last executing test programs: 14.127844022s ago: executing program 4 (id=741): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xb2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @sliced={0x0, [0x8a10, 0xc7, 0x1, 0x2, 0x8, 0x7, 0x7, 0x7, 0x4, 0x8d3, 0x5, 0x45, 0xc235, 0x8, 0xb41, 0x2, 0x8, 0x7, 0x5, 0x800, 0x800, 0x4b, 0x8, 0x200, 0xd352, 0x83f, 0x2, 0x4, 0x5, 0x0, 0x3, 0xfff, 0x7, 0x6, 0x7, 0x1, 0x5, 0x6, 0x400, 0x401, 0x9, 0x1ff, 0xfffa, 0x5, 0x40, 0x3ff, 0x3, 0x7fff], 0x8001}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r4, 0x331, 0x70bd2d, 0xa6ff, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) 13.255348295s ago: executing program 4 (id=748): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000340)=@keyring) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x6) 10.583747846s ago: executing program 2 (id=754): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) 9.543216592s ago: executing program 2 (id=756): syz_open_dev$sndctrl(0x0, 0x1, 0x40200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) 8.219564303s ago: executing program 3 (id=759): r0 = syz_open_dev$evdev(&(0x7f0000001200), 0x2, 0x101800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000700000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) ioctl$TCXONC(r1, 0x4b3a, 0x3) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001240)={0x7, 0xd, 0x6, 0x1, "973fe86cb9be1e8cc7d385d59c2c8773cac38e5b185432c43b3e73c85ecf3de7"}) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4ab, &(0x7f0000000100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events.local\x00', 0x26e1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000240)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRES8, @ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac604001635f9c08b2615964ad0d2b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16, @ANYBLOB="4599"], 0x1, 0x702, &(0x7f0000001100)="$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") 7.023904111s ago: executing program 2 (id=761): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x21, 0x2, 0x2) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x3c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, &(0x7f0000000680)={{0x4, 0x3, 0x1, 0x2, 'syz1\x00', 0xa}, 0x0, [0x200, 0x9, 0x4, 0x2, 0x8ad73c7c, 0x3, 0x6, 0x26e, 0x6, 0x5, 0x3, 0xe, 0x0, 0x1, 0x0, 0x8001, 0xffff, 0x2, 0x4, 0x800, 0x6d2ea191, 0x2, 0x0, 0x1e, 0x6, 0xb39e, 0x8, 0xff, 0xcc5, 0x0, 0x1, 0x9, 0x3, 0xaa64, 0x6, 0x200, 0x0, 0x0, 0x8, 0x401, 0x6, 0xbb99, 0x2, 0x0, 0x4, 0x400, 0x9, 0x2, 0x2, 0x400, 0x5, 0xa, 0x44da, 0x4, 0x0, 0x456, 0x6, 0x5, 0x80000000, 0x401, 0x9, 0x7, 0x9, 0x9, 0x5, 0x7, 0x70a, 0x1, 0x9b, 0x9, 0x7, 0x3, 0xc, 0x6cc9afc0, 0x8, 0xa, 0x8c1d, 0x41e, 0x9, 0x4, 0x613e, 0xfffffffe, 0x4d, 0x7, 0x25, 0x3, 0x1000, 0x3, 0x1, 0x10001, 0x4, 0x1, 0x1, 0x784, 0x8, 0x9, 0x6, 0x7, 0x814bcba6, 0x4, 0x1, 0x3, 0x2, 0x4, 0x3ff, 0x2, 0x2, 0x6, 0x4, 0x0, 0x81, 0x2, 0x7, 0x86, 0xd, 0x8, 0x4, 0xcf9, 0xb216, 0x4, 0x8, 0x80, 0x0, 0x4, 0xd9, 0x0, 0x6, 0x9]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000000)={0xb}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet(0x10, 0x3, 0x2005) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) 6.964737382s ago: executing program 0 (id=762): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x4afa, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0x88}}], 0x1, 0x2000, 0x0) 6.962907302s ago: executing program 4 (id=763): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) socket$inet6(0xa, 0xa, 0x400100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2, &(0x7f0000002400)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000140)={{0x0, 0x7f}, 'port0\x00'}) tkill(0x0, 0x7) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x2000000}}, 0x20) 6.823957184s ago: executing program 3 (id=764): pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001002dbd700000000000e0000002000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000a0000df000000000000000008001f00030000004800010073686132353600"/248], 0x140}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 6.731990996s ago: executing program 0 (id=765): rt_sigqueueinfo(0xffffffffffffffff, 0x19, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020}, 0x1bdb) syz_emit_ethernet(0xfdef, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) open(0x0, 0x14927e, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) ioprio_get$uid(0x3, 0x0) 5.18786739s ago: executing program 0 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$phonet(0x23, 0x2, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'veth1_to_batadv\x00'}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r4, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000024c0)="02fe40bab3bac217f1a6e814488778d8e9ac3beee0074386a82fed334cb88055111c023ad070f69d932765a9b5c94f7027561c971b303db0fe2444a3f44361cdf49bf4477bcf6c0fb608f5552297e0e2fe3fbdbd6646d2512657a9cf86885523b1841bdf0658b46936f2e1e0dd04c9f1718b9654704ab7dd6b0fae145c52279f012bbae30183984a15d5296f942207a8a9e7db0df468925f8098987a78338f04239d25294ebab38981a1b83715fb49761ca24ad6541d563ba3dfa2d60ecb7c75f1f895c8fa7362798c4aca35a9c36b4e4ea1ef5847823e3e6b92110940f2ee", 0xdf}], 0x1}}], 0x1, 0x8090) shutdown(r4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010300000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x48080) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000150a0102000000000000000000000000090001"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.104280406s ago: executing program 0 (id=767): socket$inet6(0xa, 0xa, 0xff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x4}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28, 0x0, 0x1, 0x10, 0x0, @void, @value}, 0x28) clock_adjtime(0x0, &(0x7f0000001fc0)={0xcd7, 0x6, 0x5, 0xffffffffffff8001, 0x4, 0x0, 0x80000000, 0x4f, 0x152, 0xeab0, 0x10000, 0x2, 0x6, 0xffff, 0x5, 0x159692d2, 0x1, 0x7, 0x4, 0x2, 0x1, 0x3b, 0x100000000, 0x3, 0x80000001, 0x5}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0xfffffffc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xa, 0xff, 0x8, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0x0, 0x8000000000000000, 0x3ff, 0x2, 0x9, 0x3, 0x401, 0x7, 0x6}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) 3.727953743s ago: executing program 4 (id=768): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="060000000000000002004e25e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/135], 0x90) 3.510067545s ago: executing program 1 (id=769): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000205000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) 2.962652184s ago: executing program 1 (id=770): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000980)=ANY=[@ANYBLOB="636f6465706167653d63703933362c696f636861727365743d6d6163726f6d616e69616e2c747970653d673696712c0036ffe7939b047f613024df113ab0ed03ec3dd4924825d84f11d4469502870f416b8d6de9166d7fb44226544c3d6fec76fa8a535a7098d484adb91e343f305c3e3cd582d224b0d800a891e1212846961ff205fee6836156ca189ea6a19036df4e30da0e12ec7407264ca4917cdb277b74a264c571c8187f4131b3379b29e424ea0a050df177121a20346fe8f444f98c772a63f849db121a706e76b5c494c0abf9d9b146e0b2556d2a4824da0a4c8554aa411bcb1647475c114f41a2cbe4c9200221e3933eb8e733b9678dabe323a26de4bfbf3deec1d740c62226bc4f835eb612b310bb886cfc4d6bf667e88c282007a982"], 0x5, 0x2db, &(0x7f0000000200)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) 2.275990885s ago: executing program 3 (id=771): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4446, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0xfffffffd}) io_uring_enter(r0, 0x2d3e, 0x0, 0x2, 0x0, 0x0) 2.111248217s ago: executing program 1 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) 2.055137818s ago: executing program 3 (id=773): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000340)=@keyring) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x6) 2.047135448s ago: executing program 2 (id=774): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) 1.856445471s ago: executing program 1 (id=775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x1) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r1, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.838829322s ago: executing program 2 (id=776): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) unshare(0x8000480) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 1.632512105s ago: executing program 1 (id=777): syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00050201020c2402060602040c0032a3"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 1.412077998s ago: executing program 2 (id=778): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109", @ANYBLOB="8fcfd07ad0"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000180)=""/25) 1.195484432s ago: executing program 4 (id=779): syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 1.075845013s ago: executing program 4 (id=780): openat$ttyS3(0xffffff9c, &(0x7f0000000100), 0x80, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000000040)=':', 0x1}], 0x1) 908.005396ms ago: executing program 0 (id=781): creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 759.662069ms ago: executing program 0 (id=782): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 326.523675ms ago: executing program 3 (id=783): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x1, 0xc8}}}, 0x5) 147.815288ms ago: executing program 3 (id=784): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x21, 0x2, 0x2) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x3c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, &(0x7f0000000680)={{0x4, 0x3, 0x1, 0x2, 'syz1\x00', 0xa}, 0x0, [0x200, 0x9, 0x4, 0x2, 0x8ad73c7c, 0x3, 0x6, 0x26e, 0x6, 0x5, 0x3, 0xe, 0x0, 0x1, 0x0, 0x8001, 0xffff, 0x2, 0x4, 0x800, 0x6d2ea191, 0x2, 0x0, 0x1e, 0x6, 0xb39e, 0x8, 0xff, 0xcc5, 0x0, 0x1, 0x9, 0x3, 0xaa64, 0x6, 0x200, 0x0, 0x0, 0x8, 0x401, 0x6, 0xbb99, 0x2, 0x0, 0x4, 0x400, 0x9, 0x2, 0x2, 0x400, 0x5, 0xa, 0x44da, 0x4, 0x0, 0x456, 0x6, 0x5, 0x80000000, 0x401, 0x9, 0x7, 0x9, 0x9, 0x5, 0x7, 0x70a, 0x1, 0x9b, 0x9, 0x7, 0x3, 0xc, 0x6cc9afc0, 0x8, 0xa, 0x8c1d, 0x41e, 0x9, 0x4, 0x613e, 0xfffffffe, 0x4d, 0x7, 0x25, 0x3, 0x1000, 0x3, 0x1, 0x10001, 0x4, 0x1, 0x1, 0x784, 0x8, 0x9, 0x6, 0x7, 0x814bcba6, 0x4, 0x1, 0x3, 0x2, 0x4, 0x3ff, 0x2, 0x2, 0x6, 0x4, 0x0, 0x81, 0x2, 0x7, 0x86, 0xd, 0x8, 0x4, 0xcf9, 0xb216, 0x4, 0x8, 0x80, 0x0, 0x4, 0xd9, 0x0, 0x6, 0x9]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000000)={0xb}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet(0x10, 0x3, 0x2005) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. [ 67.452646][ T4239] cgroup: Unknown subsys name 'net' [ 67.572772][ T4239] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.089799][ T4239] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.049723][ T4257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.058444][ T4257] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.066725][ T4257] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.074371][ T4257] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.081828][ T4257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.090230][ T4257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.096208][ T4262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.099175][ T4257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.105598][ T4262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.111575][ T4257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.119260][ T4262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.126687][ T4263] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.134182][ T4262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.140523][ T4263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.146563][ T4262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.161085][ T4263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.161393][ T4262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.177654][ T4262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.197207][ T4262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.205280][ T4262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.213123][ T4262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.221274][ T4262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.231496][ T4265] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.239322][ T4265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.266182][ T4254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.274355][ T4254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.282296][ T4254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.290995][ T4254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.309367][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.316192][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.325398][ T4254] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.333005][ T4254] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.660753][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 71.768675][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 71.787394][ T4259] chnl_net:caif_netlink_parms(): no params data found [ 71.877448][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 71.896402][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.903537][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.912055][ T4251] device bridge_slave_0 entered promiscuous mode [ 71.943713][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.951062][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.959515][ T4251] device bridge_slave_1 entered promiscuous mode [ 71.967591][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 72.028512][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.035781][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.043617][ T4264] device bridge_slave_0 entered promiscuous mode [ 72.068367][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.086383][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.093545][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.101701][ T4264] device bridge_slave_1 entered promiscuous mode [ 72.122493][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.183422][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.190795][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.199759][ T4259] device bridge_slave_0 entered promiscuous mode [ 72.220294][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.227702][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.236128][ T4260] device bridge_slave_0 entered promiscuous mode [ 72.245432][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.255582][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.262692][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.270885][ T4260] device bridge_slave_1 entered promiscuous mode [ 72.280981][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.288261][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.296863][ T4259] device bridge_slave_1 entered promiscuous mode [ 72.314518][ T4251] team0: Port device team_slave_0 added [ 72.322460][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.365803][ T4251] team0: Port device team_slave_1 added [ 72.371716][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.378995][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.387128][ T4250] device bridge_slave_0 entered promiscuous mode [ 72.427516][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.435144][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.443780][ T4250] device bridge_slave_1 entered promiscuous mode [ 72.454310][ T4264] team0: Port device team_slave_0 added [ 72.471608][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.483235][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.494958][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.512229][ T4264] team0: Port device team_slave_1 added [ 72.527816][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.544360][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.551781][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.578093][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.608132][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.620479][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.646809][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.653832][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.680129][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.717726][ T4259] team0: Port device team_slave_0 added [ 72.729623][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.736799][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.764050][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.776666][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.783634][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.809702][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.836161][ T4260] team0: Port device team_slave_0 added [ 72.843345][ T4259] team0: Port device team_slave_1 added [ 72.865319][ T4250] team0: Port device team_slave_0 added [ 72.873493][ T4260] team0: Port device team_slave_1 added [ 72.907855][ T4250] team0: Port device team_slave_1 added [ 72.943206][ T4251] device hsr_slave_0 entered promiscuous mode [ 72.950351][ T4251] device hsr_slave_1 entered promiscuous mode [ 72.976212][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.983201][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.009391][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.021492][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.028879][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.055336][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.067652][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.074829][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.100836][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.116178][ T4264] device hsr_slave_0 entered promiscuous mode [ 73.123138][ T4264] device hsr_slave_1 entered promiscuous mode [ 73.130097][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.138111][ T4264] Cannot create hsr debugfs directory [ 73.153641][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.160904][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.187210][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.212887][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.220024][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.226128][ T4254] Bluetooth: hci1: command 0x0409 tx timeout [ 73.246498][ T4265] Bluetooth: hci2: command 0x0409 tx timeout [ 73.252205][ T4262] Bluetooth: hci0: command 0x0409 tx timeout [ 73.265435][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.304813][ T4254] Bluetooth: hci3: command 0x0409 tx timeout [ 73.313936][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.321087][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.347095][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.384960][ T4254] Bluetooth: hci4: command 0x0409 tx timeout [ 73.425657][ T4259] device hsr_slave_0 entered promiscuous mode [ 73.432485][ T4259] device hsr_slave_1 entered promiscuous mode [ 73.440631][ T4259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.448405][ T4259] Cannot create hsr debugfs directory [ 73.471882][ T4260] device hsr_slave_0 entered promiscuous mode [ 73.479419][ T4260] device hsr_slave_1 entered promiscuous mode [ 73.487023][ T4260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.494773][ T4260] Cannot create hsr debugfs directory [ 73.567116][ T4250] device hsr_slave_0 entered promiscuous mode [ 73.573974][ T4250] device hsr_slave_1 entered promiscuous mode [ 73.581251][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.588901][ T4250] Cannot create hsr debugfs directory [ 73.861054][ T4251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.881318][ T4251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.891527][ T4251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.908596][ T4251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.958902][ T4264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.968645][ T4264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.984124][ T4264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.003999][ T4264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.110155][ T4259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.120265][ T4259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.131391][ T4259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.153221][ T4259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.177785][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.217403][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.237062][ T4250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.247236][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.257568][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.266544][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.275806][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.285138][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.292468][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.302520][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.327642][ T4250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.347725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.356807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.365824][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.372950][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.381226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.397405][ T4250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.411914][ T4250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.468966][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.479844][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.489865][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.500604][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.531055][ T4260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.540887][ T4260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.553683][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.563973][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.589920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.599190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.608560][ T4260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.620163][ T4260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.643675][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.656681][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.677848][ T4251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.720995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.730821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.739443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.748946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.765445][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.778682][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.811458][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.821009][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.867410][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.877024][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.885895][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.893122][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.901847][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.915590][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.924016][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.931518][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.940105][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.949931][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.958615][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.965812][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.973701][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.984343][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.993208][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.000353][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.008764][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.017476][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.032845][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.068122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.078129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.089889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.141227][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.164388][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.173567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.185435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.193423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.202499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.212012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.221439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.231657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.240588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.249859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.259297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.268568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.278702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.288250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.300393][ T4259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.311400][ T4254] Bluetooth: hci1: command 0x041b tx timeout [ 75.317570][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 75.321493][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.323572][ T4254] Bluetooth: hci2: command 0x041b tx timeout [ 75.371785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.382839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.390995][ T4265] Bluetooth: hci3: command 0x041b tx timeout [ 75.407165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.422657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.433050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.445631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.453982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.463411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.471609][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 75.479793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.487950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.511804][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.520342][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.532888][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.541064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.553418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.562074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.577823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.587477][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.594660][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.610394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.656427][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.672328][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.683029][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.690218][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.704221][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.721202][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.731718][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.738886][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.754429][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.763328][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.772291][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.779430][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.788345][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.797500][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.806873][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.815953][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.824582][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.835368][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.843315][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.860757][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.869973][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.880109][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.888954][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.897787][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.931395][ T4260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.956422][ T4260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.973983][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.983633][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.993274][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.002392][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.011993][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.022183][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.031885][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.041189][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.050746][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.059750][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.068846][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.081295][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.089921][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.098465][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.116115][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.147962][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.159809][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.173042][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.189602][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.213847][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.242904][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.278886][ T4251] device veth0_vlan entered promiscuous mode [ 76.297727][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.307923][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.317719][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.326984][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.365257][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.385600][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.397826][ T4251] device veth1_vlan entered promiscuous mode [ 76.421589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.437828][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.451894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.507026][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.524577][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.545252][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.572080][ T4259] device veth0_vlan entered promiscuous mode [ 76.598489][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.612197][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.620935][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.631248][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.640510][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.649615][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.663797][ T4259] device veth1_vlan entered promiscuous mode [ 76.679517][ T4264] device veth0_vlan entered promiscuous mode [ 76.694437][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.704215][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.713409][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.722504][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.740164][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.749415][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.768051][ T4264] device veth1_vlan entered promiscuous mode [ 76.777304][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.787982][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.796497][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.807212][ T4251] device veth0_macvtap entered promiscuous mode [ 76.820856][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.843608][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.857330][ T4251] device veth1_macvtap entered promiscuous mode [ 76.879631][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.890418][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.907760][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.930473][ T4259] device veth0_macvtap entered promiscuous mode [ 76.949722][ T4264] device veth0_macvtap entered promiscuous mode [ 76.958291][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.969535][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.978584][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.993847][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.003348][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.013010][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.028366][ T4264] device veth1_macvtap entered promiscuous mode [ 77.038261][ T4259] device veth1_macvtap entered promiscuous mode [ 77.056285][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.099244][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.114134][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.124012][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.133824][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.143458][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.154358][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.166106][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.177827][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.190048][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.202893][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.216458][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.226799][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.235771][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.244305][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.253234][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.262078][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.271340][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.279884][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.292918][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.307614][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.317787][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.328784][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.341620][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.351452][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.363125][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.381506][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.388937][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 77.395280][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 77.401323][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 77.406351][ T4251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.418774][ T4251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.427727][ T4251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.437549][ T4251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.450713][ T4260] device veth0_vlan entered promiscuous mode [ 77.458291][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.467111][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.475231][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 77.493815][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.502747][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.518403][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.529228][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.541531][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.552310][ T4254] Bluetooth: hci4: command 0x040f tx timeout [ 77.553206][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.571203][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.583352][ T4264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.592909][ T4264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.601759][ T4264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.610865][ T4264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.631893][ T4260] device veth1_vlan entered promiscuous mode [ 77.639891][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.649253][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.658356][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.675172][ T4259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.683921][ T4259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.692981][ T4259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.701856][ T4259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.821996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.832109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.841987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.854388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.863313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.899385][ T4260] device veth0_macvtap entered promiscuous mode [ 77.924115][ T4260] device veth1_macvtap entered promiscuous mode [ 77.976160][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.992132][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.001799][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.010866][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.024360][ T4250] device veth0_vlan entered promiscuous mode [ 78.047778][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.066344][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.105961][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.113976][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.122988][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.137815][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.148064][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.158938][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.169143][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.180363][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.192216][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.199661][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.208971][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.218075][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.227896][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.239144][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.241210][ T4250] device veth1_vlan entered promiscuous mode [ 78.247746][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.262449][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.272299][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.291183][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.302922][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.314232][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.326771][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.337668][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.349566][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.361387][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.392988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.402166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.411840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.423517][ T4260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.437203][ T4260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.446375][ T4260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.455342][ T4260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.475818][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.484399][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.492967][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.504107][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.524289][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.546041][ T4250] device veth0_macvtap entered promiscuous mode [ 78.582449][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.598404][ T4250] device veth1_macvtap entered promiscuous mode [ 78.607109][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.653460][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.670631][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.679423][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.713955][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.722354][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.758810][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.771055][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.779706][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.782860][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.806743][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.821971][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.839816][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.852098][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.869289][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.875077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.880960][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.895920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.898119][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.955633][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.969507][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.984006][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.995136][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.006040][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.021384][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.045345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.054648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 79.062890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 79.071127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 79.079370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 79.087593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 79.095805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 