last executing test programs: 6.341905054s ago: executing program 4 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, r1, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x50}}, 0x0) 6.245824565s ago: executing program 4 (id=498): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'erspan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@bridge_delneigh={0x2c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80}, [@NDA_LLADDR={0xa, 0x2, @dev}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 3.415270766s ago: executing program 4 (id=526): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="31b2047482e4", @remote, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "62481e", 0x0, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x3e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, 0x0) 3.373030796s ago: executing program 4 (id=528): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.263765537s ago: executing program 4 (id=533): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x18, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 2.220621891s ago: executing program 4 (id=541): mknodat$null(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x80000000000004) 1.748012233s ago: executing program 3 (id=554): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 1.703784043s ago: executing program 2 (id=555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000030101040000000000000000020000002c0002800500010088"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.565303273s ago: executing program 0 (id=557): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000600)={0x3d51c, 0xfffffff8, 0x2, 0xdd9, 0x1b, "0012412d08d500001e2002990a008000"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) 1.565221324s ago: executing program 2 (id=558): r0 = epoll_create1(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)) close_range(r0, 0xffffffffffffffff, 0x0) 1.565159453s ago: executing program 3 (id=559): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/123, 0x3d}], 0x1) 1.515554574s ago: executing program 0 (id=561): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0xa00010, &(0x7f00000010c0)=ANY=[], 0x1, 0xc43, &(0x7f00000001c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001dc0)=""/4113, 0x523) 1.436087294s ago: executing program 2 (id=563): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0x50002, &(0x7f0000000040), 0x1, 0x50a, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, 0x0, 0x0, 0x5415, 0x0, 0x0) 1.333327645s ago: executing program 0 (id=565): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303120007006000000002000020d3"]) 1.208295005s ago: executing program 2 (id=566): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f00000000c0)=ANY=[], 0x21, 0x1b2, &(0x7f0000000a40)="$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") connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x810043, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, 0x0, 0x0) 1.084156286s ago: executing program 0 (id=567): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x208f3d63}}, 0x20, 0x0, 0x0) 995.545676ms ago: executing program 2 (id=568): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0xfffffffb) 616.166237ms ago: executing program 1 (id=570): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xe, @none, 0xd}, 0xe) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20) 574.122258ms ago: executing program 1 (id=571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20020480) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 554.519708ms ago: executing program 3 (id=572): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2106c0, 0x0) unshare(0x400) splice(r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) 412.196479ms ago: executing program 3 (id=573): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 411.983829ms ago: executing program 1 (id=574): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x0}}]}, 0x2c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x6, 0x0, {0x0, 0x0, 0x1, 0x0, '\x00'}}, 0x2a) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 331.950309ms ago: executing program 3 (id=575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000340)=0xbf, 0x4) 273.398769ms ago: executing program 1 (id=576): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) connect$vsock_stream(r0, &(0x7f0000000540)={0x28, 0x0, 0x2711, @local}, 0x10) 195.90798ms ago: executing program 3 (id=577): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) pipe2$9p(0x0, 0x0) r2 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6ee, &(0x7f0000032440)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) r4 = openat$incfs(r2, &(0x7f0000000200)='.pending_reads\x00', 0x101042, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1}, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @remote, @empty}, &(0x7f0000000480)=0xc) r7 = syz_open_dev$vcsu(&(0x7f00000007c0), 0x1, 0x2000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x2b, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x1e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x5, 0xb, 0x5, 0x8, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2ac8, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0xae, 0x9d, &(0x7f0000000380)=""/157, 0x41000, 0x7, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x3, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r7, r8, 0xffffffffffffffff, 0xffffffffffffffff, r9], &(0x7f0000000a80), 0x10, 0x45, @void, @value}, 0x94) sendto$packet(r3, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 195.787779ms ago: executing program 0 (id=578): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) 170.67709ms ago: executing program 1 (id=579): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000000000000100000d"], &(0x7f0000000f40)=""/4096, 0x2e, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) 151.957019ms ago: executing program 0 (id=580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) msgget(0x0, 0x40) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x8882, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x101100, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) semtimedop(0x0, &(0x7f0000005740)=[{}, {0x3, 0x8}], 0x1f4, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r0) r2 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c092, &(0x7f0000000080)={[{@data_err_abort}]}, 0x8, 0x513, &(0x7f0000000c00)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) 153.23µs ago: executing program 1 (id=581): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) 0s ago: executing program 2 (id=582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. syzkaller login: [ 37.094877][ T4016] cgroup: Unknown subsys name 'net' [ 37.401074][ T4016] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 37.730733][ T4016] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 39.123347][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 39.166131][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 39.203754][ T4035] chnl_net:caif_netlink_parms(): no params data found [ 39.245312][ T4042] chnl_net:caif_netlink_parms(): no params data found [ 39.296292][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.297941][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.300244][ T4032] device bridge_slave_0 entered promiscuous mode [ 39.311191][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.312735][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.315715][ T4027] device bridge_slave_0 entered promiscuous mode [ 39.337653][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.339272][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.341275][ T4032] device bridge_slave_1 entered promiscuous mode [ 39.343793][ T4028] chnl_net:caif_netlink_parms(): no params data found [ 39.352148][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.353661][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.356142][ T4027] device bridge_slave_1 entered promiscuous mode [ 39.362458][ T4042] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.364006][ T4042] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.366131][ T4042] device bridge_slave_0 entered promiscuous mode [ 39.387664][ T4042] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.389312][ T4042] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.391563][ T4042] device bridge_slave_1 entered promiscuous mode [ 39.411536][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.421742][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.442400][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.445954][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.448018][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.449608][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.451755][ T4035] device bridge_slave_0 entered promiscuous mode [ 39.468558][ T4042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.475201][ T4042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.489135][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.490747][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.493011][ T4035] device bridge_slave_1 entered promiscuous mode [ 39.523732][ T4032] team0: Port device team_slave_0 added [ 39.528027][ T4027] team0: Port device team_slave_0 added [ 39.530231][ T4032] team0: Port device team_slave_1 added [ 39.532596][ T4027] team0: Port device team_slave_1 added [ 39.576911][ T4042] team0: Port device team_slave_0 added [ 39.585281][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.586815][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.589020][ T4028] device bridge_slave_0 entered promiscuous mode [ 39.597539][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.598970][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.605265][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.610622][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.613030][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.614656][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.620058][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.624539][ T4042] team0: Port device team_slave_1 added [ 39.634691][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.636172][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.638256][ T4028] device bridge_slave_1 entered promiscuous mode [ 39.640545][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.642108][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.648129][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.652279][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.676824][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.678484][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.684013][ T4042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.699254][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.700758][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.712536][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.723282][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.724826][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.730237][ T4042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.751441][ T4035] team0: Port device team_slave_0 added [ 39.757235][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.761903][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.777979][ T4035] team0: Port device team_slave_1 added [ 39.876714][ T4032] device hsr_slave_0 entered promiscuous mode [ 39.924740][ T4032] device hsr_slave_1 entered promiscuous mode [ 40.006088][ T4027] device hsr_slave_0 entered promiscuous mode [ 40.044613][ T4027] device hsr_slave_1 entered promiscuous mode [ 40.104590][ T4027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.106505][ T4027] Cannot create hsr debugfs directory [ 40.156390][ T4042] device hsr_slave_0 entered promiscuous mode [ 40.204659][ T4042] device hsr_slave_1 entered promiscuous mode [ 40.254313][ T4042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.256018][ T4042] Cannot create hsr debugfs directory [ 40.259192][ T4028] team0: Port device team_slave_0 added [ 40.262376][ T4028] team0: Port device team_slave_1 added [ 40.295270][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.296900][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.302341][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.329915][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.331456][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.337348][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.385948][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.387431][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.392777][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.397225][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.398781][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.404258][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.516219][ T4035] device hsr_slave_0 entered promiscuous mode [ 40.554607][ T4035] device hsr_slave_1 entered promiscuous mode [ 40.604328][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.606076][ T4035] Cannot create hsr debugfs directory [ 40.706227][ T4028] device hsr_slave_0 entered promiscuous mode [ 40.754663][ T4028] device hsr_slave_1 entered promiscuous mode [ 40.794300][ T4028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.796193][ T4028] Cannot create hsr debugfs directory [ 40.901829][ T4042] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.904830][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 40.906564][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 40.908042][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 40.909472][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 40.984464][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 40.998511][ T4042] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.038158][ T4042] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.077551][ T4042] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.181916][ T4027] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.200670][ T4027] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.236474][ T4027] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.290701][ T4027] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.372008][ T4032] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.434329][ T4032] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.482558][ T4032] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.526268][ T4032] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.609301][ T4035] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.653678][ T4035] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.721334][ T4028] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.768699][ T4028] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.821614][ T4028] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.867445][ T4035] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.912322][ T4035] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.959784][ T4042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.966945][ T4028] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 42.040669][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.055102][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.058093][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.093850][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.096398][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.099808][ T4042] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.115448][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.135660][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.138025][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.140672][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.142274][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.147310][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.149614][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.151827][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.153192][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.158232][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.161886][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.164265][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.166719][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.168223][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.171097][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.186395][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.201377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.203920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.215154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.217287][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.218796][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.234236][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.236669][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.239152][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.247558][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.249780][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.252287][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.256979][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.266726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.281837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.285292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.287628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.289853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.303391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.306574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.309098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.313995][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.318385][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.322235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.325150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.339270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.341462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.350991][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.357093][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.363018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.366399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.377898][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.385890][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.390018][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.392354][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.398259][ T1605] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.399844][ T1605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.401777][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.422021][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.425821][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.428088][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.430299][ T261] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.431852][ T261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.433879][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.438992][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.446300][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.453774][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.466388][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.468952][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.471613][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.491141][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.493361][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.499466][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.501614][ T261] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.503205][ T261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.506754][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.509231][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.511642][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.521240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.523477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.526451][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.528144][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.552032][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.557869][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.560037][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.562305][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.575564][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.578501][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.585138][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.587972][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.605179][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.607428][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.609451][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.610984][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.613002][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.616077][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.618111][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.619590][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.621384][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.623133][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.630874][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.644579][ T4042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.646706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.649264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.651028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.663851][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.669207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.671767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.676019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.678219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.680657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.683001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.687173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.690517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.692714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.717226][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.724506][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.726760][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.728918][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.731343][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.743601][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.753863][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.756308][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.758870][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.772084][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.776141][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.783107][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.787186][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.805595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.807954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.828149][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.831553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.833910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.871398][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.873520][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.876761][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.879481][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.885772][ T4042] device veth0_vlan entered promiscuous mode [ 42.903087][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.905865][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.909415][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.911387][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.920015][ T4042] device veth1_vlan entered promiscuous mode [ 42.927107][ T4027] device veth0_vlan entered promiscuous mode [ 42.945795][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.948066][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.950157][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.951883][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.960058][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.977108][ T4027] device veth1_vlan entered promiscuous mode [ 42.985609][ T4077] Bluetooth: hci0: command 0x041b tx timeout [ 42.987091][ T4077] Bluetooth: hci1: command 0x041b tx timeout [ 42.988521][ T4077] Bluetooth: hci3: command 0x041b tx timeout [ 42.989958][ T4077] Bluetooth: hci2: command 0x041b tx timeout [ 42.993599][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.996761][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.998459][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.000228][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.002461][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.019914][ T4042] device veth0_macvtap entered promiscuous mode [ 43.025460][ T4042] device veth1_macvtap entered promiscuous mode [ 43.033970][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.057974][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.060173][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.062366][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.064804][ T4077] Bluetooth: hci4: command 0x041b tx timeout [ 43.069121][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.070902][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.091474][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.097949][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.100430][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.102721][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.106143][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.110977][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.119219][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.126693][ T4027] device veth0_macvtap entered promiscuous mode [ 43.129922][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.132198][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.137167][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.140385][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.142816][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.167965][ T4042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.169839][ T4042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.171692][ T4042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.173412][ T4042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.183378][ T4027] device veth1_macvtap entered promiscuous mode [ 43.199541][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.201687][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.203942][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.207571][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.209766][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.212383][ T4032] device veth0_vlan entered promiscuous mode [ 43.233998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.238272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.241110][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.243547][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.248500][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.250253][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.252717][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.270848][ T4032] device veth1_vlan entered promiscuous mode [ 43.291025][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.293159][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.297207][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.309963][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.312198][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.314473][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.316851][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.319138][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.321596][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.339715][ T4035] device veth0_vlan entered promiscuous mode [ 43.351261][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.353787][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.364640][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.366820][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.371215][ T4027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.373050][ T4027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.375636][ T4027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.377487][ T4027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.411070][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.413366][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.416287][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.418390][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.430753][ T4028] device veth0_vlan entered promiscuous mode [ 43.444242][ T4035] device veth1_vlan entered promiscuous mode [ 43.451985][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.453819][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.479586][ T4028] device veth1_vlan entered promiscuous mode [ 43.498749][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.500942][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.503123][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.508236][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.510430][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.532145][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.533962][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.552987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.557730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.561060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.578138][ T4035] device veth0_macvtap entered promiscuous mode [ 43.582756][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.589116][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.591727][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.596433][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.600107][ T4032] device veth0_macvtap entered promiscuous mode [ 43.615448][ T4035] device veth1_macvtap entered promiscuous mode [ 43.645893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.648095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.650232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.652442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.659232][ T4028] device veth0_macvtap entered promiscuous mode [ 43.664025][ T4032] device veth1_macvtap entered promiscuous mode [ 43.702054][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.703767][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.725231][ T4028] device veth1_macvtap entered promiscuous mode [ 43.734041][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.737236][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.739451][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.741613][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.787011][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.789254][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.791227][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.793335][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.807148][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.810574][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.812824][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.816009][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.818128][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.820080][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.822252][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.829126][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.931314][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.933664][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.936610][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.938965][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.943795][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.946982][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.948966][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.951146][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.966044][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.969857][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.971961][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.973934][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.982695][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.985626][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.987919][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.990365][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.992710][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.003485][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.009461][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.011962][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.022651][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.033039][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.043092][ T4112] loop2: detected capacity change from 0 to 2048 [ 44.056286][ T4109] device vlan2 entered promiscuous mode [ 44.057479][ T4109] device macvtap0 entered promiscuous mode [ 44.081169][ T4032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.083109][ T4032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.086763][ T4032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.088626][ T4032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.106135][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.112157][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.131671][ T4112] NILFS (loop2): unrecognized mount option "" [ 44.144904][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.147178][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.149389][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.151500][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.169926][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.190922][ T4111] loop1: detected capacity change from 0 to 40427 [ 44.202896][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.211518][ T261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.225998][ T4035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.229281][ T4111] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 44.230820][ T4111] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 44.236678][ T4035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.238589][ T4035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.240584][ T4035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.243076][ T4111] F2FS-fs (loop1): invalid crc value [ 44.253584][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.258278][ T4117] netlink: 364 bytes leftover after parsing attributes in process `syz.2.7'. [ 44.259620][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.262280][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.273050][ T4111] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.275173][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.277280][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.279323][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.281366][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.303226][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.322614][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.330440][ T4111] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 44.332161][ T4111] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 44.369065][ T4111] F2FS-fs (loop1): Corrupted max_depth of 3: 8449 [ 44.384078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.386882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.401183][ T4028] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.403126][ T4028] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.406262][ T4028] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.408023][ T4028] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.457412][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.459368][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.461862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.635794][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.642249][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.659003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.688991][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.690646][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.693287][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.757531][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.759203][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.761669][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.808101][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.809853][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.812350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.890878][ T4119] loop2: detected capacity change from 0 to 32768 [ 44.913799][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.916181][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.918551][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.967439][ T4119] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.8 (4119) [ 45.017446][ T4124] loop1: detected capacity change from 0 to 1024 [ 45.020360][ T4119] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 45.022558][ T4119] BTRFS info (device loop2): force clearing of disk cache [ 45.024015][ T4119] BTRFS info (device loop2): enabling disk space caching [ 45.028021][ T4119] BTRFS info (device loop2): turning on sync discard [ 45.029476][ T4119] BTRFS info (device loop2): disabling tree log [ 45.030838][ T4119] BTRFS info (device loop2): metadata ratio 5 [ 45.032117][ T4119] BTRFS info (device loop2): disk space caching is enabled [ 45.057690][ T4119] BTRFS info (device loop2): has skinny extents [ 45.064528][ T4077] Bluetooth: hci2: command 0x040f tx timeout [ 45.066083][ T4077] Bluetooth: hci3: command 0x040f tx timeout [ 45.067461][ T4077] Bluetooth: hci1: command 0x040f tx timeout [ 45.068810][ T4077] Bluetooth: hci0: command 0x040f tx timeout [ 45.080959][ T4124] hfsplus: Filesystem is marked locked, mounting read-only. [ 45.113241][ T4126] loop3: detected capacity change from 0 to 4096 [ 45.230335][ T4131] loop4: detected capacity change from 0 to 2048 [ 45.299085][ T4077] Bluetooth: hci4: command 0x040f tx timeout [ 45.333532][ T4119] BTRFS info (device loop2): enabling ssd optimizations [ 45.343010][ T4119] BTRFS info (device loop2): clearing free space tree [ 45.344859][ T4119] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 45.346891][ T4119] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 45.519633][ T4150] hfsplus: filesystem is marked locked, leaving read-only. [ 46.326350][ T4126] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 46.382593][ T4122] loop0: detected capacity change from 0 to 32768 [ 46.488187][ T4122] XFS (loop0): Mounting V5 Filesystem [ 46.510362][ T4131] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.5' resets device [ 46.516582][ T4131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 46.518545][ T4131] device bridge_slave_1 left promiscuous mode [ 46.520216][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.735894][ T4166] loop1: detected capacity change from 0 to 4096 [ 46.808337][ T4166] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 47.351162][ T4078] Bluetooth: hci0: command 0x0419 tx timeout [ 47.352197][ T4131] device bridge_slave_0 left promiscuous mode [ 47.352576][ T4078] Bluetooth: hci1: command 0x0419 tx timeout [ 47.354283][ T4166] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 47.355329][ T4078] Bluetooth: hci3: command 0x0419 tx timeout [ 47.358066][ T4078] Bluetooth: hci2: command 0x0419 tx timeout [ 47.359537][ T4077] Bluetooth: hci4: command 0x0419 tx timeout [ 47.359904][ T4166] ntfs3: loop1: Failed to load $MFT. [ 47.377010][ T4131] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.459815][ T4122] XFS (loop0): Ending clean mount [ 47.709771][ T4181] loop1: detected capacity change from 0 to 512 [ 47.723157][ T4181] EXT4-fs (loop1): Ignoring removed orlov option [ 47.766043][ T4032] XFS (loop0): Unmounting Filesystem [ 47.795539][ T4181] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.804789][ T4181] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.13: casefold flag without casefold feature [ 47.808143][ T4181] EXT4-fs (loop1): Remounting filesystem read-only [ 47.813718][ T4181] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.13: couldn't read orphan inode 15 (err -117) [ 47.840368][ T4181] EXT4-fs (loop1): Remounting filesystem read-only [ 47.847447][ T4181] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,quota,grpjquota=,inode_readahead_blks=0x0000000004000000,. Quota mode: writeback. [ 47.988049][ T4184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.051829][ T4184] Zero length message leads to an empty skb [ 48.082852][ T4188] 9pnet: Insufficient options for proto=fd [ 48.261610][ T4186] loop3: detected capacity change from 0 to 32768 [ 48.353974][ T4186] XFS (loop3): Mounting V5 Filesystem [ 48.398660][ T4186] XFS (loop3): Ending clean mount [ 48.461084][ T4190] loop1: detected capacity change from 0 to 32768 [ 48.468673][ T4035] XFS (loop3): Unmounting Filesystem [ 48.556037][ T4190] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.16 (4190) [ 48.601883][ T4204] loop2: detected capacity change from 0 to 1024 [ 48.607564][ T4190] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 48.609700][ T4190] BTRFS info (device loop1): force clearing of disk cache [ 48.611193][ T4190] BTRFS info (device loop1): enabling disk space caching [ 48.612715][ T4190] BTRFS info (device loop1): turning on sync discard [ 48.614107][ T4190] BTRFS info (device loop1): disabling tree log [ 48.622347][ T4190] BTRFS info (device loop1): metadata ratio 5 [ 48.623707][ T4190] BTRFS info (device loop1): disk space caching is enabled [ 48.626093][ T4190] BTRFS info (device loop1): has skinny extents [ 48.627352][ T4204] hfsplus: Filesystem is marked locked, mounting read-only. [ 48.832211][ T4190] BTRFS info (device loop1): enabling ssd optimizations [ 48.837529][ T4190] BTRFS info (device loop1): clearing free space tree [ 48.839231][ T4190] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 48.841650][ T4190] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 48.924025][ T4225] hfsplus: filesystem is marked locked, leaving read-only. [ 48.989202][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 49.151533][ T4232] loop3: detected capacity change from 0 to 512 [ 50.645331][ T4254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 51.004349][ T4075] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.264661][ T4075] usb 1-1: Using ep0 maxpacket: 8 [ 51.492306][ T4283] IPv6: NLM_F_CREATE should be specified when creating new route [ 51.556581][ T4287] udc-core: couldn't find an available UDC or it's busy [ 51.558105][ T4287] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.594535][ T4075] usb 1-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=74.f4 [ 51.596782][ T4075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.598375][ T4075] usb 1-1: Product: syz [ 51.599318][ T4075] usb 1-1: Manufacturer: syz [ 51.600358][ T4075] usb 1-1: SerialNumber: syz [ 51.615810][ T4290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.43'. [ 51.616231][ T4075] usb 1-1: config 0 descriptor?? [ 51.666527][ T4075] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input2 [ 51.796646][ T4294] loop4: detected capacity change from 0 to 1024 [ 51.891409][ T4294] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.042134][ T4302] loop4: detected capacity change from 0 to 256 [ 52.081050][ T4302] udc-core: couldn't find an available UDC or it's busy [ 52.082423][ T4302] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.384423][ T4019] bcm5974 1-1:0.0: could not read from device [ 52.391283][ T4075] usb 1-1: USB disconnect, device number 2 [ 53.463634][ T4344] loop2: detected capacity change from 0 to 512 [ 53.467240][ T4337] udc-core: couldn't find an available UDC or it's busy [ 53.468840][ T4337] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.514655][ T4344] ======================================================= [ 53.514655][ T4344] WARNING: The mand mount option has been deprecated and [ 53.514655][ T4344] and is ignored by this kernel. Remove the mand [ 53.514655][ T4344] option from the mount to silence this warning. [ 53.514655][ T4344] ======================================================= [ 53.552633][ T4349] udc-core: couldn't find an available UDC or it's busy [ 53.564647][ T4349] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.604875][ T4344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 53.606645][ T4344] System zones: 1-12 [ 53.608127][ T4344] EXT4-fs (loop2): orphan cleanup on readonly fs [ 53.616676][ T4344] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 393240: comm syz.2.66: invalid block [ 53.659806][ T4344] EXT4-fs (loop2): Remounting filesystem read-only [ 53.661430][ T4344] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.66: couldn't read orphan inode 11 (err -117) [ 53.681690][ T4344] EXT4-fs (loop2): Remounting filesystem read-only [ 53.683203][ T4344] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,acl,nojournal_checksum,errors=remount-ro,max_dir_size_kb=0x000000000000001d. Quota mode: writeback. [ 55.080242][ T4385] loop3: detected capacity change from 0 to 512 [ 55.282098][ T4389] loop0: detected capacity change from 0 to 512 [ 55.329558][ T4389] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.345224][ T4389] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.056490][ T4389] EXT4-fs (loop0): 1 truncate cleaned up [ 56.057877][ T4389] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,noinit_itable,inode_readahead_blks=0x0000000000000100,errors=remount-ro,max_batch_time=0x0000000000000003,max_batch_time=0x0000000000000004,. Quota mode: none. [ 56.063974][ T4385] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.149047][ T4389] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.85: corrupted in-inode xattr [ 56.157833][ T4389] EXT4-fs (loop0): Remounting filesystem read-only [ 56.159266][ T4389] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1751: inode #15: comm syz.0.85: unable to update i_inline_off [ 56.161891][ T4389] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 56.182217][ T4389] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.85: corrupted in-inode xattr [ 56.324100][ T4389] EXT4-fs (loop0): Remounting filesystem read-only [ 56.447450][ T4409] loop4: detected capacity change from 0 to 256 [ 56.504058][ T4419] udc-core: couldn't find an available UDC or it's busy [ 56.509925][ T4419] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.537748][ T4409] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 56.582357][ T4421] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 56.589426][ T4421] device bridge1 entered promiscuous mode [ 57.769471][ T4432] loop0: detected capacity change from 0 to 2048 [ 57.816966][ T4432] EXT4-fs (loop0): Unrecognized mount option "euid=00000000000000000000" or missing value [ 57.915591][ T26] audit: type=1326 audit(57.880:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb64df068 code=0x7ffc0000 [ 57.920431][ T26] audit: type=1326 audit(57.880:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb64df068 code=0x7ffc0000 [ 57.939330][ T26] audit: type=1326 audit(57.900:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb64df068 code=0x7ffc0000 [ 57.951263][ T26] audit: type=1326 audit(57.900:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb64df068 code=0x7ffc0000 [ 57.983135][ T26] audit: type=1326 audit(57.900:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb64df068 code=0x7ffc0000 [ 57.989565][ T4452] udc-core: couldn't find an available UDC or it's busy [ 57.994388][ T4452] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.036228][ T4039] Bluetooth: hci2: unknown advertising packet type: 0x5f [ 58.036284][ T4039] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 58.037992][ T4039] Bluetooth: hci2: Malicious advertising data. [ 58.124972][ T4461] capability: warning: `syz.1.113' uses deprecated v2 capabilities in a way that may be insecure [ 58.256081][ T4470] udc-core: couldn't find an available UDC or it's busy [ 58.257489][ T4470] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.263649][ T26] audit: type=1326 audit(58.220:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb64df068 code=0x7ffc0000 [ 58.271866][ T26] audit: type=1326 audit(58.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=187 compat=0 ip=0xffffb64df068 code=0x7ffc0000 [ 58.279242][ T26] audit: type=1326 audit(58.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb64df068 code=0x7ffc0000 [ 58.404590][ T4473] xt_nat: multiple ranges no longer supported [ 58.434395][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 58.684403][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 58.724317][ T4479] loop4: detected capacity change from 0 to 512 [ 58.811466][ T4479] EXT4-fs (loop4): Ignoring removed nobh option [ 58.813631][ T4479] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.816517][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.818941][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 58.821596][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 58.823456][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.891195][ T7] usb 1-1: config 0 descriptor?? [ 58.897545][ T4479] EXT4-fs (loop4): 1 truncate cleaned up [ 58.898743][ T4479] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 58.977635][ T4485] fuse: blksize only supported for fuseblk [ 59.000470][ T4487] loop1: detected capacity change from 0 to 16 [ 59.090274][ T4487] erofs: (device loop1): mounted with root inode @ nid 36. [ 59.190659][ T4492] loop3: detected capacity change from 0 to 128 [ 59.255698][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 59.256993][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 59.272190][ T7] usb 1-1: USB disconnect, device number 3 [ 59.459846][ T4039] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 59.462274][ T4039] CPU: 1 PID: 4039 Comm: kworker/u5:4 Not tainted 5.15.171-syzkaller #0 [ 59.464059][ T4039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.466349][ T4039] Workqueue: hci4 hci_rx_work [ 59.467451][ T4039] Call trace: [ 59.468136][ T4039] dump_backtrace+0x0/0x530 [ 59.469108][ T4039] show_stack+0x2c/0x3c [ 59.470011][ T4039] dump_stack_lvl+0x108/0x170 [ 59.471132][ T4039] dump_stack+0x1c/0x58 [ 59.472037][ T4039] sysfs_create_dir_ns+0x278/0x318 [ 59.473217][ T4039] kobject_add_internal+0x384/0x8f0 [ 59.474292][ T4039] kobject_add+0x14c/0x21c [ 59.475292][ T4039] device_add+0x400/0xef4 [ 59.476276][ T4039] hci_conn_add_sysfs+0xc4/0x1cc [ 59.477325][ T4039] le_conn_complete_evt+0x954/0x1228 [ 59.478452][ T4039] hci_le_meta_evt+0x234/0x31c0 [ 59.479566][ T4039] hci_event_packet+0xd34/0x12b4 [ 59.480596][ T4039] hci_rx_work+0x1c0/0x7c4 [ 59.481538][ T4039] process_one_work+0x790/0x11b8 [ 59.482628][ T4039] worker_thread+0x910/0x1034 [ 59.483647][ T4039] kthread+0x37c/0x45c [ 59.484482][ T4039] ret_from_fork+0x10/0x20 [ 59.486031][ T4039] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 59.488776][ T4039] Bluetooth: hci4: failed to register connection device [ 59.647005][ T4512] loop1: detected capacity change from 0 to 512 [ 59.710727][ T4516] udc-core: couldn't find an available UDC or it's busy [ 59.712442][ T4516] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.788511][ T4520] loop0: detected capacity change from 0 to 2048 [ 59.882963][ T4520] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 59.922120][ T4520] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.139: bg 0: block 234: padding at end of block bitmap is not set [ 59.931489][ T4512] EXT4-fs (loop1): Test dummy encryption mode enabled [ 59.942197][ T4512] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.136: inline data xattr refers to an external xattr inode [ 59.959233][ T4512] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.136: couldn't read orphan inode 12 (err -117) [ 59.986523][ T4512] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 60.031395][ T4523] loop3: detected capacity change from 0 to 2048 [ 60.063404][ T4523] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 60.074234][ T4523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.127443][ T4532] loop1: detected capacity change from 0 to 512 [ 60.195142][ T4532] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.142: casefold flag without casefold feature [ 60.198209][ T4532] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.142: couldn't read orphan inode 15 (err -117) [ 60.203193][ T4532] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.233199][ T4540] loop3: detected capacity change from 0 to 256 [ 60.307728][ T4540] FAT-fs (loop3): bogus sectors per cluster 0 [ 60.309245][ T4540] FAT-fs (loop3): Can't find a valid FAT filesystem [ 60.359629][ T4547] loop0: detected capacity change from 0 to 512 [ 60.590715][ T4547] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 60.610640][ T4560] capability: warning: `syz.3.151' uses 32-bit capabilities (legacy support in use) [ 60.962586][ T4562] netlink: 32 bytes leftover after parsing attributes in process `syz.1.149'. [ 61.635055][ T4567] loop1: detected capacity change from 0 to 128 [ 61.647103][ T4566] loop4: detected capacity change from 0 to 1024 [ 61.697599][ T4567] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 61.707633][ T4566] EXT4-fs (loop4): invalid inodes per group: 1179680 [ 61.707633][ T4566] [ 61.723853][ T4567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.726389][ T4567] UDF-fs: error (device loop1): udf_read_inode: (ino 95) failed !bh [ 61.728244][ T4567] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=2, partition=0 [ 62.080427][ T4578] loop4: detected capacity change from 0 to 8 [ 63.059178][ T4589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'. [ 63.146303][ T4593] loop1: detected capacity change from 0 to 1024 [ 63.224944][ T4593] udc-core: couldn't find an available UDC or it's busy [ 63.244261][ T4593] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.506638][ T4615] netlink: 'syz.4.177': attribute type 1 has an invalid length. [ 63.509320][ T4615] netlink: 'syz.4.177': attribute type 2 has an invalid length. [ 63.598503][ T4622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.180'. [ 63.675489][ T4076] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.677054][ T4076] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.690258][ T4076] hid-generic 0000:0000:0000.0001: hidraw0: HID vffffff.fe Device [syz0] on syz1 [ 63.746369][ T4630] loop4: detected capacity change from 0 to 1024 [ 63.809543][ T4631] loop3: detected capacity change from 0 to 1024 [ 63.839322][ T4241] hfsplus: b-tree write err: -5, ino 4 [ 63.846401][ T4633] loop1: detected capacity change from 0 to 128 [ 63.908148][ T4633] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.303789][ T4643] loop1: detected capacity change from 0 to 16 [ 64.375632][ T4643] erofs: (device loop1): mounted with root inode @ nid 36. [ 64.845967][ T21] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 65.520598][ T4660] loop2: detected capacity change from 0 to 1024 [ 66.461549][ T4665] loop1: detected capacity change from 0 to 8 [ 66.539332][ T4665] SQUASHFS error: lzo decompression failed, data probably corrupt [ 66.541116][ T4665] SQUASHFS error: Failed to read block 0x91: -5 [ 66.542402][ T4665] SQUASHFS error: Unable to read metadata cache entry [8f] [ 66.543882][ T4665] SQUASHFS error: Unable to read inode 0x11f [ 66.579692][ T4169] hfsplus: b-tree write err: -5, ino 4 [ 66.634395][ T21] usb 1-1: config index 0 descriptor too short (expected 2376, got 72) [ 66.636189][ T21] usb 1-1: config 1 has an invalid interface number: 0 but max is -1 [ 66.637876][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 66.639894][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 66.642036][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 66.656581][ T21] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 66.744640][ T21] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.746677][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 66.748457][ T21] usb 1-1: SerialNumber: syz [ 66.781125][ T4676] loop2: detected capacity change from 0 to 512 [ 66.794963][ T4647] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.816035][ T21] cdc_acm 1-1:1.0: skipping garbage [ 66.826115][ T4676] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.854824][ T4676] EXT4-fs (loop2): 1 truncate cleaned up [ 66.856011][ T4676] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 66.965963][ T4688] loop3: detected capacity change from 0 to 1024 [ 67.026823][ T1533] usb 1-1: USB disconnect, device number 4 [ 67.033366][ T4688] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.203468][ T4704] loop2: detected capacity change from 0 to 128 [ 67.293286][ T4708] loop3: detected capacity change from 0 to 1024 [ 67.343116][ T4708] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,bsdgroups,resuid=0x0000000000000000,auto_da_alloc=0x000000000000007f,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback. [ 67.555719][ T1533] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 67.557900][ T1533] Bluetooth: hci3: Injecting HCI hardware error event [ 67.561074][ T4039] Bluetooth: hci3: hardware error 0x00 [ 67.571014][ T4720] loop3: detected capacity change from 0 to 1024 [ 67.849945][ T4729] process 'syz.0.221' launched './file0/file0' with NULL argv: empty string added [ 68.673501][ T144] Bluetooth: to_multiplier 0 < 10 [ 68.692213][ T261] hfsplus: b-tree write err: -5, ino 4 [ 68.720050][ T4744] tun0: tun_chr_ioctl cmd 1074025675 [ 68.721358][ T4744] tun0: persist disabled [ 68.846209][ T4751] printk: syz.0.234 (4751): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 68.858683][ T4752] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.233039][ T4770] loop3: detected capacity change from 0 to 512 [ 69.559569][ T4770] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.623821][ T4770] EXT4-fs (loop3): 1 orphan inode deleted [ 69.651416][ T4770] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.879583][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.881270][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.890925][ T1959] cfg80211: failed to load regulatory.db [ 70.132370][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 70.172755][ T4797] loop2: detected capacity change from 0 to 256 [ 70.309200][ T4800] loop3: detected capacity change from 0 to 2048 [ 70.369907][ T4800] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.757702][ T26] audit: type=1326 audit(70.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4810 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb64df068 code=0x7ffc0000 [ 70.764604][ T26] audit: type=1326 audit(70.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4810 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb64df068 code=0x7ffc0000 [ 70.773426][ T4813] loop3: detected capacity change from 0 to 512 [ 70.799779][ T26] audit: type=1326 audit(70.740:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4810 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffb64df068 code=0x7ffc0000 [ 70.834719][ T26] audit: type=1326 audit(70.740:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4810 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb64df09c code=0x7ffc0000 [ 70.839190][ T26] audit: type=1326 audit(70.790:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4810 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb64dd7a0 code=0x7ffc0000 [ 70.862233][ T4813] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 70.900474][ T26] audit: type=1326 audit(70.860:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4810 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffb64df10c code=0x7ffc0000 [ 70.910882][ T4814] loop2: detected capacity change from 0 to 2048 [ 70.913652][ T4813] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 70.916083][ T4813] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 70.930123][ T4813] EXT4-fs (loop3): 1 truncate cleaned up [ 70.932282][ T4817] loop4: detected capacity change from 0 to 512 [ 70.937174][ T4813] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 70.956002][ T26] audit: type=1326 audit(70.860:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4810 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb64dd604 code=0x7ffc0000 [ 70.961691][ T4815] loop0: detected capacity change from 0 to 1024 [ 70.979040][ T26] audit: type=1326 audit(70.860:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4810 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb64deb90 code=0x7ffc0000 [ 70.995149][ T4076] Bluetooth: hci1: command 0x2021 tx timeout [ 70.999155][ T26] audit: type=1326 audit(70.890:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4810 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb64dd9dc code=0x7ffc0000 [ 71.003767][ T26] audit: type=1326 audit(70.890:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4810 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb64deb90 code=0x7ffc0000 [ 71.039752][ T3640] loop2: p1 < > p4 [ 71.044081][ T3640] loop2: p4 size 8388608 extends beyond EOD, truncated [ 71.054715][ T4814] loop2: p1 < > p4 [ 71.056842][ T4814] loop2: p4 size 8388608 extends beyond EOD, truncated [ 71.067031][ T3640] loop2: p1 < > p4 [ 71.068535][ T4817] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.4.243: corrupted xattr block 95 [ 71.072198][ T3640] loop2: p4 size 8388608 extends beyond EOD, truncated [ 71.093921][ T4817] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.243: bg 0: block 7: invalid block bitmap [ 71.151705][ T4823] loop3: detected capacity change from 0 to 512 [ 71.166645][ T4817] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 71.168957][ T4817] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2932: inode #11: comm syz.4.243: corrupted xattr block 95 [ 71.190328][ T4817] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 71.192429][ T4817] EXT4-fs (loop4): 1 orphan inode deleted [ 71.193687][ T4817] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.313451][ T4823] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.548071][ T4075] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 71.809089][ T4848] loop4: detected capacity change from 0 to 1024 [ 71.890937][ T4848] hfsplus: unable to parse mount options [ 71.904774][ T4075] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.906980][ T4075] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.124364][ T4075] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 72.126379][ T4075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 72.129033][ T4075] usb 1-1: SerialNumber: syz [ 72.261366][ T4861] binder: 4859:4861 ERROR: BC_REGISTER_LOOPER called without request [ 72.263361][ T4861] binder: 4859:4861 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 72.330647][ T4863] binder: 4862:4863 ERROR: BC_REGISTER_LOOPER called without request [ 72.334004][ T7] binder: undelivered death notification, 0000000000000000 [ 72.410936][ T4867] 9pnet: p9_errstr2errno: server reported unknown error [ 72.440590][ T4871] loop1: detected capacity change from 0 to 512 [ 72.462559][ T4021] udevd[4021]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 72.478568][ T4170] udevd[4170]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 72.488591][ T4075] usb 1-1: 0:2 : does not exist [ 72.500539][ T4873] loop2: detected capacity change from 0 to 512 [ 72.519437][ T4871] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.542262][ T4075] usb 1-1: USB disconnect, device number 5 [ 72.564912][ T4871] EXT4-fs (loop1): 1 truncate cleaned up [ 72.566197][ T4871] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 72.572418][ T4873] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.594359][ T4873] EXT4-fs (loop2): 1 truncate cleaned up [ 72.595659][ T4873] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 72.718816][ T4882] loop3: detected capacity change from 0 to 128 [ 72.859622][ T4888] loop2: detected capacity change from 0 to 512 [ 72.961600][ T4897] loop1: detected capacity change from 0 to 256 [ 73.000569][ T4899] loop3: detected capacity change from 0 to 1024 [ 73.180645][ T4038] Bluetooth: min 0 < 6 [ 73.264187][ T4913] binder: 4887:4913 ioctl c0306201 20001240 returned -14 [ 73.950665][ T4920] loop0: detected capacity change from 0 to 512 [ 73.981121][ T4924] loop1: detected capacity change from 0 to 512 [ 73.993208][ T4920] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 