last executing test programs: 43.976517562s ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7ff}]}]}]}, 0x38}}, 0x0) 43.403388196s ago: executing program 1: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000900)='user\x00', &(0x7f0000000940)={'syz', 0x2}, &(0x7f0000000980)='\x00', 0x0) request_key(&(0x7f0000001040)='user\x00', &(0x7f0000001080)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 42.164212613s ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0\x00', 0x272) 41.160670213s ago: executing program 1: r0 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x2, r1}) 41.084820512s ago: executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@local}, 0x14) 40.281941552s ago: executing program 4: syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000006440)='./file1\x00', 0x80, &(0x7f0000001980)=ANY=[@ANYBLOB="747970653d629bfeaa2c6465636f6d706f73652c6e6f6465636f6d706f73652c626172726965722c666f7263652c6e6c733d69736f383835392d362c00c25b34991b2f704e85f2d08b933957e3b0e4c6e3a4d48c931fb222da2a9d2d8a8178b6563cf0e8e9c5afc7a0cbd198b3caecbb6d7e248336853192160c80610bc5ecccf897ed5d91ce5849107da00a1be709492689ec1e2d5ea1dedf8b61f814d740d3e9a2b1c533c75b040acf3a72229080ee55c477eaebf9992c7dc33572ee3ae7bd10dad5003b093cdde3bfd800000000"], 0x1, 0x6e4, &(0x7f0000000240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) chown(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 40.215413032s ago: executing program 1: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000900)='user\x00', &(0x7f0000000940)={'syz', 0x2}, &(0x7f0000000980)='\x00', 0x0) request_key(&(0x7f0000001040)='user\x00', &(0x7f0000001080)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 39.028864453s ago: executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='binfmt_misc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x11052, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0) 37.715735728s ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x143142, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRES8=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/kcm\x00') lseek(0xffffffffffffffff, 0x9, 0x0) pread64(r2, &(0x7f0000000240)=""/204, 0xcc, 0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) accept4(r3, &(0x7f00000000c0)=@rc={0x1f, @fixed}, &(0x7f0000000140)=0x80, 0x800) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x500, 0x340, 0x18c, 0x203, 0x0, 0x19030000, 0x430, 0x2e0, 0x2e0, 0x430, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x340, 0x10, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffd}]}}, @common=@hl={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9c, 0x29, "8a3f44d6e8f752e0bd99f6a63e8ecb7b371f205e469fbf5e62170d0a39eb"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ip6erspan0\x00', {0x51f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 37.52634781s ago: executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r2, 0x0) write(r0, &(0x7f00000000c0)="ce1ac6f1", 0x4) 36.161138979s ago: executing program 4: syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000006440)='./file1\x00', 0x80, &(0x7f0000001980)=ANY=[@ANYBLOB="747970653d629bfeaa2c6465636f6d706f73652c6e6f6465636f6d706f73652c626172726965722c666f7263652c6e6c733d69736f383835392d362c00c25b34991b2f704e85f2d08b933957e3b0e4c6e3a4d48c931fb222da2a9d2d8a8178b6563cf0e8e9c5afc7a0cbd198b3caecbb6d7e248336853192160c80610bc5ecccf897ed5d91ce5849107da00a1be709492689ec1e2d5ea1dedf8b61f814d740d3e9a2b1c533c75b040acf3a72229080ee55c477eaebf9992c7dc33572ee3ae7bd10dad5003b093cdde3bfd800000000"], 0x1, 0x6e4, &(0x7f0000000240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) chown(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 34.150544196s ago: executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000000)=0x1aa, 0x4) sendto$unix(r0, &(0x7f0000001c80)="a4", 0x1, 0x4081, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x40002042, 0x0, 0xfff6) 4.467440187s ago: executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x143142, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 4.313413654s ago: executing program 3: r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1) close(r0) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 4.014342402s ago: executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0xf, 0x5, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x0) 3.571102365s ago: executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000007000046009ce6"], 0x53) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 3.336824582s ago: executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x2802, &(0x7f0000000000)) io_uring_enter(r0, 0x481e, 0x4415, 0x6, &(0x7f0000000080)={[0x8]}, 0x8) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000070000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_es_lookup_extent_enter\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) mincore(&(0x7f0000365000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/46) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200002e1, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x30) fchmod(r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) capset(&(0x7f0000000240)={0x20080522}, &(0x7f00000002c0)={0x1, 0x0, 0x646ff058, 0xc, 0x1f, 0x1b}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x6, '\x00', r5, r3, 0x1, 0x3, 0x4}, 0x48) r6 = gettid() capset(&(0x7f0000000480)={0x19980330, r6}, &(0x7f00000004c0)={0x0, 0xfffffffc, 0x2, 0xd58, 0x0, 0x80000000}) r7 = getpid() capget(&(0x7f0000000300)={0x19980330, r7}, &(0x7f0000000340)={0x5, 0xffffffff, 0x2, 0x7442, 0x7, 0x7}) r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) setns(r9, 0x66020000) 3.279812459s ago: executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x3231564e}}) 2.713525142s ago: executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16", 0x9}]) 2.660731733s ago: executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x15) 2.473005299s ago: executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040004, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) chown(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x0, 0x0, 0x2007) 2.057650018s ago: executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000100)={0x3, 0xfffffffffffffffc}, 0x0) setreuid(0xee00, 0x0) r1 = getuid() setreuid(0x0, r1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 1.973036155s ago: executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, &(0x7f00000012c0)=ANY=[@ANYBLOB="6e6c733d6d61637475726b6973682c756d61736b3d30303030303030303030303030303030303030303031302c747970653dedd034b32c00c14753ec1c7240da4357ef4117066f6b296b097f61fa71efb3f728d73ad8acc1c199417a19315846902260a45c562416a3bc640947efb15e82713f5b8cf3d9061f4fe48a902cb3abff7ec019b2af88f8d7b7aa17f66ac7e7cf6d1b455c39043f6ddd5c8a679186c29c472dfbc6ca922020b4acb8d5132a528cb4cbe6e82cae8640f85a66608c4107"], 0x0, 0x689, &(0x7f0000000c00)="$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") mkdirat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file8\x00', r1, &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') 1.833949171s ago: executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01e1ffffffffffffff00010000000900010073797a30000000004c000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000000a0007"], 0x94}}, 0x0) 1.193421735s ago: executing program 2: r0 = io_uring_setup(0x354e, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.173993819s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="66a049e53101e22374323af95848ca15"]}]}, 0x38}], 0x1}, 0x0) 523.843313ms ago: executing program 0: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r0, 0x12) 501.394595ms ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0xf, 0x5, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x0) 284.77837ms ago: executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x14, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}]}]}]}}]}, 0xa0}}, 0x0) 0s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3000480, &(0x7f0000000080), 0x45, 0x786, &(0x7f00000007c0)="$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") r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004400)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x0, @ipv4}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000826300003600000000000000000000002400000000000000290000003200000000000000000000000000ffff"], 0x40}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 215.119838][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.127716][ T5068] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.135520][ T5068] bridge_slave_0: entered allmulticast mode [ 215.144533][ T5068] bridge_slave_0: entered promiscuous mode [ 215.251170][ T5068] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.259291][ T5068] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.267258][ T5068] bridge_slave_1: entered allmulticast mode [ 215.276283][ T5068] bridge_slave_1: entered promiscuous mode [ 215.414471][ T5074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.459564][ T5067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.466797][ T5067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.493155][ T5067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.570345][ T5074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.613436][ T5067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.620628][ T5067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.647115][ T5067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.865833][ T5068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.882053][ T5074] team0: Port device team_slave_0 added [ 215.889882][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.897676][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.905638][ T5087] bridge_slave_0: entered allmulticast mode [ 215.914829][ T5087] bridge_slave_0: entered promiscuous mode [ 215.945762][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.953659][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.961624][ T5071] bridge_slave_0: entered allmulticast mode [ 215.970424][ T5071] bridge_slave_0: entered promiscuous mode [ 215.988391][ T5074] team0: Port device team_slave_1 added [ 215.996343][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.005176][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.012841][ T5076] Bluetooth: hci0: command tx timeout [ 216.013154][ T5071] bridge_slave_1: entered allmulticast mode [ 216.021765][ T5076] Bluetooth: hci3: command tx timeout [ 216.027139][ T5071] bridge_slave_1: entered promiscuous mode [ 216.040223][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.048090][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.055991][ T5087] bridge_slave_1: entered allmulticast mode [ 216.065272][ T5087] bridge_slave_1: entered promiscuous mode [ 216.082853][ T5068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.117453][ T5076] Bluetooth: hci1: command tx timeout [ 216.183007][ T5076] Bluetooth: hci2: command tx timeout [ 216.373158][ T5068] team0: Port device team_slave_0 added [ 216.384167][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.391452][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.417772][ T5074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.440813][ T5071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.463398][ T5071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.482291][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.529925][ T5067] hsr_slave_0: entered promiscuous mode [ 216.538795][ T5067] hsr_slave_1: entered promiscuous mode [ 216.557151][ T5068] team0: Port device team_slave_1 added [ 216.566849][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.574364][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.576086][ T5076] Bluetooth: hci4: command tx timeout [ 216.600726][ T5074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.650608][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.808040][ T5071] team0: Port device team_slave_0 added [ 216.860727][ T5068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.867996][ T5068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.894997][ T5068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.914341][ T5087] team0: Port device team_slave_0 added [ 216.924031][ T5068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.931187][ T5068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.957838][ T5068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.976674][ T5071] team0: Port device team_slave_1 added [ 217.074380][ T5087] team0: Port device team_slave_1 added [ 217.248885][ T5074] hsr_slave_0: entered promiscuous mode [ 217.257856][ T5074] hsr_slave_1: entered promiscuous mode [ 217.267520][ T5074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.275839][ T5074] Cannot create hsr debugfs directory [ 217.314222][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.321624][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.347944][ T5071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.410966][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.418451][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.445030][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.518337][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.527073][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.554176][ T5071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.600000][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.607286][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.633743][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.655545][ T5068] hsr_slave_0: entered promiscuous mode [ 217.664660][ T5068] hsr_slave_1: entered promiscuous mode [ 217.674221][ T5068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.682208][ T5068] Cannot create hsr debugfs directory [ 218.094257][ T5076] Bluetooth: hci3: command tx timeout [ 218.100025][ T5076] Bluetooth: hci0: command tx timeout [ 218.171653][ T5080] Bluetooth: hci1: command tx timeout [ 218.215801][ T5087] hsr_slave_0: entered promiscuous mode [ 218.224764][ T5087] hsr_slave_1: entered promiscuous mode [ 218.233405][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.241217][ T5087] Cannot create hsr debugfs directory [ 218.261441][ T5080] Bluetooth: hci2: command tx timeout [ 218.261518][ T5071] hsr_slave_0: