last executing test programs: 21.977511757s ago: executing program 0 (id=381): socket(0x840000000002, 0x3, 0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x15f, 0x0) 21.872553918s ago: executing program 0 (id=383): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 21.733609s ago: executing program 0 (id=387): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000080)={0x0, 0x6, 0x17, {0x17, 0x11, "46ff4490d70a1e0ab42eff40f3c390ebf8df59b578"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x4004480d, &(0x7f0000000a00)) 19.596184541s ago: executing program 0 (id=409): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 19.127825467s ago: executing program 0 (id=410): rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 18.499489756s ago: executing program 0 (id=413): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000440)=""/196, 0xc4, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000540)=""/145, 0x91, 0x0, 0x0, 0x3}}, 0x48) 18.362228198s ago: executing program 32 (id=413): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000440)=""/196, 0xc4, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000540)=""/145, 0x91, 0x0, 0x0, 0x3}}, 0x48) 3.252642464s ago: executing program 1 (id=499): unshare(0x22020400) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 3.087466256s ago: executing program 1 (id=501): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 2.166536159s ago: executing program 5 (id=512): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0xfb3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xef, 0x0, &(0x7f00000001c0)) 2.124678019s ago: executing program 4 (id=513): open$dir(&(0x7f0000000080)='./file0\x00', 0xa440, 0x82) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000040, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2.023355551s ago: executing program 5 (id=514): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={0x0, r1}, 0x18) 1.960633392s ago: executing program 5 (id=516): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) r2 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x71) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0xffffffff) 1.832651923s ago: executing program 5 (id=518): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x40, r1, 0x1, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe9d4}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x40}}, 0x40) 1.758813595s ago: executing program 5 (id=519): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.561987068s ago: executing program 2 (id=523): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x11, 0x0, 0x2, 0x1, 0x4, 0x844}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) socket$unix(0x1, 0x5, 0x0) 1.509507469s ago: executing program 2 (id=524): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@data_err_ignore}, {@nombcache}, {@noblock_validity}, {@nodiscard}, {@norecovery}]}, 0xfe, 0x48d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvbLulwI9fK+ILCFJFI/GlpeVFDh7UaMJBExM9YDzVtpBKoYbWRAiR6gGPhsS78b8wnvRi1IsmXvVuSIjhAuplzOzM0NLutlu63YX280lm+zwz0z7Pd2aenWeeZ7cBbFoD2UsS8b+I+D0i+vLsnTsM5D9u3bg09veNS2NJpOnbfyW1/W7euDRW7lr+3vY8k6ZFfkudcq+8FzE6NTVxvsgPzZ79cGjmwsUXJs+Onp44PXFu5PjxI4f39RwbOdqSOLO4bu75ZHrv7hPvXn1z7OTV939KKpHHHYviaJWB/OjW9XSrC+uwHQvSSXf22lvk9v8yv6XelUAndUVEdrqqtfbfF12x9fa2vnj9s45WDlhXaZqmy7wrz6XABpZEp2sAdEZ5o8+ef8ulTV2Pe8L1V/IHoCzuW8WSb+mOSp7YX130fNtKAxFxcu6fr7Il1mkcAgBgoe+y/s/z9fp/lXg4T/RkL/8v5lD6I+KBiNgZEQ9GxK6IeCiitu8jEfHoKstfPEOytP9TuXbXwTUh6/+9VMxt3dn/q5S79HcVuR21+KvJqcmpiUPFMTkY1S2nJpOJ4WXK+P61375otG1h/y9bsvLLvmBRj2vdiwboxkdnR9cS80LXP43Y010v/qQ2LxDFvN7uiNhzl2VMPtvdcNvK8S+j8Z9tWvp1xDP5+Z+LRfGXkobzk8MvHhs5OtQbUxOHhsqrYqmff73yVqPy1xR/C2Tnf1vd6/92/P1Jb8TMhYtnavO1M6sv48ofnzd8plnl9X9iR3H99yTv1Fb0FBs+Hp2dPT8c0ZO8sXT9yPxfK/Pl/ln8Bw/Ub/87Y/5IPBYReyNiX0Q8nj0UFnV/IiKejIgDy8T/46tPfbD6+NszV5rFP77S+Y+F53/1ia4zP3y7cvy9EdHo/B+ppQ4Wa5p5/2u2gms5dgAAAHC/yD8Dn1QG59PJ4GD+Gf5dsa0yNT0z+9yp6Y/Ojeefle+PaqUc6epbMB46XIwNl/mRRfnDxbjxl11ba/nBsemp8U4HD5vc9iXtv1LJ2n/mz65O1w5Ydy2YRwPuU/Xb/8ttrwfQVrVvaTd5/08vr3NlgPZKVmz/1bbVBWg/z/+wedVr/437+oPfrGtlgLZy/4fNq4n2P5f/MAIIG437P2xe2j9sSg2/G19Z01f+2574t/h/hvdKfTZ+Iir3RDU2fqK76X9m0ShRXdqW0768/WdrttzedDnm9+n0OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBr/BcAAP//s1jmbQ==") creat(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.293061611s ago: executing program 5 (id=525): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r0) 1.226239802s ago: executing program 4 (id=526): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x80}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x20000000) 1.214873913s ago: executing program 2 (id=527): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xa26}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r2], 0x2c}}, 0x0) 1.125332784s ago: executing program 4 (id=528): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x20000001, 0x4) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 1.065685324s ago: executing program 4 (id=529): socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40000133}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.016244495s ago: executing program 4 (id=530): creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 937.484616ms ago: executing program 1 (id=531): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={r1, @in={{0x2, 0xfffe, @empty}}, 0x4, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x1, 0xfffffffc, 0x0, 0x2d, 0xfffffffc, 0x81}, 0x9c) 936.807856ms ago: executing program 2 (id=532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8000}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 883.158687ms ago: executing program 1 (id=534): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 822.366228ms ago: executing program 2 (id=535): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x1, 0x4, 0x5, {0x200002, 0x5, 0x5, 0xa, 0x8000, 0x9, 0x4, 0x5, 0x9, 0xd25, 0x7, 0x60b, 0x6d, 0xfffd, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 778.523109ms ago: executing program 4 (id=536): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 721.06622ms ago: executing program 1 (id=538): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fdatasync(r0) 694.07901ms ago: executing program 2 (id=539): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) read$FUSE(r0, &(0x7f0000001840)={0x2020}, 0x45) 424.538984ms ago: executing program 3 (id=543): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x9, 0x1, 0xb57, 0x5500, 0x8b, 0x1, 0x7, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000440)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe, 0xeae6, 0x9, 0x21, 0x1, "ba65a593716b7efb73adca22c3db7b658f95d6ba1725dc6bf266771ef254e3a8efaff6552234e4849a7321a937d9b8a3d6d7b914b1b81e5f6055e90a491e68035d089c9576d40db3b03207598d4e231f051ff0d6cd867f4f73c4e895260241818b80d3c530b42e1efb1bd1fece467b651d880f72bd6e41126d66c35e6b0aa46c"}) 334.013335ms ago: executing program 3 (id=544): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@remote, 0x4e26, 0x3, 0xcb, 0x12d5c, 0x7ff}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 297.107706ms ago: executing program 3 (id=545): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f0000000240)=0x8) 256.166696ms ago: executing program 3 (id=546): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x20802, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r0 = syz_io_uring_setup(0x487, &(0x7f0000000400)={0x0, 0x7079, 0x800, 0x4, 0x284}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 189.619937ms ago: executing program 3 (id=547): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 177.577967ms ago: executing program 1 (id=548): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000085040000"]) 0s ago: executing program 3 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009840)='./file1\x00', 0x0, &(0x7f0000000080)={[{}, {@nolargeio}, {@nouuid}, {@dax_never}, {@uquota}, {@noalign}, {}]}, 0x1, 0x98a5, &(0x7f0000009880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) kernel console output (not intermixed with test programs): to_bond: link becomes ready [ 66.203409][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.212979][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.222905][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.235056][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.243189][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.252187][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.260771][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.271253][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.280309][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.289206][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.336042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.352013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.371153][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.378462][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.388815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.398576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.408349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.418095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.426927][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.434044][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.442712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.451512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.460860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.473196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.497393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.506722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.516317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.535762][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.553553][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.569710][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.578081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.590346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.630947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.645969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.656616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.673133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.681797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.693576][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.703759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.715525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.728176][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.745564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.757658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.768339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.784007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.801295][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.810997][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.820496][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.827870][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.836532][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.845835][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.855039][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.862237][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.871399][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.884125][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.897975][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.907593][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.917405][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.924557][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.938423][ T4181] Bluetooth: hci3: command 0x041b tx timeout [ 66.945023][ T4181] Bluetooth: hci4: command 0x041b tx timeout [ 66.957153][ T4181] Bluetooth: hci2: command 0x041b tx timeout [ 66.963881][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.975936][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.977704][ T4181] Bluetooth: hci1: command 0x041b tx timeout [ 66.986105][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.997622][ T4181] Bluetooth: hci0: command 0x041b tx timeout [ 67.003912][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.028397][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.044475][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.056826][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.067673][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.082140][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.093858][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.106244][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.116632][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.125893][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.138085][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.148052][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.202532][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.224092][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.239661][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.255323][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.264584][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.274354][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.283972][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.293560][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.303578][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.313602][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.323848][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.332606][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.357237][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.378432][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.387570][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.405584][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.419026][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.428189][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.438761][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.452053][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.463545][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.490079][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.499549][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.508030][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.517986][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.566037][ T4178] device veth0_vlan entered promiscuous mode [ 67.582799][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.599959][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.610701][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.620024][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.631302][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.638916][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.683227][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.701823][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.712289][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.730865][ T4176] device veth0_vlan entered promiscuous mode [ 67.743856][ T4178] device veth1_vlan entered promiscuous mode [ 67.762853][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.772140][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.781745][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.830329][ T4176] device veth1_vlan entered promiscuous mode [ 67.840208][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.848341][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.856800][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.866037][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.875324][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.883240][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.925047][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.933802][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.943731][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.953346][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.966918][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.976611][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.986355][ T4178] device veth0_macvtap entered promiscuous mode [ 67.998055][ T4178] device veth1_macvtap entered promiscuous mode [ 68.022260][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.031832][ T4167] device veth0_vlan entered promiscuous mode [ 68.038551][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.048050][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.058018][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.066720][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.075813][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.084614][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.093526][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.101203][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.110975][ T4176] device veth0_macvtap entered promiscuous mode [ 68.128633][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.137192][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.146038][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.167698][ T4176] device veth1_macvtap entered promiscuous mode [ 68.192776][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.201428][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.212326][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.232985][ T4167] device veth1_vlan entered promiscuous mode [ 68.257676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.266944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.275930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.284681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.294089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.302833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.314908][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.325327][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.337040][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.350891][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.361118][ T4174] device veth0_vlan entered promiscuous mode [ 68.373482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.383563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.392885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.402422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.414921][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.427499][ T4176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.437744][ T4176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.447478][ T4176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.457342][ T4176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.481220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.490522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.500054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.508613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.518980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.528499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.538882][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.550137][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.562024][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.576220][ T4178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.585360][ T4178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.594504][ T4178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.603546][ T4178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.615134][ T4168] device veth0_vlan entered promiscuous mode [ 68.623498][ T4174] device veth1_vlan entered promiscuous mode [ 68.632501][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.643418][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.715322][ T4168] device veth1_vlan entered promiscuous mode [ 68.747475][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.765274][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.775104][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.837637][ T4167] device veth0_macvtap entered promiscuous mode [ 68.853901][ T4174] device veth0_macvtap entered promiscuous mode [ 68.863943][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.873654][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.883861][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.893037][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.902989][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.921912][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.935468][ T4174] device veth1_macvtap entered promiscuous mode [ 68.943760][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.954199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.966173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.978204][ T4167] device veth1_macvtap entered promiscuous mode [ 69.007579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.013441][ T4216] Bluetooth: hci2: command 0x040f tx timeout [ 69.016627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.031135][ T4216] Bluetooth: hci4: command 0x040f tx timeout [ 69.031873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.037360][ T4216] Bluetooth: hci3: command 0x040f tx timeout [ 69.053314][ T696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.063000][ T4168] device veth0_macvtap entered promiscuous mode [ 69.066602][ T696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.083213][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.096133][ T4169] Bluetooth: hci0: command 0x040f tx timeout [ 69.098058][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.103013][ T4169] Bluetooth: hci1: command 0x040f tx timeout [ 69.121186][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.131905][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.143952][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.181520][ T4168] device veth1_macvtap entered promiscuous mode [ 69.189652][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.197955][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.207228][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.216121][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.225432][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.238346][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.253645][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.263918][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.274743][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.286516][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.314133][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.323246][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.334723][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.347328][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.357556][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.370108][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.380094][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.392186][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.406262][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.429361][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.437475][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.448843][ T4174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.458526][ T4174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.467573][ T4174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.476693][ T4174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.495117][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.504601][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.513655][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.527080][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.537964][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.553560][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.564186][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.575037][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.585797][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.597535][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.605287][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.616499][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.627671][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.640656][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.651262][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.661839][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.671903][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.683070][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.694231][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.706428][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.716141][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.724993][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.735339][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.752140][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.766808][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.776252][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.785961][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.800257][ T696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.822565][ T696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.824282][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.844240][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.854843][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.865830][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.880446][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.892234][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.902597][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.913396][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.926341][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.959501][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.967874][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.983292][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.002824][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.021189][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.043023][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.051993][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.285747][ T4222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.323583][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.339562][ T4222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.354674][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.368986][ T4255] loop4: detected capacity change from 0 to 1024 [ 70.371652][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.383074][ T696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.392950][ T696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.405128][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.416378][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.547770][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.567286][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.589458][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.593612][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.626549][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.688958][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.700687][ T4222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.708868][ T4222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.731286][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.070264][ T4253] loop3: detected capacity change from 0 to 32768 [ 71.085991][ T4251] Bluetooth: hci4: command 0x0419 tx timeout [ 71.099485][ T4251] Bluetooth: hci2: command 0x0419 tx timeout [ 71.160693][ T4169] Bluetooth: hci1: command 0x0419 tx timeout [ 71.174652][ T4169] Bluetooth: hci0: command 0x0419 tx timeout [ 71.195032][ T4169] Bluetooth: hci3: command 0x0419 tx timeout [ 71.235316][ T4253] XFS (loop3): Mounting V5 Filesystem [ 71.379578][ T4296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.484394][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.491092][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.589327][ T4253] XFS (loop3): Ending clean mount [ 71.694394][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 71.748405][ T4253] capability: warning: `syz.3.6' uses deprecated v2 capabilities in a way that may be insecure [ 71.896926][ T4178] XFS (loop3): Unmounting Filesystem [ 71.908075][ T4311] loop1: detected capacity change from 0 to 512 [ 72.014770][ T4311] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.071066][ T4311] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 72.169894][ T4311] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 72.205167][ T4316] loop4: detected capacity change from 0 to 256 [ 72.205749][ T4311] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 72.221274][ T4311] System zones: 0-2, 18-18, 34-34 [ 72.268564][ T4311] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 72.353338][ T4316] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.367694][ T4321] sctp: [Deprecated]: syz.2.27 (pid 4321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.367694][ T4321] Use struct sctp_sack_info instead [ 72.371343][ T4311] EXT4-fs (loop1): 1 truncate cleaned up [ 72.443412][ T4311] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.514465][ T4323] loop2: detected capacity change from 0 to 24 [ 72.612630][ T26] audit: type=1800 audit(1747282066.639:2): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.22" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 72.639425][ T4325] loop3: detected capacity change from 0 to 1024 [ 72.722848][ T26] audit: type=1800 audit(1747282066.749:3): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.22" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 72.895092][ T4331] loop2: detected capacity