last executing test programs: 16.730874903s ago: executing program 2 (id=289): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x2) 16.563030324s ago: executing program 2 (id=293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20048055, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x400}, 0x1c) 16.519505586s ago: executing program 2 (id=295): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 15.624199151s ago: executing program 2 (id=305): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 15.297686771s ago: executing program 2 (id=307): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x7fffffff, 0x18f, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 14.779496852s ago: executing program 2 (id=309): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 14.616740562s ago: executing program 32 (id=309): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 3.283508771s ago: executing program 5 (id=407): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 2.767469452s ago: executing program 4 (id=411): r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c3, 0x8, 0x2, 0x5c9}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x2b4f3574d7c1da4b}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2.690159566s ago: executing program 4 (id=412): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x1, 0xdb9, &(0x7f0000000e00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40106e80, &(0x7f0000000280)=0x1) 1.716772366s ago: executing program 3 (id=414): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 1.716615156s ago: executing program 4 (id=415): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000040000000f"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r2, r0}, 0xc) 1.635260361s ago: executing program 3 (id=416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0xfff0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0xa8, r1, 0x105, 0x0, 0x8000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x6, 0x80, [@supported_rates]}, @NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4901}, @device_b, @device_a, @initial, {0x5, 0x1}}, 0x8, @random=0x6c, 0x2, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x1, 0x25, 0x9}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x5, 0x9d, 0x2}}, @val={0x2d, 0x1a, {0x1, 0x3, 0x4, 0x0, {0x9, 0x14, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xd, 0x4}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x20}}, @val={0x76, 0x6, {0x1, 0xfd, 0x25, 0x1ff}}}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@supported_rates]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 1.634790601s ago: executing program 4 (id=417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r1, 0x0, 0xfffffdcf) 1.587866513s ago: executing program 0 (id=419): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) 1.519502848s ago: executing program 4 (id=421): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000007c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf) pwrite64(r1, &(0x7f0000000bc0)="cf", 0x1, 0x7fff) 1.500441219s ago: executing program 3 (id=422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x6071, 0x0, 0xe7, {[@mptcp=@mp_join={0x1e, 0x3, 0x3}]}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 1.432119373s ago: executing program 0 (id=423): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) close(r0) 1.370599097s ago: executing program 0 (id=425): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x36}}, './file0\x00'}) 1.331491409s ago: executing program 0 (id=426): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1.331229759s ago: executing program 3 (id=427): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.245417315s ago: executing program 3 (id=429): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_delete(r0) 1.192302528s ago: executing program 4 (id=430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlockall(0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.1544875s ago: executing program 0 (id=431): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$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") socket$inet(0x2, 0x4000000000000001, 0x0) syslog(0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x110, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 971.337211ms ago: executing program 5 (id=432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88ca}}}}, 0x16) 589.704745ms ago: executing program 1 (id=433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r1, 0x0, 0xfffffdcf) 589.449964ms ago: executing program 5 (id=434): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 530.491898ms ago: executing program 1 (id=435): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24040084) 516.389869ms ago: executing program 0 (id=436): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x19) close(r0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 467.731512ms ago: executing program 1 (id=437): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x728a, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd, 0x3, 0x0}) io_uring_enter(r0, 0x7336, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 440.471043ms ago: executing program 5 (id=438): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433001000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 390.227917ms ago: executing program 1 (id=439): alarm(0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a32000000002800048008000140"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 286.049303ms ago: executing program 5 (id=440): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x0, 0x0, 0xfffffe3f, 0x0, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)=0x5) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) 284.569913ms ago: executing program 1 (id=441): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80), 0xde, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x101000, 0x80) 149.739611ms ago: executing program 3 (id=443): syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x3000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="6469725f756d61736b3d303030303030303030303030303030342c66696c655f756d61736b3d30303030303030303030303030303030303030313334302c696f636861727365743d6d61637475726b6973682c636f6465706167653d69736f383835392d362c63726561746f723d4ddd71752c00eace691af6ae10469da9b01baceb6a9486a6be7f83429052dab3e6e5e287ba3d79e809945e4361c0019a8ed88ae1c6c541bb9a966c0e4d7bde2f8e3add0af5a9c74c520f889381fbcf573e0000000000"], 0x11, 0x2e1, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) open(&(0x7f00000005c0)='./bus\x00', 0x64f42, 0x22) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) 44.013158ms ago: executing program 5 (id=444): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0}], 0x1, 0x10) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x21b, &(0x7f0000000780)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 0s ago: executing program 1 (id=445): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)="40024193d1", 0x5}], 0x1}}], 0x1, 0x4000000) kernel console output (not intermixed with test programs): [ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.337941][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.368164][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.375358][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.401673][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.432640][ T4191] device hsr_slave_0 entered promiscuous mode [ 48.439647][ T4191] device hsr_slave_1 entered promiscuous mode [ 48.446713][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.454974][ T4191] Cannot create hsr debugfs directory [ 48.460932][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.468006][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.494090][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.519970][ T4190] team0: Port device team_slave_0 added [ 48.555639][ T4190] team0: Port device team_slave_1 added [ 48.576599][ T4186] device hsr_slave_0 entered promiscuous mode [ 48.583181][ T4186] device hsr_slave_1 entered promiscuous mode [ 48.589884][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.597601][ T4186] Cannot create hsr debugfs directory [ 48.627780][ T4184] device hsr_slave_0 entered promiscuous mode [ 48.634604][ T4184] device hsr_slave_1 entered promiscuous mode [ 48.641160][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.648860][ T4184] Cannot create hsr debugfs directory [ 48.687714][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.694718][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.720915][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.733900][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.740858][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.766980][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.867358][ T4190] device hsr_slave_0 entered promiscuous mode [ 48.874114][ T4190] device hsr_slave_1 entered promiscuous mode [ 48.881032][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.888859][ T4190] Cannot create hsr debugfs directory [ 48.944273][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 48.954472][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 48.960788][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 48.968007][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 49.023681][ T4173] Bluetooth: hci2: command 0x0409 tx timeout [ 49.078204][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.091724][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.106518][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.116476][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.164645][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.174302][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.182984][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.200367][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.253351][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.270304][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.284531][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.302532][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.350787][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.382538][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.399248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.410015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.427217][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.438543][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.457658][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.469093][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.478286][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.506334][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.516850][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.534885][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.545095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.554931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.564158][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.571334][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.597113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.605813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.617226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.626111][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.633176][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.641568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.681949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.694705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.708613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.718398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.731407][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.754290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.763171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.772481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.781444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.807541][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.822514][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.834877][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.845308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.855123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.871523][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.892233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.900495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.908997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.918957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.929517][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.936688][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.946373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.955196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.963769][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.970832][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.981154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.991166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.999941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.010361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.027879][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.043154][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.060931][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.080360][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.093335][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.102116][ T1385] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.109638][ T1385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.122868][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.134644][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.151880][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.165795][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.174879][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.183042][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.194132][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.210194][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.229891][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.239283][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.248210][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.257437][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.266380][ T1385] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.273641][ T1385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.281552][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.290576][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.299432][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.308853][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.318373][ T1385] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.325578][ T1385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.333308][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.342090][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.351296][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.369546][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.394031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.402626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.411379][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.418476][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.427200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.436158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.444562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.452178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.460122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.469669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.478353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.489008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.498009][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.505306][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.513590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.522186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.531288][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.538505][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.546838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.555921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.563896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.572626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.580504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.590735][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.628691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.639808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.652199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.662655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.675045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.685608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.694772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.703279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.712485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.721714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.730421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.738821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.759630][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.773700][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.782294][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.796851][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.807061][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.815780][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.824288][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.832930][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.842286][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.852048][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.860511][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.870350][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.886372][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.895865][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.909402][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.922103][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.935330][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.955859][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.965522][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.982693][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.997124][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.023780][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.031291][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.033760][ T4225] Bluetooth: hci0: command 0x041b tx timeout [ 51.053655][ T4225] Bluetooth: hci3: command 0x041b tx timeout [ 51.059741][ T4225] Bluetooth: hci4: command 0x041b tx timeout [ 51.066936][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.079074][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.087918][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 51.106896][ T4247] Bluetooth: hci2: command 0x041b tx timeout [ 51.119913][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.150624][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.159826][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.189452][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.209820][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.218611][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.265591][ T4185] device veth0_vlan entered promiscuous mode [ 51.272468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.282770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.292198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.306797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.315150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.322974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.333202][ T4186] device veth0_vlan entered promiscuous mode [ 51.351269][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.368742][ T4186] device veth1_vlan entered promiscuous mode [ 51.380074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.389930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.398549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.408387][ T4185] device veth1_vlan entered promiscuous mode [ 51.437392][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.483629][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.491186][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.518975][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.549209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.558457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.574548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.585624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.596281][ T4185] device veth0_macvtap entered promiscuous mode [ 51.609643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.618065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.627410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.650775][ T4185] device veth1_macvtap entered promiscuous mode [ 51.674398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.682813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.695112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.708428][ T4186] device veth0_macvtap entered promiscuous mode [ 51.719921][ T4186] device veth1_macvtap entered promiscuous mode [ 51.734167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.742906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.751312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.761527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.795607][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.806050][ T4191] device veth0_vlan entered promiscuous mode [ 51.814230][ T4190] device veth0_vlan entered promiscuous mode [ 51.823685][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.832581][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.841769][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.851383][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.860281][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.869609][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.878048][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.887274][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.896301][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.904751][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.912713][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.921217][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.929977][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.938345][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.948221][ T4184] device veth0_vlan entered promiscuous mode [ 51.956228][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.967229][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.978952][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.990895][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.003696][ T4191] device veth1_vlan entered promiscuous mode [ 52.014835][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.022892][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.031975][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.042781][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.052003][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.060896][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.072927][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.084780][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.095812][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.113928][ T4184] device veth1_vlan entered promiscuous mode [ 52.125040][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.133353][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.141855][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.152177][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.163850][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.172770][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.181723][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.191148][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.211721][ T4191] device veth0_macvtap entered promiscuous mode [ 52.221642][ T4190] device veth1_vlan entered promiscuous mode [ 52.233361][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.242148][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.251212][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.261927][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.273249][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.281783][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.291105][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.308408][ T4191] device veth1_macvtap entered promiscuous mode [ 52.329879][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.338105][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.347279][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.397078][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.409360][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.425571][ T4184] device veth0_macvtap entered promiscuous mode [ 52.433117][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.443818][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.454036][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.465248][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.487385][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.497992][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.509087][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.519175][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.529651][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.540689][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.549624][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.558865][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.567465][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.576367][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.585410][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.596246][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.604992][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.616221][ T4184] device veth1_macvtap entered promiscuous mode [ 52.624614][ T4190] device veth0_macvtap entered promiscuous mode [ 52.652554][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.662665][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.671837][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.681616][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.699142][ T4190] device veth1_macvtap entered promiscuous mode [ 52.759632][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.770588][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.780789][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.792370][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.802235][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.812735][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.824608][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.852350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.864735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.873209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.882654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.893978][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.905529][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.915395][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.925851][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.935958][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.947229][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.958194][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.970524][ T1385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.986265][ T1385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.991415][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.006325][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.016489][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.027583][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.038755][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.049460][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.059296][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.070009][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.081959][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.089788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.099199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.103754][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 53.108858][ T4225] Bluetooth: hci4: command 0x040f tx timeout [ 53.119535][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 53.120378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.133876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.142358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.155312][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.164490][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.173192][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.182784][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.192497][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 53.198894][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 