entered promiscuous mode [ 218.276867][ T5071] hsr_slave_1: entered promiscuous mode [ 218.285401][ T5071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.293281][ T5071] Cannot create hsr debugfs directory [ 218.651906][ T5080] Bluetooth: hci4: command tx timeout [ 219.001516][ T5067] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.082295][ T5067] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.112706][ T5067] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.155187][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.162306][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.235639][ T5067] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.360775][ T5074] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.526845][ T5074] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.554049][ T5068] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.600727][ T5074] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.620722][ T5074] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.641032][ T5068] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.684151][ T5068] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.772453][ T5068] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.797396][ T5071] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.888079][ T5071] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.990793][ T5071] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.029705][ T5087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.054391][ T5087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.085217][ T5087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.103351][ T5071] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.172490][ T5080] Bluetooth: hci0: command tx timeout [ 220.176477][ T5076] Bluetooth: hci3: command tx timeout [ 220.195473][ T5087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.253374][ T5076] Bluetooth: hci1: command tx timeout [ 220.331525][ T5076] Bluetooth: hci2: command tx timeout [ 220.761638][ T5076] Bluetooth: hci4: command tx timeout [ 220.916501][ T5067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.068606][ T5074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.209116][ T5067] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.269275][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.277129][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.308103][ T5068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.447429][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.455256][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.474205][ T5074] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.502266][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.577046][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.584931][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.698606][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.706402][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.731741][ T5068] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.749938][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.823549][ T5071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.917364][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.925125][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.941379][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.948879][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.964345][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.972091][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.064092][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.071910][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.236242][ T5071] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.298879][ T5074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.501000][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.509078][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.534043][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.542081][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.660870][ T5087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.848068][ T5068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.861898][ T5068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.207977][ T5067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.479821][ T5074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.628617][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.043534][ T5074] veth0_vlan: entered promiscuous mode [ 225.118536][ T5068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.206878][ T5074] veth1_vlan: entered promiscuous mode [ 225.235849][ T5087] veth0_vlan: entered promiscuous mode [ 225.277802][ T5071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.438385][ T5087] veth1_vlan: entered promiscuous mode [ 225.757266][ T5074] veth0_macvtap: entered promiscuous mode [ 225.794644][ T5068] veth0_vlan: entered promiscuous mode [ 225.849662][ T5074] veth1_macvtap: entered promiscuous mode [ 225.960994][ T5068] veth1_vlan: entered promiscuous mode [ 226.031542][ T5071] veth0_vlan: entered promiscuous mode [ 226.053431][ T5087] veth0_macvtap: entered promiscuous mode [ 226.107095][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.207698][ T5087] veth1_macvtap: entered promiscuous mode [ 226.226622][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.291097][ T5071] veth1_vlan: entered promiscuous mode [ 226.405282][ T5074] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.415418][ T5074] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.424661][ T5074] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.434271][ T5074] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.470362][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.481172][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.500031][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.537418][ T5068] veth0_macvtap: entered promiscuous mode [ 226.579271][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.590851][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.605895][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.658724][ T5068] veth1_macvtap: entered promiscuous mode [ 226.721962][ T5087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.731050][ T5087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.742832][ T5087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.751928][ T5087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.850502][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.862181][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.872382][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.883142][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.900584][ T5068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.988344][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.999576][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.009871][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.020837][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.036129][ T5068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.074684][ T5071] veth0_macvtap: entered promiscuous mode [ 227.113230][ T5071] veth1_macvtap: entered promiscuous mode [ 227.269175][ T5068] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.279442][ T5068] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.288628][ T5068] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.298956][ T5068] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.402585][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.414764][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.424970][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.435797][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.445957][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.457877][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.473206][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.501412][ T5067] veth0_vlan: entered promiscuous mode [ 227.686908][ T5067] veth1_vlan: entered promiscuous mode [ 227.729485][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.741172][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.751553][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.762576][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.772671][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.783467][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.798526][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.114602][ T5071] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.124724][ T5071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.133977][ T5071] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.143087][ T5071] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.167793][ T5067] veth0_macvtap: entered promiscuous mode [ 228.277619][ T5067] veth1_macvtap: entered promiscuous mode [ 228.517508][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.528563][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.538776][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.549554][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.560245][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.571051][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.582345][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.593604][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.608761][ T5067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.825659][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.836649][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.846952][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.857721][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.868005][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.878810][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.889081][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.902206][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.919483][ T5067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.987178][ T5067] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.996392][ T5067] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.009614][ T5067] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.018873][ T5067] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.198022][ T4673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.206473][ T4673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.402231][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.410351][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.154059][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.162630][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.377129][ T5131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.386421][ T5131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.394580][ T4673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.402904][ T4673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.410935][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.419304][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.612330][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.620554][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.032158][ T5131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.040386][ T5131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.137826][ T5267] netem: change failed [ 236.608658][ T5263] loop3: detected capacity change from 0 to 40427 [ 236.700496][ T5263] F2FS-fs (loop3): invalid crc value [ 236.826676][ T5263] F2FS-fs (loop3): Found nat_bits in checkpoint [ 237.079644][ T4403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.087893][ T4403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.140206][ T5279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.150841][ T5279] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 237.182652][ T5263] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 237.262099][ T29] audit: type=1800 audit(1718168351.889:2): pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 237.356997][ T5074] syz-executor.3: attempt to access beyond end of device [ 237.356997][ T5074] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 237.388075][ T5131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.396605][ T5131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.805441][ T4481] udevd[4481]: worker [5245] terminated by signal 33 (Unknown signal 33) [ 237.832241][ T4481] udevd[4481]: worker [5245] failed while handling '/devices/virtual/block/loop3' [ 238.567231][ T5289] loop1: detected capacity change from 0 to 256 [ 238.917144][ T5289] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 239.963360][ T5307] netem: change failed [ 240.503418][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.513727][ T5312] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 240.920863][ T5306] loop4: detected capacity change from 0 to 40427 [ 240.962913][ T5306] F2FS-fs (loop4): invalid crc value [ 241.037441][ T5306] F2FS-fs (loop4): Found nat_bits in checkpoint [ 241.346057][ T5306] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 241.495652][ T29] audit: type=1800 audit(1718168356.069:3): pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 241.552997][ T5067] syz-executor.4: attempt to access beyond end of device [ 241.552997][ T5067] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.011086][ T5319] loop3: detected capacity change from 0 to 4096 [ 242.166835][ T5319] NILFS (loop3): invalid segment: Checksum error in segment payload [ 242.184341][ T5319] NILFS (loop3): trying rollback from an earlier position [ 242.472524][ T5319] NILFS (loop3): recovery complete [ 242.490155][ T5330] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.777351][ T5332] loop0: detected capacity change from 0 to 256 [ 242.976088][ T5332] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 243.245752][ T29] audit: type=1804 audit(1718168357.839:4): pid=5338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir844935581/syzkaller.LllqnI/2/file1/bus" dev="loop3" ino=12 res=1 errno=0 [ 244.149609][ T5350] netem: change failed [ 244.886906][ T5359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.901762][ T5359] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 245.512397][ T5353] loop1: detected capacity change from 0 to 40427 [ 