last executing test programs: 5.834050313s ago: executing program 3: io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb7, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x46, 0x80, 0xdb, 0x10, 0xc45, 0x624e, 0xc042, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4e, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0xa1, 0x2, 0x0, [], [{{0x9, 0x5, 0x9, 0x3}}, {{0x9, 0x5, 0xd}}]}}]}}]}}, 0x0) 4.149116438s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 4.058600606s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791087000000000007000000000000009500000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240)="bb28f97ae07b33e6cba5e8530face552d4a87bc2e2e9fd237dee8ddc95dd8689cf6f58798fae735b7be7cdc5a13580fa94afb741288373ff97b4c88bab578e30a95b95", 0x0}, 0x20) r1 = socket(0x2b, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r5, 0x11a, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040), 0x1) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x80}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000540)={r7, 0xf60, "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"}, &(0x7f0000000180)=0xf68) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1) close(r4) r8 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[], 0xff36) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 3.642794934s ago: executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="a700000000000000000008fffffc08000300", @ANYRES32=r2], 0x2c}}, 0x0) 3.296877129s ago: executing program 0: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0xa, [{0x7}, {0xb}, {}, {}]}]}}, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x2}, 0x20) 3.01582685s ago: executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, {}, 0x6}}, 0x4c}}, 0x0) 2.920393938s ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newqdisc={0x24, 0x25, 0x3d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 2.898513935s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x13) 2.614575912s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002c0002"], 0x44}}, 0x0) 2.445150817s ago: executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 2.42361086s ago: executing program 3: sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 2.20000057s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000018001680140001801000020000000000000000000100008008000d"], 0x40}}, 0x0) 2.193743148s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, '\x00', "4623a9f6040839230fb7feac776dd8dc", "f391646e", "53ebcbf0fc37128b"}, 0x28) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/33, 0x21}], 0x1}}], 0x2, 0x0, 0x0) shutdown(r0, 0x0) 2.141316359s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360d", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a00"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r4], 0x4c}}, 0x0) 2.100408766s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000005400)=[{{0x0, 0x8, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a89cc640607df2e7a07", 0x1ff80}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29a7ddbe0b2b272911544465bb22aa", 0x36}, {&(0x7f00000002c0)="87c3752dd3dafc", 0x7}], 0x3}}], 0x4000000000001ee, 0x0) 1.743480494s ago: executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="a700000000000000000008fffffc08000300", @ANYRES32=r2], 0x2c}}, 0x0) 1.602634047s ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000003c0)='^\xfb*!]&\x00'}, 0x30) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) epoll_create(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) shutdown(r0, 0x2) 1.443351003s ago: executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x4, &(0x7f0000000100)=[{0x25, 0x2, 0x2, 0xfffffffe}, {}, {}, {0x6}]}) 1.403260977s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000003000048000000180090001007866726d000000001c0002800900024000000004030001400000001305000300000000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 1.085650313s ago: executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0}], 0x2) 1.023481814s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x2, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 970.101539ms ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 871.304505ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 513.60296ms ago: executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 486.962462ms ago: executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/29, 0x1d}, {&(0x7f0000000a40)=""/209, 0xd1}, {&(0x7f0000000940)=""/46, 0x2e}, {&(0x7f0000000b40)=""/219, 0xdb}, {&(0x7f0000000c40)=""/192, 0xc0}], 0x5}}], 0x1, 0x0, 0x0) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x302}}], 0x2, 0x0) 459.333778ms ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000740), 0xfe, 0x499, &(0x7f0000001780)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x8, 0x0) getdents64(r0, 0x0, 0x0) 356.251382ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x32, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0xa, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) 289.824959ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe3", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a00"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r4], 0x4c}}, 0x0) 62.989891ms ago: executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000780)=r2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r3, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x4c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000000b40)={[{@abort}, {@noblock_validity}, {@discard}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x1}, 0x0}, {@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0x10001}}, {@errors_continue}, {@usrjquota_path={'usrjquota', 0x3d, './file1/file4/file5'}}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="6e725f97696e6f6465733d382c00cb51fe27d2ffbf8134060a2a9eaaff3159662107b1ee23ac20dd7cf86e445c5edfcb018e9d2ecd4c16fe0911acc5db32d6f3941209cfd4dac33ebfcf9d7515c0ccfe874f6d981e1c821e30c2cab3e75c55b6"]) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202053250000000000202020731af9ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000140)=0x13) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 0s ago: executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="a700000000000000000008fffffc08000300", @ANYRES32=r2], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 437.966602][ T29] audit: type=1800 audit(1717832908.176:162): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="/" dev="loop1" ino=2 res=0 errno=0 [ 437.987282][ T3536] EXT4-fs (loop3): This should not happen!! Data will be lost [ 437.987282][ T3536] [ 437.997251][ T3536] EXT4-fs (loop3): Total free blocks count 0 [ 438.003560][ T3536] EXT4-fs (loop3): Free/Dirty block details [ 438.009664][ T3536] EXT4-fs (loop3): free_blocks=0 [ 438.014980][ T3536] EXT4-fs (loop3): dirty_blocks=0 [ 438.020295][ T3536] EXT4-fs (loop3): Block reservation details [ 438.026484][ T3536] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 438.556892][ T5073] sysv_free_block: trying to free block not in datazone [ 438.613417][ T5080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.623621][ T5073] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 439.847983][ T29] audit: type=1326 audit(1717832910.086:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7123e7cf69 code=0x0 [ 439.870939][ T7176] loop1: detected capacity change from 0 to 40427 [ 439.908435][ T7176] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 439.916963][ T7176] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 439.931767][ T7176] F2FS-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 440.093256][ T781] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 440.106043][ T29] audit: type=1326 audit(1717832910.276:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe47cf69 code=0x0 [ 440.592895][ T781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.605818][ T781] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 440.615325][ T781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.730286][ T781] usb 3-1: config 0 descriptor?? [ 441.447120][ T7183] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 441.528102][ T7193] 9pnet_fd: Insufficient options for proto=fd [ 442.008840][ T7198] loop4: detected capacity change from 0 to 512 [ 442.069797][ T7198] EXT4-fs: journaled quota format not specified [ 442.755881][ T7207] loop1: detected capacity change from 0 to 128 [ 442.891950][ T7209] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.4'. [ 442.901899][ T7209] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 443.012895][ T7203] loop3: detected capacity change from 0 to 32768 [ 443.852916][ T7209] loop4: detected capacity change from 0 to 32768 [ 443.871749][ T781] usbhid 3-1:0.0: can't add hid device: -71 [ 443.880832][ T781] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 443.904374][ T781] usb 3-1: USB disconnect, device number 9 [ 444.019293][ T7209] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 444.465694][ T7209] XFS (loop4): Starting recovery (logdev: internal) [ 444.539299][ T7221] loop2: detected capacity change from 0 to 2048 [ 444.554967][ T7209] XFS (loop4): Ending recovery (logdev: internal) [ 444.785908][ T7221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.434834][ T5068] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 445.745145][ T7226] loop1: detected capacity change from 0 to 4096 [ 445.965113][ T7230] loop0: detected capacity change from 0 to 2048 [ 446.181221][ T7230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.539969][ T5703] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.226397][ T29] audit: type=1326 audit(1717832917.426:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc36347cf69 code=0x0 [ 447.495486][ T7239] loop2: detected capacity change from 0 to 4096 [ 447.974586][ T5078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.968837][ T7250] loop4: detected capacity change from 0 to 40427 [ 448.986605][ T7250] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 448.996431][ T7250] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 449.010454][ T7250] F2FS-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 449.154657][ T7254] loop3: detected capacity change from 0 to 128 [ 449.626177][ T7254] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 449.690468][ T7254] bio_check_eod: 4 callbacks suppressed [ 449.690547][ T7254] syz-executor.3: attempt to access beyond end of device [ 449.690547][ T7254] loop3: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 449.712596][ T7254] buffer_io_error: 4 callbacks suppressed [ 449.712663][ T7254] Buffer I/O error on dev loop3, logical block 8767744, async page read [ 449.727246][ T7254] syz-executor.3: attempt to access beyond end of device [ 449.727246][ T7254] loop3: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 449.741804][ T7254] Buffer I/O error on dev loop3, logical block 13269809, async page read [ 449.750659][ T7254] syz-executor.3: attempt to access beyond end of device [ 449.750659][ T7254] loop3: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 449.764674][ T7254] Buffer I/O error on dev loop3, logical block 1157, async page read [ 449.773152][ T7254] syz-executor.3: attempt to access beyond end of device [ 449.773152][ T7254] loop3: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 449.787664][ T7254] Buffer I/O error on dev loop3, logical block 3211264, async page read [ 449.796432][ T7254] syz-executor.3: attempt to access beyond end of device [ 449.796432][ T7254] loop3: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 449.810712][ T7254] Buffer I/O error on dev loop3, logical block 8768635, async page read [ 449.821673][ T7254] syz-executor.3: attempt to access beyond end of device [ 449.821673][ T7254] loop3: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 449.836072][ T7254] Buffer I/O error on dev loop3, logical block 13466417, async page read [ 449.844917][ T7254] syz-executor.3: attempt to access beyond end of device [ 449.844917][ T7254] loop3: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 449.859132][ T7254] Buffer I/O error on dev loop3, logical block 209285, async page read [ 449.869325][ T7254] syz-executor.3: attempt to access beyond end of device [ 449.869325][ T7254] loop3: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 449.883935][ T7254] Buffer I/O error on dev loop3, logical block 8767744, async page read [ 449.893742][ T7254] syz-executor.3: attempt to access beyond end of device [ 449.893742][ T7254] loop3: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 449.908210][ T7254] Buffer I/O error on dev loop3, logical block 13269809, async page read [ 449.919061][ T7254] syz-executor.3: attempt to access beyond end of device [ 449.919061][ T7254] loop3: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 449.933089][ T7254] Buffer I/O error on dev loop3, logical block 1157, async page read [ 449.940717][ T7255] loop2: detected capacity change from 0 to 32768 [ 450.084657][ T29] audit: type=1800 audit(1717832920.186:166): pid=7254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="/" dev="loop3" ino=2 res=0 errno=0 [ 451.625442][ T5080] sysv_free_block: trying to free block not in datazone [ 451.634061][ T5080] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 451.701326][ T7262] loop0: detected capacity change from 0 to 512 [ 451.784671][ T7262] EXT4-fs: journaled quota format not specified [ 451.831480][ T7259] loop1: detected capacity change from 0 to 128 [ 452.002005][ T7267] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.3'. [ 452.012008][ T7267] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 452.929328][ T7267] loop3: detected capacity change from 0 to 32768 [ 453.182101][ T7271] loop0: detected capacity change from 0 to 32768 [ 453.192789][ T7267] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 453.462508][ T7268] loop4: detected capacity change from 0 to 4096 [ 453.544145][ T7267] XFS (loop3): Starting recovery (logdev: internal) [ 453.868712][ T7267] XFS (loop3): Ending recovery (logdev: internal) [ 455.244919][ T5080] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 455.842576][ T7289] loop4: detected capacity change from 0 to 2048 [ 456.008468][ T7289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.068771][ T7290] loop1: detected capacity change from 0 to 4096 [ 457.157067][ T29] audit: type=1326 audit(1717832927.336:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7294 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7123e7cf69 code=0x0 [ 457.544415][ T5068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.262885][ T7304] loop4: detected capacity change from 0 to 128 [ 458.341460][ T7304] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 458.422853][ T7304] bio_check_eod: 4 callbacks suppressed [ 458.422929][ T7304] syz-executor.4: attempt to access beyond end of device [ 458.422929][ T7304] loop4: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 458.443249][ T7304] buffer_io_error: 4 callbacks suppressed [ 458.443318][ T7304] Buffer I/O error on dev loop4, logical block 8767744, async page read [ 458.460777][ T7304] syz-executor.4: attempt to access beyond end of device [ 458.460777][ T7304] loop4: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 458.475631][ T7304] Buffer I/O error on dev loop4, logical block 13269809, async page read [ 458.484588][ T7304] syz-executor.4: attempt to access beyond end of device [ 458.484588][ T7304] loop4: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 458.498591][ T7304] Buffer I/O error on dev loop4, logical block 1157, async page read [ 458.507103][ T7304] syz-executor.4: attempt to access beyond end of device [ 458.507103][ T7304] loop4: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 458.523688][ T7304] Buffer I/O error on dev loop4, logical block 3211264, async page read [ 458.532576][ T7304] syz-executor.4: attempt to access beyond end of device [ 458.532576][ T7304] loop4: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 458.546940][ T7304] Buffer I/O error on dev loop4, logical block 8768635, async page read [ 458.555739][ T7304] syz-executor.4: attempt to access beyond end of device [ 458.555739][ T7304] loop4: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 458.570286][ T7304] Buffer I/O error on dev loop4, logical block 13466417, async page read [ 458.578990][ T7304] syz-executor.4: attempt to access beyond end of device [ 458.578990][ T7304] loop4: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 458.593226][ T7304] Buffer I/O error on dev loop4, logical block 209285, async page read [ 458.603504][ T7304] syz-executor.4: attempt to access beyond end of device [ 458.603504][ T7304] loop4: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 458.619682][ T7304] Buffer I/O error on dev loop4, logical block 8767744, async page read [ 458.628693][ T7304] syz-executor.4: attempt to access beyond end of device [ 458.628693][ T7304] loop4: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 458.643082][ T7304] Buffer I/O error on dev loop4, logical block 13269809, async page read [ 458.652014][ T7304] syz-executor.4: attempt to access beyond end of device [ 458.652014][ T7304] loop4: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 458.661129][ T7301] loop1: detected capacity change from 0 to 32768 [ 458.665940][ T7304] Buffer I/O error on dev loop4, logical block 1157, async page read [ 458.683863][ T29] audit: type=1800 audit(1717832928.926:168): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="/" dev="loop4" ino=2 res=0 errno=0 [ 459.165588][ T5068] sysv_free_block: trying to free block not in datazone [ 459.220967][ T5068] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 459.899008][ T7311] loop4: detected capacity change from 0 to 512 [ 459.931412][ T7311] EXT4-fs: journaled quota format not specified [ 461.688634][ T7319] loop1: detected capacity change from 0 to 40427 [ 461.705648][ T7319] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 461.713802][ T7319] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 461.723923][ T7319] F2FS-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 461.877154][ T7322] loop3: detected capacity change from 0 to 32768 [ 463.659703][ T7316] loop0: detected capacity change from 0 to 4096 [ 464.081539][ T7325] 9pnet_fd: Insufficient options for proto=fd [ 464.898753][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.905562][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.827603][ T7334] debugfs: Directory 'netdev:nicvf0' with parent 'phy6' already present! [ 466.252042][ T7331] loop2: detected capacity change from 0 to 32768 [ 466.294243][ T7334] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 466.321539][ T7332] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.4'. [ 466.331540][ T7332] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 466.980954][ T7332] loop4: detected capacity change from 0 to 32768 [ 467.100499][ T7332] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 467.274310][ T7345] loop0: detected capacity change from 0 to 128 [ 467.290870][ T7345] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 467.353772][ T7345] bio_check_eod: 4 callbacks suppressed [ 467.353843][ T7345] syz-executor.0: attempt to access beyond end of device [ 467.353843][ T7345] loop0: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 467.374089][ T7345] buffer_io_error: 4 callbacks suppressed [ 467.374153][ T7345] Buffer I/O error on dev loop0, logical block 8767744, async page read [ 467.388728][ T7345] syz-executor.0: attempt to access beyond end of device [ 467.388728][ T7345] loop0: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 467.403492][ T7345] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 467.412375][ T7345] syz-executor.0: attempt to access beyond end of device [ 467.412375][ T7345] loop0: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 467.428283][ T7345] Buffer I/O error on dev loop0, logical block 1157, async page read [ 467.437102][ T7345] syz-executor.0: attempt to access beyond end of device [ 467.437102][ T7345] loop0: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 467.448475][ T7332] XFS (loop4): Starting recovery (logdev: internal) [ 467.451248][ T7345] Buffer I/O error on dev loop0, logical block 3211264, async page read [ 467.466819][ T7345] syz-executor.0: attempt to access beyond end of device [ 467.466819][ T7345] loop0: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 467.481091][ T7345] Buffer I/O error on dev loop0, logical block 8768635, async page read [ 467.489819][ T7345] syz-executor.0: attempt to access beyond end of device [ 467.489819][ T7345] loop0: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 467.504307][ T7345] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 467.513105][ T7345] syz-executor.0: attempt to access beyond end of device [ 467.513105][ T7345] loop0: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 467.529899][ T7345] Buffer I/O error on dev loop0, logical block 209285, async page read [ 467.540233][ T7345] syz-executor.0: attempt to access beyond end of device [ 467.540233][ T7345] loop0: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 467.554578][ T7345] Buffer I/O error on dev loop0, logical block 8767744, async page read [ 467.563275][ T7345] syz-executor.0: attempt to access beyond end of device [ 467.563275][ T7345] loop0: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 467.573168][ T7332] XFS (loop4): Ending recovery (logdev: internal) [ 467.577775][ T7345] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 467.593054][ T7345] syz-executor.0: attempt to access beyond end of device [ 467.593054][ T7345] loop0: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 467.607122][ T7345] Buffer I/O error on dev loop0, logical block 1157, async page read [ 467.651826][ T29] audit: type=1800 audit(1717832937.866:169): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 467.861854][ T7348] loop1: detected capacity change from 0 to 512 [ 467.910060][ T7348] EXT4-fs: journaled quota format not specified [ 468.124092][ T5078] sysv_free_block: trying to free block not in datazone [ 468.206275][ T5078] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 468.213570][ T5068] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 469.463033][ T29] audit: type=1326 audit(1717832939.676:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f5e47cf69 code=0x0 [ 469.559003][ T7356] loop0: detected capacity change from 0 to 4096 [ 472.033973][ T7369] loop0: detected capacity change from 0 to 4096 [ 472.455838][ T7376] loop3: detected capacity change from 0 to 2048 [ 472.645878][ T7374] loop2: detected capacity change from 0 to 32768 [ 472.684825][ T7376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.818836][ T7369] ntfs3: loop0: Failed to load $BadClus (-22). [ 473.319747][ T7369] loop0: detected capacity change from 0 to 256 [ 473.393283][ T7369] FAT-fs (loop0): Unrecognized mount option "shortname=" or missing value [ 473.456403][ T7387] loop4: detected capacity change from 0 to 512 [ 473.463903][ T7388] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.1'. [ 473.475671][ T7388] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 473.545517][ T7387] EXT4-fs: journaled quota format not specified [ 474.390752][ T7388] loop1: detected capacity change from 0 to 32768 [ 474.466550][ T7388] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 474.770041][ T7388] XFS (loop1): Starting recovery (logdev: internal) [ 474.852239][ T7388] XFS (loop1): Ending recovery (logdev: internal) [ 475.172713][ T5080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.929960][ T5073] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 475.979359][ T7413] loop2: detected capacity change from 0 to 128 [ 476.014133][ T7408] loop4: detected capacity change from 0 to 4096 [ 476.055127][ T7413] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 476.134455][ T7413] bio_check_eod: 4 callbacks suppressed [ 476.134532][ T7413] syz-executor.2: attempt to access beyond end of device [ 476.134532][ T7413] loop2: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 476.154821][ T7413] buffer_io_error: 4 callbacks suppressed [ 476.154893][ T7413] Buffer I/O error on dev loop2, logical block 8767744, async page read [ 476.169534][ T7413] syz-executor.2: attempt to access beyond end of device [ 476.169534][ T7413] loop2: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 476.184166][ T7413] Buffer I/O error on dev loop2, logical block 13269809, async page read [ 476.193064][ T7413] syz-executor.2: attempt to access beyond end of device [ 476.193064][ T7413] loop2: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 476.209537][ T7413] Buffer I/O error on dev loop2, logical block 1157, async page read [ 476.218088][ T7413] syz-executor.2: attempt to access beyond end of device [ 476.218088][ T7413] loop2: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 476.234412][ T7413] Buffer I/O error on dev loop2, logical block 3211264, async page read [ 476.243299][ T7413] syz-executor.2: attempt to access beyond end of device [ 476.243299][ T7413] loop2: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 476.257639][ T7413] Buffer I/O error on dev loop2, logical block 8768635, async page read [ 476.266363][ T7413] syz-executor.2: attempt to access beyond end of device [ 476.266363][ T7413] loop2: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 476.280666][ T7413] Buffer I/O error on dev loop2, logical block 13466417, async page read [ 476.289339][ T7413] syz-executor.2: attempt to access beyond end of device [ 476.289339][ T7413] loop2: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 476.303672][ T7413] Buffer I/O error on dev loop2, logical block 209285, async page read [ 476.314038][ T7413] syz-executor.2: attempt to access beyond end of device [ 476.314038][ T7413] loop2: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 476.328325][ T7413] Buffer I/O error on dev loop2, logical block 8767744, async page read [ 476.339195][ T7413] syz-executor.2: attempt to access beyond end of device [ 476.339195][ T7413] loop2: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 476.353601][ T7413] Buffer I/O error on dev loop2, logical block 13269809, async page read [ 476.362498][ T7413] syz-executor.2: attempt to access beyond end of device [ 476.362498][ T7413] loop2: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 476.377572][ T7413] Buffer I/O error on dev loop2, logical block 1157, async page read [ 476.400269][ T29] audit: type=1800 audit(1717832946.636:171): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="/" dev="loop2" ino=2 res=0 errno=0 [ 476.499369][ T29] audit: type=1326 audit(1717832946.716:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7123e7cf69 code=0x0 [ 476.533762][ T7413] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 476.898028][ T5703] sysv_free_block: trying to free block not in datazone [ 476.959665][ T5703] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 476.986456][ T7417] loop0: detected capacity change from 0 to 32768 [ 478.516307][ T7426] loop4: detected capacity change from 0 to 4096 [ 478.653872][ T7426] ntfs3: loop4: Failed to load $BadClus (-22). [ 478.762445][ T7431] loop3: detected capacity change from 0 to 512 [ 478.832901][ T7431] EXT4-fs: journaled quota format not specified [ 479.016537][ T7426] loop4: detected capacity change from 0 to 256 [ 479.049821][ T7426] FAT-fs (loop4): Unrecognized mount option "shortname=" or missing value [ 480.050381][ T7446] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.3'. [ 480.060568][ T7446] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 480.126455][ T7442] loop4: detected capacity change from 0 to 2048 [ 480.337390][ T7442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.789311][ T7457] loop0: detected capacity change from 0 to 32768 [ 482.206882][ T29] audit: type=1326 audit(1717832952.416:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7460 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f5e47cf69 code=0x0 [ 482.361994][ T7459] loop1: detected capacity change from 0 to 4096 [ 482.454174][ T5068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.059104][ T7467] loop4: detected capacity change from 0 to 512 [ 483.200856][ T7467] EXT4-fs: journaled quota format not specified [ 484.482351][ T7472] loop1: detected capacity change from 0 to 32768 [ 484.613647][ T7471] loop4: detected capacity change from 0 to 4096 [ 485.244112][ T7471] ntfs3: loop4: Failed to load $BadClus (-22). [ 485.867255][ T7471] loop4: detected capacity change from 0 to 256 [ 485.894396][ T7471] FAT-fs (loop4): Unrecognized mount option "shortname=" or missing value [ 487.001211][ T7492] loop0: detected capacity change from 0 to 32768 [ 487.598850][ T7497] loop4: detected capacity change from 0 to 4096 [ 487.724536][ T29] audit: type=1326 audit(1717832957.936:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7499 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7123e7cf69 code=0x0 [ 489.631094][ T7510] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.0'. [ 489.640968][ T7510] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 490.632951][ T7510] loop0: detected capacity change from 0 to 32768 [ 490.718863][ T7510] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 490.907826][ T29] audit: type=1800 audit(1717832961.096:175): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1943 res=0 errno=0 [ 491.003321][ T7519] loop3: detected capacity change from 0 to 1024 [ 491.335129][ T7510] XFS (loop0): Starting recovery (logdev: internal) [ 491.408068][ T7510] XFS (loop0): Ending recovery (logdev: internal) [ 491.727466][ T7525] loop2: detected capacity change from 0 to 32768 [ 492.800146][ C0] sched: RT throttling activated [ 493.359587][ T5078] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 493.392104][ T5128] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 493.446150][ T29] audit: type=1326 audit(1717832963.656:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe47cf69 code=0x0 [ 493.732610][ T5128] usb 4-1: Using ep0 maxpacket: 8 [ 493.882422][ T5128] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 493.891620][ T5128] usb 4-1: config 135 has no interface number 0 [ 493.898132][ T5128] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.059649][ T7532] loop1: detected capacity change from 0 to 2048 [ 494.242893][ T5128] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 494.252378][ T5128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.262222][ T5128] usb 4-1: Product: syz [ 494.322328][ T7532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.333484][ T5128] usb 4-1: can't set config #135, error -71 [ 494.363221][ T5128] usb 4-1: USB disconnect, device number 10 [ 495.599147][ T7539] loop3: detected capacity change from 0 to 32768 [ 496.372990][ T5073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.484349][ T7545] loop0: detected capacity change from 0 to 4096 [ 496.687696][ T29] audit: type=1326 audit(1717832966.896:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7546 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe47cf69 code=0x0 [ 498.423130][ T29] audit: type=1326 audit(1717832968.626:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7123e7cf69 code=0x0 [ 498.574540][ T7565] syz-executor.2 (pid 7565) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 499.369333][ T7572] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.381671][ T7572] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.461193][ T7569] loop4: detected capacity change from 0 to 32768 [ 500.464592][ T7572] loop1: detected capacity change from 0 to 32768 [ 500.558361][ T7572] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 500.829028][ T29] audit: type=1800 audit(1717832970.966:179): pid=7583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 500.954055][ T7572] XFS (loop1): Starting recovery (logdev: internal) [ 501.017833][ T7583] loop2: detected capacity change from 0 to 1024 [ 501.037344][ T7572] XFS (loop1): Ending recovery (logdev: internal) [ 501.820737][ T5125] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 501.960742][ T5073] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 502.120354][ T5125] usb 3-1: Using ep0 maxpacket: 8 [ 502.251706][ T5125] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 502.260754][ T5125] usb 3-1: config 135 has no interface number 0 [ 502.267275][ T5125] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.321622][ T7594] loop0: detected capacity change from 0 to 2048 [ 502.504238][ T7592] loop3: detected capacity change from 0 to 32768 [ 502.509190][ T7594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.531738][ T5125] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 502.541683][ T5125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.551417][ T5125] usb 3-1: Product: syz [ 502.555821][ T5125] usb 3-1: Manufacturer: syz [ 502.560959][ T5125] usb 3-1: SerialNumber: syz [ 502.615364][ T5125] usb 3-1: can't set config #135, error -71 [ 502.634792][ T5125] usb 3-1: USB disconnect, device number 10 [ 503.352653][ T29] audit: type=1800 audit(1717832973.566:180): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1949 res=0 errno=0 [ 503.489459][ T7600] loop2: detected capacity change from 0 to 1024 [ 504.565082][ T5078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.614303][ T7602] loop1: detected capacity change from 0 to 32768 [ 504.628422][ T7602] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7602) [ 504.649857][ T7602] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 504.660542][ T7602] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 504.672065][ T7602] BTRFS info (device loop1): using free-space-tree [ 504.721367][ T5125] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 504.958039][ T7602] BTRFS info (device loop1): rebuilding free space tree [ 505.048138][ T5125] usb 3-1: Using ep0 maxpacket: 8 [ 505.177681][ T5125] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 505.186494][ T5125] usb 3-1: config 135 has no interface number 0 [ 505.193119][ T5125] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.254075][ T29] audit: type=1804 audit(1717832975.456:181): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2788524630/syzkaller.EGQ8s6/153/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 505.281235][ T29] audit: type=1326 audit(1717832975.456:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb16e7cf69 code=0x0 [ 505.483399][ T5125] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 505.493944][ T5125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.502427][ T5125] usb 3-1: Product: syz [ 505.506814][ T5125] usb 3-1: Manufacturer: syz [ 505.511843][ T5125] usb 3-1: SerialNumber: syz [ 505.664246][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 505.991026][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 506.181458][ T5125] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 506.188169][ T5125] usb 3-1: No valid video chain found. [ 506.220628][ T5125] usb 3-1: USB disconnect, device number 11 [ 506.238331][ T4417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.252801][ T5073] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 506.386132][ T4417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.550963][ T4417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.620039][ T7629] loop3: detected capacity change from 0 to 2048 [ 506.700412][ T29] audit: type=1326 audit(1717832976.886:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe47cf69 code=0x0 [ 506.776475][ T4417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.829086][ T7629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.263500][ T4417] bridge_slave_1: left allmulticast mode [ 507.269867][ T4417] bridge_slave_1: left promiscuous mode [ 507.276943][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.359305][ T4417] bridge_slave_0: left allmulticast mode [ 507.367241][ T4417] bridge_slave_0: left promiscuous mode [ 507.374174][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.445662][ T4417] tipc: Resetting bearer [ 507.891667][ T29] audit: type=1326 audit(1717832978.056:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb16e7cf69 code=0x0 [ 507.942190][ T4417] tipc: Disabling bearer [ 508.242866][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.307430][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.373180][ T4417] bond0 (unregistering): Released all slaves [ 508.752921][ T4417] tipc: Left network mode [ 509.198592][ T5080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.231424][ T7649] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.2'. [ 509.242209][ T7649] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 509.346544][ T4417] hsr_slave_0: left promiscuous mode [ 509.365163][ T4417] hsr_slave_1: left promiscuous mode [ 509.373372][ T29] audit: type=1800 audit(1717832979.556:185): pid=7651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 509.402157][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.412371][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.493839][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.501748][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.621017][ T4417] veth1_macvtap: left promiscuous mode [ 509.626800][ T4417] veth0_macvtap: left promiscuous mode [ 509.632819][ T4417] veth1_vlan: left promiscuous mode [ 509.638383][ T4417] veth0_vlan: left promiscuous mode [ 509.686110][ T7651] loop4: detected capacity change from 0 to 1024 [ 510.099087][ T7652] loop2: detected capacity change from 0 to 32768 [ 510.354313][ T7652] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 511.255610][ T7660] loop3: detected capacity change from 0 to 32768 [ 511.269480][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 511.302028][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 511.398161][ T5125] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 511.641944][ T7652] XFS (loop2): Starting recovery (logdev: internal) [ 511.972154][ T5072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 511.983330][ T5072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 511.994355][ T5072] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.025448][ T5072] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.037243][ T5072] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 512.048844][ T5072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 512.051326][ T5125] usb 5-1: Using ep0 maxpacket: 8 [ 512.104139][ T7652] XFS (loop2): Ending recovery (logdev: internal) [ 512.345608][ T5703] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 512.441443][ T5125] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 512.449343][ T5125] usb 5-1: can't read configurations, error -71 [ 513.345801][ T7669] loop0: detected capacity change from 0 to 32768 [ 513.378053][ T7669] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7669) [ 513.388025][ T29] audit: type=1800 audit(1717832983.516:186): pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 513.445404][ T7669] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 513.456154][ T7669] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm [ 513.467531][ T7669] BTRFS info (device loop0): using free-space-tree [ 513.588229][ T7672] loop4: detected capacity change from 0 to 1024 [ 513.815210][ T7669] BTRFS info (device loop0): rebuilding free space tree [ 513.985521][ T7665] chnl_net:caif_netlink_parms(): no params data found [ 513.997737][ T29] audit: type=1804 audit(1717832984.206:187): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3136393998/syzkaller.RXSZdE/168/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 514.227972][ T5072] Bluetooth: hci0: command tx timeout [ 514.362003][ T5125] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 514.680703][ T5125] usb 5-1: Using ep0 maxpacket: 8 [ 514.821207][ T5125] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 514.829986][ T5125] usb 5-1: config 135 has no interface number 0 [ 514.838154][ T5125] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.857992][ T5078] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 514.982822][ T29] audit: type=1326 audit(1717832985.186:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7691 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f5e47cf69 code=0x0 [ 515.102663][ T5125] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 515.112267][ T5125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.120819][ T5125] usb 5-1: Product: syz [ 515.125219][ T5125] usb 5-1: Manufacturer: syz [ 515.130041][ T5125] usb 5-1: SerialNumber: syz [ 515.516146][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 515.566477][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 515.583448][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.591289][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.599093][ T7665] bridge_slave_0: entered allmulticast mode [ 515.608636][ T7665] bridge_slave_0: entered promiscuous mode [ 515.681228][ T5125] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 515.687918][ T5125] usb 5-1: No valid video chain found. [ 515.711953][ T5125] usb 5-1: USB disconnect, device number 12 [ 515.724477][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.732375][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.740283][ T7665] bridge_slave_1: entered allmulticast mode [ 515.752380][ T7665] bridge_slave_1: entered promiscuous mode [ 516.066813][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.160785][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.291884][ T5072] Bluetooth: hci0: command tx timeout [ 516.401403][ T29] audit: type=1326 audit(1717832986.606:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7123e7cf69 code=0x0 [ 516.494498][ T7665] team0: Port device team_slave_0 added [ 516.605892][ T7665] team0: Port device team_slave_1 added [ 516.918123][ T4417] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.988778][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.996678][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.023064][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.115321][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.122666][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.149174][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.244056][ T4417] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.445588][ T4417] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.559461][ T7707] loop2: detected capacity change from 0 to 2048 [ 517.677590][ T4417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.759246][ T7665] hsr_slave_0: entered promiscuous mode [ 517.824066][ T7665] hsr_slave_1: entered promiscuous mode [ 517.858484][ T7707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.890408][ T7665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.898321][ T7665] Cannot create hsr debugfs directory [ 518.322454][ T4417] bridge_slave_1: left allmulticast mode [ 518.328359][ T4417] bridge_slave_1: left promiscuous mode [ 518.335151][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.422100][ T5072] Bluetooth: hci0: command tx timeout [ 518.428954][ T4417] bridge_slave_0: left allmulticast mode [ 518.435183][ T4417] bridge_slave_0: left promiscuous mode [ 518.441968][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.475634][ T7711] loop3: detected capacity change from 0 to 40427 [ 518.493347][ T7711] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 518.501465][ T7711] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 518.515154][ T7711] F2FS-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 518.543561][ T4417] tipc: Resetting bearer [ 519.059677][ T4417] tipc: Disabling bearer [ 519.274121][ T7711] 9pnet_fd: Insufficient options for proto=fd [ 519.337490][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.409007][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.785455][ T4417] bond0 (unregistering): Released all slaves [ 520.203257][ T4417] tipc: Left network mode [ 520.332518][ T4417] IPVS: stopping backup sync thread 5364 ... [ 520.338402][ T4350] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 520.351202][ T4350] EXT4-fs (loop2): This should not happen!! Data will be lost [ 520.351202][ T4350] [ 520.361210][ T4350] EXT4-fs (loop2): Total free blocks count 0 [ 520.368502][ T4350] EXT4-fs (loop2): Free/Dirty block details [ 520.375094][ T4350] EXT4-fs (loop2): free_blocks=0 [ 520.380408][ T4350] EXT4-fs (loop2): dirty_blocks=0 [ 520.385649][ T4350] EXT4-fs (loop2): Block reservation details [ 520.391953][ T4350] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 520.450852][ T5072] Bluetooth: hci0: command tx timeout [ 520.454415][ T7719] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.3'. [ 520.466628][ T7719] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 520.672874][ T5703] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.867342][ T5066] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 520.881896][ T5066] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 520.898501][ T5066] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 520.932326][ T5066] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 520.944321][ T5066] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 520.954317][ T5066] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 521.312311][ T7719] loop3: detected capacity change from 0 to 32768 [ 521.339626][ T4417] hsr_slave_0: left promiscuous mode [ 521.386114][ T4417] hsr_slave_1: left promiscuous mode [ 521.392583][ T7719] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 521.408554][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.416788][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.435053][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.442924][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.527459][ T4417] veth1_macvtap: left promiscuous mode [ 521.533812][ T4417] veth0_macvtap: left promiscuous mode [ 521.535317][ T7719] XFS (loop3): Starting recovery (logdev: internal) [ 521.539638][ T4417] veth1_vlan: left promiscuous mode [ 521.552033][ T4417] veth0_vlan: left promiscuous mode [ 521.767380][ T7719] XFS (loop3): Ending recovery (logdev: internal) [ 522.434955][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 522.745514][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 522.799228][ T5080] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 522.855451][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 522.937383][ T7735] loop4: detected capacity change from 0 to 32768 [ 522.954211][ T7735] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7735) [ 523.018799][ T5066] Bluetooth: hci2: command tx timeout [ 523.117279][ T7735] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 523.132667][ T7735] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm [ 523.149504][ T7735] BTRFS info (device loop4): using free-space-tree [ 523.502562][ T7735] BTRFS info (device loop4): rebuilding free space tree [ 523.811357][ T29] audit: type=1804 audit(1717832994.006:190): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2924616561/syzkaller.BHbkPc/144/bus/bus" dev="loop4" ino=263 res=1 errno=0 [ 524.034035][ T7665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 524.185216][ T7665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 524.447964][ T7665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 524.471811][ T29] audit: type=1326 audit(1717832994.656:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f5e47cf69 code=0x0 [ 524.550349][ T7665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 524.560564][ T29] audit: type=1800 audit(1717832994.766:192): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 524.586379][ T5068] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 524.737481][ T7759] loop3: detected capacity change from 0 to 1024 [ 524.938165][ T7720] chnl_net:caif_netlink_parms(): no params data found [ 525.090487][ T5066] Bluetooth: hci2: command tx timeout [ 525.351108][ T5121] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 525.640883][ T5121] usb 4-1: Using ep0 maxpacket: 8 [ 525.783911][ T5121] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 525.793204][ T5121] usb 4-1: config 135 has no interface number 0 [ 525.799725][ T5121] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.839765][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.071562][ T5121] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 526.081159][ T5121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.089515][ T5121] usb 4-1: Product: syz [ 526.094138][ T5121] usb 4-1: Manufacturer: syz [ 526.098976][ T5121] usb 4-1: SerialNumber: syz [ 526.198248][ T7665] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.223167][ T7720] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.233833][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.242311][ T7720] bridge_slave_0: entered allmulticast mode [ 526.251518][ T7720] bridge_slave_0: entered promiscuous mode [ 526.314283][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.315650][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.320928][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.328312][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.491584][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.499308][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.507271][ T7720] bridge_slave_1: entered allmulticast mode [ 526.518468][ T7720] bridge_slave_1: entered promiscuous mode [ 526.647751][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.655592][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.680445][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 526.868321][ T5121] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 526.875188][ T5121] usb 4-1: No valid video chain found. [ 526.903586][ T5121] usb 4-1: USB disconnect, device number 11 [ 527.056880][ T7720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.171632][ T5066] Bluetooth: hci2: command tx timeout [ 527.193285][ T7665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 527.204365][ T7665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 527.263362][ T7720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.732352][ T7720] team0: Port device team_slave_0 added [ 527.776188][ T7773] loop2: detected capacity change from 0 to 40427 [ 527.801067][ T7773] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 527.809162][ T7773] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 527.828063][ T7720] team0: Port device team_slave_1 added [ 527.872972][ T7773] F2FS-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 528.244996][ T7720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.254167][ T7720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.282637][ T7720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.449043][ T7720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.458104][ T7720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.484579][ T7720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.703079][ T7720] hsr_slave_0: entered promiscuous mode [ 528.732059][ T7720] hsr_slave_1: entered promiscuous mode [ 528.774804][ T7720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.782965][ T7720] Cannot create hsr debugfs directory [ 528.895568][ T7773] 9pnet_fd: Insufficient options for proto=fd [ 529.180576][ T4417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.253319][ T5066] Bluetooth: hci2: command tx timeout [ 529.325689][ T4417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.537076][ T4417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.110961][ T4417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.380961][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 530.446174][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.513535][ T5072] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 530.538265][ T5072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 530.547688][ T5072] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 530.599273][ T5072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 530.617282][ T5072] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 530.636318][ T5072] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.715804][ T4417] bridge_slave_1: left allmulticast mode [ 530.723983][ T4417] bridge_slave_1: left promiscuous mode [ 530.733462][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.767892][ T4417] bridge_slave_0: left allmulticast mode [ 530.774338][ T4417] bridge_slave_0: left promiscuous mode [ 530.781143][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.831894][ T4417] tipc: Resetting bearer [ 531.159422][ T4417] tipc: Disabling bearer [ 531.360942][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.420820][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.448125][ T4417] bond0 (unregistering): Released all slaves [ 531.703386][ T4417] tipc: Left network mode [ 532.482132][ T7665] veth0_vlan: entered promiscuous mode [ 532.606045][ T4417] hsr_slave_0: left promiscuous mode [ 532.632110][ T4417] hsr_slave_1: left promiscuous mode [ 532.669885][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.678239][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.722449][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.730376][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.782914][ T5072] Bluetooth: hci1: command tx timeout [ 532.841945][ T4417] veth1_macvtap: left promiscuous mode [ 532.847823][ T4417] veth0_macvtap: left promiscuous mode [ 532.854894][ T4417] veth1_vlan: left promiscuous mode [ 532.861093][ T4417] veth0_vlan: left promiscuous mode [ 533.014820][ T7800] loop2: detected capacity change from 0 to 40427 [ 533.063827][ T7800] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 533.072059][ T7800] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 533.135320][ T7800] F2FS-fs (loop2): Found nat_bits in checkpoint [ 533.479739][ T7800] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 533.487317][ T7800] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 533.728635][ T29] audit: type=1326 audit(1717833003.936:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7123e7cf69 code=0x0 [ 533.806416][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 533.852170][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 534.084351][ T7720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 534.275018][ T7665] veth1_vlan: entered promiscuous mode [ 534.466433][ T7720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 534.622068][ T7720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 534.849469][ T7720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 534.887720][ T5072] Bluetooth: hci1: command tx timeout [ 535.071383][ T7665] veth0_macvtap: entered promiscuous mode [ 535.099589][ T7665] veth1_macvtap: entered promiscuous mode [ 535.165948][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.176854][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.187035][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.197870][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.213860][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.277573][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.289570][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.299781][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.310824][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.326771][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.609315][ T7665] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.618878][ T7665] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.629384][ T7665] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.638590][ T7665] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.761378][ T7790] chnl_net:caif_netlink_parms(): no params data found [ 536.330472][ T7720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.512596][ T7720] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.591147][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.598822][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.699645][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.707442][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.937386][ T5072] Bluetooth: hci1: command tx timeout [ 537.697518][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.706143][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.714062][ T7790] bridge_slave_0: entered allmulticast mode [ 537.723316][ T7790] bridge_slave_0: entered promiscuous mode [ 537.857895][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.866408][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.874645][ T7790] bridge_slave_1: entered allmulticast mode [ 537.884502][ T7790] bridge_slave_1: entered promiscuous mode [ 538.528858][ T7790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.821318][ T7838] loop3: detected capacity change from 0 to 40427 [ 538.862007][ T7790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.914049][ T7838] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 538.922207][ T7838] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 