change from 0 to 8 [ 72.923773][ T4332] loop4: detected capacity change from 0 to 256 [ 73.055197][ T4334] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 73.062105][ T4334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.078407][ T4331] 9pnet: p9_fd_create_unix (4331): problem connecting socket: ./file0: -30 [ 73.160384][ T4334] vhci_hcd vhci_hcd.0: Device attached [ 73.350670][ T4335] vhci_hcd: connection closed [ 73.352918][ T1216] vhci_hcd: stop threads [ 73.405095][ T1216] vhci_hcd: release socket [ 73.452922][ T1216] vhci_hcd: disconnect device [ 73.469681][ T1107] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 74.223375][ T4345] loop3: detected capacity change from 0 to 32768 [ 74.336110][ T4345] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 74.383644][ T4345] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 74.521959][ T4345] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 74.729639][ T4345] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 75.016837][ T4393] process 'syz.1.59' launched '/dev/fd/3' with NULL argv: empty string added [ 75.217749][ T4399] loop1: detected capacity change from 0 to 512 [ 75.287329][ T4399] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 75.347715][ T4399] EXT4-fs (loop1): invalid journal inode [ 75.382456][ T4399] EXT4-fs (loop1): can't get journal size [ 75.442482][ T4399] EXT4-fs (loop1): 1 truncate cleaned up [ 75.448184][ T4399] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 75.456659][ T4403] loop3: detected capacity change from 0 to 1024 [ 75.509484][ T4381] loop0: detected capacity change from 0 to 32768 [ 75.536237][ T4399] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 42175 (only 1 groups) [ 75.567602][ T4381] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.52 (4381) [ 75.598610][ T4381] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 75.607966][ T4381] BTRFS info (device loop0): enabling auto defrag [ 75.614622][ T4381] BTRFS info (device loop0): disabling tree log [ 75.623956][ T4381] BTRFS info (device loop0): max_inline at 4096 [ 75.639493][ T4381] BTRFS info (device loop0): enabling ssd optimizations [ 75.681306][ T4381] BTRFS info (device loop0): using spread ssd allocation scheme [ 75.698961][ T4381] BTRFS info (device loop0): using free space tree [ 75.715311][ T4381] BTRFS info (device loop0): has skinny extents [ 75.779555][ T4403] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.104706][ T4421] loop4: detected capacity change from 0 to 32768 [ 76.162830][ T4421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.68 (4421) [ 76.205788][ T4421] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 76.214717][ T4421] BTRFS info (device loop4): max_inline at 0 [ 76.220876][ T4421] BTRFS info (device loop4): enabling disk space caching [ 76.227919][ T4421] BTRFS info (device loop4): setting nodatasum [ 76.234148][ T4421] BTRFS info (device loop4): turning off barriers [ 76.240676][ T4421] BTRFS info (device loop4): turning on flush-on-commit [ 76.247644][ T4421] BTRFS info (device loop4): enabling ssd optimizations [ 76.254699][ T4421] BTRFS info (device loop4): using spread ssd allocation scheme [ 76.262846][ T4421] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 76.272753][ T4421] BTRFS info (device loop4): use zstd compression, level 3 [ 76.280543][ T4421] BTRFS info (device loop4): force clearing of disk cache [ 76.288763][ T4421] BTRFS info (device loop4): max_inline at 4096 [ 76.296242][ T4421] BTRFS info (device loop4): disk space caching is enabled [ 76.303581][ T4421] BTRFS info (device loop4): has skinny extents [ 76.312695][ T4437] loop1: detected capacity change from 0 to 64 [ 76.727114][ T4421] BTRFS info (device loop4): clearing free space tree [ 76.734376][ T4421] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.744405][ T4421] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 77.685582][ T4258] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (4258) [ 77.704502][ T4244] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop4 scanned by udevd (4244) [ 77.864114][ T4494] zonefs (nbd0) ERROR: Not a zoned block device [ 77.944312][ T4498] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.093999][ T4505] loop1: detected capacity change from 0 to 256 [ 78.330738][ T4505] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 78.463157][ T4501] loop3: detected capacity change from 0 to 8192 [ 78.552418][ T4501] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 78.599347][ T1107] vhci_hcd: vhci_device speed not set [ 78.599502][ T4501] REISERFS (device loop3): using ordered data mode [ 78.619381][ T4501] reiserfs: using flush barriers [ 78.650455][ T4501] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.719968][ T4501] REISERFS (device loop3): checking transaction log (loop3) [ 79.140613][ T4501] REISERFS (device loop3): Using tea hash to sort names [ 79.164694][ T4501] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 79.244728][ T4501] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 79.490782][ T4501] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 79.568628][ T4501] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 79.619432][ T4501] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 79.754524][ T4537] binder: 4536:4537 ioctl 4018620d 0 returned -22 [ 79.927980][ T4541] loop4: detected capacity change from 0 to 1024 [ 80.026866][ T4543] loop2: detected capacity change from 0 to 1024 [ 80.051172][ T4516] loop0: detected capacity change from 0 to 32768 [ 80.125305][ T4543] EXT4-fs (loop2): Ignoring removed orlov option [ 80.130486][ T4516] ======================================================= [ 80.130486][ T4516] WARNING: The mand mount option has been deprecated and [ 80.130486][ T4516] and is ignored by this kernel. Remove the mand [ 80.130486][ T4516] option from the mount to silence this warning. [ 80.130486][ T4516] ======================================================= [ 80.144287][ T4543] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 80.240510][ T4541] hfsplus: request for non-existent node 1280 in B*Tree [ 80.264702][ T4541] hfsplus: request for non-existent node 1280 in B*Tree [ 80.364918][ T4552] syz.3.103 uses obsolete (PF_INET,SOCK_PACKET) [ 80.375137][ T4543] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 80.525025][ T4516] XFS (loop0): Mounting V5 Filesystem [ 80.796495][ T4516] XFS (loop0): Ending clean mount [ 80.829207][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.878594][ T4516] XFS (loop0): Quotacheck needed: Please wait. [ 81.006983][ T4516] XFS (loop0): Quotacheck: Done. [ 81.109409][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 81.239478][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.259863][ T1107] usb 2-1: config 0 has no interfaces? [ 81.354779][ T4168] XFS (loop0): Unmounting Filesystem [ 81.492841][ T1107] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 81.510132][ T1107] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 81.538777][ T1107] usb 2-1: Product: syz [ 81.559432][ T1107] usb 2-1: Manufacturer: syz [ 81.570542][ T1107] usb 2-1: SerialNumber: syz [ 81.617817][ T1107] usb 2-1: config 0 descriptor?? [ 81.662446][ T4568] loop3: detected capacity change from 0 to 32768 [ 81.683545][ T4566] loop4: detected capacity change from 0 to 32768 [ 81.724498][ T13] cfg80211: failed to load regulatory.db [ 81.872134][ T4568] XFS (loop3): Mounting V5 Filesystem [ 81.900334][ T4566] XFS (loop4): Mounting V5 Filesystem [ 82.039712][ T4568] XFS (loop3): Ending clean mount [ 82.099489][ T4568] XFS (loop3): Quotacheck needed: Please wait. [ 82.125753][ T4566] XFS (loop4): Ending clean mount [ 82.143087][ T4566] XFS (loop4): Quotacheck needed: Please wait. [ 82.299445][ T4568] XFS (loop3): Quotacheck: Done. [ 82.303549][ T4566] XFS (loop4): Quotacheck: Done. [ 82.440386][ T696] tipc: Subscription rejected, illegal request [ 82.459715][ T13] usb 2-1: USB disconnect, device number 2 [ 82.595231][ T4176] XFS (loop4): Unmounting Filesystem [ 82.623457][ T4178] XFS (loop3): Unmounting Filesystem [ 82.749131][ T4169] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.039433][ T4169] usb 3-1: Using ep0 maxpacket: 16 [ 83.379635][ T4169] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 83.388753][ T4169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.427994][ T4169] usb 3-1: Product: syz [ 83.438073][ T4169] usb 3-1: Manufacturer: syz [ 83.446153][ T4169] usb 3-1: SerialNumber: syz [ 83.460733][ T4169] usb 3-1: config 0 descriptor?? [ 83.531830][ T4169] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 83.574818][ T4602] loop4: detected capacity change from 0 to 4096 [ 83.583123][ T4169] usb 3-1: Detected FT-X [ 83.626490][ T4602] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 83.749490][ T4169] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 83.768655][ T4613] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.019187][ T4602] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 84.193796][ T144] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 84.233213][ T4176] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 84.249325][ T4176] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 84.286103][ T4169] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 84.294711][ T4176] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 84.321784][ T4222] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 84.330129][ T4176] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 84.499886][ T4628] loop4: detected capacity change from 0 to 8 [ 84.525585][ T4214] usb 3-1: USB disconnect, device number 2 [ 84.588953][ T4214] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 84.658377][ T4214] ftdi_sio 3-1:0.0: device disconnected [ 84.910438][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 84.939126][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 84.948450][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 84.957868][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 84.967094][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 84.970683][ T4639] loop4: detected capacity change from 0 to 32768 [ 84.976138][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 85.157200][ T4639] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 85.157200][ T4639] [ 85.176557][ T4639] ERROR: (device loop4): remounting filesystem as read-only [ 85.186004][ T4639] ERROR: (device loop4): diWrite: ixpxd invalid [ 85.186004][ T4639] [ 85.194605][ T4639] ERROR: (device loop4): txCommit: [ 85.194605][ T4639] [ 85.299762][ T4169] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.569388][ T4169] usb 4-1: Using ep0 maxpacket: 16 [ 85.689884][ T4169] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 85.718479][ T4169] usb 4-1: config 0 has no interface number 0 [ 85.750122][ T4169] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.805247][ T4676] loop1: detected capacity change from 0 to 4096 [ 85.811972][ T4169] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.812051][ T4169] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 85.812076][ T4169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.837847][ T4169] usb 4-1: config 0 descriptor?? [ 86.016146][ T4676] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 86.133121][ T4676] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 86.395642][ T4169] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 86.435499][ T4169] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 86.479410][ T4169] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 86.487484][ T4651] loop2: detected capacity change from 0 to 32768 [ 86.517142][ T4169] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 86.538575][ T4169] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 86.571835][ T4169] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 86.580967][ T4706] loop0: detected capacity change from 0 to 2048 [ 86.611452][ T4169] elan 0003:04F3:0755.0001: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input1 [ 86.633088][ T4169] elan 0003:04F3:0755.0001: Input device is not registered [ 86.708017][ T4169] elan: probe of 0003:04F3:0755.0001 failed with error -119 [ 86.724941][ T4706] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.766542][ T4651] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 86.841902][ T4169] usb 4-1: USB disconnect, device number 2 [ 86.982359][ T4711] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 87.044336][ T4714] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 87.091114][ T4714] netlink: 3 bytes leftover after parsing attributes in process `syz.1.141'. [ 87.190310][ T4712] fido_id[4712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 87.361828][ T4174] ocfs2: Unmounting device (7,2) on (node local) [ 88.368161][ T4739] loop0: detected capacity change from 0 to 4096 [ 88.398991][ T4745] loop1: detected capacity change from 0 to 1024 [ 88.484086][ T4721] loop3: detected capacity change from 0 to 32768 [ 88.493543][ T4739] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 88.530321][ T4745] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.558775][ T4739] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 88.571104][ T4739] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 88.615767][ T4756] loop4: detected capacity change from 0 to 128 [ 88.627832][ T4721] XFS (loop3): Mounting V5 Filesystem [ 88.634074][ T4739] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 88.646049][ T4739] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 88.661156][ T4739] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 88.674198][ T4739] ntfs: volume version 3.1. [ 88.687953][ T4739] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 88.700331][ T4739] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 88.717968][ T4739] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 88.767794][ T4739] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 88.801850][ T4756] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.919691][ T4756] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.942814][ T4721] XFS (loop3): Ending clean mount [ 88.997686][ T4721] XFS (loop3): Quotacheck needed: Please wait. [ 89.032426][ T4756] fscrypt (loop4, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop4' because it doesn't have stable inode numbers [ 89.080508][ T4721] XFS (loop3): Quotacheck: Done. [ 89.317486][ T4763] loop2: detected capacity change from 0 to 32768 [ 89.547928][ T4763] XFS (loop2): Mounting V5 Filesystem [ 89.554164][ T4178] XFS (loop3): Unmounting Filesystem [ 89.744684][ T4773] loop1: detected capacity change from 0 to 32768 [ 89.760321][ T4773] XFS: attr2 mount option is deprecated. [ 89.851359][ T4763] XFS (loop2): Ending clean mount [ 89.917616][ T4773] XFS (loop1): Mounting V5 Filesystem [ 90.163735][ T4784] ODEBUG: Out of memory. ODEBUG disabled [ 90.209547][ T4773] XFS (loop1): Ending clean mount [ 90.239972][ T4773] XFS (loop1): Quotacheck