245.546081][ T5353] F2FS-fs (loop1): invalid crc value [ 245.610350][ T5353] F2FS-fs (loop1): Found nat_bits in checkpoint [ 245.891112][ T5353] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 246.112107][ T29] audit: type=1800 audit(1718168360.639:5): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 246.144404][ T5071] syz-executor.1: attempt to access beyond end of device [ 246.144404][ T5071] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 246.595108][ T5374] 9pnet_fd: Insufficient options for proto=fd [ 247.428556][ T5384] netem: change failed [ 247.455361][ T5379] loop4: detected capacity change from 0 to 4096 [ 247.476139][ T5385] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 247.604815][ T5379] NILFS (loop4): invalid segment: Checksum error in segment payload [ 247.613450][ T5379] NILFS (loop4): trying rollback from an earlier position [ 247.721368][ T5379] NILFS (loop4): recovery complete [ 247.778543][ T5389] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.073308][ T5392] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.083906][ T5392] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 248.411854][ T29] audit: type=1804 audit(1718168362.979:6): pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3341112069/syzkaller.RLmX2v/6/file1/bus" dev="loop4" ino=12 res=1 errno=0 [ 249.299871][ T5407] loop1: detected capacity change from 0 to 256 [ 249.542319][ T5407] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 249.844008][ T5414] 9pnet_fd: Insufficient options for proto=fd [ 249.918469][ T5416] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 251.110501][ T5420] loop0: detected capacity change from 0 to 32768 [ 251.275322][ T5426] loop2: detected capacity change from 0 to 4096 [ 251.380273][ T5420] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=none,data_checksum=none,nojournal_transaction_names,read_only [ 251.396278][ T5420] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 251.457067][ T5426] NILFS (loop2): invalid segment: Checksum error in segment payload [ 251.465665][ T5426] NILFS (loop2): trying rollback from an earlier position [ 251.541639][ T5426] NILFS (loop2): recovery complete [ 251.620586][ T5420] bcachefs (loop0): alloc_read... done [ 251.626811][ T5420] bcachefs (loop0): stripes_read... done [ 251.633095][ T5420] bcachefs (loop0): snapshots_read... done [ 251.658625][ T5420] bcachefs (loop0): journal_replay... done [ 251.666577][ T5420] bcachefs (loop0): resume_logged_ops... done [ 251.680661][ T5420] bcachefs (loop0): done starting filesystem [ 251.687936][ T5443] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.845623][ T5420] syz-executor.0 (5420) used greatest stack depth: 5224 bytes left [ 252.494842][ T5087] bcachefs (loop0): shutting down [ 252.619597][ T29] audit: type=1804 audit(1718168367.139:7): pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1511630095/syzkaller.Ks0epq/17/file1/bus" dev="loop2" ino=12 res=1 errno=0 [ 252.652575][ T5087] bcachefs (loop0): shutdown complete [ 252.955635][ T5457] loop1: detected capacity change from 0 to 256 [ 253.136275][ T5457] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 253.831713][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 253.885305][ T5464] 9pnet_fd: Insufficient options for proto=fd [ 254.255824][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.267420][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.277806][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.291170][ T8] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 254.302163][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.418055][ T8] usb 5-1: config 0 descriptor?? [ 255.159956][ T8] uclogic 0003:5543:0003.0001: No inputs registered, leaving [ 255.330634][ T8] uclogic 0003:5543:0003.0001: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 255.470501][ T5472] loop3: detected capacity change from 0 to 32768 [ 255.534262][ T8] usb 5-1: USB disconnect, device number 2 [ 255.766682][ T5472] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=none,data_checksum=none,nojournal_transaction_names,read_only [ 255.782255][ T5472] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 255.983972][ T5472] bcachefs (loop3): alloc_read... done [ 255.989874][ T5472] bcachefs (loop3): stripes_read... done [ 255.996096][ T5472] bcachefs (loop3): snapshots_read... done [ 256.017283][ T5472] bcachefs (loop3): journal_replay... done [ 256.023589][ T5472] bcachefs (loop3): resume_logged_ops... done [ 256.042062][ T5472] bcachefs (loop3): done starting filesystem [ 256.181832][ T8] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 256.642037][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 65535, setting to 64 [ 256.837847][ T5074] bcachefs (loop3): shutting down [ 256.873198][ T8] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 256.882739][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.890993][ T8] usb 2-1: Product: syz [ 256.901118][ T8] usb 2-1: Manufacturer: syz [ 256.906085][ T8] usb 2-1: SerialNumber: syz [ 256.974861][ T8] usb 2-1: config 0 descriptor?? [ 256.977091][ T5074] bcachefs (loop3): shutdown complete [ 256.992858][ T5487] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 257.060085][ T5495] loop2: detected capacity change from 0 to 4096 [ 257.271822][ T5495] NILFS (loop2): invalid segment: Checksum error in segment payload [ 257.285772][ T5495] NILFS (loop2): trying rollback from an earlier position [ 257.301713][ T8] usb 2-1: USB disconnect, device number 2 [ 257.464573][ T5495] NILFS (loop2): recovery complete [ 257.538034][ T5504] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.662082][ T5131] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 257.773752][ T5509] 9pnet_fd: Insufficient options for proto=fd [ 258.092593][ T29] audit: type=1804 audit(1718168372.689:8): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1511630095/syzkaller.Ks0epq/21/file1/bus" dev="loop2" ino=12 res=1 errno=0 [ 258.122176][ T5131] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 258.122345][ T5131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.130398][ T5131] usb 1-1: config 0 descriptor?? [ 258.265410][ T5131] cp210x 1-1:0.0: cp210x converter detected [ 258.625704][ T5131] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 258.633794][ T5131] cp210x 1-1:0.0: querying part number failed [ 258.736533][ T5131] usb 1-1: cp210x converter now attached to ttyUSB0 [ 258.795499][ T5131] usb 1-1: USB disconnect, device number 2 [ 258.873761][ T5131] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 258.884659][ T5131] cp210x 1-1:0.0: device disconnected [ 261.102202][ T5530] loop4: detected capacity change from 0 to 32768 [ 261.244787][ T5548] 9pnet_fd: Insufficient options for proto=fd [ 261.252227][ T8] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 261.270990][ T5530] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=none,data_checksum=none,nojournal_transaction_names,read_only [ 261.292025][ T5530] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 261.539539][ T5530] bcachefs (loop4): alloc_read... done [ 261.545757][ T5530] bcachefs (loop4): stripes_read... done [ 261.551878][ T5530] bcachefs (loop4): snapshots_read... done [ 261.569901][ T5530] bcachefs (loop4): journal_replay... done [ 261.576681][ T5530] bcachefs (loop4): resume_logged_ops... done [ 261.591666][ T5530] bcachefs (loop4): done starting filesystem [ 261.702525][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 65535, setting to 64 [ 261.902700][ T8] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 261.912322][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.920586][ T8] usb 1-1: Product: syz [ 261.925325][ T8] usb 1-1: Manufacturer: syz [ 261.930155][ T8] usb 1-1: SerialNumber: syz [ 261.984712][ T8] usb 1-1: config 0 descriptor?? [ 262.012947][ T5538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 262.045321][ T5557] loop2: detected capacity change from 0 to 256 [ 262.156373][ T5557] exFAT-fs (loop2): invalid fs_name [ 262.163104][ T5557] exFAT-fs (loop2): failed to read boot sector [ 262.169468][ T5557] exFAT-fs (loop2): failed to recognize exfat type [ 262.285070][ T5554] loop3: detected capacity change from 0 to 4096 [ 262.337190][ T780] usb 1-1: USB disconnect, device number 3 [ 262.442236][ T5067] bcachefs (loop4): shutting down [ 262.462645][ T5554] NILFS (loop3): invalid segment: Checksum error in segment payload [ 262.472138][ T5554] NILFS (loop3): trying rollback from an earlier position [ 262.566998][ T5067] bcachefs (loop4): shutdown complete [ 262.622023][ T5554] NILFS (loop3): recovery complete [ 262.670905][ T5560] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.461543][ T29] audit: type=1804 audit(1718168378.049:9): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir844935581/syzkaller.LllqnI/17/file1/bus" dev="loop3" ino=12 res=1 errno=0 [ 263.683095][ T5572] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.692869][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.613607][ T5462] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 264.973674][ T5583] loop2: detected capacity change from 0 to 256 [ 265.051796][ T5583] exFAT-fs (loop2): invalid fs_name [ 265.057320][ T5583] exFAT-fs (loop2): failed to read boot sector [ 265.067908][ T5583] exFAT-fs (loop2): failed to recognize exfat type [ 266.080483][ T5584] loop0: detected capacity change from 0 to 32768 [ 266.331859][ T5584] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=none,data_checksum=none,nojournal_transaction_names,read_only [ 266.349820][ T5584] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 266.547195][ T5584] bcachefs (loop0): alloc_read... done [ 266.553432][ T5584] bcachefs (loop0): stripes_read... done [ 266.559454][ T5584] bcachefs (loop0): snapshots_read... done [ 266.578010][ T5584] bcachefs (loop0): journal_replay... done [ 266.584442][ T5584] bcachefs (loop0): resume_logged_ops... done [ 266.591555][ T5584] bcachefs (loop0): done starting filesystem [ 266.767581][ T5602] loop2: detected capacity change from 0 to 512 [ 266.844930][ T5602] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 266.853626][ T5602] UDF-fs: Scanning with blocksize 512 failed [ 266.920730][ T5602] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 266.928620][ T5602] UDF-fs: Scanning with blocksize 1024 failed [ 267.038822][ T5602] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 267.047627][ T5602] UDF-fs: Scanning with blocksize 2048 failed [ 267.070834][ T5596] loop1: detected capacity change from 0 to 4096 [ 267.122036][ T5596] ======================================================= [ 267.122036][ T5596] WARNING: The mand mount option has been deprecated and [ 267.122036][ T5596] and is ignored by this kernel. Remove the mand [ 267.122036][ T5596] option from the mount to silence this warning. [ 267.122036][ T5596] ======================================================= [ 267.143656][ T5602] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 267.275921][ T5087] bcachefs (loop0): shutting down [ 267.409998][ T5131] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 267.428212][ T5602] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.458993][ T5087] bcachefs (loop0): shutdown complete [ 267.661913][ T29] audit: type=1804 audit(1718168382.239:10): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1511630095/syzkaller.Ks0epq/30/file0/bus" dev="loop2" ino=42 res=1 errno=0 [ 267.688600][ T29] audit: type=1800 audit(1718168382.239:11): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=42 res=0 errno=0 [ 268.278236][ T5602] Invalid ELF header magic: != ELF [ 268.447705][ T5131] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 268.457239][ T5131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.523220][ T5131] usb 5-1: config 0 descriptor?? [ 268.564295][ T5614] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.574081][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.596407][ T5131] cp210x 5-1:0.0: cp210x converter detected [ 268.941852][ T5131] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 268.949643][ T5131] cp210x 5-1:0.0: querying part number failed [ 269.002389][ T5131] usb 5-1: cp210x converter now attached to ttyUSB0 [ 269.035484][ T5131] usb 5-1: USB disconnect, device number 3 [ 269.104153][ T5131] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 269.115823][ T5131] cp210x 5-1:0.0: device disconnected [ 269.127132][ T5620] process 'syz-executor.3' launched '/dev/fd/3' with NULL argv: empty string added [ 270.496107][ T5631] loop0: detected capacity change from 0 to 7 [ 270.536890][ T5631] Dev loop0: unable to read RDB block 7 [ 270.543395][ T5631] loop0: unable to read partition table [ 270.632426][ T5631] loop0: partition table beyond EOD, truncated [ 270.639037][ T5631] loop_reread_partitions: partition scan of loop0 (ţ被xüźŃř éÚ¬§˝dƤ´ŕ–ݡŻ¨ťâ·ű [ 270.639037][ T5631] ) failed (rc=-5) [ 271.507727][ T5643] loop4: detected capacity change from 0 to 512 [ 271.609842][ T5643] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 271.622132][ T5643] UDF-fs: Scanning with blocksize 512 failed [ 271.666464][ T5643] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 271.674651][ T5643] UDF-fs: Scanning with blocksize 1024 failed [ 271.688079][ T5643] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 271.696318][ T5643] UDF-fs: Scanning with blocksize 2048 failed [ 271.764874][ T5643] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 271.805317][ T5643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.865869][ T5648] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.875876][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 272.031084][ T5641] loop1: detected capacity change from 0 to 4096 [ 272.158182][ T29] audit: type=1804 audit(1718168386.709:12): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3341112069/syzkaller.RLmX2v/22/file0/bus" dev="loop4" ino=42 res=1 errno=0 [ 272.184575][ T29] audit: type=1800 audit(1718168386.709:13): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=42 res=0 errno=0 [ 272.705382][ T5643] Invalid ELF header magic: != ELF [ 273.442946][ T5658] loop2: detected capacity change from 0 to 2048 [ 273.617802][ T5664] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.732544][ T5658] syz-executor.2: attempt to access beyond