last executing test programs: 5.329353332s ago: executing program 2 (id=345): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000380)=""/300, 0xcebaa945, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 3.821371232s ago: executing program 2 (id=351): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x3e6f, 0x400, 0x2, 0x1a4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x11d0}, 0x7, 0x3ed763469f8f58dc}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 3.567827014s ago: executing program 2 (id=354): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8, 0x14, "339f020bbe82b398000100000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8333c691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f044158d9744b66cc530000000400000001000000002200", [0x314d39d0, 0x245]}}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0x4c09, 0x0) 3.336784315s ago: executing program 2 (id=356): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2.7838056s ago: executing program 0 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) 2.517037263s ago: executing program 0 (id=362): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mount$tmpfs(0x0, 0x0, 0x0, 0x20024, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000100)) 2.480638414s ago: executing program 1 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801") 2.381193399s ago: executing program 0 (id=364): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 2.222337057s ago: executing program 1 (id=365): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x0, 0x7}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xef89, 0x7f9, 0xb2, "35969809006e24a7446d8073145e6c31c267a0", 0xfb, 0x200008}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 2.221287857s ago: executing program 2 (id=373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xff}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 2.002229227s ago: executing program 0 (id=366): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 1.973019278s ago: executing program 2 (id=367): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0xff, 0x560c, {0x7ffd, 0x595}, {0xfffa, 0x2}, @rumble={0x5, 0x9}}) 1.726417549s ago: executing program 1 (id=370): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x18000000) 1.661922533s ago: executing program 3 (id=371): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000100)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030372c666f7263652c6e6c733d6d61636761656c69632c007e7e5b92fcfaafa893d39194e02dad43adeb29f3f5e9e047c637125ce6e83254fd2c080818d22d96c74dd30551dc18472b3896df88a15261aa887bb5e60d069d5ee385fdf404d2eda22849cd88050c0cc590400cc79b3ff410409d70b5c91b1f1dbf342e4e4b70100519c726eeeec91f72f261c82a2490f41f764e875d2cd7cb8bde7243a1762b07db1fb5d04952a21c8c16612d8d7162ca30cbee83758ba9a2e25fa7c47dce0451b3286c2b0f310ff44db8"], 0x1, 0x5d0, &(0x7f0000001f80)="$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") syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000240)={[{@type={'type', 0x3d, "54a10fb2"}}, {}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@part={'part', 0x3d, 0x8}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@dir_umask}, {@dir_umask}, {@dir_umask={'dir_umask', 0x3d, 0x200}}, {}, {@umask={'umask', 0x3d, 0x2}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) 1.312686479s ago: executing program 3 (id=372): mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/222, 0xde, 0x2) 1.097732249s ago: executing program 3 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6394bc11539d"}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 816.000022ms ago: executing program 0 (id=375): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0) 739.330395ms ago: executing program 3 (id=376): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x81, 0x2d1, &(0x7f0000000880)="$eJzs3c1qJFUUAOBTneqkWwfSC1ciWKALV2FmniBBIgxmpdRCNzo4PSDdzUAaGvzBntnoXnDlO7jzAXwAN76BD6C4cxZiSXV19U+lk0zG/OjwfZs6XfeeuufeviShoW8+fm00ePBo/PDJl79Gp5NEaz/242kSvWhF7XGs+fpWAAD/Z0+LIv4oKuf13V57lbausi4A4Oo88+//rWsrCQC4Yu9/8OG7B0dHh+9lWSdi9M0kT6K6Vu0HD+PTGEY/bsdu/BVRLFTxrXtHh5FmWf1hwKQbecToo5/nrw9+i5jl34nd6DXz608Uspl4czSd5OXI5bUdLyURB0VSdbkbu/FKRNGO+UOqyzv3jg7vZo38sph8O9564/t5/X/3Yy9245dP4lEM48HsEcv8r+5k2dvFd39+Uc0gj0imk3xn1m+p8BcQAAAAAAAAAAAAAAAAAAAAAACXZi9b6K2ev1OfBri312xP84jfR3X+8nyg/ZidDzQ/4We6cr7O7SzL6mN8Jnk7qvN90ng1jfSm5g0AAAAAAAAAAAAAAAAAAAD/JePPPh/cHw77x2vBT0UZdM/s0wzSlTv11/rPz9ocDH6IuHhWGWyf0ye25qUNkxNDJHVTM6soiuKUB/54ylg7Fym+u2nQaJ22hukwquK/vfj6vL5xgv8qiEiiDHrLUuvdNbhfNc1W/vF8dYf9nZX0zuZNsrLr6m14PE7O2JDdxp1iZenqYOu5t80zb7+Xnze9G5uayhm3F4u5ntWpFnNxp32J72n5fjUkl/uDBwAAAAAAAAAAAAAAAAAAOGH5pd/YPtH45EZKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBrt/z//4sges07zWA6T57daZ3deed4vGHY3jVPEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBfcPwEAAP//1rdOEQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 625.233551ms ago: executing program 1 (id=377): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @multicast2}, 0xc) 370.611203ms ago: executing program 1 (id=378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0xa, 0x6c}}, 0x28}}, 0x0) 370.487003ms ago: executing program 0 (id=379): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x0, 0x7}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xef89, 0x7f9, 0xb2, "35969809006e24a7446d8073145e6c31c267a0", 0xfb, 0x200008}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 369.534293ms ago: executing program 3 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='add foosyz ', 0xd) 59.127847ms ago: executing program 1 (id=381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x29a, 0x0, 0xf}]}) 0s ago: executing program 3 (id=382): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) unshare(0x20000600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 65.053549][ T5756] cgroup: Unknown subsys name 'net' [ 65.222745][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.523409][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.906146][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.915485][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.925944][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.933865][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.934201][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.942308][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.956977][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.961517][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.965157][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.973533][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.979096][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.987475][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.993855][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.000547][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.015145][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.015887][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.023856][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.030248][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.036917][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.043798][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.050762][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.065855][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.075550][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.085892][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.462045][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 68.543416][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 68.601451][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 68.646628][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.654334][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.661809][ T5771] bridge_slave_0: entered allmulticast mode [ 68.668643][ T5771] bridge_slave_0: entered promiscuous mode [ 68.697795][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 68.718879][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.727308][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.734457][ T5771] bridge_slave_1: entered allmulticast mode [ 68.742281][ T5771] bridge_slave_1: entered promiscuous mode [ 68.821981][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.851438][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.885987][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.893155][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.900778][ T5769] bridge_slave_0: entered allmulticast mode [ 68.907677][ T5769] bridge_slave_0: entered promiscuous mode [ 68.932972][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.942715][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.950324][ T5768] bridge_slave_0: