last executing test programs: 37.033237958s ago: executing program 3 (id=134): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) 36.735467789s ago: executing program 3 (id=137): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000003c0)="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", 0x130) 36.62176873s ago: executing program 3 (id=139): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb43, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x2, 0x3, 0x2800, 0x2800, 0x440, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb43, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x440, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 36.454171551s ago: executing program 3 (id=141): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x7, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)) 35.863842684s ago: executing program 3 (id=143): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x8124}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) 35.209950487s ago: executing program 3 (id=146): syz_usb_connect(0x1, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402", @ANYBLOB="521c"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000a40), 0x80, 0x400c00) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) 34.985138488s ago: executing program 32 (id=146): syz_usb_connect(0x1, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402", @ANYBLOB="521c"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000a40), 0x80, 0x400c00) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) 12.706702745s ago: executing program 0 (id=311): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000003440)={0x14, 0x0, &(0x7f0000003400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004000)={0x14, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="000304000000040347"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000004ac0)={0x2c, 0x0, &(0x7f0000004840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12.051908378s ago: executing program 4 (id=316): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 11.935401168s ago: executing program 4 (id=318): prctl$PR_MCE_KILL(0x41555856, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20601, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000500)) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c018060006400000000008000440000000000a000200190ab2ca6d"], 0x7c}}, 0x0) 11.863238779s ago: executing program 4 (id=319): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "c8849eb8"}]}}, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x0, 0x2003) 10.080930598s ago: executing program 0 (id=343): r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000040, &(0x7f0000000040)={0x11, 0xf6, r1, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 10.015728809s ago: executing program 0 (id=345): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'dh\x00', 0x1, 0x4, 0x200072}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xcb, 0x12d5f, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 9.929479259s ago: executing program 0 (id=347): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x80041b, &(0x7f00000000c0)=ANY=[], 0x21, 0x1ab, &(0x7f0000000600)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 9.7815247s ago: executing program 4 (id=349): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6163746976655f6c6f67733d362c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c616c6c6f635f6d6f64653d72657573652c6e6f61636c2c686561702c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c636f6d70726573735f63616368652c6a71666d743d7666736f6c642c0059f4bd815bd5269b4f523c9fa8d344a3944fb455fe1b97b3eda5f977db05bfa9d02cc67646849b46fd481fbbd5b0fd213353e4ae7755b4985d63c4a5e13292c6d514d644c884482f93129a82c26ad8f1f7191de0ca75795a5f697573c1828a8ecf4a82e89215d1979fa2738c76683b231a638e5a0d6bd7235d108d564d307b3067ab6ac37a59e50763a2be3d70a1260e"], 0x1, 0x5505, &(0x7f0000002480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 9.72187172s ago: executing program 0 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.277557752s ago: executing program 0 (id=352): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) 9.046073403s ago: executing program 33 (id=352): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) 8.137189148s ago: executing program 4 (id=358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, 0x0) 6.583771696s ago: executing program 4 (id=367): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x62a8}, {r1, 0x42a2}], 0x2, 0xca) 6.407470067s ago: executing program 34 (id=367): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x62a8}, {r1, 0x42a2}], 0x2, 0xca) 5.482441012s ago: executing program 2 (id=380): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x9, r0, 0x10000, 0x0) 5.037243694s ago: executing program 2 (id=382): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000a00)={0x40, 0x14, 0x3, 'd;}'}, 0x0, 0x0, 0x0, 0x0}) 3.038161395s ago: executing program 5 (id=393): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@usrquota}]}, 0xb, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) 2.291028898s ago: executing program 5 (id=397): ioperm(0x0, 0x2534, 0x8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) prctl$PR_SET_IO_FLUSHER(0x3a, 0x0) 2.115847859s ago: executing program 2 (id=398): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) unshare(0x26020280) syz_clone(0x2c302080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.04660843s ago: executing program 5 (id=399): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x1c}}, 0x0) 1.703457982s ago: executing program 2 (id=401): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000) r2 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.492598793s ago: executing program 1 (id=403): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/netfilter\x00') getdents64(r0, &(0x7f00000000c0)=""/44, 0x2c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) getdents(r0, &(0x7f0000000040)=""/44, 0x2c) 1.489610562s ago: executing program 2 (id=404): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRES64, @ANYRES64], 0x1, 0x6245, &(0x7f0000012d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000680)="b3", 0x1}], 0x1) pwrite64(r1, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) 1.393818153s ago: executing program 5 (id=405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESDEC, @ANYRESOCT=0x0], 0x3c, 0x2dc, &(0x7f0000000740)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000095000040"]) 1.376543743s ago: executing program 1 (id=406): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x3, 0x1}, 0x8) 840.986446ms ago: executing program 5 (id=407): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r1}, 0x10, &(0x7f00000004c0)={&(0x7f0000000580)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000018c0)={&(0x7f0000000040)={0x1, 0x1ae, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x85, 0x3, 0x0, 0x0, "3868efaafd720c4b"}}, 0x48}}, 0x0) 681.777497ms ago: executing program 5 (id=408): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 428.552688ms ago: executing program 1 (id=409): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x40874e46}) close_range(r0, 0xffffffffffffffff, 0x0) 262.393139ms ago: executing program 1 (id=410): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0), 0x20) 86.7287ms ago: executing program 2 (id=411): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x220000, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0xff, 0x290, &(0x7f0000000780)="$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") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 56.32698ms ago: executing program 1 (id=412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 0s ago: executing program 1 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000180)=""/85) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.27' (ED25519) to the list of known hosts. [ 58.271945][ T4154] cgroup: Unknown subsys name 'net' [ 58.398673][ T4154] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.877469][ T4154] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.262683][ T4165] chnl_net:caif_netlink_parms(): no params data found [ 61.366665][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 61.392965][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 61.480678][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.488673][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.497462][ T4165] device bridge_slave_0 entered promiscuous mode [ 61.508685][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.515826][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.524123][ T4165] device bridge_slave_1 entered promiscuous mode [ 61.538618][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 61.583496][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.590595][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.598820][ T4166] device bridge_slave_0 entered promiscuous mode [ 61.607597][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.614835][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.623343][ T4166] device bridge_slave_1 entered promiscuous mode [ 61.643143][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.674382][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.711638][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 61.736848][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.751726][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.767954][ T4165] team0: Port device team_slave_0 added [ 61.774150][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.781235][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.789613][ T4173] device bridge_slave_0 entered promiscuous mode [ 61.822649][ T4165] team0: Port device team_slave_1 added [ 61.836469][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.844291][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.852446][ T4173] device bridge_slave_1 entered promiscuous mode [ 61.875819][ T4166] team0: Port device team_slave_0 added [ 61.907072][ T4166] team0: Port device team_slave_1 added [ 61.921741][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.928791][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.954827][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.973856][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.980928][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.989963][ T4171] device bridge_slave_0 entered promiscuous mode [ 62.013308][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.020277][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.046291][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.064300][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.074435][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.081500][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.090114][ T4171] device bridge_slave_1 entered promiscuous mode [ 62.113012][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.120086][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.128658][ T4172] device bridge_slave_0 entered promiscuous mode [ 62.137690][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.155871][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.163204][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.189308][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.201499][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.208662][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.234923][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.246222][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.253667][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.261513][ T4172] device bridge_slave_1 entered promiscuous mode [ 62.318253][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.354265][ T4173] team0: Port device team_slave_0 added [ 62.362781][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.375160][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.387249][ T4165] device hsr_slave_0 entered promiscuous mode [ 62.395632][ T4165] device hsr_slave_1 entered promiscuous mode [ 62.413059][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.424718][ T4173] team0: Port device team_slave_1 added [ 62.454876][ T4171] team0: Port device team_slave_0 added [ 62.463830][ T4166] device hsr_slave_0 entered promiscuous mode [ 62.471028][ T4166] device hsr_slave_1 entered promiscuous mode [ 62.478986][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.487005][ T4166] Cannot create hsr debugfs directory [ 62.516151][ T4171] team0: Port device team_slave_1 added [ 62.544692][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.551662][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.577841][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.591992][ T4172] team0: Port device team_slave_0 added [ 62.598644][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.605858][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.632011][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.661818][ T4172] team0: Port device team_slave_1 added [ 62.707789][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.715005][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.741066][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.767188][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.774813][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.800977][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.813767][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.820727][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.847209][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.880269][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.887329][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.913424][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.953192][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 