcdDevice= 0.00 [ 111.340750][ T4908] usb 2-1: Using ep0 maxpacket: 16 [ 111.361162][ T4414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.372774][ T4908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.381522][ T4414] usb 3-1: config 0 descriptor?? [ 111.394344][ T4908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.414748][ T4908] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 111.437805][ T4908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.474769][ T4908] usb 2-1: config 0 descriptor?? [ 111.730666][ T4910] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.836196][ T4414] wacom 0003:056A:032D.0002: unknown main item tag 0x0 [ 111.859018][ T4414] wacom 0003:056A:032D.0002: unknown main item tag 0x0 [ 111.868942][ T4414] wacom 0003:056A:032D.0002: unknown main item tag 0x0 [ 111.884327][ T4414] wacom 0003:056A:032D.0002: unknown main item tag 0x0 [ 111.892742][ T4414] wacom 0003:056A:032D.0002: Unknown device_type for 'HID 056a:032d'. Ignoring. [ 111.923130][ T4910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.940083][ T4910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.960073][ T4910] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 111.979165][ T4910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.002101][ T4910] usb 4-1: config 0 descriptor?? [ 112.014527][ T5136] loop4: detected capacity change from 0 to 32768 [ 112.015191][ T4414] usb 3-1: USB disconnect, device number 3 [ 112.031515][ T5144] loop0: detected capacity change from 0 to 512 [ 112.047308][ T5144] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 112.059174][ T5144] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 112.059297][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 112.059314][ T26] audit: type=1800 audit(1760366819.483:10): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.255" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 112.077795][ T5144] System zones: [ 112.100353][ T26] audit: type=1800 audit(1760366819.523:11): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.255" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 112.104353][ T4908] usb 2-1: language id specifier not provided by device, defaulting to English [ 112.127487][ T5144] 1-12 [ 112.139025][ T5144] EXT4-fs (loop0): orphan cleanup on readonly fs [ 112.147652][ T5144] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.259: invalid indirect mapped block 12 (level 1) [ 112.165433][ T5144] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.259: invalid indirect mapped block 2 (level 2) [ 112.182251][ T5144] EXT4-fs (loop0): 1 truncate cleaned up [ 112.196324][ T5144] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 112.244227][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 112.305064][ T4908] letsketch 0003:6161:4D15.0003: Device info: á‘” [ 112.428954][ T5151] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 112.441175][ T4910] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 112.448511][ T4910] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 112.456387][ T4910] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 112.465958][ T4910] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 112.497247][ T4910] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 112.516687][ T4910] cm6533_jd 0003:0D8C:0022.0004: No inputs registered, leaving [ 112.534760][ T4910] cm6533_jd 0003:0D8C:0022.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 112.557378][ T4908] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 112.565783][ T4908] letsketch: probe of 0003:6161:4D15.0003 failed with error -71 [ 112.577558][ T5154] loop0: detected capacity change from 0 to 256 [ 112.586982][ T4908] usb 2-1: USB disconnect, device number 4 [ 112.595041][ T5154] FAT-fs (loop0): Unrecognized mount option "cheUk=normal" or missing value [ 112.716321][ T4417] usb 4-1: USB disconnect, device number 4 [ 113.265873][ T5176] loop4: detected capacity change from 0 to 256 [ 113.289218][ T5176] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.352891][ T5180] loop3: detected capacity change from 0 to 512 [ 113.370741][ T5180] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.392596][ T5180] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.484982][ T5180] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.275: invalid block [ 113.542865][ T5189] loop2: detected capacity change from 0 to 256 [ 113.550159][ T5189] exfat: Deprecated parameter 'namecase' [ 113.556217][ T5180] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.275: invalid indirect mapped block 4294967295 (level 1) [ 113.556309][ T5189] exfat: Deprecated parameter 'utf8' [ 113.585406][ T5189] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 113.651806][ T5180] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.275: invalid indirect mapped block 4294967295 (level 1) [ 113.694366][ T5180] EXT4-fs (loop3): 2 truncates cleaned up [ 113.730717][ T5180] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.840956][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 114.006120][ T4414] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.216167][ T4414] usb 2-1: Using ep0 maxpacket: 16 [ 114.224076][ T4414] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 114.244240][ T4414] usb 2-1: config 0 has no interface number 0 [ 114.259945][ T4414] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 114.275349][ T5211] loop4: detected capacity change from 0 to 512 [ 114.292214][ T4414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.300326][ T4414] usb 2-1: Product: syz [ 114.311761][ T4414] usb 2-1: Manufacturer: syz [ 114.316566][ T5211] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.331255][ T4414] usb 2-1: SerialNumber: syz [ 114.336979][ T5211] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.348438][ T4414] usb 2-1: config 0 descriptor?? [ 114.362458][ T4414] hub 2-1:0.145: bad descriptor, ignoring hub [ 114.370869][ T4414] hub: probe of 2-1:0.145 failed with error -5 [ 114.385067][ T4414] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.145/input/input10 [ 114.397583][ T5211] EXT4-fs (loop4): 1 truncate cleaned up [ 114.415834][ T5211] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 114.479269][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 114.683739][ T4417] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.731403][ T4414] usb 2-1: USB disconnect, device number 5 [ 114.872715][ T4417] usb 4-1: Using ep0 maxpacket: 16 [ 114.888773][ T4417] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 114.909018][ T4417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.938196][ T4417] usb 4-1: Product: syz [ 114.947188][ T4417] usb 4-1: Manufacturer: syz [ 114.964631][ T4417] usb 4-1: SerialNumber: syz [ 114.987193][ T4417] usb 4-1: config 0 descriptor?? [ 115.007539][ T4417] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 115.026659][ T4417] usb 4-1: Detected FT232H [ 115.221306][ T4417] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 115.462183][ T5227] loop0: detected capacity change from 0 to 40427 [ 115.482474][ T5227] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 115.508866][ T5227] F2FS-fs (loop0): invalid crc value [ 115.551708][ T5227] F2FS-fs (loop0): Found nat_bits in checkpoint [ 115.642798][ T4417] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 115.694831][ T5227] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 115.845497][ T4255] usb 4-1: USB disconnect, device number 5 [ 115.883309][ T4255] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 115.909251][ T4255] ftdi_sio 4-1:0.0: device disconnected [ 115.918361][ T4264] syz-executor: attempt to access beyond end of device [ 115.918361][ T4264] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.676022][ T5251] loop2: detected capacity change from 0 to 65536 [ 116.739113][ T5251] XFS (loop2): Mounting V5 Filesystem [ 116.880604][ T5251] XFS (loop2): Ending clean mount [ 117.024580][ T4273] XFS (loop2): Unmounting Filesystem [ 117.033780][ T5289] loop0: detected capacity change from 0 to 2048 [ 117.089503][ T5289] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 117.128073][ T5289] UDF-fs: Scanning with blocksize 512 failed [ 117.160182][ T5289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.510714][ T4255] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.526600][ T5271] loop3: detected capacity change from 0 to 40427 [ 117.566499][ T5271] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 117.592954][ T5271] F2FS-fs (loop3): invalid crc value [ 117.636644][ T5271] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.702618][ T4255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.730659][ T4255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.764257][ T4255] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.784410][ T5271] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.830558][ T4255] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.871208][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.882320][ T4255] usb 5-1: config 0 descriptor?? [ 118.063370][ T5306] loop2: detected capacity change from 0 to 32768 [ 118.075467][ T5306] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.319 (5306) [ 118.096048][ T5306] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.108130][ T5306] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 118.116907][ T5306] BTRFS info (device loop2): using free space tree [ 118.125383][ T4277] syz-executor: attempt to access beyond end of device [ 118.125383][ T4277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.300178][ T5297] loop0: detected capacity change from 0 to 40427 [ 118.302241][ T4255] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 118.318430][ T5297] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 118.338088][ T5297] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 118.357739][ T5299] loop1: detected capacity change from 0 to 32768 [ 118.366112][ T5297] F2FS-fs (loop0): invalid crc value [ 118.372032][ T5299] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.318 (5299) [ 118.375726][ T4255] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 118.383000][ T5306] BTRFS info (device loop2): enabling ssd optimizations [ 118.412918][ T5297] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.547404][ T5297] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 118.568209][ T4255] usb 5-1: USB disconnect, device number 5 [ 118.581328][ T5297] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 118.596741][ T4273] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.879480][ T5297] F2FS-fs (loop0): Corrupted max_depth of 3: 255 [ 118.903728][ T5297] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 119.441108][ T5329] loop3: detected capacity change from 0 to 32768 [ 119.630094][ T5329] XFS (loop3): Mounting V5 Filesystem [ 119.726661][ T5329] XFS (loop3): Ending clean mount [ 119.754475][ T5329] XFS (loop3): Quotacheck needed: Please wait. [ 119.846594][ T5331] loop1: detected capacity change from 0 to 32768 [ 119.912573][ T5329] XFS (loop3): Quotacheck: Done. [ 119.945652][ T26] audit: type=1800 audit(1760366827.373:12): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.320" name="bus" dev="loop3" ino=4428 res=0 errno=0 [ 119.988411][ T5329] XFS (loop3): User initiated shutdown received. [ 120.017421][ T5331] XFS (loop1): Mounting V5 Filesystem [ 120.051226][ T5329] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 120.151950][ T5329] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 120.187307][ T5331] XFS (loop1): Ending clean mount [ 120.390602][ T4277] XFS (loop3): Unmounting Filesystem [ 120.452612][ T4269] XFS (loop1): Unmounting Filesystem [ 120.662899][ T5333] loop2: detected capacity change from 0 to 32768 [ 120.757874][ T5333] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.321 (5333) [ 120.760532][ C0] sched: RT throttling activated [ 120.859488][ T5335] loop4: detected capacity change from 0 to 40427 [ 120.933987][ T5335] F2FS-fs (loop4): invalid crc value [ 120.982332][ T5335] F2FS-fs (loop4): Found nat_bits in checkpoint [ 121.198657][ T5335] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 121.512213][ T5339] loop0: detected capacity change from 0 to 262144 [ 121.795016][ T5333] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.443952][ T5361] loop3: detected capacity change from 0 to 131072 [ 122.466804][ T5361] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 122.475053][ T5361] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 122.487029][ T5361] F2FS-fs (loop3): invalid crc value [ 122.512483][ T5339] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 122.561940][ T5333] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 122.574752][ T5333] BTRFS info (device loop2): turning on sync discard [ 122.581212][ T5362] loop1: detected capacity change from 0 to 131072 [ 122.584454][ T5333] BTRFS info (device loop2): setting nodatacow, compression disabled [ 122.597462][ T4279] syz-executor: attempt to access beyond end of device [ 122.597462][ T4279] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.614695][ T5362] F2FS-fs (loop1): invalid crc value [ 122.616590][ T5333] BTRFS info (device loop2): turning off barriers [ 122.640244][ T5361] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.666064][ T5333] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 122.677308][ T5333] BTRFS info (device loop2): trying to use backup root at mount time [ 122.695073][ T5333] BTRFS info (device loop2): metadata ratio 32769 [ 122.706592][ T5333] BTRFS info (device loop2): max_inline at 0 [ 122.712792][ T5333] BTRFS info (device loop2): using free space tree [ 122.722895][ T5362] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.723614][ T5361] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 122.737150][ T5361] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 122.772108][ T5362] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 122.782635][ T5362] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 122.958553][ T5333] BTRFS error (device loop2): open_ctree failed: -12 [ 123.906010][ T4910] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.102676][ T4910] usb 3-1: config 0 has no interfaces? [ 124.108474][ T4910] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 124.125490][ T4910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.144988][ T4910] usb 3-1: config 0 descriptor?? [ 124.380320][ T4910] usb 3-1: USB disconnect, device number 4 [ 124.616267][ T5413] loop1: detected capacity change from 0 to 128 [ 124.654408][ T5413] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 124.664406][ T5413] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.691732][ T5413] syz.1.336 (pid 5413) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 124.760125][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 125.134809][ T5429] loop2: detected capacity change from 0 to 16 [ 125.146601][ T4910] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.169317][ T5429] erofs: (device loop2): mounted with root inode @ nid 36. [ 125.340743][ T4910] usb 2-1: Using ep0 maxpacket: 16 [ 125.349570][ T4910] usb 2-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.372505][ T4910] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 125.402423][ T5437] loop2: detected capacity change from 0 to 64 [ 125.409942][ T4910] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 125.430003][ T4910] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.459613][ T4910] usb 2-1: config 1 interface 0 has no altsetting 0 [ 125.474819][ T4910] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.520589][ T4910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.538937][ T4910] usb 2-1: SerialNumber: syz [ 125.561969][ T5421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.569537][ T5421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.812247][ T5452] device syzkaller1 entered promiscuous mode [ 125.970549][ T4414] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.173258][ T4414] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 126.182925][ T4414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.193893][ T4414] usb 3-1: config 0 descriptor?? [ 126.201815][ T4414] gspca_main: spca508-2.14.0 probing 8086:0110 [ 126.250538][ T126] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.408131][ T4414] gspca_spca508: reg_read err -32 [ 126.415561][ T4414] gspca_spca508: reg_read err -32 [ 126.421734][ T4414] gspca_spca508: reg_read err -32 [ 126.427515][ T4414] gspca_spca508: reg_read err -32 [ 126.432918][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 126.439991][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 126.451593][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.462650][ T126] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.472740][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 126.485364][ T126] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 126.495584][ T126] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 126.504797][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.516144][ T126] usb 5-1: config 0 descriptor?? [ 126.536227][ T4282] Bluetooth: hci5: urb ffff88802f5a3100 submission failed (90) [ 126.640057][ T4414] gspca_spca508: reg write: error -71 [ 126.646643][ T4414] spca508: probe of 3-1:0.0 failed with error -71 [ 126.665054][ T4414] usb 3-1: USB disconnect, device number 5 [ 126.737965][ T4326] usb 5-1: USB disconnect, device number 6 [ 126.799595][ T5469] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 126.984204][ T5474] loop3: detected capacity change from 0 to 2048 [ 127.072277][ T5478] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.120367][ T5480] loop0: detected capacity change from 0 to 512 [ 127.156147][ T5480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 127.165610][ T5480] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.170565][ T5474] loop3: detected capacity change from 2048 to 0 [ 127.213046][ C1] I/O error, dev loop3, sector 84 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.225154][ T5483] NILFS (loop3): I/O error reading meta-data file (ino=3, block-offset=0) [ 127.246559][ T5485] loop9: detected capacity change from 0 to 7 [ 127.278797][ T5485] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 127.313282][ T5485] loop9: partition table partially beyond EOD, truncated [ 127.327207][ T4277] NILFS error (device loop3): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 127.340839][ T5485] loop9: p1 size 501170297 extends beyond EOD, truncated [ 127.363541][ T4425] loop: Write error at byte offset 9223372036855820287, length 1024. [ 127.383999][ C1] I/O error, dev loop3, sector 2040 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 127.393831][ C1] I/O error, dev loop3, sector 2040 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 127.404477][ C1] Buffer I/O error on dev loop3, logical block 1020, lost sync page write [ 127.413086][ T4277] NILFS (loop3): unable to write superblock: err=-5 [ 127.442398][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 127.449143][ T4349] loop: Write error at byte offset 9223372036854776831, length 1024. [ 127.475479][ C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 127.485036][ C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 127.494465][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 127.502934][ T4277] NILFS (loop3): unable to write superblock: err=-5 [ 127.509577][ T4277] Remounting filesystem read-only [ 127.522587][ T4277] NILFS error (device loop3): nilfs_readdir: bad page in #12 [ 127.545573][ T5490] loop2: detected capacity change from 0 to 512 [ 127.564783][ T4277] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 127.575468][ T5490] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.636404][ T5490] EXT4-fs (loop2): 1 truncate cleaned up [ 127.679414][ T5490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.841968][ T5500] dccp_xmit_packet: Payload too large (65475) for featneg. [ 127.959554][ T4910] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 127.986849][ T4910] usb 2-1: USB disconnect, device number 6 [ 128.018462][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 