74.012291][ T4920] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.305: inode #1: comm syz.0.305: iget: illegal inode # [ 74.022053][ T4920] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.305: error while reading EA inode 1 err=-117 [ 74.026197][ T4920] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.305: inode #1: comm syz.0.305: iget: illegal inode # [ 74.030615][ T4920] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.305: error while reading EA inode 1 err=-117 [ 74.033882][ T4920] EXT4-fs (loop0): 1 orphan inode deleted [ 74.036615][ T4920] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,max_batch_time=0x0000000000000002,auto_da_alloc=0x0000000000000009,mblk_io_submit,,errors=continue. Quota mode: none. [ 74.043606][ T4924] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.304: corrupted inode contents [ 74.052288][ T4924] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #16: comm syz.1.304: mark_inode_dirty error [ 74.057174][ T4924] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.304: corrupted inode contents [ 74.071204][ T4924] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.304: mark_inode_dirty error [ 74.078522][ T4880] udevd[4880]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 74.083863][ T4021] udevd[4021]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 74.097683][ T144] Bluetooth: Wrong link type (-71) [ 74.122130][ T4924] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.304: corrupted inode contents [ 74.127291][ T4924] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 74.130343][ T4929] device wlan0 entered promiscuous mode [ 74.135757][ T4928] device wlan0 left promiscuous mode [ 74.137480][ T4924] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.304: corrupted inode contents [ 74.146797][ T4924] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.304: mark_inode_dirty error [ 74.165168][ T4924] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 74.183337][ T4920] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 74.185812][ T4924] EXT4-fs (loop1): 1 truncate cleaned up [ 74.187150][ T4924] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.196743][ T4170] udevd[4170]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.197583][ T4920] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 74.203977][ T4880] udevd[4880]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 74.211122][ T4021] udevd[4021]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 74.233960][ T4920] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 74.278027][ T4924] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 75.235722][ T4076] Bluetooth: hci2: command 0x2021 tx timeout [ 75.247999][ T4954] loop3: detected capacity change from 0 to 164 [ 75.295122][ T4948] loop2: detected capacity change from 0 to 128 [ 75.329617][ T4958] loop4: detected capacity change from 0 to 512 [ 75.353950][ T4948] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.483133][ T4970] loop0: detected capacity change from 0 to 256 [ 75.490827][ T4958] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.319: casefold flag without casefold feature [ 75.493852][ T4958] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.319: couldn't read orphan inode 15 (err -117) [ 75.516306][ T4958] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.602171][ T4970] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 75.804004][ T4985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 75.948534][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 75.948548][ T26] audit: type=1326 audit(75.910:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ccf6068 code=0x7ffc0000 [ 75.972630][ T26] audit: type=1326 audit(75.930:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff9ccf6068 code=0x7ffc0000 [ 75.978078][ T26] audit: type=1326 audit(75.930:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ccf6068 code=0x7ffc0000 [ 75.996486][ T26] audit: type=1326 audit(75.930:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9ccf6068 code=0x7ffc0000 [ 76.017015][ T26] audit: type=1326 audit(75.930:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ccf6068 code=0x7ffc0000 [ 76.339785][ T5016] binder: 5014:5016 ioctl 400c620e 20000040 returned -22 [ 76.346795][ T5018] loop0: detected capacity change from 0 to 256 [ 76.507586][ T5022] loop4: detected capacity change from 0 to 1024 [ 76.520337][ T5024] loop1: detected capacity change from 0 to 164 [ 76.590974][ T5024] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 76.641713][ T5028] loop3: detected capacity change from 0 to 256 [ 76.674451][ T4169] hfsplus: b-tree write err: -5, ino 4 [ 76.702924][ T5028] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 76.882943][ T5042] loop1: detected capacity change from 0 to 128 [ 76.947078][ T5042] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 76.951539][ T5042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.952739][ T5047] loop3: detected capacity change from 0 to 256 [ 77.090819][ T5047] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 77.364984][ T4074] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 77.545054][ T5063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.364'. [ 77.547167][ T5063] device bridge_slave_1 left promiscuous mode [ 77.548619][ T5063] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.611512][ T5063] device bridge_slave_0 left promiscuous mode [ 77.613112][ T5063] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.804550][ T4074] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1023 [ 77.806670][ T4074] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.809556][ T4074] usb 1-1: config 1 interface 0 has no altsetting 0 [ 77.967362][ T4074] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 77.969388][ T4074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.971073][ T4074] usb 1-1: Product: syz [ 77.971962][ T4074] usb 1-1: Manufacturer: syz [ 77.972916][ T4074] usb 1-1: SerialNumber: syz [ 78.025127][ T5052] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.330733][ T4074] usb 1-1: USB disconnect, device number 6 [ 78.653809][ T5085] netlink: 80 bytes leftover after parsing attributes in process `syz.2.374'. [ 78.797734][ T5089] loop2: detected capacity change from 0 to 512 [ 78.816273][ T5089] EXT4-fs (loop2): Ignoring removed oldalloc option [ 78.827338][ T5091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.376'. [ 78.842902][ T5089] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.375: Parent and EA inode have the same ino 15 [ 78.865127][ T5089] EXT4-fs (loop2): Remounting filesystem read-only [ 78.866547][ T5089] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.375: Parent and EA inode have the same ino 15 [ 78.870972][ T5089] EXT4-fs (loop2): Remounting filesystem read-only [ 78.872492][ T5089] EXT4-fs (loop2): 1 orphan inode deleted [ 78.873739][ T5089] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 78.881584][ T5096] udc-core: couldn't find an available UDC or it's busy [ 79.771574][ T5096] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.993130][ T5110] loop0: detected capacity change from 0 to 512 [ 80.021985][ T5111] loop2: detected capacity change from 0 to 256 [ 80.055010][ T5110] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nombcache,stripe=0x0000000000000002,usrquota,,errors=continue. Quota mode: writeback. [ 80.089736][ T5108] loop3: detected capacity change from 0 to 2048 [ 80.129975][ T5108] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.394864][ T5122] loop1: detected capacity change from 0 to 128 [ 80.423151][ T5125] udc-core: couldn't find an available UDC or it's busy [ 80.429288][ T5122] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.437010][ T5125] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.441201][ T5122] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.630730][ T5131] loop4: detected capacity change from 0 to 1024 [ 80.641533][ T5133] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 80.703563][ T5131] EXT4-fs error (device loop4): ext4_fill_super:4841: inode #2: comm syz.4.385: casefold flag without casefold feature [ 80.708188][ T5131] EXT4-fs (loop4): get root inode failed [ 80.709371][ T5131] EXT4-fs (loop4): mount failed [ 80.730191][ T5137] udc-core: couldn't find an available UDC or it's busy [ 80.731941][ T5137] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.850820][ T5131] loop4: detected capacity change from 0 to 2048 [ 80.894105][ T5131] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 80.900313][ T5131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.031228][ T5142] udc-core: couldn't find an available UDC or it's busy [ 81.038843][ T5142] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 81.317023][ T5154] loop0: detected capacity change from 0 to 256 [ 81.623355][ T5181] loop4: detected capacity change from 0 to 1024 [ 81.670396][ T5183] loop3: detected capacity change from 0 to 8 [ 81.695593][ T5181] EXT4-fs (loop4): Ignoring removed orlov option [ 81.745517][ T5181] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000010000,orlov,barrier=0x0000000000000002,jqfmt=vfsv1,i_version,minixdf,data_err=abort,max_batch_time=0x0000000000000002,bsdgroups,min_batch_time=0x0000000000000002,quota,,errors=continue. Quota mode: writeback. [ 81.769250][ T26] audit: type=1326 audit(81.730:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.0.414" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb431b068 code=0x0 [ 81.842115][ T5183] SQUASHFS error: zlib decompression failed, data probably corrupt [ 81.851172][ T5183] SQUASHFS error: Failed to read block 0x4de: -5 [ 81.853466][ T5183] SQUASHFS error: Failed to read block 0x4e2: -5 [ 81.871935][ T5183] SQUASHFS error: Failed to read block 0x9ca: -5 [ 81.873596][ T5183] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 81.892459][ T5183] SQUASHFS error: Failed to read block 0x35f2: -5 [ 82.151886][ T5211] udc-core: couldn't find an available UDC or it's busy [ 82.153477][ T5211] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.596269][ T5221] loop0: detected capacity change from 0 to 128 [ 82.704079][ T5221] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.963928][ T5245] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 82.963928][ T5245] The task syz.3.436 (5245) triggered the difference, watch for misbehavior. [ 83.316968][ T4039] Bluetooth: Wrong link type (-22) [ 83.318422][ T4039] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 83.319864][ T4039] Bluetooth: Wrong link type (-22) [ 83.451828][ T5261] Cannot find add_set index 0 as target [ 83.547226][ T5263] loop2: detected capacity change from 0 to 2048 [ 83.607076][ T5263] EXT4-fs (loop2): Ignoring removed bh option [ 83.659066][ T5263] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,bsddf,bh,usrjquota=,journal_ioprio=0x0000000000000001,noinit_itable,,errors=continue. Quota