end of device [ 273.732544][ T5658] loop2: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 273.853208][ T5658] syz-executor.2: attempt to access beyond end of device [ 273.853208][ T5658] loop2: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 274.272232][ T5664] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 274.287227][ T5664] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 274.421605][ T5664] Remounting filesystem read-only [ 274.427301][ T11] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 274.435064][ T11] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 274.442823][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 274.452192][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 274.461452][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 274.519134][ T11] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 274.526497][ T11] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 274.534335][ T11] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 274.542122][ T11] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 274.549675][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 274.559001][ T11] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 274.566419][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 274.577858][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 274.590994][ T11] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 274.599866][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 274.612978][ T11] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 274.620357][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 274.630140][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 274.639666][ T11] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 274.648206][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 274.952313][ T5681] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.962686][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.983377][ T11] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 274.990549][ T11] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 275.002264][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 275.012827][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 275.022076][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 275.242080][ T5068] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 275.309897][ T5068] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 275.318778][ T5068] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 275.326726][ T5068] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 275.334815][ T5068] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 275.343418][ T5068] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 275.484341][ T5068] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 275.491567][ T5068] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 275.499095][ T5068] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 275.513322][ T5068] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 275.524016][ T5068] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 275.692226][ T5068] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 275.699309][ T5068] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 275.707657][ T5068] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 275.721183][ T5068] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 275.732118][ T5068] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 275.863241][ T5684] loop1: detected capacity change from 0 to 4096 [ 276.950366][ T5697] loop4: detected capacity change from 0 to 2048 [ 277.122754][ T5704] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.206004][ T5702] loop0: detected capacity change from 0 to 1024 [ 277.319300][ T5697] syz-executor.4: attempt to access beyond end of device [ 277.319300][ T5697] loop4: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 277.406935][ T5697] syz-executor.4: attempt to access beyond end of device [ 277.406935][ T5697] loop4: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 277.652080][ T58] hfsplus: b-tree write err: -5, ino 4 [ 277.789482][ T5704] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 277.800800][ T5704] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 277.942447][ T5704] Remounting filesystem read-only [ 277.947988][ T58] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 277.955383][ T58] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 277.968397][ T58] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 277.979441][ T58] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 277.988689][ T58] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.050394][ T5715] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 278.063608][ T5715] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.114584][ T58] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 278.123074][ T58] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 278.130890][ T58] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 278.138878][ T58] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 278.146806][ T58] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.157785][ T58] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 278.165896][ T58] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.182903][ T58] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.192165][ T58] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 278.199621][ T58] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.210183][ T58] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 278.218686][ T58] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.228507][ T58] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.238039][ T58] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 278.245902][ T58] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.553372][ T58] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 278.560509][ T58] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 278.568170][ T58] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.582929][ T58] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.594352][ T58] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.831771][ T5067] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 278.882438][ T5067] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 278.893763][ T5067] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 278.902911][ T5067] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 278.910457][ T5067] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 278.918340][ T5067] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 279.014056][ T5067] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 279.021113][ T5067] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 279.028996][ T5067] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.038763][ T5067] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.048093][ T5067] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.159635][ T5067] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 279.167032][ T5067] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 279.174865][ T5067] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.184341][ T5067] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.198141][ T5067] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 279.419865][ T5732] loop2: detected capacity change from 0 to 1024 [ 279.569280][ T5732] hfsplus: bad catalog entry type [ 279.572967][ T5726] loop0: detected capacity change from 0 to 4096 [ 279.778235][ T3467] hfsplus: b-tree write err: -5, ino 4 [ 279.984456][ T5736] loop3: detected capacity change from 0 to 2048 [ 280.142364][ T5741] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.215056][ T5736] syz-executor.3: attempt to access beyond end of device [ 280.215056][ T5736] loop3: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 280.247235][ T5736] syz-executor.3: attempt to access beyond end of device [ 280.247235][ T5736] loop3: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 280.435034][ T5743] binder_alloc: 5742: binder_alloc_buf, no vma [ 280.483815][ T5745] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.644655][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.651922][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.668468][ T5741] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 280.679901][ T5741] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 280.781577][ T5741] Remounting filesystem read-only [ 280.787157][ T4403] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 280.794600][ T4403] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 280.802522][ T4403] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.813978][ T4403] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.823728][ T4403] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.898679][ T4403] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 280.906349][ T4403] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 280.914299][ T4403] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 280.922143][ T4403] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 280.929702][ T4403] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.942874][ T4403] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 280.950234][ T4403] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.960753][ T4403] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.970434][ T4403] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 280.978184][ T4403] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.987797][ T4403] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 280.995363][ T4403] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 281.004932][ T4403] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 281.014368][ T4403] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 281.022005][ T4403] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 281.309672][ T4403] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 281.316972][ T4403] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 281.324598][ T4403] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 281.333943][ T4403] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 281.346897][ T4403] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 281.594868][ T5074] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 281.670676][ T5074] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 281.678272][ T5074] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 281.686097][ T5074] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 281.693908][ T5074] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 281.701765][ T5074] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 281.809724][ T5074] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 281.818964][ T5074] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 281.827208][ T5074] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 281.836504][ T5074] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 281.845843][ T5074] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 281.979564][ T5074] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 281.987590][ T5074] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 281.995483][ T5074] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.004857][ T5074] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.014245][ T5074] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.140800][ T5753] fscrypt: Error allocating hmac(sha512): -2 [ 283.458820][ T5779] loop4: detected capacity change from 0 to 2048 [ 283.612052][ T5783] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.722841][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.732600][ T5789] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 283.783199][ T5779] syz-executor.4: attempt to access beyond end of device [ 283.783199][ T5779] loop4: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 283.935141][ T5779] syz-executor.4: attempt to access beyond end of device [ 283.935141][ T5779] loop4: rw=0, sector=15393162788900, nr_sectors = 2 limit=2048 [ 284.369411][ T5783] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 284.381817][ T5783] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 284.483899][ T5783] Remounting filesystem read-only [ 284.489345][ T1046] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 284.496985][ T1046] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 284.507080][ T1046] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 284.521053][ T1046] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 284.531794][ T1046] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 284.590404][ T1046] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 284.598547][ T1046] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 284.606748][ T1046] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 284.614457][ T1046] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 284.626912][ T1046] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 284.636642][ T1046] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 284.644634][ T1046] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 284.654096][ T1046] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 284.663627][ T1046] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 284.677622][ T1046] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 284.687163][ T1046] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 284.694756][ T1046] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 284.704030][ T1046] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 284.714306][ T1046] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 284.725581][ T1046] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.047544][ T1046] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 285.060886][ T1046] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 285.069885][ T1046] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.079203][ T1046] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.088683][ T1046] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.167631][ T5067] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 285.178652][ T5067] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 285.186010][ T5067] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 