entered allmulticast mode [ 68.957746][ T5768] bridge_slave_0: entered promiscuous mode [ 68.975778][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.983169][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.990531][ T5768] bridge_slave_1: entered allmulticast mode [ 68.997891][ T5768] bridge_slave_1: entered promiscuous mode [ 69.004414][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.013837][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.022366][ T5769] bridge_slave_1: entered allmulticast mode [ 69.029925][ T5769] bridge_slave_1: entered promiscuous mode [ 69.047083][ T5771] team0: Port device team_slave_0 added [ 69.079988][ T5771] team0: Port device team_slave_1 added [ 69.097652][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.104824][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.112373][ T5770] bridge_slave_0: entered allmulticast mode [ 69.119901][ T5770] bridge_slave_0: entered promiscuous mode [ 69.140188][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.161950][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.168964][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.195825][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.208149][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.215321][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.222751][ T5770] bridge_slave_1: entered allmulticast mode [ 69.229515][ T5770] bridge_slave_1: entered promiscuous mode [ 69.248656][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.260763][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.271795][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.291448][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.298608][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.324978][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.364612][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.387301][ T5769] team0: Port device team_slave_0 added [ 69.405093][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.424626][ T5768] team0: Port device team_slave_0 added [ 69.432479][ T5769] team0: Port device team_slave_1 added [ 69.466676][ T5768] team0: Port device team_slave_1 added [ 69.501490][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.508655][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.534707][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.563211][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.570328][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.596343][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.612516][ T5771] hsr_slave_0: entered promiscuous mode [ 69.619052][ T5771] hsr_slave_1: entered promiscuous mode [ 69.644496][ T5770] team0: Port device team_slave_0 added [ 69.651000][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.658787][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.684929][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.702986][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.710362][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.736718][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.761221][ T5770] team0: Port device team_slave_1 added [ 69.836614][ T5769] hsr_slave_0: entered promiscuous mode [ 69.843065][ T5769] hsr_slave_1: entered promiscuous mode [ 69.849328][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.857779][ T5769] Cannot create hsr debugfs directory [ 69.863918][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.871307][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.897473][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.940769][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.947900][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.976733][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.998746][ T5768] hsr_slave_0: entered promiscuous mode [ 70.005245][ T5768] hsr_slave_1: entered promiscuous mode [ 70.011807][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.019647][ T5768] Cannot create hsr debugfs directory [ 70.116512][ T51] Bluetooth: hci0: command tx timeout [ 70.116524][ T5783] Bluetooth: hci3: command tx timeout [ 70.116716][ T5783] Bluetooth: hci1: command tx timeout [ 70.122199][ T51] Bluetooth: hci2: command tx timeout [ 70.161801][ T5770] hsr_slave_0: entered promiscuous mode [ 70.168700][ T5770] hsr_slave_1: entered promiscuous mode [ 70.174748][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.182505][ T5770] Cannot create hsr debugfs directory [ 70.429560][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.442566][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.452292][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.472782][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.527863][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.553245][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.563988][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.590147][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.652322][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.664841][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.675432][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.690065][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.751322][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.766556][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.779257][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.810485][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.865717][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.937040][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.949916][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.983539][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.991016][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.003610][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.010753][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.021747][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.042113][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.049324][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.081939][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.089114][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.133405][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.174229][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.224094][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.253675][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.264894][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.310879][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.318089][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.341418][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.348637][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.368609][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.375809][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.392767][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.399946][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.562136][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.576934][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.632523][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.654816][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.817822][ T5771] veth0_vlan: entered promiscuous mode [ 71.832434][ T5768] veth0_vlan: entered promiscuous mode [ 71.871566][ T5771] veth1_vlan: entered promiscuous mode [ 71.904774][ T5768] veth1_vlan: entered promiscuous mode [ 71.961818][ T5771] veth0_macvtap: entered promiscuous mode [ 71.982500][ T5768] veth0_macvtap: entered promiscuous mode [ 71.996509][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.014378][ T5768] veth1_macvtap: entered promiscuous mode [ 72.022756][ T5771] veth1_macvtap: entered promiscuous mode [ 72.071512][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.089269][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.100679][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.113679][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.126826][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.141667][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.157143][ T5769] veth0_vlan: entered promiscuous mode [ 72.172016][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.181691][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.190875][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.199919][ T51] Bluetooth: hci2: command tx timeout [ 72.205694][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.215982][ T51] Bluetooth: hci1: command tx timeout [ 72.216168][ T5774] Bluetooth: hci0: command tx timeout [ 72.221378][ T51] Bluetooth: hci3: command tx timeout [ 