last executing test programs: 1m5.203792185s ago: executing program 3 (id=554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) 53.460667821s ago: executing program 3 (id=554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) 39.758443255s ago: executing program 3 (id=554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) 25.799473694s ago: executing program 3 (id=554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) 13.607795277s ago: executing program 3 (id=554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) 4.111504379s ago: executing program 0 (id=1046): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000002e36b40f905ffffc2920102030109021b00010000001e0904f40001ff02720011"], 0x0) 2.979745735s ago: executing program 4 (id=1052): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10f3, &(0x7f0000004200)="$eJzs2D9rFEEYBvBndgOS6mTSrwEtLCQknB/AFArXWFjbHVZ2XqXcx/HjSCr7kN4UB/bK3h/ukAOFWzwIvx8ss/MwM+9OuW8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgd5L8KMlZk9RN1iQpSdfdTO6SdJv88be2Scm7D5PZ60/jN7PVsvRZk9LvWs7r1dNax3Vcr+rLs+tndfb5y8d2p2RJl9vFfHr69n7Qq/S120FPBAAAgIfh18FGR64PAAAA/M1gjQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAdTNS5OkJF13M7lL0h33swAAAIADlTR5P9qXr9oAWy/yfVRSHm2Tn6Vfc5mve/YDAAAA/+bVeiw7/+PPc5onO/l5TnJxsZqvh9xfJ22Syz/Ou13Mp8vnfD4t/+sSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxmB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAwVgAAAP//32jSSA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2.095488149s ago: executing program 0 (id=1055): ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x31237648, 0x5, 0x9, 0x6}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) 1.911767421s ago: executing program 1 (id=1056): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x2) 1.840714433s ago: executing program 0 (id=1057): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) 1.568756766s ago: executing program 4 (id=1058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000200)={0x23, 0x1, 0x2}, 0x10) 1.225152331s ago: executing program 2 (id=1060): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000540)={0x1f, 0xffff, 0x4}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 1.175406682s ago: executing program 1 (id=1061): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xfff, 0x7, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.003721735s ago: executing program 2 (id=1062): syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad9, 0x400, 0x1, 0x173}, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 958.070335ms ago: executing program 4 (id=1063): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 893.735026ms ago: executing program 2 (id=1064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_mount_image$iso9660(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x0, &(0x7f0000000e00), 0x1, 0xd7c, &(0x7f0000000e40)="$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") time(0x0) 834.486657ms ago: executing program 1 (id=1065): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001840)="efe15a38f4dc7768963f2f6e9e0356de1ae15bb72719b131ee10a0e67746ae48ce", 0x21}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x4e21, 0x0, 'lblcr\x00'}, 0x2c) 783.755358ms ago: executing program 0 (id=1066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b80000001900010000000000ffdbdf250a010101000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000080"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x20000000}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 770.615759ms ago: executing program 4 (id=1067): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000200)={0x24, r2, 0xa29, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x0) 637.05235ms ago: executing program 0 (id=1068): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_EMULATED_HOST(r1, 0x2283, &(0x7f0000000040)) 621.720861ms ago: executing program 2 (id=1069): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 615.832281ms ago: executing program 4 (id=1070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bbfe8000080000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='T'], 0x0) 595.575491ms ago: executing program 1 (id=1071): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) read(r1, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) 474.833633ms ago: executing program 4 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 462.470983ms ago: executing program 0 (id=1073): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@data_err_abort}, {@discard}, {@nojournal_checksum}, {@orlov}]}, 0x2, 0x564, &(0x7f0000000980)="$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") mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x2) 347.905494ms ago: executing program 2 (id=1074): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff02000200", 0xa, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 270.327456ms ago: executing program 1 (id=1075): r0 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x800, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") io_uring_enter(r0, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 147.740568ms ago: executing program 2 (id=1076): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0) fallocate(r0, 0x0, 0x0, 0x7000000) r1 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) fallocate(r1, 0x10, 0x0, 0x7000000) 53.350609ms ago: executing program 1 (id=1077): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000180)='./file3\x00', 0x8c0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x443b, &(0x7f00000088c0)="$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") fallocate(0xffffffffffffffff, 0x3, 0x2, 0x10000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000100000000000400010000000000100006000018000020"], 0x24, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 0s ago: executing program 3 (id=554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): city change from 0 to 2048 [ 100.540321][ T4172] usb 4-1: USB disconnect, device number 2 [ 100.572015][ T4172] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 100.589562][ T4172] cp210x 4-1:0.0: device disconnected [ 100.638465][ T4977] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.668601][ T4963] XFS (loop0): Mounting V5 Filesystem [ 100.682267][ T4977] capability: warning: `syz.1.307' uses deprecated v2 capabilities in a way that may be insecure [ 100.687591][ T4986] loop4: detected capacity change from 0 to 512 [ 100.783731][ T4963] XFS (loop0): Ending clean mount [ 100.794957][ T4963] XFS (loop0): Quotacheck needed: Please wait. [ 100.855592][ T4986] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 100.902458][ T4963] XFS (loop0): Quotacheck: Done. [ 100.946883][ T4986] EXT4-fs (loop4): 1 truncate cleaned up [ 100.976231][ T4998] loop1: detected capacity change from 0 to 8 [ 100.984056][ T4986] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,quota,,errors=continue. Quota mode: writeback. [ 101.029942][ T4993] loop2: detected capacity change from 0 to 8192 [ 101.067629][ T4998] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 101.077131][ T4171] XFS (loop0): Unmounting Filesystem [ 101.090710][ T4993] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 101.104476][ T4993] REISERFS (device loop2): using ordered data mode [ 101.111142][ T4993] reiserfs: using flush barriers [ 101.125902][ T4993] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.131095][ T5001] loop3: detected capacity change from 0 to 512 [ 101.143868][ T4993] REISERFS (device loop2): checking transaction log (loop2) [ 101.259715][ T5001] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.347633][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 101.390456][ T4993] REISERFS (device loop2): Using tea hash to sort names [ 101.390542][ T5001] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.315: iget: bad extended attribute block 19 [ 101.424502][ T4993] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 101.444257][ T5001] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.315: couldn't read orphan inode 15 (err -117) [ 101.457508][ T5001] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.920021][ T5019] raw_sendmsg: syz.1.321 forgot to set AF_INET. Fix it! [ 102.233170][ T5037] netlink: 'syz.2.328': attribute type 12 has an invalid length. [ 102.249560][ T5038] loop3: detected capacity change from 0 to 256 [ 102.256924][ T5037] netlink: 'syz.2.328': attribute type 29 has an invalid length. [ 102.266521][ T5037] netlink: 148 bytes leftover after parsing attributes in process `syz.2.328'. [ 102.282753][ T5037] netlink: 39 bytes leftover after parsing attributes in process `syz.2.328'. [ 102.388974][ T5038] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 102.828055][ T5069] loop1: detected capacity change from 0 to 128 [ 102.845301][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.861068][ T5070] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 103.133513][ T5087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.351'. [ 103.205937][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.256917][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.265924][ T5096] loop1: detected capacity change from 0 to 512 [ 103.284120][ T7] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 103.302007][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.323566][ T7] usb 3-1: config 0 descriptor?? [ 103.404566][ T5096] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 103.434732][ T5096] EXT4-fs (loop1): 1 truncate cleaned up [ 103.440579][ T5096] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 104.024048][ T7] hid-led: probe of 0003:0FC5:B080.0002 failed with error -71 [ 104.084991][ T7] usb 3-1: USB disconnect, device number 3 [ 104.415616][ T5135] loop0: detected capacity change from 0 to 32768 [ 104.783931][ T5153] loop1: detected capacity change from 0 to 64 [ 105.082997][ T5168] loop1: detected capacity change from 0 to 128 [ 105.152970][ T5168] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 105.277636][ T5176] loop2: detected capacity change from 0 to 2048 [ 105.328909][ T5176] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.460566][ T5183] loop3: detected capacity change from 0 to 16 [ 105.551067][ T4172] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.583123][ T5183] erofs: (device loop3): mounted with root inode @ nid 36. [ 105.642350][ T5183] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 90111 of nid 36 [ 105.732361][ T5183] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 105.748276][ T5183] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 86015 of nid 36 [ 105.773800][ T5183] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 105.790694][ T5183] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 81919 of nid 36 [ 105.853360][ T5196] attempt to access beyond end of device [ 105.853360][ T5196] loop3: rw=0, want=24, limit=16 [ 105.875249][ T5183] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 105.893297][ T5183] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 77823 of nid 36 [ 105.915300][ T5183] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 105.932060][ T5183] attempt to access beyond end of device [ 105.932060][ T5183] loop3: rw=524288, want=392, limit=16 [ 105.943602][ T5183] attempt to access beyond end of device [ 105.943602][ T5183] loop3: rw=524288, want=400, limit=16 [ 105.961126][ T5183] attempt to access beyond end of device [ 105.961126][ T5183] loop3: rw=524288, want=32, limit=16 [ 105.972669][ T5183] attempt to access beyond end of device [ 105.972669][ T5183] loop3: rw=524288, want=736, limit=16 [ 105.984242][ T4172] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.991122][ T5183] attempt to access beyond end of device [ 105.991122][ T5183] loop3: rw=524288, want=744, limit=16 [ 106.002343][ T4172] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.129890][ T4172] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 106.156826][ T4172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.173263][ T4172] usb 1-1: SerialNumber: syz [ 106.313602][ T5191] loop2: detected capacity change from 0 to 32768 [ 106.415045][ T5191] XFS (loop2): Mounting V5 Filesystem [ 106.479268][ T4172] usb 1-1: 0:2 : does not exist [ 106.545752][ T4172] usb 1-1: USB disconnect, device number 2 [ 106.623614][ T4314] udevd[4314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.640527][ T5191] XFS (loop2): Ending clean mount [ 106.667288][ T5191] XFS (loop2): Quotacheck needed: Please wait. [ 106.749925][ T5191] XFS (loop2): Quotacheck: Done. [ 106.764088][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.869847][ T5233] loop1: detected capacity change from 0 to 16 [ 106.913300][ T4177] XFS (loop2): Unmounting Filesystem [ 106.959489][ T5233] erofs: (device loop1): mounted with root inode @ nid 36. [ 107.125644][ T5237] netlink: 'syz.0.417': attribute type 13 has an invalid length. [ 107.173114][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.203915][ T1111] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.214785][ T1108] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 107.235039][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.275790][ T1108] usb 4-1: config 0 descriptor?? [ 107.331260][ T5233] erofs: (device loop1): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 107.524961][ T1108] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 107.675847][ T5257] syz.1.424 uses obsolete (PF_INET,SOCK_PACKET) [ 107.754078][ T1111] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 107.764614][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.785933][ T1111] usb 5-1: Product: syz [ 107.790154][ T1111] usb 5-1: Manufacturer: syz [ 107.804329][ T1111] usb 5-1: SerialNumber: syz [ 107.816548][ T1111] usb 5-1: config 0 descriptor?? [ 107.865119][ T1111] ch341 5-1:0.0: ch341-uart converter detected [ 108.201061][ T5286] netlink: 104 bytes leftover after parsing attributes in process `syz.2.432'. [ 108.276162][ T1108] usb 4-1: device descriptor read/64, error -71 [ 108.348186][ T5263] loop0: detected capacity change from 0 to 32768 [ 108.392810][ T5295] vxcan1: tx address claim with dest, not broadcast [ 108.450806][ T5263] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.530529][ T4171] ocfs2: Unmounting device (7,0) on (node local) [ 108.573975][ T1108] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 108.748562][ T1111] usb 5-1: failed to send control message: -71 [ 108.761949][ T1111] ch341-uart: probe of ttyUSB0 failed with error -71 [ 108.787969][ T1111] usb 5-1: USB disconnect, device number 3 [ 108.818480][ T1111] ch341 5-1:0.0: device disconnected [ 108.941049][ T5316] loop0: detected capacity change from 0 to 512 [ 108.984646][ T5318] sch_fq: defrate 511 ignored. [ 109.000444][ T5316] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.025253][ T5316] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.092241][ T4171] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 109.111818][ T5323] loop2: detected capacity change from 0 to 128 [ 109.257262][ T21] usb 4-1: USB disconnect, device number 3 [ 109.446651][ T5334] netlink: 72 bytes leftover after parsing attributes in process `syz.2.449'. [ 109.561150][ T5337] loop0: detected capacity change from 0 to 2048 [ 109.598485][ T5331] loop4: detected capacity change from 0 to 8192 [ 109.663877][ T5337] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 109.685955][ T5331] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 109.687245][ T5337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.704076][ T5331] REISERFS (device loop4): using ordered data mode [ 109.710689][ T5331] reiserfs: using flush barriers [ 109.718619][ T5331] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.738186][ T5331] REISERFS (device loop4): checking transaction log (loop4) [ 109.911726][ T5331] REISERFS (device loop4): Using tea hash to sort names [ 109.922280][ T5331] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 110.310644][ T5360] loop1: detected capacity change from 0 to 8192 [ 110.403843][ T5360] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 110.413067][ T5360] REISERFS (device loop1): using ordered data mode [ 110.443394][ T5378] loop3: detected capacity change from 0 to 256 [ 110.484844][ T5360] reiserfs: using flush barriers [ 110.491229][ T5360] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.517058][ T5360] REISERFS (device loop1): checking transaction log (loop1) [ 110.693321][ T5384] loop0: detected capacity change from 0 to 4096 [ 110.883375][ T5360] REISERFS (device loop1): Using tea hash to sort names [ 110.903482][ T5360] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 111.006640][ T5384] overlayfs: upper fs does not support tmpfile. [ 111.033400][ T5384] overlayfs: workdir/#4 already exists [ 111.351845][ T5408] loop3: detected capacity change from 0 to 4096 [ 111.579731][ T5421] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.626971][ T26] audit: type=1800 audit(1743480235.351:16): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.483" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 111.686266][ T5408] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 111.732431][ T5408] Remounting filesystem read-only [ 111.885538][ T4175] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 112.067332][ T5432] loop3: detected capacity change from 0 to 128 [ 112.407303][ T5448] netlink: 5 bytes leftover after parsing attributes in process `syz.0.502'. [ 112.414519][ T21] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 112.631871][ T5460] loop1: detected capacity change from 0 to 512 [ 112.704620][ T5460] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 112.742171][ T5460] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 112.762663][ T5460] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 112.818088][ T5460] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 112.860455][ T5460] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=c040e118, mo2=0000] [ 112.875356][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.885614][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.906174][ T5472] loop4: detected capacity change from 0 to 512 [ 112.912940][ T5460] EXT4-fs (loop1): too many log groups per flexible block group [ 112.921744][ T5460] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 112.932220][ T5460] EXT4-fs (loop1): mount failed [ 112.984414][ T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 112.993510][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.022359][ T5472] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,quota,,errors=continue. Quota mode: writeback. [ 113.026668][ T21] usb 3-1: SerialNumber: syz [ 113.094165][ T5472] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.116776][ T21] usb 3-1: 0:2 : does not exist [ 113.253258][ T5472] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.511: corrupted inode contents [ 113.270643][ T5472] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #2: comm syz.4.511: mark_inode_dirty error [ 113.283456][ T5472] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #2: comm syz.4.511: corrupted inode contents [ 113.303947][ T5472] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.511: mark_inode_dirty error [ 113.396448][ T1108] usb 3-1: USB disconnect, device number 4 [ 113.972000][ T5520] loop4: detected capacity change from 0 to 64 [ 114.017558][ T5524] loop2: detected capacity change from 0 to 1024 [ 114.103025][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 114.122282][ T5520] hfs: request for non-existent node 16777216 in B*Tree [ 114.184326][ T5520] hfs: request for non-existent node 16777216 in B*Tree [ 114.506057][ T5542] loop4: detected capacity change from 0 to 256 [ 114.578234][ T5542] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 114.618455][ T5542] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 114.639225][ T5542] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 114.665741][ T5542] UDF-fs: Scanning with blocksize 512 failed [ 114.707461][ T5542] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 114.749136][ T5542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.461577][ T5583] loop2: detected capacity change from 0 to 2048 [ 115.553810][ T5583] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.568589][ T4314] udevd[4314]: incorrect nilfs2 checksum on /dev/loop2 [ 115.571203][ T5581] loop0: detected capacity change from 0 to 4096 [ 115.633016][ T5591] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.733431][ T26] audit: type=1800 audit(1743480239.451:17): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.561" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 115.782089][ T5583] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 115.830532][ T5583] Remounting filesystem read-only [ 115.848480][ T26] audit: type=1804 audit(1743480239.491:18): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.561" name="/newroot/91/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 115.870995][ T5583] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 115.883250][ T5583] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 115.910635][ T26] audit: type=1800 audit(1743480239.631:19): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.561" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 115.963584][ T5603] loop1: detected capacity change from 0 to 64 [ 116.049395][ T4177] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 116.316376][ T5587] chnl_net:caif_netlink_parms(): no params data found [ 116.323361][ T5615] loop4: detected capacity change from 0 to 128 [ 116.385111][ T5615] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.397969][ T5620] trusted_key: encrypted_key: insufficient parameters specified [ 116.453047][ T5615] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.625660][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.655977][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.674908][ T5587] device bridge_slave_0 entered promiscuous mode [ 116.727006][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.783900][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.811709][ T5587] device bridge_slave_1 entered promiscuous mode [ 116.953270][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.971238][ T5650] loop1: detected capacity change from 0 to 2048 [ 116.991570][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.068359][ T5650] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 117.105974][ T5650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.162223][ T5587] team0: Port device team_slave_0 added [ 117.183465][ T5587] team0: Port device team_slave_1 added [ 117.186429][ T5650] UDF-fs: unknown compression code (0) [ 117.216591][ T5650] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 117.338317][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.365186][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.439150][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.502912][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.513825][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.600067][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.683905][ T4210] Bluetooth: hci3: command 0x0409 tx timeout [ 117.711886][ T5587] device hsr_slave_0 entered promiscuous mode [ 117.723141][ T5587] device hsr_slave_1 entered promiscuous mode [ 117.734170][ T5587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.746224][ T5587] Cannot create hsr debugfs directory [ 117.862852][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 118.002687][ T5685] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 118.415400][ T5695] loop4: detected capacity change from 0 to 32768 [ 118.462677][ T5695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.603 (5695) [ 118.581576][ T5695] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 118.592136][ T5695] BTRFS info (device loop4): using free space tree [ 118.598973][ T5695] BTRFS info (device loop4): has skinny extents [ 118.680809][ T5587] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.751907][ T5700] device syzkaller1 entered promiscuous mode [ 118.863948][ T5695] BTRFS info (device loop4): enabling ssd optimizations [ 118.964485][ T5703] loop2: detected capacity change from 0 to 32768 [ 119.018380][ T5587] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.040985][ T5699] loop0: detected capacity change from 0 to 32768 [ 119.071354][ T5703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.606 (5703) [ 119.106478][ T5699] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 119.148709][ T5699] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 119.348774][ T5703] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 119.371237][ T5729] loop1: detected capacity change from 0 to 512 [ 119.378164][ T5703] BTRFS info (device loop2): turning on flush-on-commit [ 119.389535][ T5703] BTRFS info (device loop2): doing ref verification [ 119.396731][ T5703] BTRFS info (device loop2): using free space tree [ 119.404299][ T5703] BTRFS info (device loop2): has skinny extents [ 119.503999][ T5729] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.608: inode #1: comm syz.1.608: iget: illegal inode # [ 119.534420][ T5729] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.608: error while reading EA inode 1 err=-117 [ 119.560819][ T5729] EXT4-fs (loop1): 1 orphan inode deleted [ 119.567466][ T5729] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.618681][ T5587] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.645474][ T4171] ocfs2: Unmounting device (7,0) on (node local) [ 119.785064][ T5756] Bluetooth: hci3: command 0x041b tx timeout [ 119.800409][ T5703] BTRFS info (device loop2): enabling ssd optimizations [ 119.924688][ T5587] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.246389][ T5770] program syz.0.613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.334553][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.349061][ T5587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.368483][ T5587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.416338][ T5587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.454597][ T5773] tipc: Started in network mode [ 120.459649][ T5773] tipc: Node identity 7f000001, cluster identity 4711 [ 120.488192][ T5773] tipc: Enabled bearer , priority 10 [ 120.508573][ T5587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.619023][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 120.776329][ T23] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 120.809587][ T23] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 120.859543][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.944768][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 120.977814][ T23] usb 2-1: config 1 has no interface number 0 [ 121.020436][ T5797] device syzkaller1 entered promiscuous mode [ 121.047592][ T23] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 121.064604][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.148705][ T23] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 121.181783][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.275065][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.287743][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.324973][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.364180][ T23] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 121.383277][ T23] snd_usb_pod 2-1:1.1: invalid control EP [ 121.393950][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.413541][ T23] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 121.416761][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.433131][ T23] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 121.452044][ T23] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 121.464027][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.471372][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.626001][ T5785] usb 2-1: USB disconnect, device number 3 [ 121.631673][ T5730] tipc: Node number set to 2130706433 [ 121.669469][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.689296][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.700677][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.711638][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.718798][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.733591][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.787559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.854061][ T5730] Bluetooth: hci3: command 0x040f tx timeout [ 121.865896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.909449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.946236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.985771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.036676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.071357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.096833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.113143][ T5827] loop2: detected capacity change from 0 to 128 [ 122.123022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.132662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.166382][ T5587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.288501][ T5834] loop0: detected capacity change from 0 to 64 [ 122.490732][ T5843] loop2: detected capacity change from 0 to 64 [ 122.598894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.627212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.702914][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.832982][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.857923][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.900837][ T5854] loop0: detected capacity change from 0 to 256 [ 123.017575][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.038950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.109365][ T5587] device veth0_vlan entered promiscuous mode [ 123.134020][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.148062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.187815][ T5587] device veth1_vlan entered promiscuous mode [ 123.196325][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.321919][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.331824][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.366947][ T5587] device veth0_macvtap entered promiscuous mode [ 123.399986][ T5587] device veth1_macvtap entered promiscuous mode [ 123.507420][ T5867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.643'. [ 123.607195][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.637201][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.700453][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.723359][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.736765][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.783893][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.802540][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.830769][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.882749][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.913796][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.933406][ T4205] Bluetooth: hci3: command 0x0419 tx timeout [ 123.987733][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.008519][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.052112][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.087166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.124702][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.203433][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.218734][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.250728][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.272168][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.296987][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.320616][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.344737][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.376722][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.405569][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.428026][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.473074][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.514613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.545328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.577871][ T5587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.579057][ T5868] loop0: detected capacity change from 0 to 32768 [ 124.601425][ T5587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.629533][ T5587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.652781][ T5587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.837249][ T5868] XFS (loop0): Mounting V5 Filesystem [ 124.966854][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.013858][ T5868] XFS (loop0): Ending clean mount [ 125.035083][ T5868] XFS (loop0): Quotacheck needed: Please wait. [ 125.053543][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.104782][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.110391][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.113442][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.144404][ T5868] XFS (loop0): Quotacheck: Done. [ 125.194554][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.359721][ T5888] loop1: detected capacity change from 0 to 32768 [ 125.362316][ T5898] loop2: detected capacity change from 0 to 32768 [ 125.444554][ T5898] XFS: noikeep mount option is deprecated. [ 125.460567][ T5888] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.652 (5888) [ 125.543459][ T5888] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 125.560313][ T5898] XFS (loop2): Mounting V5 Filesystem [ 125.573774][ T5888] BTRFS info (device loop1): setting nodatacow, compression disabled [ 125.596303][ T4171] XFS (loop0): Unmounting Filesystem [ 125.615470][ T5888] BTRFS info (device loop1): setting datacow [ 125.668434][ T5888] BTRFS info (device loop1): doing ref verification [ 125.714425][ T5888] BTRFS info (device loop1): force clearing of disk cache [ 125.740463][ T5898] XFS (loop2): Ending clean mount [ 125.746614][ T5888] BTRFS info (device loop1): turning off barriers [ 125.753285][ T5888] BTRFS info (device loop1): enabling ssd optimizations [ 125.795478][ T5898] XFS (loop2): Quotacheck needed: Please wait. [ 125.801817][ T5888] BTRFS info (device loop1): using spread ssd allocation scheme [ 125.812000][ T5888] BTRFS info (device loop1): use zlib compression, level 3 [ 125.839504][ T5888] BTRFS info (device loop1): using free space tree [ 125.849927][ T5888] BTRFS info (device loop1): has skinny extents [ 126.059650][ T5898] XFS (loop2): Quotacheck: Done. [ 126.103319][ T5888] BTRFS info (device loop1): clearing free space tree [ 126.114769][ T5888] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.177224][ T5888] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.239315][ T4177] XFS (loop2): Unmounting Filesystem [ 126.376334][ T5888] BTRFS info (device loop1): creating free space tree [ 126.389819][ T5947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.661'. [ 126.428527][ T5888] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.463855][ T5888] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.733339][ T26] audit: type=1800 audit(1743480250.451:20): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.652" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 126.798467][ T5941] loop4: detected capacity change from 0 to 32768 [ 126.900972][ T5941] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.658 (5941) [ 126.952365][ T4229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.044199][ T5941] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 127.083459][ T5941] BTRFS info (device loop4): turning on sync discard [ 127.128051][ T5941] BTRFS info (device loop4): setting nodatacow, compression disabled [ 127.173545][ T5941] BTRFS info (device loop4): turning off barriers [ 127.222781][ T5941] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 127.248635][ T5961] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 127.273728][ T5941] BTRFS info (device loop4): trying to use backup root at mount time [ 127.312636][ T5941] BTRFS info (device loop4): metadata ratio 3 [ 127.350001][ T5941] BTRFS info (device loop4): enabling auto defrag [ 127.386888][ T5941] BTRFS info (device loop4): max_inline at 0 [ 127.392947][ T5941] BTRFS info (device loop4): using free space tree [ 127.430154][ T5941] BTRFS info (device loop4): has skinny extents [ 127.529918][ T5961] device syz_tun entered promiscuous mode [ 127.591785][ T5961] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 127.645972][ T5972] loop1: detected capacity change from 0 to 4096 [ 127.774392][ T5972] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 127.778164][ T4229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.813033][ T4263] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 127.900998][ T5941] BTRFS warning (device loop4): failed to read root (objectid=2): -5 [ 127.922595][ T9] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 127.960486][ T4229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.982635][ T5941] BTRFS warning (device loop4): couldn't read tree root [ 127.991505][ T5941] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 128.040171][ T5972] ntfs3: loop1: Failed to load $Extend. [ 128.041786][ T5941] BTRFS warning (device loop4): couldn't read tree root [ 128.080197][ T5941] BTRFS info (device loop4): enabling ssd optimizations [ 128.096557][ T5941] BTRFS info (device loop4): clearing free space tree [ 128.103430][ T5941] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.125698][ T5941] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.158013][ T4229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.210909][ T5941] BTRFS info (device loop4): creating free space tree [ 128.228892][ T5941] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.241314][ T5941] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.606175][ T5981] chnl_net:caif_netlink_parms(): no params data found [ 128.871569][ T5992] loop2: detected capacity change from 0 to 32768 [ 128.944640][ T5992] XFS: attr2 mount option is deprecated. [ 129.054035][ T5992] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 129.486989][ T5992] XFS (loop2): Quotacheck needed: Please wait. [ 129.511642][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.526653][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.552575][ T5981] device bridge_slave_0 entered promiscuous mode [ 129.606651][ T5992] XFS (loop2): Quotacheck: Done. [ 129.652847][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.702613][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.724736][ T4177] XFS (loop2): Unmounting Filesystem [ 129.734981][ T5981] device bridge_slave_1 entered promiscuous mode [ 129.764099][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 129.977679][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.104653][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.258210][ T5981] team0: Port device team_slave_0 added [ 130.318677][ T5981] team0: Port device team_slave_1 added [ 130.383936][ T4208] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.447492][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.457843][ T6057] loop2: detected capacity change from 0 to 2048 [ 130.467176][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.522410][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.571282][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.581787][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.594607][ T6057] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 130.673927][ T4208] usb 1-1: Using ep0 maxpacket: 32 [ 130.701308][ T6057] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.753910][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.824163][ T4208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.851096][ T4208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.866363][ T6071] vimc link validate: Scaler:src:1920x1440 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 130.881228][ T4208] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 130.894900][ T4208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.919613][ T4208] usb 1-1: config 0 descriptor?? [ 131.153342][ T5981] device hsr_slave_0 entered promiscuous mode [ 131.179619][ T5981] device hsr_slave_1 entered promiscuous mode [ 131.187308][ T5981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.195617][ T5981] Cannot create hsr debugfs directory [ 131.314638][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.400090][ T4208] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 131.638771][ T6098] loop4: detected capacity change from 0 to 64 [ 131.710528][ T5790] usb 1-1: USB disconnect, device number 3 [ 131.737054][ T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.753715][ T23] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.793768][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.813547][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 131.825524][ T4229] device hsr_slave_0 left promiscuous mode [ 131.844488][ T5789] Bluetooth: hci3: command 0x041b tx timeout [ 131.861656][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 131.881834][ T4229] device hsr_slave_1 left promiscuous mode [ 131.918669][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.942415][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.011661][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.034068][ T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.051181][ T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.066866][ T23] usb 3-1: Product: syz [ 132.075851][ T23] usb 3-1: Manufacturer: syz [ 132.076378][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.125487][ T4229] device bridge_slave_1 left promiscuous mode [ 132.134646][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.145009][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 132.150262][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 132.186484][ T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 132.200685][ T4229] device bridge_slave_0 left promiscuous mode [ 132.204502][ T23] cdc_wdm 3-1:1.0: Unknown control protocol [ 132.212603][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.322298][ T4229] device veth1_macvtap left promiscuous mode [ 132.335805][ T4229] device veth0_macvtap left promiscuous mode [ 132.368223][ T4229] device veth1_vlan left promiscuous mode [ 132.384420][ T4229] device veth0_vlan left promiscuous mode [ 132.682607][ T4229] team0 (unregistering): Port device team_slave_1 removed [ 132.701313][ T4229] team0 (unregistering): Port device team_slave_0 removed [ 132.718546][ T4229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.745867][ T4229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.841797][ T4229] bond0 (unregistering): Released all slaves [ 132.850074][ T5789] usb 3-1: USB disconnect, device number 5 [ 133.019316][ T6124] device lo entered promiscuous mode [ 133.133189][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.139564][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.196378][ T6130] loop9: detected capacity change from 0 to 4 [ 133.213049][ T6130] Dev loop9: unable to read RDB block 4 [ 133.219365][ T6130] loop9: unable to read partition table [ 133.225929][ T6130] loop9: partition table beyond EOD, truncated [ 133.232255][ T6130] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 133.243742][ T6123] device lo left promiscuous mode [ 133.474492][ T6137] netlink: 'syz.4.704': attribute type 10 has an invalid length. [ 133.526359][ T6137] device syz_tun entered promiscuous mode [ 133.585392][ T6137] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 133.608598][ T1108] kernel write not supported for file bpf-prog (pid: 1108 comm: kworker/1:2) [ 133.923945][ T5789] Bluetooth: hci3: command 0x040f tx timeout [ 134.012400][ T6160] loop1: detected capacity change from 0 to 64 [ 134.113079][ T6160] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 134.139125][ T5981] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.179012][ T5981] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.223865][ T5981] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 134.234608][ T26] audit: type=1804 audit(1743480257.951:21): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.713" name=2F6E6577726F6F742F3135332F66696C65312FE91F7189591E9233614B dev="loop1" ino=3 res=1 errno=0 [ 134.271002][ T5981] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.283758][ T5789] Process accounting resumed [ 134.543051][ T6174] loop9: detected capacity change from 0 to 4 [ 134.577382][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.588766][ T6174] Dev loop9: unable to read RDB block 4 [ 134.602927][ T6174] loop9: unable to read partition table [ 134.618880][ T6174] loop9: partition table beyond EOD, truncated [ 134.655468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.663864][ T6174] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.676024][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.729304][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.813958][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.840398][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.880710][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.887892][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.938596][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 134.959895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.989321][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.036528][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.072529][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.079715][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.114787][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.150529][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.167208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.219728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.259215][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.305314][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.341216][ T6193] netlink: 'syz.1.723': attribute type 10 has an invalid length. [ 135.359396][ T6163] loop2: detected capacity change from 0 to 32768 [ 135.376102][ T6193] device syz_tun entered promiscuous mode [ 135.423527][ T6193] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 135.459268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.487120][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.549125][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.579903][ T6163] XFS (loop2): Mounting V5 Filesystem [ 135.583289][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.596778][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.608433][ T5981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.921325][ T6163] XFS (loop2): Ending clean mount [ 135.985900][ T6163] XFS (loop2): Quotacheck needed: Please wait. [ 136.003824][ T5785] Bluetooth: hci3: command 0x0419 tx timeout [ 136.015958][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 136.161001][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 136.170981][ T6163] XFS (loop2): Quotacheck: Done. [ 136.220174][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.274805][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.332716][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.431500][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.455576][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.502104][ T4177] XFS (loop2): Unmounting Filesystem [ 136.562757][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.597137][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.638309][ T5981] device veth0_vlan entered promiscuous mode [ 136.652333][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.697942][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.731730][ T5981] device veth1_vlan entered promiscuous mode [ 136.805020][ T6252] loop1: detected capacity change from 0 to 1024 [ 136.832590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.851633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.900487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.941003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.003435][ T5981] device veth0_macvtap entered promiscuous mode [ 137.040768][ T5981] device veth1_macvtap entered promiscuous mode [ 137.139986][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.183258][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.252777][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.304511][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.345690][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.387028][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.421159][ T6265] loop0: detected capacity change from 0 to 2048 [ 137.443447][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.500814][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.519270][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.536694][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.562823][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.563885][ T5789] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.590476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.640965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.664977][ T6279] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.674682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.741342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.811404][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.873715][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.884002][ T5789] usb 2-1: Using ep0 maxpacket: 8 [ 137.923807][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.953414][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.976495][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.009308][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.015075][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.045157][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.048104][ T5789] usb 2-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 138.073855][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.073863][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.092474][ T5789] usb 2-1: config 0 descriptor?? [ 138.113715][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.133725][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.152593][ T6271] loop4: detected capacity change from 0 to 32768 [ 138.162553][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.193874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.209300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.239608][ T5981] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.272839][ T5981] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.303716][ T5981] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.328185][ T5981] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.576566][ T5789] asus 0003:0B05:183D.0004: unknown main item tag 0x0 [ 138.606520][ T6301] block nbd2: shutting down sockets [ 138.613930][ T5789] asus 0003:0B05:183D.0004: unknown main item tag 0x0 [ 138.621206][ T5789] asus 0003:0B05:183D.0004: unknown main item tag 0x0 [ 138.640952][ T5984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.654395][ T5789] asus 0003:0B05:183D.0004: unknown main item tag 0x0 [ 138.665724][ T5984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.683116][ T5789] asus 0003:0B05:183D.0004: unknown main item tag 0x0 [ 138.719024][ T5789] asus 0003:0B05:183D.0004: hidraw0: USB HID v0.01 Device [HID 0b05:183d] on usb-dummy_hcd.1-1/input0 [ 138.737935][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.745534][ T5789] asus 0003:0B05:183D.0004: Asus input not registered [ 138.759413][ T5789] asus: probe of 0003:0B05:183D.0004 failed with error -12 [ 138.779662][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.797453][ T5789] usb 2-1: USB disconnect, device number 4 [ 138.803963][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.850180][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.310902][ T5756] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 [ 140.706292][ T6385] loop1: detected capacity change from 0 to 2048 [ 140.788565][ T6385] EXT4-fs (loop1): Ignoring removed oldalloc option [ 140.793849][ T5790] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.861233][ T6385] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,grpjquota=,,errors=continue. Quota mode: none. [ 140.894196][ T6385] EXT4-fs (loop1): shut down requested (2) [ 141.093885][ T5790] usb 3-1: Using ep0 maxpacket: 32 [ 141.111826][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 141.171564][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 141.214079][ T5790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.244746][ T5790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.302975][ T5790] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 141.352827][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.366176][ T5790] usb 3-1: config 0 descriptor?? [ 141.565039][ T6415] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 141.648479][ T6417] loop4: detected capacity change from 0 to 4096 [ 141.770364][ T6417] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 141.860696][ T5790] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 141.969448][ T6407] chnl_net:caif_netlink_parms(): no params data found [ 142.133118][ T4170] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 142.143422][ T5790] usb 3-1: USB disconnect, device number 6 [ 142.149675][ T4170] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 142.174666][ T4170] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 142.270323][ T6437] loop0: detected capacity change from 0 to 512 [ 142.398147][ T6437] EXT4-fs (loop0): Ignoring removed oldalloc option [ 142.436254][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.443366][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.488036][ T6437] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 222 vs 220 free clusters [ 142.516125][ T6447] loop1: detected capacity change from 0 to 128 [ 142.525239][ T6407] device bridge_slave_0 entered promiscuous mode [ 142.560114][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.590603][ T6447] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 142.594322][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.615215][ T6447] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.653738][ T6437] EXT4-fs (loop0): Remounting filesystem read-only [ 142.662026][ T6437] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.792: Parent and EA inode have the same ino 15 [ 142.699541][ T6407] device bridge_slave_1 entered promiscuous mode [ 142.730823][ T6437] EXT4-fs (loop0): Remounting filesystem read-only [ 142.759845][ T6437] EXT4-fs (loop0): 1 orphan inode deleted [ 142.766712][ T6437] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,mb_optimize_scan=0x0000000000000001,. Quota mode: none. [ 142.856033][ T6407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.888874][ T6451] loop2: detected capacity change from 0 to 2048 [ 142.926602][ T6407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.029130][ T6451] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,lazytime,data_err=abort,errors=remount-ro,. Quota mode: writeback. [ 143.141632][ T6458] loop1: detected capacity change from 0 to 4096 [ 143.147052][ T6407] team0: Port device team_slave_0 added [ 143.195392][ T6458] ntfs3: Unknown parameter 'windows_names' [ 143.244268][ T6407] team0: Port device team_slave_1 added [ 143.469794][ T6468] loop2: detected capacity change from 0 to 512 [ 143.482892][ T5788] Bluetooth: hci3: command 0x0409 tx timeout [ 143.539654][ T6468] EXT4-fs (loop2): 1 truncate cleaned up [ 143.550444][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.622828][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.624970][ T6468] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.671288][ T6407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.695611][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.713772][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.730346][ T6468] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.802: invalid indirect mapped block 234881024 (level 0) [ 143.777063][ T6407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.813298][ T6468] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.802: invalid indirect mapped block 16744704 (level 1) [ 143.888037][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 143.944952][ T6407] device hsr_slave_0 entered promiscuous mode [ 144.026928][ T6407] device hsr_slave_1 entered promiscuous mode [ 144.051467][ T6407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.064037][ T6407] Cannot create hsr debugfs directory [ 144.550141][ T6508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.817'. [ 144.581739][ T6507] loop4: detected capacity change from 0 to 1024 [ 144.591343][ T4229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.649932][ T6507] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 144.674463][ T4229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.763048][ T6507] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 144.816598][ T4229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.916848][ T4229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.141416][ T6518] loop2: detected capacity change from 0 to 32768 [ 145.231046][ T6518] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.820 (6518) [ 145.545438][ T6518] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 145.592726][ T6525] loop0: detected capacity change from 0 to 32768 [ 145.597876][ T6518] BTRFS info (device loop2): enabling auto defrag [ 145.611249][ T6525] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.823 (6525) [ 145.628693][ T5785] Bluetooth: hci3: command 0x041b tx timeout [ 145.663833][ T6518] BTRFS info (device loop2): doing ref verification [ 145.733842][ T6518] BTRFS info (device loop2): use no compression [ 145.766349][ T6518] BTRFS info (device loop2): force clearing of disk cache [ 145.838556][ T6518] BTRFS info (device loop2): setting nodatacow, compression disabled [ 145.891105][ T6518] BTRFS info (device loop2): disabling free space tree [ 145.929318][ T6520] loop1: detected capacity change from 0 to 32768 [ 145.957379][ T6518] BTRFS info (device loop2): has skinny extents [ 146.082703][ T6520] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.821 (6520) [ 146.166818][ T6520] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 146.188641][ T6520] BTRFS info (device loop1): using free space tree [ 146.235356][ T6520] BTRFS info (device loop1): has skinny extents [ 146.309981][ T6518] BTRFS info (device loop2): enabling ssd optimizations [ 146.342174][ T6518] BTRFS info (device loop2): clearing free space tree [ 146.369445][ T6518] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.383977][ T6518] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 146.520147][ T6523] loop4: detected capacity change from 0 to 40427 [ 146.662788][ T6520] BTRFS info (device loop1): enabling ssd optimizations [ 146.710985][ T6523] F2FS-fs (loop4): invalid crc value [ 146.729956][ T6520] BTRFS info (device loop1): device stats zeroed by syz.1.821 (6520) [ 146.821179][ T6407] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.857433][ T6407] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.865109][ T6523] F2FS-fs (loop4): Found nat_bits in checkpoint [ 147.008964][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4179) [ 147.036309][ T6523] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 147.120034][ T6523] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 147.585192][ T6407] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 147.624954][ T6407] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.743950][ T5792] Bluetooth: hci3: command 0x040f tx timeout [ 148.033829][ T6594] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.204211][ T6407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.268364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.300676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.330185][ T6594] usb 2-1: Using ep0 maxpacket: 16 [ 148.348025][ T6407] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.457916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.472534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.481889][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.489134][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.529569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.559764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.578754][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.586055][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.612631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.634953][ T6598] loop0: detected capacity change from 0 to 32768 [ 148.640942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.652637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.674092][ T6594] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 148.702709][ T6594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.712776][ T6594] usb 2-1: Product: syz [ 148.717600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.748062][ T6594] usb 2-1: Manufacturer: syz [ 148.763309][ T6594] usb 2-1: SerialNumber: syz [ 148.775930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.801856][ T6598] XFS (loop0): Mounting V5 Filesystem [ 148.815637][ T6594] usb 2-1: config 0 descriptor?? [ 148.840249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.885854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.895924][ T6594] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 148.922934][ T6594] usb 2-1: Detected FT-X [ 148.946752][ T6598] XFS (loop0): Ending clean mount [ 148.957024][ T4229] device hsr_slave_0 left promiscuous mode [ 148.997531][ T4229] device hsr_slave_1 left promiscuous mode [ 149.034428][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.041919][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.121369][ T6594] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 149.131559][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.151505][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.175316][ T4229] device bridge_slave_1 left promiscuous mode [ 149.181582][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.200885][ T4229] device bridge_slave_0 left promiscuous mode [ 149.215519][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.240768][ T4229] device veth1_macvtap left promiscuous mode [ 149.254264][ T4229] device veth0_macvtap left promiscuous mode [ 149.260550][ T4229] device veth1_vlan left promiscuous mode [ 149.275563][ T4229] device veth0_vlan left promiscuous mode [ 149.282682][ T4171] XFS (loop0): Unmounting Filesystem [ 149.583476][ T6632] loop2: detected capacity change from 0 to 32768 [ 149.642471][ T6594] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 149.661682][ T6632] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 149.716001][ T6632] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 149.764632][ T5785] Bluetooth: hci3: command 0x0419 tx timeout [ 149.791303][ T6632] (syz.2.833,6632,1):ocfs2_rename:1282 ERROR: status = -2 [ 149.799598][ T6632] (syz.2.833,6632,1):ocfs2_rename:1687 ERROR: status = -2 [ 149.842386][ T6594] usb 2-1: USB disconnect, device number 5 [ 149.908538][ T4177] ocfs2: Unmounting device (7,2) on (node local) [ 149.917038][ T6594] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 149.959101][ T6594] ftdi_sio 2-1:0.0: device disconnected [ 150.089367][ T6638] loop0: detected capacity change from 0 to 2048 [ 150.106851][ T4229] team0 (unregistering): Port device team_slave_1 removed [ 150.128088][ T4229] team0 (unregistering): Port device team_slave_0 removed [ 150.144747][ T4229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.162680][ T4229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.173473][ T6638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.471604][ T4229] bond0 (unregistering): Released all slaves [ 150.644207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.653121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.683928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.718868][ T6407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.770325][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.789631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.855544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.042348][ T6669] netlink: 132 bytes leftover after parsing attributes in process `syz.2.848'. [ 151.245227][ T6680] loop2: detected capacity change from 0 to 512 [ 151.332459][ T6407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.378622][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.386578][ T6680] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.388282][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.413094][ T6690] loop1: detected capacity change from 0 to 1024 [ 151.424286][ T6680] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.483744][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.549018][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.681754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.758269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.773204][ T26] audit: type=1800 audit(1743480275.491:22): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.856" name="bus" dev="loop1" ino=0 res=0 errno=0 [ 151.805193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.846199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.875279][ T6407] device veth0_vlan entered promiscuous mode [ 151.948501][ T6407] device veth1_vlan entered promiscuous mode [ 152.093367][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.121456][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.152683][ T6407] device veth0_macvtap entered promiscuous mode [ 152.170488][ T6407] device veth1_macvtap entered promiscuous mode [ 152.210870][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.260352][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.283752][ T5756] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 152.315271][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.327652][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.345861][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.382682][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.396644][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.417561][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.432568][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.868'. [ 152.455837][ T6725] loop4: detected capacity change from 0 to 2048 [ 152.456218][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.513620][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.538560][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.550647][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.562107][ T5756] usb 3-1: Using ep0 maxpacket: 16 [ 152.567845][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.578307][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.601059][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.611757][ T6590] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.639961][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.653191][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.666603][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.682996][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.700121][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.711769][ T5756] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 152.735498][ T6725] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 152.739579][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.795805][ T6737] input: syz1 as /devices/virtual/input/input6 [ 152.802697][ T6737] input: failed to attach handler leds to device input6, error: -6 [ 