285.194556][ T5067] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 285.202233][ T5067] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 285.209784][ T5067] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 285.248098][ T5067] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 285.255340][ T5067] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 285.263096][ T5067] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.272696][ T5067] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.281900][ T5067] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.355387][ T5067] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 285.362911][ T5067] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 285.370446][ T5067] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.380094][ T5067] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 285.389487][ T5067] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 286.193573][ T5818] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 287.318106][ T5831] loop1: detected capacity change from 0 to 1024 [ 287.577730][ T5831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.194225][ T5071] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.446882][ T5849] loop3: detected capacity change from 0 to 2048 [ 288.665875][ T5847] loop4: detected capacity change from 0 to 4096 [ 288.694864][ T5854] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 289.033308][ T5849] Alternate GPT is invalid, using primary GPT. [ 289.041225][ T5849] loop3: p2 p3 p7 [ 289.594408][ T5847] ntfs3: loop4: ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 289.859852][ T5860] loop1: detected capacity change from 0 to 512 [ 290.097473][ T5860] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 290.111168][ T5860] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 290.796035][ T5875] loop3: detected capacity change from 0 to 1024 [ 290.919779][ T5875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.145566][ T5883] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 291.153541][ T5883] macsec1: entered promiscuous mode [ 291.248765][ T5883] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 291.339693][ T5074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.003902][ T5890] loop2: detected capacity change from 0 to 164 [ 292.123339][ T5890] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 292.405308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 292.416073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 292.425717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 292.537254][ T5897] loop4: detected capacity change from 0 to 64 [ 292.801472][ T5889] loop0: detected capacity change from 0 to 4096 [ 292.818087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 293.533098][ T5889] ntfs3: loop0: ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 293.850969][ T5910] loop2: detected capacity change from 0 to 1024 [ 294.142424][ T5910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.616615][ T5921] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 294.625554][ T5921] macsec1: entered promiscuous mode [ 294.700075][ T5068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.733323][ T5921] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 294.781958][ T5924] loop4: detected capacity change from 0 to 164 [ 294.903065][ T5924] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 295.872348][ T5941] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 296.092405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 296.729855][ T5951] loop0: detected capacity change from 0 to 1024 [ 296.883672][ T5951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.305187][ T5965] loop3: detected capacity change from 0 to 164 [ 297.459017][ T5965] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 297.513653][ T5087] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.578031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 299.807964][ T5997] loop3: detected capacity change from 0 to 1024 [ 299.969070][ T5997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.122292][ T6006] loop4: detected capacity change from 0 to 164 [ 300.207565][ T6006] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 300.513803][ T5074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.885683][ T6043] loop3: detected capacity change from 0 to 32768 [ 302.997323][ T6043] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 303.407587][ T6066] loop1: detected capacity change from 0 to 1764 [ 303.712571][ T6043] XFS (loop3): Ending clean mount [ 304.142258][ T5074] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 305.515611][ T6097] loop2: detected capacity change from 0 to 1764 [ 305.793070][ T6102] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 307.340454][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.985323][ T6142] loop0: detected capacity change from 0 to 1764 [ 309.145961][ T6151] loop1: detected capacity change from 0 to 32768 [ 309.314044][ T6151] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 309.373792][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.529556][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.741144][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.819593][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.936873][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.082816][ T6151] XFS (loop1): Ending clean mount [ 310.298266][ T5071] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 310.445463][ T58] bridge_slave_1: left allmulticast mode [ 310.451661][ T58] bridge_slave_1: left promiscuous mode [ 310.458237][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.545159][ T58] bridge_slave_0: left allmulticast mode [ 310.551063][ T58] bridge_slave_0: left promiscuous mode [ 310.557993][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.474818][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.625100][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.722674][ T58] bond0 (unregistering): Released all slaves [ 312.556307][ T6190] loop0: detected capacity change from 0 to 1764 [ 313.202649][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 313.519434][ T5080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.549016][ T5080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.563426][ T5080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.602540][ T5080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.614337][ T58] hsr_slave_0: left promiscuous mode [ 313.627536][ T5080] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 313.652985][ T5080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.757160][ T58] hsr_slave_1: left promiscuous mode [ 313.840121][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.848089][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.955610][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.964030][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.072591][ T58] veth1_macvtap: left promiscuous mode [ 314.078375][ T58] veth0_macvtap: left promiscuous mode [ 314.084669][ T58] veth1_vlan: left promiscuous mode [ 314.090252][ T58] veth0_vlan: left promiscuous mode [ 314.351666][ T5131] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 314.762917][ T5131] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 314.771982][ T5131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50172, setting to 1024 [ 314.783641][ T5131] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 314.927346][ T5131] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 314.941122][ T5131] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 314.950953][ T5131] usb 3-1: Manufacturer: syz [ 315.026549][ T5131] usb 3-1: config 0 descriptor?? [ 315.053402][ T6207] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.173456][ T5131] igorplugusb 3-1:0.0: endpoint incorrect [ 315.378240][ T780] usb 3-1: USB disconnect, device number 2 [ 315.614006][ T58] team0 (unregistering): Port device team_slave_1 removed [ 315.696652][ T58] team0 (unregistering): Port device team_slave_0 removed [ 315.772481][ T5076] Bluetooth: hci1: command tx timeout [ 316.152791][ T6209] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 316.662902][ T6224] dummy0: entered promiscuous mode [ 316.957243][ T6232] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.782473][ T6235] loop3: detected capacity change from 0 to 1764 [ 317.833075][ T6201] chnl_net:caif_netlink_parms(): no params data found [ 317.861811][ T5076] Bluetooth: hci1: command tx timeout [ 318.177206][ T6250] QAT: failed to copy from user cfg_data. [ 319.236383][ T780] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 319.649306][ T6201] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.652025][ T780] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 319.657336][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.665382][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50172, setting to 1024 [ 319.672882][ T6201] bridge_slave_0: entered allmulticast mode [ 319.684153][ T780] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 319.692704][ T6201] bridge_slave_0: entered promiscuous mode [ 319.836108][ T780] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 319.848923][ T780] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 319.858517][ T780] usb 3-1: Manufacturer: syz [ 319.932211][ T5076] Bluetooth: hci1: command tx timeout [ 319.946458][ T780] usb 3-1: config 0 descriptor?? [ 319.973055][ T6260] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 320.033774][ T780] igorplugusb 3-1:0.0: endpoint incorrect [ 320.186725][ T6201] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.195324][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.203401][ T6201] bridge_slave_1: entered allmulticast mode [ 320.212780][ T6201] bridge_slave_1: entered promiscuous mode [ 320.467967][ T5123] usb 3-1: USB disconnect, device number 3 [ 320.790766][ T6273] loop3: detected capacity change from 0 to 40427 [ 320.808416][ T6273] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 320.818852][ T6273] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 320.941507][ T6273] F2FS-fs (loop3): Found nat_bits in checkpoint [ 321.309750][ T6201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.322120][ T6273] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 321.329460][ T6273] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 321.457814][ T6201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.577208][ T6287] loop0: detected capacity change from 0 to 256 [ 321.700883][ T6289] QAT: failed to copy from user cfg_data. [ 321.896686][ T6201] team0: Port device team_slave_0 added [ 321.980428][ T6201] team0: Port device team_slave_1 added [ 322.011719][ T5076] Bluetooth: hci1: command tx timeout [ 322.647147][ T6201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.654409][ T6201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.681165][ T6201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.793767][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 322.926429][ T6201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.933937][ T6201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.961117][ T6201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.540042][ T6201] hsr_slave_0: entered promiscuous mode [ 323.648176][ T6201] hsr_slave_1: entered promiscuous mode [ 324.191823][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 324.673753][ T8] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 324.683310][ T8] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 324.693259][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 324.702680][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.906745][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 325.290039][ T8] gspca_sn9c2028: read1 error -32 [ 325.382098][ T6318] loop2: detected capacity change from 0 to 40427 [ 325.399684][ T6318] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 325.407919][ T6318] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 325.513494][ T6318] F2FS-fs (loop2): Found nat_bits in checkpoint [ 325.632301][ T8] gspca_sn9c2028: read1 error -71 [ 325.637927][ T8] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 325.800355][ T6318] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 325.800402][ T8] usb 2-1: USB disconnect, device number 3 [ 325.814172][ T6318] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 326.477871][ T6336] kvm: emulating exchange as write [ 326.993434][ T6201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 327.062843][ T6201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 327.275485][ T6201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 327.449495][ T6201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 327.592820][ T29] audit: type=1800 audit(1718168442.179:14): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1948 res=0 errno=0 [ 327.736167][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 328.974869][ T6201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.227093][ T6201] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.360100][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.367975][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.523066][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.530764][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.479954][ T6384] QAT: failed to copy from user cfg_data. [ 330.867448][ T6387] loop0: detected capacity change from 0 to 64 [ 331.079108][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 331.099145][ T6387] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4017322927 (only 8 groups) [ 331.887576][ T6201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.793773][ T6427] loop1: detected capacity change from 0 to 256 [ 333.802641][ T6422] loop3: detected capacity change from 0 to 64 [ 333.898249][ T6427] FAT-fs (loop1): bogus sectors per cluster 30 [ 333.904969][ T6427] FAT-fs (loop1): Can't find a valid FAT filesystem [ 333.975150][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.442038][ T6435] xt_bpf: check failed: parse error [ 334.715737][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.318455][ T6443] loop2: detected capacity change from 0 to 64 [ 335.350073][ T6201] veth0_vlan: entered promiscuous mode [ 335.439029][ T6443] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4017322927 (only 8 groups) [ 335.537212][ T6201] veth1_vlan: entered promiscuous mode [ 335.947312][ T6201] veth0_macvtap: entered promiscuous mode [ 336.046031][ T6201] veth1_macvtap: entered promiscuous mode [ 336.328039][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.343973][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.355556][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.368374][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.378638][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.389651][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.399857][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.410585][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.425938][ T6201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.888336][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.902551][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.914157][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.924980][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.935116][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.951184][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.962780][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.973980][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.988893][ T6201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.159216][ T6201] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.168443][ T6201] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.177662][ T6201] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.186787][ T6201] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.282695][ T6467] loop1: detected capacity change from 0 to 256 [ 337.368193][ T6467] FAT-fs (loop1): bogus sectors per cluster 30 [ 337.374874][ T6467] FAT-fs (loop1): Can't find a valid FAT filesystem [ 337.750992][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 337.784238][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.258772][ T6474] xt_bpf: check failed: parse error [ 338.679470][ T6487] loop3: detected capacity change from 0 to 64 [ 338.940908][ T6487] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4017322927 (only 8 groups) [ 339.131767][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 339.139011][ T5073] Bluetooth: hci3: command 0x0406 tx timeout [ 339.142808][ T5076] Bluetooth: hci4: command 0x0406 tx timeout [ 339.146322][ T5073] Bluetooth: hci2: command 0x0406 tx timeout [ 339.592697][ T6498] batadv0: entered promiscuous mode [ 339.725213][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.131640][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 341.607234][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 341.923199][ T6538] cgroup2: Unknown parameter 'defcontext' [ 342.058916][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.070057][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.126150][ T6538] loop1: detected capacity change from 0 to 512 [ 342.189540][ T6539] xt_bpf: check failed: parse error [ 342.220712][ T6538] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 343.639696][ T6559] ERROR: device name not specified. [ 344.342342][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 344.342548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 344.613468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 344.772365][ T25] usb 1-1: config index 0 descriptor too short (expected 256, got 27) [ 344.780880][ T25] usb 1-1: config 179 has too many interfaces: 197, using maximum allowed: 32 [ 344.790132][ T25] usb 1-1: config 179 has an invalid interface association descriptor of length 5, skipping [ 344.800530][ T25] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 344.811024][ T25] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 197 [ 344.820653][ T25] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 344.832330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 344.843254][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.203230][ T6579] loop1: detected capacity change from 0 to 128 [ 345.311794][ T25] usb 1-1: string descriptor 0 read error: -71 [ 345.395518][ T25] usb 1-1: USB disconnect, device number 4 [ 346.547961][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.556423][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.945617][ T4403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.954266][ T4403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.188923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 347.591542][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 348.342633][ T6607] loop1: detected capacity change from 0 to 32768 [ 348.475519][ T6607] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 348.488140][ T6607] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 348.508916][ T6607] gfs2: fsid=syz:syz.0: journal 0 mapped with 22 extents in 0ms [ 348.532868][ T5131] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 348.539955][ T5131] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 348.751759][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 348.923243][ T25] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 348.935328][ T25] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 348.945285][ T25] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 348.953807][ T25] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 348.962341][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 348.971629][ T25] usb 4-1: config 0 has no interface number 0 [ 348.977975][ T25] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 348.989462][ T25] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 348.999598][ T25] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 349.009653][ T25] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.023028][ T25] usb 4-1: config 0 interface 125 has no altsetting 0 [ 349.033777][ T25] usb 4-1: config 0 interface 125 has no altsetting 2 [ 349.183551][ T5131] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 643ms [ 349.192674][ T5131] gfs2: fsid=syz:syz.0: jid=0: Done [ 349.198247][ T6607] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 349.252171][ T25] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 349.261871][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.270142][ T25] usb 4-1: Product: syz [ 349.274936][ T25] usb 4-1: Manufacturer: syz [ 349.279671][ T25] usb 4-1: SerialNumber: syz [ 349.425698][ T25] usb 4-1: config 0 descriptor?? [ 349.521963][ T25] usb 4-1: selecting invalid altsetting 2 [ 350.519574][ T25] parport0: fix this legacy no-device port driver! [ 350.747851][ T5123] usb 4-1: USB disconnect, device number 2 [ 350.862771][ T5131] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 351.271808][ T5131] usb 1-1: config index 0 descriptor too short (expected 256, got 27) [ 351.280395][ T5131] usb 1-1: config 179 has too many interfaces: 197, using maximum allowed: 32 [ 351.295370][ T5131] usb 1-1: config 179 has an invalid interface association descriptor of length 5, skipping [ 351.307604][ T5131] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 351.318345][ T5131] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 197 [ 351.328064][ T5131] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 351.337601][ T5131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.685839][ T5131] usb 1-1: string descriptor 0 read error: -71 [ 351.739039][ T5131] usb 1-1: USB disconnect, device number 5 [ 351.907760][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.164042][ T6641] loop1: detected capacity change from 0 to 32768 [ 353.217147][ T6641] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 353.225866][ T6641] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 353.334660][ T6641] gfs2: fsid=syz:syz.0: journal 0 mapped with 22 extents in 6ms [ 353.372796][ T5131] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 353.379815][ T5131] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 354.023510][ T5131] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 643ms [ 354.032494][ T5131] gfs2: fsid=syz:syz.0: jid=0: Done [ 354.037941][ T6641] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 354.555346][ T6661] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 356.219455][ T29] audit: type=1326 audit(1718168470.769:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce2c7cea9 code=0x7ffc0000 [ 356.242928][ T29] audit: type=1326 audit(1718168470.779:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce2c7cea9 code=0x7ffc0000 [ 356.265994][ T29] audit: type=1326 audit(1718168470.789:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fbce2c7cea9 code=0x7ffc0000 [ 356.289664][ T29] audit: type=1326 audit(1718168470.789:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce2c7cea9 code=0x7ffc0000 [ 357.202664][ T6686] loop2: detected capacity change from 0 to 1024 [ 357.608219][ T4403] hfsplus: b-tree write err: -5, ino 4 [ 358.983405][ T6708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 359.710671][ T6716] loop3: detected capacity change from 0 to 1024 [ 360.150674][ T3467] hfsplus: b-tree write err: -5, ino 4 [ 362.201209][ T6752] loop2: detected capacity change from 0 to 1024 [ 362.830805][ T4403] hfsplus: b-tree write err: -5, ino 4 [ 364.781929][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.277457][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.744934][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 368.043439][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 368.212276][ T25] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 368.221120][ T25] usb 1-1: config 179 has no interface number 0 [ 368.228150][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 368.240200][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 368.252745][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 368.264740][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 368.275436][ T25] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 368.294318][ T25] usb 1-1: config 179 interface 65 has no altsetting 0 [ 368.303140][ T25] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 368.312903][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.412590][ T6820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 368.537300][ T25] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 368.760777][ T5131] usb 1-1: USB disconnect, device number 6 [ 368.801211][ T5131] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 369.053798][ T6838] syzkaller0: entered promiscuous mode [ 369.059530][ T6838] syzkaller0: entered allmulticast mode [ 369.140248][ T5506] udevd[5506]: setting mode of /dev/bus/usb/001/006 to 020664 failed: No such file or directory [ 369.245899][ T5506] udevd[5506]: setting owner of /dev/bus/usb/001/006 to uid=0, gid=0 failed: No such file or directory [ 372.397389][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 373.723430][ T6876] loop3: detected capacity change from 0 to 64 [ 373.917371][ T6876] BFS-fs: bfs_fill_super(): Impossible last inode number 66846713 > 513 on loop3 [ 374.330628][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 377.257786][ T6912] loop1: detected capacity change from 0 to 64 [ 377.310152][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 377.391544][ T6912] BFS-fs: bfs_fill_super(): Impossible last inode number 66846713 > 513 on loop1 [ 381.661435][ T6962] loop2: detected capacity change from 0 to 1024 [ 381.759613][ T3204] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.964652][ T58] hfsplus: b-tree write err: -5, ino 4 [ 381.987004][ T3204] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.052054][ T6964] loop4: detected capacity change from 0 to 1024 [ 382.248816][ T3204] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.477744][ T3204] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.863571][ T4403] hfsplus: b-tree write err: -5, ino 4 [ 383.020055][ T3204] bridge_slave_1: left allmulticast mode [ 383.034135][ T3204] bridge_slave_1: left promiscuous mode [ 383.040789][ T3204] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.142517][ T6976] loop2: detected capacity change from 0 to 512 [ 383.203274][ T3204] bridge_slave_0: left allmulticast mode [ 383.209192][ T3204] bridge_slave_0: left promiscuous mode [ 383.218462][ T3204] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.315793][ T6976] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 383.402441][ T6976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002] [ 383.411059][ T6976] System zones: 1-12 [ 383.483188][ T6976] EXT4-fs (loop2): orphan cleanup on readonly fs [ 383.497524][ T6976] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 361: padding at end of block bitmap is not set [ 383.558459][ T6976] EXT4-fs (loop2): Remounting filesystem read-only [ 383.596028][ T6976] EXT4-fs (loop2): 1 truncate cleaned up [ 383.602284][ T6976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 383.740258][ T6976] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block [ 383.758234][ T6985] xt_l2tp: v2 doesn't support IP mode [ 383.879673][ T6986] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block [ 383.953234][ T6976] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block [ 384.085498][ T6986] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block [ 384.189035][ T6976] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block [ 384.275404][ T6986] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block [ 384.326503][ T6976] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block [ 384.433787][ T6991] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block [ 384.830170][ T6986] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block [ 384.963251][ T6986] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block [ 385.008231][ T3204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.143519][ T3204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.217549][ T6995] loop0: detected capacity change from 0 to 512 [ 385.232395][ T5068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 385.236117][ T3204] bond0 (unregistering): Released all slaves [ 385.350733][ T5073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.420827][ T5073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.429485][ T6995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.442902][ T6995] ext4 filesystem being mounted at /root/syzkaller-testdir668469544/syzkaller.cWesni/139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.460507][ T5073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.495433][ T5073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.509829][ T5073] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 385.524700][ T5073] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.657691][ T6995] EXT4-fs error (device loop0): ext4_do_update_inode:5082: inode #2: comm syz-executor.0: corrupted inode contents [ 385.716031][ T6995] EXT4-fs error (device loop0): ext4_dirty_inode:5942: inode #2: comm syz-executor.0: mark_inode_dirty error [ 385.781912][ T6995] EXT4-fs error (device loop0): ext4_do_update_inode:5082: inode #2: comm syz-executor.0: corrupted inode contents [ 385.896978][ T6995] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz-executor.0: mark_inode_dirty error [ 386.425251][ T5087] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.568090][ T3204] hsr_slave_0: left promiscuous mode [ 386.598299][ T3204] hsr_slave_1: left promiscuous mode [ 386.607604][ T3204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.620817][ T3204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.649986][ T3204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.658167][ T3204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.681177][ T3204] veth1_macvtap: left promiscuous mode [ 386.687600][ T3204] veth0_macvtap: left promiscuous mode [ 386.693751][ T3204] veth1_vlan: left promiscuous mode [ 386.699416][ T3204] veth0_vlan: left promiscuous mode [ 387.152572][ T7017] xt_l2tp: v2 doesn't support IP mode [ 387.612347][ T50] Bluetooth: hci1: command tx timeout [ 387.861202][ T7026] serio: Serial port ptm0 [ 388.739504][ T7037] loop0: detected capacity change from 0 to 512 [ 388.941635][ T7037] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 388.995807][ T7037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002] [ 389.092371][ T7037] System zones: 1-12 [ 389.099695][ T7037] EXT4-fs (loop0): orphan cleanup on readonly fs [ 389.161647][ T7037] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 361: padding at end of block bitmap is not set [ 389.195706][ T3204] team0 (unregistering): Port device team_slave_1 removed [ 389.268180][ T7037] EXT4-fs (loop0): Remounting filesystem read-only [ 389.306491][ T3204] team0 (unregistering): Port device team_slave_0 removed [ 389.318057][ T7037] EXT4-fs (loop0): 1 truncate cleaned up [ 389.324314][ T7037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 389.407876][ T7046] dccp_close: ABORT with 107 bytes unread [ 389.528304][ T7037] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 389.586176][ T7037] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 389.702408][ T5073] Bluetooth: hci1: command tx timeout [ 389.797407][ T7008] syzkaller0: entered promiscuous mode [ 389.803324][ T7008] syzkaller0: entered allmulticast mode [ 389.852651][ T7048] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 389.877696][ T5073] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 389.898891][ T7037] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 389.910750][ T5073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 389.927498][ T5073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 389.953601][ T5073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.969661][ T5073] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 389.977694][ T7048] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 390.022400][ T5073] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 390.253345][ T7048] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 390.311760][ T7037] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 390.469223][ T7037] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 390.548606][ T7037] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 390.642083][ T7048] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 390.675812][ T7055] loop2: detected capacity change from 0 to 512 [ 391.062191][ T7055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.076260][ T7055] ext4 filesystem being mounted at /root/syzkaller-testdir1511630095/syzkaller.Ks0epq/151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.189674][ T5087] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 391.332678][ T7055] EXT4-fs error (device loop2): ext4_do_update_inode:5082: inode #2: comm syz-executor.2: corrupted inode contents [ 391.340967][ T6996] chnl_net:caif_netlink_parms(): no params data found [ 391.378255][ T7055] EXT4-fs error (device loop2): ext4_dirty_inode:5942: inode #2: comm syz-executor.2: mark_inode_dirty error [ 391.428202][ T7055] EXT4-fs error (device loop2): ext4_do_update_inode:5082: inode #2: comm syz-executor.2: corrupted inode contents [ 391.452353][ T7055] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 391.778713][ T7071] xt_l2tp: v2 doesn't support IP mode [ 391.781391][ T50] Bluetooth: hci1: command tx timeout [ 391.981771][ T5068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.252426][ T7047] chnl_net:caif_netlink_parms(): no params data found [ 392.252891][ T50] Bluetooth: hci2: command tx timeout [ 392.366826][ T7077] serio: Serial port ptm0 [ 392.468632][ T7075] af_packet: tpacket_rcv: packet too big, clamped from 16692 to 3952. macoff=96 [ 393.024658][ T7086] loop2: detected capacity change from 0 to 1024 [ 393.506753][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.516085][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.524117][ T6996] bridge_slave_0: entered allmulticast mode [ 393.533458][ T6996] bridge_slave_0: entered promiscuous mode [ 393.602842][ T4403] hfsplus: b-tree write err: -5, ino 4 [ 393.669317][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.682873][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.690734][ T6996] bridge_slave_1: entered allmulticast mode [ 393.699980][ T6996] bridge_slave_1: entered promiscuous mode [ 393.855774][ T50] Bluetooth: hci1: command tx timeout [ 394.212512][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.332197][ T50] Bluetooth: hci2: command tx timeout [ 394.350010][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.359243][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.367239][ T7047] bridge_slave_0: entered allmulticast mode [ 394.376546][ T7047] bridge_slave_0: entered promiscuous mode [ 394.411068][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.714985][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.722933][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.730832][ T7047] bridge_slave_1: entered allmulticast mode [ 394.740260][ T7047] bridge_slave_1: entered promiscuous mode [ 394.781890][ T6996] team0: Port device team_slave_0 added [ 394.844279][ T6996] team0: Port device team_slave_1 added [ 395.091202][ T7109] loop0: detected capacity change from 0 to 512 [ 395.253777][ T7109] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 395.330519][ T7109] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002] [ 395.370758][ T7109] System zones: 1-12 [ 395.412428][ T7109] EXT4-fs (loop0): orphan cleanup on readonly fs [ 395.455047][ T7047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.470657][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.478698][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.505647][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.551613][ T7109] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 361: padding at end of block bitmap is not set [ 395.645401][ T7109] EXT4-fs (loop0): Remounting filesystem read-only [ 395.655326][ T7109] EXT4-fs (loop0): 1 truncate cleaned up [ 395.661505][ T7109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 395.755862][ T7047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.786403][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.794077][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.821017][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.960652][ T7109] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 395.983931][ T7116] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 396.060967][ T7117] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 396.097595][ T7047] team0: Port device team_slave_0 added [ 396.183184][ T7109] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 396.220589][ T7047] team0: Port device team_slave_1 added [ 396.262267][ T7116] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 396.412529][ T50] Bluetooth: hci2: command tx timeout [ 396.471627][ T7122] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 396.522941][ T7109] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 396.546742][ T7109] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 396.584256][ T6996] hsr_slave_0: entered promiscuous mode [ 396.594855][ T7109] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 396.612204][ T7123] xt_l2tp: v2 doesn't support IP mode [ 396.625145][ T7109] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 396.649902][ T6996] hsr_slave_1: entered promiscuous mode [ 396.679880][ T6996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.687787][ T6996] Cannot create hsr debugfs directory [ 396.716864][ T7047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.724457][ T7047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.754630][ T7047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.010992][ T7047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.018485][ T7047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.045109][ T7047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.137125][ T5087] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 397.675503][ T7133] loop3: detected capacity change from 0 to 64 [ 397.732623][ T7047] hsr_slave_0: entered promiscuous mode [ 397.778808][ T7047] hsr_slave_1: entered promiscuous mode [ 397.797290][ T7047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.805274][ T7047] Cannot create hsr debugfs directory [ 397.866831][ T3204] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.128187][ T3204] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.492974][ T50] Bluetooth: hci2: command tx timeout [ 398.567106][ T3204] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.927685][ T3204] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.803583][ T7158] loop0: detected capacity change from 0 to 512 [ 399.910633][ T7158] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 399.988337][ T7158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002] [ 400.039788][ T3204] bridge_slave_1: left allmulticast mode [ 400.046050][ T3204] bridge_slave_1: left promiscuous mode [ 400.052850][ T3204] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.073061][ T7158] System zones: 1-12 [ 400.080116][ T7158] EXT4-fs (loop0): orphan cleanup on readonly fs [ 400.196616][ T3204] bridge_slave_0: left allmulticast mode [ 400.204166][ T3204] bridge_slave_0: left promiscuous mode [ 400.210779][ T3204] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.243017][ T7158] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 361: padding at end of block bitmap is not set [ 400.337578][ T7158] EXT4-fs (loop0): Remounting filesystem read-only [ 400.362370][ T7158] EXT4-fs (loop0): 1 truncate cleaned up [ 400.368301][ T7158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 400.495023][ T7158] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 400.552182][ T7167] loop2: detected capacity change from 0 to 64 [ 400.592023][ T7158] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 400.672689][ T7168] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 400.737479][ T7169] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 400.826269][ T7158] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 400.862120][ T7168] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 400.906908][ T29] audit: type=1326 audit(1718168515.509:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7da447cea9 code=0x0 [ 400.949368][ T7168] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 400.973683][ T7158] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 401.003449][ T7158] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 401.041090][ T7158] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 401.393567][ T5087] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 401.596488][ T3204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.714250][ T3204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.829524][ T3204] bond0 (unregistering): Released all slaves [ 403.004767][ T3204] hsr_slave_0: left promiscuous mode [ 403.043641][ T3204] hsr_slave_1: left promiscuous mode [ 403.086285][ T3204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.094270][ T3204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.148836][ T3204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.156767][ T3204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.242412][ T3204] veth1_macvtap: left promiscuous mode [ 403.248663][ T3204] veth0_macvtap: left promiscuous mode [ 403.255588][ T3204] veth1_vlan: left promiscuous mode [ 403.261173][ T3204] veth0_vlan: left promiscuous mode [ 403.466927][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.474160][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.584312][ T780] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 403.992248][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.007794][ T780] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 404.024337][ T780] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.034593][ T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.090764][ T780] usb 3-1: config 0 descriptor?? [ 404.436800][ T7208] loop0: detected capacity change from 0 to 64 [ 404.687415][ T7210] loop3: detected capacity change from 0 to 512 [ 404.699419][ T780] plantronics 0003:047F:FFFF.0002: bogus close delimiter [ 404.707125][ T780] plantronics 0003:047F:FFFF.0002: item 0 4 2 10 parsing failed [ 404.758106][ T780] plantronics 0003:047F:FFFF.0002: parse failed [ 404.765563][ T780] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 404.791834][ T7210] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 404.864368][ T7210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002] [ 