53.205309][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.218508][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.221058][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.236583][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.246919][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.257759][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.268696][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.279215][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.289132][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.299696][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.311067][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.336603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.353231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.362101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.376987][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.377112][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.389998][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.395336][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.411007][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.419762][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.442666][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.451471][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.458065][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.468773][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.549052][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.563970][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.596072][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.604140][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.612449][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.637834][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.657103][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.682817][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.707105][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.751556][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.768767][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.810616][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.844526][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.852289][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.875735][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.902820][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.921065][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.954425][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.960948][ T4301] loop2: detected capacity change from 0 to 256 [ 54.058225][ T4303] ip_vti0: Master is either lo or non-ether device [ 54.157927][ T4305] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET) [ 54.292602][ T4307] loop0: detected capacity change from 0 to 8192 [ 54.558021][ T4310] loop3: detected capacity change from 0 to 65536 [ 54.594839][ T4310] ======================================================= [ 54.594839][ T4310] WARNING: The mand mount option has been deprecated and [ 54.594839][ T4310] and is ignored by this kernel. Remove the mand [ 54.594839][ T4310] option from the mount to silence this warning. [ 54.594839][ T4310] ======================================================= [ 54.877852][ T4310] XFS (loop3): Mounting V5 Filesystem [ 54.903903][ T4226] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.967423][ T4310] XFS (loop3): Ending clean mount [ 55.003636][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 55.026928][ T4184] XFS (loop3): Unmounting Filesystem [ 55.185162][ T4240] Bluetooth: hci4: command 0x0419 tx timeout [ 55.222003][ T4240] Bluetooth: hci0: command 0x0419 tx timeout [ 55.243914][ T4240] Bluetooth: hci3: command 0x0419 tx timeout [ 55.282854][ T4173] Bluetooth: hci2: command 0x0419 tx timeout [ 55.289247][ T4173] Bluetooth: hci1: command 0x0419 tx timeout [ 55.293617][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 55.325481][ T4226] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.343339][ T4226] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.445037][ T7] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 55.453182][ T7] usb 3-1: config 0 has no interface number 0 [ 55.459422][ T4226] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 55.481965][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 55.500497][ T4226] usb 5-1: SerialNumber: syz [ 55.508446][ T4348] loop3: detected capacity change from 0 to 512 [ 55.651261][ T4346] loop1: detected capacity change from 0 to 32768 [ 55.651947][ T4348] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 55.673886][ T7] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 55.683873][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.692024][ T7] usb 3-1: Product: syz [ 55.696487][ T7] usb 3-1: Manufacturer: syz [ 55.697675][ T4348] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.701092][ T7] usb 3-1: SerialNumber: syz [ 55.717977][ T7] usb 3-1: config 0 descriptor?? [ 55.727428][ T4346] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 55.736233][ T4346] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 55.774884][ T4346] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 55.774884][ T4346] bh = 19 (type: exp=5, found=4) [ 55.774884][ T4346] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 55.785762][ T7] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 55.795852][ T4346] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 55.809112][ T4226] usb 5-1: 0:2 : does not exist [ 55.812161][ T4346] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 55.825844][ T4346] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 55.833021][ T4346] gfs2: fsid=syz:syz.0: File system withdrawn [ 55.838754][ T4226] usb 5-1: unit 1 not found! [ 55.839506][ T4346] CPU: 1 PID: 4346 Comm: syz.1.20 Not tainted syzkaller #0 [ 55.851222][ T4346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.861309][ T4346] Call Trace: [ 55.864601][ T4346] [ 55.867564][ T4346] dump_stack_lvl+0x188/0x250 [ 55.872280][ T4346] ? kobject_uevent_env+0x371/0x890 [ 55.877511][ T4346] ? show_regs_print_info+0x20/0x20 [ 55.882733][ T4346] ? load_image+0x400/0x400 [ 55.887356][ T4346] ? kobject_uevent_env+0x371/0x890 [ 55.892594][ T4346] gfs2_withdraw+0x1149/0x1490 [ 55.897389][ T4346] ? gfs2_lm+0x240/0x240 [ 55.901655][ T4346] ? gfs2_meta_read+0x7de/0xa60 [ 55.906547][ T4346] ? gfs2_meta_read+0x7de/0xa60 [ 55.911418][ T4346] ? gfs2_meta_new+0x160/0x160 [ 55.916260][ T4346] gfs2_metatype_check_ii+0x74/0x90 [ 55.921488][ T4346] gfs2_meta_buffer+0x262/0x310 [ 55.926366][ T4346] __fillup_metapath+0x14d/0x340 [ 55.931679][ T4346] __gfs2_iomap_get+0x709/0x1400 [ 55.936745][ T4346] ? gfs2_alloc_extent+0x580/0x580 [ 55.941890][ T4346] ? rcu_is_watching+0x11/0xa0 [ 55.947113][ T4346] gfs2_block_map+0x2a0/0x740 [ 55.951933][ T4346] ? gfs2_iomap_end+0x6b0/0x6b0 [ 55.956798][ T4346] ? mark_lock+0x94/0x320 [ 55.961144][ T4346] ? verify_lock_unused+0x140/0x140 [ 55.966368][ T4346] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 55.972383][ T4346] ? lockdep_hardirqs_on+0x94/0x140 [ 55.977731][ T4346] gfs2_write_alloc_required+0x3ae/0x680 [ 55.983593][ T4346] ? gfs2_map_journal_extents+0xb10/0xb10 [ 55.989355][ T4346] ? _raw_spin_unlock+0x24/0x40 [ 55.994226][ T4346] ? gfs2_glock_nq+0xcb0/0x1550 [ 55.999111][ T4346] gfs2_jdesc_check+0x1c3/0x290 [ 56.003006][ T4226] usb 5-1: USB disconnect, device number 2 [ 56.003974][ T4346] init_journal+0xd02/0x22f0 [ 56.004011][ T4346] ? end_bio_io_page+0x100/0x100 [ 56.019320][ T4346] ? vsnprintf+0x1b21/0x1c20 [ 56.023943][ T4346] ? snprintf+0xe5/0x140 [ 56.028210][ T4346] ? init_journal+0x74d/0x22f0 [ 56.033011][ T4346] ? vscnprintf+0x80/0x80 [ 56.037373][ T4346] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 56.042506][ T4346] init_inodes+0xdb/0x320 [ 56.046862][ T4346] gfs2_fill_super+0x16b2/0x1f00 [ 56.048161][ T7] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 56.051827][ T4346] ? gfs2_reconfigure+0xd30/0xd30 [ 56.066160][ T4346] ? gfs2_glock_nq_num+0x82/0x1b0 [ 56.071314][ T4346] ? sb_set_blocksize+0xa5/0xe0 [ 56.076186][ T4346] get_tree_bdev+0x3f1/0x610 [ 56.080901][ T4346] ? gfs2_reconfigure+0xd30/0xd30 [ 56.081896][ T4354] loop0: detected capacity change from 0 to 128 [ 56.085946][ T4346] gfs2_get_tree+0x4d/0x1e0 [ 56.085977][ T4346] vfs_get_tree+0x88/0x270 [ 56.085996][ T4346] do_new_mount+0x24a/0xa40 [ 56.086019][ T4346] __se_sys_mount+0x2e3/0x3d0 [ 56.110334][ T4346] ? __x64_sys_mount+0xc0/0xc0 [ 56.115122][ T4346] ? lockdep_hardirqs_on+0x94/0x140 [ 56.120341][ T4346] ? __x64_sys_mount+0x1c/0xc0 [ 56.125127][ T4346] do_syscall_64+0x4c/0xa0 [ 56.129554][ T4346] ? clear_bhb_loop+0x30/0x80 [ 56.134250][ T4346] ? clear_bhb_loop+0x30/0x80 [ 56.138966][ T4346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.144883][ T4346] RIP: 0033:0x7fb0e722e14a [ 56.149307][ T4346] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.168920][ T4346] RSP: 002b:00007fb0e5487e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.177349][ T4346] RAX: ffffffffffffffda RBX: 00007fb0e5487ee0 RCX: 00007fb0e722e14a [ 56.185337][ T4346] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fb0e5487ea0 [ 56.193222][ T7] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 56.193714][ T4346] RBP: 0000200000000400 R08: 00007fb0e5487ee0 R09: 0000000000210401 [ 56.193729][ T4346] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 56.193739][ T4346] R13: 00007fb0e5487ea0 R14: 00000000000125d8 R15: 00002000000000c0 [ 56.193763][ T4346] [ 56.193883][ T4346] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 56.429110][ T4358] loop1: detected capacity change from 0 to 8192 [ 56.501876][ T4358] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 56.512539][ T4328] udevd[4328]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 56.579473][ T4226] usb 3-1: USB disconnect, device number 2 [ 56.585407][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 56.597523][ T4226] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 56.611171][ T4226] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 56.638843][ T4358] REISERFS (device loop1): using ordered data mode [ 56.654666][ T4226] quatech2 3-1:0.51: device disconnected [ 56.660497][ T4358] reiserfs: using flush barriers [ 56.740549][ T4358] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 56.843348][ T4358] REISERFS (device loop1): checking transaction log (loop1) [ 56.928024][ T4358] REISERFS (device loop1): Using r5 hash to sort names [ 56.934842][ T4363] loop0: detected capacity change from 0 to 65536 [ 56.963967][ T4358] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 57.006022][ T26] audit: type=1804 audit(1769518144.118:2): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.24" name="/newroot/8/file1/file1" dev="loop1" ino=2 res=1 errno=0 [ 57.040474][ T4370] loop3: detected capacity change from 0 to 4096 [ 57.151585][ T4363] XFS (loop0): Mounting V5 Filesystem [ 57.390203][ T4363] XFS (loop0): Ending clean mount [ 57.460974][ T4190] XFS (loop0): Unmounting Filesystem [ 57.789912][ T4367] loop4: detected capacity change from 0 to 32768 [ 57.856007][ T4367] XFS (loop4): Mounting V5 Filesystem [ 57.952566][ T4367] XFS (loop4): Ending clean mount [ 57.992962][ T4367] XFS (loop4): Quotacheck needed: Please wait. [ 58.017797][ T4403] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.088506][ T4403] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.177428][ T4367] XFS (loop4): Quotacheck: Done. [ 58.232686][ T4410] hfsplus: invalid extended attribute record [ 58.248038][ T4412] exfat: Bad value for 'fmask' [ 58.308965][ T154] hfsplus: b-tree write err: -5, ino 4 [ 58.447062][ T4191] XFS (loop4): Unmounting Filesystem [ 59.048353][ T4438] netlink: 'syz.4.40': attribute type 2 has an invalid length. [ 59.077087][ T4438] Zero length message leads to an empty skb [ 59.081389][ T4442] set_capacity_and_notify: 4 callbacks suppressed [ 59.081403][ T4442] loop0: detected capacity change from 0 to 512 [ 59.162093][ T4442] EXT4-fs (loop0): Ignoring removed bh option [ 59.171732][ T4444] loop4: detected capacity change from 0 to 128 [ 59.199505][ T4442] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 59.253345][ T4442] EXT4-fs (loop0): 1 truncate cleaned up [ 59.274302][ T4444] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.287248][ T4430] loop1: detected capacity change from 0 to 32768 [ 59.303201][ T4442] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 59.311817][ T4444] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.352479][ C0] vkms_vblank_simulate: vblank timer overrun [ 59.520577][ T4430] XFS (loop1): Mounting V5 Filesystem [ 59.634433][ T4430] XFS (loop1): Ending clean mount [ 59.693233][ T4473] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.759729][ T4186] XFS (loop1): Unmounting Filesystem [ 59.811577][ T4475] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 59.863655][ T4233] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.979246][ T4485] loop3: detected capacity change from 0 to 2048 [ 60.076357][ T4485] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 60.116198][ T4485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.133616][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 60.258766][ T4233] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.283501][ T4233] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.413748][ T4233] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 60.432104][ T4233] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 60.459582][ T4233] usb 1-1: Product: syz [ 60.470259][ T4233] usb 1-1: Manufacturer: syz [ 60.514718][ T4233] hub 1-1:4.0: USB hub found [ 60.733753][ T4233] hub 1-1:4.0: 2 ports detected [ 60.743838][ T4173] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.892337][ T4500] loop3: detected capacity change from 0 to 32768 [ 60.914258][ T4500] xfs: Unknown parameter 'smackfstransmute' [ 61.022924][ T4516] loop2: detected capacity change from 0 to 128 [ 61.033912][ T4233] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 61.034004][ T4233] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 61.095015][ T4233] usb 1-1: USB disconnect, device number 2 [ 61.130616][ T4516] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.133757][ T4173] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.162045][ T4173] usb 2-1: config 1 has no interface number 0 [ 61.168862][ T4173] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.172392][ T4516] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.180248][ T4173] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 61.211673][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.228992][ T4173] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 230, changing to 7 [ 61.240139][ T4173] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 50962, setting to 1024 [ 61.404051][ T4173] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.413155][ T4173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.421489][ T4173] usb 2-1: Product: syz [ 61.426291][ T1108] kernel read not supported for file /input/event1 (pid: 1108 comm: kworker/0:2) [ 61.426563][ T4173] usb 2-1: Manufacturer: syz [ 61.426580][ T4173] usb 2-1: SerialNumber: syz [ 61.497770][ T4528] Illegal XDP return value 4294967274, expect packet loss! [ 61.660834][ T4534] loop4: detected capacity change from 0 to 2048 [ 61.662517][ T4538] loop2: detected capacity change from 0 to 1024 [ 61.680072][ T4540] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 61.698490][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.721467][ T4534] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 61.753624][ T4538] EXT4-fs (loop2): quotafile must be on filesystem root [ 61.774943][ T4534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.784201][ T4544] loop0: detected capacity change from 0 to 2048 [ 61.846607][ T4544] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.858188][ T26] audit: type=1800 audit(1769518148.968:3): pid=4534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.78" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 62.256449][ T4538] loop2: detected capacity change from 0 to 32768 [ 62.336301][ T4530] (syz.3.77,4530,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 62.356325][ T4173] cdc_ncm 2-1:1.1: bind() failure [ 62.373481][ T4530] (syz.3.77,4530,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 62.393622][ T4240] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.415694][ T4530] JBD2: Ignoring recovery information on journal [ 62.430369][ T4538] XFS (loop2): Mounting V5 Filesystem [ 62.489901][ T4530] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 62.591697][ T4538] XFS (loop2): Ending clean mount [ 62.594809][ T1108] usb 2-1: USB disconnect, device number 2 [ 62.633568][ T4240] usb 5-1: Using ep0 maxpacket: 8 [ 62.651164][ T4185] XFS (loop2): Unmounting Filesystem [ 62.755235][ T4240] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 62.768442][ T4240] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.778647][ T4240] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.794836][ T4240] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.796658][ T4530] syz.3.77 (4530) used greatest stack depth: 21016 bytes left [ 62.808403][ T4240] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.837375][ T4240] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 62.850105][ T4240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.890067][ T4184] ocfs2: Unmounting device (7,3) on (node local) [ 63.683550][ T4226] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 63.715268][ T4604] usbtmc 5-1:16.0: simple control status returned 95 [ 63.737396][ T26] audit: type=1800 audit(1769518150.848:4): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.104" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 63.805138][ T4603] hfsplus: invalid catalog entry type [ 63.864175][ T1385] hfsplus: bad catalog folder entry [ 63.872969][ T1385] hfsplus: bad catalog file entry [ 63.916122][ T4240] usb 5-1: USB disconnect, device number 3 [ 63.959356][ T4226] usb 2-1: Using ep0 maxpacket: 32 [ 64.106845][ T4226] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 64.142316][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.165317][ T4630] set_capacity_and_notify: 5 callbacks suppressed [ 64.165332][ T4630] loop0: detected capacity change from 0 to 128 [ 64.173106][ T4226] usb 2-1: config 0 descriptor?? [ 64.298882][ T4630] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 64.340445][ T4630] hpfs: filesystem error: improperly stopped [ 64.358088][ T4630] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 64.371399][ T4630] hpfs: You really don't want any checks? You are crazy... [ 64.379196][ T4291] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 64.398928][ T4630] hpfs: hpfs_map_sector(): read error [ 64.413520][ T4630] hpfs: code page support is disabled [ 64.420293][ T4636] loop3: detected capacity change from 0 to 2048 [ 64.439231][ T4630] hpfs: hpfs_map_4sectors(): unaligned read [ 64.445631][ T4226] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 64.470676][ T4636] EXT4-fs (loop3): Ignoring removed bh option [ 64.479143][ T4226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 64.495718][ T4630] hpfs: hpfs_map_4sectors(): unaligned read [ 64.510578][ T4630] hpfs: filesystem error: unable to find root dir [ 64.534466][ T4226] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 64.562885][ T4226] usb 2-1: media controller created [ 64.596300][ T4226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.619371][ T4636] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 64.666883][ T4636] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.735907][ T4636] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28 [ 64.740842][ T4648] loop0: detected capacity change from 0 to 256 [ 64.750255][ T4636] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.750255][ T4636] [ 64.767178][ T4636] EXT4-fs (loop3): Total free blocks count 0 [ 64.785311][ T4636] EXT4-fs (loop3): Free/Dirty block details [ 64.793962][ T4291] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 64.804983][ T4291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.813298][ T4636] EXT4-fs (loop3): free_blocks=2415919104 [ 64.820096][ T4636] EXT4-fs (loop3): dirty_blocks=48 [ 64.831642][ T4291] usb 3-1: config 0 descriptor?? [ 64.841778][ T4636] EXT4-fs (loop3): Block reservation details [ 64.850178][ T4636] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 64.855793][ T4648] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 64.872934][ T4646] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 64.899473][ T4291] cp210x 3-1:0.0: cp210x converter detected [ 64.901901][ T4653] loop4: detected capacity change from 0 to 1024 [ 64.916277][ T4646] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.916277][ T4646] [ 64.919825][ T4653] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 64.950882][ T4653] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.981186][ T4653] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 64.992551][ T4653] System zones: 0-1, 3-36 [ 65.044680][ T4653] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 65.180251][ T4653] capability: warning: `syz.4.126' uses deprecated v2 capabilities in a way that may be insecure [ 65.463723][ T4226] az6027: usb out operation failed. (-71) [ 65.472714][ T4226] stb0899_attach: Driver disabled by Kconfig [ 65.476305][ T4673] loop4: detected capacity change from 0 to 512 [ 65.484123][ T4226] az6027: no front-end attached [ 65.484123][ T4226] [ 65.516488][ T4226] az6027: usb out operation failed. (-71) [ 65.523073][ T4226] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 65.563617][ T4291] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 65.571824][ T4226] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 65.588593][ T4291] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 65.599886][ T4291] usb 3-1: cp210x converter now attached to ttyUSB0 [ 65.618237][ T4226] dvb-usb: schedule remote query interval to 400 msecs. [ 65.648236][ T4291] usb 3-1: USB disconnect, device number 3 [ 65.661184][ T4226] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 65.684481][ T4673] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.694585][ T4291] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 65.709808][ T4673] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.712672][ T4226] usb 2-1: USB disconnect, device number 3 [ 65.770226][ T4291] cp210x 3-1:0.0: device disconnected [ 65.800702][ T4673] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.812142][ T4687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.140'. [ 65.846922][ T4226] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 65.857299][ T4673] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.136: bad orphan inode 131083 [ 65.890719][ T4673] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 66.147759][ T4173] Bluetooth: hci0: command 0x1407 tx timeout [ 66.240957][ T4673] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 66.301698][ T4673] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 66.327769][ T4717] loop3: detected capacity change from 0 to 512 [ 66.381451][ T4721] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.136: path /17/file2: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 66.426697][ T4724] device ipvlan1 entered promiscuous mode [ 66.448514][ T4726] loop1: detected capacity change from 0 to 128 [ 66.470033][ T4724] device ipvlan1 left promiscuous mode [ 66.489018][ T4717] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.513043][ T4717] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.545064][ T4733] netlink: 156 bytes leftover after parsing attributes in process `syz.4.157'. [ 66.557363][ T4726] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 66.641246][ T4726] hpfs: filesystem error: improperly stopped [ 66.648137][ T4726] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 66.670381][ T4726] hpfs: You really don't want any checks? You are crazy... [ 66.698479][ T4737] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 66.720087][ T4738] loop4: detected capacity change from 0 to 128 [ 66.725900][ T4726] hpfs: hpfs_map_sector(): read error [ 66.759374][ T4726] hpfs: code page support is disabled [ 66.778921][ T4726] hpfs: hpfs_map_4sectors(): unaligned read [ 66.838458][ T4726] hpfs: hpfs_map_4sectors(): unaligned read [ 66.856448][ T4726] hpfs: filesystem error: unable to find root dir [ 66.915568][ T4744] loop3: detected capacity change from 0 to 256 [ 66.988891][ T4744] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 67.439727][ T4773] netlink: 36 bytes leftover after parsing attributes in process `syz.2.174'. [ 67.590710][ T4769] loop3: detected capacity change from 0 to 32768 [ 67.599125][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.677336][ T4764] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 67.728439][ T4769] XFS (loop3): Mounting V5 Filesystem [ 67.752679][ T4764] ntfs: volume version 3.1. [ 67.853037][ T4769] XFS (loop3): Ending clean mount [ 67.873376][ T4184] XFS (loop3): Unmounting Filesystem [ 67.953976][ T4787] ntfs: volume version 3.1. [ 68.073529][ T4173] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 68.215401][ T4797] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 68.273358][ T4797] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 68.314732][ T4173] usb 3-1: Using ep0 maxpacket: 8 [ 68.433934][ T4173] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.463995][ T4173] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.505560][ T4173] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 68.505734][ T4802] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 68.537393][ T4173] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 68.603622][ T7] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 68.629220][ T4173] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.688192][ T4173] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 68.721232][ T4819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.729754][ T4173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.769722][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.794802][ T4819] EXT4-fs (loop3): 1 truncate cleaned up [ 68.801959][ T4802] ntfs3: loop1: Failed to load $Extend. [ 68.824258][ T4819] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 68.874780][ T26] audit: type=1800 audit(1769518155.988:5): pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.188" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 69.013607][ T4173] usb 3-1: GET_CAPABILITIES returned 0 [ 69.019141][ T4173] usbtmc 3-1:16.0: can't read capabilities [ 69.044773][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.073114][ T7] usb 5-1: config 0 has no interfaces? [ 69.102033][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 69.116149][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.126221][ T7] usb 5-1: config 0 descriptor?? [ 69.187576][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.214731][ T4819] syz.3.188 (4819) used greatest stack depth: 20592 bytes left [ 69.224188][ T4173] usb 3-1: USB disconnect, device number 4 [ 69.312311][ T4834] set_capacity_and_notify: 4 callbacks suppressed [ 69.312324][ T4834] loop3: detected capacity change from 0 to 256 [ 69.399806][ T4226] usb 5-1: USB disconnect, device number 4 [ 69.631783][ T4830] loop0: detected capacity change from 0 to 32768 [ 69.667945][ T4830] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 69.702177][ T4830] JBD2: Ignoring recovery information on journal [ 69.726578][ T4830] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 69.841319][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.879759][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 69.890789][ T4853] loop3: detected capacity change from 0 to 1024 [ 69.980431][ T4857] netlink: 'syz.0.204': attribute type 11 has an invalid length. [ 70.005323][ T4853] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 70.097759][ T4853] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.180928][ T4845] loop1: detected capacity change from 0 to 32768 [ 70.223527][ T4240] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.342070][ T4845] ERROR: (device loop1): dbAdjCtl: Corrupt dmapctl page [ 70.342070][ T4845] [ 70.400494][ T4845] ERROR: (device loop1): remounting filesystem as read-only [ 70.410712][ T4845] ERROR: (device loop1): dbDiscardAG: -EIO [ 70.410712][ T4845] [ 70.441248][ T4866] ERROR: (device loop1): dbAdjCtl: Corrupt dmapctl page [ 70.441248][ T4866] [ 70.480636][ T4866] ERROR: (device loop1): dbDiscardAG: -EIO [ 70.480636][ T4866] [ 70.603781][ T4240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.670663][ T4240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.708604][ T4869] loop0: detected capacity change from 0 to 40427 [ 70.718601][ T4240] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 70.760857][ T4851] loop2: detected capacity change from 0 to 32768 [ 70.772528][ T4240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.808600][ T4851] (syz.2.202,4851,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 70.844036][ T4869] F2FS-fs (loop0): invalid crc value [ 70.852622][ T4240] usb 5-1: config 0 descriptor?? [ 70.866958][ T4869] F2FS-fs (loop0): Found nat_bits in checkpoint [ 70.894009][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.907974][ T4869] F2FS-fs (loop0): Start checkpoint disabled! [ 70.963728][ T4869] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 70.982636][ T4851] (syz.2.202,4851,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 71.110711][ T4851] JBD2: Ignoring recovery information on journal [ 71.144576][ T9] attempt to access beyond end of device [ 71.144576][ T9] loop0: rw=2049, want=40976, limit=40427 [ 71.267662][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.283700][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.335781][ T4240] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 71.355381][ T4851] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 71.364834][ T4240] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 71.443645][ T4240] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0001/input/input6 [ 71.541985][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 71.544252][ T4240] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 71.658502][ T4240] usb 5-1: USB disconnect, device number 5 [ 71.671756][ T4894] loop1: detected capacity change from 0 to 164 [ 71.766580][ T4894] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.902215][ T4895] fido_id[4895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 71.925353][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.957755][ T4897] loop1: detected capacity change from 0 to 512 [ 71.979379][ T4897] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 72.024956][ T4897] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 72.043130][ T4897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 72.086233][ T4897] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 72.096175][ T4897] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 72.105194][ T4897] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 72.132109][ T4897] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.222: dx entry: limit 65535 != root limit 120 [ 72.149446][ T4897] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.222: Corrupt directory, running e2fsck is recommended [ 72.183604][ T4897] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.222: path /45/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 72.213479][ T4905] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 3: comm syz.1.222: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 72.219317][ T4904] loop0: detected capacity change from 0 to 512 [ 72.256167][ T4882] loop3: detected capacity change from 0 to 40427 [ 72.266151][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.287576][ T4902] 9pnet: p9_errstr2errno: server reported unknown error [ 72.337133][ T4882] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 72.352569][ T4882] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 72.368740][ T4904] EXT4-fs (loop0): Ignoring removed bh option [ 72.396060][ T4904] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 72.434345][ T4904] EXT4-fs (loop0): 1 truncate cleaned up [ 72.524138][ T4904] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 72.565438][ T4882] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.865469][ T4882] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 72.913534][ T4882] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.972326][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.027085][ T4928] capability: warning: `syz.0.232' uses 32-bit capabilities (legacy support in use) [ 73.070613][ T4184] attempt to access beyond end of device [ 73.070613][ T4184] loop3: rw=2049, want=45104, limit=40427 [ 73.132448][ T4928] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 73.146041][ T4928] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.233086][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.242038][ T4936] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 74.248896][ T4936] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 74.277489][ T4939] F2FS-fs (loop0): invalid crc value [ 74.292010][ T4936] F2FS-fs (loop1): invalid crc value [ 74.332873][ T4939] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.357614][ T4949] set_capacity_and_notify: 4 callbacks suppressed [ 74.357628][ T4949] loop2: detected capacity change from 0 to 512 [ 74.379002][ T4936] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.433123][ T4939] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 74.453175][ T4939] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 74.486996][ T4936] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 74.494890][ T4936] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 74.604021][ T4936] F2FS-fs (loop1): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:10232 [ 74.709643][ T4949] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.750640][ T4949] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.904950][ T4949] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 74.988628][ T4949] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4097 with max blocks 1 with error 28 [ 75.016769][ T4949] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.016769][ T4949] [ 75.060921][ T4949] EXT4-fs (loop2): Total free blocks count 0 [ 75.084969][ T4949] EXT4-fs (loop2): Free/Dirty block details [ 75.106187][ T4949] EXT4-fs (loop2): free_blocks=65280 [ 75.119858][ T4949] EXT4-fs (loop2): dirty_blocks=1 [ 75.146440][ T4949] EXT4-fs (loop2): Block reservation details [ 75.165706][ T4949] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 75.271395][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.345168][ T4967] bond1 (unregistering): Released all slaves [ 75.355151][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.608964][ T4970] binder: 4969:4970 ioctl 8040450a 0 returned -22 [ 75.616164][ T4954] loop4: detected capacity change from 0 to 32768 [ 75.627269][ T4970] binder: 4969:4970 ioctl 1261 0 returned -22 [ 75.744359][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.766138][ T4977] loop2: detected capacity change from 0 to 64 [ 75.813183][ T4954] XFS (loop4): Mounting V5 Filesystem [ 75.973555][ T4954] XFS (loop4): Ending clean mount [ 76.034274][ T4954] XFS (loop4): Quotacheck needed: Please wait. [ 76.099774][ T4954] XFS (loop4): Quotacheck: Done. [ 76.222500][ T4972] loop3: detected capacity change from 0 to 32768 [ 76.238455][ T4191] XFS (loop4): Unmounting Filesystem [ 76.310959][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.391057][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.393061][ T23] cfg80211: failed to load regulatory.db [ 76.415168][ T4972] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.246 (4972) [ 76.431953][ T4991] loop0: detected capacity change from 0 to 512 [ 76.466444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.478998][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.579313][ T4993] loop2: detected capacity change from 0 to 2048 [ 76.592984][ T4972] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 76.616437][ T4991] EXT4-fs (loop0): 1 truncate cleaned up [ 76.647327][ T4991] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000001,,errors=continue. Quota mode: none. [ 76.688778][ T4972] BTRFS info (device loop3): setting nodatacow, compression disabled [ 76.783557][ T4972] BTRFS info (device loop3): force zlib compression, level 3 [ 76.790991][ T4972] BTRFS info (device loop3): turning off barriers [ 76.807994][ T4991] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.252: bg 0: block 465: padding at end of block bitmap is not set [ 76.852970][ T4972] BTRFS info (device loop3): max_inline at 6 [ 76.855156][ T4998] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.920629][ T4972] BTRFS info (device loop3): turning on sync discard [ 76.956483][ T4972] BTRFS info (device loop3): setting nodatacow [ 76.962703][ T4972] BTRFS info (device loop3): using free space tree [ 77.025827][ T4972] BTRFS info (device loop3): has skinny extents [ 77.074764][ T5001] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '..' [ 77.147826][ T5001] Remounting filesystem read-only [ 77.211911][ T4185] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 77.318486][ T4972] BTRFS info (device loop3): enabling ssd optimizations [ 77.351014][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.484047][ T4972] BTRFS info (device loop3): scrub: started on devid 1 [ 77.557375][ T4972] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 77.594490][ T5032] kernel read not supported for file /e_1 (pid: 5032 comm: syz.2.256) [ 77.660808][ T26] audit: type=1800 audit(1769518164.768:6): pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.256" name="e_1" dev="mqueue" ino=35110 res=0 errno=0 [ 77.688575][ T5034] loop2: detected capacity change from 0 to 256 [ 77.710042][ T4995] loop1: detected capacity change from 0 to 40427 [ 77.836763][ T4995] F2FS-fs (loop1): invalid crc value [ 77.906087][ T5037] loop0: detected capacity change from 0 to 32768 [ 77.923876][ T5034] FAT-fs (loop2): Directory bread(block 64) failed [ 77.933281][ T4995] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.008535][ T5037] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 78.008535][ T5037] [ 78.013573][ T5034] FAT-fs (loop2): Directory bread(block 65) failed [ 78.021173][ T5037] ERROR: (device loop0): remounting filesystem as read-only [ 78.035265][ T5037] attempt to access beyond end of device [ 78.035265][ T5037] loop0: rw=2049, want=44040, limit=32768 [ 78.109912][ T277] blkno = 1580, nblocks = 1 [ 78.114787][ T277] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 78.114787][ T277] [ 78.141666][ T5034] FAT-fs (loop2): Directory bread(block 66) failed [ 78.185191][ T5034] FAT-fs (loop2): Directory bread(block 67) failed [ 78.203631][ T4995] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.243057][ T5034] FAT-fs (loop2): Directory bread(block 68) failed [ 78.305344][ T5034] FAT-fs (loop2): Directory bread(block 69) failed [ 78.311979][ T5034] FAT-fs (loop2): Directory bread(block 70) failed [ 78.342264][ T5034] FAT-fs (loop2): Directory bread(block 71) failed [ 78.355769][ T5034] FAT-fs (loop2): Directory bread(block 72) failed [ 78.388224][ T5034] FAT-fs (loop2): Directory bread(block 73) failed [ 78.513796][ T4222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.605442][ T5045] loop3: detected capacity change from 0 to 256 [ 78.678671][ T4186] attempt to access beyond end of device [ 78.678671][ T4186] loop1: rw=2049, want=45104, limit=40427 [ 78.734319][ T5045] FAT-fs (loop3): Directory bread(block 1285) failed [ 78.741053][ T5045] FAT-fs (loop3): Directory bread(block 1286) failed [ 78.788839][ T5029] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.258 (5029) [ 78.818546][ T5029] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 78.842017][ T5045] FAT-fs (loop3): Directory bread(block 1287) failed [ 78.854559][ T5029] BTRFS info (device loop4): setting nodatacow, compression disabled [ 78.862965][ T5045] FAT-fs (loop3): Directory bread(block 1288) failed [ 78.897841][ T5029] BTRFS info (device loop4): force clearing of disk cache [ 78.916060][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 78.928269][ T5045] FAT-fs (loop3): Directory bread(block 1285) failed [ 78.948573][ T4291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.953721][ T5029] BTRFS info (device loop4): enabling ssd optimizations [ 78.963965][ T5045] FAT-fs (loop3): Directory bread(block 1286) failed [ 78.992014][ T5045] FAT-fs (loop3): Directory bread(block 1287) failed [ 79.008752][ T5029] BTRFS info (device loop4): using spread ssd allocation scheme [ 79.044963][ T5045] FAT-fs (loop3): Directory bread(block 1288) failed [ 79.061464][ T5029] BTRFS info (device loop4): turning off barriers [ 79.072016][ T5045] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 79.106038][ T5029] BTRFS info (device loop4): disabling free space tree [ 79.112946][ T5029] BTRFS info (device loop4): not using ssd optimizations [ 79.121736][ T5045] FAT-fs (loop3): Directory bread(block 1285) failed [ 79.170557][ T5029] BTRFS info (device loop4): not using spread ssd allocation scheme [ 79.191482][ T5052] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 79.253446][ T5029] BTRFS info (device loop4): has skinny extents [ 79.503042][ T5029] BTRFS info (device loop4): clearing free space tree [ 79.515249][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.535035][ T5080] set_capacity_and_notify: 2 callbacks suppressed [ 79.535048][ T5080] loop0: detected capacity change from 0 to 512 [ 79.560282][ T5029] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 79.585085][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.591993][ T5083] loop2: detected capacity change from 0 to 4096 [ 79.634965][ T5029] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 79.649277][ T5080] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.701135][ T5083] EXT4-fs (loop2): Test dummy encryption mode enabled [ 79.725527][ T5083] EXT4-fs (loop2): Unrecognized mount option "func=POLICY_CHECK" or missing value [ 79.767575][ T5080] EXT4-fs (loop0): 1 truncate cleaned up [ 79.799631][ T5094] loop1: detected capacity change from 0 to 256 [ 79.820027][ T5092] bridge0: port 3(vlan2) entered blocking state [ 79.823238][ T5080] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.827536][ T5092] bridge0: port 3(vlan2) entered disabled state [ 79.857044][ T5092] device vlan2 entered promiscuous mode [ 80.378976][ T5113] loop3: detected capacity change from 0 to 1024 [ 80.515644][ T5124] loop1: detected capacity change from 0 to 512 [ 80.525023][ T5113] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,minixdf,,errors=continue. Quota mode: none. [ 80.605521][ T5124] EXT4-fs (loop1): Ignoring removed orlov option [ 80.611966][ T5124] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 80.650653][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.726856][ T5124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 80.760476][ T5136] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.818615][ T5124] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.287: corrupted in-inode xattr [ 80.872903][ T5140] loop4: detected capacity change from 0 to 7 [ 80.890165][ T5124] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.287: couldn't read orphan inode 15 (err -117) [ 80.891198][ T4328] Dev loop4: unable to read RDB block 7 [ 80.906838][ T5124] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 80.943316][ T4328] loop4: unable to read partition table [ 80.965842][ T4328] loop4: partition table beyond EOD, truncated [ 80.987169][ T5140] Dev loop4: unable to read RDB block 7 [ 81.009038][ T5140] loop4: unable to read partition table [ 81.030857][ T5140] loop4: partition table beyond EOD, truncated [ 81.045051][ T5148] loop0: detected capacity change from 0 to 256 [ 81.055777][ T5140] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 