538.967256][ T7838] F2FS-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 539.027142][ T5072] Bluetooth: hci1: command tx timeout [ 539.395680][ T7841] loop2: detected capacity change from 0 to 32768 [ 539.604080][ T7790] team0: Port device team_slave_0 added [ 540.511751][ T7790] team0: Port device team_slave_1 added [ 540.903752][ T7790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.911156][ T7790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.939195][ T7790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.071704][ T7790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.078874][ T7790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.105341][ T7790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.109822][ T7845] 9pnet_fd: Insufficient options for proto=fd [ 541.748346][ T7790] hsr_slave_0: entered promiscuous mode [ 541.802924][ T7790] hsr_slave_1: entered promiscuous mode [ 541.902404][ T7720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.230776][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 542.774020][ T7720] veth0_vlan: entered promiscuous mode [ 542.898372][ T7720] veth1_vlan: entered promiscuous mode [ 543.020247][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 543.033393][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 543.098882][ T7855] loop3: detected capacity change from 0 to 128 [ 543.145060][ T7855] udf: Unknown parameter '0x0000000000000000' [ 543.271937][ T7856] loop3: detected capacity change from 0 to 512 [ 543.332553][ T7720] veth0_macvtap: entered promiscuous mode [ 543.374817][ T7856] EXT4-fs error (device loop3): __ext4_fill_super:5464: inode #2: comm syz-executor.3: iget: special inode unallocated [ 543.405664][ T7856] EXT4-fs (loop3): get root inode failed [ 543.411808][ T7856] EXT4-fs (loop3): mount failed [ 543.436265][ T7790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 543.474732][ T7720] veth1_macvtap: entered promiscuous mode [ 543.488950][ T7790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 543.583544][ T7790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 543.672831][ T7790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 543.722252][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.735177][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.745781][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.757690][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.767991][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.778992][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.794178][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.953642][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.965675][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.977469][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.988236][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.998374][ T7720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.009136][ T7720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.025632][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.242388][ T7720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.253176][ T7720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.262418][ T7720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.271509][ T7720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.805283][ T7870] loop3: detected capacity change from 0 to 512 [ 544.905360][ T7870] EXT4-fs: Mount option(s) incompatible with ext3 [ 544.982679][ T7790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.126323][ T7790] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.209096][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.216960][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.372707][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.380501][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.441992][ T7870] loop3: detected capacity change from 0 to 2048 [ 545.487810][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.497041][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.652091][ T5125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.661748][ T5125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.838096][ T7790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.852802][ T5128] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 546.119528][ T5128] usb 4-1: device descriptor read/64, error -71 [ 546.409276][ T7880] loop1: detected capacity change from 0 to 2048 [ 546.464374][ T5128] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 546.564125][ T7880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.681073][ T5128] usb 4-1: device descriptor read/64, error -71 [ 546.812441][ T5128] usb usb4-port1: attempt power cycle [ 546.981573][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 547.163252][ T7790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.251320][ T5128] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 547.269832][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 547.384635][ T5128] usb 4-1: device descriptor read/8, error -71 [ 547.393040][ T43] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 547.406452][ T43] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 547.421837][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 547.432362][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.523427][ T43] hub 3-1:4.0: bad descriptor, ignoring hub [ 547.529617][ T43] hub 3-1:4.0: probe with driver hub failed with error -5 [ 547.544781][ T43] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 547.682586][ T5128] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 547.813592][ T5128] usb 4-1: device descriptor read/8, error -71 [ 547.846112][ T7665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.918257][ T7889] fuse: Unknown parameter '' [ 547.946566][ T5128] usb usb4-port1: unable to enumerate USB device [ 548.034213][ T7889] input: syz1 as /devices/virtual/input/input10 [ 548.106824][ T7889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.118809][ T7889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.366749][ T29] audit: type=1326 audit(1717833018.576:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7123e7cf69 code=0x0 [ 548.437242][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 548.502419][ T7905] bridge_slave_1: left allmulticast mode [ 548.508413][ T7905] bridge_slave_1: left promiscuous mode [ 548.515496][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.131774][ T43] usb 3-1: USB disconnect, device number 12 [ 549.239432][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 549.504382][ T7790] veth0_vlan: entered promiscuous mode [ 549.608584][ T7790] veth1_vlan: entered promiscuous mode [ 549.680560][ T5125] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 549.940736][ T5125] usb 3-1: Using ep0 maxpacket: 32 [ 549.989055][ T7790] veth0_macvtap: entered promiscuous mode [ 550.051758][ T7790] veth1_macvtap: entered promiscuous mode [ 550.068582][ T5125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 550.080430][ T5125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 550.092203][ T5125] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 550.102017][ T5125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.175167][ T5125] usb 3-1: config 0 descriptor?? [ 550.191124][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.191228][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.191292][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.191377][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.191443][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.191526][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.191591][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.191676][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.196594][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.216286][ T7918] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 550.239055][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.239153][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.239220][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.239304][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.239372][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.239455][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.239521][ T7790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.239604][ T7790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.244685][ T7790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.248816][ T5125] hub 3-1:0.0: USB hub found [ 550.277705][ T7790] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.277925][ T7790] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.278123][ T7790] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.278321][ T7790] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.379523][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.379617][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.449143][ T5125] hub 3-1:0.0: 2 ports detected [ 550.580988][ T5121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.836142][ T5121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.524290][ T7927] loop1: detected capacity change from 0 to 40427 [ 551.540474][ T7927] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 551.548471][ T7927] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 551.574879][ T7927] F2FS-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 552.398890][ T7931] loop0: detected capacity change from 0 to 32768 [ 552.467891][ T7935] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 553.907996][ T5125] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 554.342101][ T781] usb 3-1: USB disconnect, device number 13 [ 554.617086][ T7944] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 554.626835][ T7944] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 554.657309][ T7941] loop1: detected capacity change from 0 to 2048 [ 554.794510][ T7941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.300899][ T5125] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 555.551000][ T5125] usb 3-1: Using ep0 maxpacket: 32 [ 555.866234][ T5125] usb 3-1: New USB device found, idVendor=0545, idProduct=8402, bcdDevice= 3.0a [ 555.875807][ T5125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.884216][ T5125] usb 3-1: Product: syz [ 555.888657][ T5125] usb 3-1: Manufacturer: syz [ 555.895406][ T5125] usb 3-1: SerialNumber: syz [ 555.942645][ T5125] usb 3-1: config 0 descriptor?? [ 556.246573][ T5125] usb 3-1: USB disconnect, device number 14 [ 556.332429][ T7665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.063424][ T7963] loop3: detected capacity change from 0 to 4096 [ 557.174296][ T7963] NILFS (loop3): invalid segment: Checksum error in segment payload [ 557.182930][ T7963] NILFS (loop3): trying rollback from an earlier position [ 557.251016][ T29] audit: type=1326 audit(1717833027.396:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0e067cf69 code=0x0 [ 557.329180][ T7963] NILFS (loop3): recovery complete [ 557.443849][ T7973] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 559.316831][ T7987] loop2: detected capacity change from 0 to 32768 [ 560.600776][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.612313][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.741117][ T2824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.749186][ T2824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.255837][ T7993] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.4'. [ 561.265859][ T7993] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 562.150704][ T7995] loop4: detected capacity change from 0 to 32768 [ 562.283018][ T7995] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 562.425103][ T7998] loop1: detected capacity change from 0 to 40427 [ 562.448940][ T7998] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 562.463649][ T7998] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 562.479435][ T7998] F2FS-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 562.717127][ T7995] XFS (loop4): Starting recovery (logdev: internal) [ 562.942039][ T7995] XFS (loop4): Ending recovery (logdev: internal) [ 587.868853][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.875771][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.966018][ T77] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.038183][ T7993] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 591.217288][ T77] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.878583][ T77] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.980685][ T5070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 592.004214][ T5070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 592.013963][ T5070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 592.047863][ T5076] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 592.101618][ T5070] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 592.111119][ T5070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 592.124711][ T5070] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 592.136201][ T5070] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 592.145530][ T5070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 592.184517][ T5066] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 592.200785][ T5066] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 592.210721][ T5066] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 592.656353][ T77] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.870553][ T5066] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 592.881086][ T5066] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 592.890509][ T5066] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 593.036888][ T5066] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 593.052309][ T5066] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 593.079315][ T5066] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 593.308137][ T5066] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 593.318186][ T5066] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 593.327696][ T5066] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 593.341156][ T5066] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 593.356912][ T5066] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 