72.253042][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.264631][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.278116][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.291824][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.301021][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.309866][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.318846][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.335910][ T5769] veth1_vlan: entered promiscuous mode [ 72.412502][ T5770] veth0_vlan: entered promiscuous mode [ 72.469462][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.483672][ T5770] veth1_vlan: entered promiscuous mode [ 72.484240][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.527764][ T5769] veth0_macvtap: entered promiscuous mode [ 72.570616][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.581377][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.594312][ T5769] veth1_macvtap: entered promiscuous mode [ 72.619617][ T5770] veth0_macvtap: entered promiscuous mode [ 72.631798][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.641149][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.643525][ T5770] veth1_macvtap: entered promiscuous mode [ 72.677910][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.701313][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.724739][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.744106][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.754273][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.773659][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.786872][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.800479][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.815541][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.830601][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.845270][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.861713][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.873542][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.894443][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.905405][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.920341][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.931118][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.945714][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.961694][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.990669][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.011350][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.022063][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.033083][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.043255][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.053942][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.065282][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.094359][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.107796][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.119224][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.128970][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.146639][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.155479][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.177353][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.186721][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.210947][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.221685][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.228960][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.241283][ T5838] bridge_slave_0: left allmulticast mode [ 73.247618][ T5838] bridge_slave_0: left promiscuous mode [ 73.253744][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.281547][ T5838] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 73.510762][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.510780][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.566583][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.566600][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.620756][ T5847] syz.0.10[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.628799][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.628820][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.631773][ T5847] loop0: detected capacity change from 0 to 128 [ 73.702996][ T5847] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.714044][ T5847] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.787309][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.787331][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.804546][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.984050][ T5853] loop1: detected capacity change from 0 to 256 [ 74.009669][ T5853] ======================================================= [ 74.009669][ T5853] WARNING: The mand mount option has been deprecated and [ 74.009669][ T5853] and is ignored by this kernel. Remove the mand [ 74.009669][ T5853] option from the mount to silence this warning. [ 74.009669][ T5853] ======================================================= [ 74.069376][ T5853] FAT-fs (loop1): Directory bread(block 64) failed [ 74.069536][ T5853] FAT-fs (loop1): Directory bread(block 65) failed [ 74.069732][ T5853] FAT-fs (loop1): Directory bread(block 66) failed [ 74.069758][ T5853] FAT-fs (loop1): Directory bread(block 67) failed [ 74.069844][ T5853] FAT-fs (loop1): Directory bread(block 68) failed [ 74.069878][ T5853] FAT-fs (loop1): Directory bread(block 69) failed [ 74.069968][ T5853] FAT-fs (loop1): Directory bread(block 70) failed [ 74.069992][ T5853] FAT-fs (loop1): Directory bread(block 71) failed [ 74.070078][ T5853] FAT-fs (loop1): Directory bread(block 72) failed [ 74.070133][ T5853] FAT-fs (loop1): Directory bread(block 73) failed [ 74.277415][ T51] Bluetooth: hci3: command tx timeout [ 74.277449][ T51] Bluetooth: hci2: command tx timeout [ 74.296605][ T51] Bluetooth: hci0: command tx timeout [ 74.296638][ T51] Bluetooth: hci1: command tx timeout [ 74.640017][ T5859] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.960018][ T5855] loop2: detected capacity change from 0 to 32768 [ 74.985145][ T5855] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (5855) [ 75.072570][ T5855] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 75.102883][ T5855] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 75.126060][ T5855] BTRFS info (device loop2): using free space tree [ 75.151008][ T5865] batman_adv: batadv0: Adding interface: gretap1 [ 75.180142][ T5865] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.234882][ T5865] batman_adv: batadv0: Interface activated: gretap1 [ 75.330096][ T5855] BTRFS info (device loop2): enabling ssd optimizations [ 75.349701][ T5855] BTRFS info (device loop2): auto enabling async discard [ 75.641560][ T5770] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 75.643261][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 75.948435][ T5891] loop1: detected capacity change from 0 to 512 [ 76.195081][ T5897] warning: `syz.3.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.340347][ T5891] EXT4-fs: Invalid want_extra_isize 206 [ 76.399329][ T5774] Bluetooth: hci1: command tx timeout [ 76.404787][ T5774] Bluetooth: hci0: command tx timeout [ 76.410449][ T51] Bluetooth: hci2: command tx timeout [ 76.410474][ T5783] Bluetooth: hci3: command tx timeout [ 76.560580][ T5904] loop2: detected capacity change from 0 to 512 [ 76.672810][ T5906] loop3: detected capacity change from 0 to 256 [ 76.685379][ T5906] exfat: Deprecated parameter 'utf8' [ 76.697239][ T5904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.711333][ T5906] exfat: Deprecated parameter 'utf8' [ 76.716093][ T5904] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.807838][ T5906] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 76.918756][ T5904] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz.2.24: Directory hole found for htree leaf block 0 [ 77.038182][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.417017][ T5924] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.712240][ T5932] tmpfs: Bad value for 'uid' [ 77.742934][ T5933] netlink: 'syz.2.34': attribute type 1 has an invalid length. [ 77.982369][ T5939] loop2: detected capacity change from 0 to 1024 [ 78.013395][ T5944] loop3: detected capacity change from 0 to 256 [ 78.108413][ T5939] hfsplus: walked past end of dir [ 78.246711][ T49] hfsplus: bad catalog file entry [ 78.393244][ T5948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42'. [ 79.574261][ T5980] loop2: detected capacity change from 0 to 512 [ 79.662517][ T5980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.696420][ T5979] loop3: detected capacity change from 0 to 8192 [ 79.767741][ T5979] Dev loop3: RDB in block 1 has bad checksum [ 