79.104109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 79.217436][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.409027][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.464814][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 79.471539][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 79.471558][ T4254] Bluetooth: hci0: command 0x0419 tx timeout [ 79.518495][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.544959][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 79.590759][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.625758][ T4254] Bluetooth: hci4: command 0x0419 tx timeout [ 79.682430][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.693269][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.715947][ T4250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.735717][ T4250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.744473][ T4250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.754810][ T4250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.821167][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.839178][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.120682][ T4342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 80.242487][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.399305][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.540752][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.557977][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.384661][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.440759][ T4358] loop2: detected capacity change from 0 to 256 [ 82.495304][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.540240][ T4358] ======================================================= [ 82.540240][ T4358] WARNING: The mand mount option has been deprecated and [ 82.540240][ T4358] and is ignored by this kernel. Remove the mand [ 82.540240][ T4358] option from the mount to silence this warning. [ 82.540240][ T4358] ======================================================= [ 82.546526][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.575172][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.593487][ T4361] loop3: detected capacity change from 0 to 256 [ 82.695857][ T4361] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 82.920766][ T4358] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 83.078565][ T4361] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 83.119487][ T4361] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 83.189575][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.191929][ T4361] UDF-fs: Scanning with blocksize 512 failed [ 83.210333][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.214839][ T4358] syz.2.8: attempt to access beyond end of device [ 83.214839][ T4358] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 83.223025][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.300387][ T4361] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 83.340798][ T4361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.358692][ T4358] syz.2.8: attempt to access beyond end of device [ 83.358692][ T4358] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 83.755273][ T4358] syz.2.8: attempt to access beyond end of device [ 83.755273][ T4358] loop2: rw=0, sector=280, nr_sectors = 8 limit=256 [ 83.841385][ T27] audit: type=1800 audit(1743313611.751:2): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8" name="file1" dev="loop2" ino=1048605 res=0 errno=0 [ 84.104979][ T4376] loop4: detected capacity change from 0 to 8 [ 85.597598][ T4376] SQUASHFS error: lzo decompression failed, data probably corrupt [ 85.617510][ T4376] SQUASHFS error: Failed to read block 0x71: -5 [ 85.636283][ T4376] SQUASHFS error: lzo decompression failed, data probably corrupt [ 85.664698][ T4376] SQUASHFS error: Failed to read block 0x71: -5 [ 85.690781][ T27] audit: type=1800 audit(1743313613.601:3): pid=4376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 85.863900][ T4385] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 86.623566][ T4390] netlink: 'syz.3.13': attribute type 12 has an invalid length. [ 86.691922][ T14] cfg80211: failed to load regulatory.db [ 86.712808][ T4392] ip6t_srh: unknown srh match flags 4000 [ 88.923885][ T4391] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 89.854805][ T4410] loop0: detected capacity change from 0 to 2048 [ 89.912925][ T4415] loop4: detected capacity change from 0 to 128 [ 89.987618][ T4410] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.993972][ T4413] loop3: detected capacity change from 0 to 4096 [ 90.006144][ T4415] EXT4-fs (loop4): Test dummy encryption mode enabled [ 90.013248][ T4413] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 90.221610][ T4415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.240997][ T4415] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.247229][ T4413] ntfs3: loop3: Inode r=19 is not in use! [ 90.363990][ T4413] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 91.071605][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 91.100615][ T4431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 91.516724][ T4438] loop0: detected capacity change from 0 to 256 [ 92.889714][ T4415] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 92.983127][ T4447] device veth0_vlan left promiscuous mode [ 92.990060][ T4447] device veth0_vlan entered promiscuous mode [ 93.260419][ T4457] process 'syz.0.25' launched '/dev/fd/5' with NULL argv: empty string added [ 94.162888][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 94.428768][ T4467] loop1: detected capacity change from 0 to 512 [ 94.493634][ T4467] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.552268][ T4467] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 94.611958][ T4467] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 94.697414][ T4467] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.30: attempt to clear invalid blocks 2 len 1 [ 94.753204][ T4467] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.30: invalid indirect mapped block 1819239214 (level 0) [ 94.788219][ T4467] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.30: invalid indirect mapped block 1819239214 (level 1) [ 94.836510][ T4467] EXT4-fs (loop1): 1 truncate cleaned up [ 94.850706][ T4461] loop3: detected capacity change from 0 to 32768 [ 94.858417][ T4467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.889456][ T4461] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.28 (4461) [ 94.931571][ T4461] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.944229][ T4461] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 95.010052][ T4461] BTRFS info (device loop3): force clearing of disk cache [ 95.040287][ T4461] BTRFS info (device loop3): force zlib compression, level 3 [ 95.086317][ T4461] BTRFS info (device loop3): enabling auto defrag [ 95.133586][ T4461] BTRFS info (device loop3): metadata ratio 257 [ 95.153823][ T4461] BTRFS info (device loop3): enabling disk space caching [ 95.183224][ T4461] BTRFS info (device loop3): disk space caching is enabled [ 95.301045][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 96.228883][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058c6f400: rx timeout, send abort [ 96.268303][ T4461] BTRFS info (device loop3): enabling ssd optimizations [ 96.289479][ T4461] BTRFS info (device loop3): rebuilding free space tree [ 96.424478][ T4461] BTRFS info (device loop3): disabling free space tree [ 96.431866][ T4461] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.482223][ T4461] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.221711][ T4505] tty tty20: ldisc open failed (-12), clearing slot 19 [ 97.344135][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058c6f400: abort rx timeout. Force session deactivation [ 97.551723][ T4509] loop0: detected capacity change from 0 to 256 [ 97.632752][ T4425] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 97.661831][ T4509] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 97.930455][ T4260] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.765914][ T4526] netlink: 60 bytes leftover after parsing attributes in process `syz.4.43'. [ 99.117433][ T4522] sctp: failed to load transform for md5: -2 [ 99.167023][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'. [ 100.484567][ T4546] loop3: detected capacity change from 0 to 32768 [ 100.538884][ T4550] netlink: 48 bytes leftover after parsing attributes in process `syz.1.48'. [ 100.658542][ T4552] autofs4:pid:4552:autofs_fill_super: called with bogus options [ 100.711886][ T4546] [ 100.711886][ T4546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.711886][ T4546] [ 100.767314][ T4546] [ 100.767314][ T4546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.767314][ T4546] [ 100.778252][ T4546] [ 100.778252][ T4546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.778252][ T4546] [ 100.788797][ T4546] [ 100.788797][ T4546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.788797][ T4546] [ 100.799328][ T4546] [ 100.799328][ T4546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.799328][ T4546] [ 100.809837][ T4546] [ 100.809837][ T4546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.809837][ T4546] [ 100.833293][ T108] [ 100.833293][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.833293][ T108] [ 101.460062][ T4560] loop1: detected capacity change from 0 to 512 [ 101.484967][ C0] vcan0: j1939_tp_rxtimer: 0xffff888017f86000: rx timeout, send abort [ 101.512323][ T4562] loop0: detected capacity change from 0 to 512 [ 101.516893][ T4364] [ 101.516893][ T4364] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.516893][ T4364] [ 101.523670][ T4562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.548504][ T4369] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.565074][ T4562] EXT4-fs: Invalid want_extra_isize 5 [ 101.643457][ T4364] [ 101.643457][ T4364] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.643457][ T4364] [ 101.740797][ T4364] [ 101.740797][ T4364] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.740797][ T4364] [ 101.798798][ T108] [ 101.798798][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.798798][ T108] [ 101.877156][ T4566] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 101.993284][ C0] vcan0: j1939_tp_rxtimer: 0xffff888017f86000: abort rx timeout. Force session deactivation [ 102.360070][ T4260] [ 102.360070][ T4260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.360070][ T4260] [ 102.412331][ T4260] [ 102.412331][ T4260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.412331][ T4260] [ 102.484363][ T4568] loop0: detected capacity change from 0 to 256 [ 102.565764][ T4568] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 104.171542][ T4582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 105.439032][ T4590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.62'. [ 105.685204][ T4598] autofs4:pid:4598:autofs_fill_super: called with bogus options [ 107.231928][ T27] audit: type=1326 audit(1743313635.141:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047258d169 code=0x7ffc0000 [ 107.266379][ T4612] loop4: detected capacity change from 0 to 512 [ 107.284529][ T27] audit: type=1326 audit(1743313635.141:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047258d169 code=0x7ffc0000 [ 107.340651][ T4612] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 107.361624][ T27] audit: type=1326 audit(1743313635.151:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f047258d169 code=0x7ffc0000 [ 107.403059][ T4612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 107.463394][ T27] audit: type=1326 audit(1743313635.181:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047258d169 code=0x7ffc0000 [ 107.514087][ T4612] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.69: corrupted in-inode xattr [ 107.594748][ T27] audit: type=1326 audit(1743313635.191:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f047258d169 code=0x7ffc0000 [ 107.623236][ T4612] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.69: couldn't read orphan inode 15 (err -117) [ 107.660262][ T4612] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.700034][ T27] audit: type=1326 audit(1743313635.231:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047258d169 code=0x7ffc0000 [ 107.781905][ T27] audit: type=1326 audit(1743313635.231:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047258d169 code=0x7ffc0000 [ 107.887612][ T27] audit: type=1800 audit(1743313635.751:11): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.69" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 108.010903][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 109.063093][ T4620] loop0: detected capacity change from 0 to 32768 [ 109.111246][ T4620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.71 (4620) [ 109.266947][ T4641] Zero length message leads to an empty skb [ 109.308827][ T4620] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.324113][ T4640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.76'. [ 109.333814][ T4620] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 109.351910][ T4644] loop2: detected capacity change from 0 to 256 [ 109.366643][ T4620] BTRFS info (device loop0): force clearing of disk cache [ 109.366709][ T4620] BTRFS info (device loop0): enabling auto defrag [ 109.366758][ T4620] BTRFS info (device loop0): max_inline at 0 [ 109.366780][ T4620] BTRFS info (device loop0): enabling disk space caching [ 109.366797][ T4620] BTRFS info (device loop0): disk space caching is enabled [ 109.375521][ T4644] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.375569][ T4644] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 109.394476][ T4644] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 111.533408][ T4620] BTRFS error (device loop0): open_ctree failed: -22 [ 111.720672][ T4684] autofs4:pid:4684:autofs_fill_super: called with bogus options [ 114.684474][ T4714] loop3: detected capacity change from 0 to 256 [ 114.707743][ T4714] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 