593.366364][ T5066] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 593.613001][ T77] bridge_slave_1: left allmulticast mode [ 593.618886][ T77] bridge_slave_1: left promiscuous mode [ 593.625606][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.641085][ T77] bridge_slave_0: left allmulticast mode [ 593.647005][ T77] bridge_slave_0: left promiscuous mode [ 593.655924][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.714803][ T77] tipc: Resetting bearer [ 594.081854][ T77] tipc: Disabling bearer [ 594.085751][ T5070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 594.099897][ T5070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 594.109331][ T5070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 594.123381][ T5070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 594.139482][ T5070] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 594.149426][ T5070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 594.276165][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.297167][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.327099][ T77] bond0 (unregistering): Released all slaves [ 594.371279][ T5070] Bluetooth: hci1: command tx timeout [ 594.499476][ T77] tipc: Left network mode [ 594.846210][ T5070] Bluetooth: hci0: command tx timeout [ 594.863268][ T77] IPVS: stopping backup sync thread 5407 ... [ 595.040668][ T8031] chnl_net:caif_netlink_parms(): no params data found [ 595.170828][ T5072] Bluetooth: hci2: command tx timeout [ 595.263867][ T8035] chnl_net:caif_netlink_parms(): no params data found [ 595.623918][ T8030] chnl_net:caif_netlink_parms(): no params data found [ 595.691756][ T77] hsr_slave_0: left promiscuous mode [ 595.699483][ T77] hsr_slave_1: left promiscuous mode [ 595.709910][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.717779][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.740738][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.748398][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.765714][ T77] veth1_macvtap: left promiscuous mode [ 595.771833][ T77] veth0_macvtap: left promiscuous mode [ 595.777562][ T77] veth1_vlan: left promiscuous mode [ 595.783318][ T77] veth0_vlan: left promiscuous mode [ 595.831108][ T5072] Bluetooth: hci3: command tx timeout [ 596.270824][ T5072] Bluetooth: hci4: command tx timeout [ 596.292852][ T77] team0 (unregistering): Port device team_slave_1 removed [ 596.320810][ T77] team0 (unregistering): Port device team_slave_0 removed [ 596.458224][ T5072] Bluetooth: hci1: command tx timeout [ 596.932908][ T5072] Bluetooth: hci0: command tx timeout [ 597.250831][ T5072] Bluetooth: hci2: command tx timeout [ 597.538581][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.546404][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.554271][ T8031] bridge_slave_0: entered allmulticast mode [ 597.563520][ T8031] bridge_slave_0: entered promiscuous mode [ 597.583002][ T8042] chnl_net:caif_netlink_parms(): no params data found [ 597.740858][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.748571][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.756503][ T8031] bridge_slave_1: entered allmulticast mode [ 597.765744][ T8031] bridge_slave_1: entered promiscuous mode [ 597.850039][ T8039] chnl_net:caif_netlink_parms(): no params data found [ 597.890366][ T5072] Bluetooth: hci3: command tx timeout [ 598.119756][ T8035] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.127672][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.135642][ T8035] bridge_slave_0: entered allmulticast mode [ 598.145058][ T8035] bridge_slave_0: entered promiscuous mode [ 598.245629][ T8031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.256605][ T8035] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.264448][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.272435][ T8035] bridge_slave_1: entered allmulticast mode [ 598.281677][ T8035] bridge_slave_1: entered promiscuous mode [ 598.350639][ T5072] Bluetooth: hci4: command tx timeout [ 598.376134][ T8031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.531452][ T5072] Bluetooth: hci1: command tx timeout [ 598.558612][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.567202][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.575101][ T8030] bridge_slave_0: entered allmulticast mode [ 598.584440][ T8030] bridge_slave_0: entered promiscuous mode [ 598.801239][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.815386][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.823527][ T8030] bridge_slave_1: entered allmulticast mode [ 598.832874][ T8030] bridge_slave_1: entered promiscuous mode [ 598.862960][ T8035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.890323][ T8031] team0: Port device team_slave_0 added [ 599.013885][ T5072] Bluetooth: hci0: command tx timeout [ 599.045353][ T8031] team0: Port device team_slave_1 added [ 599.062944][ T8035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.313684][ T8030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.335060][ T5072] Bluetooth: hci2: command tx timeout [ 599.479668][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.486976][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.513529][ T8031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.540886][ T8030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.604838][ T8035] team0: Port device team_slave_0 added [ 599.665290][ T8030] team0: Port device team_slave_0 added [ 599.674990][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.682309][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.708674][ T8031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.747303][ T8035] team0: Port device team_slave_1 added [ 599.764568][ T8030] team0: Port device team_slave_1 added [ 599.970613][ T5072] Bluetooth: hci3: command tx timeout [ 600.023450][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.030770][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.062645][ T8030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.268698][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.276761][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.303232][ T8030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.316542][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.324391][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.332398][ T8042] bridge_slave_0: entered allmulticast mode [ 600.344646][ T8042] bridge_slave_0: entered promiscuous mode [ 600.367223][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.379830][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.387855][ T8042] bridge_slave_1: entered allmulticast mode [ 600.396996][ T8042] bridge_slave_1: entered promiscuous mode [ 600.408780][ T5072] Bluetooth: hci4: command tx timeout [ 600.453948][ T8035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.461305][ T8035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.488018][ T8035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.579032][ T8031] hsr_slave_0: entered promiscuous mode [ 600.589928][ T8031] hsr_slave_1: entered promiscuous mode [ 600.601596][ T8031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.609331][ T8031] Cannot create hsr debugfs directory [ 600.614647][ T5072] Bluetooth: hci1: command tx timeout [ 600.708755][ T8039] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.716700][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.724741][ T8039] bridge_slave_0: entered allmulticast mode [ 600.733961][ T8039] bridge_slave_0: entered promiscuous mode [ 600.762261][ T8042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.773207][ T8039] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.781002][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.788816][ T8039] bridge_slave_1: entered allmulticast mode [ 600.798027][ T8039] bridge_slave_1: entered promiscuous mode [ 600.809490][ T8035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.816931][ T8035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.843943][ T8035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.996229][ T8042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.071773][ T77] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.092081][ T5072] Bluetooth: hci0: command tx timeout [ 601.214622][ T8039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.379607][ T77] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.408602][ T8030] hsr_slave_0: entered promiscuous mode [ 601.416601][ T5072] Bluetooth: hci2: command tx timeout [ 601.426327][ T8030] hsr_slave_1: entered promiscuous mode [ 601.437208][ T8030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.445287][ T8030] Cannot create hsr debugfs directory [ 601.471559][ T77] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.499429][ T8039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.516976][ T8042] team0: Port device team_slave_0 added [ 601.662067][ T8042] team0: Port device team_slave_1 added [ 601.756664][ T77] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.789784][ T8035] hsr_slave_0: entered promiscuous mode [ 601.813263][ T8035] hsr_slave_1: entered promiscuous mode [ 601.823443][ T8035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.831368][ T8035] Cannot create hsr debugfs directory [ 601.933863][ T8039] team0: Port device team_slave_0 added [ 601.954588][ T8039] team0: Port device team_slave_1 added [ 601.997589][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.005695][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.033039][ T8042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.053982][ T5072] Bluetooth: hci3: command tx timeout [ 602.158166][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.165550][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.193864][ T8042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.437747][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.445168][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.471863][ T5072] Bluetooth: hci4: command tx timeout [ 602.477443][ T8039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.513810][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.521223][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.547731][ T8039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.896074][ T8042] hsr_slave_0: entered promiscuous mode [ 602.909861][ T8042] hsr_slave_1: entered promiscuous mode [ 602.919128][ T8042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.927258][ T8042] Cannot create hsr debugfs directory [ 603.033077][ T8031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.238921][ T77] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.266894][ T8031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.296830][ T8039] hsr_slave_0: entered promiscuous mode [ 603.308111][ T8039] hsr_slave_1: entered promiscuous mode [ 603.320782][ T8039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.328531][ T8039] Cannot create hsr debugfs directory [ 603.429419][ T77] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.457263][ T8031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.507903][ T77] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.644264][ T8031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.745916][ T77] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.375336][ T8031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 604.493980][ T8031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 604.527477][ T77] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.557944][ T8031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 604.577584][ T8031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 604.636616][ T77] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.729419][ T77] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.813714][ T77] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.031870][ T77] bridge_slave_1: left allmulticast mode [ 605.037750][ T77] bridge_slave_1: left promiscuous mode [ 605.044831][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.059891][ T77] bridge_slave_0: left allmulticast mode [ 605.065918][ T77] bridge_slave_0: left promiscuous mode [ 605.072638][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.087644][ T77] bridge_slave_1: left allmulticast mode [ 605.093925][ T77] bridge_slave_1: left promiscuous mode [ 605.100338][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.117146][ T77] bridge_slave_0: left allmulticast mode [ 605.129129][ T77] bridge_slave_0: left promiscuous mode [ 605.135872][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.149132][ T77] bridge_slave_1: left allmulticast mode [ 605.157507][ T77] bridge_slave_1: left promiscuous mode [ 605.164205][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.177610][ T77] bridge_slave_0: left allmulticast mode [ 605.183720][ T77] bridge_slave_0: left promiscuous mode [ 605.189977][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.204964][ T77] bridge_slave_0: left allmulticast mode [ 605.211947][ T77] bridge_slave_0: left promiscuous mode [ 605.218483][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.245554][ T77] tipc: Resetting bearer [ 606.467487][ T77] tipc: Disabling bearer [ 606.828776][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.846752][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.869958][ T77] bond0 (unregistering): Released all slaves [ 606.898888][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.917667][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.958930][ T77] bond0 (unregistering): Released all slaves [ 606.980964][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.004833][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.023654][ T77] bond0 (unregistering): Released all slaves [ 607.046205][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.065736][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.079757][ T77] bond0 (unregistering): Released all slaves [ 607.302173][ T77] tipc: Left network mode [ 607.471438][ T8031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.558158][ T8031] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.606641][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.614458][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.683132][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.690893][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.171160][ T8042] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 608.194626][ T8042] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 608.318690][ T8042] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 608.348560][ T8042] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 609.086069][ T8030] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 609.217642][ T8030] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 609.247108][ T8030] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 609.322136][ T77] hsr_slave_0: left promiscuous mode [ 609.330410][ T77] hsr_slave_1: left promiscuous mode [ 609.338277][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.347387][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.362330][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.370933][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.399831][ T77] hsr_slave_0: left promiscuous mode [ 609.407397][ T77] hsr_slave_1: left promiscuous mode [ 609.418961][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.427930][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.442251][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.449954][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.474301][ T77] hsr_slave_0: left promiscuous mode [ 609.482552][ T77] hsr_slave_1: left promiscuous mode [ 609.493082][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.501043][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.512624][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.523601][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.549621][ T77] hsr_slave_0: left promiscuous mode [ 609.558710][ T77] hsr_slave_1: left promiscuous mode [ 609.566478][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.574400][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.585421][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.593267][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.629892][ T77] veth1_macvtap: left promiscuous mode [ 609.635875][ T77] veth0_macvtap: left promiscuous mode [ 609.642492][ T77] veth1_vlan: left promiscuous mode [ 609.648155][ T77] veth0_vlan: left promiscuous mode [ 609.658511][ T77] veth1_macvtap: left promiscuous mode [ 609.664474][ T77] veth0_macvtap: left promiscuous mode [ 609.670584][ T77] veth1_vlan: left promiscuous mode [ 609.676126][ T77] veth0_vlan: left promiscuous mode [ 609.684051][ T77] veth1_macvtap: left promiscuous mode [ 609.689674][ T77] veth0_macvtap: left promiscuous mode [ 609.695948][ T77] veth1_vlan: left promiscuous mode [ 609.701637][ T77] veth0_vlan: left promiscuous mode [ 609.708348][ T77] veth1_macvtap: left promiscuous mode [ 609.714092][ T77] veth0_macvtap: left promiscuous mode [ 609.719815][ T77] veth1_vlan: left promiscuous mode [ 609.725426][ T77] veth0_vlan: left promiscuous mode [ 611.177922][ T77] team0 (unregistering): Port device team_slave_1 removed [ 611.227662][ T77] team0 (unregistering): Port device team_slave_0 removed [ 611.713722][ T77] team0 (unregistering): Port device team_slave_1 removed [ 611.741843][ T77] team0 (unregistering): Port device team_slave_0 removed [ 612.123677][ T77] team0 (unregistering): Port device team_slave_1 removed [ 612.221614][ T77] team0 (unregistering): Port device team_slave_0 removed [ 612.683963][ T77] team0 (unregistering): Port device team_slave_1 removed [ 612.737705][ T77] team0 (unregistering): Port device team_slave_0 removed [ 612.998700][ T8030] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 613.286118][ T8035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 613.311982][ T8035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 613.502636][ T8039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 613.527248][ T8035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 613.622958][ T8035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 613.648753][ T8039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 613.712658][ T8031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.795164][ T8039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 613.888912][ T8042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.898477][ T8039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 614.154492][ T8042] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.213200][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.221053][ T5124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.387907][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.395728][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.723099][ T8031] veth0_vlan: entered promiscuous mode [ 614.806723][ T8030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.929194][ T8031] veth1_vlan: entered promiscuous mode [ 615.051499][ T8030] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.145127][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.153027][ T8021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.267256][ T8035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.312360][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.320056][ T8021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.467636][ T8031] veth0_macvtap: entered promiscuous mode [ 615.555753][ T8035] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.620872][ T8031] veth1_macvtap: entered promiscuous mode [ 615.688308][ T8039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.727283][ T8030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 615.824593][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.832455][ T8021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.847919][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.855792][ T8021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.998243][ T8039] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.021848][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.172318][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.180014][ T8021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.263174][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.315523][ T8035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 616.328422][ T8035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 616.399826][ T8031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.409100][ T8031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.419018][ T8031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.428151][ T8031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.507116][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.514922][ T8021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.897519][ T8039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.266375][ T8042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.962371][ T8042] veth0_vlan: entered promiscuous mode [ 618.065253][ T8042] veth1_vlan: entered promiscuous mode [ 618.088570][ T8030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.538148][ T8035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.561447][ T8042] veth0_macvtap: entered promiscuous mode [ 618.699894][ T8042] veth1_macvtap: entered promiscuous mode [ 618.820748][ T8030] veth0_vlan: entered promiscuous mode [ 618.932614][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.943514][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.958415][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.009633][ T8030] veth1_vlan: entered promiscuous mode [ 619.160879][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.171848][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.186702][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.313535][ T8039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.337345][ T8035] veth0_vlan: entered promiscuous mode [ 619.379244][ T8042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.389702][ T8042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.399625][ T8042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.408848][ T8042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.509625][ T8035] veth1_vlan: entered promiscuous mode [ 619.687689][ T8030] veth0_macvtap: entered promiscuous mode [ 619.804280][ T8030] veth1_macvtap: entered promiscuous mode [ 619.904611][ T8035] veth0_macvtap: entered promiscuous mode [ 619.989976][ T8035] veth1_macvtap: entered promiscuous mode [ 620.018253][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.029145][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.039411][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.050295][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.065611][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.245610][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.256611][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.266803][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.277704][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.296268][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.331662][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.342649][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.352842][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.363653][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.377645][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.389444][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.405536][ T8035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.571501][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.582354][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.592451][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.603259][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.614373][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.625129][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.640046][ T8035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.654397][ T8030] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.663864][ T8030] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.673036][ T8030] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.682210][ T8030] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.895608][ T8035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.904831][ T8035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.913947][ T8035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.923098][ T8035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.303316][ T8039] veth0_vlan: entered promiscuous mode [ 622.484965][ T8039] veth1_vlan: entered promiscuous mode [ 622.784961][ T8039] veth0_macvtap: entered promiscuous mode [ 622.848724][ T8039] veth1_macvtap: entered promiscuous mode [ 622.998740][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.009614][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.019825][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.030882][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.041214][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.051973][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.062328][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.073079][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.088100][ T8039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.349591][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.361916][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.373458][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.384652][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.394859][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.405680][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.417170][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.429280][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.445203][ T8039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.626069][ T8039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.635308][ T8039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.644467][ T8039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.653617][ T8039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.181885][ T2824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.189858][ T2824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.343090][ T3302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.351784][ T3302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.742087][ T8158] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 625.552242][ T29] audit: type=1326 audit(1717833095.736:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f898cc7cf69 code=0x0 [ 626.668228][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.676382][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.895305][ T3204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.904580][ T3204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.354047][ T3204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.362230][ T3204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.544898][ T3302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.553066][ T3302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.672189][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.683446][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.937189][ T8021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.945315][ T8021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.224914][ T8195] loop0: detected capacity change from 0 to 4096 [ 628.388659][ T8195] NILFS (loop0): invalid segment: Checksum error in segment payload [ 628.401061][ T8195] NILFS (loop0): trying rollback from an earlier position [ 628.428645][ T8198] loop3: detected capacity change from 0 to 2048 [ 628.485302][ T8195] NILFS (loop0): recovery complete [ 628.522801][ T8206] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 628.684442][ T8198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.692983][ T8213] loop2: detected capacity change from 0 to 32768 [ 631.326884][ T4417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.337548][ T4417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.408066][ T3302] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 631.420979][ T3302] EXT4-fs (loop3): This should not happen!! Data will be lost [ 631.420979][ T3302] [ 631.430999][ T3302] EXT4-fs (loop3): Total free blocks count 0 [ 631.437198][ T3302] EXT4-fs (loop3): Free/Dirty block details [ 631.443438][ T3302] EXT4-fs (loop3): free_blocks=0 [ 631.448585][ T3302] EXT4-fs (loop3): dirty_blocks=0 [ 631.454085][ T3302] EXT4-fs (loop3): Block reservation details [ 631.460399][ T3302] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 631.533501][ T3743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.541712][ T3743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.608786][ T8030] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.772738][ T8236] loop3: detected capacity change from 0 to 1024 [ 633.913018][ T8236] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 633.987746][ T8232] loop0: detected capacity change from 0 to 40427 [ 634.005241][ T8232] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 634.013469][ T8232] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 634.042173][ T8232] F2FS-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 634.295336][ T8236] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz-executor.3: Invalid block bitmap block 0 in block_group 0 [ 634.411291][ T8236] Quota error (device loop3): write_blk: dquota write failed [ 634.419160][ T8236] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 634.429668][ T8236] EXT4-fs error (device loop3): ext4_acquire_dquot:6882: comm syz-executor.3: Failed to acquire dquot type 0 [ 634.672174][ T8236] EXT4-fs error (device loop3): ext4_free_blocks:6576: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 634.731433][ T8236] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz-executor.3: Invalid inode bitmap blk 0 in block_group 0 [ 634.769009][ T8236] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 634.792233][ T3204] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 634.801903][ T3204] EXT4-fs error (device loop3): ext4_release_dquot:6905: comm kworker/u8:10: Failed to release dquot type 0 [ 634.829999][ T8236] EXT4-fs (loop3): 1 orphan inode deleted [ 634.836431][ T8236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.955282][ T8247] 9pnet_fd: Insufficient options for proto=fd [ 635.163856][ T8229] [U]  [ 635.597680][ T8236] syz-executor.3 (8236) used greatest stack depth: 3744 bytes left [ 635.606849][ T8250] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.4'. [ 635.616817][ T8250] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 635.695414][ T8030] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.784806][ T8255] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 636.281285][ T8250] loop4: detected capacity change from 0 to 32768 [ 636.332021][ T8254] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 636.468727][ T8250] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 636.773733][ T8250] XFS (loop4): Starting recovery (logdev: internal) [ 636.790991][ T29] audit: type=1326 audit(1717833107.006:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61b9e7cf69 code=0x0 [ 636.994421][ T8250] XFS (loop4): Ending recovery (logdev: internal) [ 637.929957][ T8267] loop0: detected capacity change from 0 to 40427 [ 638.011481][ T8267] F2FS-fs (loop0): invalid crc value [ 638.118472][ T8267] F2FS-fs (loop0): Found nat_bits in checkpoint [ 638.560060][ T8275] loop1: detected capacity change from 0 to 32768 [ 638.584954][ T8267] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 638.877381][ T8039] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 639.064711][ T8283] loop2: detected capacity change from 0 to 2048 [ 639.198006][ T8283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.846029][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.957533][ T8042] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.524068][ T8311] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 641.647465][ T8313] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 641.772538][ T8315] process 'syz-executor.0' launched '/dev/fd/3' with NULL argv: empty string added [ 641.810528][ T5119] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 642.039021][ T5119] usb 3-1: device descriptor read/64, error -71 [ 642.177970][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.353425][ T5119] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 642.415425][ T8320] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.3'. [ 642.426124][ T8320] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 642.475786][ T8317] bridge0: port 3(netdevsim0) entered blocking state [ 642.483235][ T8317] bridge0: port 3(netdevsim0) entered disabled state [ 642.490855][ T8317] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 642.501523][ T8317] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 642.511601][ T8317] bridge0: port 3(netdevsim0) entered blocking state [ 642.518934][ T8317] bridge0: port 3(netdevsim0) entered forwarding state [ 643.272581][ T8322] loop0: detected capacity change from 0 to 32768 [ 643.389194][ T8320] loop3: detected capacity change from 0 to 32768 [ 643.400736][ T5119] usb 3-1: device descriptor read/64, error -71 [ 643.535753][ T5119] usb usb3-port1: attempt power cycle [ 644.027235][ T8320] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 644.510534][ T5119] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 644.586883][ T5119] usb 3-1: device descriptor read/8, error -71 [ 644.837459][ T8320] XFS (loop3): Starting recovery (logdev: internal) [ 644.973220][ T8320] XFS (loop3): Ending recovery (logdev: internal) [ 645.361462][ T29] audit: type=1326 audit(1717833115.526:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd0a27cf69 code=0x0 [ 645.974364][ T8338] loop4: detected capacity change from 0 to 2048 [ 646.077932][ T8335] loop2: detected capacity change from 0 to 32768 [ 646.098736][ T8335] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (8335) [ 646.166372][ T8335] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 646.177481][ T8335] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 646.187313][ T8338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.188947][ T8335] BTRFS info (device loop2): using free-space-tree [ 647.096215][ T8030] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 647.724556][ T8042] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 648.521015][ T8039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.989035][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 649.233301][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.239982][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.672997][ T8376] input: syz1 as /devices/virtual/input/input11 [ 650.090584][ T43] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 650.190478][ T8021] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 650.330513][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 650.436296][ T8021] usb 4-1: device descriptor read/64, error -71 [ 650.477253][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.488700][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.498900][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 650.508259][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.578835][ T43] usb 3-1: config 0 descriptor?? [ 650.740738][ T8021] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 650.951513][ T8021] usb 4-1: device descriptor read/64, error -71 [ 651.107092][ T8021] usb usb4-port1: attempt power cycle [ 651.214191][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 651.221148][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 651.297175][ T43] usb 3-1: USB disconnect, device number 19 [ 651.551295][ T8021] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 651.595992][ T8408] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.703169][ T8021] usb 4-1: device descriptor read/8, error -71 [ 652.000749][ T8021] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 652.108192][ T8021] usb 4-1: device descriptor read/8, error -71 [ 652.274866][ T8021] usb usb4-port1: unable to enumerate USB device [ 653.016089][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 653.104765][ T8430] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 653.446971][ T8437] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 653.509988][ T8442] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 654.210688][ T29] audit: type=1326 audit(1717833124.436:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61b9e7cf69 code=0x0 [ 654.625528][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 654.673396][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 655.150003][ T8468] loop1: detected capacity change from 0 to 512 [ 655.271121][ T8468] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 655.298527][ T8468] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 655.316785][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 655.348144][ T8468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.471936][ T8468] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #18: comm syz-executor.1: Siphash requires key [ 655.484169][ T8468] ===================================================== [ 655.491484][ T8468] BUG: KMSAN: uninit-value in ext4_inlinedir_to_tree+0xde2/0x15a0 [ 655.499517][ T8468] ext4_inlinedir_to_tree+0xde2/0x15a0 [ 655.505332][ T8468] ext4_htree_fill_tree+0x1941/0x1cd0 [ 655.511031][ T8468] ext4_readdir+0x4bbf/0x5b00 [ 655.515895][ T8468] iterate_dir+0x688/0x870 [ 655.520843][ T8468] __se_sys_getdents64+0x169/0x530 [ 655.526260][ T8468] __x64_sys_getdents64+0x96/0xe0 [ 655.531682][ T8468] x64_sys_call+0x343d/0x3b50 [ 655.531823][ T8468] do_syscall_64+0xcf/0x1e0 [ 655.532019][ T8468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.532182][ T8468] [ 655.532205][ T8468] Local variable hinfo created at: [ 655.532239][ T8468] ext4_htree_fill_tree+0x52/0x1cd0 [ 655.532362][ T8468] ext4_readdir+0x4bbf/0x5b00 [ 655.532474][ T8468] [ 655.532505][ T8468] CPU: 0 PID: 8468 Comm: syz-executor.1 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 655.537142][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 655.537202][ T8468] ===================================================== [ 655.537235][ T8468] Disabling lock debugging due to kernel taint [ 655.537277][ T8468] Kernel panic - not syncing: kmsan.panic set ... [ 655.537324][ T8468] CPU: 0 PID: 8468 Comm: syz-executor.1 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 655.537441][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 655.537498][ T8468] Call Trace: [ 655.537537][ T8468] [ 655.537571][ T8468] dump_stack_lvl+0x216/0x2d0 [ 655.537720][ T8468] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 655.537853][ T8468] dump_stack+0x1e/0x30 [ 655.537987][ T8468] panic+0x4e2/0xcd0 [ 655.538146][ T8468] ? kmsan_get_metadata+0xf1/0x1d0 [ 655.538279][ T8468] kmsan_report+0x2d5/0x2e0 [ 655.538407][ T8468] ? __msan_warning+0x95/0x120 [ 655.538502][ T8468] ? ext4_inlinedir_to_tree+0xde2/0x15a0 [ 655.538645][ T8468] ? ext4_htree_fill_tree+0x1941/0x1cd0 [ 655.538778][ T8468] ? ext4_readdir+0x4bbf/0x5b00 [ 655.538895][ T8468] ? iterate_dir+0x688/0x870 [ 655.539029][ T8468] ? __se_sys_getdents64+0x169/0x530 [ 655.539172][ T8468] ? __x64_sys_getdents64+0x96/0xe0 [ 655.539311][ T8468] ? x64_sys_call+0x343d/0x3b50 [ 655.539449][ T8468] ? do_syscall_64+0xcf/0x1e0 [ 655.539580][ T8468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.539734][ T8468] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 655.539873][ T8468] ? stack_depot_save_flags+0x66d/0x6e0 [ 655.540012][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.540126][ T8468] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 655.540285][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.540410][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.540520][ T8468] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 655.540641][ T8468] __msan_warning+0x95/0x120 [ 655.540735][ T8468] ext4_inlinedir_to_tree+0xde2/0x15a0 [ 655.540882][ T8468] ? update_curr+0x97e/0x1740 [ 655.541000][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.541110][ T8468] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 655.541267][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.541382][ T8468] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 655.541536][ T8468] ext4_htree_fill_tree+0x1941/0x1cd0 [ 655.541665][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.541773][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.541884][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.541992][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.542109][ T8468] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 655.542264][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.542373][ T8468] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 655.542501][ T8468] ext4_readdir+0x4bbf/0x5b00 [ 655.542616][ T8468] ? aa_file_perm+0x3e4/0x17a0 [ 655.542756][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.542867][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.542975][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.543083][ T8468] ? kmsan_get_metadata+0x146/0x1d0 [ 655.543193][ T8468] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 655.543353][ T8468] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 655.543504][ T8468] ? __pfx_ext4_readdir+0x10/0x10 [ 655.543615][ T8468] iterate_dir+0x688/0x870 [ 655.543759][ T8468] __se_sys_getdents64+0x169/0x530 [ 655.543906][ T8468] ? __pfx_filldir64+0x10/0x10 [ 655.544054][ T8468] __x64_sys_getdents64+0x96/0xe0 [ 655.909883][ T8468] x64_sys_call+0x343d/0x3b50 [ 655.914762][ T8468] do_syscall_64+0xcf/0x1e0 [ 655.919453][ T8468] ? clear_bhb_loop+0x25/0x80 [ 655.924319][ T8468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.930413][ T8468] RIP: 0033:0x7fbd0a27cf69 [ 655.934954][ T8468] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 655.954753][ T8468] RSP: 002b:00007fbd0afbd0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 655.963333][ T8468] RAX: ffffffffffffffda RBX: 00007fbd0a3b3f80 RCX: 00007fbd0a27cf69 [ 655.971444][ T8468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 655.979549][ T8468] RBP: 00007fbd0a2da6fe R08: 0000000000000000 R09: 0000000000000000 [ 655.987649][ T8468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.995740][ T8468] R13: 000000000000000b R14: 00007fbd0a3b3f80 R15: 00007ffd721b8a08 [ 656.003867][ T8468] [ 656.007090][ T8468] Kernel Offset: disabled [ 656.011489][ T8468] Rebooting in 86400 seconds..