last executing test programs: 17.948475192s ago: executing program 3 (id=648): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf", 0x30}], 0x1}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="15000000ffffffff0900000001000000401400", @ANYBLOB="01000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000004000fe437aa7a54bf42a747c4485"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x6, 0x4, 0xffff0001}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)={{0x14, 0x10, 0x30}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 15.679363848s ago: executing program 3 (id=650): bind$pptp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000800000004000000fc07000000000000", @ANYBLOB="000000000000000000010000000000000000", @ANYRES32, @ANYBLOB='\x00'/16], 0x50) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x4}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_RAW={0x8}]}}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000e40)) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x8000) 13.606420644s ago: executing program 2 (id=656): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002940)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r2, &(0x7f0000001780)=[{&(0x7f00000006c0)="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", 0xf44}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) 10.707013233s ago: executing program 0 (id=659): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x101, 0x48001051, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x91) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe91, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) io_uring_setup(0x510d, &(0x7f0000000100)={0x0, 0xc7db, 0x10, 0x3, 0x1f5}) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x4) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r5, &(0x7f0000000240)='./bus/file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x2) 10.488374975s ago: executing program 2 (id=660): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 10.343455889s ago: executing program 3 (id=661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @empty}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) dup(r3) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0xaa6c, r3, 0x0}]) openat$kvm(0xffffffffffffff9c, 0x0, 0x60002, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000045c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) 9.340747549s ago: executing program 1 (id=662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close(r4) 9.211290852s ago: executing program 2 (id=663): writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000080)="78f9cc0c", 0x4}, {&(0x7f0000000140)="a6956523576c29e138d6c8758bac2886ce21130949e77f6e732ae7892f4401448ac1d6bb01d33b715ab3492d19160824c1add8f2dcbb6f4e63d59283b1", 0x3d}, {&(0x7f0000000200)="ab5fdafe59914d9a4aedd9836f1a3d44a23d126559a44ec426da2a0412f69e016f6155b69701186afc4b99be63a327", 0x2f}], 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.848567498s ago: executing program 2 (id=664): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(&(0x7f0000000100)='./control\x00') r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, 0x0) listen(r2, 0x7) r3 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_rxfh={0x47, 0x2, 0x8001, 0xfe28, 0x3, "941601", 0x4, [0x8, 0x3]}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0xe}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c090) close(r5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x9, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x1, 0x141200}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x4, 0x0, 0xc, 0x5, 0x0, [{0x7, 0x5, 0x8}, {0x7, 0xed, 0x8, '\x00', 0xff}, {0x7, 0x8, 0x3, '\x00', 0x3}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x6, '\x00', 0xb9}, {0x7, 0x0, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8, '\x00', 0x6}, {0x8, 0x90, 0x4, '\x00', 0x8}, {0x1, 0xaf, 0x9, '\x00', 0x8}, {0x6, 0x27, 0x0, '\x00', 0x10}, {0x2, 0xfd, 0x7, '\x00', 0xc6}, {0xd, 0xcf, 0xc, '\x00', 0x7}, {0x40, 0x9, 0x5, '\x00', 0x7}, {0x0, 0x72, 0x6, '\x00', 0xa}, {0x8, 0x84, 0x2}, {0xf9, 0x8, 0xb, '\x00', 0x14}, {0xa, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x1, '\x00', 0xd}, {0x58, 0x4, 0x61, '\x00', 0x1}, {0x3, 0xb, 0x2, '\x00', 0x5e}, {0x67, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x1}, {0x5, 0xf, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xa}]}}) 7.599626753s ago: executing program 4 (id=665): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) 6.52540477s ago: executing program 0 (id=666): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fstat(0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x200000, &(0x7f00000003c0)={'trans=virtio,', {[{@access_user}, {@noxattr}, {@uname={'uname', 0x3d, '}-'}}, {@cache_fscache}, {@access_client}], [{@seclabel}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fowner_gt}, {@subj_type={'subj_type', 0x3d, 'cgroup.procs\x00'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}]}}) r3 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r4 = socket(0x10, 0x803, 0x0) write(r4, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, 0x0, 0x0) setregid(0xee00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4024}, 0x0) 6.12160997s ago: executing program 1 (id=667): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004"], 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c", @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.133901438s ago: executing program 1 (id=668): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x21) sendto$inet(r0, &(0x7f0000000000)="93", 0x1, 0x80, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 4.924502899s ago: executing program 3 (id=669): ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x8000, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 3.803432831s ago: executing program 1 (id=670): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.170655204s ago: executing program 0 (id=671): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 3.118416939s ago: executing program 4 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900fc0001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 2.939845097s ago: executing program 0 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e000000000000000000050003000000000005000200"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x40040c0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x818757, &(0x7f00000002c0)={[{@jqfmt_vfsv1}]}, 0xff, 0x49f, &(0x7f00000023c0)="$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") 2.832564677s ago: executing program 4 (id=674): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2.423184109s ago: executing program 0 (id=675): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x7151, 0x0) 2.353025095s ago: executing program 4 (id=676): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x101, 0x48001051, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x91) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe91, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) io_uring_setup(0x510d, &(0x7f0000000100)={0x0, 0xc7db, 0x10, 0x3, 0x1f5}) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x4) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r5, &(0x7f0000000240)='./bus/file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x2) 908.70069ms ago: executing program 0 (id=677): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a809941a488cc"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 901.5392ms ago: executing program 1 (id=678): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x121c, &(0x7f00000020c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x2) sched_setscheduler(0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='.\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file1/file3\x00', 0x0) 890.703611ms ago: executing program 2 (id=679): mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x19, r1, 0x1, 0x8, 0x6, @random="5e2c68b8907d"}, 0x14) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) r3 = socket(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xb0600, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 625.157317ms ago: executing program 4 (id=680): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x21) sendto$inet(r0, &(0x7f0000000000)="93", 0x1, 0x80, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 443.645006ms ago: executing program 3 (id=681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 292.160281ms ago: executing program 2 (id=682): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) epoll_create1(0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) socket$packet(0x11, 0x2, 0x300) bind$alg(0xffffffffffffffff, 0x0, 0x0) 194.59985ms ago: executing program 3 (id=683): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fstat(0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x200000, &(0x7f00000003c0)={'trans=virtio,', {[{@access_user}, {@noxattr}, {@uname={'uname', 0x3d, '}-'}}, {@cache_fscache}, {@access_client}], [{@seclabel}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fowner_gt}, {@subj_type={'subj_type', 0x3d, 'cgroup.procs\x00'}}, {@obj_user={'obj_user', 0x3d, './cgroup.cpu/syz1\x00'}}]}}) r3 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r4 = socket(0x10, 0x803, 0x0) write(r4, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, 0x0, 0x0) setregid(0xee00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4024}, 0x0) 24.466907ms ago: executing program 4 (id=684): writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000080)="78f9cc0c", 0x4}, {&(0x7f0000000140)="a6956523576c29e138d6c8758bac2886ce21130949e77f6e732ae7892f4401448ac1d6bb01d33b715ab3492d19160824c1add8f2dcbb6f4e63d59283b1", 0x3d}, {&(0x7f0000000200)="ab5fdafe59914d9a4aedd9836f1a3d44a23d126559a44ec426da2a0412f69e016f6155b69701186afc4b99be63a327", 0x2f}], 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 1 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900fc0001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 67.971869][ T4255] cgroup: Unknown subsys name 'net' [ 68.106115][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.611987][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.222250][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.228907][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.568003][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.577538][ T4269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.585196][ T4269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.593058][ T4269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.600543][ T4269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.609791][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.617432][ T4273] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.625917][ T4273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.633956][ T4273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.641254][ T4273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.654166][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.662526][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.670647][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.679230][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.686670][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.691900][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.694150][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.701496][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.708436][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.715889][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.722000][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.736914][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.737309][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.745825][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.759972][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.786147][ T4271] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.794004][ T4271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.801280][ T4271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.840470][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.858710][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.222039][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 72.372321][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 72.390229][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 72.450535][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 72.521479][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.528797][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.537262][ T4266] device bridge_slave_0 entered promiscuous mode [ 72.545731][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 72.573315][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.580827][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.588974][ T4266] device bridge_slave_1 entered promiscuous mode [ 72.660181][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.667368][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.675526][ T4277] device bridge_slave_0 entered promiscuous mode [ 72.696434][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.712893][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.720297][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.728526][ T4277] device bridge_slave_1 entered promiscuous mode [ 72.749538][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.767046][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.774884][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.783222][ T4279] device bridge_slave_0 entered promiscuous mode [ 72.821290][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.828584][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.836870][ T4279] device bridge_slave_1 entered promiscuous mode [ 72.851973][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.859169][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.866959][ T4268] device bridge_slave_0 entered promiscuous mode [ 72.886103][ T4266] team0: Port device team_slave_0 added [ 72.902536][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.912122][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.919569][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.927491][ T4268] device bridge_slave_1 entered promiscuous mode [ 72.943083][ T4266] team0: Port device team_slave_1 added [ 72.960141][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.976213][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.983740][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.991766][ T4276] device bridge_slave_0 entered promiscuous mode [ 73.009095][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.033510][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.041085][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.049225][ T4276] device bridge_slave_1 entered promiscuous mode [ 73.067561][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.085816][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.104722][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.111966][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.138123][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.166059][ T4277] team0: Port device team_slave_0 added [ 73.173909][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.191926][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.199092][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.225289][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.246646][ T4277] team0: Port device team_slave_1 added [ 73.260887][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.276968][ T4279] team0: Port device team_slave_0 added [ 73.302599][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.321349][ T4279] team0: Port device team_slave_1 added [ 73.338897][ T4268] team0: Port device team_slave_0 added [ 73.368829][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.375854][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.402579][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.415589][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.422903][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.449042][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.462177][ T4268] team0: Port device team_slave_1 added [ 73.480112][ T4266] device hsr_slave_0 entered promiscuous mode [ 73.487056][ T4266] device hsr_slave_1 entered promiscuous mode [ 73.515382][ T4276] team0: Port device team_slave_0 added [ 73.522500][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.529620][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.555651][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.569097][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.576066][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.602175][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.622960][ T4276] team0: Port device team_slave_1 added [ 73.646682][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.653727][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.679770][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.716388][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.724260][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.750552][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.796991][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.804118][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.830713][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.845049][ T4277] device hsr_slave_0 entered promiscuous mode [ 73.852082][ T4277] device hsr_slave_1 entered promiscuous mode [ 73.859276][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 73.859292][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 73.865749][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 73.871877][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 73.884324][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.892403][ T4277] Cannot create hsr debugfs directory [ 73.914359][ T4279] device hsr_slave_0 entered promiscuous mode [ 73.921216][ T4279] device hsr_slave_1 entered promiscuous mode [ 73.927719][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.935439][ T4279] Cannot create hsr debugfs directory [ 73.941013][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 73.960142][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.967139][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.993531][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.072445][ T4268] device hsr_slave_0 entered promiscuous mode [ 74.079793][ T4268] device hsr_slave_1 entered promiscuous mode [ 74.086345][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.094479][ T4268] Cannot create hsr debugfs directory [ 74.131999][ T4276] device hsr_slave_0 entered promiscuous mode [ 74.139208][ T4276] device hsr_slave_1 entered promiscuous mode [ 74.145812][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.153669][ T4276] Cannot create hsr debugfs directory [ 74.443360][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.455982][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.472212][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.485434][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.543869][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.562627][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.583350][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.595150][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.624884][ T4279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.647199][ T4279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.673417][ T4279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.683237][ T4279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.777684][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.797892][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.809851][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.841224][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.855038][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.885604][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.893878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.903473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.936105][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.960478][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.971776][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.981252][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.988595][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.997757][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.006563][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.016952][ T4268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.032587][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.042958][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.053361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.063304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.073462][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.080642][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.089387][ T4268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.098648][ T4268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.114672][ T4268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.133427][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.144156][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.153083][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.160246][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.169045][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.177725][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.187984][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.195109][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.203433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.224595][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.235951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.279346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.291143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.301828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.313530][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.323309][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.352794][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.361042][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.371916][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.380893][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.390091][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.398845][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.407134][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.420576][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.432588][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.442024][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.454878][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.493447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.503400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.513735][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.520923][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.529845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.538986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.548790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.557212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.566892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.584198][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.595177][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.619396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.627978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.642459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.651457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.660239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.669651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.678771][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.686037][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.694129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.705199][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.717819][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.733021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.766859][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.791516][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.809125][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.817258][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.840192][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.866647][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.884324][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.923847][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.938271][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 75.938301][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 75.944317][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 75.953077][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 75.964030][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.980657][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.993211][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.019059][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.019553][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 76.055030][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.075026][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.093505][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.104903][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.112074][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.122691][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.131763][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.140461][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.147635][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.156531][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.166885][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.175797][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.182983][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.207871][ T4279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.220201][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.238319][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.246816][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.261137][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.277182][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.289107][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.296242][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.306507][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.321562][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.332966][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.346096][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.358642][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.397162][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.413457][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.430960][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.445944][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.458212][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.465813][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.479451][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.488517][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.497328][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.512222][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.523127][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.536736][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.551657][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.573926][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.585761][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.598843][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.607812][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.623548][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.634008][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.647080][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.663068][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.677256][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.702097][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.732696][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.741434][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.752601][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.762106][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.771329][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.797025][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.808695][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.834449][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.844069][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.863229][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.877296][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.887537][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.901923][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.927446][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.943649][ T4277] device veth0_vlan entered promiscuous mode [ 76.976663][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.999729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.008880][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.028948][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.074749][ T4277] device veth1_vlan entered promiscuous mode [ 77.107900][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.116632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.124851][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.134277][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.144377][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.174459][ T4279] device veth0_vlan entered promiscuous mode [ 77.196487][ T4266] device veth0_vlan entered promiscuous mode [ 77.212024][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.222728][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.232168][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.241657][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.254066][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.278797][ T4279] device veth1_vlan entered promiscuous mode [ 77.319958][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.330557][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.340967][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.359574][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.380900][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.399087][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.407207][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.416993][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.432699][ T4277] device veth0_macvtap entered promiscuous mode [ 77.444620][ T4266] device veth1_vlan entered promiscuous mode [ 77.479407][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.487685][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.495878][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.510108][ T4277] device veth1_macvtap entered promiscuous mode [ 77.523772][ T4279] device veth0_macvtap entered promiscuous mode [ 77.536704][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.565410][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.574198][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.585231][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.594727][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.602835][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.631190][ T4279] device veth1_macvtap entered promiscuous mode [ 77.650480][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.659793][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.674295][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.706971][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.717720][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.733814][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.744100][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.769012][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.779592][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.794182][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.806402][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.825138][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.834748][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.850680][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.864692][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.882867][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.894948][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.911619][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.925728][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.936151][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.952460][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.987854][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.998727][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.013435][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.021114][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 78.027161][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 78.028457][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 78.033209][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 78.050653][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.059537][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.068503][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.077228][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.090948][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.101247][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.109113][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 78.111055][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.127659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.144365][ T4266] device veth0_macvtap entered promiscuous mode [ 78.169338][ T4268] device veth0_vlan entered promiscuous mode [ 78.176008][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.185343][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.195289][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.211086][ T4266] device veth1_macvtap entered promiscuous mode [ 78.289514][ T4268] device veth1_vlan entered promiscuous mode [ 78.329993][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.351437][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.361891][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.372639][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.383989][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.402347][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.410986][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.420089][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.428965][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.450080][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.462948][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.472951][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.483741][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.496087][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.529538][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.542142][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.553727][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.562963][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.572598][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.588572][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.625752][ T4268] device veth0_macvtap entered promiscuous mode [ 78.638994][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.649889][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.659249][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.680479][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.695517][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.709520][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.717546][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.736597][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.746362][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.755377][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.764952][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.776198][ T4268] device veth1_macvtap entered promiscuous mode [ 78.846648][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.856110][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.866308][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.875378][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.883865][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.911179][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.914887][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.922526][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.941052][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.952145][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.952657][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.962696][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.981085][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.993149][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.002396][ T4276] device veth0_vlan entered promiscuous mode [ 79.028769][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.037378][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.047268][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.062540][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.074034][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.082642][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.086256][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.100413][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.111413][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.122332][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.133652][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.146684][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.163720][ T4276] device veth1_vlan entered promiscuous mode [ 79.186052][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.196068][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.204501][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.213726][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.257008][ T4268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.268677][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.276704][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.314662][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.334935][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.344714][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.367682][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.569258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.579005][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.595794][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.611936][ T4276] device veth0_macvtap entered promiscuous mode [ 79.659976][ T4276] device veth1_macvtap entered promiscuous mode [ 79.771449][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.777478][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.797919][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.808978][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.819476][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.830333][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.840956][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.851627][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.862581][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.877087][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.892336][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.911046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.920678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.931115][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.946570][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.959019][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.969222][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.982220][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.994640][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.007543][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.050799][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.063746][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.079963][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.095450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.103703][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 80.103743][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 80.108659][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 80.122465][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 