79.778779][ T5972] loop1: detected capacity change from 0 to 32768 [ 79.862633][ T5972] JBD2: Ignoring recovery information on journal [ 79.911763][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.021693][ T5972] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 80.185737][ T27] audit: type=1800 audit(1789486802.152:2): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.51" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 80.244347][ T5992] capability: warning: `syz.3.57' uses deprecated v2 capabilities in a way that may be insecure [ 80.329423][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 80.669157][ T5999] loop3: detected capacity change from 0 to 256 [ 80.739730][ T5999] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 80.824115][ T5852] Set syz1 is full, maxelem 65536 reached [ 81.335867][ T6018] netlink: 27 bytes leftover after parsing attributes in process `syz.1.69'. [ 82.023492][ T6046] loop0: detected capacity change from 0 to 512 [ 82.047106][ T6046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.069698][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 82.114299][ T6051] loop2: detected capacity change from 0 to 512 [ 82.132962][ T6046] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 82.174834][ T6046] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.202437][ T6046] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 82.215798][ T6046] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 82.262047][ T6051] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.84: inode has both inline data and extents flags [ 82.309918][ T6046] EXT4-fs (loop0): 1 truncate cleaned up [ 82.323740][ T6051] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.84: couldn't read orphan inode 15 (err -117) [ 82.382616][ T6046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.399293][ T6051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.567678][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.600936][ T6046] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 82.847024][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.214099][ T6076] mmap: syz.1.93 (6076) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.959249][ T6078] loop0: detected capacity change from 0 to 40427 [ 83.988507][ T6078] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 84.028432][ T6078] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 84.055497][ T6078] F2FS-fs (loop0): Image doesn't support compression [ 84.085455][ T6078] F2FS-fs (loop0): Image doesn't support compression [ 84.113756][ T6078] F2FS-fs (loop0): invalid crc value [ 84.310092][ T6105] program syz.3.105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.366953][ T6078] F2FS-fs (loop0): Start checkpoint disabled! [ 84.467063][ T6078] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 84.474414][ T6078] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 84.503830][ T6110] loop3: detected capacity change from 0 to 1024 [ 84.518621][ T6110] hfsplus: invalid length 32517 has been corrected to 255 [ 84.604857][ T27] audit: type=1800 audit(1789486806.582:3): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.108" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 84.671554][ T6110] hfsplus: b-tree write err: -5, ino 20 [ 84.738764][ T79] kworker/u4:5: attempt to access beyond end of device [ 84.738764][ T79] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 84.755062][ T6097] loop2: detected capacity change from 0 to 32768 [ 84.780496][ T79] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 84.822309][ T6097] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 84.853283][ T42] hfsplus: b-tree write err: -5, ino 20 [ 84.941907][ T6097] XFS (loop2): Ending clean mount [ 84.981009][ T6097] XFS (loop2): Quotacheck needed: Please wait. [ 85.082339][ T6097] XFS (loop2): Quotacheck: Done. [ 85.311372][ T5770] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.423081][ T6125] loop1: detected capacity change from 0 to 2048 [ 85.467225][ T6125] NILFS (loop1): invalid segment: Magic number mismatch [ 85.486191][ T6125] NILFS (loop1): trying rollback from an earlier position [ 85.528657][ T6125] NILFS (loop1): recovery complete [ 85.562591][ T6131] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.720273][ T6125] capability: warning: `syz.1.112' uses 32-bit capabilities (legacy support in use) [ 85.815463][ T6137] raw_sendmsg: syz.0.117 forgot to set AF_INET. Fix it! [ 86.246439][ T5772] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.352820][ T6160] netem: incorrect ge model size [ 86.370827][ T6160] netem: change failed [ 86.445873][ T5772] usb 4-1: Using ep0 maxpacket: 32 [ 86.470906][ T5772] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.488805][ T5772] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.508333][ T5772] usb 4-1: config 0 interface 0 has no altsetting 0 [ 86.539707][ T5772] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 86.549238][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.584673][ T5772] usb 4-1: config 0 descriptor?? [ 86.593961][ T6166] netlink: 52 bytes leftover after parsing attributes in process `syz.2.130'. [ 86.658505][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.736915][ T6172] netlink: 100 bytes leftover after parsing attributes in process `syz.2.133'. [ 86.865911][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.873479][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 86.888367][ T8] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 86.898327][ T8] usb 1-1: config 0 has no interface number 0 [ 86.904478][ T8] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.920860][ T8] usb 1-1: config 0 interface 85 has no altsetting 0 [ 86.923221][ T788] cfg80211: failed to load regulatory.db [ 86.953119][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 86.979334][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.990650][ T8] usb 1-1: Product: syz [ 86.994848][ T8] usb 1-1: Manufacturer: syz [ 87.005420][ T8] usb 1-1: SerialNumber: syz [ 87.021781][ T8] usb 1-1: config 0 descriptor?? [ 87.027293][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.034674][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.050973][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.058872][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.066436][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.073701][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.081553][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.087652][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 87.090379][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.110034][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.111156][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 87.118639][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.146011][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.153294][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.162438][ T9] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 87.184174][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.193300][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.200592][ T9] usb 2-1: Product: syz [ 87.200613][ T9] usb 2-1: Manufacturer: syz [ 87.200627][ T9] usb 2-1: SerialNumber: syz [ 87.219704][ T9] oti6858 2-1:1.0: oti6858 converter detected [ 87.226891][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.234070][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.245902][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.253182][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.264889][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.273311][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.278114][ T9] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 87.286713][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.311425][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.336123][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.343956][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.357798][ T5772] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 87.394243][ T5772] logitech 0003:046D:C29C.0001: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 87.644982][ T5772] logitech 0003:046D:C29C.0001: no inputs found [ 87.650893][ T8] appletouch 1-1:0.85: Geyser mode initialized. [ 87.668649][ T8] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input5 [ 87.704531][ T5772] usb 4-1: USB disconnect, device number 2 [ 87.752032][ T8] usb 2-1: USB disconnect, device number 2 [ 87.806916][ T8] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 87.846670][ T8] oti6858 2-1:1.0: device disconnected [ 87.941756][ T9] usb 1-1: USB disconnect, device number 2 [ 87.977371][ T9] appletouch 