62.962505][ T1109] Bluetooth: hci0: command 0x0409 tx timeout [ 62.973290][ T4173] device hsr_slave_0 entered promiscuous mode [ 62.979987][ T4173] device hsr_slave_1 entered promiscuous mode [ 62.986855][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.994738][ T4173] Cannot create hsr debugfs directory [ 63.032206][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 63.032673][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 63.047836][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 63.069516][ T4171] device hsr_slave_0 entered promiscuous mode [ 63.076902][ T4171] device hsr_slave_1 entered promiscuous mode [ 63.083694][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.091257][ T4171] Cannot create hsr debugfs directory [ 63.149700][ T4172] device hsr_slave_0 entered promiscuous mode [ 63.156890][ T4172] device hsr_slave_1 entered promiscuous mode [ 63.164042][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.171635][ T4172] Cannot create hsr debugfs directory [ 63.367923][ T4165] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.393113][ T4165] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.404885][ T4165] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.421033][ T4165] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.482635][ T4166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.494326][ T4166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.508953][ T4166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.520494][ T4166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.579542][ T4173] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.589997][ T4173] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.609449][ T4173] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.619206][ T4173] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.647760][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.675203][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.691318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.703588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.735508][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.745777][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.756721][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.764032][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.773493][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.782536][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.790933][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.798057][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.806361][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.817389][ T4172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.839366][ T4172] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.848454][ T4172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.859765][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.869537][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.892523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.901854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.911548][ T4172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.938964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.947554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.956832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.965771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.975768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.998852][ T4165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.011906][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.028244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.038194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.076079][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.099016][ T4171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.120821][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.140556][ T4171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.154386][ T4171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.178246][ T4171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.190077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.205613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.219576][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.229426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.238149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.266306][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.282804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.291567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.300526][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.307633][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.318135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.327030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.336478][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.343585][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.351446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.360430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.384948][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.409307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.416994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.424916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.438443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.447133][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.454241][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.461870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.470982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.479805][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.487225][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.495883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.504999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.532898][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.561236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.571076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.581990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.592452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.601122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.610016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.619307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.628705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.638663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.647653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.656710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.665414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.679153][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.690592][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.721160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.730633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.739725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.748960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.769488][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.789092][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.799000][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.807250][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.815775][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.825083][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.834219][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.843256][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.856302][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.868296][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.895898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.907136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.923683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.938232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.947628][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.954737][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.963856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.972769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.981180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.989930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.999199][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.006505][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.028166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.036378][ T4211] Bluetooth: hci0: command 0x041b tx timeout [ 65.050029][ T4211] Bluetooth: hci3: command 0x041b tx timeout [ 65.057155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.066232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.079614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.088900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.102707][ T4165] device veth0_vlan entered promiscuous mode [ 65.116251][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.123616][ T4211] Bluetooth: hci4: command 0x041b tx timeout [ 65.132422][ T4211] Bluetooth: hci2: command 0x041b tx timeout [ 65.142502][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 65.152583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.169444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.179460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.195629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.208082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.223173][ T4165] device veth1_vlan entered promiscuous mode [ 65.233820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.241914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.253805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.288173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.297372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.306556][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.313698][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.321801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.332500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.340945][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.348070][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.357347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.366260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.375088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.383114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.390593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.398218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.424220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.436231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.445397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.454932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.463684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.471950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.481074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.490586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.501988][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.519756][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.545862][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.556628][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.570867][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.590372][ T4165] device veth0_macvtap entered promiscuous mode [ 65.612886][ T4165] device veth1_macvtap entered promiscuous mode [ 65.624948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.640448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.650944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.665873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.677891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.687187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.696181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.705628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.732965][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.744600][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.765550][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.799494][ T4166] device veth0_vlan entered promiscuous mode [ 65.807205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.816910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.825929][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.835465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.845979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.854933][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.863912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.871793][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.879453][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.888269][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.900086][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.911839][ T4165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.923121][ T4165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.931874][ T4165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.940762][ T4165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.957233][ T4166] device veth1_vlan entered promiscuous mode [ 