152.862061][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.900447][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.908469][ T5756] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 152.927371][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.936245][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.953712][ T5756] usb 3-1: Product: syz [ 152.959793][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.994110][ T5756] usb 3-1: Manufacturer: syz [ 152.998766][ T5756] usb 3-1: SerialNumber: syz [ 153.021720][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.044156][ T6590] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.052816][ T6590] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 153.069734][ T5756] usb 3-1: config 0 descriptor?? [ 153.075670][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.092280][ T6590] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.115047][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.124446][ T6590] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 153.138286][ T5756] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 153.150933][ T6407] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.177184][ T6407] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.186707][ T5756] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 153.202540][ T6590] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 153.225256][ T6407] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.256800][ T6407] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.392758][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.403752][ T6590] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.426283][ T6590] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.450699][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.470115][ T6590] usb 1-1: Product: syz [ 153.488693][ T6590] usb 1-1: Manufacturer: syz [ 153.496030][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.519069][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.529355][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.544123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.565354][ T6590] cdc_wdm 1-1:1.0: skipping garbage [ 153.571708][ T6590] cdc_wdm 1-1:1.0: skipping garbage [ 153.602172][ T6590] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 153.644179][ T6590] cdc_wdm 1-1:1.0: Unknown control protocol [ 153.794053][ T5756] em28xx 3-1:0.0: chip ID is em2874 [ 153.870456][ T6741] loop1: detected capacity change from 0 to 32768 [ 153.942416][ T6739] loop4: detected capacity change from 0 to 40427 [ 154.031942][ T6741] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 154.053176][ T6739] F2FS-fs (loop4): invalid crc value [ 154.164767][ T6739] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.243294][ T6739] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.338363][ T4166] ocfs2: Unmounting device (7,1) on (node local) [ 154.364591][ T5756] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 154.416937][ T5756] em28xx 3-1:0.0: board has no eeprom [ 154.502958][ T4170] attempt to access beyond end of device [ 154.502958][ T4170] loop4: rw=2049, want=45112, limit=40427 [ 154.594421][ T5756] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 154.602402][ T5756] em28xx 3-1:0.0: dvb set to bulk mode. [ 154.636261][ T1108] em28xx 3-1:0.0: Binding DVB extension [ 154.656626][ T5756] usb 3-1: USB disconnect, device number 7 [ 154.663326][ T5756] em28xx 3-1:0.0: Disconnecting em28xx [ 154.802283][ T1108] em28xx 3-1:0.0: Registering input extension [ 154.943931][ T1108] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 154.950488][ T1108] Registered IR keymap rc-empty [ 155.005978][ T1108] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 155.035264][ T1108] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 155.092391][ T1108] em28xx 3-1:0.0: Input extension successfully initialized [ 155.120499][ T5756] em28xx 3-1:0.0: Closing input extension [ 155.158220][ T6756] loop1: detected capacity change from 0 to 512 [ 155.298393][ T6756] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 155.333807][ T1108] usb 1-1: USB disconnect, device number 4 [ 155.392928][ T6756] EXT4-fs (loop1): orphan cleanup on readonly fs [ 155.404610][ T5756] em28xx 3-1:0.0: Freeing device [ 155.454650][ T6756] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.874: bad orphan inode 15 [ 155.563744][ T6756] ext4_test_bit(bit=14, block=18) = 1 [ 155.569303][ T6756] is_bad_inode(inode)=0 [ 155.573478][ T6756] NEXT_ORPHAN(inode)=1023 [ 155.598712][ T6756] max_ino=32 [ 155.602152][ T6756] i_nlink=0 [ 155.616145][ T6756] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2932: inode #15: comm syz.1.874: corrupted xattr block 19 [ 155.721754][ T6756] EXT4-fs warning (device loop1): ext4_evict_inode:302: xattr delete (err -117) [ 155.765954][ T6756] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.928237][ T6756] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.874: path /199/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 156.198890][ T6775] loop0: detected capacity change from 0 to 8192 [ 156.324889][ T6765] chnl_net:caif_netlink_parms(): no params data found [ 156.368212][ T6775] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 156.411429][ T6775] REISERFS (device loop0): using ordered data mode [ 156.418634][ T6775] reiserfs: using flush barriers [ 156.442074][ T6775] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.534049][ T4229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.538414][ T6775] REISERFS (device loop0): checking transaction log (loop0) [ 156.743110][ T4229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.764399][ T6775] REISERFS (device loop0): Using tea hash to sort names [ 156.778776][ T6775] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 156.790884][ T6800] loop2: detected capacity change from 0 to 64 [ 156.884818][ T4229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.961854][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.970901][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.984079][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.985581][ T6765] device bridge_slave_0 entered promiscuous mode [ 157.025255][ T4229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.082912][ T6765] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.103192][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.142186][ T6765] device bridge_slave_1 entered promiscuous mode [ 157.316377][ T6810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.325863][ T6810] device batadv_slave_1 entered promiscuous mode [ 157.396296][ T6765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.422180][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.455305][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.503485][ T1108] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 157.524930][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.537184][ T6816] misc userio: Begin command sent, but we're already running [ 157.589865][ T6765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.594848][ T1108] usb 5-1: config 0 descriptor?? [ 157.693999][ T6590] Bluetooth: hci3: command 0x0409 tx timeout [ 157.769312][ T6765] team0: Port device team_slave_0 added [ 157.824523][ T6765] team0: Port device team_slave_1 added [ 157.949113][ T6820] loop1: detected capacity change from 0 to 32768 [ 158.039611][ T6820] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.900 (6820) [ 158.097819][ T1108] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 158.110581][ T6820] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 158.124569][ T6820] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 158.126778][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'. [ 158.134732][ T6820] BTRFS info (device loop1): use zstd compression, level 3 [ 158.134763][ T6820] BTRFS info (device loop1): using free space tree [ 158.157491][ T6820] BTRFS info (device loop1): has skinny extents [ 158.180126][ T1108] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 158.204446][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.211468][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.275101][ T1108] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 158.422010][ T6765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.564865][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.580839][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.610078][ T6765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.622624][ T6820] BTRFS info (device loop1): enabling ssd optimizations [ 158.757645][ T6765] device hsr_slave_0 entered promiscuous mode [ 158.798447][ T6765] device hsr_slave_1 entered promiscuous mode [ 158.816798][ T6765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.825000][ T6765] Cannot create hsr debugfs directory [ 159.737230][ T6889] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 159.773957][ T5756] Bluetooth: hci3: command 0x041b tx timeout [ 160.081527][ T5800] usb 5-1: USB disconnect, device number 4 [ 160.104409][ T5800] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 160.128586][ T6913] "syz.2.920" (6913) uses obsolete ecb(arc4) skcipher [ 160.226747][ T6765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 160.298835][ T6765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 160.316623][ T6765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 160.350490][ T6925] loop2: detected capacity change from 0 to 512 [ 160.403100][ T6765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 160.428838][ T6925] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 160.487255][ T6925] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000004,commit=0x0000000000000005,grpjquota=./file0,norecovery,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 160.548830][ T4229] device hsr_slave_0 left promiscuous mode [ 160.554913][ T6594] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 160.556461][ T6925] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.573285][ T4229] device hsr_slave_1 left promiscuous mode [ 160.580307][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.588928][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.599994][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.607734][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.615835][ T4229] device bridge_slave_1 left promiscuous mode [ 160.622196][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.631792][ T4229] device bridge_slave_0 left promiscuous mode [ 160.640126][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.655518][ T4229] device veth1_macvtap left promiscuous mode [ 160.662149][ T4229] device veth0_macvtap left promiscuous mode [ 160.670766][ T4229] device veth1_vlan left promiscuous mode [ 160.679433][ T4229] device veth0_vlan left promiscuous mode [ 160.935593][ T6594] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.964975][ T6594] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 160.998796][ T4229] team0 (unregistering): Port device team_slave_1 removed [ 161.018143][ T4229] team0 (unregistering): Port device team_slave_0 removed [ 161.033877][ T4229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.052568][ T4229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.172214][ T4229] bond0 (unregistering): Released all slaves [ 161.181697][ T6594] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.193880][ T6594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.213087][ T6594] usb 2-1: Product: syz [ 161.219352][ T6594] usb 2-1: Manufacturer: syz [ 161.224171][ T6594] usb 2-1: SerialNumber: syz [ 161.411371][ T6765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.418820][ T6936] loop4: detected capacity change from 0 to 4096 [ 161.436179][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.455032][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.466666][ T6765] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.503032][ T6923] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.510137][ T6936] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 161.540807][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.568015][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.601401][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.608564][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.680461][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.758436][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.781547][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.811347][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.818584][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.843943][ T5790] Bluetooth: hci3: command 0x040f tx timeout [ 161.875322][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.886210][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.917131][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.940632][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.072014][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.091951][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.117092][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.131727][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.169628][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.226564][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.262567][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.375168][ T6765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.424228][ T6594] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 162.474005][ T6594] cdc_ncm 2-1:1.0: bind() failure [ 162.511024][ T6594] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 