1-1:0.85: input: appletouch disconnected [ 88.322533][ T6201] loop1: detected capacity change from 0 to 2048 [ 88.364041][ T6201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.542607][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.870915][ T6217] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd83 [ 89.056506][ T1215] hid-generic 0005:0B57:05DF.0002: item fetching failed at offset 0/1 [ 89.073501][ T1215] hid-generic: probe of 0005:0B57:05DF.0002 failed with error -22 [ 89.319438][ T6228] loop2: detected capacity change from 0 to 4096 [ 89.403535][ T6233] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.468730][ T27] audit: type=1800 audit(1789486811.452:4): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 89.690449][ T6241] base or size exceeds the MTRR width [ 89.966196][ T6254] loop0: detected capacity change from 0 to 128 [ 90.015293][ T6254] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.046736][ T6254] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.112548][ T6261] loop1: detected capacity change from 0 to 256 [ 90.244222][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.382683][ T6265] loop1: detected capacity change from 0 to 2048 [ 90.481009][ T6265] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.815417][ T6249] loop3: detected capacity change from 0 to 32768 [ 90.861689][ T6249] JBD2: Ignoring recovery information on journal [ 90.867137][ T6281] loop1: detected capacity change from 0 to 2048 [ 90.922702][ T6281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.942360][ T6249] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 91.051967][ T788] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 91.252775][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 91.274353][ T788] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.281833][ T788] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 91.302547][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.324119][ T788] usb 1-1: config 0 descriptor?? [ 91.358938][ T6287] loop1: detected capacity change from 0 to 8192 [ 91.392910][ T6287] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 91.407255][ T6287] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 91.417030][ T6287] REISERFS (device loop1): using ordered data mode [ 91.423689][ T6287] reiserfs: using flush barriers [ 91.432123][ T6287] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.449627][ T6287] REISERFS (device loop1): checking transaction log (loop1) [ 91.463609][ T6287] REISERFS (device loop1): Using r5 hash to sort names [ 91.472369][ T6287] REISERFS (device loop1): using 3.5.x disk format [ 91.483243][ T6287] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 91.713705][ T6292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.183'. [ 91.753784][ T788] kye 0003:0458:0138.0003: unknown main item tag 0x6 [ 91.766195][ T788] kye 0003:0458:0138.0003: unknown main item tag 0x0 [ 91.783273][ T788] kye 0003:0458:0138.0003: unknown main item tag 0x0 [ 91.799978][ T788] kye 0003:0458:0138.0003: unknown main item tag 0x0 [ 91.850519][ T788] kye 0003:0458:0138.0003: unknown main item tag 0x0 [ 91.882410][ T788] kye 0003:0458:0138.0003: item fetching failed at offset 12/38 [ 91.906548][ T788] kye 0003:0458:0138.0003: parse failed [ 91.912405][ T788] kye: probe of 0003:0458:0138.0003 failed with error -22 [ 92.026782][ T788] usb 1-1: USB disconnect, device number 3 [ 92.129429][ T6298] loop2: detected capacity change from 0 to 8192 [ 92.225501][ T6304] kAFS: bad VL server IP address [ 92.400161][ T6309] loop3: detected capacity change from 0 to 2048 [ 92.457160][ T6311] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.583690][ T6314] loop1: detected capacity change from 0 to 2048 [ 92.732010][ T6314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.735323][ T6315] loop2: detected capacity change from 0 to 8192 [ 92.774270][ T5783] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 92.787528][ T6324] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 92.795219][ T6324] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.195'. [ 92.830731][ T6315] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.866803][ T6314] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 92.925237][ T6315] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 92.950714][ T6322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.980895][ T6315] REISERFS (device loop2): using ordered data mode [ 92.988558][ T6315] reiserfs: using flush barriers [ 92.997137][ T6315] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.013928][ T6315] REISERFS (device loop2): checking transaction log (loop2) [ 93.022790][ T6322] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.062292][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.097212][ T6315] REISERFS (device loop2): Using r5 hash to sort names [ 93.104441][ T6315] REISERFS (device loop2): using 3.5.x disk format [ 93.112331][ T6315] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 93.176182][ T6322] EXT4-fs error (device loop3): ext4_empty_dir:3141: inode #12: comm syz.3.193: Directory hole found for htree leaf block 0 [ 93.179889][ T6334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 93.317439][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.523003][ T6344] openvswitch: netlink: Message has 161 unknown bytes. [ 93.543730][ T6344] openvswitch: netlink: Actions may not be safe on all matching packets [ 93.776878][ T6349] rnbd_client L127: Can't parse path ip:127.0.: -22 [ 93.803030][ T6354] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.868696][ T6354] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.077053][ T1083] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.174568][ T6361] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.209794][ T6361] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 94.222150][ T6361] REISERFS (device loop0): using ordered data mode [ 94.264210][ T6361] reiserfs: using flush barriers [ 94.288853][ T6361] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.314594][ T6361] REISERFS (device loop0): checking transaction log (loop0) [ 94.354804][ T6361] REISERFS (device loop0): Using r5 hash to sort names [ 94.397932][ T6361] REISERFS (device loop0): using 3.5.x disk format [ 94.404826][ T6361] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 94.485540][ T6375] EXT4-fs: Ignoring removed orlov option [ 94.499995][ T6375] EXT4-fs: Ignoring removed bh option [ 94.506582][ T6375] EXT4-fs: Ignoring removed bh option [ 94.518921][ T6375] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 94.562509][ T6375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.644144][ T6375] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.829930][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.305840][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.500819][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 95.515118][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.524300][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 95.532372][ T8] usb 1-1: SerialNumber: syz [ 95.542746][ T8] hub 1-1:1.0: bad descriptor, ignoring hub [ 95.548818][ T1215] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.556393][ T8] hub: probe of 1-1:1.0 failed with error -5 [ 95.745751][ T1215] usb 4-1: Using ep0 maxpacket: 32 [ 95.752944][ T1215] usb 4-1: config index 0 descriptor too short (expected 27632, got 27) [ 95.762852][ T1215] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 95.771651][ T1215] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 95.780829][ T1215] usb 4-1: config 1 has no interface number 0 [ 95.787491][ T1215] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.798556][ T1215] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 95.812647][ T1215] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 95.822325][ T1215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.849067][ T1215] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 95.949224][ T6410] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 96.061948][ T1215] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 96.189572][ T8] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 96.546826][ T788] usb 4-1: USB disconnect, device number 3 [ 96.554440][ T788] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 96.568663][ T5772] usb 1-1: USB disconnect, device number 4 [ 96.588087][ T5772] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 96.838008][ T5783] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 96.855836][ T5783] Bluetooth: hci1: Injecting HCI hardware error event [ 96.865156][ T5783] Bluetooth: hci1: hardware error 0x00 [ 97.811234][ T6453] set_capacity_and_notify: 4 callbacks suppressed [ 