needed: Please wait. [ 90.305197][ T4174] XFS (loop2): Unmounting Filesystem [ 90.357373][ T4773] XFS (loop1): Quotacheck: Done. [ 90.657402][ T4167] XFS (loop1): Unmounting Filesystem [ 90.944945][ T4807] loop2: detected capacity change from 0 to 256 [ 91.118315][ T4807] FAT-fs (loop2): Directory bread(block 64) failed [ 91.154673][ T4807] FAT-fs (loop2): Directory bread(block 65) failed [ 91.179293][ T4807] FAT-fs (loop2): Directory bread(block 66) failed [ 91.214423][ T4807] FAT-fs (loop2): Directory bread(block 67) failed [ 91.239774][ T4807] FAT-fs (loop2): Directory bread(block 68) failed [ 91.264092][ T4807] FAT-fs (loop2): Directory bread(block 69) failed [ 91.302526][ T4807] FAT-fs (loop2): Directory bread(block 70) failed [ 91.332809][ T4807] FAT-fs (loop2): Directory bread(block 71) failed [ 91.360416][ T4807] FAT-fs (loop2): Directory bread(block 72) failed [ 91.390771][ T4807] FAT-fs (loop2): Directory bread(block 73) failed [ 91.713782][ T4804] loop3: detected capacity change from 0 to 40427 [ 91.801248][ T4804] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 1) [ 91.821391][ T4804] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 91.867242][ T4804] F2FS-fs (loop3): invalid crc value [ 91.889303][ T4251] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.897403][ T4804] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 91.927279][ T4824] loop2: detected capacity change from 0 to 8 [ 91.969496][ T4804] F2FS-fs (loop3): Found nat_bits in checkpoint [ 92.135228][ T4804] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 92.153840][ T4804] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 92.169234][ T4251] usb 5-1: Using ep0 maxpacket: 32 [ 92.242278][ T4804] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 92.258340][ T4835] loop0: detected capacity change from 0 to 1024 [ 92.270275][ T4804] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.329442][ T4251] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 92.358019][ T4251] usb 5-1: config 0 has no interface number 0 [ 92.505655][ T4835] hfsplus: xattr searching failed [ 92.527569][ T4835] hfsplus: xattr searching failed [ 92.590050][ T4251] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 92.604357][ T4839] loop2: detected capacity change from 0 to 4096 [ 92.609142][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.634436][ T4680] hfsplus: b-tree write err: -5, ino 3 [ 92.649022][ T4251] usb 5-1: Product: syz [ 92.670002][ T4251] usb 5-1: Manufacturer: syz [ 92.673559][ T4168] hfsplus: node 4:3 still has 2 user(s)! [ 92.689361][ T4251] usb 5-1: SerialNumber: syz [ 92.737656][ T4251] usb 5-1: config 0 descriptor?? [ 92.764809][ T4178] attempt to access beyond end of device [ 92.764809][ T4178] loop3: rw=2049, want=45104, limit=40427 [ 92.780642][ T4839] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 92.791994][ T4251] smsc95xx v2.0.0 [ 92.837126][ T4828] loop1: detected capacity change from 0 to 32768 [ 93.006573][ T4846] loop0: detected capacity change from 0 to 64 [ 93.055595][ T4828] ERROR: (device loop1): dbFindCtl: Corrupt dmapctl page [ 93.055595][ T4828] [ 93.116539][ T4828] ERROR: (device loop1): dbDiscardAG: -EIO [ 93.116539][ T4828] [ 93.139231][ T4174] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 93.175077][ T4846] minix_free_block (loop0:1): bit already cleared [ 93.192983][ T4846] minix_free_block (loop0:4): bit already cleared [ 93.206304][ T4846] minix_free_block (loop0:3): bit already cleared [ 93.215241][ T4846] minix_free_block (loop0:2): bit already cleared [ 93.226346][ T4846] minix_free_block (loop0:1): bit already cleared [ 93.239819][ T4251] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 93.261024][ T4251] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 93.759257][ T4251] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71 [ 93.784640][ T4856] loop1: detected capacity change from 0 to 2048 [ 93.792586][ T4251] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 93.846661][ T4251] usb 5-1: USB disconnect, device number 2 [ 93.881555][ T4856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.982196][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 93.982211][ T26] audit: type=1800 audit(1747282344.011:6): pid=4856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.191" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 94.009027][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.093993][ T26] audit: type=1800 audit(1747282344.101:7): pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.191" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 94.343110][ T4848] loop2: detected capacity change from 0 to 40427 [ 94.573967][ T4848] F2FS-fs (loop2): invalid crc value [ 94.641621][ T4848] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.905237][ T4848] F2FS-fs (loop2): Start checkpoint disabled! [ 94.924146][ T4876] loop1: detected capacity change from 0 to 40427 [ 94.949361][ T4848] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 95.025575][ T4876] F2FS-fs (loop1): invalid crc value [ 95.060210][ T4876] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.124942][ T4876] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.263442][ T26] audit: type=1800 audit(1747282345.291:8): pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.199" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 95.387564][ T4167] attempt to access beyond end of device [ 95.387564][ T4167] loop1: rw=2049, want=45104, limit=40427 [ 95.407060][ T4893] Bluetooth: hci0: load_link_keys: too big key_count value 7168 [ 95.426894][ T4680] attempt to access beyond end of device [ 95.426894][ T4680] loop2: rw=2049, want=40976, limit=40427 [ 95.570971][ T4865] loop3: detected capacity change from 0 to 40427 [ 95.616954][ T4898] loop0: detected capacity change from 0 to 1024 [ 95.642096][ T4865] F2FS-fs (loop3): invalid crc value [ 95.694322][ T4898] EXT4-fs (loop0): Ignoring removed nobh option [ 95.721552][ T4898] EXT4-fs (loop0): Ignoring removed bh option [ 95.728519][ T4865] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.798561][ T4906] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.816080][ T4898] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nobarrier,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,usrquota,,errors=continue. Quota mode: writeback. [ 95.871509][ T4865] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.210996][ T4178] attempt to access beyond end of device [ 96.210996][ T4178] loop3: rw=2049, want=45112, limit=40427 [ 96.345450][ T4920] sock: sock_set_timeout: `syz.0.212' (pid 4920) tries to set negative timeout [ 96.447440][ T4922] loop2: detected capacity change from 0 to 2048 [ 96.554988][ T4922] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.613019][ T4922] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 96.635293][ T4922] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 96.650939][ T4922] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.650939][ T4922] [ 96.717735][ T4922] EXT4-fs (loop2): Total free blocks count 0 [ 96.769193][ T4922] EXT4-fs (loop2): Free/Dirty block details [ 96.776956][ T4940] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 96.832212][ T4948] loop4: detected capacity change from 0 to 256 [ 96.850544][ T4922] EXT4-fs (loop2): free_blocks=2415919504 [ 96.856453][ T4922] EXT4-fs (loop2): dirty_blocks=32 [ 96.871267][ T4922] EXT4-fs (loop2): Block reservation details [ 96.885650][ T4940] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.885650][ T4940] [ 96.895241][ T4922] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 96.911905][ T4948] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 97.129681][ T4959] netlink: 6 bytes leftover after parsing attributes in process `syz.3.226'. [ 97.129789][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 97.132312][ T4959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.201457][ T4959] syz.3.226 (4959) used greatest stack depth: 20928 bytes left [ 97.264737][ T4964] loop3: detected capacity change from 0 to 512 [ 97.326543][ T4964] EXT4-fs (loop3): Ignoring removed bh option [ 97.363015][ T4964] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 97.399343][ T4964] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 97.423290][ T4964] EXT4-fs (loop3): group descriptors corrupted! [ 97.439722][ T4970] loop0: detected capacity change from 0 to 256 [ 97.480888][ T4970] exfat: Deprecated parameter 'namecase' [ 97.500489][ T4970] exfat: Deprecated parameter 'utf8' [ 97.505855][ T4970] exfat: Deprecated parameter 'namecase' [ 97.533658][ T4970] exfat: Deprecated parameter 'utf8' [ 97.569290][ T4169] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.584648][ T4970] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 97.850994][ T4968] loop2: detected capacity change from 0 to 32768 [ 97.918419][ T26] audit: type=1800 audit(1747282347.941:9): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.232" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 97.964584][ T4169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.001072][ T4169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.058106][ T4169] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.064245][ T4988] loop3: detected capacity change from 0 to 1024 [ 98.103303][ T4991] loop0: detected capacity change from 0 to 2048 [ 98.103987][ T4169] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.127791][ T4169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.140059][ T4169] usb 5-1: config 0 descriptor?? [ 98.146216][ T4991] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 98.164543][ T4991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.216366][ T4991] UDF-fs: unknown compression code (0) [ 98.225412][ T4991] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 98.290014][ T4696] hfsplus: b-tree write err: -5, ino 4 [ 98.359267][ T4245] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.651524][ T4169] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x3 [ 98.684902][ T4169] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x4 [ 98.719361][ T4245] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.721034][ T4169] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 98.737610][ T4245] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.763172][ T4245] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.807424][ T4245] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.817119][ T4169] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 98.830066][ T4245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.867514][ T4245] usb 2-1: config 0 descriptor?? [ 99.124175][ T4215] usb 5-1: USB disconnect, device number 3 [ 99.231316][ T5015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.247'. [ 99.250881][ T5015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.247'. [ 99.352451][ T4245] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x2 [ 99.370562][ T4245] plantronics 0003:047F:FFFF.0003: item fetching failed at offset 14/15 [ 99.395338][ T4245] plantronics 0003:047F:FFFF.0003: parse failed [ 99.408669][ T4245] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22 [ 99.544320][ T5014] loop2: detected capacity change from 0 to 32768 [ 99.564485][ T4215] usb 2-1: USB disconnect, device number 3 [ 99.689602][ T4169] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.715342][ T5014] find_entry called with index = 0 [ 99.732117][ T5014] read_mapping_page failed! [ 99.739048][ T5014] ERROR: (device loop2): txCommit: [ 99.739048][ T5014] [ 99.752802][ T5019] read_mapping_page failed! [ 99.757681][ T5019] ERROR: (device loop2): txCommit: [ 99.757681][ T5019] [ 99.810726][ T4696] read_mapping_page failed! [ 99.813876][ T5022] loop4: detected capacity change from 0 to 2048 [ 99.816925][ T4696] ERROR: (device loop2): txCommit: [ 99.816925][ T4696] [ 99.830994][ T4696] jfs_write_inode: jfs_commit_inode failed! [ 99.842216][ T5022] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=26504, location=26504 [ 99.872587][ T5022] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.096202][ T5028] loop2: detected capacity change from 0 to 1024 [ 100.114393][ T4169] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.135707][ T4169] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.153658][ T4169] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.165981][ T4169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.209834][ T5017] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.255733][ T4680] hfsplus: b-tree write err: -5, ino 3 [ 100.278294][ T4174] hfsplus: node 4:3 still has 1 user(s)! [ 100.376650][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 100.419269][ T4214] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.497662][ T4215] usb 1-1: USB disconnect, device number 2 [ 100.592122][ T5045] loop2: detected capacity change from 0 to 512 [ 100.626409][ T5041] syz.4.260 (5041) used greatest stack depth: 20840 bytes left [ 100.660064][ T4214] usb 2-1: Using ep0 maxpacket: 8 [ 100.680916][ T5045] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.739469][ T5045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.767439][ T5045] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.782495][ T4214] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 100.796448][ T4214] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.807894][ T5045] EXT4-fs (loop2): 1 truncate cleaned up [ 100.822385][ T4214] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.835716][ T5045] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x000000000000006c,abort,nojournal_checksum,quota,,errors=continue. Quota mode: writeback. [ 100.866873][ T4214] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.877568][ T4214] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.894471][ T4214] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.903929][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.154534][ T4169] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 101.164804][ T5067] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.179329][ T4214] usb 2-1: GET_CAPABILITIES returned 0 [ 101.198823][ T4214] usbtmc 2-1:16.0: can't read capabilities [ 101.453049][ T5073] loop0: detected capacity change from 0 to 8192 [ 101.517324][ T5069] loop3: detected capacity change from 0 to 32768 [ 101.535367][ T5073] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 101.545104][ T5073] REISERFS (device loop0): using ordered data mode [ 101.560491][ T5073] reiserfs: using flush barriers [ 101.568696][ T5073] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.594695][ T5073] REISERFS (device loop0): checking transaction log (loop0) [ 101.606141][ T5073] REISERFS (device loop0): Using r5 hash to sort names [ 101.615732][ T5069] XFS (loop3): Mounting V5 Filesystem [ 101.622712][ T5073] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 101.689605][ T4251] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.730693][ T5069] XFS (loop3): Ending clean mount [ 101.769225][ T4169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.780647][ T4169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.799116][ T4169] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.812390][ T4169] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.821556][ T4169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.837327][ T4178] XFS (loop3): Unmounting Filesystem [ 101.840253][ T4169] usb 5-1: config 0 descriptor?? [ 101.844468][ T5084] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 101.928668][ T1107] usb 2-1: USB disconnect, device number 4 [ 101.955118][ T4251] usb 3-1: Using ep0 maxpacket: 8 [ 102.293996][ T4251] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 102.311196][ T5096] loop3: detected capacity change from 0 to 128 [ 102.312642][ T4251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.341612][ T4169] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 102.366296][ T4169] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 102.374710][ T4251] usb 3-1: Product: syz [ 102.378937][ T4251] usb 3-1: Manufacturer: syz [ 102.390410][ T4251] usb 3-1: SerialNumber: syz [ 102.395524][ T4169] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 102.417214][ T4251] usb 3-1: config 0 descriptor?? [ 102.472261][ T4251] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 102.630963][ T5106] loop1: detected capacity change from 0 to 128 [ 102.655925][ T1107] usb 5-1: USB disconnect, device number 4 [ 103.214009][ T5108] loop4: detected capacity change from 0 to 1024 [ 103.262176][ T5108] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.274518][ T5108] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.306877][ T5108] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.285: bg 0: block 393: padding at end of block bitmap is not set [ 103.423901][ T26] audit: type=1800 audit(1747282353.331:10): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.285" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 103.444293][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.565522][ T4251] usb 3-1: USB disconnect, device number 3 [ 103.897540][ T5103] loop0: detected capacity change from 0 to 262144 [ 103.995760][ T5103] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.281 (5103) [ 104.063551][ T5103] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 104.063981][ T5116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.286'. [ 104.073470][ T5103] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 104.093144][ T5103] BTRFS info (device loop0): trying to use backup root at mount time [ 104.101602][ T5103] BTRFS info (device loop0): max_inline at 0 [ 104.107714][ T5103] BTRFS info (device loop0): setting nodatacow, compression disabled [ 104.115866][ T5103] BTRFS info (device loop0): doing ref verification [ 104.122600][ T5103] BTRFS info (device loop0): disabling tree log [ 104.128876][ T5103] BTRFS info (device loop0): using free space tree [ 104.135599][ T5103] BTRFS info (device loop0): has skinny extents [ 104.141995][ T5103] BTRFS info (device loop0): flagging fs with big metadata feature [ 104.420419][ T5103] BTRFS info (device loop0): enabling ssd optimizations [ 104.727066][ T5146] loop3: detected capacity change from 0 to 40427 [ 104.864761][ T5146] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 104.902864][ T5146] F2FS-fs (loop3): invalid crc value [ 104.943852][ T5146] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.058623][ T5155] loop1: detected capacity change from 0 to 512 [ 105.158827][ T5155] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.206878][ T5146] F2FS-fs (loop3): Start checkpoint disabled! [ 105.273397][ T5146] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 105.387438][ T5146] attempt to access beyond end of device [ 105.387438][ T5146] loop3: rw=10241, want=45104, limit=40427 [ 105.901652][ T4659] attempt to access beyond end of device [ 105.901652][ T4659] loop3: rw=1, want=45104, limit=40427 [ 105.914309][ T5188] loop4: detected capacity change from 0 to 64 [ 105.955372][ T4659] attempt to access beyond end of device [ 105.955372][ T4659] loop3: rw=2049, want=40976, limit=40427 [ 106.001098][ T5190] capability: warning: `syz.1.304' uses 32-bit capabilities (legacy support in use) [ 106.153409][ T5193] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 106.209017][ T5193] netlink: 'syz.1.306': attribute type 2 has an invalid length. [ 106.273880][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 106.444761][ T5199] loop4: detected capacity change from 0 to 512 [ 106.576327][ T5199] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 106.700043][ T5199] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.923173][ T5186] loop2: detected capacity change from 0 to 32768 [ 106.970540][ T5186] XFS: ikeep mount option is deprecated. [ 107.015904][ T5217] loop4: detected capacity change from 0 to 1024 [ 107.074863][ T5186] XFS (loop2): Mounting V5 Filesystem [ 107.114904][ T5217] EXT4-fs (loop4): Ignoring removed nobh option [ 107.168564][ T5217] EXT4-fs (loop4): Ignoring removed bh option [ 107.199188][ T5217] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.304054][ T5217] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 107.330371][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.376086][ T5186] XFS (loop2): Ending clean mount [ 107.407090][ T5186] XFS (loop2): Quotacheck needed: Please wait. [ 107.533030][ T5186] XFS (loop2): Quotacheck: Done. [ 107.701746][ T4174] XFS (loop2): Unmounting Filesystem [ 107.860932][ T5213] loop3: detected capacity change from 0 to 32768 [ 107.930111][ T5231] loop4: detected capacity change from 0 to 32768 [ 108.013314][ T5231] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.314 (5231) [ 108.162284][ T5233] loop1: detected capacity change from 0 to 32768 [ 108.176998][ T5231] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 108.186044][ T5231] BTRFS info (device loop4): setting nodatacow, compression disabled [ 108.194270][ T5231] BTRFS info (device loop4): enabling ssd optimizations [ 108.201374][ T5231] BTRFS info (device loop4): setting datacow [ 108.207449][ T5231] BTRFS info (device loop4): doing ref verification [ 108.214425][ T5231] BTRFS info (device loop4): force clearing of disk cache [ 108.221618][ T5231] BTRFS info (device loop4): turning off barriers [ 108.228092][ T5231] BTRFS info (device loop4): using spread ssd allocation scheme [ 108.236357][ T5231] BTRFS info (device loop4): using free space tree [ 108.243037][ T5231] BTRFS info (device loop4): has skinny extents [ 108.393195][ T4346] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4346) [ 108.406714][ T5233] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 108.438781][ T5233] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 108.515037][ T5231] BTRFS info (device loop4): clearing free space tree [ 108.522028][ T5231] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.531892][ T5231] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.608885][ T5231] BTRFS info (device loop4): creating free space tree [ 108.618576][ T5231] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.628347][ T5231] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.714395][ T4167] ocfs2: Unmounting device (7,1) on (node local) [ 108.812326][ T5260] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 108.862537][ T5261] input: syz0 as /devices/virtual/input/input7 [ 108.920574][ T5229] loop0: detected capacity change from 0 to 32768 [ 108.937403][ T5260] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 108.944112][ T5261] input: failed to attach handler leds to device input7, error: -6 [ 109.304440][ T5229] XFS (loop0): Mounting V5 Filesystem [ 109.488695][ T5229] XFS (loop0): Ending clean mount [ 109.501122][ T5229] XFS (loop0): Quotacheck needed: Please wait. [ 109.649627][ T5229] XFS (loop0): Quotacheck: Done. [ 109.782194][ T26] audit: type=1800 audit(1747282359.811:11): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.293" name="file2" dev="loop0" ino=9287 res=0 errno=0 [ 109.881075][ T5277] loop3: detected capacity change from 0 to 8192 [ 109.971321][ T5277] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 110.006011][ T5293] netlink: 96 bytes leftover after parsing attributes in process `syz.1.329'. [ 110.042117][ T5277] REISERFS (device loop3): using ordered data mode [ 110.048681][ T5277] reiserfs: using flush barriers [ 110.066884][ T4168] XFS (loop0): Unmounting Filesystem [ 110.132304][ T5301] loop1: detected capacity change from 0 to 512 [ 110.160528][ T5277] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.193739][ T5277] REISERFS (device loop3): checking transaction log (loop3) [ 110.307090][ T5277] REISERFS (device loop3): Using r5 hash to sort names [ 110.319526][ T5277] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 110.495821][ T5301] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.331: corrupted inode contents [ 110.516061][ T5301] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #16: comm syz.1.331: mark_inode_dirty error [ 110.532101][ T5301] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.331: corrupted inode contents [ 110.551248][ T5301] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.331: mark_inode_dirty error [ 110.578781][ T5301] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.331: corrupted inode contents [ 110.604445][ T5301] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 110.617642][ T5306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 110.628829][ T5301] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.331: corrupted inode contents [ 110.698022][ T5301] EXT4-fs error (device loop1): ext4_truncate:4273: inode #16: comm syz.1.331: mark_inode_dirty error [ 110.744500][ T5301] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 110.809542][ T5301] EXT4-fs (loop1): 1 truncate cleaned up [ 110.815490][ T5301] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.878250][ T5312] loop3: detected capacity change from 0 to 128 [ 110.884853][ T5301] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.011974][ T5312] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 111.059214][ T5312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.176947][ T5312] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 264 not allocated in directory (ino 87) [ 111.213389][ T5312] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 264 not allocated in directory (ino 87) [ 111.274473][ T5312] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 87) has entry where CRC length (1) does not match entry length (48) [ 111.378704][ T5321] loop4: detected capacity change from 0 to 2048 [ 111.538134][ T5321] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.645650][ T5311] loop0: detected capacity change from 0 to 32768 [ 111.802604][ T5311] JBD2: Ignoring recovery information on journal [ 111.971888][ T5311] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.978444][ T5339] loop4: detected capacity change from 0 to 256 [ 112.317623][ T4168] ocfs2: Unmounting device (7,0) on (node local) [ 112.745421][ T5332] loop1: detected capacity change from 0 to 32768 [ 113.059065][ C0] sched: RT throttling activated [ 113.878226][ T5341] loop3: detected capacity change from 0 to 262144 [ 113.894576][ T5332] XFS (loop1): Mounting V5 Filesystem [ 114.030508][ T5341] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.347 (5341) [ 114.098932][ T5341] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 114.108502][ T5341] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 114.119347][ T5341] BTRFS info (device loop3): trying to use backup root at mount time [ 114.119952][ T5332] XFS (loop1): Ending clean mount [ 114.127533][ T5341] BTRFS info (device loop3): max_inline at 0 [ 114.138557][ T5341] BTRFS info (device loop3): setting nodatacow, compression disabled [ 114.146738][ T5341] BTRFS info (device loop3): doing ref verification [ 114.153545][ T5341] BTRFS info (device loop3): disabling tree log [ 114.159912][ T5341] BTRFS info (device loop3): using free space tree [ 114.166597][ T5341] BTRFS info (device loop3): has skinny extents [ 114.172945][ T5341] BTRFS info (device loop3): flagging fs with big metadata feature [ 114.233163][ T5332] XFS (loop1): Quotacheck needed: Please wait. [ 114.368756][ T5341] BTRFS info (device loop3): enabling ssd optimizations [ 114.385095][ T5332] XFS (loop1): Quotacheck: Done. [ 114.555472][ T26] audit: type=1800 audit(1747282364.581:12): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.343" name="file2" dev="loop1" ino=9287 res=0 errno=0 [ 114.576028][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.719574][ T4476] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.728094][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.940701][ T4167] XFS (loop1): Unmounting Filesystem [ 114.984060][ T4476] usb 1-1: Using ep0 maxpacket: 8 [ 114.989209][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 115.117658][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.129036][ T4476] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.137281][ T4476] usb 1-1: config 0 has no interface number 0 [ 115.146373][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.156773][ T4476] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 17640, setting to 1024 [ 115.168296][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.181509][ T4476] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.190868][ T21] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.201663][ T4476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.210821][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.221099][ T4476] usb 1-1: config 0 descriptor?? [ 115.240362][ T21] usb 5-1: config 0 descriptor?? [ 115.244255][ T5386] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.288892][ T4476] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 115.552755][ T7] usb 1-1: USB disconnect, device number 3 [ 115.588831][ T5414] device batadv_slave_0 entered promiscuous mode [ 115.616380][ T5411] device batadv_slave_0 left promiscuous mode [ 115.722368][ T26] audit: type=1326 audit(1747282365.741:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3417b88969 code=0x7ffc0000 [ 115.741711][ T21] microsoft 0003:045E:07DA.0005: unknown main item tag 0x1 [ 115.745028][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.776365][ T21] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input8 [ 115.797116][ T26] audit: type=1326 audit(1747282365.751:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3417b88969 code=0x7ffc0000 [ 115.866297][ T26] audit: type=1326 audit(1747282365.781:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f3417b88969 code=0x7ffc0000 [ 115.897025][ T21] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 115.934325][ T26] audit: type=1326 audit(1747282365.791:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3417b88969 code=0x7ffc0000 [ 115.966714][ T21] usb 5-1: USB disconnect, device number 5 [ 116.018923][ T26] audit: type=1326 audit(1747282365.791:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3417b88969 code=0x7ffc0000 [ 116.041168][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.090634][ T5428] loop1: detected capacity change from 0 to 1024 [ 116.166314][ T5429] fido_id[5429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 116.255901][ T5428] hfsplus: xattr searching failed [ 116.287021][ T696] hfsplus: bad catalog folder entry [ 116.337162][ T5435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.376'. [ 116.421898][ T5439] loop2: detected capacity change from 0 to 512 [ 116.515290][ T5439] EXT4-fs (loop2): inline encryption not supported [ 116.554929][ T5439] EXT4-fs (loop2): Mount option "nodelalloc" incompatible with ext3 [ 116.555965][ T5445] Zero length message leads to an empty skb [ 116.714755][ T5454] loop1: detected capacity change from 0 to 256 [ 116.734103][ T5455] loop4: detected capacity change from 0 to 24 [ 116.791619][ T5455] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 116.814790][ T5454] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.862564][ T5455] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 116.926778][ T26] audit: type=1800 audit(1747282366.951:18): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.385" name="file1" dev="loop1" ino=1048609 res=0 errno=0 [ 116.980012][ T5454] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 117.003614][ T5454] FAT-fs (loop1): Filesystem has been set read-only [ 117.017993][ T5454] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 117.043024][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 117.073729][ T5468] loop2: detected capacity change from 0 to 64 [ 117.093890][ T5469] No such timeout policy "syz0" [ 117.135025][ T5471] loop3: detected capacity change from 0 to 1024 [ 117.242542][ T5476] loop4: detected capacity change from 0 to 512 [ 117.251257][ T5471] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,grpquota,debug_want_extra_isize=0x0000000000000080,lazytime,noblock_validity,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 117.274069][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.410489][ T5479] loop1: detected capacity change from 0 to 1024 [ 117.437915][ T5476] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.449379][ T5476] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.472054][ T5479] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 117.484009][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 117.504790][ T7] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 117.509299][ T5479] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 117.532390][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.545856][ T5479] JBD2: no valid journal superblock found [ 117.558385][ T5479] EXT4-fs (loop1): error loading journal [ 117.586446][ T7] usb 1-1: config 0 descriptor?? [ 117.611568][ T5459] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.689148][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.778026][ T5491] loop4: detected capacity change from 0 to 256 [ 117.947518][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 118.069469][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.102865][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.124223][ T21] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 118.131806][ T5497] loop1: detected capacity change from 0 to 32768 [ 118.136808][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.152560][ T7] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 118.175344][ T21] usb 4-1: config 0 descriptor?? [ 118.223174][ T5497] XFS (loop1): Mounting V5 Filesystem [ 118.340963][ T4476] usb 1-1: USB disconnect, device number 4 [ 118.368389][ T5497] XFS (loop1): Ending clean mount [ 118.385148][ T5497] XFS (loop1): Quotacheck needed: Please wait. [ 118.431777][ T5497] XFS (loop1): Quotacheck: Done. [ 118.473307][ T4167] XFS (loop1): Unmounting Filesystem [ 118.609229][ T5398] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.669245][ T4487] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.707159][ T21] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 118.849225][ T5398] usb 3-1: Using ep0 maxpacket: 32 [ 118.919250][ T4487] usb 5-1: Using ep0 maxpacket: 8 [ 118.942672][ T5520] loop0: detected capacity change from 0 to 1024 [ 118.969326][ T5398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.988438][ T5398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.998733][ T5398] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 119.008354][ T5398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.020551][ T21] usb 4-1: USB disconnect, device number 3 [ 119.028087][ T5398] usb 3-1: config 0 descriptor?? [ 119.039368][ T4487] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.055260][ T4487] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.066396][ T4487] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 119.077760][ T5520] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,dax=inode,nolazytime,abort,dax=inode,lazytime,noload,bsddf,noauto_da_alloc,,errors=continue. Quota mode: none. [ 119.085185][ T4487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.130921][ T5518] loop1: detected capacity change from 0 to 32768 [ 119.138875][ T4487] usb 5-1: config 0 descriptor?? [ 119.176193][ T5518] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.408 (5518) [ 119.200572][ T5520] EXT4-fs error (device loop0): ext4_remount:5855: comm syz.0.409: Abort forced by user [ 119.213715][ T5520] EXT4-fs (loop0): Remounting filesystem read-only [ 119.218587][ T5518] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 119.222652][ T5520] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: none. [ 119.244263][ T5518] BTRFS info (device loop1): turning off barriers [ 119.251308][ T5518] BTRFS info (device loop1): setting nodatasum [ 119.257554][ T5518] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 119.267283][ T5518] BTRFS info (device loop1): use lzo compression, level 0 [ 119.274655][ T5518] BTRFS info (device loop1): using free space tree [ 119.286188][ T5518] BTRFS info (device loop1): has skinny extents [ 119.341428][ T5520] syz.0.409 (5520) used greatest stack depth: 19368 bytes left [ 119.376108][ T4168] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 119.400367][ T4168] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 119.549460][ T5398] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 119.603945][ T5513] udc-core: couldn't find an available UDC or it's busy [ 119.654330][ T5513] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.789232][ T4487] usbhid 5-1:0.0: can't add hid device: -71 [ 119.795406][ T4487] usbhid: probe of 5-1:0.0 failed with error -71 [ 119.827397][ T4487] usb 5-1: USB disconnect, device number 6 [ 119.873432][ T5398] usb 3-1: USB disconnect, device number 4 [ 120.127183][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.228567][ T5543] loop3: detected capacity change from 0 to 40427 [ 120.275052][ T5543] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 120.324504][ T5543] F2FS-fs (loop3): invalid crc value [ 120.363282][ T5543] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.434374][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.526245][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.556797][ T5543] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.621975][ T5556] device syzkaller1 entered promiscuous mode [ 120.657849][ T5543] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 120.802413][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.948187][ T4178] attempt to access beyond end of device [ 120.948187][ T4178] loop3: rw=2049, want=45112, limit=40427 [ 121.492508][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 121.822709][ T5559] chnl_net:caif_netlink_parms(): no params data found [ 122.026289][ T5576] loop2: detected capacity change from 0 to 4096 [ 122.085448][ T5576] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 122.264069][ T5554] loop4: detected capacity change from 0 to 262144 [ 122.314340][ T5554] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.416 (5554) [ 122.350225][ T5554] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 122.355007][ T5576] ntfs3: loop2: Failed to load $Extend. [ 122.359720][ T5554] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 122.376735][ T5554] BTRFS info (device loop4): trying to use backup root at mount time [ 122.384927][ T5554] BTRFS info (device loop4): max_inline at 0 [ 122.391128][ T5554] BTRFS info (device loop4): setting nodatacow, compression disabled [ 122.399348][ T5554] BTRFS info (device loop4): doing ref verification [ 122.405955][ T5554] BTRFS info (device loop4): disabling tree log [ 122.412241][ T5554] BTRFS info (device loop4): using free space tree [ 122.418851][ T5554] BTRFS info (device loop4): has skinny extents [ 122.425403][ T5554] BTRFS info (device loop4): flagging fs with big metadata feature [ 122.614158][ T5593] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 122.633851][ T5559] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.674821][ T5559] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.706375][ T5559] device bridge_slave_0 entered promiscuous mode [ 122.737624][ T5567] loop1: detected capacity change from 0 to 40427 [ 122.755417][ T5554] BTRFS info (device loop4): enabling ssd optimizations [ 122.789225][ T5559] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.796340][ T5559] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.852452][ T5559] device bridge_slave_1 entered promiscuous mode [ 122.885953][ T5567] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 122.919999][ T5567] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 122.924202][ T4476] Bluetooth: hci1: command 0x0409 tx timeout [ 122.980296][ T5567] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.059548][ T5618] input: syz1 as /devices/virtual/input/input10 [ 123.213166][ T5567] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 123.229456][ T5567] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.593349][ T5559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.660062][ T5559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.793615][ T5559] team0: Port device team_slave_0 added [ 123.883968][ T5559] team0: Port device team_slave_1 added [ 124.150794][ T5559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.177087][ T5633] loop2: detected capacity change from 0 to 40427 [ 124.181686][ T5559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.244634][ T5559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.306553][ T5633] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 124.314380][ T5633] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 124.340448][ T5559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.376452][ T5559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.451423][ T5633] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.505641][ T5633] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 124.512844][ T5633] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.544732][ T5559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.698560][ T5559] device hsr_slave_0 entered promiscuous mode [ 124.719554][ T5559] device hsr_slave_1 entered promiscuous mode [ 124.737168][ T5559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.750489][ T5559] Cannot create hsr debugfs directory [ 124.819314][ T4476] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.942826][ T5658] loop1: detected capacity change from 0 to 2048 [ 125.032285][ T5658] loop1: p1 < > p3 [ 125.069380][ T4487] Bluetooth: hci1: command 0x041b tx timeout [ 125.107099][ T5658] loop1: p3 size 134217728 extends beyond EOD, truncated [ 125.179356][ T4476] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.221581][ T4476] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.270120][ T4476] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 125.374945][ T144] device hsr_slave_0 left promiscuous mode [ 125.439859][ T144] device hsr_slave_1 left promiscuous mode [ 125.446774][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.459427][ T4476] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.477127][ T4476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.477198][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.490880][ T4476] usb 4-1: Product: syz [ 125.504723][ T4476] usb 4-1: Manufacturer: syz [ 125.512534][ T4476] usb 4-1: SerialNumber: syz [ 125.523480][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.555696][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.572657][ T144] device bridge_slave_1 left promiscuous mode [ 125.598412][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.626805][ T144] device bridge_slave_0 left promiscuous mode [ 125.637813][ T5670] loop2: detected capacity change from 0 to 4096 [ 125.647242][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.673942][ T5670] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 125.740472][ T144] device veth1_macvtap left promiscuous mode [ 125.759354][ T144] device veth0_macvtap left promiscuous mode [ 125.765514][ T144] device veth1_vlan left promiscuous mode [ 125.780094][ T144] device veth0_vlan left promiscuous mode [ 125.783238][ T5649] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.115689][ T5674] loop2: detected capacity change from 0 to 32768 [ 126.178180][ T5674] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.439 (5674) [ 126.194539][ T5674] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 126.203619][ T5674] BTRFS info (device loop2): using free space tree [ 126.210251][ T5674] BTRFS info (device loop2): has skinny extents [ 126.212107][ T144] team0 (unregistering): Port device team_slave_1 removed [ 126.265720][ T144] team0 (unregistering): Port device team_slave_0 removed [ 126.286943][ T5674] BTRFS info (device loop2): enabling ssd optimizations [ 126.321627][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.369417][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.494930][ T5649] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.706749][ T144] bond0 (unregistering): Released all slaves [ 126.739425][ T4476] cdc_ncm 4-1:1.0: bind() failure [ 126.769324][ T4476] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 126.790108][ T4476] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 126.831435][ T4476] usbtest: probe of 4-1:1.1 failed with error -71 [ 126.885296][ T4476] usb 4-1: USB disconnect, device number 4 [ 126.939130][ T1107] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.051296][ T5559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.109733][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.159451][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.167300][ T4479] Bluetooth: hci1: command 0x040f tx timeout [ 127.176736][ T5559] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.189346][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 127.201349][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.211112][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.232195][ T4696] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.239384][ T4696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.268790][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.335923][ T1107] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 127.342711][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.354976][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.375263][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.391241][ T1107] usb 3-1: config 0 descriptor?? [ 127.400957][ T5715] loop1: detected capacity change from 0 to 164 [ 127.419695][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.426779][ T4691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.468307][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.522124][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.580232][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.608549][ T5723] loop3: detected capacity change from 0 to 512 [ 127.618140][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.672641][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.699232][ T5723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.699899][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.744104][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.745346][ T5699] loop4: detected capacity change from 0 to 40427 [ 127.762476][ T1107] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 127.773769][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.815381][ T5723] EXT4-fs (loop3): 1 truncate cleaned up [ 127.824284][ T1107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.833781][ T5723] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.851903][ T5699] F2FS-fs (loop4): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 127.899735][ T1107] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 127.925398][ T1107] usb 3-1: media controller created [ 127.934891][ T5699] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 127.984396][ T5699] F2FS-fs (loop4): invalid crc value [ 127.997997][ T5699] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.023194][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.056516][ T5699] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 128.065408][ T5699] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 128.072811][ T4476] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.082151][ T5699] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 128.089342][ T5559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.141299][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.161651][ T5699] attempt to access beyond end of device [ 128.161651][ T5699] loop4: rw=2049, want=40976, limit=40427 [ 128.178166][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.186894][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.217543][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.329298][ T4476] usb 2-1: Using ep0 maxpacket: 32 [ 128.449798][ T4476] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 128.468278][ T4476] usb 2-1: config 0 has no interface number 0 [ 128.481935][ T4476] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.511576][ T4476] usb 2-1: config 0 interface 85 has no altsetting 0 [ 128.579036][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.593075][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.645855][ T5559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.699270][ T4476] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 128.721721][ T4476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.747936][ T4476] usb 2-1: Product: syz [ 128.761427][ T4476] usb 2-1: Manufacturer: syz [ 128.773878][ T4476] usb 2-1: SerialNumber: syz [ 128.803355][ T4476] usb 2-1: config 0 descriptor?? [ 128.849205][ T1107] az6027: usb out operation failed. (-71) [ 128.855590][ T1107] stb0899_attach: Driver disabled by Kconfig [ 128.887273][ T1107] az6027: no front-end attached [ 128.887273][ T1107] [ 128.939941][ T1107] az6027: usb out operation failed. (-71) [ 128.945720][ T1107] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 128.973643][ T1107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 129.039331][ T1107] dvb-usb: schedule remote query interval to 400 msecs. [ 129.062739][ T1107] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 129.097590][ T1107] usb 3-1: USB disconnect, device number 5 [ 129.193508][ T1107] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 129.229710][ T4477] Bluetooth: hci1: command 0x0419 tx timeout [ 129.243461][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.290329][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.355056][ T5559] device veth0_vlan entered promiscuous mode [ 129.379212][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.398532][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.409454][ T5178] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.416787][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.427111][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.457545][ T5559] device veth1_vlan entered promiscuous mode [ 129.509320][ T4476] appletouch 2-1:0.85: Geyser mode initialized. [ 129.518514][ T4476] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input11 [ 129.536245][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.560638][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.589609][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.609644][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.652130][ T5559] device veth0_macvtap entered promiscuous mode [ 129.694052][ T5559] device veth1_macvtap entered promiscuous mode [ 129.702175][ T5178] usb 5-1: Using ep0 maxpacket: 8 [ 129.747316][ T1107] usb 2-1: USB disconnect, device number 5 [ 129.773854][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.816326][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.837390][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.858837][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.877192][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.892271][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.904279][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.915120][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.926856][ T5559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.938660][ T1107] appletouch 2-1:0.85: input: appletouch disconnected [ 129.965038][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.975805][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.987573][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.998503][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.008711][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.019640][ T5178] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 130.028888][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.038882][ T5178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.047648][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.070430][ T5178] usb 5-1: Product: syz [ 130.079201][ T5178] usb 5-1: Manufacturer: syz [ 130.086315][ T5178] usb 5-1: SerialNumber: syz [ 130.104611][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.123479][ T5178] usb 5-1: config 0 descriptor?? [ 130.131629][ T5559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.145983][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.165618][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.181557][ T5178] gspca_main: sq930x-2.14.0 probing 2770:930c [ 130.204355][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.231273][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.265687][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.282531][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.450994][ T5790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.460'. [ 130.461498][ T4657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.496340][ T4657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.536246][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.543996][ T4653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.565588][ T4653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.602967][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.921086][ T5787] loop3: detected capacity change from 0 to 32768 [ 131.012292][ T5800] loop1: detected capacity change from 0 to 32768 [ 131.075847][ T5800] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.462 (5800) [ 131.103637][ T5787] XFS (loop3): Mounting V5 Filesystem [ 131.121864][ T5800] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 131.131952][ T5800] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 131.141516][ T5800] BTRFS info (device loop1): use zstd compression, level 3 [ 131.148742][ T5800] BTRFS info (device loop1): using free space tree [ 131.155782][ T5800] BTRFS info (device loop1): has skinny extents [ 131.207272][ T5821] loop2: detected capacity change from 0 to 7 [ 131.217818][ T4258] Dev loop2: unable to read RDB block 7 [ 131.224185][ T4258] loop2: unable to read partition table [ 131.260701][ T5800] BTRFS info (device loop1): enabling ssd optimizations [ 131.279272][ T4258] loop2: partition table beyond EOD, truncated [ 131.353075][ T5821] Dev loop2: unable to read RDB block 7 [ 131.357419][ T5787] XFS (loop3): Ending clean mount [ 131.359010][ T5821] loop2: unable to read partition table [ 131.370486][ T5821] loop2: partition table beyond EOD, truncated [ 131.377218][ T5821] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 131.409147][ T5178] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 131.433369][ T5838] netlink: 'syz.2.466': attribute type 1 has an invalid length. [ 131.433739][ T5787] XFS (loop3): Quotacheck needed: Please wait. [ 131.441307][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 131.596368][ T5842] loop2: detected capacity change from 0 to 190 [ 131.655239][ T5178] gspca_sq930x: Sensor ov9630 not yet treated [ 131.676497][ T5178] sq930x: probe of 5-1:0.0 failed with error -22 [ 131.725153][ T5842] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 131.759251][ T5178] usb 5-1: USB disconnect, device number 7 [ 131.779249][ T5842] ntfs: (device loop2): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 131.839242][ T5842] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 131.862786][ T5845] loop5: detected capacity change from 0 to 4096 [ 131.888171][ T5842] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 132.071891][ T5842] ntfs: volume version 3.1. [ 132.076481][ T5842] ntfs: (device loop2): load_system_files(): Volume is dirty. Will not be able to remount read-write. Run chkdsk and mount in Windows. [ 132.141287][ T5787] XFS (loop3): Quotacheck: Done. [ 132.160061][ T5852] loop4: detected capacity change from 0 to 512 [ 132.162512][ T5842] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is an extent inode! [ 132.211175][ T5845] NILFS (loop5): invalid segment: Checksum error in segment payload [ 132.229736][ T5845] NILFS (loop5): trying rollback from an earlier position [ 132.249173][ T5842] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 132.378866][ T5845] NILFS (loop5): recovery complete [ 132.422757][ T5842] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 132.467336][ T5852] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.486606][ T5842] ntfs: (device loop2): ntfs_lookup_inode_by_name(): No index allocation attribute but index entry requires one. Directory inode 0x5 is corrupt or driver bug. [ 132.513000][ T5852] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.543909][ T5859] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.587672][ T4178] XFS (loop3): Unmounting Filesystem [ 132.597035][ T5842] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 132.610585][ T5842] attempt to access beyond end of device [ 132.610585][ T5842] loop2: rw=0, want=232, limit=190 [ 132.747385][ T5842] attempt to access beyond end of device [ 132.747385][ T5842] loop2: rw=0, want=568, limit=190 [ 132.917520][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.923902][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.986381][ T5853] loop1: detected capacity change from 0 to 32768 [ 133.213856][ T5878] loop2: detected capacity change from 0 to 128 [ 133.267803][ T5853] XFS (loop1): Mounting V5 Filesystem [ 133.321663][ T5878] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.384378][ T5878] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.398587][ T5853] XFS (loop1): Ending clean mount [ 133.568572][ T5901] loop3: detected capacity change from 0 to 512 [ 133.615232][ T4167] XFS (loop1): Unmounting Filesystem [ 133.837403][ T5901] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 133.855907][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.039292][ T5901] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.189761][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 134.338665][ T5929] loop3: detected capacity change from 0 to 512 [ 134.408464][ T5932] loop1: detected capacity change from 0 to 512 [ 134.427740][ T5929] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.492210][ T5932] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.479: corrupted in-inode xattr [ 134.536190][ T5929] EXT4-fs (loop3): 1 truncate cleaned up [ 134.580886][ T5940] netlink: 'syz.2.488': attribute type 11 has an invalid length. [ 134.615664][ T5927] loop5: detected capacity change from 0 to 8192 [ 134.628006][ T5929] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,grpquota,noblock_validity,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 134.666564][ T5932] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.479: couldn't read orphan inode 15 (err -117) [ 134.765373][ T5932] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,block_validity,,errors=continue. Quota mode: writeback. [ 134.781021][ T5929] syz.3.486 (pid 5929) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 135.183668][ T5963] loop4: detected capacity change from 0 to 256 [ 135.231223][ T5965] loop2: detected capacity change from 0 to 1024 [ 135.320944][ T5965] EXT4-fs (loop2): Ignoring removed nobh option [ 135.329156][ T5969] loop3: detected capacity change from 0 to 1024 [ 135.394160][ T5965] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,nombcache,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 135.759266][ T5170] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.938894][ T5999] loop5: detected capacity change from 0 to 512 [ 136.029471][ T5170] usb 2-1: Using ep0 maxpacket: 8 [ 136.100475][ T6009] program syz.2.509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.163917][ T5170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.205564][ T5170] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.214866][ T4169] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.236396][ T5170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.251538][ T6016] loop2: detected capacity change from 0 to 128 [ 136.273432][ T5170] usb 2-1: config 0 descriptor?? [ 136.295283][ T6016] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.369246][ T6016] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.439403][ T5176] psmouse serio2: Failed to reset mouse on : -5 [ 136.523325][ T5170] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 136.609477][ T4169] usb 4-1: config 0 has an invalid interface number: 154 but max is 0 [ 136.623235][ T4169] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.634720][ T4169] usb 4-1: config 0 has no interface number 0 [ 136.641079][ T4169] usb 4-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 136.668663][ T4169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.695003][ T4169] usb 4-1: config 0 descriptor?? [ 136.736147][ T5170] usb 2-1: USB disconnect, device number 6 [ 136.742165][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 136.757627][ T4169] qmi_wwan 4-1:0.154: bogus CDC Union: master=0, slave=0 [ 136.776861][ T4169] qmi_wwan: probe of 4-1:0.154 failed with error -22 [ 136.878788][ T6037] loop5: detected capacity change from 0 to 4096 [ 136.948524][ T6037] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.974601][ T6049] loop2: detected capacity change from 0 to 512 [ 136.988691][ T23] usb 4-1: USB disconnect, device number 5 [ 137.016147][ T6037] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 137.032982][ T6049] EXT4-fs (loop2): Ignoring removed orlov option [ 137.058698][ T6049] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002] [ 137.069170][ T6049] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.524: corrupted in-inode xattr [ 137.081661][ T6049] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.524: couldn't read orphan inode 15 (err -117) [ 137.094889][ T6049] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,data_err=ignore,nombcache,noblock_validity,nodiscard,norecovery,,errors=continue. Quota mode: none. [ 137.132773][ T6037] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: writeback. [ 137.160335][ T6049] EXT4-fs error (device loop2): ext4_check_dx_root:2266: inode #2: comm syz.2.524: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 137.197067][ T5559] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /15/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 137.231650][ T5559] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 137.264416][ T5559] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 137.293792][ T5559] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /15/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 137.328047][ T5559] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 137.353908][ T5559] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 137.439301][ T5559] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /15/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 137.488388][ T5559] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 137.496790][ T6062] 9pnet: p9_errstr2errno: server reported unknown error [ 137.507974][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.536269][ T5559] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 137.591422][ T5559] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /15/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 137.676197][ T5559] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 137.759407][ T5559] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 137.795698][ T5559] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /15/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 137.838672][ T6080] loop1: detected capacity change from 0 to 512 [ 137.869947][ T5559] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 137.889423][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.902849][ T5559] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 137.904441][ T6080] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.933105][ T5559] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 137.966800][ T5559] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 137.967291][ T6080] EXT4-fs (loop1): 1 truncate cleaned up [ 137.989322][ T6080] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.997003][ T5559] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 138.041498][ T5559] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 138.077718][ T6091] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 138.100099][ T5559] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 138.559586][ T6092] ================================================================== [ 138.568272][ T6092] BUG: KASAN: use-after-free in __mutex_lock_common+0xc85/0x2390 [ 138.576306][ T6092] Read of size 8 at addr ffff88807c238060 by task khidpd_0b575500/6092 [ 138.584852][ T6092] [ 138.587559][ T6092] CPU: 1 PID: 6092 Comm: khidpd_0b575500 Not tainted 5.15.182-syzkaller #0 [ 138.596254][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 138.606390][ T6092] Call Trace: [ 138.609691][ T6092] [ 138.612639][ T6092] dump_stack_lvl+0x168/0x230 [ 138.617348][ T6092] ? show_regs_print_info+0x20/0x20 [ 138.622574][ T6092] ? load_image+0x3b0/0x3b0 [ 138.627182][ T6092] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 138.632591][ T6092] ? release_firmware_map_entry+0x190/0x190 [ 138.638596][ T6092] print_address_description+0x60/0x2d0 [ 138.644163][ T6092] ? __mutex_lock_common+0xc85/0x2390 [ 138.649748][ T6092] kasan_report+0xdf/0x130 [ 138.654188][ T6092] ? __mutex_lock_common+0xc85/0x2390 [ 138.659581][ T6092] __mutex_lock_common+0xc85/0x2390 [ 138.664811][ T6092] ? l2cap_unregister_user+0x66/0x1a0 [ 138.670204][ T6092] ? mutex_lock_io_nested+0x60/0x60 [ 138.675429][ T6092] ? timer_delete_sync+0x1cf/0x260 [ 138.680647][ T6092] ? try_to_del_timer_sync+0x1b0/0x1b0 [ 138.686124][ T6092] ? _raw_spin_unlock+0x40/0x40 [ 138.691000][ T6092] mutex_lock_nested+0x17/0x20 [ 138.695783][ T6092] l2cap_unregister_user+0x66/0x1a0 [ 138.701015][ T6092] hidp_session_thread+0x3c4/0x400 [ 138.706152][ T6092] ? hidp_session_get+0x80/0x80 [ 138.711026][ T6092] ? hidp_session_thread+0x400/0x400 [ 138.716332][ T6092] ? _raw_spin_unlock+0x40/0x40 [ 138.721199][ T6092] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 138.727113][ T6092] ? hidp_session_thread+0x400/0x400 [ 138.732442][ T6092] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 138.738362][ T6092] ? __kthread_parkme+0x157/0x1b0 [ 138.743418][ T6092] kthread+0x436/0x520 [ 138.747502][ T6092] ? hidp_session_get+0x80/0x80 [ 138.752366][ T6092] ? kthread_blkcg+0xd0/0xd0 [ 138.753824][ T6103] loop3: detected capacity change from 0 to 32768 [ 138.756966][ T6092] ret_from_fork+0x1f/0x30 [ 138.767843][ T6092] [ 138.770858][ T6092] [ 138.773176][ T6092] Allocated by task 5559: [ 138.777496][ T6092] __kasan_kmalloc+0xb5/0xf0 [ 138.782092][ T6092] hci_alloc_dev_priv+0x23/0x1d20 [ 138.787139][ T6092] vhci_create_device+0x122/0x5c0 [ 138.792188][ T6092] vhci_write+0x391/0x450 [ 138.796538][ T6092] vfs_write+0x712/0xd00 [ 138.800797][ T6092] ksys_write+0x14d/0x250 [ 138.805145][ T6092] do_syscall_64+0x4c/0xa0 [ 138.809579][ T6092] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.815492][ T6092] [ 138.817843][ T6092] Freed by task 5559: [ 138.821816][ T6092] kasan_set_track+0x4b/0x70 [ 138.826492][ T6092] kasan_set_free_info+0x1f/0x40 [ 138.831422][ T6092] ____kasan_slab_free+0xd5/0x110 [ 138.836477][ T6092] slab_free_freelist_hook+0xea/0x170 [ 138.841852][ T6092] kfree+0xef/0x2a0 [ 138.845657][ T6092] hci_release_dev+0x1378/0x14e0 [ 138.850591][ T6092] bt_host_release+0x7e/0x90 [ 138.855207][ T6092] device_release+0x92/0x1c0 [ 138.859796][ T6092] kobject_put+0x21d/0x460 [ 138.864208][ T6092] vhci_release+0x7b/0xc0 [ 138.868529][ T6092] __fput+0x234/0x930 [ 138.872505][ T6092] task_work_run+0x125/0x1a0 [ 138.877091][ T6092] do_exit+0x616/0x20a0 [ 138.881330][ T6092] do_group_exit+0x12e/0x300 [ 138.885936][ T6092] __x64_sys_exit_group+0x3b/0x40 [ 138.890959][ T6092] do_syscall_64+0x4c/0xa0 [ 138.895383][ T6092] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.901275][ T6092] [ 138.903587][ T6092] Last potentially related work creation: [ 138.909287][ T6092] kasan_save_stack+0x35/0x60 [ 138.913957][ T6092] kasan_record_aux_stack+0xb8/0x100 [ 138.919252][ T6092] insert_work+0x54/0x3d0 [ 138.923576][ T6092] __queue_work+0x9c5/0xd50 [ 138.928073][ T6092] queue_work_on+0x11d/0x1d0 [ 138.932745][ T6092] process_one_work+0x863/0x1000 [ 138.937677][ T6092] worker_thread+0xaa8/0x12a0 [ 138.942357][ T6092] kthread+0x436/0x520 [ 138.946422][ T6092] ret_from_fork+0x1f/0x30 [ 138.950832][ T6092] [ 138.953148][ T6092] Second to last potentially related work creation: [ 138.959720][ T6092] kasan_save_stack+0x35/0x60 [ 138.964390][ T6092] kasan_record_aux_stack+0xb8/0x100 [ 138.969666][ T6092] insert_work+0x54/0x3d0 [ 138.973989][ T6092] __queue_work+0x9c5/0xd50 [ 138.978486][ T6092] call_timer_fn+0x16c/0x530 [ 138.983073][ T6092] __run_timers+0x550/0x7c0 [ 138.987574][ T6092] run_timer_softirq+0x63/0xf0 [ 138.992356][ T6092] handle_softirqs+0x328/0x820 [ 138.997490][ T6092] __irq_exit_rcu+0x12f/0x220 [ 139.002334][ T6092] irq_exit_rcu+0x5/0x20 [ 139.006569][ T6092] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 139.012289][ T6092] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 139.018287][ T6092] [ 139.020607][ T6092] The buggy address belongs to the object at ffff88807c238000 [ 139.020607][ T6092] which belongs to the cache kmalloc-8k of size 8192 [ 139.034749][ T6092] The buggy address is located 96 bytes inside of [ 139.034749][ T6092] 8192-byte region [ffff88807c238000, ffff88807c23a000) [ 139.048201][ T6092] The buggy address belongs to the page: [ 139.053859][ T6092] page:ffffea0001f08e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c238 [ 139.064113][ T6092] head:ffffea0001f08e00 order:3 compound_mapcount:0 compound_pincount:0 [ 139.072777][ T6092] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 139.080868][ T6092] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016842280 [ 139.089446][ T6092] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 139.098021][ T6092] page dumped because: kasan: bad access detected [ 139.104433][ T6092] page_owner tracks the page as allocated [ 139.110152][ T6092] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5277, ts 110406791271, free_ts 110236830712 [ 139.128929][ T6092] get_page_from_freelist+0x1b77/0x1c60 [ 139.134479][ T6092] __alloc_pages+0x1e1/0x470 [ 139.139151][ T6092] new_slab+0xc0/0x4b0 [ 139.143217][ T6092] ___slab_alloc+0x81e/0xdf0 [ 139.147819][ T6092] __kmalloc+0x1cd/0x330 [ 139.152058][ T6092] fix_nodes+0x6044/0x82d0 [ 139.156570][ T6092] reiserfs_paste_into_item+0x5c8/0x7e0 [ 139.162112][ T6092] reiserfs_add_entry+0x975/0xd40 [ 139.167215][ T6092] reiserfs_create+0x53b/0x680 [ 139.171969][ T6092] vfs_create+0x2db/0x460 [ 139.176294][ T6092] do_mknodat+0x39d/0x620 [ 139.180628][ T6092] __x64_sys_mknodat+0xa5/0xc0 [ 139.185487][ T6092] do_syscall_64+0x4c/0xa0 [ 139.189987][ T6092] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.195885][ T6092] page last free stack trace: [ 139.200547][ T6092] free_unref_page_prepare+0x637/0x6c0 [ 139.206005][ T6092] free_unref_page+0x94/0x280 [ 139.210718][ T6092] __unfreeze_partials+0x1a5/0x200 [ 139.215824][ T6092] put_cpu_partial+0x12d/0x190 [ 139.220584][ T6092] qlist_free_all+0x35/0x90 [ 139.225091][ T6092] kasan_quarantine_reduce+0x150/0x160 [ 139.230559][ T6092] __kasan_slab_alloc+0x2f/0xd0 [ 139.235405][ T6092] slab_post_alloc_hook+0x4c/0x380 [ 139.240510][ T6092] __kmalloc+0x127/0x330 [ 139.244756][ T6092] ops_init+0x8b/0x600 [ 139.248819][ T6092] setup_net+0x38d/0x9f0 [ 139.253058][ T6092] copy_net_ns+0x348/0x5b0 [ 139.257471][ T6092] create_new_namespaces+0x3d3/0x6f0 [ 139.262752][ T6092] unshare_nsproxy_namespaces+0x116/0x160 [ 139.268552][ T6092] ksys_unshare+0x4bc/0x890 [ 139.273066][ T6092] __x64_sys_unshare+0x34/0x40 [ 139.277929][ T6092] [ 139.280248][ T6092] Memory state around the buggy address: [ 139.285955][ T6092] ffff88807c237f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.294024][ T6092] ffff88807c237f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.302079][ T6092] >ffff88807c238000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.310217][ T6092] ^ [ 139.317399][ T6092] ffff88807c238080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.325452][ T6092] ffff88807c238100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.333501][ T6092] ================================================================== [ 139.341557][ T6092] Disabling lock debugging due to kernel taint [ 139.349574][ T6092] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 139.356891][ T6092] CPU: 1 PID: 6092 Comm: khidpd_0b575500 Tainted: G B 5.15.182-syzkaller #0 [ 139.366951][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 139.377085][ T6092] Call Trace: [ 139.380356][ T6092] [ 139.383286][ T6092] dump_stack_lvl+0x168/0x230 [ 139.388068][ T6092] ? show_regs_print_info+0x20/0x20 [ 139.393285][ T6092] ? load_image+0x3b0/0x3b0 [ 139.397801][ T6092] panic+0x2c9/0x7f0 [ 139.401736][ T6092] ? bpf_jit_dump+0xd0/0xd0 [ 139.406247][ T6092] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 139.412272][ T6092] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 139.418177][ T6092] ? _raw_spin_unlock+0x40/0x40 [ 139.423026][ T6092] ? __mutex_lock_common+0xc85/0x2390 [ 139.428393][ T6092] check_panic_on_warn+0x80/0xa0 [ 139.433501][ T6092] ? __mutex_lock_common+0xc85/0x2390 [ 139.438954][ T6092] end_report+0x6d/0xf0 [ 139.443107][ T6092] kasan_report+0x102/0x130 [ 139.447779][ T6092] ? __mutex_lock_common+0xc85/0x2390 [ 139.453150][ T6092] __mutex_lock_common+0xc85/0x2390 [ 139.458347][ T6092] ? l2cap_unregister_user+0x66/0x1a0 [ 139.463718][ T6092] ? mutex_lock_io_nested+0x60/0x60 [ 139.468931][ T6092] ? timer_delete_sync+0x1cf/0x260 [ 139.474035][ T6092] ? try_to_del_timer_sync+0x1b0/0x1b0 [ 139.479491][ T6092] ? _raw_spin_unlock+0x40/0x40 [ 139.484341][ T6092] mutex_lock_nested+0x17/0x20 [ 139.489102][ T6092] l2cap_unregister_user+0x66/0x1a0 [ 139.494301][ T6092] hidp_session_thread+0x3c4/0x400 [ 139.499440][ T6092] ? hidp_session_get+0x80/0x80 [ 139.504373][ T6092] ? hidp_session_thread+0x400/0x400 [ 139.509653][ T6092] ? _raw_spin_unlock+0x40/0x40 [ 139.514499][ T6092] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 139.520475][ T6092] ? hidp_session_thread+0x400/0x400 [ 139.525759][ T6092] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 139.531676][ T6092] ? __kthread_parkme+0x157/0x1b0 [ 139.536787][ T6092] kthread+0x436/0x520 [ 139.540852][ T6092] ? hidp_session_get+0x80/0x80 [ 139.545698][ T6092] ? kthread_blkcg+0xd0/0xd0 [ 139.550283][ T6092] ret_from_fork+0x1f/0x30 [ 139.554709][ T6092] [ 139.557913][ T6092] Kernel Offset: disabled [ 139.562239][ T6092] Rebooting in 86400 seconds..