65.970855][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.979042][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.988203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.997159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.008172][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.017185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.026714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.035967][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.044815][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.062752][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.082509][ T4173] device veth0_vlan entered promiscuous mode [ 66.139846][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.155595][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.164668][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.180244][ T4173] device veth1_vlan entered promiscuous mode [ 66.197822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.208193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.220129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.231738][ T4166] device veth0_macvtap entered promiscuous mode [ 66.289060][ T4172] device veth0_vlan entered promiscuous mode [ 66.313696][ T4166] device veth1_macvtap entered promiscuous mode [ 66.330765][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.340662][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.349929][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.358346][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.368216][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.377334][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.385755][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.399700][ T4172] device veth1_vlan entered promiscuous mode [ 66.435717][ T4173] device veth0_macvtap entered promiscuous mode [ 66.449475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.458011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.467286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.475892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.484076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.494595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.503493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.515629][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.523031][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.528152][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.531053][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.542803][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.570545][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.592624][ T4173] device veth1_macvtap entered promiscuous mode [ 66.613124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.628602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.647245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.663302][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.674679][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.686191][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.714230][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.726033][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.742608][ T4166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.751356][ T4166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.761552][ T4166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.770573][ T4166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.789878][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.801848][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.812933][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.823587][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.835257][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.844777][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.854390][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.862835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.871410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.881571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.890702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.904992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.919234][ T4172] device veth0_macvtap entered promiscuous mode [ 66.929433][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.940978][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.951104][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.962985][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.974221][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.989359][ T4172] device veth1_macvtap entered promiscuous mode [ 67.008519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.020712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.029797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.040135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.049504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.060017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.074330][ T4173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.090273][ T4173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.100012][ T4173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.108894][ T4173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.123521][ T4211] Bluetooth: hci3: command 0x040f tx timeout [ 67.130188][ T4211] Bluetooth: hci0: command 0x040f tx timeout [ 67.158407][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.170715][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.187458][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.201521][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.202549][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 67.231273][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 67.238132][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.247915][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 67.248917][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.283174][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.318605][ T4171] device veth0_vlan entered promiscuous mode [ 67.334139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.350004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.360769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.375304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.386769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.398440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.410923][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.422987][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.434058][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.444820][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.455145][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.466673][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.479169][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.522892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.542198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.566090][ T4172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.575761][ T4172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.585947][ T4172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.598993][ T4172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.611410][ T4171] device veth1_vlan entered promiscuous mode [ 67.699131][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.722438][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.779654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.788067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.805329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.811527][ T4246] loop1: detected capacity change from 0 to 32768 [ 67.839195][ T4171] device veth0_macvtap entered promiscuous mode [ 67.855568][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.874463][ T4246] ======================================================= [ 67.874463][ T4246] WARNING: The mand mount option has been deprecated and [ 67.874463][ T4246] and is ignored by this kernel. Remove the mand [ 67.874463][ T4246] option from the mount to silence this warning. [ 67.874463][ T4246] ======================================================= [ 67.877940][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.923106][ T4171] device veth1_macvtap entered promiscuous mode [ 67.934339][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.951410][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.958047][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.997387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.007193][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.016310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.042488][ T4246] XFS (loop1): Mounting V5 Filesystem [ 68.051577][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.053491][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.060218][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.082769][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.093288][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.104560][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.117431][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.128218][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.139622][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.150510][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.151992][ T4246] XFS (loop1): Ending clean mount [ 68.164374][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.183029][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.191726][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.201642][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.219930][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.220670][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.228962][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.240552][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.266350][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.281010][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.300511][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.311490][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.329593][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.341211][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.353117][ T4165] XFS (loop1): Unmounting Filesystem [ 68.355601][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.370460][ T4171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.380130][ T4171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.389328][ T4171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.399782][ T4171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.450660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.481840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.496813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.521555][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.533005][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.564270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.756070][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.768749][ T4263] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.806102][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.854211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.883753][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.916063][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.974789][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.193592][ T4247] Bluetooth: hci0: command 0x0419 tx timeout [ 69.202448][ T4247] Bluetooth: hci3: command 0x0419 tx timeout [ 69.273834][ T4247] Bluetooth: hci4: command 0x0419 tx timeout [ 69.288492][ T4247] Bluetooth: hci2: command 0x0419 tx timeout [ 69.319791][ T4247] Bluetooth: hci1: command 0x0419 tx timeout [ 69.391522][ T4286] loop1: detected capacity change from 0 to 2048 [ 69.465328][ T4286] UDF-fs: bad mount option "vodume=00000@" or missing value [ 69.576206][ T4274] loop0: detected capacity change from 0 to 40427 [ 69.649241][ T4274] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 69.658351][ T4274] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 69.681913][ T4274] F2FS-fs (loop0): invalid crc value [ 69.743417][ T4274] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.908032][ T4274] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 69.940788][ T4274] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 70.513489][ T4329] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.31' sets config #0 [ 70.674368][ T4274] syz.0.11 (4274): drop_caches: 2 [ 71.123518][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.276904][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.283587][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.502458][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.542233][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.600829][ T13] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 71.658344][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.722720][ T13] usb 5-1: config 0 descriptor?? [ 71.884895][ T4381] device syzkaller1 entered promiscuous mode [ 72.206630][ T13] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 72.240577][ T13] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input5 [ 72.336136][ T4398] loop2: detected capacity change from 0 to 1024 [ 72.417531][ T13] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 72.418392][ T4404] loop3: detected capacity change from 0 to 256 [ 72.502310][ T13] usb 5-1: USB disconnect, device number 2 [ 72.530435][ T4398] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,,errors=continue. Quota mode: none. [ 72.557067][ T4404] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.626201][ T4404] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 72.643941][ T4404] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 72.727836][ T4398] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 72.803009][ T4420] loop1: detected capacity change from 0 to 256 [ 72.888451][ T4363] loop0: detected capacity change from 0 to 32768 [ 72.954393][ T4363] XFS: noikeep mount option is deprecated. [ 73.169162][ T4363] XFS (loop0): Mounting V5 Filesystem [ 73.309028][ T4442] loop4: detected capacity change from 0 to 256 [ 73.528508][ T4363] XFS (loop0): Ending clean mount [ 73.624926][ T4363] XFS (loop0): Quotacheck needed: Please wait. [ 73.725322][ T4363] XFS (loop0): Quotacheck: Done. [ 73.734627][ T4456] device bond_slave_0 entered promiscuous mode [ 73.809430][ T4455] device bond_slave_0 left promiscuous mode [ 73.848923][ T4431] loop2: detected capacity change from 0 to 32768 [ 73.880458][ T26] audit: type=1326 audit(1732322828.591:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4457 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1e8b1819 code=0x7ffc0000 [ 73.928776][ T4431] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.60 (4431) [ 73.962818][ T26] audit: type=1326 audit(1732322828.621:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4457 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1e8b1819 code=0x7ffc0000 [ 74.016553][ T4465] netlink: 'syz.4.73': attribute type 3 has an invalid length. [ 74.032168][ T26] audit: type=1326 audit(1732322828.621:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4457 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fcf1e8b1819 code=0x7ffc0000 [ 74.065846][ T4363] XFS (loop0): User initiated shutdown received. [ 74.096915][ T4468] capability: warning: `syz.1.74' uses deprecated v2 capabilities in a way that may be insecure [ 74.130289][ T4431] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 74.169017][ T26] audit: type=1326 audit(1732322828.621:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4457 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1e8b1819 code=0x7ffc0000 [ 74.172268][ T4431] BTRFS info (device loop2): using free space tree [ 74.198733][ T4363] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 74.237597][ T4363] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 74.249739][ T4471] input: syz0 as /devices/virtual/input/input6 [ 74.263875][ T26] audit: type=1326 audit(1732322828.621:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4457 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1e8b1819 code=0x7ffc0000 [ 74.270722][ T4431] BTRFS info (device loop2): has skinny extents [ 74.294689][ T26] audit: type=1800 audit(1732322828.631:7): pid=4363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.37" name="bus" dev="loop0" ino=1067 res=0 errno=0 [ 74.317343][ T4471] input: failed to attach handler leds to device input6, error: -6 [ 74.339123][ T26] audit: type=1800 audit(1732322828.821:8): pid=4466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.37" name="file3" dev="loop0" ino=1063 res=0 errno=0 [ 74.371113][ T4172] XFS (loop0): Unmounting Filesystem [ 74.646312][ T4431] BTRFS info (device loop2): enabling ssd optimizations [ 75.165589][ T4474] loop4: detected capacity change from 0 to 32768 [ 75.241541][ T4504] loop1: detected capacity change from 0 to 1024 [ 75.283896][ T4504] EXT4-fs (loop1): Ignoring removed orlov option [ 75.290425][ T4504] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 75.322150][ T4504] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 75.381064][ T4474] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 75.443581][ T4474] JBD2: Ignoring recovery information on journal [ 75.550706][ T26] audit: type=1107 audit(1732322830.271:9): pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¿´ì°‰t)Ž…Ùa’cEð’, priority 20 [ 78.482513][ T4599] tipc: Cannot configure node identity twice [ 78.632514][ T4562] XFS (loop2): Mounting V5 Filesystem [ 78.654333][ T4609] loop1: detected capacity change from 0 to 4096 [ 78.732919][ T4562] XFS (loop2): Ending clean mount [ 78.886680][ T4173] XFS (loop2): Unmounting Filesystem [ 78.943073][ T4621] loop3: detected capacity change from 0 to 164 [ 79.061691][ T4621] Unable to read rock-ridge attributes [ 79.120010][ T4621] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 79.453168][ T21] tipc: Node number set to 11578026 [ 79.639971][ T4641] binder: 4640:4641 ioctl c0046209 0 returned -22 [ 79.847969][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.040440][ T4658] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 80.065048][ T4658] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.134'. [ 80.262399][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 80.293469][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 80.493589][ T21] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 80.522620][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.551585][ T21] usb 5-1: Product: syz [ 80.597025][ T21] usb 5-1: Manufacturer: syz [ 80.601670][ T21] usb 5-1: SerialNumber: syz [ 80.639560][ T21] usb 5-1: config 0 descriptor?? [ 80.657654][ T4677] loop3: detected capacity change from 0 to 512 [ 80.694906][ T4635] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.712359][ T4635] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.814377][ T4677] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.141: inode #1: comm syz.3.141: iget: illegal inode # [ 80.861353][ T4651] loop0: detected capacity change from 0 to 32768 [ 80.881402][ T4677] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.141: error while reading EA inode 1 err=-117 [ 80.899929][ T4677] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.910408][ T4647] loop1: detected capacity change from 0 to 32768 [ 80.913490][ T4677] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.141: inode #1: comm syz.3.141: iget: illegal inode # [ 80.942493][ T4677] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.141: error while reading EA inode 1 err=-117 [ 80.981700][ T4635] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.003459][ T4677] EXT4-fs (loop3): 1 orphan inode deleted [ 81.009248][ T4677] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 81.011919][ T4635] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.095691][ T4651] XFS (loop0): Mounting V5 Filesystem [ 81.138449][ T4647] XFS (loop1): Mounting V5 Filesystem [ 81.155101][ T4166] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 81.175551][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.228924][ T4651] XFS (loop0): Ending clean mount [ 81.229356][ T4647] XFS (loop1): Ending clean mount [ 81.241057][ T4166] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 81.267984][ T4166] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 81.399062][ T4165] XFS (loop1): Unmounting Filesystem [ 81.484249][ T4676] loop2: detected capacity change from 0 to 40427 [ 81.532765][ T4676] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 81.534476][ T4172] XFS (loop0): Unmounting Filesystem [ 81.554576][ T7] cfg80211: failed to load regulatory.db [ 81.578439][ T4676] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 81.684936][ T4676] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.923377][ T4676] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 81.930562][ T4676] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.163763][ T21] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 82.202207][ T21] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 8a:db:0d:70:67:4d [ 82.255391][ T21] usb 5-1: USB disconnect, device number 3 [ 82.280506][ T21] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 82.344757][ T4210] Bluetooth: hci2: command 0x0407 tx timeout [ 83.013535][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 83.052234][ T4715] loop1: detected capacity change from 0 to 2048 [ 83.101840][ T4707] chnl_net:caif_netlink_parms(): no params data found [ 83.152259][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.160409][ T4720] loop0: detected capacity change from 0 to 1024 [ 83.197507][ T4715] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.243531][ T4715] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.330995][ T4720] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,grpquota,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 83.432392][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 83.445464][ T4720] overlayfs: unrecognized mount option "ime [ 83.445464][ T4720] string [ 83.445464][ T4720] statistic [ 83.445464][ T4720] state [ 83.445464][ T4720] realm [ 83.445464][ T4720] rateest [ 83.445464][ T4720] quota [ 83.445464][ T4720] pkttype [ 83.445464][ T4720] physdev [ 83.445464][ T4720] cgroup [ 83.445464][ T4720] cgroup [ 83.445464][ T4720] cgroup [ 83.445464][ T4720] owner [ 83.445464][ T4720] nfacct [ 83.445464][ T4720] nfacct [ 83.445464][ T4720] mac [ 83.445464][ T4720] limit [ 83.445464][ T4720] ipvs [ 83.445464][ T4720] helper [ 83.445464][ T4720] devgroup [ 83.445464][ T4720] cpu [ 83.445464][ T4720] conntrack [ 83.445464][ T4720] conntrack [ 83.445464][ T4720] conntrack [ 83.445464][ T4720] connlabel [ 83.445464][ T4720] connbytes [ 83.445464][ T4720] comment [ 83.445464][ T4720] bpf [ 83.445464][ T4720] bpf [ 83.445464][ T4720] connmark [ 83.445464][ T4720] mark [ 83.445464][ T4720] rpfilter [ 83.544358][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.561943][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.579614][ T4707] device bridge_slave_0 entered promiscuous mode [ 83.589069][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.597655][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.624768][ T21] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 83.639221][ T21] usb 5-1: config 0 has no interface number 0 [ 83.657554][ T4736] loop2: detected capacity change from 0 to 64 [ 83.670300][ T4707] device bridge_slave_1 entered promiscuous mode [ 83.743415][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.763259][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.811787][ T4736] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 83.865701][ T21] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 83.878319][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.897081][ T21] usb 5-1: Product: syz [ 83.901291][ T21] usb 5-1: Manufacturer: syz [ 83.920348][ T21] usb 5-1: SerialNumber: syz [ 83.945032][ T4707] team0: Port device team_slave_0 added [ 83.975122][ T21] usb 5-1: config 0 descriptor?? [ 83.992544][ T4707] team0: Port device team_slave_1 added [ 84.033782][ T21] smsc95xx v2.0.0 [ 84.067766][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.081227][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.167887][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.200830][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.229434][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.268314][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.423577][ T4707] device hsr_slave_0 entered promiscuous mode [ 84.440858][ T4707] device hsr_slave_1 entered promiscuous mode [ 84.471109][ T4707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.495947][ T21] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 84.512208][ T4707] Cannot create hsr debugfs directory [ 84.522457][ T21] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 84.610272][ T4247] Bluetooth: hci0: command 0x0409 tx timeout [ 84.906441][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.025727][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.038389][ T21] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71 [ 85.055637][ T21] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 85.082332][ T21] usb 5-1: USB disconnect, device number 4 [ 85.151471][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.164557][ T4757] loop1: detected capacity change from 0 to 32768 [ 85.220194][ T4757] XFS (loop1): Mounting V5 Filesystem [ 85.275171][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.377836][ T4757] XFS (loop1): Ending clean mount [ 85.397272][ T4757] XFS (loop1): Quotacheck needed: Please wait. [ 85.491710][ T4776] loop0: detected capacity change from 0 to 40427 [ 85.516577][ T4757] XFS (loop1): Quotacheck: Done. [ 85.522471][ T4247] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.560305][ T4776] F2FS-fs (loop0): invalid crc value [ 85.628164][ T4776] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.644888][ T4165] XFS (loop1): Unmounting Filesystem [ 85.740109][ T4776] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 85.808936][ T4776] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 85.844401][ T4707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.883047][ T4707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.945862][ T4707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.953631][ T4247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.971496][ T4793] attempt to access beyond end of device [ 85.971496][ T4793] loop0: rw=524288, want=45072, limit=40427 [ 85.972082][ T4247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.015347][ T4793] attempt to access beyond end of device [ 86.015347][ T4793] loop0: rw=0, want=45072, limit=40427 [ 86.083126][ T4247] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.115899][ T4247] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.120247][ T144] attempt to access beyond end of device [ 86.120247][ T144] loop0: rw=2049, want=40992, limit=40427 [ 86.125595][ T4247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.179041][ T4707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.193618][ T4776] VFS:Filesystem freeze failed [ 86.194472][ T4247] usb 3-1: config 0 descriptor?? [ 