162.561843][ T6594] cdc_ncm 2-1:1.1: bind() failure [ 162.597863][ T6594] usb 2-1: USB disconnect, device number 6 [ 162.601978][ T6985] syz.0.934[6985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.630457][ T6985] syz.0.934[6985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.820218][ T6993] loop4: detected capacity change from 0 to 256 [ 162.923243][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.931460][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.961832][ T6765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.094122][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.128635][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.182034][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.219686][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.240986][ T7004] loop1: detected capacity change from 0 to 8 [ 163.267112][ T6765] device veth0_vlan entered promiscuous mode [ 163.284714][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.317001][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.371825][ T6765] device veth1_vlan entered promiscuous mode [ 163.447054][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.538792][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.554648][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.577384][ T6765] device veth0_macvtap entered promiscuous mode [ 163.607547][ T6765] device veth1_macvtap entered promiscuous mode [ 163.709846][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.722020][ T7023] loop1: detected capacity change from 0 to 8 [ 163.780016][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.821786][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.884048][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.924055][ T5800] Bluetooth: hci3: command 0x0419 tx timeout [ 163.934080][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.967164][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'. [ 163.972875][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.014025][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.043803][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.064797][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.083794][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.107167][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.142090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.201972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.235970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.285422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.330285][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.357456][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.428537][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.440350][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.480899][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.510505][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.553634][ T7015] loop0: detected capacity change from 0 to 32768 [ 164.578347][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.616159][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.638765][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 164.658305][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.677910][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.698407][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.712353][ T6765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.816272][ T7015] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 164.827393][ T6765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.843854][ T5756] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.876026][ T7015] (syz.0.944,7015,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 164.903826][ T6765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.953901][ T7063] (syz.0.944,7063,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 164.954709][ T6765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.046419][ T7054] bond0: option arp_validate: invalid value (1954183539) [ 165.104571][ T5756] usb 3-1: Using ep0 maxpacket: 8 [ 165.110991][ T4171] ocfs2: Unmounting device (7,0) on (node local) [ 165.254108][ T5756] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 165.279617][ T5756] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.328569][ T5756] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 165.349812][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.361838][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.423829][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.432042][ T5756] usb 3-1: config 0 descriptor?? [ 165.471399][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.499936][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.509626][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.540324][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.827392][ T5756] usbhid 3-1:0.0: can't add hid device: -71 [ 165.837048][ T5756] usbhid: probe of 3-1:0.0 failed with error -71 [ 165.890827][ T5756] usb 3-1: USB disconnect, device number 8 [ 165.925581][ T7087] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.935588][ T7087] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.944406][ T7087] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.953156][ T7087] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.436443][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.968'. [ 166.514501][ T7100] loop4: detected capacity change from 0 to 2048 [ 166.617727][ T7102] loop2: detected capacity change from 0 to 512 [ 166.654043][ T7100] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.678997][ T7100] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.775728][ T7102] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 166.822179][ T7102] EXT4-fs (loop2): orphan cleanup on readonly fs [ 166.841451][ T7100] fs-verity: sha512 using implementation "sha512-avx2" [ 166.873821][ T7102] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 166.874665][ T4229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.936404][ T7089] loop0: detected capacity change from 0 to 40427 [ 166.973515][ T7102] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 166.994265][ T7102] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #16: comm syz.2.970: casefold flag without casefold feature [ 167.021335][ T7102] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.970: couldn't read orphan inode 16 (err -117) [ 167.040237][ T4229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.054649][ T7102] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.116990][ T7089] F2FS-fs (loop0): Found nat_bits in checkpoint [ 167.173167][ T4229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.218896][ T7102] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.970: corrupted xattr block 19 [ 167.235213][ T7089] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 167.276873][ T4229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.845254][ T26] audit: type=1800 audit(1743480291.571:23): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.970" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 167.872950][ T7130] loop0: detected capacity change from 0 to 64 [ 168.143727][ T26] audit: type=1800 audit(1743480291.861:24): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.972" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 168.245724][ T7135] loop4: detected capacity change from 0 to 32768 [ 168.329241][ T7135] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.977 (7135) [ 168.393999][ T7135] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 168.402758][ T7135] BTRFS info (device loop4): turning on async discard [ 168.409768][ T7135] BTRFS info (device loop4): using free space tree [ 168.416363][ T7135] BTRFS info (device loop4): has skinny extents [ 168.497469][ T7145] loop1: detected capacity change from 0 to 4096 [ 168.810258][ T7135] BTRFS info (device loop4): enabling ssd optimizations [ 168.853909][ T26] audit: type=1800 audit(1743480292.571:25): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.977" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 168.913161][ T7184] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 168.985674][ T4166] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 168.997521][ T7136] chnl_net:caif_netlink_parms(): no params data found [ 169.006880][ T4166] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 169.338668][ T7192] loop2: detected capacity change from 0 to 128 [ 169.625431][ T7192] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.637486][ T7192] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.964712][ T7136] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.972003][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.055449][ T7136] device bridge_slave_0 entered promiscuous mode [ 170.084450][ T7188] loop1: detected capacity change from 0 to 32768 [ 170.179474][ T7188] [ 170.179474][ T7188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.179474][ T7188] [ 170.197702][ T7136] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.214602][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.223200][ T7136] device bridge_slave_1 entered promiscuous mode [ 170.244197][ T5756] Bluetooth: hci3: command 0x0409 tx timeout [ 170.316630][ T7188] ERROR: (device loop1): diWrite: ixpxd invalid [ 170.316630][ T7188] [ 170.363481][ T7188] ERROR: (device loop1): txCommit: [ 170.363481][ T7188] [ 170.386816][ T4229] device hsr_slave_0 left promiscuous mode [ 170.408160][ T4229] device hsr_slave_1 left promiscuous mode [ 170.424813][ T7188] [ 170.424813][ T7188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.424813][ T7188] [ 170.446574][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.454443][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.465010][ T7188] [ 170.465010][ T7188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.465010][ T7188] [ 170.466460][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'. [ 170.488878][ T1111] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.489565][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.506106][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.533478][ T4166] [ 170.533478][ T4166] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.533478][ T4166] [ 170.533578][ T4229] device bridge_slave_1 left promiscuous mode [ 170.550749][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.560886][ T4229] device bridge_slave_0 left promiscuous mode [ 170.567550][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.577071][ T4166] [ 170.577071][ T4166] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.577071][ T4166] [ 170.598003][ T4229] device veth1_macvtap left promiscuous mode [ 170.604842][ T4229] device veth0_macvtap left promiscuous mode [ 170.611111][ T4229] device veth1_vlan left promiscuous mode [ 170.617810][ T4229] device veth0_vlan left promiscuous mode [ 171.116896][ T4229] team0 (unregistering): Port device team_slave_1 removed [ 171.146071][ T4229] team0 (unregistering): Port device team_slave_0 removed [ 171.197183][ T4229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.222528][ T4229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.410079][ T4229] bond0 (unregistering): Released all slaves [ 171.506128][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.994'. [ 171.515359][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.994'. [ 171.538171][ T7223] device netdevsim0 entered promiscuous mode [ 171.545838][ T7223] device netdevsim0 left promiscuous mode [ 171.634396][ T7136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.695723][ T7136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.810610][ T7136] team0: Port device team_slave_0 added [ 171.874887][ T7136] team0: Port device team_slave_1 added [ 172.067194][ T7136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.104316][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.280520][ T7136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.330944][ T6590] Bluetooth: hci3: command 0x041b tx timeout [ 172.360516][ T7136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.398671][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.481480][ T7136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.574177][ T4208] Bluetooth: hci0: command 0x080f tx timeout [ 172.688579][ T7287] netlink: 'syz.0.1015': attribute type 11 has an invalid length. [ 172.726679][ T7289] loop4: detected capacity change from 0 to 512 [ 172.769772][ T7136] device hsr_slave_0 entered promiscuous mode [ 172.814463][ T7136] device hsr_slave_1 entered promiscuous mode [ 172.822938][ T7136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.846408][ T7136] Cannot create hsr debugfs directory [ 172.947165][ T7289] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback. [ 173.018070][ T7289] ext4 filesystem being mounted at /226/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.043539][ T7256] loop1: detected capacity change from 0 to 32768 [ 173.062548][ T7297] syz.0.1019[7297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.062660][ T7297] syz.0.1019[7297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.094767][ T7289] EXT4-fs error (device loop4): __ext4_new_inode:1286: comm syz.4.1017: failed to insert inode 16: doubly allocated? [ 173.228194][ T7256] XFS (loop1): Mounting V5 Filesystem [ 173.401144][ T7312] ptrace attach of "./syz-executor exec"[4171] was attempted by ""[7312] [ 173.432078][ T7256] XFS (loop1): Ending clean mount [ 173.629519][ T7316] loop0: detected capacity change from 0 to 2048 [ 173.722977][ T4210] libceph: connect (1)[c::]:6789 