80.143306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.160574][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.170297][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.180481][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 80.186849][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.196508][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.205704][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.249029][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.291812][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.408020][ T4394] loop2: detected capacity change from 0 to 1024 [ 80.472407][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.492303][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.543236][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.872725][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.936271][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.190303][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.242407][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.287582][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.534202][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.329255][ T4413] loop3: detected capacity change from 0 to 8 [ 82.473616][ T4415] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.543865][ T4413] SQUASHFS error: Failed to read block 0x4de: -5 [ 82.609345][ T4413] SQUASHFS error: Failed to read block 0x4de: -5 [ 82.616771][ T26] audit: type=1800 audit(1760780038.832:2): pid=4413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 82.839677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.971069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 82.979418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 82.988104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 82.996405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 83.051946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 83.060388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 83.069001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 83.562687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 83.571041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 85.031351][ T4431] loop3: detected capacity change from 0 to 2048 [ 85.140634][ T4431] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 85.189168][ T4431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.157399][ T4436] netlink: 'syz.0.14': attribute type 4 has an invalid length. [ 86.395545][ T4443] netlink: 'syz.0.14': attribute type 4 has an invalid length. [ 86.600237][ T34] cfg80211: failed to load regulatory.db [ 87.753571][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 87.965749][ T4463] loop3: detected capacity change from 0 to 256 [ 90.378339][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.268195][ T7] usb 4-1: device not accepting address 2, error -71 [ 94.404580][ T4285] Bluetooth: Wrong link type (-71) [ 94.985413][ T4500] loop3: detected capacity change from 0 to 2048 [ 95.842696][ T4499] Zero length message leads to an empty skb [ 95.945051][ T4493] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.022162][ T4500] loop3: detected capacity change from 0 to 256 [ 96.082402][ T4500] FAT-fs (loop3): Directory bread(block 64) failed [ 96.118414][ T4500] FAT-fs (loop3): Directory bread(block 65) failed [ 96.143457][ T4500] FAT-fs (loop3): Directory bread(block 66) failed [ 96.168235][ T4500] FAT-fs (loop3): Directory bread(block 67) failed [ 96.315392][ T4500] FAT-fs (loop3): Directory bread(block 68) failed [ 96.322435][ T4500] FAT-fs (loop3): Directory bread(block 69) failed [ 96.329295][ T4500] FAT-fs (loop3): Directory bread(block 70) failed [ 96.335941][ T4500] FAT-fs (loop3): Directory bread(block 71) failed [ 96.343186][ T4500] FAT-fs (loop3): Directory bread(block 72) failed [ 96.350647][ T4500] FAT-fs (loop3): Directory bread(block 73) failed [ 97.603152][ T4500] syz.3.29: attempt to access beyond end of device [ 97.603152][ T4500] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 97.881762][ T4516] kworker/u4:11: attempt to access beyond end of device [ 97.881762][ T4516] loop3: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 97.951892][ T4516] kworker/u4:11: attempt to access beyond end of device [ 97.951892][ T4516] loop3: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 99.821101][ T4530] loop2: detected capacity change from 0 to 256 [ 100.322099][ T4516] kworker/u4:11: attempt to access beyond end of device [ 100.322099][ T4516] loop3: rw=1, sector=1960, nr_sectors = 16704 limit=256 [ 100.630655][ T4516] kworker/u4:11: attempt to access beyond end of device [ 100.630655][ T4516] loop3: rw=1, sector=18664, nr_sectors = 9008 limit=256 [ 100.698435][ T34] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.745326][ T4516] kworker/u4:11: attempt to access beyond end of device [ 100.745326][ T4516] loop3: rw=1, sector=27672, nr_sectors = 6128 limit=256 [ 100.908284][ T34] usb 3-1: Using ep0 maxpacket: 32 [ 100.933630][ T34] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 100.957628][ T34] usb 3-1: config 0 has no interface number 0 [ 100.995562][ T34] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=59.e2 [ 101.025915][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.048169][ T34] usb 3-1: Product: syz [ 101.052398][ T34] usb 3-1: Manufacturer: syz [ 101.077547][ T34] usb 3-1: SerialNumber: syz [ 101.112886][ T34] usb 3-1: config 0 descriptor?? [ 101.131409][ T4541] loop0: detected capacity change from 0 to 512 [ 101.152936][ T34] ftdi_sio 3-1:0.205: FTDI USB Serial Device converter detected [ 101.187301][ T34] ftdi_sio ttyUSB0: unknown device type: 0x59e2 [ 101.254209][ T4541] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.39: iget: bad i_size value: 38620345925642 [ 101.339636][ T4541] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.39: couldn't read orphan inode 15 (err -117) [ 101.382058][ T4341] usb 3-1: USB disconnect, device number 2 [ 101.406228][ T4541] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 101.406388][ T4341] ftdi_sio 3-1:0.205: device disconnected [ 101.649455][ T4543] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 102.127241][ T4549] loop4: detected capacity change from 0 to 512 [ 102.186540][ T4549] ======================================================= [ 102.186540][ T4549] WARNING: The mand mount option has been deprecated and [ 102.186540][ T4549] and is ignored by this kernel. Remove the mand [ 102.186540][ T4549] option from the mount to silence this warning. [ 102.186540][ T4549] ======================================================= [ 102.406135][ T4549] EXT4-fs: Ignoring removed i_version option [ 102.637521][ T4549] EXT4-fs (loop4): 1 orphan inode deleted [ 102.769574][ T4275] Bluetooth: Wrong link type (-71) [ 102.785128][ T4549] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 103.552663][ T4564] loop2: detected capacity change from 0 to 512 [ 103.559944][ T4564] EXT4-fs: Ignoring removed nobh option [ 103.594052][ T4564] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 103.620059][ T4566] netlink: 'syz.3.43': attribute type 4 has an invalid length. [ 103.686830][ T4567] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.33: Directory hole found for htree leaf block 0 [ 104.500622][ T4567] EXT4-fs (loop4): Remounting filesystem read-only [ 104.948246][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 105.225970][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 105.250602][ T4564] EXT4-fs (loop2): failed to open journal device unknown-block(11,0) -6 [ 107.121567][ T4587] loop3: detected capacity change from 0 to 2048 [ 107.307616][ T4594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 107.320510][ T4594] overlayfs: failed to resolve './file1': -2 [ 107.695889][ T4587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.628748][ T4596] loop2: detected capacity change from 0 to 4096 [ 108.644808][ T4596] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.748033][ T4596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.992769][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 110.936844][ T4459] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 8 [ 111.160626][ T4637] loop4: detected capacity change from 0 to 8192 [ 111.239966][ T4639] capability: warning: `syz.2.63' uses deprecated v2 capabilities in a way that may be insecure [ 114.819235][ T4660] loop1: detected capacity change from 0 to 256 [ 114.925842][ T4664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 114.983748][ T4660] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 115.038930][ T4660] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 116.327957][ T4675] loop4: detected capacity change from 0 to 512 [ 116.373392][ T4676] loop1: detected capacity change from 0 to 1024 [ 116.454722][ T4676] EXT4-fs: Ignoring removed orlov option [ 116.467124][ T4675] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 116.498716][ T4675] UDF-fs: Scanning with blocksize 512 failed [ 116.559001][ T4675] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 116.566418][ T4675] UDF-fs: Scanning with blocksize 1024 failed [ 116.589156][ T4676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.715186][ T4675] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 116.727426][ T4675] UDF-fs: Scanning with blocksize 2048 failed [ 116.813871][ T4675] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 116.859823][ T4675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.884767][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 116.972632][ T26] audit: type=1800 audit(2000000022.700:3): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.71" name="file1" dev="loop4" ino=36 res=0 errno=0 [ 117.181220][ T4686] loop1: detected capacity change from 0 to 256 [ 117.287708][ T4686] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 119.005052][ T4691] loop4: detected capacity change from 0 to 128 [ 119.170545][ T4691] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.249032][ T4691] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.418490][ T4709] netlink: 32 bytes leftover after parsing attributes in process `syz.3.78'. [ 119.735030][ T4714] loop2: detected capacity change from 0 to 128 [ 119.947909][ T4714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.957982][ T4714] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.454299][ T4723] xt_hashlimit: size too large, truncated to 1048576 [ 120.461440][ T4723] xt_hashlimit: max too large, truncated to 1048576 [ 121.091114][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 121.889663][ T4734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 121.899657][ T4734] overlayfs: failed to resolve './file1': -2 [ 123.640838][ T4744] loop2: detected capacity change from 0 to 512 [ 123.674509][ T4744] EXT4-fs: Ignoring removed i_version option [ 123.715550][ T4746] loop4: detected capacity change from 0 to 1024 [ 123.753705][ T4744] EXT4-fs (loop2): 1 orphan inode deleted [ 123.778233][ T4744] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 123.809678][ T4746] EXT4-fs: Ignoring removed orlov option [ 123.891064][ T4754] loop1: detected capacity change from 0 to 256 [ 123.990002][ T4754] exfat: Deprecated parameter 'namecase' [ 123.995771][ T4754] exfat: Deprecated parameter 'namecase' [ 124.085938][ T4746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 124.416092][ T4754] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 124.793562][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 124.888782][ T4762] loop0: detected capacity change from 0 to 512 [ 124.889276][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 124.908266][ T4762] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.962617][ T4762] EXT4-fs (loop0): orphan cleanup on readonly fs [ 124.990875][ T4765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.92'. [ 125.015171][ T4762] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.91: casefold flag without casefold feature [ 125.029543][ T4762] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.91: couldn't read orphan inode 15 (err -117) [ 125.041832][ T4762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.334523][ T4773] loop1: detected capacity change from 0 to 128 [ 125.559256][ T4773] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.696676][ T4778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 125.707574][ T4778] overlayfs: failed to resolve './file1': -2 [ 125.727908][ T4773] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.592217][ T4773] xt_hashlimit: size too large, truncated to 1048576 [ 126.599015][ T4773] xt_hashlimit: max too large, truncated to 1048576 [ 126.976711][ T4789] loop2: detected capacity change from 0 to 256 [ 127.852252][ T4789] exFAT-fs (loop2): failed to load upcase table (idx : 0x00002e7f, chksum : 0x7aeb812f, utbl_chksum : 0xe619d30d) [ 127.980973][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 128.144735][ T4790] loop3: detected capacity change from 0 to 256 [ 128.284889][ T4790] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 129.151676][ T4790] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 129.223122][ T4798] loop4: detected capacity change from 0 to 128 [ 129.399234][ T4798] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 129.465549][ T4802] loop2: detected capacity change from 0 to 8192 [ 129.582083][ T4798] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.623638][ T4802] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.648827][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 131.880727][ T4813] netlink: 32 bytes leftover after parsing attributes in process `syz.4.106'. [ 132.486987][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.109'. [ 132.497045][ T4823] overlayfs: failed to resolve './file1': -2 [ 132.660628][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.667239][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.831126][ T4829] loop4: detected capacity change from 0 to 128 [ 133.957846][ T4829] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 133.993106][ T4835] binder: 4834:4835 ioctl 4018620d 0 returned -22 [ 134.014516][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 134.028889][ T4829] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.406718][ T4839] loop3: detected capacity change from 0 to 256 [ 135.291900][ T4829] sched: RT throttling activated [ 135.310695][ T4839] exFAT-fs (loop3): failed to load upcase table (idx : 0x00002e7f, chksum : 0x7aeb812f, utbl_chksum : 0xe619d30d) [ 136.585795][ T4840] xt_hashlimit: size too large, truncated to 1048576 [ 136.592583][ T4840] xt_hashlimit: max too large, truncated to 1048576 [ 136.876323][ T4843] loop2: detected capacity change from 0 to 256 [ 136.934218][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 137.011031][ T4843] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 137.074086][ T4843] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 137.079260][ T4845] Bluetooth: MGMT ver 1.22 [ 137.379747][ T4849] loop4: detected capacity change from 0 to 2048 [ 137.413987][ T4854] netlink: 32 bytes leftover after parsing attributes in process `syz.1.119'. [ 137.486769][ T4849] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.546566][ T4852] netlink: 'syz.0.118': attribute type 4 has an invalid length. [ 137.580178][ T4856] loop1: detected capacity change from 0 to 8192 [ 137.617975][ T4856] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.839627][ T4859] netlink: 'syz.0.118': attribute type 4 has an invalid length. [ 138.291241][ T4869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 138.301151][ T4869] overlayfs: failed to resolve './file1': -2 [ 138.687472][ T4876] binder: 4873:4876 ioctl 4018620d 0 returned -22 [ 138.780503][ T4881] loop4: detected capacity change from 0 to 256 [ 139.582753][ T4881] exFAT-fs (loop4): failed to load upcase table (idx : 0x00002e7f, chksum : 0x7aeb812f, utbl_chksum : 0xe619d30d) [ 139.761552][ T4885] loop1: detected capacity change from 0 to 128 [ 139.984665][ T4888] netlink: 32 bytes leftover after parsing attributes in process `syz.0.130'. [ 141.635696][ T4885] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.671243][ T4885] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.212513][ T4901] xt_hashlimit: size too large, truncated to 1048576 [ 142.219424][ T4901] xt_hashlimit: max too large, truncated to 1048576 [ 142.742316][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 142.919156][ T4907] netlink: 'syz.1.134': attribute type 4 has an invalid length. [ 143.044129][ T4908] netlink: 'syz.1.134': attribute type 4 has an invalid length. [ 143.142974][ T4903] loop2: detected capacity change from 0 to 8192 [ 143.214332][ T4903] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.259541][ T4285] Bluetooth: Wrong link type (-71) [ 144.773435][ T4926] syz.0.142 uses obsolete (PF_INET,SOCK_PACKET) [ 145.218703][ T4932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.143'. [ 145.768531][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.041294][ T22] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 146.063190][ T4938] loop4: detected capacity change from 0 to 128 [ 146.078577][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.136207][ T4938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.155992][ T4938] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.169403][ T22] usb 4-1: config 0 descriptor?? [ 146.404623][ T22] usb-storage 4-1:0.0: USB Mass Storage device detected [ 147.070063][ T4947] xt_hashlimit: size too large, truncated to 1048576 [ 147.077103][ T4947] xt_hashlimit: max too large, truncated to 1048576 [ 147.488927][ T22] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 147.560901][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 147.745381][ T22] usb 4-1: USB disconnect, device number 4 [ 149.616083][ T4956] loop2: detected capacity change from 0 to 8192 [ 149.694474][ T4956] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.709891][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 150.720115][ T4978] overlayfs: failed to resolve './file1': -2 [ 151.148171][ T4982] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.978324][ T4275] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.373748][ T5009] loop2: detected capacity change from 0 to 164 [ 153.577041][ T5009] isofs_fill_super: root inode is not a directory. Corrupted media? [ 153.794372][ T5016] loop1: detected capacity change from 0 to 256 [ 153.936907][ T5019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 153.947150][ T5019] overlayfs: failed to resolve './file1': -2 [ 154.128610][ T5016] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 154.458580][ T5016] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 155.498222][ T4275] Bluetooth: hci0: command 0x0401 tx timeout [ 158.031254][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 160.524261][ T5055] loop2: detected capacity change from 0 to 1024 [ 160.670051][ T4493] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.600752][ T5064] loop1: detected capacity change from 0 to 256 [ 162.644539][ T5064] exFAT-fs (loop1): failed to load upcase table (idx : 0x00002e7f, chksum : 0x7aeb812f, utbl_chksum : 0xe619d30d) [ 164.875416][ T5076] loop3: detected capacity change from 0 to 128 [ 165.006713][ T5079] loop0: detected capacity change from 0 to 512 [ 165.032026][ T5076] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 165.054825][ T5076] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.166172][ T5079] EXT4-fs: Ignoring removed i_version option [ 165.483106][ T5079] EXT4-fs (loop0): 1 orphan inode deleted [ 165.500554][ T5079] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 165.847282][ T5086] xt_hashlimit: size too large, truncated to 1048576 [ 165.854199][ T5086] xt_hashlimit: max too large, truncated to 1048576 [ 166.394478][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 166.497598][ T5090] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.190: Directory hole found for htree leaf block 0 [ 166.603127][ T5090] EXT4-fs (loop0): Remounting filesystem read-only [ 166.710479][ T5089] loop4: detected capacity change from 0 to 512 [ 166.869449][ T5089] EXT4-fs: Ignoring removed i_version option [ 166.983054][ T5089] EXT4-fs (loop4): 1 orphan inode deleted [ 167.001518][ T5089] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 167.101546][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 167.508408][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 167.761329][ T5104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.194'. [ 167.783095][ T7] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 167.822982][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.899294][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 167.909161][ T7] usb 3-1: config 0 descriptor?? [ 167.953810][ T5106] loop3: detected capacity change from 0 to 128 [ 167.979014][ T7] usb-storage 3-1:0.0: USB Mass Storage device detected [ 168.047391][ T5106] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.070953][ T5106] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.072330][ T7] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 168.316993][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 168.348454][ T7] usb 3-1: USB disconnect, device number 3 [ 168.689625][ T5122] loop3: detected capacity change from 0 to 256 [ 168.718580][ T5122] exFAT-fs (loop3): failed to load upcase table (idx : 0x00002e7f, chksum : 0x7aeb812f, utbl_chksum : 0xe619d30d) [ 170.233133][ T5140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.828548][ T5151] input: syz0 as /devices/virtual/input/input5 [ 171.830227][ T5156] loop1: detected capacity change from 0 to 256 [ 171.867015][ T5156] exFAT-fs (loop1): failed to load upcase table (idx : 0x00002e7f, chksum : 0x7aeb812f, utbl_chksum : 0xe619d30d) [ 172.527692][ T5166] loop4: detected capacity change from 0 to 512 [ 172.632521][ T5166] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 172.649552][ T5166] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.659389][ T5166] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.215: casefold flag without casefold feature [ 172.672516][ T5166] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.215: couldn't read orphan inode 15 (err -117) [ 172.685037][ T5166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.843298][ T5172] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.218'. [ 172.930136][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 173.021551][ T5157] loop3: detected capacity change from 0 to 8192 [ 176.131119][ T5202] loop2: detected capacity change from 0 to 128 [ 176.412241][ T5202] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.616537][ T5202] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.395219][ T5215] loop1: detected capacity change from 0 to 16 [ 178.468904][ T5215] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x31f875bb, 0x83168301 expected [ 178.532298][ T4495] udevd[4495]: incorrect erofs checksum on /dev/loop1 [ 178.692097][ T5218] xt_hashlimit: size too large, truncated to 1048576 [ 178.698952][ T5218] xt_hashlimit: max too large, truncated to 1048576 [ 178.929509][ T5222] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.232'. [ 182.089958][ T26] audit: type=1326 audit(2000000087.820:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aa38efc9 code=0x7ffc0000 [ 182.238163][ T26] audit: type=1326 audit(2000000087.870:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f49aa38efc9 code=0x7ffc0000 [ 182.388349][ T26] audit: type=1326 audit(2000000087.870:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aa38efc9 code=0x7ffc0000 [ 182.579826][ T26] audit: type=1326 audit(2000000087.870:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aa38efc9 code=0x7ffc0000 [ 182.785120][ T26] audit: type=1326 audit(2000000087.870:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49aa38efc9 code=0x7ffc0000 [ 182.820087][ T26] audit: type=1326 audit(2000000087.870:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aa38efc9 code=0x7ffc0000 [ 182.903619][ T26] audit: type=1326 audit(2000000087.870:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aa38efc9 code=0x7ffc0000 [ 182.929879][ T26] audit: type=1326 audit(2000000087.870:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49aa38d810 code=0x7ffc0000 [ 183.083853][ T26] audit: type=1326 audit(2000000087.870:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f49aa3907f7 code=0x7ffc0000 [ 183.217354][ T5247] loop3: detected capacity change from 0 to 512 [ 184.041758][ T5247] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 184.100498][ T5247] EXT4-fs (loop3): orphan cleanup on readonly fs [ 184.111827][ T5247] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.230: casefold flag without casefold feature [ 184.127875][ T26] audit: type=1326 audit(2000000087.870:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49aa38efc9 code=0x7ffc0000 [ 184.139540][ T5247] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.230: couldn't read orphan inode 15 (err -117) [ 184.182750][ T5247] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 184.205050][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 184.415770][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 186.362866][ T5272] loop1: detected capacity change from 0 to 256 [ 186.388675][ T5272] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 188.049801][ T5283] loop4: detected capacity change from 0 to 512 [ 188.096550][ T5283] EXT4-fs: Ignoring removed i_version option [ 188.176260][ T5283] EXT4-fs (loop4): 1 orphan inode deleted [ 188.188345][ T5283] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 188.253585][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 188.519336][ T5290] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.243'. [ 188.829788][ T5299] loop0: detected capacity change from 0 to 1024 [ 188.962779][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 189.009386][ T5299] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 189.103784][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 189.103800][ T26] audit: type=1800 audit(2000000094.830:27): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.252" name="file1" dev="loop0" ino=16 res=0 errno=0 [ 190.727100][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 190.853988][ T5316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 193.743927][ T5342] loop3: detected capacity change from 0 to 512 [ 193.777121][ T5342] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 193.797797][ T5342] EXT4-fs (loop3): orphan cleanup on readonly fs [ 193.805519][ T5342] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.266: casefold flag without casefold feature [ 193.820854][ T5342] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.266: couldn't read orphan inode 15 (err -117) [ 193.833116][ T5342] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.103129][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.111092][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.283364][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 194.426253][ T5355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 196.188398][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 196.194495][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 196.202012][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 196.208409][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 197.051823][ T5366] loop4: detected capacity change from 0 to 256 [ 197.109642][ T5366] exfat: Unknown parameter '' [ 197.242627][ T4493] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 197.294743][ T5369] loop0: detected capacity change from 0 to 256 [ 197.313977][ T5366] loop4: detected capacity change from 0 to 512 [ 197.328622][ T4493] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 197.360422][ T5369] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 197.376118][ T5366] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.415093][ T5369] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 197.458407][ T5366] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 197.516617][ T5366] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.256: invalid indirect mapped block 2683928664 (level 1) [ 197.585427][ T5366] EXT4-fs (loop4): Remounting filesystem read-only [ 197.637690][ T5366] EXT4-fs (loop4): 1 truncate cleaned up [ 197.696064][ T5366] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 197.719950][ T5361] loop3: detected capacity change from 0 to 512 [ 197.752439][ T5361] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.837576][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 197.933861][ T5361] EXT4-fs (loop3): orphan cleanup on readonly fs [ 198.067967][ T5361] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.271: casefold flag without casefold feature [ 198.708292][ T5361] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.271: couldn't read orphan inode 15 (err -117) [ 198.768688][ T5361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 199.217868][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 201.539726][ T5397] loop3: detected capacity change from 0 to 512 [ 201.547080][ T5397] EXT4-fs: Ignoring removed i_version option [ 201.822030][ T5416] loop1: detected capacity change from 0 to 256 [ 201.854839][ T5416] exFAT-fs (loop1): failed to load upcase table (idx : 0x00002e7f, chksum : 0x7aeb812f, utbl_chksum : 0xe619d30d) [ 201.873967][ T5397] EXT4-fs (loop3): 1 orphan inode deleted [ 201.891801][ T5397] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.173516][ T5421] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.280: Directory hole found for htree leaf block 0 [ 203.010374][ T5421] EXT4-fs (loop3): Remounting filesystem read-only [ 203.030366][ T5420] loop0: detected capacity change from 0 to 256 [ 203.078063][ T5420] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 203.134500][ T5420] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 203.270246][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 203.406992][ T5425] netlink: 32 bytes leftover after parsing attributes in process `syz.4.287'. [ 203.600087][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 203.869750][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 207.416115][ T5464] loop4: detected capacity change from 0 to 512 [ 207.499242][ T5464] EXT4-fs: Ignoring removed i_version option [ 207.828349][ T5464] EXT4-fs (loop4): 1 orphan inode deleted [ 207.838223][ T5464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 207.931892][ T5470] loop1: detected capacity change from 0 to 512 [ 208.209448][ T5470] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 208.458532][ T5470] EXT4-fs (loop1): orphan cleanup on readonly fs [ 208.466646][ T5470] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.299: casefold flag without casefold feature [ 208.482130][ T5470] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.299: couldn't read orphan inode 15 (err -117) [ 208.501881][ T5470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 208.853788][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 208.949530][ T5475] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.298: Directory hole found for htree leaf block 0 [ 208.964741][ T5475] EXT4-fs (loop4): Remounting filesystem read-only [ 209.400328][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 209.888844][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 211.359781][ T26] audit: type=1326 audit(2000000116.330:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.1.300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f502a78efc9 code=0x0 [ 211.395190][ T5491] loop4: detected capacity change from 0 to 512 [ 211.449415][ T5491] EXT4-fs (loop4): Test dummy encryption mode enabled [ 211.538139][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 211.567318][ T5491] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.307: invalid indirect mapped block 2185560079 (level 0) [ 211.634937][ T5491] EXT4-fs (loop4): Remounting filesystem read-only [ 211.661749][ T5491] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.307: invalid indirect mapped block 2683928664 (level 1) [ 211.723948][ T5491] EXT4-fs (loop4): Remounting filesystem read-only [ 211.756215][ T5491] EXT4-fs (loop4): 1 truncate cleaned up [ 211.773323][ T5491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 211.944386][ T26] audit: type=1326 audit(2000000117.650:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5502 comm="syz.2.310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc858f8efc9 code=0x0 [ 212.753083][ T5509] loop2: detected capacity change from 0 to 512 [ 212.771620][ T5509] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.246919][ T5511] netlink: 32 bytes leftover after parsing attributes in process `syz.3.301'. [ 213.276490][ T5509] EXT4-fs (loop2): orphan cleanup on readonly fs [ 213.284513][ T5509] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.311: casefold flag without casefold feature [ 213.299651][ T5509] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.311: couldn't read orphan inode 15 (err -117) [ 213.311763][ T5509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 213.475776][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 213.590519][ T5517] loop1: detected capacity change from 0 to 8192 [ 213.615750][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 213.752192][ T5521] loop3: detected capacity change from 0 to 512 [ 213.803920][ T5521] EXT4-fs: Ignoring removed i_version option [ 213.889717][ T5527] loop0: detected capacity change from 0 to 256 [ 213.984702][ T5521] EXT4-fs (loop3): 1 orphan inode deleted [ 214.012516][ T5521] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 214.042190][ T5527] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 214.198079][ T5531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 214.209197][ T5531] overlayfs: failed to resolve './file1': -2 [ 214.823029][ T5535] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.313: Directory hole found for htree leaf block 0 [ 214.848155][ T5535] EXT4-fs (loop3): Remounting filesystem read-only [ 215.224091][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 219.108711][ T5570] loop3: detected capacity change from 0 to 512 [ 219.125228][ T5570] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 219.269538][ T5570] EXT4-fs (loop3): orphan cleanup on readonly fs [ 219.278239][ T5570] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.326: casefold flag without casefold feature [ 219.294644][ T5570] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.326: couldn't read orphan inode 15 (err -117) [ 219.307914][ T5570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 219.756433][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 219.902196][ T5574] loop0: detected capacity change from 0 to 512 [ 219.917896][ T5574] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 219.960839][ T5574] EXT4-fs (loop0): orphan cleanup on readonly fs [ 219.967947][ T5574] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.321: casefold flag without casefold feature [ 219.981288][ T5574] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.321: couldn't read orphan inode 15 (err -117) [ 219.993561][ T5574] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 220.359436][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 220.500707][ T5586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 220.510684][ T5586] overlayfs: failed to resolve './file1': -2 [ 221.055130][ T5585] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.330'. [ 222.553766][ T5608] loop3: detected capacity change from 0 to 512 [ 222.603826][ T5610] netlink: 32 bytes leftover after parsing attributes in process `syz.4.324'. [ 222.621501][ T5608] EXT4-fs: Ignoring removed i_version option [ 222.684944][ T5608] EXT4-fs (loop3): 1 orphan inode deleted [ 222.706035][ T5615] loop0: detected capacity change from 0 to 1024 [ 222.713803][ T5615] EXT4-fs: Ignoring removed orlov option [ 222.729278][ T5608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 222.779685][ T5615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 222.803555][ T5615] 9pnet_fd: Insufficient options for proto=fd [ 223.060300][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 223.212817][ T5631] loop4: detected capacity change from 0 to 16 [ 223.258489][ T5631] erofs: (device loop4): mounted with root inode @ nid 36. [ 223.267150][ T5630] loop0: detected capacity change from 0 to 512 [ 223.489705][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 223.501799][ T5630] EXT4-fs: Ignoring removed oldalloc option [ 224.199068][ T5630] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 224.258134][ T5630] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.530403][ T5630] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 224.583521][ T5630] EXT4-fs (loop0): 1 truncate cleaned up [ 224.589881][ T5630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 227.643476][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 227.770218][ T5658] loop4: detected capacity change from 0 to 1024 [ 227.809314][ T5658] EXT4-fs: Ignoring removed orlov option [ 227.900698][ T5658] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 228.156011][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 228.405157][ T5666] loop4: detected capacity change from 0 to 512 [ 228.438925][ T5666] EXT4-fs: Ignoring removed i_version option [ 228.499619][ T5666] EXT4-fs (loop4): 1 orphan inode deleted [ 229.218714][ T5666] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 230.042698][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 230.089240][ T5673] loop0: detected capacity change from 0 to 256 [ 230.195842][ T5673] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 230.286717][ T5673] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 230.669257][ T5677] netlink: 'syz.4.361': attribute type 25 has an invalid length. [ 230.798547][ T5677] netlink: 'syz.4.361': attribute type 7 has an invalid length. [ 231.007964][ T5682] loop0: detected capacity change from 0 to 256 [ 231.039624][ T5682] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 231.208828][ T5690] loop2: detected capacity change from 0 to 512 [ 231.220863][ T4493] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.228932][ T5690] EXT4-fs: Ignoring removed i_version option [ 233.506605][ T5690] EXT4-fs (loop2): 1 orphan inode deleted [ 233.548130][ T5690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 233.775621][ T26] audit: type=1326 audit(2000000139.500:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.4.369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4bc38efc9 code=0x0 [ 233.847912][ T5708] loop3: detected capacity change from 0 to 8192 [ 234.700849][ T5708] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.803939][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 237.107115][ T5744] loop1: detected capacity change from 0 to 512 [ 237.679094][ T5753] loop4: detected capacity change from 0 to 256 [ 237.723490][ T5753] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 239.500551][ T5770] loop3: detected capacity change from 0 to 512 [ 239.543836][ T5744] EXT4-fs (loop1): Test dummy encryption mode enabled [ 239.557418][ T5770] EXT4-fs: Ignoring removed i_version option [ 239.588191][ T5744] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 239.620582][ T5770] EXT4-fs (loop3): 1 orphan inode deleted [ 241.008928][ T5770] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 241.019931][ T5744] EXT4-fs: failed to create workqueue [ 241.028196][ T5744] EXT4-fs (loop1): mount failed [ 241.883688][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 242.732998][ T5790] loop1: detected capacity change from 0 to 256 [ 242.805490][ T5790] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 242.858882][ T5790] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 244.697077][ T5813] loop2: detected capacity change from 0 to 256 [ 244.726536][ T5813] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 246.736621][ T5828] loop4: detected capacity change from 0 to 512 [ 246.799010][ T5828] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 246.881866][ T5828] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #13: comm syz.4.398: iget: bad i_size value: 12154757448730 [ 246.954972][ T5828] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.398: couldn't read orphan inode 13 (err -117) [ 246.987150][ T5828] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 247.168359][ T5834] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 247.719965][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 247.772443][ T5836] loop0: detected capacity change from 0 to 1024 [ 247.824364][ T5836] EXT4-fs: Ignoring removed orlov option [ 247.836114][ T5839] loop1: detected capacity change from 0 to 256 [ 247.914920][ T5836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 247.924525][ T5839] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 247.952659][ T5845] Illegal XDP return value 4294967294 on prog (id 72) dev N/A, expect packet loss! [ 248.024790][ T5839] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 248.036000][ T5847] loop2: detected capacity change from 0 to 512 [ 248.043411][ T5847] EXT4-fs: Ignoring removed i_version option [ 248.077169][ T5847] EXT4-fs (loop2): 1 orphan inode deleted [ 248.086557][ T5847] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 248.921245][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 249.022555][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 249.186853][ T5857] loop2: detected capacity change from 0 to 512 [ 249.229934][ T5857] ext3: Bad value for 'init_itable' [ 250.710418][ T5857] capability: warning: `syz.2.408' uses 32-bit capabilities (legacy support in use) [ 252.091188][ T5872] loop0: detected capacity change from 0 to 8192 [ 252.126348][ T5872] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.494985][ T5883] loop3: detected capacity change from 0 to 256 [ 252.612014][ T5883] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 252.668388][ T5883] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 254.191293][ T5895] loop4: detected capacity change from 0 to 512 [ 254.199565][ T5895] EXT4-fs: Ignoring removed i_version option [ 254.223527][ T34] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.342425][ T34] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.385162][ T5899] loop2: detected capacity change from 0 to 1024 [ 254.465399][ T5895] EXT4-fs (loop4): 1 orphan inode deleted [ 254.480278][ T5895] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 254.518328][ T5899] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 256.137451][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.148457][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.438328][ T5916] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.419: Directory hole found for htree leaf block 0 [ 256.452272][ T5916] EXT4-fs (loop4): Remounting filesystem read-only [ 257.319631][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 257.401217][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 257.640189][ T5921] netlink: 'syz.2.426': attribute type 4 has an invalid length. [ 258.204852][ T5925] loop4: detected capacity change from 0 to 512 [ 258.277135][ T5925] EXT4-fs: Ignoring removed oldalloc option [ 258.315214][ T5926] netlink: 'syz.2.426': attribute type 4 has an invalid length. [ 258.345416][ T5925] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 258.470001][ T5925] EXT4-fs (loop4): 1 truncate cleaned up [ 258.475673][ T5925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 258.728428][ T5925] loop4: detected capacity change from 512 to 64 [ 258.760318][ T5929] syz.4.428: attempt to access beyond end of device [ 258.760318][ T5929] loop4: rw=2049, sector=94, nr_sectors = 8 limit=64 [ 258.777139][ T5932] loop2: detected capacity change from 0 to 1024 [ 258.809159][ T5932] EXT4-fs: Ignoring removed orlov option [ 258.841644][ T5929] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 47) [ 258.888653][ T5929] Buffer I/O error on device loop4, logical block 47 [ 258.895718][ T5929] Buffer I/O error on device loop4, logical block 48 [ 258.902420][ T5929] Buffer I/O error on device loop4, logical block 49 [ 258.909130][ T5929] Buffer I/O error on device loop4, logical block 50 [ 258.918491][ T5932] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 259.366841][ T5932] 9pnet: Could not find request transport: fd0x0000000000000004 [ 259.402655][ T4276] EXT4-fs error (device loop4): mb_free_blocks:1810: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 259.471391][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 259.495614][ T5943] loop3: detected capacity change from 0 to 256 [ 259.516317][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 259.579363][ T5943] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 259.629580][ T5943] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 259.974714][ T5952] loop1: detected capacity change from 0 to 1024 [ 260.105752][ T5959] loop4: detected capacity change from 0 to 8 [ 260.106266][ T5952] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 261.298649][ T26] audit: type=1800 audit(2000000167.030:31): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.424" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 261.356918][ T5959] SQUASHFS error: Failed to read block 0x2d7: -5 [ 261.393432][ T5959] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 261.460666][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 263.767489][ T5977] netlink: 'syz.2.444': attribute type 72 has an invalid length. [ 266.000847][ T5992] loop2: detected capacity change from 0 to 256 [ 266.084398][ T5992] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 266.109626][ T5992] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 267.448179][ T4319] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 267.805655][ T4319] usb 3-1: Using ep0 maxpacket: 16 [ 268.291204][ T4319] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 268.300735][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.309223][ T4319] usb 3-1: Product: syz [ 268.313642][ T4319] usb 3-1: Manufacturer: syz [ 268.318683][ T4319] usb 3-1: SerialNumber: syz [ 268.326817][ T4319] usb 3-1: config 0 descriptor?? [ 268.410254][ T4319] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 268.454862][ T4319] usb 3-1: Detected FT232H [ 268.454915][ T6015] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.457'. [ 269.014243][ T6006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.059718][ T6006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.099071][ T4319] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 269.117667][ T6017] loop4: detected capacity change from 0 to 2048 [ 269.126805][ T4319] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 269.150604][ T4319] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 269.208521][ T4319] usb 3-1: USB disconnect, device number 4 [ 269.259438][ T4319] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 269.274785][ T6017] loop4: detected capacity change from 0 to 256 [ 269.295770][ T4319] ftdi_sio 3-1:0.0: device disconnected [ 269.359025][ T6017] FAT-fs (loop4): Directory bread(block 64) failed [ 269.395550][ T6017] FAT-fs (loop4): Directory bread(block 65) failed [ 269.437708][ T6017] FAT-fs (loop4): Directory bread(block 66) failed [ 269.478886][ T6027] loop0: detected capacity change from 0 to 512 [ 269.480953][ T6017] FAT-fs (loop4): Directory bread(block 67) failed [ 269.528655][ T6017] FAT-fs (loop4): Directory bread(block 68) failed [ 269.539826][ T6027] EXT4-fs: Ignoring removed i_version option [ 269.598304][ T6017] FAT-fs (loop4): Directory bread(block 69) failed [ 269.605057][ T6017] FAT-fs (loop4): Directory bread(block 70) failed [ 269.664926][ T6026] loop1: detected capacity change from 0 to 8192 [ 269.678155][ T6017] FAT-fs (loop4): Directory bread(block 71) failed [ 269.684969][ T6017] FAT-fs (loop4): Directory bread(block 72) failed [ 269.692196][ T6017] FAT-fs (loop4): Directory bread(block 73) failed [ 270.761851][ T6017] syz.4.456: attempt to access beyond end of device [ 270.761851][ T6017] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 270.801800][ T6027] EXT4-fs (loop0): 1 orphan inode deleted [ 270.835743][ T6027] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 270.981013][ T5208] kworker/u4:16: attempt to access beyond end of device [ 270.981013][ T5208] loop4: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 271.250950][ T5208] kworker/u4:16: attempt to access beyond end of device [ 271.250950][ T5208] loop4: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 271.329299][ T6046] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.458: Directory hole found for htree leaf block 0 [ 271.350058][ T6046] EXT4-fs (loop0): Remounting filesystem read-only [ 272.079292][ T5208] kworker/u4:16: attempt to access beyond end of device [ 272.079292][ T5208] loop4: rw=1, sector=1960, nr_sectors = 31840 limit=256 [ 272.094037][ T26] audit: type=1326 audit(2000000177.830:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2866f8efc9 code=0x7ffc0000 [ 272.249816][ T26] audit: type=1326 audit(2000000177.830:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2866f8efc9 code=0x7ffc0000 [ 272.300228][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 272.408050][ T26] audit: type=1326 audit(2000000177.840:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2866f8efc9 code=0x7ffc0000 [ 272.430581][ T5546] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 272.687679][ T26] audit: type=1326 audit(2000000177.840:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2866f8efc9 code=0x7ffc0000 [ 272.688165][ T5546] usb 3-1: Using ep0 maxpacket: 16 [ 273.623065][ T26] audit: type=1326 audit(2000000177.840:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2866f8efc9 code=0x7ffc0000 [ 273.658701][ T5546] usb 3-1: unable to get BOS descriptor or descriptor too short [ 274.239887][ T5546] usb 3-1: config 255 has an invalid interface number: 204 but max is 0 [ 274.270224][ T5546] usb 3-1: config 255 has no interface number 0 [ 274.290508][ T26] audit: type=1326 audit(2000000177.840:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2866f8efc9 code=0x7ffc0000 [ 274.327700][ T5546] usb 3-1: config 255 interface 204 altsetting 218 endpoint 0x2 has an invalid bInterval 55, changing to 9 [ 274.419296][ T5546] usb 3-1: config 255 interface 204 has no altsetting 0 [ 274.452985][ T26] audit: type=1326 audit(2000000177.840:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2866f8efc9 code=0x7ffc0000 [ 274.455377][ T5546] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=a3.8e [ 274.561787][ T26] audit: type=1326 audit(2000000177.840:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2866f8efc9 code=0x7ffc0000 [ 274.606157][ T5546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.652908][ T5546] usb 3-1: Product: syz [ 274.677465][ T5546] usb 3-1: Manufacturer: syz [ 274.712431][ T5546] usb 3-1: SerialNumber: syz [ 274.901135][ T5546] usb 3-1: USB disconnect, device number 5 [ 275.084859][ T6077] loop2: detected capacity change from 0 to 512 [ 275.101547][ T6079] loop4: detected capacity change from 0 to 256 [ 275.178056][ T6079] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 275.253019][ T6079] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 275.281613][ T6077] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 275.319316][ T6077] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.445392][ T6088] loop3: detected capacity change from 0 to 512 [ 275.528833][ T6088] EXT4-fs: Ignoring removed i_version option [ 275.605458][ T6088] EXT4-fs (loop3): 1 orphan inode deleted [ 275.628243][ T6088] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 275.754149][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 276.064584][ T6093] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.478: Directory hole found for htree leaf block 0 [ 276.975118][ T6093] EXT4-fs (loop3): Remounting filesystem read-only [ 277.249776][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 279.519029][ T6102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.482'. [ 280.251250][ T6122] loop4: detected capacity change from 0 to 256 [ 280.298136][ T6122] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 280.351221][ T6124] loop2: detected capacity change from 0 to 1024 [ 280.388380][ T6122] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 280.414321][ T6124] EXT4-fs: Ignoring removed orlov option [ 282.175999][ T6124] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 282.223180][ T6124] 9pnet_fd: Insufficient options for proto=fd [ 282.300079][ T6135] loop4: detected capacity change from 0 to 512 [ 282.341149][ T6135] EXT4-fs: Ignoring removed i_version option [ 282.370435][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 282.397241][ T6135] EXT4-fs (loop4): 1 orphan inode deleted [ 282.418491][ T6135] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 282.836322][ T6141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.496'. [ 284.546277][ T6161] loop1: detected capacity change from 0 to 1024 [ 284.769167][ T6161] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 285.061831][ T6169] loop2: detected capacity change from 0 to 256 [ 285.118492][ T6169] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 285.239059][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 285.264106][ T6169] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 286.820444][ T6182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.507'. [ 287.303395][ T6185] loop2: detected capacity change from 0 to 2048 [ 287.370209][ T6185] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 287.403964][ T6185] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.527394][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 289.428319][ T6216] netlink: 32 bytes leftover after parsing attributes in process `syz.0.518'. [ 292.418305][ T6240] loop0: detected capacity change from 0 to 256 [ 292.825301][ T26] audit: type=1800 audit(2000000198.550:40): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.524" name="file1" dev="loop0" ino=1048632 res=0 errno=0 [ 292.858911][ T6240] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 293.235961][ T6249] loop1: detected capacity change from 0 to 2048 [ 293.284035][ T6249] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.467343][ T6255] netlink: 216 bytes leftover after parsing attributes in process `syz.0.533'. [ 293.568104][ T6254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.534'. [ 293.620128][ T6251] loop4: detected capacity change from 0 to 8192 [ 294.674424][ T6267] loop3: detected capacity change from 0 to 512 [ 296.221547][ T6267] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 296.254877][ T6267] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.325970][ T6267] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #2: comm syz.3.528: corrupted inode contents [ 296.408163][ T6267] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #2: comm syz.3.528: mark_inode_dirty error [ 296.508724][ T6267] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #2: comm syz.3.528: corrupted inode contents [ 296.569848][ T6267] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.528: mark_inode_dirty error [ 296.690216][ T4377] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 296.722473][ T6291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.545'. [ 296.816327][ T6296] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 296.894814][ T4377] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.925363][ T4377] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.961701][ T4377] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 296.990685][ T4377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.016962][ T4377] usb 4-1: SerialNumber: syz [ 297.265487][ T4377] usb 4-1: 0:2 : does not exist [ 297.282943][ T4377] usb 4-1: unit 5: unexpected type 0x0d [ 298.780885][ T4377] usb 4-1: USB disconnect, device number 5 [ 298.873929][ T4493] udevd[4493]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.965179][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 301.051225][ T6319] loop0: detected capacity change from 0 to 512 [ 301.099120][ T6319] EXT4-fs: Ignoring removed oldalloc option [ 301.139533][ T6319] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 301.352649][ T6319] EXT4-fs (loop0): 1 truncate cleaned up [ 301.368194][ T6319] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 301.499167][ T6326] loop2: detected capacity change from 0 to 512 [ 301.505531][ T6319] loop0: detected capacity change from 512 to 64 [ 301.538253][ T6326] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 301.586975][ T6327] syz.0.556: attempt to access beyond end of device [ 301.586975][ T6327] loop0: rw=2049, sector=74, nr_sectors = 20 limit=64 [ 301.626692][ T6326] EXT4-fs (loop2): 1 truncate cleaned up [ 301.638149][ T6327] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 37) [ 301.699124][ T6326] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 301.728591][ T6327] Buffer I/O error on device loop0, logical block 37 [ 301.746712][ T6327] Buffer I/O error on device loop0, logical block 38 [ 301.771215][ T6327] Buffer I/O error on device loop0, logical block 39 [ 301.777981][ T6327] Buffer I/O error on device loop0, logical block 40 [ 301.784699][ T6327] Buffer I/O error on device loop0, logical block 41 [ 301.791494][ T6327] Buffer I/O error on device loop0, logical block 42 [ 301.798275][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.809293][ T6327] Buffer I/O error on device loop0, logical block 43 [ 301.816041][ T6327] Buffer I/O error on device loop0, logical block 44 [ 301.822722][ T6327] Buffer I/O error on device loop0, logical block 45 [ 301.829399][ T6327] Buffer I/O error on device loop0, logical block 46 [ 301.836079][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.845433][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 301.984762][ T6333] loop1: detected capacity change from 0 to 256 [ 302.007034][ T6333] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 302.675154][ T4279] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -12) [ 303.024583][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 303.322345][ T6349] loop3: detected capacity change from 0 to 128 [ 303.338094][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 303.403755][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.458499][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.528136][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 303.536512][ T34] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 303.607258][ T34] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 303.674626][ T34] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.755136][ T6347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.777759][ T34] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.844538][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.895246][ T34] usb 5-1: Product: syz [ 303.945781][ T34] usb 5-1: Manufacturer: syz [ 303.968885][ T34] usb 5-1: SerialNumber: syz [ 304.278488][ T34] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 304.287181][ T34] usb 5-1: unit 0 not found! [ 305.849562][ T34] usb 5-1: USB disconnect, device number 2 [ 306.168846][ T4493] udevd[4493]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.209277][ T6365] loop1: detected capacity change from 0 to 8192 [ 307.041018][ T6376] loop1: detected capacity change from 0 to 8192 [ 307.064410][ T6376] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.168340][ T6402] loop1: detected capacity change from 0 to 2048 [ 311.410052][ T6402] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 311.446036][ T6408] netlink: 32 bytes leftover after parsing attributes in process `syz.2.584'. [ 311.533982][ T6402] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 311.628074][ T6402] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 311.668152][ T6402] UDF-fs: Scanning with blocksize 512 failed [ 311.674030][ T6413] loop3: detected capacity change from 0 to 512 [ 311.784986][ T6402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.801402][ T6413] EXT4-fs: Ignoring removed i_version option [ 311.850774][ T6413] EXT4-fs (loop3): 1 orphan inode deleted [ 311.866781][ T6413] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 312.455708][ T6423] loop0: detected capacity change from 0 to 512 [ 312.569267][ T6424] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.585: Directory hole found for htree leaf block 0 [ 312.584187][ T6424] EXT4-fs (loop3): Remounting filesystem read-only [ 312.756744][ T6423] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 312.985736][ T6423] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 313.040590][ T6423] Quota error (device loop0): write_blk: dquota write failed [ 313.050006][ T6423] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 313.060875][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 313.061182][ T6423] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.588: Failed to acquire dquot type 0 [ 313.085699][ T6423] EXT4-fs (loop0): 1 truncate cleaned up [ 313.112183][ T6423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 313.240657][ T6423] Quota error (device loop0): write_blk: dquota write failed [ 313.260460][ T6423] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 313.281201][ T6423] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.588: Failed to acquire dquot type 0 [ 313.417617][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 313.522460][ T6442] loop2: detected capacity change from 0 to 8 [ 313.595361][ T6442] SQUASHFS error: Failed to read block 0x4de: -5 [ 313.624505][ T6442] SQUASHFS error: Failed to read block 0x4de: -5 [ 313.638753][ T26] audit: type=1800 audit(2000000219.370:41): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.593" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 313.882819][ T6439] SQUASHFS error: Failed to read block 0x4de: -5 [ 313.906952][ T6439] SQUASHFS error: Failed to read block 0x4de: -5 [ 314.172711][ T6439] SQUASHFS error: Failed to read block 0x4de: -5 [ 314.211533][ T6439] SQUASHFS error: Failed to read block 0x4de: -5 [ 314.235634][ T6442] SQUASHFS error: Failed to read block 0x4de: -5 [ 314.258750][ T6442] SQUASHFS error: Failed to read block 0x4de: -5 [ 314.274885][ T6442] SQUASHFS error: Failed to read block 0x4de: -5 [ 314.305134][ T6442] SQUASHFS error: Failed to read block 0x4de: -5 [ 315.614939][ T6468] loop3: detected capacity change from 0 to 512 [ 315.642516][ T6468] EXT4-fs: Ignoring removed i_version option [ 315.690628][ T6468] EXT4-fs (loop3): 1 orphan inode deleted [ 315.703592][ T6470] loop2: detected capacity change from 0 to 8 [ 315.731626][ T6468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 315.867631][ T6470] SQUASHFS error: lzo decompression failed, data probably corrupt [ 315.935525][ T6470] SQUASHFS error: Failed to read block 0x0: -5 [ 315.995886][ T6470] SQUASHFS error: lzo decompression failed, data probably corrupt [ 316.030914][ T6470] SQUASHFS error: Failed to read block 0x0: -5 [ 316.042159][ T6479] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.601: Directory hole found for htree leaf block 0 [ 316.067741][ T6479] EXT4-fs (loop3): Remounting filesystem read-only [ 316.099821][ T26] audit: type=1800 audit(2000000221.820:42): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.602" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 316.629126][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 316.804785][ T6487] loop3: detected capacity change from 0 to 16 [ 316.883297][ T6487] erofs: (device loop3): mounted with root inode @ nid 36. [ 316.910783][ T6492] loop1: detected capacity change from 0 to 128 [ 316.981557][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.988002][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.552571][ T6504] syz.3.605: attempt to access beyond end of device [ 317.552571][ T6504] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 322.610285][ T6529] loop2: detected capacity change from 0 to 1024 [ 322.738973][ T6529] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 323.065666][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 323.109760][ T6537] loop0: detected capacity change from 0 to 16 [ 323.134729][ T6536] loop3: detected capacity change from 0 to 512 [ 323.184934][ T6536] EXT4-fs: Ignoring removed i_version option [ 323.195094][ T6537] erofs: (device loop0): mounted with root inode @ nid 36. [ 323.233690][ T6540] loop2: detected capacity change from 0 to 256 [ 323.276194][ T6537] syz.0.621: attempt to access beyond end of device [ 323.276194][ T6537] loop0: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 323.301621][ T6536] EXT4-fs (loop3): 1 orphan inode deleted [ 323.307409][ T6536] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 323.308078][ T6540] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 323.443330][ T6540] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 323.454039][ T6537] syz.0.621: attempt to access beyond end of device [ 323.454039][ T6537] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 323.532234][ T6540] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 323.575052][ T6543] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.615: Directory hole found for htree leaf block 0 [ 323.589810][ T6543] EXT4-fs (loop3): Remounting filesystem read-only [ 323.617337][ T26] audit: type=1800 audit(2000000229.340:43): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.621" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 324.101847][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 324.416756][ T6556] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 326.247116][ T6571] loop1: detected capacity change from 0 to 512 [ 327.239194][ T6571] EXT4-fs: failed to create workqueue [ 327.284178][ T6571] EXT4-fs (loop1): mount failed [ 329.675323][ T6591] atomic_op ffff8880288a1198 conn xmit_atomic 0000000000000000 [ 330.012442][ T6598] loop0: detected capacity change from 0 to 512 [ 330.034602][ T6598] EXT4-fs: Ignoring removed i_version option [ 330.069017][ T6598] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 331.690596][ T6600] loop1: detected capacity change from 0 to 512 [ 331.875384][ T6600] EXT4-fs: Ignoring removed i_version option [ 332.109829][ T6600] EXT4-fs (loop1): 1 orphan inode deleted [ 332.233007][ T6600] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 332.675298][ T6611] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.639: Directory hole found for htree leaf block 0 [ 332.693917][ T6611] EXT4-fs (loop1): Remounting filesystem read-only [ 332.945121][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 332.971032][ T6613] loop2: detected capacity change from 0 to 2048 [ 333.051648][ T6613] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 333.203859][ T6613] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) Stopping sshd: stopped /usr/sbin/sshd (pid 4027) OK [ 338.970313][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. Stopping crond: stopped /usr/sbin/crond (pid 4011) OK Stopping dhcpcd... [ 343.601681][ T6686] netlink: 'syz.2.660': attribute type 4 has an invalid length. stopped /sbin/dhcpcd (pid 3932) [ 344.830256][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. Stopping network: [ 346.678101][ T4379] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 347.800153][ T4379] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 347.811976][ T4379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.825320][ T4379] usb 5-1: Product: syz [ 347.835625][ T4379] usb 5-1: Manufacturer: syz [ 347.858192][ T4379] usb 5-1: SerialNumber: syz [ 347.882641][ T4379] usb 5-1: config 0 descriptor?? [ 348.107011][ T4379] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 349.523461][ T4379] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 349.561862][ T4379] usb 5-1: USB disconnect, device number 3 OK [ 351.273147][ T6756] loop0: detected capacity change from 0 to 512 [ 351.289283][ T6756] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 351.335639][ T6756] EXT4-fs (loop0): orphan cleanup on readonly fs [ 351.351213][ T6756] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.673: casefold flag without casefold feature [ 351.365213][ T6756] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.673: couldn't read orphan inode 15 (err -117) [ 351.379660][ T6756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 351.485629][ T4279] EXT4-fs (loop0): unmounting filesystem. Stopping iptables: OK [ 353.322597][ T6775] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! Stopping system message bus: [ 353.607759][ T6779] loop1: detected capacity change from 0 to 8192 serialport: VM disconnected.