86.515445][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.571308][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.588921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.603361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.659418][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 86.703512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.722937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.734053][ T4247] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 86.762278][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.769416][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.800016][ T4247] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 86.818777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.828718][ T4791] loop4: detected capacity change from 0 to 40427 [ 86.854597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.883609][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.890748][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.940035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.944803][ T4791] F2FS-fs (loop4): invalid crc value [ 86.992365][ T4791] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.047108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.068006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.109107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.147129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.188052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.194695][ T4791] F2FS-fs (loop4): Start checkpoint disabled! [ 87.208425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.264472][ T4791] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 87.364620][ T4796] loop1: detected capacity change from 0 to 32768 [ 87.385572][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.397508][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.411027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.450664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.473327][ T4519] attempt to access beyond end of device [ 87.473327][ T4519] loop4: rw=2049, want=40984, limit=40427 [ 87.492198][ T4176] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.501194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.520897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.554290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.581838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.732434][ T4176] usb 1-1: Using ep0 maxpacket: 32 [ 87.852360][ T4176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.869115][ T154] device hsr_slave_0 left promiscuous mode [ 87.892806][ T4176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.910150][ T154] device hsr_slave_1 left promiscuous mode [ 87.912167][ T4176] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 87.929152][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.937521][ T4176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.966893][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.976352][ T4176] usb 1-1: config 0 descriptor?? [ 87.996977][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.008407][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.020359][ T154] device bridge_slave_1 left promiscuous mode [ 88.029923][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.071514][ T154] device bridge_slave_0 left promiscuous mode [ 88.078600][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.123214][ C0] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 88.196952][ T154] device veth1_macvtap left promiscuous mode [ 88.207336][ T154] device veth0_macvtap left promiscuous mode [ 88.214008][ T154] device veth1_vlan left promiscuous mode [ 88.228689][ T154] device veth0_vlan left promiscuous mode [ 88.455914][ T4176] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 88.477243][ T4176] ft260 0003:0403:6030.0003: hidraw1: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 88.482180][ T4835] loop4: detected capacity change from 0 to 256 [ 88.542185][ T4835] FAT-fs (loop4): bogus number of FAT structure [ 88.559698][ T4835] FAT-fs (loop4): Can't find a valid FAT filesystem [ 88.634082][ T154] team0 (unregistering): Port device team_slave_1 removed [ 88.669606][ T154] team0 (unregistering): Port device team_slave_0 removed [ 88.677087][ T4176] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 88.712797][ T4215] Bluetooth: hci0: command 0x040f tx timeout [ 88.745102][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.800415][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.901469][ T4842] loop4: detected capacity change from 0 to 1024 [ 88.931535][ T4844] loop2: detected capacity change from 0 to 1024 [ 88.978592][ T4842] EXT4-fs (loop4): filesystem is read-only [ 88.990225][ T4211] usb 3-1: USB disconnect, device number 2 [ 88.998657][ T4842] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 89.015802][ T4842] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #32: comm syz.4.185: iget: special inode unallocated [ 89.036584][ T4842] EXT4-fs (loop4): no journal found [ 89.102239][ T4176] ft260 0003:0403:6030.0003: failed to retrieve status: -71 [ 89.138560][ T4176] ft260 0003:0403:6030.0003: failed to reset I2C controller: -71 [ 89.192638][ T4176] usb 1-1: USB disconnect, device number 2 [ 89.240119][ T154] bond0 (unregistering): Released all slaves [ 89.441500][ T4848] netlink: 'syz.4.189': attribute type 5 has an invalid length. [ 89.474127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.554639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.606284][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.693322][ T4860] loop4: detected capacity change from 0 to 128 [ 90.293223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.315274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.383272][ T4707] device veth0_vlan entered promiscuous mode [ 90.411436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.426693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.456868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.486984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.519001][ T4707] device veth1_vlan entered promiscuous mode [ 90.615986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.645298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.678206][ T4707] device veth0_macvtap entered promiscuous mode [ 90.726603][ T4707] device veth1_macvtap entered promiscuous mode [ 90.729690][ T4856] loop1: detected capacity change from 0 to 32768 [ 90.783508][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.792484][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 90.832193][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.866209][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.932076][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.961447][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.995493][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.046321][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.087434][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.133966][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.149766][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.163761][ T4856] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.192 (4856) [ 91.183081][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.191275][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.279528][ T4856] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 91.280014][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.329025][ T4916] xt_CT: No such helper "snmp" [ 91.343064][ T4856] BTRFS info (device loop1): turning on sync discard [ 91.349895][ T4856] BTRFS info (device loop1): using free space tree [ 91.370719][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.428734][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.458657][ T4856] BTRFS info (device loop1): has skinny extents [ 91.471718][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.548760][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.601615][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.612715][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.623010][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.634360][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.648336][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.699510][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 91.699526][ T26] audit: type=1326 audit(1732322846.411:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4942 comm="syz.2.209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46ccbb5819 code=0x0 [ 91.734950][ T4707] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.802111][ T4707] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.824744][ T4856] BTRFS info (device loop1): enabling ssd optimizations [ 91.878947][ T4707] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.925680][ T4707] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.033633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.056401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.077987][ T4856] BTRFS info (device loop1): scrub: started on devid 1 [ 92.134724][ T4856] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [ 92.342462][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.379991][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.423508][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.447220][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.472980][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.548307][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.556103][ T4247] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.866568][ T4913] loop0: detected capacity change from 0 to 32768 [ 92.972280][ T4247] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 92.980496][ T4247] usb 5-1: config 0 has no interface number 0 [ 92.995196][ T4913] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.205 (4913) [ 93.041966][ T4247] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 93.089118][ T4247] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 93.114551][ T4247] usb 5-1: config 0 interface 255 has no altsetting 0 [ 93.130970][ T4247] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 93.147408][ T4247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.171955][ T4247] usb 5-1: config 0 descriptor?? [ 93.263394][ T4247] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 93.297930][ T4913] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 93.349506][ T4913] BTRFS info (device loop0): using free space tree [ 93.379591][ T4913] BTRFS info (device loop0): has skinny extents [ 93.500247][ T4210] usb 5-1: USB disconnect, device number 5 [ 93.588391][ T4913] BTRFS info (device loop0): enabling ssd optimizations [ 93.835814][ T5013] loop1: detected capacity change from 0 to 128 [ 93.854456][ T5012] loop5: detected capacity change from 0 to 512 [ 93.977477][ T5012] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.074172][ T5012] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 94.186298][ T5012] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 94.288643][ T5012] EXT4-fs (loop5): 1 truncate cleaned up [ 94.295885][ T5012] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 94.477501][ T4697] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 94.522201][ T4247] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.527899][ T5034] loop4: detected capacity change from 0 to 512 [ 94.883648][ T4247] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 94.932626][ T5034] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.002456][ T4247] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.011484][ T4247] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.029103][ T4247] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.051564][ T5034] EXT4-fs (loop4): 1 truncate cleaned up [ 95.066988][ T5034] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,journal_ioprio=0x0000000000000007,acl,auto_da_alloc,block_validity,quota,,errors=continue. Quota mode: writeback. [ 95.142400][ T4247] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.161684][ T4247] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.191670][ T4247] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.212669][ T5034] syz.4.224 (pid 5034) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 95.332497][ T4247] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.341437][ T4247] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.402317][ T4247] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.479685][ T5025] loop2: detected capacity change from 0 to 32768 [ 95.532495][ T4247] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.541422][ T4247] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.564673][ T5062] loop4: detected capacity change from 0 to 128 [ 95.638890][ T4247] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.752519][ T4247] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.761492][ T4247] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.828042][ T4247] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.931488][ T5025] XFS (loop2): Mounting V5 Filesystem [ 95.982401][ T4247] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.062340][ T4247] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.132207][ T4247] usb 2-1: config 0 interface 0 has no altsetting 0 [ 96.272661][ T4247] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.309226][ T4247] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.336858][ T4247] usb 2-1: config 0 interface 0 has no altsetting 0 [ 96.356340][ T5025] XFS (loop2): Ending clean mount [ 96.422578][ T4247] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.439455][ T4247] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.493669][ T4247] usb 2-1: config 0 interface 0 has no altsetting 0 [ 96.582276][ T4173] XFS (loop2): Unmounting Filesystem [ 96.702518][ T4247] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 96.762525][ T4247] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 96.791286][ T4247] usb 2-1: Product: syz [ 96.808784][ T4247] usb 2-1: Manufacturer: syz [ 96.839837][ T4247] usb 2-1: SerialNumber: syz [ 96.872994][ T4247] usb 2-1: config 0 descriptor?? [ 96.966696][ T4247] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 97.237244][ T5123] loop4: detected capacity change from 0 to 512 [ 97.321887][ T5041] usb 2-1: USB disconnect, device number 2 [ 97.332111][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 97.348349][ T5123] EXT4-fs (loop4): inline encryption not supported [ 97.348420][ T5086] loop0: detected capacity change from 0 to 32768 [ 97.378433][ T5041] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 97.431155][ T5123] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 97.555204][ T5123] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.639739][ T5123] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.241: corrupted inode contents [ 97.708416][ T5123] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #2: comm syz.4.241: mark_inode_dirty error [ 97.754523][ T5123] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.241: corrupted inode contents [ 97.813100][ T5123] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.241: mark_inode_dirty error [ 98.418561][ T5165] netlink: 468 bytes leftover after parsing attributes in process `syz.5.251'. [ 98.458707][ T5165] netlink: 28 bytes leftover after parsing attributes in process `syz.5.251'. [ 98.490073][ T5167] device syzkaller1 entered promiscuous mode [ 98.647567][ T5172] loop1: detected capacity change from 0 to 4096 [ 98.699414][ T5172] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 98.748325][ T5182] Non-string source [ 98.880482][ T5172] ntfs3: loop1: failed to convert "c46c" to cp857 [ 98.884235][ T5186] netlink: 376 bytes leftover after parsing attributes in process `syz.0.258'. [ 98.975353][ T5189] loop2: detected capacity change from 0 to 64 [ 99.575400][ T26] audit: type=1800 audit(1732322854.291:21): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.257" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 99.631960][ T5210] loop0: detected capacity change from 0 to 4096 [ 99.837400][ T5210] ntfs3: loop0: ino=1f, Correct links count -> 1. [ 99.864543][ T4156] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 99.893154][ T5218] ntfs3: loop0: ino=1f, Correct links count -> 1. [ 99.928801][ T5218] ntfs3: loop0: ino=1f, Correct links count -> 1. [ 99.976693][ T5210] ntfs3: loop0: ino=1f, Correct links count -> 1. [ 100.025096][ T5188] loop5: detected capacity change from 0 to 32768 [ 100.272317][ T4156] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.299360][ T4156] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 100.327087][ T4156] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 100.347322][ T4156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.368204][ T4156] usb 2-1: config 0 descriptor?? [ 100.389522][ T5213] loop4: detected capacity change from 0 to 32768 [ 100.434349][ T4156] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 100.459581][ T4156] dvb-usb: bulk message failed: -22 (3/0) [ 100.491402][ T4156] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 100.532641][ T4156] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 100.571792][ T4156] usb 2-1: media controller created [ 100.583974][ T4156] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.653386][ T4156] dvb-usb: bulk message failed: -22 (6/0) [ 100.659589][ T4156] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 100.734221][ T4156] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 100.784350][ T4156] dvb-usb: schedule remote query interval to 150 msecs. [ 100.791338][ T4156] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 100.826505][ T5233] loop5: detected capacity change from 0 to 2048 [ 100.860962][ T4156] usb 2-1: USB disconnect, device number 3 [ 100.929780][ T4156] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 100.967127][ T5233] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.037780][ T5237] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.258090][ T5227] loop0: detected capacity change from 0 to 32768 [ 101.419916][ T5257] loop1: detected capacity change from 0 to 256 [ 101.421623][ T5227] XFS (loop0): Mounting V5 Filesystem [ 101.473098][ T5257] exfat: Deprecated parameter 'namecase' [ 101.497814][ T5227] XFS (loop0): Ending clean mount [ 101.508645][ T5227] XFS (loop0): Quotacheck needed: Please wait. [ 101.557875][ T5257] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x257b52d7, utbl_chksum : 0xe619d30d) [ 101.580156][ T5263] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.281'. [ 101.635718][ T5262] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.281'. [ 101.647580][ T5227] XFS (loop0): Quotacheck: Done. [ 101.763991][ T26] audit: type=1800 audit(1732322856.481:22): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.270" name="bus" dev="loop0" ino=6155 res=0 errno=0 [ 101.850856][ T4172] XFS (loop0): Unmounting Filesystem [ 101.879774][ T5274] loop1: detected capacity change from 0 to 764 [ 101.918023][ T5260] XFS (loop0): SB summary counter sanity check failed [ 101.927987][ T5260] XFS (loop0): Metadata corruption detected at xfs_sb_write_verify+0x173/0x380, xfs_sb block 0x0 [ 101.986800][ T5260] XFS (loop0): Unmount and run xfs_repair [ 101.999068][ T5260] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 102.008473][ T5260] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 102.017391][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.054201][ T5260] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 102.063610][ T5260] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 102.073597][ T5260] 00000030: 00 00 00 00 00 00 00 08 00 00 00 00 00 00 18 00 ................ [ 102.082799][ T5260] 00000040: 00 00 00 00 00 00 18 01 00 00 00 00 00 00 18 02 ................ [ 102.091774][ T5260] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 102.113124][ T5260] 00000060: 00 00 0b e8 b4 f5 02 00 04 00 00 02 00 00 00 00 ................ [ 102.133477][ T5260] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 102.152173][ T5260] XFS (loop0): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x37a/0x6c0 (fs/xfs/xfs_buf.c:1515). Shutting down filesystem. [ 102.190914][ T5260] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 102.284903][ T5285] loop5: detected capacity change from 0 to 22 [ 102.291358][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 102.320906][ T5285] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 102.381737][ T5285] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 102.396021][ T5287] loop1: detected capacity change from 0 to 512 [ 102.427252][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.439089][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.450452][ T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 102.466998][ T5287] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.483238][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.531443][ T5287] EXT4-fs (loop1): 1 truncate cleaned up [ 102.551277][ T21] usb 3-1: config 0 descriptor?? [ 102.576082][ T5287] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 102.769114][ T5272] loop4: detected capacity change from 0 to 32768 [ 102.827713][ T5296] loop5: detected capacity change from 0 to 4096 [ 102.835046][ T5272] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.286 (5272) [ 102.906414][ T5272] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 102.977118][ T5272] BTRFS info (device loop4): using free space tree [ 102.988609][ T5306] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.047802][ T5272] BTRFS info (device loop4): has skinny extents [ 103.064066][ T21] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 103.089264][ T21] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 103.122724][ T21] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 103.146176][ T21] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 103.206208][ T21] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 103.241675][ T4416] udevd[4416]: failed to send result of seq 11659 to main daemon: Connection refused [ 103.256598][ T21] appleir 0003:05AC:8241.0004: No inputs registered, leaving [ 103.340253][ T21] appleir 0003:05AC:8241.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 103.359465][ T5335] loop0: detected capacity change from 0 to 1024 [ 103.390324][ T5272] BTRFS info (device loop4): enabling ssd optimizations [ 103.440969][ T4159] udevd[4159]: failed to send result of seq 11651 to main daemon: Transport endpoint is not connected [ 103.458998][ T21] usb 3-1: USB disconnect, device number 3 [ 103.670264][ T5345] loop5: detected capacity change from 0 to 256 [ 103.764253][ T5345] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 103.920866][ T5350] 9pnet: Insufficient options for proto=fd [ 103.947114][ T5349] kernel read not supported for file /${$ (pid: 5349 comm: syz.0.304) [ 103.982625][ T26] audit: type=1800 audit(1732322858.701:23): pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.304" name="${$" dev="mqueue" ino=36472 res=0 errno=0 [ 104.164462][ T26] audit: type=1326 audit(1732322858.881:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29ded5819 code=0x7ffc0000 [ 104.228322][ T26] audit: type=1326 audit(1732322858.911:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd29ded5819 code=0x7ffc0000 [ 104.251109][ T23] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 104.283507][ T26] audit: type=1326 audit(1732322858.911:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29ded5819 code=0x7ffc0000 [ 104.344381][ T26] audit: type=1326 audit(1732322858.921:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd29ded5819 code=0x7ffc0000 [ 104.382831][ T5343] loop1: detected capacity change from 0 to 32768 [ 104.390299][ T26] audit: type=1326 audit(1732322858.921:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29ded5819 code=0x7ffc0000 [ 104.418298][ T26] audit: type=1326 audit(1732322858.921:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd29ded5819 code=0x7ffc0000 [ 104.440926][ T26] audit: type=1326 audit(1732322858.921:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29ded5819 code=0x7ffc0000 [ 104.510246][ T5343] XFS (loop1): Mounting V5 Filesystem [ 104.585276][ T5343] XFS (loop1): Ending clean mount [ 104.618275][ T4165] XFS (loop1): Unmounting Filesystem [ 104.652566][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.662397][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.673039][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.681945][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 104.694320][ T23] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 104.703754][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.742579][ T5352] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 104.782092][ T23] hub 3-1:1.0: bad descriptor, ignoring hub [ 104.788160][ T23] hub: probe of 3-1:1.0 failed with error -5 [ 104.796198][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 104.805181][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 104.814290][ T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 104.820624][ T23] cdc_wdm 3-1:1.0: Unknown control protocol [ 104.902103][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 105.111014][ T5397] netlink: 32 bytes leftover after parsing attributes in process `syz.4.318'. [ 105.122323][ T21] usb 3-1: USB disconnect, device number 4 [ 105.183778][ T13] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 105.202086][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.210360][ T13] usb 1-1: Product: syz [ 105.222084][ T13] usb 1-1: Manufacturer: syz [ 105.226719][ T13] usb 1-1: SerialNumber: syz [ 105.403065][ T5395] loop1: detected capacity change from 0 to 40427 [ 105.457210][ T5395] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(524035) [ 105.471000][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.478823][ T5395] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 105.498326][ T5395] F2FS-fs (loop1): invalid crc value [ 105.548995][ T5395] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.658269][ T5395] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 105.665640][ T5395] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.737552][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 105.737568][ T26] audit: type=1326 audit(1732322860.451:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5411 comm="syz.2.323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46ccbb5819 code=0x0 [ 105.768318][ T4165] attempt to access beyond end of device [ 105.768318][ T4165] loop1: rw=2049, want=45104, limit=40427 [ 105.780071][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 105.840490][ T5415] loop5: detected capacity change from 0 to 64 [ 105.932306][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.945726][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.959617][ T21] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 105.971354][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.989250][ T21] usb 5-1: config 0 descriptor?? [ 106.102891][ T5419] input: syz0 as /devices/virtual/input/input9 [ 106.218865][ T13] snd-usb-audio: probe of 1-1:222.0 failed with error -2 [ 106.406965][ T5039] usb 1-1: USB disconnect, device number 3 [ 106.482486][ T21] kye 0003:0458:0138.0005: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.4-1/input0 [ 106.690714][ T4247] usb 5-1: USB disconnect, device number 6 [ 106.908636][ T5454] loop1: detected capacity change from 0 to 4096 [ 106.967419][ T5454] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 107.021563][ T5458] input: syz1 as /devices/virtual/input/input11 [ 107.110207][ T5464] loop0: detected capacity change from 0 to 8 [ 107.658251][ T4697] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.778853][ T4697] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.887592][ T4697] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.076125][ T4697] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.263512][ T5472] loop2: detected capacity change from 0 to 32768 [ 108.304646][ T5476] loop1: detected capacity change from 0 to 256 [ 108.356438][ T5476] FAT-fs (loop1): Unrecognized mount option "!6f²X4Åó>5 4ß4"åÛþ@al" or missing value [ 108.384104][ T5470] loop4: detected capacity change from 0 to 40427 [ 108.480024][ T5470] F2FS-fs (loop4): invalid crc value [ 108.511042][ T5470] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.641896][ T5470] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 108.820326][ T5470] F2FS-fs (loop4) : inject evict_inode fail in f2fs_evict_inode of evict+0x529/0x930 [ 108.847472][ T5477] chnl_net:caif_netlink_parms(): no params data found [ 108.880974][ T4171] attempt to access beyond end of device [ 108.880974][ T4171] loop4: rw=524288, want=45072, limit=40427 [ 108.902403][ T4171] attempt to access beyond end of device [ 108.902403][ T4171] loop4: rw=0, want=45072, limit=40427 [ 108.947031][ T5489] loop5: detected capacity change from 0 to 128 [ 109.071588][ T5489] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 109.087970][ T5489] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.118298][ T4251] attempt to access beyond end of device [ 109.118298][ T4251] loop4: rw=2049, want=40992, limit=40427 [ 109.243804][ T5477] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.250967][ T5477] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.270257][ T5477] device bridge_slave_0 entered promiscuous mode [ 109.406955][ T5477] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.421561][ T5477] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.445153][ T5477] device bridge_slave_1 entered promiscuous mode [ 109.469766][ T5486] loop1: detected capacity change from 0 to 32768 [ 109.548504][ T5504] loop5: detected capacity change from 0 to 1024 [ 109.564646][ T5477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.618641][ T5504] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 109.644598][ T5477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.714731][ T5504] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 109.748707][ T5486] XFS (loop1): Mounting V5 Filesystem [ 109.847699][ T5477] team0: Port device team_slave_0 added [ 109.856077][ T5477] team0: Port device team_slave_1 added [ 109.987267][ T5486] XFS (loop1): Ending clean mount [ 110.073506][ T5486] XFS (loop1): Quotacheck needed: Please wait. [ 110.080070][ T4697] device hsr_slave_0 left promiscuous mode [ 110.115241][ T4697] device hsr_slave_1 left promiscuous mode [ 110.152582][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.161706][ T5486] XFS (loop1): Quotacheck: Done. [ 110.198965][ T26] audit: type=1326 audit(1732322864.911:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ccbb5819 code=0x7ffc0000 [ 110.212114][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.243284][ T5537] loop5: detected capacity change from 0 to 128 [ 110.263034][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.280893][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.283718][ T26] audit: type=1326 audit(1732322864.981:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46ccbb5819 code=0x7ffc0000 [ 110.311049][ T4697] device bridge_slave_1 left promiscuous mode [ 110.321673][ T5537] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 110.331300][ T4165] XFS (loop1): Unmounting Filesystem [ 110.343619][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.353489][ T4697] device bridge_slave_0 left promiscuous mode [ 110.359815][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.371971][ T26] audit: type=1326 audit(1732322864.981:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ccbb5819 code=0x7ffc0000 [ 110.407672][ T26] audit: type=1326 audit(1732322864.991:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46ccbb5819 code=0x7ffc0000 [ 110.435404][ T4697] device veth1_macvtap left promiscuous mode [ 110.441528][ T4697] device veth0_macvtap left promiscuous mode [ 110.455759][ T4697] device veth1_vlan left promiscuous mode [ 110.461778][ T4697] device veth0_vlan left promiscuous mode [ 110.477216][ T5539] loop2: detected capacity change from 0 to 47 [ 110.483846][ T4247] Bluetooth: hci3: command 0x0409 tx timeout [ 110.498815][ T26] audit: type=1326 audit(1732322864.991:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ccbb5819 code=0x7ffc0000 [ 110.559163][ T26] audit: type=1326 audit(1732322864.991:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f46ccbb5819 code=0x7ffc0000 [ 110.638241][ T26] audit: type=1326 audit(1732322864.991:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46ccbb5819 code=0x7ffc0000 [ 111.261423][ T4697] team0 (unregistering): Port device team_slave_1 removed [ 111.306201][ T4697] team0 (unregistering): Port device team_slave_0 removed [ 111.328201][ T5542] loop5: detected capacity change from 0 to 32768 [ 111.345162][ T4697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.377524][ T4697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.382226][ T5542] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.370 (5542) [ 111.455052][ T5542] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 111.473355][ T5542] BTRFS info (device loop5): setting nodatacow, compression disabled [ 111.492608][ T5542] BTRFS info (device loop5): force zlib compression, level 3 [ 111.518535][ T5542] BTRFS info (device loop5): turning off barriers [ 111.525901][ T5542] BTRFS info (device loop5): enabling ssd optimizations [ 111.542801][ T5542] BTRFS info (device loop5): using spread ssd allocation scheme [ 111.552754][ T4697] bond0 (unregistering): Released all slaves [ 111.560474][ T5542] BTRFS info (device loop5): setting nodatacow [ 111.574836][ T5542] BTRFS info (device loop5): using free space tree [ 111.589238][ T5542] BTRFS info (device loop5): has skinny extents [ 111.694848][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.701885][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.789329][ T5477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.839891][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.853982][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.967414][ T5477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.462281][ T5040] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.499610][ T5477] device hsr_slave_0 entered promiscuous mode [ 112.521656][ T5477] device hsr_slave_1 entered promiscuous mode [ 112.528628][ T5477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.538733][ T5477] Cannot create hsr debugfs directory [ 112.552274][ T5611] Bluetooth: hci3: command 0x041b tx timeout [ 112.564759][ T5544] chnl_net:caif_netlink_parms(): no params data found [ 112.705441][ T5040] usb 3-1: Using ep0 maxpacket: 16 [ 112.807674][ T5544] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.817307][ T5544] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.828201][ T5544] device bridge_slave_0 entered promiscuous mode [ 112.835755][ T5040] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 112.844816][ T5040] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 112.866171][ T5040] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 112.877817][ T5040] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 112.879745][ T5638] loop5: detected capacity change from 0 to 1024 [ 112.886923][ T5040] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 112.886953][ T5040] usb 3-1: config 0 has no interface number 0 [ 112.886989][ T5040] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 112.887020][ T5040] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 112.887046][ T5040] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.887076][ T5040] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.887105][ T5040] usb 3-1: config 0 interface 125 has no altsetting 0 [ 112.887125][ T5040] usb 3-1: config 0 interface 125 has no altsetting 2 [ 112.982190][ T5544] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.998659][ T5544] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.024701][ T5544] device bridge_slave_1 entered promiscuous mode [ 113.042470][ T5040] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 113.084160][ T5040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.094300][ T5040] usb 3-1: Product: syz [ 113.098491][ T5040] usb 3-1: Manufacturer: syz [ 113.137985][ T5544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.142769][ T5040] usb 3-1: SerialNumber: syz [ 113.171388][ T5611] Bluetooth: hci2: command 0x0409 tx timeout [ 113.178499][ T5040] usb 3-1: config 0 descriptor?? [ 113.204404][ T5544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.216405][ T5646] loop1: detected capacity change from 0 to 2048 [ 113.233935][ T5040] usb 3-1: selecting invalid altsetting 2 [ 113.261510][ T5638] EXT4-fs (loop5): Test dummy encryption mode enabled [ 113.293563][ T5638] EXT4-fs (loop5): Ignoring removed orlov option [ 113.322893][ T5477] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.344263][ T5544] team0: Port device team_slave_0 added [ 113.351311][ T5646] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.352781][ T5638] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 113.363663][ T5477] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.390024][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.414088][ T5477] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.443173][ T5544] team0: Port device team_slave_1 added [ 113.468369][ T5646] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.389: bg 0: block 234: padding at end of block bitmap is not set [ 113.545432][ T5477] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 113.562230][ T5646] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 25 with max blocks 1 with error 117 [ 113.594725][ T5544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.611067][ T5544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.645866][ T5646] EXT4-fs (loop1): This should not happen!! Data will be lost [ 113.645866][ T5646] [ 113.666590][ T5544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.737971][ T5544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.769480][ T5544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.802820][ T5544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.971215][ T5544] device hsr_slave_0 entered promiscuous mode [ 114.001031][ T5544] device hsr_slave_1 entered promiscuous mode [ 114.022681][ T5544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.027642][ T5676] loop5: detected capacity change from 0 to 1024 [ 114.030275][ T5544] Cannot create hsr debugfs directory [ 114.114694][ T5040] parport0: fix this legacy no-device port driver! [ 114.126677][ T5676] EXT4-fs (loop5): Test dummy encryption mode enabled [ 114.166909][ T5477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.188273][ T5676] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,nodelalloc,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback. [ 114.216449][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.238445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.254940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.261643][ T5685] loop1: detected capacity change from 0 to 1024 [ 114.290035][ T5477] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.353516][ T4514] usb 3-1: USB disconnect, device number 5 [ 114.377559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.419316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.449662][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.456822][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.478847][ T5684] hfsplus: can't free extent [ 114.499857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.539911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.564586][ T154] hfsplus: b-tree write err: -5, ino 4 [ 114.590574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.607474][ T5676] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 114.631022][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.638249][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.645840][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 114.675234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.725256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.819766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.833722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.849331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.865605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.878618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.921507][ T5544] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 114.944821][ T5544] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 