115.385472][ T4297] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.634723][ T4297] usb 1-1: Using ep0 maxpacket: 16 [ 116.667235][ T4297] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 116.692994][ T4297] usb 1-1: config 0 has no interface number 0 [ 116.947226][ T4297] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 116.959075][ T4297] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 116.985496][ T4297] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 117.003739][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 117.012503][ T4297] usb 1-1: Product: syz [ 117.017102][ T4297] usb 1-1: SerialNumber: syz [ 117.027296][ T4297] usb 1-1: config 0 descriptor?? [ 117.039896][ T4297] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 117.051011][ T4297] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 117.526741][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 117.535967][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 117.538818][ T2164] usb 1-1: USB disconnect, device number 2 [ 117.542941][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 118.492883][ T2164] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 118.613226][ T4748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.104'. [ 120.218901][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 120.358837][ T4761] netlink: 32 bytes leftover after parsing attributes in process `syz.3.110'. [ 120.402831][ T4761] netlink: 32 bytes leftover after parsing attributes in process `syz.3.110'. [ 122.675264][ T4789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.118'. [ 124.034908][ T4804] loop4: detected capacity change from 0 to 512 [ 124.089189][ T4807] ip6t_srh: unknown srh match flags 4000 [ 124.100303][ T4802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 124.132063][ T4802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 124.145352][ T4804] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.122: corrupted in-inode xattr [ 124.169751][ T4804] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.122: couldn't read orphan inode 15 (err -117) [ 124.194899][ T4804] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 124.274433][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 124.374144][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880750c0400: rx timeout, send abort [ 124.882475][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880750c0400: abort rx timeout. Force session deactivation [ 127.641514][ T4841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.133'. [ 127.676110][ T4839] loop1: detected capacity change from 0 to 256 [ 128.517329][ T4839] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 133.200590][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.207544][ T27] audit: type=1326 audit(1743313660.291:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1a18d169 code=0x7ffc0000 [ 133.214964][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.328780][ T27] audit: type=1326 audit(1743313660.291:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1a18d169 code=0x7ffc0000 [ 133.435275][ T27] audit: type=1326 audit(1743313660.291:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f0b1a18d169 code=0x7ffc0000 [ 133.463763][ T4884] loop4: detected capacity change from 0 to 256 [ 133.503299][ T27] audit: type=1326 audit(1743313660.291:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1a18d169 code=0x7ffc0000 [ 133.583385][ T27] audit: type=1326 audit(1743313660.291:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1a18d169 code=0x7ffc0000 [ 135.010118][ T4884] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 135.592673][ T27] audit: type=1326 audit(1743313660.291:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f0b1a18d169 code=0x7ffc0000 [ 135.618428][ T27] audit: type=1326 audit(1743313660.291:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1a18d169 code=0x7ffc0000 [ 135.759147][ T27] audit: type=1326 audit(1743313660.291:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1a18d169 code=0x7ffc0000 [ 136.265819][ T27] audit: type=1326 audit(1743313660.301:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b1a18d169 code=0x7ffc0000 [ 136.371014][ T27] audit: type=1326 audit(1743313660.301:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1a18d169 code=0x7ffc0000 [ 136.401628][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 136.411426][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'. [ 137.576441][ T4917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.159'. [ 139.062402][ T4897] loop3: detected capacity change from 0 to 32768 [ 139.247709][ T4897] XFS (loop3): Mounting V5 Filesystem [ 139.397017][ T4936] loop1: detected capacity change from 0 to 256 [ 139.443924][ T4897] XFS (loop3): log mount failed [ 139.767426][ T4936] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 141.913702][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 141.924005][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 143.417703][ T4957] loop0: detected capacity change from 0 to 128 [ 144.196532][ T4966] loop0: detected capacity change from 0 to 256 [ 144.265863][ T4966] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 144.344854][ T126] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 144.580509][ T126] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 144.632679][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.725016][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.816572][ T126] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.894733][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.924038][ T126] usb 4-1: Product: syz [ 144.944306][ T126] usb 4-1: Manufacturer: syz [ 144.984909][ T126] usb 4-1: SerialNumber: syz [ 145.180929][ T4971] ip6t_srh: unknown srh match flags 4000 [ 145.725825][ T126] usb 4-1: 0:2 : does not exist [ 145.810514][ T126] usb 4-1: USB disconnect, device number 2 [ 145.950853][ T4968] loop4: detected capacity change from 0 to 32768 [ 145.988141][ T4968] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.177 (4968) [ 146.108627][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.410629][ T4979] loop0: detected capacity change from 0 to 512 [ 146.437452][ T4979] EXT4-fs: Ignoring removed i_version option [ 146.444058][ T4979] EXT4-fs: inline encryption not supported [ 146.450540][ T4979] ext3: Unknown parameter 'seclabel' [ 147.049203][ T4968] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.108037][ T4968] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 147.145657][ T4968] BTRFS info (device loop4): force clearing of disk cache [ 147.153149][ T4968] BTRFS info (device loop4): enabling auto defrag [ 147.161760][ T4968] BTRFS info (device loop4): max_inline at 0 [ 147.168086][ T4968] BTRFS info (device loop4): enabling disk space caching [ 147.181880][ T4968] BTRFS info (device loop4): disk space caching is enabled [ 147.281851][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 147.291444][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 147.486991][ T4968] BTRFS error (device loop4): open_ctree failed: -12 [ 147.810924][ T5009] loop3: detected capacity change from 0 to 2048 [ 148.101767][ T5009] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 148.356223][ T5022] loop4: detected capacity change from 0 to 512 [ 149.557535][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 149.581743][ T5022] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.186: invalid indirect mapped block 256 (level 2) [ 149.600906][ T5022] EXT4-fs (loop4): 2 truncates cleaned up [ 149.606782][ T5022] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.734871][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 151.584750][ T4296] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.630340][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 152.600095][ T5047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 152.609881][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 152.738489][ T4296] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 152.767032][ T4296] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.829133][ T4296] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.886138][ T5038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.896751][ T5038] bond0: (slave rose0): Enslaving as an active interface with an up link [ 152.976192][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 153.060573][ T4296] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.248223][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.358684][ T4296] usb 1-1: Product: syz [ 153.455181][ T4296] usb 1-1: Manufacturer: syz [ 153.541080][ T4296] usb 1-1: SerialNumber: syz [ 153.942208][ T4296] usb 1-1: can't set config #1, error -71 [ 153.967924][ T4296] usb 1-1: USB disconnect, device number 3 [ 154.813941][ T5076] loop0: detected capacity change from 0 to 2048 [ 154.853253][ T5083] loop1: detected capacity change from 0 to 1764 [ 155.044726][ T5076] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 155.794572][ C0] sched: RT throttling activated [ 155.835653][ T4369] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.604896][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 158.127148][ T5106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 158.136798][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 158.558524][ T2164] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 160.047638][ T2164] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 160.060793][ T2164] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.072766][ T2164] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.106499][ T2164] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.124678][ T2164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.133803][ T2164] usb 3-1: Product: syz [ 160.138296][ T2164] usb 3-1: Manufacturer: syz [ 160.143323][ T2164] usb 3-1: SerialNumber: syz [ 160.253546][ T5131] ip6t_srh: unknown srh match flags 4000 [ 162.458322][ T5140] loop0: detected capacity change from 0 to 2048 [ 162.522194][ T2164] usb 3-1: 0:2 : does not exist [ 162.587689][ T5140] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 162.610454][ T2164] usb 3-1: USB disconnect, device number 2 [ 163.416573][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 163.590407][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.679029][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 163.688847][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 167.820544][ T5204] device veth0_vlan left promiscuous mode [ 167.828705][ T5204] device veth0_vlan entered promiscuous mode [ 168.874986][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 168.884660][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 170.224327][ T5236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.242'. [ 170.794119][ T5240] loop3: detected capacity change from 0 to 128 [ 173.883864][ T5262] device veth0_vlan left promiscuous mode [ 173.890750][ T5262] device veth0_vlan entered promiscuous mode [ 178.991760][ T5311] Bluetooth: MGMT ver 1.22 [ 180.165376][ T5322] loop4: detected capacity change from 0 to 2048 [ 180.302075][ T5322] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 180.583955][ T5333] loop1: detected capacity change from 0 to 256 [ 180.885525][ T5333] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 181.077101][ T4254] Bluetooth: hci0: command 0x0c20 tx timeout [ 181.482939][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 182.061491][ T5350] loop4: detected capacity change from 0 to 256 [ 182.074391][ T5350] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.094822][ T5350] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 182.175127][ T5350] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 184.162881][ T5362] loop1: detected capacity change from 0 to 512 [ 184.774888][ T5362] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.276: invalid indirect mapped block 256 (level 2) [ 184.790311][ T5362] EXT4-fs (loop1): 2 truncates cleaned up [ 184.796149][ T5362] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 185.016691][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 186.714036][ T5387] loop0: detected capacity change from 0 to 256 [ 188.681396][ T5387] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 189.054242][ T5401] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 189.146606][ T5401] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 194.094682][ T4299] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 194.128503][ T5439] loop4: detected capacity change from 0 to 2048 [ 194.144847][ T5444] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 194.193827][ T5444] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 194.202910][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.213995][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.240723][ T5439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 194.308996][ T4299] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 194.456755][ T4299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.474631][ T4299] usb 2-1: Product: syz [ 194.483303][ T4299] usb 2-1: Manufacturer: syz [ 194.509251][ T4299] usb 2-1: SerialNumber: syz [ 194.756762][ T5457] loop3: detected capacity change from 0 to 512 [ 194.932668][ T5457] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.303: invalid indirect mapped block 256 (level 2) [ 194.951345][ T5457] EXT4-fs (loop3): 2 truncates cleaned up [ 194.957393][ T5457] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 195.615941][ T4299] usb 2-1: config 0 descriptor?? [ 195.690376][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 195.793736][ T4299] usb 2-1: can't set config #0, error -71 [ 195.812221][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 195.820027][ T4299] usb 2-1: USB disconnect, device number 2 [ 196.274927][ T4265] Bluetooth: hci2: command 0x0406 tx timeout [ 196.275026][ T4254] Bluetooth: hci1: command 0x0406 tx timeout [ 196.287247][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 196.293910][ T4257] Bluetooth: hci0: command 0x0406 tx timeout [ 196.813329][ T5483] loop4: detected capacity change from 0 to 256 [ 196.862741][ T5483] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 198.011822][ T5502] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 198.021540][ T5502] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 198.316247][ T5506] gfs2: gfs2 mount does not exist [ 199.653647][ T5522] loop3: detected capacity change from 0 to 256 [ 199.693291][ T5522] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 202.424034][ T5544] loop3: detected capacity change from 0 to 256 [ 202.491407][ T5544] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.608778][ T5544] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 203.041991][ T5550] overlayfs: missing 'lowerdir' [ 203.230776][ T5554] netlink: 'syz.1.331': attribute type 10 has an invalid length. [ 203.335329][ T5554] device syz_tun entered promiscuous mode [ 203.559217][ T5554] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 205.104635][ T4458] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 205.479075][ T4458] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 206.384915][ T4458] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.404422][ T4458] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.457556][ T4458] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.495232][ T4458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.503294][ T4458] usb 5-1: Product: syz [ 206.513745][ T4254] Bluetooth: hci4: command 0x0406 tx timeout [ 206.530065][ T4458] usb 5-1: Manufacturer: syz [ 206.536777][ T5585] overlayfs: missing 'lowerdir' [ 206.541729][ T4458] usb 5-1: SerialNumber: syz [ 207.323769][ T4458] usb 5-1: 0:2 : does not exist [ 207.575276][ T4458] usb 5-1: USB disconnect, device number 2 [ 208.885785][ T5466] udevd[5466]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.209419][ T5622] loop1: detected capacity change from 0 to 256 [ 209.347057][ T5622] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 210.091137][ T5631] overlayfs: missing 'lowerdir' [ 210.099852][ T5630] loop3: detected capacity change from 0 to 164 [ 210.177455][ T5630] Unable to read rock-ridge attributes [ 211.683214][ T5648] loop3: detected capacity change from 0 to 1024 [ 211.785941][ T5648] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 211.862424][ T5652] loop1: detected capacity change from 0 to 256 [ 211.919826][ T5648] hfsplus: bad catalog entry used to create inode [ 211.934585][ T5652] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 212.334733][ T4458] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 212.534713][ T4458] usb 4-1: device descriptor read/64, error -71 [ 212.710735][ T5658] loop1: detected capacity change from 0 to 512 [ 213.520777][ T5658] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.368: invalid indirect mapped block 256 (level 2) [ 213.535362][ T5658] EXT4-fs (loop1): 2 truncates cleaned up [ 213.541128][ T5658] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 213.574644][ T4458] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 213.744677][ T4458] usb 4-1: device descriptor read/64, error -71 [ 213.764210][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 213.875189][ T4458] usb usb4-port1: attempt power cycle [ 214.294720][ T4458] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 214.319342][ T5670] overlayfs: missing 'workdir' [ 214.335513][ T4458] usb 4-1: device descriptor read/8, error -71 [ 214.614698][ T4458] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 214.738901][ T4458] usb 4-1: device descriptor read/8, error -71 [ 215.408662][ T4458] usb usb4-port1: unable to enumerate USB device [ 215.451985][ T5680] loop0: detected capacity change from 0 to 128 [ 216.090169][ T5685] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 216.339986][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 216.340056][ T27] audit: type=1326 audit(1743313744.251:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5694 comm="syz.1.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc41398d169 code=0x0 [ 217.039794][ T5706] overlayfs: missing 'workdir' [ 217.310071][ T5688] loop0: detected capacity change from 0 to 32768 [ 217.597807][ T5688] XFS (loop0): Mounting V5 Filesystem [ 218.418533][ T5688] XFS (loop0): Starting recovery (logdev: internal) [ 218.632154][ T5688] XFS (loop0): Ending recovery (logdev: internal) [ 218.853583][ T4259] XFS (loop0): Unmounting Filesystem [ 219.444669][ T4680] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 219.647352][ T4680] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 219.667074][ T4680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.712675][ T4680] usb 2-1: config 0 descriptor?? [ 219.716401][ T4680] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 220.174002][ T5742] loop0: detected capacity change from 0 to 16 [ 220.285389][ T5742] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 220.761194][ T5747] usb usb8: usbfs: process 5747 (syz.0.398) did not claim interface 0 before use [ 222.129809][ T4680] usb 2-1: USB disconnect, device number 3 [ 222.962369][ T5769] loop4: detected capacity change from 0 to 512 [ 224.217564][ T5769] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.407: invalid indirect mapped block 256 (level 2) [ 224.231681][ T5769] EXT4-fs (loop4): 2 truncates cleaned up [ 224.237594][ T5769] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 224.511516][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 224.784774][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 224.927745][ T5784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 224.976596][ T26] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.987898][ T26] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 224.998678][ T26] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.008216][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.036462][ T5776] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 225.270535][ T4296] usb 2-1: USB disconnect, device number 4 [ 228.118273][ T5812] loop1: detected capacity change from 0 to 512 [ 229.237175][ T5812] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.422: invalid indirect mapped block 256 (level 2) [ 229.251355][ T5812] EXT4-fs (loop1): 2 truncates cleaned up [ 229.257180][ T5812] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 229.477835][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 234.354738][ T4538] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 234.885873][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 235.044909][ T4538] usb 2-1: device descriptor read/64, error -32 [ 235.176779][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 235.314679][ T4538] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 235.384752][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 235.412887][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.530302][ T4538] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 236.407667][ T4538] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.419342][ T7] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 236.428976][ T4538] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.438716][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.450735][ T4538] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.461460][ T7] usb 3-1: config 0 descriptor?? [ 236.466813][ T4538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.487541][ T4538] usb 2-1: Product: syz [ 236.492014][ T4538] usb 2-1: Manufacturer: syz [ 236.500512][ T4538] usb 2-1: SerialNumber: syz [ 237.285070][ T4538] usb 2-1: 0:2 : does not exist [ 237.327493][ T7] lenovo 0003:17EF:6062.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0 [ 237.339295][ T4538] usb 2-1: USB disconnect, device number 6 [ 237.381334][ T7] usb 3-1: USB disconnect, device number 3 [ 237.409464][ T5886] loop4: detected capacity change from 0 to 128 [ 237.567519][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.683786][ T5907] loop4: detected capacity change from 0 to 256 [ 239.844951][ T5907] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 241.139217][ T5919] tmpfs: Unknown parameter 'usrquota' [ 241.844814][ T4295] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 242.036425][ T4295] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 242.054645][ T4295] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.074612][ T4295] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.096588][ T4295] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.115988][ T4295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.147260][ T4295] usb 2-1: Product: syz [ 242.152455][ T4295] usb 2-1: Manufacturer: syz [ 242.159647][ T4295] usb 2-1: SerialNumber: syz [ 242.326373][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805848d800: rx timeout, send abort [ 243.243345][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805848d800: abort rx timeout. Force session deactivation [ 244.047385][ T4295] usb 2-1: 0:2 : does not exist [ 244.080752][ T4295] usb 2-1: USB disconnect, device number 7 [ 244.141435][ T5466] udevd[5466]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.871128][ T5956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.475'. [ 244.914817][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 246.112453][ T5965] loop3: detected capacity change from 0 to 256 [ 246.188867][ T5965] exfat: Deprecated parameter 'namecase' [ 246.249651][ T5965] exfat: Deprecated parameter 'utf8' [ 246.316709][ T5965] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 247.451518][ T5982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.482'. [ 247.630400][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058515000: rx timeout, send abort [ 248.232331][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058515000: abort rx timeout. Force session deactivation [ 248.903500][ T6002] loop3: detected capacity change from 0 to 512 [ 249.084817][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 249.294794][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 249.322507][ T22] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 249.383410][ T6002] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.486: invalid indirect mapped block 256 (level 2) [ 249.404402][ T6002] EXT4-fs (loop3): 2 truncates cleaned up [ 249.410558][ T6002] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 249.453237][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.492790][ T22] usb 3-1: config 0 has no interface number 0 [ 249.502703][ T22] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 249.517349][ T22] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 249.528527][ T22] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.544319][ T22] usb 3-1: config 0 interface 52 has no altsetting 0 [ 249.565493][ T4538] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 249.579634][ T22] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 249.594300][ T22] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 249.603197][ T22] usb 3-1: Product: syz [ 249.607571][ T22] usb 3-1: SerialNumber: syz [ 249.614077][ T22] usb 3-1: config 0 descriptor?? [ 249.763194][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 249.773279][ T4538] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 249.789056][ T4538] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.800418][ T4538] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.831265][ T22] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input6 [ 249.851587][ T4538] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.863244][ T3608] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 249.914602][ T4538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.922638][ T4538] usb 5-1: Product: syz [ 249.944787][ T4538] usb 5-1: Manufacturer: syz [ 249.949503][ T4538] usb 5-1: SerialNumber: syz [ 249.967754][ T3608] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 250.002242][ T4369] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 250.021188][ T3608] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 250.054454][ T3608] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 250.054752][ T22] usb 3-1: USB disconnect, device number 4 [ 250.091332][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.100840][ T3608] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 250.127057][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.162187][ T6001] bond0 (unregistering): Released all slaves [ 250.695370][ T4538] usb 5-1: 0:2 : does not exist [ 250.730941][ T4538] usb 5-1: USB disconnect, device number 3 [ 250.850496][ T6019] loop3: detected capacity change from 0 to 64 [ 250.892365][ T6019] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 250.989226][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.496'. [ 251.842954][ T6031] loop4: detected capacity change from 0 to 128 [ 251.846410][ T5466] udevd[5466]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.424626][ T4538] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 253.504649][ T22] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 253.619410][ T4538] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 253.630888][ T4538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.654424][ T4538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.675064][ T4538] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 253.724876][ T4538] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 253.781065][ T4538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.802900][ T22] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 253.816140][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.826544][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.829186][ T4538] usb 5-1: config 0 descriptor?? [ 253.849747][ T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.887700][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.898013][ T22] usb 4-1: Product: syz [ 253.902222][ T22] usb 4-1: Manufacturer: syz [ 253.911398][ T22] usb 4-1: SerialNumber: syz [ 253.961532][ T6076] loop1: detected capacity change from 0 to 256 [ 253.986860][ T6076] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 254.302649][ T4538] elecom 0003:056E:00FE.0002: unknown main item tag 0x0 [ 254.344074][ T4538] elecom 0003:056E:00FE.0002: unknown main item tag 0x0 [ 254.403857][ T4538] elecom 0003:056E:00FE.0002: unknown main item tag 0x0 [ 254.434100][ T4538] elecom 0003:056E:00FE.0002: unknown main item tag 0x0 [ 254.472686][ T4538] elecom 0003:056E:00FE.0002: unknown main item tag 0x0 [ 254.568957][ T4538] elecom 0003:056E:00FE.0002: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 254.732435][ T4298] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 254.794606][ T22] usb 4-1: 0:2 : does not exist [ 254.810054][ T4538] usb 5-1: USB disconnect, device number 4 [ 254.865210][ T22] usb 4-1: USB disconnect, device number 7 [ 254.995327][ T4298] usb 1-1: Using ep0 maxpacket: 8 [ 255.013050][ T4298] usb 1-1: unable to get BOS descriptor or descriptor too short [ 255.041059][ T4298] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 255.068933][ T4298] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.135740][ T4298] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 255.177775][ T4298] usb 1-1: config 1 has no interface number 1 [ 255.178566][ T5466] udevd[5466]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.194242][ T4298] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 255.213028][ T4298] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.373116][ T4298] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.468826][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.549388][ T4298] usb 1-1: Product: syz [ 255.553673][ T4298] usb 1-1: Manufacturer: syz [ 255.569089][ T4298] usb 1-1: SerialNumber: syz [ 255.636697][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.643117][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.842205][ T4298] usb 1-1: USB disconnect, device number 4 [ 255.913215][ T5466] udevd[5466]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.213970][ T6113] loop1: detected capacity change from 0 to 256 [ 257.249647][ T6113] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 258.910797][ T6123] loop4: detected capacity change from 0 to 512 [ 259.059992][ T6123] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.526: invalid indirect mapped block 256 (level 2) [ 259.080067][ T6123] EXT4-fs (loop4): 2 truncates cleaned up [ 259.086280][ T6123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 259.381994][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 261.497071][ T6164] loop1: detected capacity change from 0 to 256 [ 261.784794][ T6166] loop4: detected capacity change from 0 to 512 [ 261.919820][ T6166] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.540: invalid indirect mapped block 256 (level 2) [ 261.940329][ T6166] EXT4-fs (loop4): 2 truncates cleaned up [ 261.946298][ T6166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 262.159991][ T6164] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 262.576060][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 264.741896][ T6197] loop1: detected capacity change from 0 to 512 [ 264.765417][ T6197] EXT4-fs: Ignoring removed orlov option [ 265.410101][ T6197] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.555: casefold flag without casefold feature [ 265.669181][ T6215] loop3: detected capacity change from 0 to 512 [ 266.807719][ T6197] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.555: couldn't read orphan inode 15 (err -117) [ 266.833086][ T6215] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.554: invalid indirect mapped block 256 (level 2) [ 266.948516][ T6215] EXT4-fs (loop3): 2 truncates cleaned up [ 266.954823][ T6215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 267.187637][ T6197] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 267.200883][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 269.288961][ T6248] loop4: detected capacity change from 0 to 16 [ 269.328026][ T6248] erofs: (device loop4): mounted with root inode @ nid 36. [ 269.700902][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 269.765542][ T6256] loop4: detected capacity change from 0 to 128 [ 272.905753][ T6287] loop3: detected capacity change from 0 to 2048 [ 273.006885][ T6287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.293270][ T6294] device veth0_vlan left promiscuous mode [ 274.300672][ T6294] device veth0_vlan entered promiscuous mode [ 276.199668][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 276.244426][ C1] vcan0: j1939_session_tx_dat: 0xffff8880568db800: queue data error: -100 [ 277.097916][ T6331] loop1: detected capacity change from 0 to 16 [ 277.924834][ T6331] erofs: (device loop1): mounted with root inode @ nid 36. [ 279.521722][ T6349] loop1: detected capacity change from 0 to 512 [ 279.576945][ T6349] EXT4-fs (loop1): Test dummy encryption mode enabled [ 279.593770][ T6349] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 279.647704][ T6349] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 279.703585][ T6349] EXT4-fs (loop1): 1 truncate cleaned up [ 279.744774][ T6349] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 280.788044][ T6349] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 281.464947][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 281.553162][ T6374] capability: warning: `syz.1.608' uses 32-bit capabilities (legacy support in use) [ 282.647824][ T6384] loop3: detected capacity change from 0 to 512 [ 282.773517][ T6384] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.994898][ T6384] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 283.019991][ T6384] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 283.039401][ T6384] System zones: 0-2, 18-18, 34-34 [ 283.048351][ T6386] loop1: detected capacity change from 0 to 4096 [ 283.112279][ T6384] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.613: bad orphan inode 15 [ 283.178201][ T6384] ext4_test_bit(bit=14, block=18) = 1 [ 283.197530][ T6384] is_bad_inode(inode)=0 [ 283.225144][ T6384] NEXT_ORPHAN(inode)=2264924160 [ 283.258188][ T6384] max_ino=32 [ 283.293137][ T6384] i_nlink=0 [ 283.347526][ T6384] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 283.585547][ T6384] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.613: bg 0: block 80: padding at end of block bitmap is not set [ 283.820605][ T6384] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 283.951987][ T6384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 284.131830][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 285.691094][ T6417] device veth0_vlan left promiscuous mode [ 285.698290][ T6417] device veth0_vlan entered promiscuous mode [ 285.886006][ T6423] loop0: detected capacity change from 0 to 128 [ 285.996379][ T6423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 286.071066][ T6423] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.174902][ T27] audit: type=1800 audit(1743313814.081:45): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.623" name="file0" dev="loop0" ino=12 res=0 errno=0 [ 286.341448][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 288.597552][ T6466] loop3: detected capacity change from 0 to 2048 [ 288.691949][ T6466] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 288.856283][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 289.614664][ T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 290.038001][ T4254] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 290.051814][ T4254] Bluetooth: hci1: Injecting HCI hardware error event [ 290.065981][ T4265] Bluetooth: hci1: hardware error 0x00 [ 290.525249][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 290.536955][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.721342][ T26] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 290.867854][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.042928][ T26] usb 4-1: config 0 descriptor?? [ 291.200544][ T26] gspca_main: spca501-2.14.0 probing 0000:0000 [ 291.546568][ T26] gspca_spca501: reg write: error -71 [ 291.552015][ T26] spca501 4-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 291.580010][ T26] spca501: probe of 4-1:0.0 failed with error -22 [ 291.664686][ T26] usb 4-1: USB disconnect, device number 8 [ 292.424967][ T4265] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 294.794730][ T126] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 294.994880][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 295.006092][ T126] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 295.090486][ T126] usb 2-1: config 0 has no interface number 0 [ 295.141569][ T126] usb 2-1: config 0 interface 184 has no altsetting 0 [ 295.197243][ T126] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 295.247159][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.309990][ T126] usb 2-1: Product: syz [ 295.341661][ T126] usb 2-1: Manufacturer: syz [ 295.387239][ T126] usb 2-1: SerialNumber: syz [ 295.425674][ T126] usb 2-1: config 0 descriptor?? [ 295.470294][ T126] smsc75xx v1.0.0 [ 296.445173][ T126] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 296.464851][ T126] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 299.214621][ T4458] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 299.392620][ T126] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 299.408905][ T4458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.453698][ T4458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.454431][ T126] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 299.481034][ T6583] loop4: detected capacity change from 0 to 512 [ 299.512765][ T4458] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.542501][ T4458] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.571319][ T4458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.571407][ T126] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 299.617590][ T4458] usb 3-1: config 0 descriptor?? [ 299.633300][ T126] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 299.633845][ T6583] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 299.682589][ T126] usb 2-1: USB disconnect, device number 8 [ 299.693790][ T6583] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.829848][ T6583] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.677: corrupted inode contents [ 299.898152][ T6583] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #2: comm syz.4.677: mark_inode_dirty error [ 299.937454][ T6583] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.677: corrupted inode contents [ 299.998695][ T6583] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.677: mark_inode_dirty error [ 300.069217][ T4458] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 300.138719][ T4458] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 300.368611][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 300.452075][ T2164] usb 3-1: USB disconnect, device number 5 [ 303.125117][ T6620] loop3: detected capacity change from 0 to 512 [ 303.918611][ T6620] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.685: invalid indirect mapped block 256 (level 2) [ 303.932538][ T6620] EXT4-fs (loop3): 2 truncates cleaned up [ 303.938471][ T6620] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 304.177532][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 307.138087][ T4254] Bluetooth: hci5: sending frame failed (-49) [ 307.145770][ T4265] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 307.154807][ T4296] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 307.474707][ T4296] usb 1-1: Using ep0 maxpacket: 32 [ 307.493378][ T4296] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 307.493461][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.493533][ T4296] usb 1-1: Product: syz [ 307.493573][ T4296] usb 1-1: Manufacturer: syz [ 307.493638][ T4296] usb 1-1: SerialNumber: syz [ 307.639920][ T6666] loop1: detected capacity change from 0 to 512 [ 307.672305][ T4296] usb 1-1: config 0 descriptor?? [ 308.296186][ T4296] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 308.336691][ T6666] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.700: invalid indirect mapped block 256 (level 2) [ 308.351571][ T6666] EXT4-fs (loop1): 2 truncates cleaned up [ 308.357398][ T6666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 308.590633][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 310.082315][ T4296] gspca_ov534_9: reg_w failed -71 [ 310.884778][ T4296] gspca_ov534_9: Unknown sensor 0000 [ 310.884850][ T4296] ov534_9: probe of 1-1:0.0 failed with error -22 [ 310.938441][ T4296] usb 1-1: USB disconnect, device number 5 [ 311.654871][ T4296] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 311.889234][ T4296] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.924952][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 312.014834][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.055730][ T4296] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 312.092238][ T4296] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 312.122032][ T4296] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 312.140497][ T4296] usb 1-1: Manufacturer: syz [ 312.170122][ T4296] usb 1-1: config 0 descriptor?? [ 312.534610][ T2164] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 312.684768][ T4296] rc_core: IR keymap rc-hauppauge not found [ 312.694648][ T4296] Registered IR keymap rc-empty [ 312.723974][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 312.734800][ T2164] usb 4-1: Using ep0 maxpacket: 8 [ 312.752836][ T2164] usb 4-1: config 7 has an invalid interface number: 196 but max is 0 [ 312.776888][ T2164] usb 4-1: config 7 has no interface number 0 [ 312.788782][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 312.793511][ T2164] usb 4-1: config 7 interface 196 has no altsetting 0 [ 312.826662][ T2164] usb 4-1: New USB device found, idVendor=0b48, idProduct=3015, bcdDevice=b1.54 [ 312.829901][ T4296] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 312.836199][ T2164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.857274][ T2164] usb 4-1: Product: syz [ 312.861594][ T2164] usb 4-1: Manufacturer: syz [ 312.869491][ T2164] usb 4-1: SerialNumber: syz [ 312.930730][ T4296] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 313.008692][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 313.094820][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 313.131356][ T2164] usb 4-1: USB disconnect, device number 9 [ 313.134790][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 313.175217][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 313.206052][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 313.264704][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 313.305168][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 313.357964][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 313.380165][ T6716] loop4: detected capacity change from 0 to 4096 [ 313.404705][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 313.444640][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 313.444927][ T6716] NILFS (loop4): invalid segment: Checksum error in segment payload [ 313.467685][ T6716] NILFS (loop4): trying rollback from an earlier position [ 313.484868][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 313.515554][ T6716] NILFS (loop4): recovery complete [ 313.527037][ T4296] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 313.536930][ T4296] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 313.548061][ T6717] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.586371][ T4296] usb 1-1: USB disconnect, device number 6 [ 315.984630][ T126] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 316.009535][ T6754] loop4: detected capacity change from 0 to 2048 [ 316.076408][ T6754] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 316.176550][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.194032][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.217059][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.243857][ T126] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.262584][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.294674][ T126] usb 3-1: config 0 descriptor?? [ 316.722700][ T126] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 316.761713][ T126] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 316.996887][ T126] usb 3-1: USB disconnect, device number 6 [ 317.068579][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.075005][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.337026][ T6773] loop3: detected capacity change from 0 to 256 [ 317.966025][ T6782] loop0: detected capacity change from 0 to 256 [ 318.194235][ T6782] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 318.275235][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 320.748273][ T6818] loop4: detected capacity change from 0 to 2048 [ 321.179825][ T6818] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 321.530555][ T6825] loop3: detected capacity change from 0 to 1024 [ 321.537854][ T6825] EXT4-fs: Ignoring removed oldalloc option [ 321.557174][ T6825] EXT4-fs: Mount option(s) incompatible with ext3 [ 322.199761][ T6835] loop1: detected capacity change from 0 to 128 [ 322.339834][ T5466] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.634692][ T126] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 323.860332][ T126] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 323.928573][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.068136][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.123694][ T126] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.204865][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.213103][ T126] usb 4-1: Product: syz [ 324.274710][ T126] usb 4-1: Manufacturer: syz [ 324.279389][ T126] usb 4-1: SerialNumber: syz [ 326.084053][ T126] usb 4-1: 0:2 : does not exist [ 326.277373][ T6867] loop3: detected capacity change from 0 to 512 [ 326.387630][ T126] usb 4-1: USB disconnect, device number 10 [ 326.420149][ T6867] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.759: invalid indirect mapped block 256 (level 2) [ 326.435326][ T6867] EXT4-fs (loop3): 2 truncates cleaned up [ 326.441214][ T6867] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 326.979211][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 327.127253][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 327.144159][ T6874] random: crng reseeded on system resumption [ 327.318659][ T5466] udevd[5466]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.973375][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 328.987082][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 330.274588][ T126] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 330.444724][ T126] usb 1-1: device descriptor read/64, error -71 [ 330.714651][ T126] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 330.884673][ T126] usb 1-1: device descriptor read/64, error -71 [ 331.024531][ T126] usb usb1-port1: attempt power cycle [ 331.470256][ T6915] loop1: detected capacity change from 0 to 64 [ 331.624883][ T126] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 331.675077][ T126] usb 1-1: device descriptor read/8, error -71 [ 331.964615][ T126] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 332.015098][ T126] usb 1-1: device descriptor read/8, error -71 [ 332.071665][ T6920] loop3: detected capacity change from 0 to 2048 [ 332.149494][ T6920] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 332.158360][ T126] usb usb1-port1: unable to enumerate USB device [ 332.678022][ T126] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 332.824772][ T2119] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 332.876442][ T126] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 332.905137][ T126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.939321][ T126] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.972603][ T126] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.004854][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.012903][ T126] usb 2-1: Product: syz [ 333.030855][ T126] usb 2-1: Manufacturer: syz [ 333.039913][ T126] usb 2-1: SerialNumber: syz [ 333.044728][ T2119] usb 3-1: Using ep0 maxpacket: 16 [ 333.053886][ T2119] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 333.075366][ T2119] usb 3-1: can't read configurations, error -61 [ 333.194819][ T2164] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 333.234658][ T2119] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 333.240973][ T6945] loop0: detected capacity change from 0 to 1024 [ 333.374241][ T126] usb 2-1: 0:2 : does not exist [ 333.394733][ T2164] usb 5-1: Using ep0 maxpacket: 16 [ 333.402354][ T2164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.413841][ T126] usb 2-1: USB disconnect, device number 9 [ 333.423820][ T6945] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 333.440824][ T2164] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 333.453124][ T2119] usb 3-1: Using ep0 maxpacket: 16 [ 333.458533][ T2164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.473568][ T2119] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 333.482539][ T2119] usb 3-1: can't read configurations, error -61 [ 333.490077][ T2119] usb usb3-port1: attempt power cycle [ 333.496638][ T2164] usb 5-1: config 0 descriptor?? [ 333.560804][ T6949] EXT4-fs (loop0): shut down requested (0) [ 333.593392][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 333.686639][ T5466] udevd[5466]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.720099][ T4336] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 333.754024][ T4336] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1040 with error 28 [ 333.821160][ T4336] EXT4-fs (loop0): This should not happen!! Data will be lost [ 333.821160][ T4336] [ 333.831401][ T4336] EXT4-fs (loop0): Total free blocks count 0 [ 333.843357][ T4336] EXT4-fs (loop0): Free/Dirty block details [ 333.849834][ T4336] EXT4-fs (loop0): free_blocks=68451041280 [ 333.861725][ T4336] EXT4-fs (loop0): dirty_blocks=1056 [ 333.867511][ T4336] EXT4-fs (loop0): Block reservation details [ 333.873547][ T4336] EXT4-fs (loop0): i_reserved_data_blocks=66 [ 333.930557][ T2164] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 333.941176][ T2119] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 333.995516][ T2119] usb 3-1: Using ep0 maxpacket: 16 [ 334.006714][ T2119] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 334.027072][ T2119] usb 3-1: can't read configurations, error -61 [ 334.151886][ T6941] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 334.163659][ T6941] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 334.172076][ T6941] CPU: 1 PID: 6941 Comm: syz.4.780 Not tainted 6.1.132-syzkaller #0 [ 334.180056][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.190127][ T6941] RIP: 0010:mcp_i2c_xfer+0x5a/0x430 [ 334.195374][ T6941] Code: 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 1a 9f c3 f9 4c 8b 33 4d 89 f4 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 f7 e8 f7 9e c3 f9 49 8b 1e 48 8d ab a8 [ 334.215001][ T6941] RSP: 0018:ffffc900059af898 EFLAGS: 00010246 [ 334.221073][ T6941] RAX: dffffc0000000000 RBX: ffff88807d01e1d8 RCX: 0000000000080000 [ 334.229050][ T6941] RDX: ffffc9000e481000 RSI: 00000000000034cf RDI: 00000000000034d0 [ 334.237027][ T6941] RBP: dffffc0000000000 R08: ffffffff870aab7f R09: ffffed100fa03cba [ 334.245006][ T6941] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 334.252995][ T6941] R13: 0000000000000001 R14: 0000000000000000 R15: ffffc900059afb00 [ 334.260971][ T6941] FS: 00007f0b1af266c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 334.269903][ T6941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.276487][ T6941] CR2: 00002000000012c0 CR3: 0000000024a06000 CR4: 00000000003506e0 [ 334.284462][ T6941] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 334.292463][ T6941] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 334.300435][ T6941] Call Trace: [ 334.303716][ T6941] [ 334.306656][ T6941] ? __die_body+0x5e/0xa0 [ 334.311011][ T6941] ? die_addr+0x95/0xc0 [ 334.315193][ T6941] ? exc_general_protection+0x3ae/0x590 [ 334.320779][ T6941] ? asm_exc_general_protection+0x22/0x30 [ 334.326536][ T6941] ? __i2c_transfer+0x6df/0x2380 [ 334.331481][ T6941] ? mcp_i2c_xfer+0x5a/0x430 [ 334.336086][ T6941] ? mcp_i2c_xfer+0x26/0x430 [ 334.340682][ T6941] ? mcp_gpio_get+0x200/0x200 [ 334.345376][ T6941] __i2c_transfer+0x850/0x2380 [ 334.350142][ T6941] ? percpu_down_write+0x2f0/0x2f0 [ 334.355271][ T6941] ? i2c_cmd+0x110/0x110 [ 334.359543][ T6941] ? preempt_schedule_irq+0x136/0x1c0 [ 334.364977][ T6941] i2c_transfer+0x261/0x3a0 [ 334.369507][ T6941] ? __i2c_transfer+0x2380/0x2380 [ 334.374561][ T6941] ? rcu_is_watching+0x11/0xb0 [ 334.379328][ T6941] i2c_transfer_buffer_flags+0x17c/0x260 [ 334.384964][ T6941] ? i2c_transfer+0x3a0/0x3a0 [ 334.389641][ T6941] ? i2cdev_write+0x78/0x130 [ 334.394239][ T6941] i2cdev_write+0x88/0x130 [ 334.398752][ T6941] do_iter_write+0x503/0xc40 [ 334.403352][ T6941] ? vfs_iter_write+0xa0/0xa0 [ 334.408075][ T6941] do_writev+0x27b/0x460 [ 334.412370][ T6941] ? do_readv+0x460/0x460 [ 334.416785][ T6941] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 334.422801][ T6941] ? print_irqtrace_events+0x210/0x210 [ 334.428361][ T6941] ? syscall_enter_from_user_mode+0x2e/0x230 [ 334.434362][ T6941] ? lockdep_hardirqs_on+0x94/0x130 [ 334.439574][ T6941] ? syscall_enter_from_user_mode+0x2e/0x230 [ 334.445583][ T6941] do_syscall_64+0x3b/0xb0 [ 334.450002][ T6941] ? clear_bhb_loop+0x45/0xa0 [ 334.454709][ T6941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.460605][ T6941] RIP: 0033:0x7f0b1a18d169 [ 334.465035][ T6941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.484735][ T6941] RSP: 002b:00007f0b1af26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 334.493154][ T6941] RAX: ffffffffffffffda RBX: 00007f0b1a3a5fa0 RCX: 00007f0b1a18d169 [ 334.501243][ T6941] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 0000000000000006 [ 334.509256][ T6941] RBP: 00007f0b1a20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 334.517235][ T6941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.525237][ T6941] R13: 0000000000000000 R14: 00007f0b1a3a5fa0 R15: 00007fff8843d608 [ 334.533289][ T6941] [ 334.536325][ T6941] Modules linked in: [ 334.541408][ T6941] ---[ end trace 0000000000000000 ]--- [ 334.546968][ T2119] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 334.555433][ T6941] RIP: 0010:mcp_i2c_xfer+0x5a/0x430 [ 334.561661][ T6941] Code: 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 1a 9f c3 f9 4c 8b 33 4d 89 f4 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 f7 e8 f7 9e c3 f9 49 8b 1e 48 8d ab a8 [ 334.587382][ T2119] usb 3-1: Using ep0 maxpacket: 16 [ 334.612411][ T2119] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 334.651439][ T2119] usb 3-1: can't read configurations, error -61 [ 334.660350][ T6941] RSP: 0018:ffffc900059af898 EFLAGS: 00010246 [ 334.685677][ T2119] usb usb3-port1: unable to enumerate USB device [ 334.804911][ T6941] RAX: dffffc0000000000 RBX: ffff88807d01e1d8 RCX: 0000000000080000 [ 334.924959][ T6941] RDX: ffffc9000e481000 RSI: 00000000000034cf RDI: 00000000000034d0 [ 335.034550][ T6941] RBP: dffffc0000000000 R08: ffffffff870aab7f R09: ffffed100fa03cba [ 335.042621][ T6941] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 335.086818][ T6941] R13: 0000000000000001 R14: 0000000000000000 R15: ffffc900059afb00 [ 335.108747][ T6941] FS: 00007f0b1af266c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 335.123195][ T6941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.130222][ T6941] CR2: 000000110c3760ff CR3: 0000000024a06000 CR4: 00000000003506f0 [ 335.140689][ T6941] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 335.149225][ T6941] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 335.159037][ T6941] Kernel panic - not syncing: Fatal exception [ 335.165429][ T6941] Kernel Offset: disabled [ 335.169763][ T6941] Rebooting in 86400 seconds..