81.112123][ T5154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 81.132097][ T5154] netlink: 'syz.4.291': attribute type 20 has an invalid length. [ 81.156472][ T5148] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.185569][ T5154] netlink: 'syz.4.291': attribute type 21 has an invalid length. [ 81.200234][ T5148] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 81.235338][ T5148] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 81.263800][ T5159] loop3: detected capacity change from 0 to 2048 [ 81.391055][ T5159] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 81.448387][ T5168] loop0: detected capacity change from 0 to 256 [ 81.460272][ T1108] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 81.468693][ T1108] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 81.472864][ T26] audit: type=1804 audit(1769518168.578:7): pid=5159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.296" name="/newroot/71/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 81.476281][ T1108] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 81.476334][ T1108] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 81.476355][ T1108] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 81.476375][ T1108] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 81.529107][ T1108] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 81.536874][ T1108] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 81.548533][ T1108] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x7 [ 81.575638][ T5168] FAT-fs (loop0): Directory bread(block 64) failed [ 81.582233][ T5168] FAT-fs (loop0): Directory bread(block 65) failed [ 81.589943][ T1108] hid-generic 00A0:0006:0003.0002: hidraw0: HID v0.05 Device [syz0] on syz0 [ 81.626794][ T5168] FAT-fs (loop0): Directory bread(block 66) failed [ 81.648141][ T5168] FAT-fs (loop0): Directory bread(block 67) failed [ 81.662860][ T5168] FAT-fs (loop0): Directory bread(block 68) failed [ 81.664037][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.694426][ T5168] FAT-fs (loop0): Directory bread(block 69) failed [ 81.701171][ T5168] FAT-fs (loop0): Directory bread(block 70) failed [ 81.708337][ T5168] FAT-fs (loop0): Directory bread(block 71) failed [ 81.715525][ T5168] FAT-fs (loop0): Directory bread(block 72) failed [ 81.722213][ T5168] FAT-fs (loop0): Directory bread(block 73) failed [ 81.733537][ T21] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 81.818968][ T5177] loop3: detected capacity change from 0 to 512 [ 81.860606][ T5177] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 81.874393][ T5177] EXT4-fs (loop3): Ignoring removed bh option [ 81.897926][ T5177] EXT4-fs error (device loop3): mb_free_blocks:1876: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 81.945276][ T5177] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #11: comm syz.3.302: corrupted inode contents [ 81.970690][ T5133] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.981339][ T5177] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #11: comm syz.3.302: mark_inode_dirty error [ 82.019744][ T5177] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.302: invalid indirect mapped block 1 (level 1) [ 82.041136][ T5177] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #11: comm syz.3.302: corrupted inode contents [ 82.057083][ T5177] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 82.074865][ T5177] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #11: comm syz.3.302: corrupted inode contents [ 82.087561][ T5177] EXT4-fs error (device loop3): ext4_truncate:4279: inode #11: comm syz.3.302: mark_inode_dirty error [ 82.100674][ T5177] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 82.111952][ T5180] EXT4-fs (loop2): Ignoring removed oldalloc option [ 82.112382][ T5177] EXT4-fs (loop3): 1 truncate cleaned up [ 82.127974][ T21] usb 5-1: config 0 has no interfaces? [ 82.133687][ T21] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 82.138133][ T5180] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.142725][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.167505][ T5177] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,bh,,errors=continue. Quota mode: none. [ 82.190513][ T5177] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.302: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 82.205530][ T5180] EXT4-fs (loop2): 1 truncate cleaned up [ 82.218359][ T21] usb 5-1: config 0 descriptor?? [ 82.223297][ T5180] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,oldalloc,stripe=0x0000000000000001,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 82.306627][ T4185] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 82.398599][ T5187] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 82.428277][ T5187] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 82.446622][ T5133] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.457648][ T5133] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.472032][ T4291] usb 5-1: USB disconnect, device number 6 [ 82.498503][ T5187] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 82.516232][ T5187] System zones: 1-12 [ 82.538039][ T5187] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.306: corrupted in-inode xattr [ 82.553782][ T5133] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 82.554820][ T5187] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.306: couldn't read orphan inode 15 (err -117) [ 82.567364][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.576617][ T5187] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 82.603854][ T5133] usb 2-1: SerialNumber: syz [ 82.605852][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.722898][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.784317][ T5132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.793934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.886403][ T5133] usb 2-1: 0:2 : does not exist [ 82.903298][ T5048] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.934242][ T5133] usb 2-1: USB disconnect, device number 4 [ 83.076987][ T5048] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.174053][ T4311] udevd[4311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.204320][ T5202] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 83.231595][ T5048] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.267097][ T5202] hpfs: filesystem error: improperly stopped [ 83.280414][ T5202] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 83.288652][ T5202] hpfs: You really don't want any checks? You are crazy... [ 83.300349][ T5202] hpfs: hpfs_map_sector(): read error [ 83.333285][ T5202] hpfs: code page support is disabled [ 83.348902][ T5048] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.351720][ T5202] hpfs: hpfs_map_4sectors(): unaligned read [ 83.371631][ T5202] hpfs: hpfs_map_4sectors(): unaligned read [ 83.381395][ T5202] hpfs: filesystem error: unable to find root dir [ 83.643106][ T5217] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 83.694095][ T5217] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c018, mo2=0003] [ 83.703733][ T5047] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 83.717926][ T5217] System zones: 0-1, 3-36 [ 83.752501][ T1111] net_ratelimit: 1 callbacks suppressed [ 83.752516][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.804833][ T5217] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,usrjquota=,bsddf,nomblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 83.845746][ T5217] EXT4-fs (loop3): shut down requested (2) [ 83.973486][ T5047] usb 2-1: Using ep0 maxpacket: 16 [ 84.014142][ T5207] chnl_net:caif_netlink_parms(): no params data found [ 84.028104][ T5227] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 84.035215][ T5227] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.047008][ T5227] vhci_hcd vhci_hcd.0: Device attached [ 84.097423][ T5047] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 84.117469][ T5047] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 84.157864][ T5047] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.333493][ T4247] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 84.343709][ T5047] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 84.353075][ T5047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.365150][ T5047] usb 2-1: Product: syz [ 84.369349][ T5047] usb 2-1: Manufacturer: syz [ 84.374210][ T5047] usb 2-1: SerialNumber: syz [ 84.384546][ T5047] usb 2-1: config 0 descriptor?? [ 84.442768][ T5245] SQUASHFS error: lzo decompression failed, data probably corrupt [ 84.497816][ T5245] SQUASHFS error: Failed to read block 0x91: -5 [ 84.536519][ T5245] SQUASHFS error: Unable to read metadata cache entry [8f] [ 84.553802][ T5245] SQUASHFS error: Unable to read inode 0x11f [ 84.590154][ T5207] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.615696][ T5227] set_capacity_and_notify: 6 callbacks suppressed [ 84.615710][ T5227] loop3: detected capacity change from 0 to 32768 [ 84.641838][ T5207] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.645875][ T5047] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 84.676323][ T5207] device bridge_slave_0 entered promiscuous mode [ 84.743734][ T5227] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.322 (5227) [ 84.754520][ T4190] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 84.762964][ T4190] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 84.794253][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.819464][ T5227] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 84.835467][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.859401][ T5207] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.867226][ T5227] BTRFS info (device loop3): using free space tree [ 84.888651][ T5227] BTRFS info (device loop3): has skinny extents [ 84.899429][ T4240] usb 2-1: USB disconnect, device number 5 [ 84.901893][ T5207] device bridge_slave_1 entered promiscuous mode [ 85.090843][ T5207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.165034][ T5207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.251276][ T5227] BTRFS info (device loop3): enabling ssd optimizations [ 85.288874][ T5228] vhci_hcd: cannot find a urb of seqnum 6 max seqnum 1 [ 85.300868][ T4299] vhci_hcd: stop threads [ 85.312232][ T4299] vhci_hcd: release socket [ 85.322281][ T5207] team0: Port device team_slave_0 added [ 85.339713][ T4299] vhci_hcd: disconnect device [ 85.341757][ T5207] team0: Port device team_slave_1 added [ 85.425285][ T5132] Bluetooth: hci1: command 0x0409 tx timeout [ 85.449866][ T5207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.477394][ T5207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.516759][ T5207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.538338][ T5292] tipc: Started in network mode [ 85.543314][ T5292] tipc: Node identity -aaaaaaa, cluster identity 4711 [ 85.555929][ T5207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.563164][ T5207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.591486][ T5207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.647835][ T5207] device hsr_slave_0 entered promiscuous mode [ 85.667091][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.676435][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.676715][ T5207] device hsr_slave_1 entered promiscuous mode [ 85.686628][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.700507][ T5207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.719606][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.723481][ T5207] Cannot create hsr debugfs directory [ 85.735534][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.748396][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.757369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.765264][ T5132] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.768198][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.033488][ T5132] usb 2-1: Using ep0 maxpacket: 16 [ 86.386448][ T5132] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 86.398768][ T5048] device hsr_slave_0 left promiscuous mode [ 86.405901][ T5132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.417699][ T5132] usb 2-1: Product: syz [ 86.425797][ T5048] device hsr_slave_1 left promiscuous mode [ 86.426117][ T5132] usb 2-1: Manufacturer: syz [ 86.460519][ T5132] usb 2-1: SerialNumber: syz [ 86.472991][ T5132] r8152-cfgselector 2-1: config 0 descriptor?? [ 86.491404][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.503128][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.519060][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.526851][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.537205][ T5048] device bridge_slave_1 left promiscuous mode [ 86.546236][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.574969][ T5048] device bridge_slave_0 left promiscuous mode [ 86.584503][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.619909][ T5048] device veth1_macvtap left promiscuous mode [ 86.627425][ T5048] device veth0_macvtap left promiscuous mode [ 86.633941][ T5048] device veth1_vlan left promiscuous mode [ 86.640117][ T5048] device veth0_vlan left promiscuous mode [ 86.827761][ T5048] team0 (unregistering): Port device team_slave_1 removed [ 86.840300][ T5048] team0 (unregistering): Port device team_slave_0 removed [ 86.858419][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.875666][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.943329][ T5048] bond0 (unregistering): Released all slaves [ 86.973742][ T5132] r8152-cfgselector 2-1: Unknown version 0x0000 [ 86.980327][ T5132] r8152-cfgselector 2-1: bad CDC descriptors [ 87.003729][ T5132] r8152-cfgselector 2-1: Unknown version 0x0000 [ 87.019157][ T5132] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 87.101152][ T5207] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.136717][ T5207] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.158384][ T5207] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.190909][ T5207] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.369916][ T5207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.417652][ T5345] device wlan0 entered promiscuous mode [ 87.440757][ T5345] device wlan0 left promiscuous mode [ 87.464046][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.472840][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.496916][ T5207] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.503613][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 87.560273][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.570240][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.615800][ T1385] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.622950][ T1385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.642090][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.651164][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.662038][ T1385] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.669205][ T1385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.714781][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.771057][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.800824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.849926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.871017][ T5366] loop0: detected capacity change from 0 to 24 [ 87.885029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.935501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.962347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.984264][ T5366] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 88.012257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.013914][ T4311] udevd[4311]: incorrect romfs checksum on /dev/loop0 [ 88.031745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.056180][ T5366] romfs: bad initial checksum on dev loop0. [ 88.108423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.147940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.190743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.245903][ T5380] loop7: detected capacity change from 0 to 7 [ 88.289733][ T5380] Dev loop7: unable to read RDB block 7 [ 88.344677][ T5384] loop_set_status: loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) has still dirty pages (nrpages=1) [ 88.388862][ T5380] loop7: unable to read partition table [ 88.397226][ T5380] loop7: partition table beyond EOD, truncated [ 88.417316][ T4240] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 88.446846][ T5380] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 88.637114][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.648541][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.656387][ T5400] loop4: detected capacity change from 0 to 8 [ 88.683534][ T4240] usb 2-1: Using ep0 maxpacket: 32 [ 88.704271][ T5207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.724337][ T5400] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 88.728725][ T5402] loop3: detected capacity change from 0 to 2048 [ 88.803761][ T4240] usb 2-1: config 3 has an invalid interface number: 199 but max is 0 [ 88.811970][ T4240] usb 2-1: config 3 has no interface number 0 [ 88.818506][ T5402] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.854620][ T4240] usb 2-1: config 3 interface 199 has no altsetting 0 [ 88.864226][ T5299] net_ratelimit: 27 callbacks suppressed [ 88.864240][ T5299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.882122][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.892834][ T4328] udevd[4328]: incorrect cramfs checksum on /dev/loop4 [ 88.945207][ T5047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.014947][ T4240] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=68.9e [ 89.028671][ T4240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.093664][ T4240] usb 2-1: Product: syz [ 89.097883][ T4240] usb 2-1: Manufacturer: syz [ 89.102476][ T4240] usb 2-1: SerialNumber: syz [ 89.224862][ T4240] usb 2-1: bad CDC descriptors [ 89.332526][ T5366] loop0: detected capacity change from 0 to 32768 [ 89.420129][ T5425] loop4: detected capacity change from 0 to 512 [ 89.432932][ T5374] udc-core: couldn't find an available UDC or it's busy [ 89.446747][ T5374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 89.472823][ T5299] usb 2-1: USB disconnect, device number 7 [ 89.528580][ T4247] vhci_hcd: vhci_device speed not set [ 89.553221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.583627][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 89.630200][ T5425] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=e84ec028, mo2=0000] [ 89.638964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.651859][ T5425] System zones: 0-2, 18-18, 34-34 [ 89.663376][ T5431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.759167][ T5207] device veth0_vlan entered promiscuous mode [ 89.846372][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.867747][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.883242][ T5425] EXT4-fs (loop4): 1 orphan inode deleted [ 89.884647][ T5207] device veth1_vlan entered promiscuous mode [ 89.903902][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.903906][ T5047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.914894][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.943611][ T5425] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,debug,resgid=0x0000000000000000,sysvgroups,discard,usrquota,. Quota mode: writeback. [ 89.958260][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.001471][ T5047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.023711][ T5425] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.063779][ T4233] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.081212][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.102295][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.131164][ T5425] EXT4-fs warning (device loop4): verify_group_input:165: Last group not full [ 90.138626][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.157726][ T5207] device veth0_macvtap entered promiscuous mode [ 90.185887][ T5207] device veth1_macvtap entered promiscuous mode [ 90.241107][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.270082][ T5411] loop3: detected capacity change from 0 to 32768 [ 90.306388][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.322008][ T4233] usb 1-1: Using ep0 maxpacket: 8 [ 90.337392][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.368462][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.392228][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.415849][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.443703][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.456942][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.467837][ T4233] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.488050][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.498048][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.526908][ T4233] usb 1-1: config 0 descriptor?? [ 90.533261][ T5207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.545205][ T5411] XFS: attr2 mount option is deprecated. [ 90.603889][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.612239][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.655537][ T5411] XFS (loop3): Mounting V5 Filesystem [ 90.664394][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.754371][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.784264][ T5131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.806366][ T4233] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 90.838562][ T5463] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.377'. [ 90.876838][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.938451][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.948701][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.957880][ T5411] XFS (loop3): Ending clean mount [ 90.980559][ T5411] XFS (loop3): Quotacheck needed: Please wait. [ 90.999214][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.025520][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.052057][ T5131] usb 1-1: USB disconnect, device number 3 [ 91.060820][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.070842][ C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 91.084318][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.096789][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.121763][ T5411] XFS (loop3): Quotacheck: Done. [ 91.166934][ T5482] loop1: detected capacity change from 0 to 4096 [ 91.185277][ T5207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.234984][ T5207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.249739][ T5482] ntfs: volume version 3.1. [ 91.288703][ T5207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.297013][ T4184] XFS (loop3): Unmounting Filesystem [ 91.313162][ T5482] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 91.351081][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.385732][ T5482] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 91.416805][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.465998][ T5207] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.489769][ T5207] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.510976][ T5207] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.530245][ T5207] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.532479][ T5486] loop4: detected capacity change from 0 to 8192 [ 91.722054][ T4247] Bluetooth: hci1: command 0x0419 tx timeout [ 91.756628][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.832218][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.881257][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.949333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.969602][ T5495] loop1: detected capacity change from 0 to 4096 [ 91.984451][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.032568][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.100949][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.135714][ T5133] kernel write not supported for file /234/clear_refs (pid: 5133 comm: kworker/0:17) [ 92.326603][ T4186] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 92.349525][ T4186] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 92.525791][ T5528] loop5: detected capacity change from 0 to 512 [ 92.558790][ T5528] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 92.579096][ T5528] EXT4-fs (loop5): Ignoring removed bh option [ 92.583505][ T4233] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 92.609133][ T5528] EXT4-fs error (device loop5): mb_free_blocks:1876: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 92.633203][ T5528] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #11: comm syz.5.391: corrupted inode contents [ 92.649432][ T5528] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #11: comm syz.5.391: mark_inode_dirty error [ 92.668159][ T5528] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.391: invalid indirect mapped block 1 (level 1) [ 92.694877][ T5528] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #11: comm syz.5.391: corrupted inode contents [ 92.708550][ T5528] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 92.725122][ T5528] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #11: comm syz.5.391: corrupted inode contents [ 92.748199][ T5528] EXT4-fs error (device loop5): ext4_truncate:4279: inode #11: comm syz.5.391: mark_inode_dirty error [ 92.794189][ T5528] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 92.831472][ T5528] EXT4-fs (loop5): 1 truncate cleaned up [ 92.840836][ T5528] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,bh,,errors=continue. Quota mode: none. [ 92.913259][ T5528] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.391: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 92.977054][ T4233] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 92.987130][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.093776][ T4233] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 93.123156][ T4233] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 93.137121][ T4233] usb 1-1: Manufacturer: syz [ 93.158341][ T4233] usb 1-1: config 0 descriptor?? [ 93.232274][ T5549] loop5: detected capacity change from 0 to 4096 [ 93.308576][ T5549] ntfs: volume version 3.1. [ 93.353605][ T4233] rc_core: IR keymap rc-hauppauge not found [ 93.359546][ T4233] Registered IR keymap rc-empty [ 93.377887][ T4233] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 93.384636][ T5549] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 93.406122][ T5559] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 93.437543][ T5549] ntfs: (device loop5): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 93.440745][ T4233] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 93.593476][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 93.633547][ T4247] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 93.728341][ T5574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.780369][ T5299] usb 1-1: USB disconnect, device number 4 [ 93.780513][ T5579] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.851987][ T5581] loop3: detected capacity change from 0 to 4096 [ 93.881886][ T4247] usb 2-1: Using ep0 maxpacket: 32 [ 93.928938][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.967964][ T5577] net_ratelimit: 9 callbacks suppressed [ 93.967974][ T5577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.014742][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.062949][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.082655][ T4247] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 94.094464][ T4247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.110605][ T4247] usb 2-1: config 0 descriptor?? [ 94.127415][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.141182][ T4184] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 94.148302][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.173265][ T4184] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 94.343071][ T5597] loop3: detected capacity change from 0 to 512 [ 94.390793][ T5597] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.407302][ T5597] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.435196][ T5597] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #2: comm syz.3.405: corrupted inode contents [ 94.498718][ T5597] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #2: comm syz.3.405: mark_inode_dirty error [ 94.573535][ T4240] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 94.587160][ T5597] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #2: comm syz.3.405: corrupted inode contents [ 94.596233][ T4247] ft260 0003:0403:6030.0003: unknown main item tag 0x7 [ 94.654035][ T5609] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #2: comm syz.3.405: corrupted inode contents [ 94.669567][ T4247] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 94.715169][ T5609] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #2: comm syz.3.405: mark_inode_dirty error [ 94.760702][ T5609] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #2: comm syz.3.405: corrupted inode contents [ 94.794088][ T5130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.832467][ T5609] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.405: mark_inode_dirty error [ 94.864009][ T4247] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 94.890393][ T5609] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #2: comm syz.3.405: corrupted inode contents [ 94.933674][ T4240] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.960347][ T5609] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #2: comm syz.3.405: mark_inode_dirty error [ 94.974454][ T4240] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.038808][ T5597] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #2: comm syz.3.405: corrupted inode contents [ 95.043548][ T4240] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.098235][ T5620] loop4: detected capacity change from 0 to 4096 [ 95.153542][ T4240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.220929][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.229318][ T5047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.305843][ T5620] NILFS (loop4): invalid segment: Checksum error in segment payload [ 95.377826][ T5620] NILFS (loop4): trying rollback from an earlier position [ 95.406740][ T5130] usb 2-1: USB disconnect, device number 8 [ 95.453551][ T4240] usb 6-1: usb_control_msg returned -32 [ 95.459237][ T4240] usbtmc 6-1:16.0: can't read capabilities [ 95.510619][ T5620] NILFS (loop4): recovery complete [ 95.580089][ T5626] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.036314][ T4240] usb 6-1: USB disconnect, device number 2 [ 96.065252][ T5299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.134280][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.161578][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.163218][ T5647] loop4: detected capacity change from 0 to 1024 [ 96.182252][ T5648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.341792][ T5647] hfsplus: b-tree write err: -5, ino 3 [ 96.374590][ T5663] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.382137][ T4233] kernel read not supported for file /input/event1 (pid: 4233 comm: kworker/1:4) [ 96.482297][ T5671] loop0: detected capacity change from 0 to 512 [ 96.528605][ T5671] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 96.546529][ T5671] EXT4-fs (loop0): Ignoring removed bh option [ 96.645182][ T5671] EXT4-fs error (device loop0): mb_free_blocks:1876: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 96.761939][ T5671] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #11: comm syz.0.431: corrupted inode contents [ 96.763965][ T5680] netlink: 'syz.1.442': attribute type 11 has an invalid length. [ 96.782520][ T5671] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #11: comm syz.0.431: mark_inode_dirty error [ 96.802944][ T5671] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.431: invalid indirect mapped block 1 (level 1) [ 96.820429][ T5671] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #11: comm syz.0.431: corrupted inode contents [ 96.839077][ T5671] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 96.879751][ T5671] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #11: comm syz.0.431: corrupted inode contents [ 96.915154][ T5671] EXT4-fs error (device loop0): ext4_truncate:4279: inode #11: comm syz.0.431: mark_inode_dirty error [ 96.927862][ T5671] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 96.946332][ T5671] EXT4-fs (loop0): 1 truncate cleaned up [ 96.969789][ T5671] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,bh,,errors=continue. Quota mode: none. [ 97.042219][ T5671] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.431: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 97.252163][ T5697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.439'. [ 97.369429][ T5700] loop1: detected capacity change from 0 to 1024 [ 97.465361][ T5700] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.502186][ T5706] loop3: detected capacity change from 0 to 64 [ 97.580106][ T5700] syz.1.441 (5700) used greatest stack depth: 19408 bytes left [ 97.630327][ T26] audit: type=1800 audit(1769518184.738:8): pid=5708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.443" name="bus" dev="loop3" ino=22 res=0 errno=0 [ 97.658808][ T5706] hfs: new node 0 already hashed? [ 97.676120][ T4186] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 97.680728][ T5709] loop5: detected capacity change from 0 to 128 [ 97.695481][ T5706] ------------[ cut here ]------------ [ 97.701269][ T5706] WARNING: CPU: 0 PID: 5706 at fs/hfs/bnode.c:530 hfs_bnode_create+0x3d1/0x450 [ 97.718686][ T4186] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 97.735759][ T5706] Modules linked in: [ 97.739928][ T5706] CPU: 0 PID: 5706 Comm: syz.3.443 Not tainted syzkaller #0 [ 97.757271][ T5706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.773518][ T5706] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 97.779292][ T5706] Code: 96 3f 8a 89 ee e8 8f f2 81 07 e9 57 fd ff ff e8 55 d0 49 ff 4c 89 ef e8 5d 07 96 07 48 c7 c7 80 96 3f 8a 89 ee e8 6f f2 81 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 97.807971][ T5706] RSP: 0018:ffffc9000354ee50 EFLAGS: 00010246 [ 97.815355][ T5706] RAX: 000000000000001f RBX: ffff888071c6c000 RCX: 0ccfede4fdc10200 [ 97.825140][ T5706] RDX: ffffc900059b1000 RSI: 0000000000023ef1 RDI: 0000000000023ef2 [ 97.834498][ T5706] RBP: 0000000000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 97.842737][ T5706] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000 [ 97.852322][ T5706] R13: ffff888071c6c0e0 R14: ffff8880288ca700 R15: dffffc0000000000 [ 97.860819][ T5706] FS: 00007fd1f42696c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 97.870680][ T5706] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.883745][ T5706] CR2: 00007fd527b48198 CR3: 0000000066bb1000 CR4: 00000000003506f0 [ 97.892539][ T5706] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.913806][ T5706] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.922809][ T5706] Call Trace: [ 97.927173][ T5706] [ 97.931404][ T5706] ? do_raw_spin_unlock+0x11d/0x230 [ 97.939670][ T5706] hfs_bmap_alloc+0x5b8/0x670 [ 97.946996][ T5706] ? hfs_bmap_reserve+0x420/0x420 [ 97.952086][ T5706] hfs_btree_inc_height+0xfd/0xac0 [ 97.959389][ T5706] ? hfs_brec_insert+0x6f6/0xbd0 [ 97.964622][ T5706] ? hfs_brec_insert+0xbd0/0xbd0 [ 97.969624][ T5706] ? do_raw_spin_unlock+0x11d/0x230 [ 97.974964][ T5706] hfs_brec_insert+0x744/0xbd0 [ 97.979789][ T5706] ? hfs_brec_keylen+0x350/0x350 [ 97.987130][ T5706] __hfs_ext_write_extent+0x2a1/0x470 [ 97.999380][ T5706] __hfs_ext_cache_extent+0x6b/0x9b0 [ 98.004796][ T5706] ? mutex_lock_nested+0x17/0x20 [ 98.009846][ T5706] ? hfs_find_init+0x15b/0x1d0 [ 98.014967][ T5706] hfs_extend_file+0x39c/0x13f0 [ 98.019860][ T5706] ? hfs_get_block+0xc50/0xc50 [ 98.024815][ T5706] ? hfs_get_block+0x985/0xc50 [ 98.029729][ T5706] ? pagevec_lookup_range+0x30/0x70 [ 98.035624][ T5706] ? clean_bdev_aliases+0x762/0x8a0 [ 98.040854][ T5706] hfs_get_block+0x40f/0xc50 [ 98.057594][ T5706] ? hfs_free_extents+0x430/0x430 [ 98.077704][ T5706] ? do_raw_spin_unlock+0x11d/0x230 [ 98.083030][ T5706] ? create_page_buffers+0x238/0x320 [ 98.088652][ T5706] __block_write_begin_int+0x565/0x15d0 [ 98.094837][ T5706] ? hfs_free_extents+0x430/0x430 [ 98.099891][ T5706] ? page_zero_new_buffers+0x490/0x490 [ 98.105498][ T5706] ? wait_for_stable_page+0xd9/0x110 [ 98.110916][ T5706] cont_write_begin+0x598/0x7b0 [ 98.115993][ T5706] ? __lock_acquire+0x7d10/0x7d10 [ 98.121042][ T5706] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 98.127102][ T5706] ? unlock_page+0x17c/0x1f0 [ 98.131705][ T5706] hfs_write_begin+0x92/0xe0 [ 98.136421][ T5706] ? hfs_free_extents+0x430/0x430 [ 98.141451][ T5706] cont_write_begin+0x263/0x7b0 [ 98.147029][ T5706] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 98.153541][ T5706] hfs_write_begin+0x92/0xe0 [ 98.158163][ T5706] ? hfs_free_extents+0x430/0x430 [ 98.163201][ T5706] hfs_file_truncate+0x1c2/0xa10 [ 98.169806][ T5706] ? unmap_mapping_range+0xc8/0x100 [ 98.175700][ T5706] ? __lock_acquire+0x7d10/0x7d10 [ 98.180731][ T5706] ? hfs_extend_file+0x13f0/0x13f0 [ 98.186010][ T5706] ? rwsem_write_trylock+0x135/0x1c0 [ 98.191416][ T5706] ? up_write+0x1bb/0x420 [ 98.195832][ T5706] ? unmap_mapping_range+0xc8/0x100 [ 98.201041][ T5706] hfs_inode_setattr+0x4ab/0x6f0 [ 98.206191][ T5706] ? bpf_lsm_inode_setattr+0x5/0x10 [ 98.211457][ T5706] ? try_break_deleg+0x79/0x120 [ 98.228173][ T5706] ? hfs_evict_inode+0x100/0x100 [ 98.233291][ T5706] notify_change+0xbcd/0xee0 [ 98.238346][ T5706] do_truncate+0x1ac/0x240 [ 98.242806][ T5706] ? rcu_lock_release+0x20/0x20 [ 98.247762][ T5706] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 98.253652][ T5706] ? bpf_lsm_path_truncate+0x5/0x10 [ 98.259199][ T5706] do_sys_ftruncate+0x31b/0x3d0 [ 98.264336][ T5706] do_syscall_64+0x4c/0xa0 [ 98.268783][ T5706] ? clear_bhb_loop+0x30/0x80 [ 98.270907][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.275397][ T5706] ? clear_bhb_loop+0x30/0x80 [ 98.303839][ T5706] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.309801][ T5706] RIP: 0033:0x7fd1f600deb9 [ 98.314669][ T5706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.336833][ T5706] RSP: 002b:00007fd1f4269028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 98.345791][ T5706] RAX: ffffffffffffffda RBX: 00007fd1f6288fa0 RCX: 00007fd1f600deb9 [ 98.353935][ T5706] RDX: 0000000000000000 RSI: 000000000000c17a RDI: 0000000000000004 [ 98.363008][ T5706] RBP: 00007fd1f607bc1f R08: 0000000000000000 R09: 0000000000000000 [ 98.371126][ T5706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.388743][ T5706] R13: 00007fd1f6289038 R14: 00007fd1f6288fa0 R15: 00007ffed79892a8 [ 98.403164][ T5706] [ 98.413192][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.429928][ T5706] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.437244][ T5706] CPU: 1 PID: 5706 Comm: syz.3.443 Not tainted syzkaller #0 [ 98.444528][ T5706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.454580][ T5706] Call Trace: [ 98.457853][ T5706] [ 98.460780][ T5706] dump_stack_lvl+0x188/0x250 [ 98.465469][ T5706] ? show_regs_print_info+0x20/0x20 [ 98.470668][ T5706] ? load_image+0x400/0x400 [ 98.475184][ T5706] panic+0x2e5/0x810 [ 98.479085][ T5706] ? bpf_jit_dump+0xd0/0xd0 [ 98.483620][ T5706] ? hfs_bnode_create+0x3d1/0x450 [ 98.488654][ T5706] __warn+0x248/0x2b0 [ 98.492638][ T5706] ? hfs_bnode_create+0x3d1/0x450 [ 98.497666][ T5706] report_bug+0x1b7/0x2e0 [ 98.502011][ T5706] handle_bug+0x3a/0x70 [ 98.506164][ T5706] exc_invalid_op+0x16/0x40 [ 98.510664][ T5706] asm_exc_invalid_op+0x16/0x20 [ 98.515517][ T5706] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 98.521154][ T5706] Code: 96 3f 8a 89 ee e8 8f f2 81 07 e9 57 fd ff ff e8 55 d0 49 ff 4c 89 ef e8 5d 07 96 07 48 c7 c7 80 96 3f 8a 89 ee e8 6f f2 81 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 98.540772][ T5706] RSP: 0018:ffffc9000354ee50 EFLAGS: 00010246 [ 98.546850][ T5706] RAX: 000000000000001f RBX: ffff888071c6c000 RCX: 0ccfede4fdc10200 [ 98.554824][ T5706] RDX: ffffc900059b1000 RSI: 0000000000023ef1 RDI: 0000000000023ef2 [ 98.562796][ T5706] RBP: 0000000000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 98.570766][ T5706] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000 [ 98.578747][ T5706] R13: ffff888071c6c0e0 R14: ffff8880288ca700 R15: dffffc0000000000 [ 98.586735][ T5706] ? do_raw_spin_unlock+0x11d/0x230 [ 98.591945][ T5706] hfs_bmap_alloc+0x5b8/0x670 [ 98.596722][ T5706] ? hfs_bmap_reserve+0x420/0x420 [ 98.601767][ T5706] hfs_btree_inc_height+0xfd/0xac0 [ 98.606885][ T5706] ? hfs_brec_insert+0x6f6/0xbd0 [ 98.611840][ T5706] ? hfs_brec_insert+0xbd0/0xbd0 [ 98.616786][ T5706] ? do_raw_spin_unlock+0x11d/0x230 [ 98.622549][ T5706] hfs_brec_insert+0x744/0xbd0 [ 98.627342][ T5706] ? hfs_brec_keylen+0x350/0x350 [ 98.632295][ T5706] __hfs_ext_write_extent+0x2a1/0x470 [ 98.637673][ T5706] __hfs_ext_cache_extent+0x6b/0x9b0 [ 98.642965][ T5706] ? mutex_lock_nested+0x17/0x20 [ 98.647905][ T5706] ? hfs_find_init+0x15b/0x1d0 [ 98.652672][ T5706] hfs_extend_file+0x39c/0x13f0 [ 98.657544][ T5706] ? hfs_get_block+0xc50/0xc50 [ 98.662328][ T5706] ? hfs_get_block+0x985/0xc50 [ 98.667112][ T5706] ? pagevec_lookup_range+0x30/0x70 [ 98.672321][ T5706] ? clean_bdev_aliases+0x762/0x8a0 [ 98.677528][ T5706] hfs_get_block+0x40f/0xc50 [ 98.682170][ T5706] ? hfs_free_extents+0x430/0x430 [ 98.687207][ T5706] ? do_raw_spin_unlock+0x11d/0x230 [ 98.692578][ T5706] ? create_page_buffers+0x238/0x320 [ 98.697889][ T5706] __block_write_begin_int+0x565/0x15d0 [ 98.703457][ T5706] ? hfs_free_extents+0x430/0x430 [ 98.708483][ T5706] ? page_zero_new_buffers+0x490/0x490 [ 98.713951][ T5706] ? wait_for_stable_page+0xd9/0x110 [ 98.719246][ T5706] cont_write_begin+0x598/0x7b0 [ 98.724110][ T5706] ? __lock_acquire+0x7d10/0x7d10 [ 98.729175][ T5706] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 98.735112][ T5706] ? unlock_page+0x17c/0x1f0 [ 98.739716][ T5706] hfs_write_begin+0x92/0xe0 [ 98.744466][ T5706] ? hfs_free_extents+0x430/0x430 [ 98.749537][ T5706] cont_write_begin+0x263/0x7b0 [ 98.754419][ T5706] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 98.760329][ T5706] hfs_write_begin+0x92/0xe0 [ 98.764936][ T5706] ? hfs_free_extents+0x430/0x430 [ 98.769967][ T5706] hfs_file_truncate+0x1c2/0xa10 [ 98.774914][ T5706] ? unmap_mapping_range+0xc8/0x100 [ 98.780115][ T5706] ? __lock_acquire+0x7d10/0x7d10 [ 98.785144][ T5706] ? hfs_extend_file+0x13f0/0x13f0 [ 98.790258][ T5706] ? rwsem_write_trylock+0x135/0x1c0 [ 98.795555][ T5706] ? up_write+0x1bb/0x420 [ 98.799887][ T5706] ? unmap_mapping_range+0xc8/0x100 [ 98.805087][ T5706] hfs_inode_setattr+0x4ab/0x6f0 [ 98.810022][ T5706] ? bpf_lsm_inode_setattr+0x5/0x10 [ 98.815221][ T5706] ? try_break_deleg+0x79/0x120 [ 98.820070][ T5706] ? hfs_evict_inode+0x100/0x100 [ 98.825005][ T5706] notify_change+0xbcd/0xee0 [ 98.829606][ T5706] do_truncate+0x1ac/0x240 [ 98.834024][ T5706] ? rcu_lock_release+0x20/0x20 [ 98.838893][ T5706] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 98.844192][ T5706] ? bpf_lsm_path_truncate+0x5/0x10 [ 98.849390][ T5706] do_sys_ftruncate+0x31b/0x3d0 [ 98.854289][ T5706] do_syscall_64+0x4c/0xa0 [ 98.858791][ T5706] ? clear_bhb_loop+0x30/0x80 [ 98.863475][ T5706] ? clear_bhb_loop+0x30/0x80 [ 98.868155][ T5706] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.874052][ T5706] RIP: 0033:0x7fd1f600deb9 [ 98.878485][ T5706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.898092][ T5706] RSP: 002b:00007fd1f4269028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 98.906519][ T5706] RAX: ffffffffffffffda RBX: 00007fd1f6288fa0 RCX: 00007fd1f600deb9 [ 98.914488][ T5706] RDX: 0000000000000000 RSI: 000000000000c17a RDI: 0000000000000004 [ 98.922469][ T5706] RBP: 00007fd1f607bc1f R08: 0000000000000000 R09: 0000000000000000 [ 98.930463][ T5706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.938444][ T5706] R13: 00007fd1f6289038 R14: 00007fd1f6288fa0 R15: 00007ffed79892a8 [ 98.946449][ T5706] [ 98.949782][ T5706] Kernel Offset: disabled [ 98.954354][ T5706] Rebooting in 86400 seconds..