114.973138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.996157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.029980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.058582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.103203][ T5544] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 115.291540][ T4176] Bluetooth: hci2: command 0x041b tx timeout [ 115.296479][ T5544] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 115.337194][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.703932][ T5544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.765218][ T5733] loop5: detected capacity change from 0 to 128 [ 115.783797][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.802537][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.837646][ T5544] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.861706][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.883886][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.920031][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.927211][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.980367][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.003633][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.024549][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.042589][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.049728][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.106187][ T5477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.139801][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.154012][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.171978][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.180070][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.206536][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.250035][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.284121][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.313185][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.322674][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.362243][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.391668][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.419759][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.435467][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.456829][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.643987][ T5726] loop2: detected capacity change from 0 to 32768 [ 116.662224][ T4176] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 116.693971][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.714303][ T4514] Bluetooth: hci3: command 0x0419 tx timeout [ 116.718730][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.745815][ T5726] [ 116.745815][ T5726] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.745815][ T5726] [ 116.821057][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.843561][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.871036][ T5477] device veth0_vlan entered promiscuous mode [ 116.895759][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.910782][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.931143][ T144] [ 116.931143][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.931143][ T144] [ 116.961475][ T144] [ 116.961475][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.961475][ T144] [ 116.985796][ T4697] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.988621][ T144] [ 116.988621][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.988621][ T144] [ 117.018382][ T4173] [ 117.018382][ T4173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.018382][ T4173] [ 117.032749][ T4176] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.034218][ T276] [ 117.034218][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.034218][ T276] [ 117.041725][ T4176] usb 6-1: config 1 has no interface number 0 [ 117.041766][ T4176] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.041798][ T4176] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 117.041827][ T4176] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.069658][ T4173] [ 117.069658][ T4173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.069658][ T4173] [ 117.079211][ T276] ================================================================== [ 117.107571][ T276] BUG: KASAN: use-after-free in txEnd+0x350/0x560 [ 117.114022][ T276] Write of size 8 at addr ffff88807d62f040 by task jfsCommit/276 [ 117.121767][ T276] [ 117.124112][ T276] CPU: 1 PID: 276 Comm: jfsCommit Not tainted 5.15.173-syzkaller #0 [ 117.132113][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 117.142189][ T276] Call Trace: [ 117.145506][ T276] [ 117.148454][ T276] dump_stack_lvl+0x1e3/0x2d0 [ 117.153161][ T276] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 117.158817][ T276] ? _printk+0xd1/0x120 [ 117.163011][ T276] ? __wake_up_klogd+0xcc/0x100 [ 117.167887][ T276] ? panic+0x860/0x860 [ 117.171983][ T276] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 117.177481][ T276] ? __mutex_unlock_slowpath+0x6f6/0x750 [ 117.183151][ T276] print_address_description+0x63/0x3b0 [ 117.188746][ T276] ? txEnd+0x350/0x560 [ 117.192846][ T276] kasan_report+0x16b/0x1c0 [ 117.197376][ T276] ? txEnd+0x350/0x560 [ 117.201491][ T276] kasan_check_range+0x27e/0x290 [ 117.206456][ T276] txEnd+0x350/0x560 [ 117.210389][ T276] jfs_lazycommit+0x60d/0xc30 [ 117.215089][ T276] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 117.221009][ T276] ? lockdep_hardirqs_on+0x94/0x130 [ 117.226239][ T276] ? txFreelock+0x580/0x580 [ 117.230771][ T276] ? sched_dynamic_update+0x240/0x240 [ 117.236182][ T276] kthread+0x3f6/0x4f0 [ 117.240276][ T276] ? txFreelock+0x580/0x580 [ 117.244804][ T276] ? kthread_blkcg+0xd0/0xd0 [ 117.249421][ T276] ret_from_fork+0x1f/0x30 [ 117.253880][ T276] [ 117.256910][ T276] [ 117.259235][ T276] Allocated by task 5726: [ 117.263547][ T276] ____kasan_kmalloc+0xba/0xf0 [ 117.268305][ T276] kmem_cache_alloc_trace+0x143/0x290 [ 117.273665][ T276] lmLogOpen+0x314/0x1030 [ 117.277991][ T276] jfs_mount_rw+0xe3/0x640 [ 117.282399][ T276] jfs_fill_super+0x69f/0xc70 [ 117.287064][ T276] mount_bdev+0x2c9/0x3f0 [ 117.291382][ T276] legacy_get_tree+0xeb/0x180 [ 117.296050][ T276] vfs_get_tree+0x88/0x270 [ 117.300457][ T276] do_new_mount+0x2ba/0xb40 [ 117.302243][ T4176] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.304949][ T276] __se_sys_mount+0x2d5/0x3c0 [ 117.314270][ T4176] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.318676][ T276] do_syscall_64+0x3b/0xb0 [ 117.331054][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.331128][ T4176] usb 6-1: Product: syz [ 117.336969][ T276] [ 117.336977][ T276] Freed by task 4173: [ 117.336988][ T276] kasan_set_track+0x4b/0x80 [ 117.337012][ T276] kasan_set_free_info+0x1f/0x40 [ 117.337029][ T276] ____kasan_slab_free+0xd8/0x120 [ 117.337047][ T276] slab_free_freelist_hook+0xdd/0x160 [ 117.342628][ T4176] usb 6-1: Manufacturer: syz [ 117.343510][ T276] kfree+0xf1/0x270 [ 117.347486][ T4176] usb 6-1: SerialNumber: syz [ 117.352056][ T276] lmLogClose+0x29d/0x530 [ 117.352079][ T276] jfs_umount+0x298/0x370 [ 117.352096][ T276] jfs_put_super+0x86/0x180 [ 117.352112][ T276] generic_shutdown_super+0x130/0x310 [ 117.352130][ T276] kill_block_super+0x7a/0xe0 [ 117.352147][ T276] deactivate_locked_super+0xa0/0x110 [ 117.352168][ T276] cleanup_mnt+0x44e/0x500 [ 117.352186][ T276] task_work_run+0x129/0x1a0 [ 117.352207][ T276] exit_to_user_mode_loop+0x106/0x130 [ 117.352226][ T276] exit_to_user_mode_prepare+0xb1/0x140 [ 117.352244][ T276] syscall_exit_to_user_mode+0x5d/0x240 [ 117.352266][ T276] do_syscall_64+0x47/0xb0 [ 117.352284][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.352306][ T276] [ 117.352312][ T276] Last potentially related work creation: [ 117.352319][ T276] kasan_save_stack+0x36/0x60 [ 117.352340][ T276] kasan_record_aux_stack+0xba/0x100 [ 117.352359][ T276] kvfree_call_rcu+0x118/0x8a0 [ 117.352379][ T276] neigh_remove_one+0x4b1/0x5c0 [ 117.352398][ T276] ___neigh_create+0x45a/0x2220 [ 117.352416][ T276] ip6_finish_output2+0x11c5/0x15a0 [ 117.352438][ T276] ndisc_send_skb+0xae0/0x13c0 [ 117.352458][ T276] addrconf_rs_timer+0x357/0x610 [ 117.352477][ T276] call_timer_fn+0x16d/0x560 [ 117.352494][ T276] __run_timers+0x67c/0x890 [ 117.352510][ T276] run_timer_softirq+0x63/0xf0 [ 117.352534][ T276] handle_softirqs+0x3a7/0x930 [ 117.352552][ T276] __irq_exit_rcu+0x157/0x240 [ 117.352569][ T276] irq_exit_rcu+0x5/0x20 [ 117.352585][ T276] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 117.352617][ T276] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 117.352641][ T276] [ 117.352646][ T276] The buggy address belongs to the object at ffff88807d62f000 [ 117.352646][ T276] which belongs to the cache kmalloc-1k of size 1024 [ 117.352665][ T276] The buggy address is located 64 bytes inside of [ 117.352665][ T276] 1024-byte region [ffff88807d62f000, ffff88807d62f400) [ 117.352686][ T276] The buggy address belongs to the page: [ 117.352696][ T276] page:ffffea0001f58a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807d62d800 pfn:0x7d628 [ 117.352731][ T276] head:ffffea0001f58a00 order:3 compound_mapcount:0 compound_pincount:0 [ 117.352748][ T276] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 117.363688][ T5611] Bluetooth: hci2: command 0x040f tx timeout [ 117.368067][ T276] raw: 00fff00000010200 ffffea0001f65208 ffffea0001f3ce08 ffff888017041dc0 [ 117.608765][ T276] raw: ffff88807d62d800 0000000000100002 00000001ffffffff 0000000000000000 [ 117.617339][ T276] page dumped because: kasan: bad access detected [ 117.623752][ T276] page_owner tracks the page as allocated [ 117.629456][ T276] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3533, ts 64672964080, free_ts 64559816792 [ 117.648553][ T276] get_page_from_freelist+0x3b78/0x3d40 [ 117.654106][ T276] __alloc_pages+0x272/0x700 [ 117.658689][ T276] new_slab+0xbb/0x4b0 [ 117.662757][ T276] ___slab_alloc+0x6f6/0xe10 [ 117.667341][ T276] kmem_cache_alloc_trace+0x1a0/0x290 [ 117.672709][ T276] syslog_print+0x11d/0x9b0 [ 117.677206][ T276] do_syslog+0x842/0x940 [ 117.681443][ T276] __x64_sys_syslog+0x78/0x90 [ 117.686113][ T276] do_syscall_64+0x3b/0xb0 [ 117.690525][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.696419][ T276] page last free stack trace: [ 117.701080][ T276] free_unref_page_prepare+0xc34/0xcf0 [ 117.706534][ T276] free_unref_page+0x95/0x2d0 [ 117.711209][ T276] __unfreeze_partials+0x1b7/0x210 [ 117.716319][ T276] put_cpu_partial+0x132/0x1a0 [ 117.721082][ T276] ___cache_free+0xe3/0x100 [ 117.725584][ T276] qlist_free_all+0x36/0x90 [ 117.730171][ T276] kasan_quarantine_reduce+0x162/0x180 [ 117.735627][ T276] __kasan_slab_alloc+0x2f/0xc0 [ 117.740470][ T276] slab_post_alloc_hook+0x53/0x380 [ 117.745583][ T276] kmem_cache_alloc+0xf3/0x280 [ 117.750339][ T276] sock_alloc_inode+0x17/0xb0 [ 117.755018][ T276] new_inode_pseudo+0x60/0x210 [ 117.759776][ T276] __sock_create+0x11f/0x8f0 [ 117.764361][ T276] __sys_socket+0x132/0x370 [ 117.768863][ T276] __x64_sys_socket+0x76/0x80 [ 117.773540][ T276] do_syscall_64+0x3b/0xb0 [ 117.777959][ T276] [ 117.780322][ T276] Memory state around the buggy address: [ 117.785949][ T276] ffff88807d62ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 117.794001][ T276] ffff88807d62ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 117.802054][ T276] >ffff88807d62f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.810102][ T276] ^ [ 117.816242][ T276] ffff88807d62f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.824305][ T276] ffff88807d62f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.832354][ T276] ================================================================== [ 117.840401][ T276] Disabling lock debugging due to kernel taint [ 117.846618][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.867363][ T5477] device veth1_vlan entered promiscuous mode [ 117.875559][ T276] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 117.882782][ T276] CPU: 0 PID: 276 Comm: jfsCommit Tainted: G B 5.15.173-syzkaller #0 [ 117.892175][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 117.902248][ T276] Call Trace: [ 117.905548][ T276] [ 117.908496][ T276] dump_stack_lvl+0x1e3/0x2d0 [ 117.913198][ T276] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 117.918854][ T276] ? panic+0x860/0x860 [ 117.922949][ T276] ? preempt_schedule_common+0xa6/0xd0 [ 117.927044][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.928427][ T276] ? preempt_schedule+0xd9/0xe0 [ 117.940717][ T276] panic+0x318/0x860 [ 117.943365][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.944633][ T276] ? check_panic_on_warn+0x1d/0xa0 [ 117.957195][ T276] ? fb_is_primary_device+0xd0/0xd0 [ 117.962465][ T276] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 117.968466][ T276] ? _raw_spin_unlock+0x40/0x40 [ 117.973341][ T276] check_panic_on_warn+0x7e/0xa0 [ 117.978307][ T276] ? txEnd+0x350/0x560 [ 117.982405][ T276] end_report+0x6d/0xf0 [ 117.986578][ T276] kasan_report+0x18e/0x1c0 [ 117.991095][ T276] ? txEnd+0x350/0x560 [ 117.995268][ T276] kasan_check_range+0x27e/0x290 [ 118.000220][ T276] txEnd+0x350/0x560 [ 118.004131][ T276] jfs_lazycommit+0x60d/0xc30 [ 118.008903][ T276] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 118.014826][ T276] ? lockdep_hardirqs_on+0x94/0x130 [ 118.020052][ T276] ? txFreelock+0x580/0x580 [ 118.024577][ T276] ? sched_dynamic_update+0x240/0x240 [ 118.029981][ T276] kthread+0x3f6/0x4f0 [ 118.034074][ T276] ? txFreelock+0x580/0x580 [ 118.038599][ T276] ? kthread_blkcg+0xd0/0xd0 [ 118.039154][ T5786] loop2: detected capacity change from 0 to 128 [ 118.043202][ T276] ret_from_fork+0x1f/0x30 [ 118.043236][ T276] [ 118.043527][ T276] Kernel Offset: disabled [ 118.061438][ T276] Rebooting in 86400 seconds..