97.811249][ T6453] loop0: detected capacity change from 0 to 32768 [ 97.879519][ T6453] JBD2: Ignoring recovery information on journal [ 97.939050][ T6453] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.075073][ T6482] loop3: detected capacity change from 0 to 4096 [ 98.137339][ T5768] ocfs2: Unmounting device (7,0) on (node local) [ 98.166137][ T6486] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.216204][ T27] audit: type=1800 audit(1789486820.202:5): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.250" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 98.471669][ T6492] process 'syz.3.252' launched './file1' with NULL argv: empty string added [ 98.915915][ T5783] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 98.972734][ T6488] loop0: detected capacity change from 0 to 32768 [ 99.101207][ T6488] [ 99.101207][ T6488] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.101207][ T6488] [ 99.265189][ T3435] ERROR: (device loop0): diWrite: ixpxd invalid [ 99.265189][ T3435] [ 99.294145][ T3435] ERROR: (device loop0): txCommit: [ 99.294145][ T3435] [ 99.311159][ T3435] jfs_write_inode: jfs_commit_inode failed! [ 99.330263][ T5768] [ 99.330263][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.330263][ T5768] [ 99.350934][ T5768] [ 99.350934][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.350934][ T5768] [ 99.476234][ T5783] Bluetooth: hci3: command tx timeout [ 99.516436][ T6519] netlink: 'syz.1.267': attribute type 10 has an invalid length. [ 99.884522][ T6533] kAFS: bad VL server IP address [ 100.261474][ T6528] loop2: detected capacity change from 0 to 32768 [ 100.318479][ T6545] loop0: detected capacity change from 0 to 512 [ 100.382623][ T6528] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.427849][ T5771] cgroup: fork rejected by pids controller in /syz3 [ 100.571685][ T6528] XFS (loop2): Ending clean mount [ 100.755066][ T6540] loop1: detected capacity change from 0 to 32768 [ 100.756022][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.785915][ T5770] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.996529][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 101.015360][ T9] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 101.046450][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 101.055115][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 101.068154][ T6557] autofs4:pid:6557:autofs_fill_super: pipe file descriptor does not contain proper ops [ 101.125686][ T9] usb 1-1: config 1 has no interface number 0 [ 101.151108][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.208707][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 101.269855][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 101.293966][ T3435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.303422][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.343388][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 101.450303][ T3435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.563394][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 101.575070][ T3435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.690266][ T6564] loop1: detected capacity change from 0 to 16 [ 101.701337][ T3435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.743695][ T6564] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 102.115865][ T9] usb 1-1: USB disconnect, device number 5 [ 102.122900][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 102.130918][ T6559] loop2: detected capacity change from 0 to 32768 [ 102.207967][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.218193][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.227016][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.235488][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.259501][ T6559] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 102.299259][ T6572] loop1: detected capacity change from 0 to 512 [ 102.309267][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.310877][ T6559] JBD2: Ignoring recovery information on journal [ 102.325885][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.421676][ T6572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.535183][ T6559] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 102.634688][ T6572] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 102.848643][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.033111][ T5770] ocfs2: Unmounting device (7,2) on (node local) [ 103.301076][ T6604] loop1: detected capacity change from 0 to 512 [ 103.322726][ T6604] EXT4-fs: Ignoring removed nobh option [ 103.443064][ T6604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.533962][ T6604] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.621657][ T6604] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #2: comm syz.1.294: corrupted inode contents [ 103.641150][ T6568] chnl_net:caif_netlink_parms(): no params data found [ 103.713482][ T6604] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #2: comm syz.1.294: mark_inode_dirty error [ 103.742606][ T6604] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #2: comm syz.1.294: corrupted inode contents [ 103.883205][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.065316][ T6627] netlink: 32 bytes leftover after parsing attributes in process `syz.0.299'. [ 104.148223][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 104.276729][ T6640] loop1: detected capacity change from 0 to 512 [ 104.299970][ T6640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.349447][ T6640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.373492][ T6640] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.393750][ T6568] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.405136][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.417191][ T6568] bridge_slave_0: entered allmulticast mode [ 104.424528][ T6568] bridge_slave_0: entered promiscuous mode [ 104.445933][ T5783] Bluetooth: hci2: command tx timeout [ 104.544877][ T6568] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.562548][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.572392][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.581882][ T6568] bridge_slave_1: entered allmulticast mode [ 104.617021][ T6568] bridge_slave_1: entered promiscuous mode [ 104.774504][ T3435] hsr_slave_0: left promiscuous mode [ 104.797504][ T3435] hsr_slave_1: left promiscuous mode [ 104.803936][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.811968][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.857228][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.871304][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.880319][ T3435] bridge_slave_1: left allmulticast mode [ 104.897723][ T3435] bridge_slave_1: left promiscuous mode [ 104.914897][ T3435] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.039889][ T3435] veth1_macvtap: left promiscuous mode [ 105.049871][ T3435] veth0_macvtap: left promiscuous mode [ 105.055553][ T3435] veth1_vlan: left promiscuous mode [ 105.076532][ T3435] veth0_vlan: left promiscuous mode [ 105.162761][ T6668] loop2: detected capacity change from 0 to 1024 [ 105.387433][ T6670] kAFS: bad VL server IP address [ 105.647299][ T6676] loop0: detected capacity change from 0 to 512 [ 105.731585][ T6676] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.315: corrupted in-inode xattr: invalid ea_ino [ 105.782146][ T6676] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.315: couldn't read orphan inode 15 (err -117) [ 105.811997][ T6676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.923748][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.413621][ T3435] team0 (unregistering): Port device team_slave_1 removed [ 106.484959][ T3435] team0 (unregistering): Port device team_slave_0 removed [ 106.520775][ T5783] Bluetooth: hci2: command tx timeout [ 106.579864][ T6692] loop2: detected capacity change from 0 to 2048 [ 106.629688][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.645688][ T6693] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.720487][ T27] audit: type=1800 audit(1789486828.692:6): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.321" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 106.765565][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.785745][ T27] audit: type=1800 audit(1789486828.732:7): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.321" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 106.866129][ T6693] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 106.878356][ T6693] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 106.906126][ T6693] Remounting filesystem read-only [ 106.911329][ T49] NILFS (loop2): discard dirty page: offset=0, ino=15 [ 106.918381][ T49] NILFS (loop2): discard dirty block: blocknr=22, size=1024 [ 106.939117][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.949395][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.962726][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.974285][ T49] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 106.985476][ T49] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 106.994164][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.006225][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.015119][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.032370][ T5770] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 107.043138][ T5770] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 107.050055][ T6690] loop0: detected capacity change from 0 to 40427 [ 107.065839][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.083061][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.092671][ T6690] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 107.109875][ T6690] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 107.126740][ T5770] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 107.134091][ T5770] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 107.146636][ T6690] F2FS-fs (loop0): invalid crc value [ 107.164026][ T5770] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 107.174393][ T5770] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 107.183478][ T6690] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.210165][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.236998][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.271553][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.285544][ T5770] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 107.298019][ T5770] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 107.313023][ T5770] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 107.323746][ T5770] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 107.336265][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.343017][ T6690] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 107.350119][ T5770] NILFS (loop2): discard dirty page: offset=229376, ino=3 [ 107.352399][ T6690] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.360890][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.415826][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.424767][ T5770] NILFS (loop2): discard dirty block: blocknr=50, size=1024 [ 107.453413][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 107.601191][ T3435] bond0 (unregistering): Released all slaves [ 107.608884][ T5768] syz-executor: attempt to access beyond end of device [ 107.608884][ T5768] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.640323][ T5768] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 107.789315][ T6568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.911115][ T6568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.075391][ T6568] team0: Port device team_slave_0 added [ 108.111551][ T6568] team0: Port device team_slave_1 added [ 108.227229][ T6568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.285739][ T6568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.337201][ T6712] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 108.363996][ T6568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.392538][ T6568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.413193][ T6568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.473672][ T6568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.595719][ T5783] Bluetooth: hci2: command tx timeout [ 108.658663][ T6720] loop2: detected capacity change from 0 to 2048 [ 108.700883][ T6568] hsr_slave_0: entered promiscuous mode [ 108.746208][ T6568] hsr_slave_1: entered promiscuous mode [ 108.776619][ T6720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.878974][ T6720] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.095416][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.105151][ T6739] Zero length message leads to an empty skb [ 109.311858][ T6747] loop2: detected capacity change from 0 to 256 [ 109.366871][ T6747] exfat: Deprecated parameter 'namecase' [ 109.372600][ T6747] exfat: Deprecated parameter 'namecase' [ 109.433462][ T6747] exfat: Deprecated parameter 'namecase' [ 109.479078][ T6747] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 109.629801][ T6752] netlink: 144 bytes leftover after parsing attributes in process `syz.1.339'. [ 110.291401][ T6568] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.368834][ T6568] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.390110][ T6568] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.418967][ T6568] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.445511][ T6755] loop0: detected capacity change from 0 to 32768 [ 110.546882][ T6755] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 110.685673][ T5783] Bluetooth: hci2: command tx timeout [ 110.742228][ T6755] XFS (loop0): Ending clean mount [ 110.872438][ T6568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.931409][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 110.952921][ T6568] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.047481][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.054681][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.159424][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.166627][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.938532][ T6568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.956938][ T6827] loop9: detected capacity change from 0 to 524287998 [ 112.105300][ T6568] veth0_vlan: entered promiscuous mode [ 112.158098][ T6568] veth1_vlan: entered promiscuous mode [ 112.249499][ T6568] veth0_macvtap: entered promiscuous mode [ 112.267959][ T6568] veth1_macvtap: entered promiscuous mode [ 112.350354][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.371021][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.393774][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.446641][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.474873][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.515543][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.529497][ T6568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.541239][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.555163][ T6848] binder: 6846:6848 ioctl c0306201 0 returned -14 [ 112.581525][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.610512][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.648673][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.680187][ T6568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.705379][ T6568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.722165][ T6568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.742844][ T6568] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.759026][ T6568] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.779945][ T6568] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.793184][ T6568] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.037597][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.056744][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.112240][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.127164][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.805721][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.889093][ T6891] loop3: detected capacity change from 0 to 1024 [ 114.026374][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 114.040347][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 114.053824][ T9] usb 3-1: config 179 has no interface number 0 [ 114.094188][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 114.147588][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 114.195328][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 114.210055][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 114.233643][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 114.257434][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 114.283529][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.320677][ T6879] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.864603][ T6907] loop3: detected capacity change from 0 to 256 [ 114.905412][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 115.282647][ T6919] kAFS: Invalid Command on /proc/fs/afs/cells file [ 115.308249][ T28] usb 3-1: USB disconnect, device number 2 [ 115.308250][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 115.308783][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 115.309901][ T28] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 115.433455][ T6914] ================================================================== [ 115.433467][ T6914] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0 [ 115.433504][ T6914] Write of size 4 at addr ffffc90003d09780 by task syz.0.379/6914 [ 115.433520][ T6914] [ 115.433533][ T6914] CPU: 0 PID: 6914 Comm: syz.0.379 Not tainted syzkaller #0 [ 115.433552][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.433570][ T6914] Call Trace: [ 115.433577][ T6914] [ 115.433586][ T6914] dump_stack_lvl+0x18c/0x250 [ 115.433610][ T6914] ? sys_imageblit+0x1bac/0x25d0 [ 115.433629][ T6914] ? show_regs_print_info+0x20/0x20 [ 115.433652][ T6914] ? load_image+0x420/0x420 [ 115.433677][ T6914] print_report+0xa8/0x210 [ 115.433699][ T6914] ? sys_imageblit+0x1bac/0x25d0 [ 115.433715][ T6914] kasan_report+0x117/0x150 [ 115.433740][ T6914] ? sys_imageblit+0x1bac/0x25d0 [ 115.433761][ T6914] sys_imageblit+0x1bac/0x25d0 [ 115.433786][ T6914] ? sys_copyarea+0x2530/0x2530 [ 115.433806][ T6914] ? __mod_timer+0x9b0/0xd60 [ 115.433823][ T6914] ? __lock_acquire+0x7d80/0x7d80 [ 115.433845][ T6914] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 115.433873][ T6914] soft_cursor+0xa01/0xc30 [ 115.433903][ T6914] bit_cursor+0x16dd/0x1f60 [ 115.433938][ T6914] ? bit_clear_margins+0x550/0x550 [ 115.433968][ T6914] ? get_color+0x2e8/0x4d0 [ 115.433990][ T6914] ? bit_clear_margins+0x550/0x550 [ 115.434017][ T6914] ? fbcon_cursor+0x430/0x640 [ 115.434041][ T6914] hide_cursor+0x7f/0x320 [ 115.434063][ T6914] do_con_write+0x1e1/0x70a0 [ 115.434109][ T6914] ? vt_resize+0xc0/0xc0 [ 115.434145][ T6914] ? __mutex_trylock_common+0x160/0x270 [ 115.434164][ T6914] con_put_char+0x83/0xc0 [ 115.434188][ T6914] ? con_write+0x40/0x40 [ 115.434211][ T6914] ? rcu_is_watching+0x15/0xb0 [ 115.434234][ T6914] ? trace_contention_end+0x39/0xe0 [ 115.434252][ T6914] ? con_write+0x40/0x40 [ 115.434276][ T6914] tty_put_char+0xc9/0x150 [ 115.434299][ T6914] ? do_SAK_work+0x20/0x20 [ 115.434331][ T6914] ? n_tty_receive_char_flow_ctrl+0x164/0x260 [ 115.434360][ T6914] ? mutex_lock_nested+0x20/0x20 [ 115.434381][ T6914] __process_echoes+0x190/0x9f0 [ 115.434403][ T6914] ? _raw_spin_unlock+0x40/0x40 [ 115.434431][ T6914] n_tty_receive_char_flow_ctrl+0x1a7/0x260 [ 115.434460][ T6914] n_tty_receive_buf_standard+0x633/0x54e0 [ 115.434504][ T6914] n_tty_receive_buf_common+0xb0c/0x1380 [ 115.434542][ T6914] ? paste_selection+0x1cb/0x4d0 [ 115.434560][ T6914] paste_selection+0x329/0x4d0 [ 115.434583][ T6914] ? set_selection_kernel+0x17b0/0x17b0 [ 115.434601][ T6914] ? do_task_dead+0xd0/0xd0 [ 115.434620][ T6914] ? __might_fault+0xaa/0x120 [ 115.434639][ T6914] ? __might_fault+0xc6/0x120 [ 115.434657][ T6914] ? __might_fault+0xaa/0x120 [ 115.434677][ T6914] ? tioclinux+0x34e/0x450 [ 115.434700][ T6914] vt_ioctl+0x813/0x1f20 [ 115.434719][ T6914] ? __vt_event_wait+0x260/0x260 [ 115.434741][ T6914] ? __fget_files+0x28/0x460 [ 115.434767][ T6914] ? tty_jobctrl_ioctl+0x378/0xba0 [ 115.434790][ T6914] tty_ioctl+0x91e/0xdc0 [ 115.434812][ T6914] ? tty_get_icount+0xb0/0xb0 [ 115.434835][ T6914] __se_sys_ioctl+0xfd/0x170 [ 115.434859][ T6914] do_syscall_64+0x55/0xb0 [ 115.434881][ T6914] ? clear_bhb_loop+0x40/0x90 [ 115.434905][ T6914] ? clear_bhb_loop+0x40/0x90 [ 115.434931][ T6914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.434962][ T6914] RIP: 0033:0x7f7f92f9e159 [ 115.434984][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.435004][ T6914] RSP: 002b:00007f7f93f38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.435029][ T6914] RAX: ffffffffffffffda RBX: 00007f7f93225fa0 RCX: 00007f7f92f9e159 [ 115.435043][ T6914] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 115.435057][ T6914] RBP: 00007f7f9303506b R08: 0000000000000000 R09: 0000000000000000 [ 115.435069][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.435081][ T6914] R13: 00007f7f93226038 R14: 00007f7f93225fa0 R15: 00007ffc75996908 [ 115.435102][ T6914] [ 115.435108][ T6914] [ 115.435112][ T6914] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003d0a000 allocated at drm_gem_shmem_vmap+0x3c4/0x650 [ 115.435148][ T6914] Memory state around the buggy address: [ 115.435158][ T6914] ffffc90003d09680: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 115.435170][ T6914] ffffc90003d09700: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 115.435182][ T6914] >ffffc90003d09780: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 115.435190][ T6914] ^ [ 115.435200][ T6914] ffffc90003d09800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 115.435212][ T6914] ffffc90003d09880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 115.435221][ T6914] ================================================================== [ 115.446532][ T6914] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 115.446545][ T6914] CPU: 0 PID: 6914 Comm: syz.0.379 Not tainted syzkaller #0 [ 115.446563][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.446574][ T6914] Call Trace: [ 115.446580][ T6914] [ 115.446587][ T6914] dump_stack_lvl+0x18c/0x250 [ 115.446657][ T6914] ? show_regs_print_info+0x20/0x20 [ 115.446678][ T6914] ? load_image+0x420/0x420 [ 115.446702][ T6914] panic+0x2ca/0x720 [ 115.446724][ T6914] ? bpf_jit_dump+0xd0/0xd0 [ 115.446744][ T6914] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 115.446766][ T6914] ? _raw_spin_unlock+0x40/0x40 [ 115.446785][ T6914] ? print_memory_metadata+0x314/0x400 [ 115.446808][ T6914] ? sys_imageblit+0x1bac/0x25d0 [ 115.446827][ T6914] check_panic_on_warn+0x84/0xa0 [ 115.446849][ T6914] ? sys_imageblit+0x1bac/0x25d0 [ 115.446867][ T6914] end_report+0x6f/0x130 [ 115.446888][ T6914] kasan_report+0x128/0x150 [ 115.446909][ T6914] ? sys_imageblit+0x1bac/0x25d0 [ 115.446930][ T6914] sys_imageblit+0x1bac/0x25d0 [ 115.446954][ T6914] ? sys_copyarea+0x2530/0x2530 [ 115.446974][ T6914] ? __mod_timer+0x9b0/0xd60 [ 115.446991][ T6914] ? __lock_acquire+0x7d80/0x7d80 [ 115.447014][ T6914] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 115.447041][ T6914] soft_cursor+0xa01/0xc30 [ 115.447071][ T6914] bit_cursor+0x16dd/0x1f60 [ 115.447105][ T6914] ? bit_clear_margins+0x550/0x550 [ 115.447135][ T6914] ? get_color+0x2e8/0x4d0 [ 115.447157][ T6914] ? bit_clear_margins+0x550/0x550 [ 115.447183][ T6914] ? fbcon_cursor+0x430/0x640 [ 115.447207][ T6914] hide_cursor+0x7f/0x320 [ 115.447230][ T6914] do_con_write+0x1e1/0x70a0 [ 115.447276][ T6914] ? vt_resize+0xc0/0xc0 [ 115.447319][ T6914] ? __mutex_trylock_common+0x160/0x270 [ 115.447339][ T6914] con_put_char+0x83/0xc0 [ 115.447363][ T6914] ? con_write+0x40/0x40 [ 115.447386][ T6914] ? rcu_is_watching+0x15/0xb0 [ 115.447410][ T6914] ? trace_contention_end+0x39/0xe0 [ 115.447428][ T6914] ? con_write+0x40/0x40 [ 115.447451][ T6914] tty_put_char+0xc9/0x150 [ 115.447475][ T6914] ? do_SAK_work+0x20/0x20 [ 115.447499][ T6914] ? n_tty_receive_char_flow_ctrl+0x164/0x260 [ 115.447526][ T6914] ? mutex_lock_nested+0x20/0x20 [ 115.447545][ T6914] __process_echoes+0x190/0x9f0 [ 115.447572][ T6914] ? _raw_spin_unlock+0x40/0x40 [ 115.447596][ T6914] n_tty_receive_char_flow_ctrl+0x1a7/0x260 [ 115.447625][ T6914] n_tty_receive_buf_standard+0x633/0x54e0 [ 115.447669][ T6914] n_tty_receive_buf_common+0xb0c/0x1380 [ 115.447707][ T6914] ? paste_selection+0x1cb/0x4d0 [ 115.447726][ T6914] paste_selection+0x329/0x4d0 [ 115.447748][ T6914] ? set_selection_kernel+0x17b0/0x17b0 [ 115.447767][ T6914] ? do_task_dead+0xd0/0xd0 [ 115.447786][ T6914] ? __might_fault+0xaa/0x120 [ 115.447805][ T6914] ? __might_fault+0xc6/0x120 [ 115.447822][ T6914] ? __might_fault+0xaa/0x120 [ 115.447842][ T6914] ? tioclinux+0x34e/0x450 [ 115.447865][ T6914] vt_ioctl+0x813/0x1f20 [ 115.447884][ T6914] ? __vt_event_wait+0x260/0x260 [ 115.447906][ T6914] ? __fget_files+0x28/0x460 [ 115.447932][ T6914] ? tty_jobctrl_ioctl+0x378/0xba0 [ 115.447955][ T6914] tty_ioctl+0x91e/0xdc0 [ 115.447979][ T6914] ? tty_get_icount+0xb0/0xb0 [ 115.448001][ T6914] __se_sys_ioctl+0xfd/0x170 [ 115.448025][ T6914] do_syscall_64+0x55/0xb0 [ 115.448047][ T6914] ? clear_bhb_loop+0x40/0x90 [ 115.448070][ T6914] ? clear_bhb_loop+0x40/0x90 [ 115.448094][ T6914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.448117][ T6914] RIP: 0033:0x7f7f92f9e159 [ 115.448133][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.448148][ T6914] RSP: 002b:00007f7f93f38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.448169][ T6914] RAX: ffffffffffffffda RBX: 00007f7f93225fa0 RCX: 00007f7f92f9e159 [ 115.448183][ T6914] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 115.448195][ T6914] RBP: 00007f7f9303506b R08: 0000000000000000 R09: 0000000000000000 [ 115.448207][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.448218][ T6914] R13: 00007f7f93226038 R14: 00007f7f93225fa0 R15: 00007ffc75996908 [ 115.448238][ T6914] [ 115.448489][ T6914] Kernel Offset: disabled