404.874301][ T7210] System zones: 1-12 [ 404.882709][ T3204] team0 (unregistering): Port device team_slave_1 removed [ 404.889967][ T7210] EXT4-fs (loop3): orphan cleanup on readonly fs [ 404.975744][ T7210] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 361: padding at end of block bitmap is not set [ 405.007008][ T3204] team0 (unregistering): Port device team_slave_0 removed [ 405.028009][ T5130] usb 3-1: USB disconnect, device number 4 [ 405.055718][ T7210] EXT4-fs (loop3): Remounting filesystem read-only [ 405.072387][ T7210] EXT4-fs (loop3): 1 truncate cleaned up [ 405.078303][ T7210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 405.139659][ T7210] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block [ 405.191666][ T29] audit: type=1326 audit(1718168519.769:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7212 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febd307cea9 code=0x0 [ 405.223025][ T7210] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block [ 405.311664][ T7210] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block [ 405.359653][ T7210] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block [ 405.438614][ T7210] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block [ 405.457486][ T7210] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block [ 405.474452][ T7210] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block [ 405.599680][ T7215] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block [ 405.628852][ T6996] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 405.639186][ T7210] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block [ 405.661765][ T7210] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block [ 405.734792][ T6996] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 405.831886][ T6996] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 405.983717][ T5074] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 406.211846][ T6996] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 406.669057][ T7223] loop3: detected capacity change from 0 to 256 [ 406.722276][ T7223] exfat: Deprecated parameter 'utf8' [ 406.728167][ T7223] exfat: Deprecated parameter 'namecase' [ 406.734802][ T7223] exfat: Deprecated parameter 'namecase' [ 406.740748][ T7223] exfat: Deprecated parameter 'utf8' [ 406.765876][ T7047] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 406.951753][ T7223] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 406.954278][ T7047] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 407.094711][ T7047] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 407.231708][ T7047] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 407.994705][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.245274][ T6996] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.361032][ T4673] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.369218][ T4673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.556996][ T4673] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.564863][ T4673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.086560][ T6996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.231151][ T7047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.487561][ T7255] loop0: detected capacity change from 0 to 64 [ 409.579593][ T7047] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.713556][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.721406][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.895666][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.903506][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.168279][ T7273] loop2: detected capacity change from 0 to 64 [ 411.996706][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.340602][ T7281] loop2: detected capacity change from 0 to 512 [ 412.685889][ T7281] EXT4-fs (loop2): 1 truncate cleaned up [ 412.692140][ T7281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.866867][ T6996] veth0_vlan: entered promiscuous mode [ 413.033566][ T6996] veth1_vlan: entered promiscuous mode [ 413.077302][ T7047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.193429][ T5068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.420625][ T6996] veth0_macvtap: entered promiscuous mode [ 413.519888][ T6996] veth1_macvtap: entered promiscuous mode [ 413.840130][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.854262][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.866570][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.880636][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.891444][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.904858][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.920102][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.238519][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.250201][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.263726][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.275663][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.286016][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.297872][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.312898][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.389837][ T7297] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 414.519803][ T6996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.533890][ T6996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.544970][ T6996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.554271][ T7298] 9pnet: p9_errstr2errno: server reported unknown error ść [ 414.562227][ T6996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.913546][ T7313] loop3: detected capacity change from 0 to 64 [ 416.612195][ T7047] veth0_vlan: entered promiscuous mode [ 416.777950][ T7321] loop2: detected capacity change from 0 to 1024 [ 416.796825][ T7047] veth1_vlan: entered promiscuous mode [ 417.173230][ T7047] veth0_macvtap: entered promiscuous mode [ 417.289469][ T7047] veth1_macvtap: entered promiscuous mode [ 417.473118][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.484362][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.494542][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.505358][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.515829][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.526604][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.540534][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.552750][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.567889][ T7047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.972978][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.983933][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.994435][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.005227][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.016201][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.027303][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.037721][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.051708][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.067696][ T7047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.324598][ T7047] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.334378][ T7047] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.343834][ T7047] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.357691][ T7047] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.850539][ T7343] 9pnet: p9_errstr2errno: server reported unknown error ść [ 419.571760][ T7358] kernel profiling enabled (shift: 25) [ 420.214102][ T7367] loop3: detected capacity change from 0 to 1024 [ 420.233744][ T7369] mmap: syz-executor.2 (7369) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 421.861297][ C1] ===================================================== [ 421.868660][ C1] BUG: KMSAN: uninit-value in profile_tick+0x1ae/0x1b0 [ 421.877309][ C1] profile_tick+0x1ae/0x1b0 [ 421.882038][ C1] tick_nohz_handler+0x588/0x690 [ 421.887200][ C1] __hrtimer_run_queues+0x56f/0xe40 [ 421.892609][ C1] hrtimer_interrupt+0x3ab/0x1490 [ 421.898149][ C1] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 421.904542][ C1] sysvec_apic_timer_interrupt+0x7e/0x90 [ 421.910480][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 421.916713][ C1] _raw_spin_unlock_irq+0x25/0x50 [ 421.921989][ C1] copy_sighand+0x17d/0x380 [ 421.926841][ C1] copy_process+0x25bb/0x5b90 [ 421.931741][ C1] kernel_clone+0x401/0x1040 [ 421.936623][ C1] user_mode_thread+0xdf/0x110 [ 421.941789][ C1] call_usermodehelper_exec_work+0x114/0x310 [ 421.948003][ C1] process_scheduled_works+0xa81/0x1bd0 [ 421.953832][ C1] worker_thread+0xea5/0x1560 [ 421.958778][ C1] kthread+0x3e2/0x540 [ 421.963043][ C1] ret_from_fork+0x6d/0x90 [ 421.967686][ C1] ret_from_fork_asm+0x1a/0x30 [ 421.972785][ C1] [ 421.975204][ C1] Local variable task_event.i created at: [ 421.981066][ C1] perf_event_fork+0x3a/0x200 [ 421.985948][ C1] copy_process+0x5979/0x5b90 [ 421.990939][ C1] [ 421.993411][ C1] CPU: 1 PID: 1046 Comm: kworker/u8:6 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 422.003490][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 422.013888][ C1] Workqueue: events_unbound call_usermodehelper_exec_work [ 422.021229][ C1] ===================================================== [ 422.028350][ C1] Disabling lock debugging due to kernel taint [ 422.034609][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 422.041371][ C1] CPU: 1 PID: 1046 Comm: kworker/u8:6 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 422.052858][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 422.063319][ C1] Workqueue: events_unbound call_usermodehelper_exec_work [ 422.070763][ C1] Call Trace: [ 422.074198][ C1] [ 422.077188][ C1] dump_stack_lvl+0x216/0x2d0 [ 422.082225][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.088229][ C1] dump_stack+0x1e/0x30 [ 422.092581][ C1] panic+0x4e2/0xcd0 [ 422.096697][ C1] ? kmsan_get_metadata+0xf1/0x1d0 [ 422.102104][ C1] kmsan_report+0x2d5/0x2e0 [ 422.106876][ C1] ? update_load_avg+0x1a35/0x29b0 [ 422.112179][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 422.117585][ C1] ? __msan_warning+0x95/0x120 [ 422.122635][ C1] ? profile_tick+0x1ae/0x1b0 [ 422.127515][ C1] ? tick_nohz_handler+0x588/0x690 [ 422.132832][ C1] ? __hrtimer_run_queues+0x56f/0xe40 [ 422.138421][ C1] ? hrtimer_interrupt+0x3ab/0x1490 [ 422.143824][ C1] ? __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 422.150124][ C1] ? sysvec_apic_timer_interrupt+0x7e/0x90 [ 422.156138][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 422.162622][ C1] ? _raw_spin_unlock_irq+0x25/0x50 [ 422.168161][ C1] ? copy_sighand+0x17d/0x380 [ 422.173030][ C1] ? copy_process+0x25bb/0x5b90 [ 422.178063][ C1] ? kernel_clone+0x401/0x1040 [ 422.183017][ C1] ? user_mode_thread+0xdf/0x110 [ 422.188097][ C1] ? call_usermodehelper_exec_work+0x114/0x310 [ 422.194440][ C1] ? process_scheduled_works+0xa81/0x1bd0 [ 422.200378][ C1] ? worker_thread+0xea5/0x1560 [ 422.205784][ C1] ? kthread+0x3e2/0x540 [ 422.210199][ C1] ? ret_from_fork+0x6d/0x90 [ 422.214954][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 422.220091][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.226073][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 422.231429][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.237618][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 422.243315][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.249466][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 422.254978][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.261073][ C1] __msan_warning+0x95/0x120 [ 422.266065][ C1] profile_tick+0x1ae/0x1b0 [ 422.270833][ C1] ? copy_sighand+0x17d/0x380 [ 422.275743][ C1] tick_nohz_handler+0x588/0x690 [ 422.281344][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 422.287153][ C1] __hrtimer_run_queues+0x56f/0xe40 [ 422.292771][ C1] hrtimer_interrupt+0x3ab/0x1490 [ 422.298039][ C1] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 422.303779][ C1] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 422.309628][ C1] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 422.315910][ C1] sysvec_apic_timer_interrupt+0x7e/0x90 [ 422.321776][ C1] [ 422.324837][ C1] [ 422.327914][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 422.334329][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x50 [ 422.340433][ C1] Code: 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 53 48 89 fb e8 5f 48 bf f2 48 89 df e8 67 3a bf f2 c6 00 00 c6 03 00 fb be 04 00 00 00 <48> c7 c7 08 5d 0a 00 e8 7f 3c bf f2 65 ff 0d 30 95 85 70 74 07 5b [ 422.360254][ C1] RSP: 0018:ffff88810a367880 EFLAGS: 00000282 [ 422.366631][ C1] RAX: ffff888107788840 RBX: ffff888107f88840 RCX: 0000000107b88840 [ 422.374755][ C1] RDX: ffff888107b88840 RSI: 0000000000000004 RDI: ffff888107f88840 [ 422.382875][ C1] RBP: ffff88810a367888 R08: ffffea000000000f R09: 0000000000000800 [ 422.391004][ C1] R10: ffff888118b431a0 R11: ffff888107788860 R12: ffff8881193431a0 [ 422.399430][ C1] R13: ffff888108988b40 R14: ffff888107f88840 R15: 0000000000800100 [ 422.407712][ C1] copy_sighand+0x17d/0x380 [ 422.412517][ C1] copy_process+0x25bb/0x5b90 [ 422.417407][ C1] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 422.423913][ C1] kernel_clone+0x401/0x1040 [ 422.429129][ C1] ? stack_depot_save_flags+0x2c/0x6e0 [ 422.434763][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 422.440129][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 422.445494][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 422.452298][ C1] user_mode_thread+0xdf/0x110 [ 422.457288][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 422.464102][ C1] call_usermodehelper_exec_work+0x114/0x310 [ 422.470298][ C1] ? __pfx_call_usermodehelper_exec_work+0x10/0x10 [ 422.477055][ C1] process_scheduled_works+0xa81/0x1bd0 [ 422.482836][ C1] worker_thread+0xea5/0x1560 [ 422.487689][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.493684][ C1] kthread+0x3e2/0x540 [ 422.497927][ C1] ? __pfx_worker_thread+0x10/0x10 [ 422.503209][ C1] ? __pfx_kthread+0x10/0x10 [ 422.507971][ C1] ret_from_fork+0x6d/0x90 [ 422.512626][ C1] ? __pfx_kthread+0x10/0x10 [ 422.517384][ C1] ret_from_fork_asm+0x1a/0x30 [ 422.522346][ C1] [ 422.525808][ C1] Kernel Offset: disabled [ 422.530295][ C1] Rebooting in 86400 seconds..