mode: none. [ 83.675830][ T5269] af_packet: tpacket_rcv: packet too big, clamped from 134 to 4294967286. macoff=82 [ 84.065301][ T5293] loop3: detected capacity change from 0 to 8 [ 85.123026][ T5293] SQUASHFS error: zlib decompression failed, data probably corrupt [ 85.160800][ T5293] SQUASHFS error: Failed to read block 0x4de: -5 [ 85.162360][ T5293] SQUASHFS error: Failed to read block 0x4e2: -5 [ 85.163845][ T5293] SQUASHFS error: Failed to read block 0x9ca: -5 [ 85.191887][ T5305] udc-core: couldn't find an available UDC or it's busy [ 85.192177][ T5293] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 85.196005][ T5305] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.202294][ T5293] SQUASHFS error: Failed to read block 0x35f2: -5 [ 85.253120][ T5308] loop4: detected capacity change from 0 to 2048 [ 85.323277][ T5308] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 85.327126][ T5308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.616930][ T5340] loop2: detected capacity change from 0 to 256 [ 87.596120][ T5351] binder: 5350:5351 tried to acquire reference to desc 0, got 1 instead [ 87.599234][ T5351] binder: 5350:5351 got reply transaction with bad transaction stack, transaction 8 has target 5350:0 [ 87.605580][ T5351] binder: 5350:5351 transaction failed 29201/-71, size 0-0 line 2837 [ 87.607721][ T5351] binder: 5350:5351 got new transaction with bad transaction stack, transaction 8 has target 5350:0 [ 87.610144][ T5351] binder: 5350:5351 transaction failed 29201/-71, size 0-0 line 2973 [ 87.665991][ T1959] binder: release 5350:5351 transaction 8 out, still active [ 87.667793][ T1959] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.682997][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 87.689828][ T1959] binder: send failed reply for transaction 8, target dead [ 87.730156][ T5365] udc-core: couldn't find an available UDC or it's busy [ 87.731721][ T5365] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.826800][ T5373] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 87.876511][ T5374] loop3: detected capacity change from 0 to 2048 [ 87.919771][ T5374] EXT4-fs (loop3): Ignoring removed orlov option [ 87.994049][ T4038] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 87.996775][ T4038] CPU: 1 PID: 4038 Comm: kworker/u5:3 Not tainted 5.15.171-syzkaller #0 [ 87.998625][ T4038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.000840][ T4038] Workqueue: hci2 hci_rx_work [ 88.001863][ T4038] Call trace: [ 88.002626][ T4038] dump_backtrace+0x0/0x530 [ 88.003555][ T4038] show_stack+0x2c/0x3c [ 88.004578][ T4038] dump_stack_lvl+0x108/0x170 [ 88.005648][ T4038] dump_stack+0x1c/0x58 [ 88.006540][ T4038] sysfs_create_dir_ns+0x278/0x318 [ 88.007614][ T4038] kobject_add_internal+0x384/0x8f0 [ 88.008667][ T4038] kobject_add+0x14c/0x21c [ 88.009609][ T4038] device_add+0x400/0xef4 [ 88.010461][ T4038] hci_conn_add_sysfs+0xc4/0x1cc [ 88.011522][ T4038] le_conn_complete_evt+0x954/0x1228 [ 88.012630][ T4038] hci_le_meta_evt+0x234/0x31c0 [ 88.013676][ T4038] hci_event_packet+0xd34/0x12b4 [ 88.014681][ T4038] hci_rx_work+0x1c0/0x7c4 [ 88.015597][ T4038] process_one_work+0x790/0x11b8 [ 88.016583][ T4038] worker_thread+0x910/0x1034 [ 88.017707][ T4038] kthread+0x37c/0x45c [ 88.018563][ T4038] ret_from_fork+0x10/0x20 [ 88.021570][ T4038] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 88.024595][ T4038] Bluetooth: hci2: failed to register connection device [ 88.032043][ T5374] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,acl,,errors=continue. Quota mode: none. [ 88.053990][ T5374] udc-core: couldn't find an available UDC or it's busy [ 88.055849][ T5374] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.146900][ T5389] udc-core: couldn't find an available UDC or it's busy [ 88.148412][ T5389] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.162561][ T5387] loop4: detected capacity change from 0 to 256 [ 88.172732][ T5387] exfat: Unknown parameter 'keep_last_dots' [ 89.776403][ T5423] input: syz0 as /devices/virtual/input/input7 [ 89.818673][ T5425] loop0: detected capacity change from 0 to 512 [ 90.195634][ T5434] udc-core: couldn't find an available UDC or it's busy [ 90.209605][ T5434] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.718590][ T5425] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 90.845180][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 91.128205][ T5459] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.138068][ T5458] loop2: detected capacity change from 0 to 2048 [ 91.189448][ T5458] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.251695][ T4241] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.259913][ T4241] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2 with error 28 [ 91.262598][ T4241] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.262598][ T4241] [ 91.289166][ T4241] EXT4-fs (loop2): Total free blocks count 0 [ 91.290455][ T4241] EXT4-fs (loop2): Free/Dirty block details [ 91.291787][ T4241] EXT4-fs (loop2): free_blocks=2415919104 [ 91.293057][ T4241] EXT4-fs (loop2): dirty_blocks=16 [ 91.294112][ T4241] EXT4-fs (loop2): Block reservation details [ 91.332688][ T4241] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 91.954778][ T5489] loop1: detected capacity change from 0 to 764 [ 92.270487][ T5504] loop1: detected capacity change from 0 to 1024 [ 92.345921][ T5504] EXT4-fs (loop1): Test dummy encryption mode enabled [ 92.347464][ T5504] EXT4-fs (loop1): Ignoring removed orlov option [ 92.372061][ T5504] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000207,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 92.410569][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 92.510271][ T5517] loop2: detected capacity change from 0 to 256 [ 92.551636][ T5504] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 92.600805][ T5517] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 92.720099][ T5530] loop2: detected capacity change from 0 to 2048 [ 92.755551][ T5530] UDF-fs: bad mount option "dmode= Þ§<¡›é00000000000000000077777" or missing value [ 92.812616][ T5544] loop3: detected capacity change from 0 to 512 [ 92.884054][ T5544] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 93.112891][ T26] audit: type=1326 audit(93.070:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb64df068 code=0x7ffc0000 [ 93.121097][ T26] audit: type=1326 audit(93.080:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffb64df068 code=0x7ffc0000 [ 93.123167][ T5561] loop0: detected capacity change from 0 to 2048 [ 93.133484][ T26] audit: type=1326 audit(93.090:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb64df09c code=0x7ffc0000 [ 93.146538][ T5566] loop2: detected capacity change from 0 to 512 [ 93.150325][ T26] audit: type=1326 audit(93.100:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb64dd7a0 code=0x7ffc0000 [ 93.161099][ T26] audit: type=1326 audit(93.100:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffb64df10c code=0x7ffc0000 [ 93.171520][ T26] audit: type=1326 audit(93.110:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb64dd604 code=0x7ffc0000 [ 93.172041][ T5561] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.181835][ T26] audit: type=1326 audit(93.110:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb64deb90 code=0x7ffc0000 [ 93.191197][ T26] audit: type=1326 audit(93.120:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb64dd9dc code=0x7ffc0000 [ 93.201713][ T26] audit: type=1326 audit(93.120:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb64dd9dc code=0x7ffc0000 [ 93.215242][ T26] audit: type=1326 audit(93.180:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffb64dd4e4 code=0x7ffc0000 [ 93.349905][ T5571] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.415291][ T5573] loop2: detected capacity change from 0 to 8 [ 93.474397][ T5573] SQUASHFS error: zstd decompression error: 2 [ 93.487236][ T5573] SQUASHFS error: zstd decompression failed, data probably corrupt [ 93.492975][ T5573] SQUASHFS error: Failed to read block 0x62b: -5 [ 93.497816][ T5573] SQUASHFS error: Unable to read metadata cache entry [629] [ 93.507582][ T5573] SQUASHFS error: Unable to read directory block [629:ff26] [ 94.404072][ T5599] loop3: detected capacity change from 0 to 1024 [ 94.653464][ T4038] [ 94.654124][ T4038] ===================================== [ 94.655380][ T4038] WARNING: bad unlock balance detected! [ 94.656628][ T4038] 5.15.171-syzkaller #0 Not tainted [ 94.657605][ T4038] ------------------------------------- [ 94.658795][ T4038] kworker/u5:3/4038 is trying to release lock (&chan->lock) at: [ 94.660301][ T4038] [] l2cap_recv_frame+0xf60/0x6c28 [ 94.661773][ T4038] but there are no more locks to release! [ 94.662904][ T4038] [ 94.662904][ T4038] other info that might help us debug this: [ 94.664617][ T4038] 2 locks held by kworker/u5:3/4038: [ 94.665671][ T4038] #0: ffff0000cac45938 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 94.667863][ T4038] #1: ffff80001fa27c00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 94.670271][ T4038] [ 94.670271][ T4038] stack backtrace: [ 94.671586][ T4038] CPU: 1 PID: 4038 Comm: kworker/u5:3 Not tainted 5.15.171-syzkaller #0 [ 94.673357][ T4038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.675482][ T4038] Workqueue: hci0 hci_rx_work [ 94.676457][ T4038] Call trace: [ 94.677161][ T4038] dump_backtrace+0x0/0x530 [ 94.678144][ T4038] show_stack+0x2c/0x3c [ 94.679065][ T4038] dump_stack_lvl+0x108/0x170 [ 94.680137][ T4038] dump_stack+0x1c/0x58 [ 94.680984][ T4038] print_unlock_imbalance_bug+0x250/0x2a4 [ 94.682268][ T4038] lock_release+0x4b8/0xa1c [ 94.683295][ T4038] __mutex_unlock_slowpath+0xe0/0x6d4 [ 94.684490][ T4038] mutex_unlock+0x8c/0xe0 [ 94.685462][ T4038] l2cap_recv_frame+0xf60/0x6c28 [ 94.686502][ T4038] l2cap_recv_acldata+0x4f4/0x163c [ 94.687671][ T4038] hci_rx_work+0x3a0/0x7c4 [ 94.688713][ T4038] process_one_work+0x790/0x11b8 [ 94.689720][ T4038] worker_thread+0x910/0x1034 [ 94.690778][ T4038] kthread+0x37c/0x45c [ 94.691645][ T4038] ret_from_fork+0x10/0x20 [ 94.861867][ T5607] loop0: detected capacity change from 0 to 512 [ 95.507597][ T5607] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.550207][ T4169] hfsplus: b-tree write err: -5, ino 4 [ 95.577945][ T5607] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #17: comm syz.0.580: iget: bad i_size value: -6917529027641081756 [ 95.582421][ T5607] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.580: couldn't read orphan inode 17 (err -117) [ 95.591825][ T5607] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,,errors=continue. Quota mode: writeback. [ 95.614093][ T5607] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.580: Failed to acquire dquot type 1 [ 96.584408][ T4076] Bluetooth: hci4: command 0x0405 tx timeout