128.252650][ T5517] IPVS: rr: FWM 3 0x00000003 - no destination available [ 128.260741][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 128.331607][ T5520] loop4: detected capacity change from 0 to 512 [ 128.338658][ T5520] EXT4-fs: Ignoring removed oldalloc option [ 128.345809][ T5520] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.366706][ T5521] loop1: detected capacity change from 0 to 128 [ 128.368980][ T5520] EXT4-fs (loop4): 1 truncate cleaned up [ 128.379059][ T5520] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.395763][ T5520] EXT4-fs (loop4): shut down requested (2) [ 128.431692][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 128.717687][ T5530] loop4: detected capacity change from 0 to 2048 [ 128.758291][ T5530] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.137818][ T5549] loop3: detected capacity change from 0 to 512 [ 129.151614][ T5549] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.298431][ T4279] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 129.322641][ T4279] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 129.598868][ T5470] ================================================================== [ 129.607006][ T5470] BUG: KASAN: use-after-free in __mutex_lock+0x56e/0xaf0 [ 129.614058][ T5470] Read of size 8 at addr ffff88801ea44060 by task khidpd_00010003/5470 [ 129.622358][ T5470] [ 129.624720][ T5470] CPU: 1 PID: 5470 Comm: khidpd_00010003 Not tainted syzkaller #0 [ 129.632551][ T5470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.642634][ T5470] Call Trace: [ 129.645926][ T5470] [ 129.648962][ T5470] dump_stack_lvl+0x168/0x22e [ 129.653665][ T5470] ? __lock_acquire+0x7c50/0x7c50 [ 129.658714][ T5470] ? show_regs_print_info+0x12/0x12 [ 129.663930][ T5470] ? load_image+0x3b0/0x3b0 [ 129.668463][ T5470] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 129.673863][ T5470] ? __virt_addr_valid+0x188/0x540 [ 129.679001][ T5470] ? __virt_addr_valid+0x465/0x540 [ 129.684137][ T5470] ? __mutex_lock+0x56e/0xaf0 [ 129.688830][ T5470] print_report+0xa8/0x210 [ 129.693275][ T5470] kasan_report+0x10b/0x140 [ 129.697807][ T5470] ? __mutex_lock+0x56e/0xaf0 [ 129.702504][ T5470] __mutex_lock+0x56e/0xaf0 [ 129.707054][ T5470] ? __mutex_lock+0x3a5/0xaf0 [ 129.711755][ T5470] ? l2cap_unregister_user+0x66/0x1a0 [ 129.717156][ T5470] ? mutex_lock_nested+0x10/0x10 [ 129.722112][ T5470] ? timer_delete_sync+0x1f8/0x2a0 [ 129.727249][ T5470] ? try_to_del_timer_sync+0x1b0/0x1b0 [ 129.732732][ T5470] ? _raw_spin_unlock+0x40/0x40 [ 129.737614][ T5470] l2cap_unregister_user+0x66/0x1a0 [ 129.742837][ T5470] hidp_session_thread+0x3c4/0x400 [ 129.747961][ T5470] ? hidp_session_get+0x80/0x80 [ 129.752826][ T5470] ? hidp_session_thread+0x400/0x400 [ 129.758123][ T5470] ? _raw_spin_unlock+0x40/0x40 [ 129.762997][ T5470] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 129.768922][ T5470] ? hidp_session_thread+0x400/0x400 [ 129.774226][ T5470] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 129.780149][ T5470] ? __kthread_parkme+0x162/0x1c0 [ 129.785198][ T5470] kthread+0x29d/0x330 [ 129.789295][ T5470] ? hidp_session_get+0x80/0x80 [ 129.794154][ T5470] ? kthread_blkcg+0xd0/0xd0 [ 129.798765][ T5470] ret_from_fork+0x1f/0x30 [ 129.803214][ T5470] [ 129.806260][ T5470] [ 129.808587][ T5470] Allocated by task 4279: [ 129.812920][ T5470] kasan_set_track+0x4b/0x70 [ 129.817524][ T5470] __kasan_kmalloc+0x8e/0xa0 [ 129.822128][ T5470] __kmalloc+0xb0/0x240 [ 129.826304][ T5470] hci_alloc_dev_priv+0x23/0x1d20 [ 129.831346][ T5470] vhci_create_device+0x13b/0x740 [ 129.836392][ T5470] vhci_write+0x39a/0x460 [ 129.840739][ T5470] vfs_write+0x44c/0x960 [ 129.844996][ T5470] ksys_write+0x143/0x240 [ 129.849440][ T5470] do_syscall_64+0x4c/0xa0 [ 129.853869][ T5470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.859772][ T5470] [ 129.862103][ T5470] Freed by task 4481: [ 129.866089][ T5470] kasan_set_track+0x4b/0x70 [ 129.870828][ T5470] kasan_save_free_info+0x2d/0x50 [ 129.875960][ T5470] ____kasan_slab_free+0x126/0x1e0 [ 129.881101][ T5470] slab_free_freelist_hook+0x131/0x1a0 [ 129.886573][ T5470] __kmem_cache_free+0xb6/0x1f0 [ 129.891452][ T5470] bt_host_release+0x7e/0x90 [ 129.896054][ T5470] device_release+0x92/0x1c0 [ 129.900659][ T5470] kobject_put+0x21d/0x460 [ 129.905092][ T5470] vhci_release+0x87/0xd0 [ 129.909434][ T5470] __fput+0x22c/0x920 [ 129.913436][ T5470] task_work_run+0x1ca/0x250 [ 129.918044][ T5470] do_exit+0x93e/0x2400 [ 129.922225][ T5470] do_group_exit+0x217/0x2d0 [ 129.926834][ T5470] get_signal+0x1272/0x1350 [ 129.931371][ T5470] arch_do_signal_or_restart+0xb0/0x1230 [ 129.937040][ T5470] exit_to_user_mode_loop+0x70/0x110 [ 129.942407][ T5470] exit_to_user_mode_prepare+0xee/0x180 [ 129.948000][ T5470] syscall_exit_to_user_mode+0x16/0x40 [ 129.953483][ T5470] do_syscall_64+0x58/0xa0 [ 129.957921][ T5470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.963841][ T5470] [ 129.966175][ T5470] Last potentially related work creation: [ 129.971904][ T5470] kasan_save_stack+0x3a/0x60 [ 129.976609][ T5470] __kasan_record_aux_stack+0xb2/0xc0 [ 129.982020][ T5470] insert_work+0x54/0x3c0 [ 129.986377][ T5470] __queue_work+0xba3/0xfb0 [ 129.990900][ T5470] queue_work_on+0x11d/0x1d0 [ 129.995511][ T5470] process_one_work+0x898/0x1160 [ 130.000463][ T5470] worker_thread+0xaa2/0x1250 [ 130.005157][ T5470] kthread+0x29d/0x330 [ 130.009279][ T5470] ret_from_fork+0x1f/0x30 [ 130.013715][ T5470] [ 130.016049][ T5470] Second to last potentially related work creation: [ 130.022664][ T5470] kasan_save_stack+0x3a/0x60 [ 130.027359][ T5470] __kasan_record_aux_stack+0xb2/0xc0 [ 130.032753][ T5470] insert_work+0x54/0x3c0 [ 130.037097][ T5470] __queue_work+0xba3/0xfb0 [ 130.041617][ T5470] call_timer_fn+0x1a0/0x670 [ 130.046230][ T5470] __run_timers+0x550/0x7c0 [ 130.050756][ T5470] run_timer_softirq+0x63/0xf0 [ 130.055570][ T5470] handle_softirqs+0x2a1/0x920 [ 130.060357][ T5470] __irq_exit_rcu+0x12f/0x220 [ 130.065066][ T5470] irq_exit_rcu+0x5/0x20 [ 130.069330][ T5470] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 130.074992][ T5470] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.080987][ T5470] [ 130.083497][ T5470] The buggy address belongs to the object at ffff88801ea44000 [ 130.083497][ T5470] which belongs to the cache kmalloc-8k of size 8192 [ 130.097564][ T5470] The buggy address is located 96 bytes inside of [ 130.097564][ T5470] 8192-byte region [ffff88801ea44000, ffff88801ea46000) [ 130.110848][ T5470] [ 130.113185][ T5470] The buggy address belongs to the physical page: [ 130.119613][ T5470] page:ffffea00007a9000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ea40 [ 130.129778][ T5470] head:ffffea00007a9000 order:3 compound_mapcount:0 compound_pincount:0 [ 130.138134][ T5470] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 130.146146][ T5470] raw: 00fff00000010200 ffffea00009a1200 dead000000000003 ffff888017442280 [ 130.154739][ T5470] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 130.163371][ T5470] page dumped because: kasan: bad access detected [ 130.169790][ T5470] page_owner tracks the page as allocated [ 130.175508][ T5470] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3946, tgid 3946 (dhcpcd-run-hook), ts 48308333640, free_ts 48308214150 [ 130.196537][ T5470] post_alloc_hook+0x173/0x1a0 [ 130.201322][ T5470] get_page_from_freelist+0x1a26/0x1ac0 [ 130.206890][ T5470] __alloc_pages+0x1df/0x4e0 [ 130.211501][ T5470] alloc_slab_page+0x5d/0x160 [ 130.216187][ T5470] new_slab+0x87/0x2c0 [ 130.220272][ T5470] ___slab_alloc+0xbc6/0x1230 [ 130.224965][ T5470] __kmem_cache_alloc_node+0x1a0/0x260 [ 130.230430][ T5470] kmalloc_trace+0x26/0xe0 [ 130.234874][ T5470] tomoyo_init_log+0x1081/0x1f50 [ 130.239827][ T5470] tomoyo_supervisor+0x326/0x10b0 [ 130.244959][ T5470] tomoyo_env_perm+0x146/0x1e0 [ 130.249737][ T5470] tomoyo_find_next_domain+0x157a/0x1a40 [ 130.255397][ T5470] tomoyo_bprm_check_security+0x100/0x150 [ 130.261154][ T5470] security_bprm_check+0x5e/0x90 [ 130.266146][ T5470] bprm_execve+0xa77/0x18a0 [ 130.270686][ T5470] do_execveat_common+0x51b/0x6c0 [ 130.275740][ T5470] page last free stack trace: [ 130.280437][ T5470] free_unref_page_prepare+0x8b4/0x9a0 [ 130.285961][ T5470] free_unref_page+0x2e/0x3f0 [ 130.290661][ T5470] __unfreeze_partials+0x1a5/0x200 [ 130.295871][ T5470] put_cpu_partial+0x17c/0x250 [ 130.300646][ T5470] qlist_free_all+0x76/0xe0 [ 130.305162][ T5470] kasan_quarantine_reduce+0x144/0x160 [ 130.310626][ T5470] __kasan_slab_alloc+0x1e/0x80 [ 130.315491][ T5470] slab_post_alloc_hook+0x4b/0x480 [ 130.320611][ T5470] __kmem_cache_alloc_node+0x140/0x260 [ 130.326078][ T5470] __kmalloc+0xa0/0x240 [ 130.330341][ T5470] tomoyo_supervisor+0xba7/0x10b0 [ 130.335376][ T5470] tomoyo_env_perm+0x146/0x1e0 [ 130.340328][ T5470] tomoyo_find_next_domain+0x157a/0x1a40 [ 130.345987][ T5470] tomoyo_bprm_check_security+0x100/0x150 [ 130.351727][ T5470] security_bprm_check+0x5e/0x90 [ 130.356679][ T5470] bprm_execve+0xa77/0x18a0 [ 130.361219][ T5470] [ 130.363547][ T5470] Memory state around the buggy address: [ 130.369273][ T5470] ffff88801ea43f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.377432][ T5470] ffff88801ea43f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.385507][ T5470] >ffff88801ea44000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.393585][ T5470] ^ [ 130.400795][ T5470] ffff88801ea44080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.408871][ T5470] ffff88801ea44100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.416948][ T5470] ================================================================== [ 130.426209][ T5470] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 130.433453][ T5470] CPU: 1 PID: 5470 Comm: khidpd_00010003 Not tainted syzkaller #0 [ 130.441289][ T5470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.451382][ T5470] Call Trace: [ 130.454686][ T5470] [ 130.457648][ T5470] dump_stack_lvl+0x168/0x22e [ 130.462366][ T5470] ? memcpy+0x3c/0x60 [ 130.466404][ T5470] ? show_regs_print_info+0x12/0x12 [ 130.471647][ T5470] ? load_image+0x3b0/0x3b0 [ 130.476208][ T5470] panic+0x2c9/0x710 [ 130.480153][ T5470] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 130.486355][ T5470] ? bpf_jit_dump+0xd0/0xd0 [ 130.490909][ T5470] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 130.496963][ T5470] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 130.502910][ T5470] ? _raw_spin_unlock+0x40/0x40 [ 130.507832][ T5470] check_panic_on_warn+0x80/0xa0 [ 130.512817][ T5470] ? __mutex_lock+0x56e/0xaf0 [ 130.517540][ T5470] end_report+0x66/0x110 [ 130.521832][ T5470] kasan_report+0x118/0x140 [ 130.526393][ T5470] ? __mutex_lock+0x56e/0xaf0 [ 130.531121][ T5470] __mutex_lock+0x56e/0xaf0 [ 130.535685][ T5470] ? __mutex_lock+0x3a5/0xaf0 [ 130.540411][ T5470] ? l2cap_unregister_user+0x66/0x1a0 [ 130.545829][ T5470] ? mutex_lock_nested+0x10/0x10 [ 130.550823][ T5470] ? timer_delete_sync+0x1f8/0x2a0 [ 130.555989][ T5470] ? try_to_del_timer_sync+0x1b0/0x1b0 [ 130.561504][ T5470] ? _raw_spin_unlock+0x40/0x40 [ 130.566409][ T5470] l2cap_unregister_user+0x66/0x1a0 [ 130.571662][ T5470] hidp_session_thread+0x3c4/0x400 [ 130.576822][ T5470] ? hidp_session_get+0x80/0x80 [ 130.581718][ T5470] ? hidp_session_thread+0x400/0x400 [ 130.587047][ T5470] ? _raw_spin_unlock+0x40/0x40 [ 130.591959][ T5470] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 130.597924][ T5470] ? hidp_session_thread+0x400/0x400 [ 130.603255][ T5470] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 130.609209][ T5470] ? __kthread_parkme+0x162/0x1c0 [ 130.614291][ T5470] kthread+0x29d/0x330 [ 130.618414][ T5470] ? hidp_session_get+0x80/0x80 [ 130.623304][ T5470] ? kthread_blkcg+0xd0/0xd0 [ 130.627953][ T5470] ret_from_fork+0x1f/0x30 [ 130.627996][ T5566] loop0: detected capacity change from 0 to 2048 [ 130.636585][ T5566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.636615][ T5566] EXT4-fs: Ignoring removed nobh option [ 130.650902][ T5470] [ 130.654306][ T5470] Kernel Offset: disabled [ 130.658647][ T5470] Rebooting in 86400 seconds..