error -101 [ 173.731407][ T4166] XFS (loop1): Unmounting Filesystem [ 173.731975][ T4210] libceph: mon0 (1)[c::]:6789 connect error [ 173.748610][ T7318] ceph: No mds server is up or the cluster is laggy [ 173.758666][ T4210] libceph: connect (1)[c::]:6789 error -101 [ 173.768585][ T4210] libceph: mon0 (1)[c::]:6789 connect error [ 173.787249][ T7316] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.823927][ T7316] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.069361][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 174.076123][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 174.428499][ T4208] Bluetooth: hci3: command 0x040f tx timeout [ 174.544738][ T7350] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1032'. [ 174.592531][ T7350] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 174.747514][ T7136] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.795368][ T7136] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.844157][ T7136] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.885506][ T7136] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.977531][ T7357] loop0: detected capacity change from 0 to 4096 [ 175.249793][ T7136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.330123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.363363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.436632][ T7136] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.496027][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.525954][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.559748][ T7379] loop0: detected capacity change from 0 to 256 [ 175.570511][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.577724][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.590707][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.642998][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.649902][ T7379] exFAT-fs (loop0): failed to load upcase table [ 175.657964][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.674729][ T7379] exFAT-fs (loop0): failed to recognize exfat type [ 175.689133][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.696321][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.742875][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.782256][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.824543][ T7387] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 175.832330][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1043'. [ 175.853707][ T1108] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.902762][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.915464][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.934730][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.974419][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.011126][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.055226][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.080308][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.107116][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.129864][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 176.164755][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.175450][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.275651][ T1108] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 176.295753][ T1108] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.368440][ T1108] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.400698][ T1108] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.441136][ T1108] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.463852][ T2284] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.511463][ T1108] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.553854][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.564104][ T4208] Bluetooth: hci3: command 0x0419 tx timeout [ 176.633772][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.641352][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.679122][ T7136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.755228][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.759916][ T7390] loop2: detected capacity change from 0 to 32768 [ 176.771775][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.833421][ T7424] loop4: detected capacity change from 0 to 64 [ 176.843914][ T1108] usb 2-1: usb_control_msg returned -32 [ 176.849529][ T1108] usbtmc 2-1:16.0: can't read capabilities [ 176.854342][ T2284] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 176.858275][ T7136] device veth0_vlan entered promiscuous mode [ 176.876674][ T2284] usb 1-1: config 0 has an invalid descriptor of length 17, skipping remainder of the config [ 176.903613][ T2284] usb 1-1: config 0 has no interface number 0 [ 176.910129][ T2284] usb 1-1: config 0 interface 244 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.932810][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.940908][ T7390] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 176.960503][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.012593][ T26] audit: type=1804 audit(1743480300.731:26): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1051" name="/newroot/236/file1/file1" dev="loop4" ino=3 res=1 errno=0 [ 177.056479][ T7136] device veth1_vlan entered promiscuous mode [ 177.094034][ T2284] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=92.c2 [ 177.108239][ T2284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.124517][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.125005][ T2284] usb 1-1: Product: syz [ 177.144568][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.147020][ T2284] usb 1-1: Manufacturer: syz [ 177.161190][ T7390] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 177.170504][ T2284] usb 1-1: SerialNumber: syz [ 177.172608][ T2284] usb 1-1: config 0 descriptor?? [ 177.184957][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.243999][ T7433] usbtmc 2-1:16.0: control status returned 0 [ 177.255175][ T2284] usbserial_generic 1-1:0.244: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 177.276646][ T2284] usbserial_generic 1-1:0.244: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 177.308336][ T2284] usbserial_generic 1-1:0.244: device has no bulk endpoints [ 177.311704][ T1239] (kworker/u4:4,1239,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=67108936, rec_len=0, name_len=0 [ 177.339134][ T2284] safe_serial 1-1:0.244: safe_serial converter detected [ 177.361302][ T2284] safe_serial: probe of 1-1:0.244 failed with error -22 [ 177.386755][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.414176][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.469731][ T4210] usb 2-1: USB disconnect, device number 7 [ 177.479368][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.514890][ T7136] device veth0_macvtap entered promiscuous mode [ 177.554097][ T7136] device veth1_macvtap entered promiscuous mode [ 177.575073][ T1111] usb 1-1: USB disconnect, device number 5 [ 177.604655][ T4177] ocfs2: Unmounting device (7,2) on (node local) [ 177.627947][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.669253][ T7440] loop4: detected capacity change from 0 to 8192 [ 177.679452][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.700356][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.718219][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.743729][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.754524][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.764647][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.783690][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.798514][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.812624][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.824654][ T7136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.832053][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.851522][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.899131][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.914390][ T7440] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 177.923949][ T7440] REISERFS (device loop4): using ordered data mode [ 177.930572][ T7440] reiserfs: using flush barriers [ 177.938695][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.950999][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.951149][ T7440] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.961030][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.961054][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.961066][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.961081][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.961092][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.961105][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.962682][ T7136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.048819][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.058181][ T7440] REISERFS (device loop4): checking transaction log (loop4) [ 178.084883][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.159940][ T7136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.205913][ T7136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.232436][ T7136] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.301940][ T7136] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.323547][ T7440] REISERFS (device loop4): Using tea hash to sort names [ 178.354256][ T7440] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 178.486757][ T7464] loop2: detected capacity change from 0 to 64 [ 178.587129][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.613971][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.678958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.733191][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.811672][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.852739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.496477][ T7495] loop2: detected capacity change from 0 to 1768 [ 179.774897][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 179.840817][ T7516] device bridge_slave_1 left promiscuous mode [ 179.887239][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.953248][ T7521] loop0: detected capacity change from 0 to 1024 [ 179.986884][ T7516] device bridge_slave_0 left promiscuous mode [ 180.013311][ T7525] loop1: detected capacity change from 0 to 2048 [ 180.015122][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.048308][ T7521] EXT4-fs (loop0): Ignoring removed orlov option [ 180.091564][ T7525] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.129006][ T7521] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,discard,nojournal_checksum,orlov,,errors=continue. Quota mode: none. [ 180.203587][ T7521] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #11: comm syz.0.1073: directory missing '..' [ 180.322063][ T4229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.652230][ T4229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.751279][ T4229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.812181][ T4229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.863616][ T7533] loop2: detected capacity change from 0 to 40427 [ 180.923169][ T7533] F2FS-fs (loop2): invalid crc value [ 180.946849][ T7540] loop1: detected capacity change from 0 to 32768 [ 180.962051][ T7533] F2FS-fs (loop2): Found nat_bits in checkpoint [ 181.082507][ T7533] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 181.147152][ T7540] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 181.181356][ T7540] [ 181.183831][ T7540] ====================================================== [ 181.190858][ T7540] WARNING: possible circular locking dependency detected [ 181.198005][ T7540] 5.15.179-syzkaller #0 Not tainted [ 181.203216][ T7540] ------------------------------------------------------ [ 181.210247][ T7540] syz.1.1077/7540 is trying to acquire lock: [ 181.216240][ T7540] ffff88805f89c2c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 181.229510][ T7540] [ 181.229510][ T7540] but task is already holding lock: [ 181.236888][ T7540] ffff88807512dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 181.246453][ T7540] [ 181.246453][ T7540] which lock already depends on the new lock. [ 181.246453][ T7540] [ 181.256883][ T7540] [ 181.256883][ T7540] the existing dependency chain (in reverse order) is: [ 181.265909][ T7540] [ 181.265909][ T7540] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 181.273770][ T7540] lock_acquire+0x1db/0x4f0 [ 181.278823][ T7540] down_read+0x45/0x2e0 [ 181.283529][ T7540] ocfs2_init_acl+0x398/0x930 [ 181.288752][ T7540] ocfs2_mknod+0x1e8f/0x2cd0 [ 181.293885][ T7540] ocfs2_mkdir+0x194/0x430 [ 181.298844][ T7540] vfs_mkdir+0x3b6/0x590 [ 181.303631][ T7540] do_mkdirat+0x260/0x520 [ 181.308501][ T7540] __x64_sys_mkdirat+0x85/0x90 [ 181.313810][ T7540] do_syscall_64+0x3b/0xb0 [ 181.318773][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.325235][ T7540] [ 181.325235][ T7540] -> #4 (jbd2_handle){++++}-{0:0}: [ 181.332562][ T7540] lock_acquire+0x1db/0x4f0 [ 181.337609][ T7540] start_this_handle+0x12e1/0x1570 [ 181.343274][ T7540] jbd2__journal_start+0x2d1/0x5c0 [ 181.348935][ T7540] jbd2_journal_start+0x25/0x30 [ 181.354342][ T7540] ocfs2_start_trans+0x3c2/0x6f0 [ 181.359830][ T7540] ocfs2_mknod+0x15bb/0x2cd0 [ 181.364972][ T7540] ocfs2_create+0x194/0x430 [ 181.370015][ T7540] path_openat+0x130a/0x2f20 [ 181.375144][ T7540] do_filp_open+0x21c/0x460 [ 181.380211][ T7540] do_sys_openat2+0x13b/0x4f0 [ 181.385432][ T7540] __x64_sys_open+0x221/0x270 [ 181.390652][ T7540] do_syscall_64+0x3b/0xb0 [ 181.395613][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.402056][ T7540] [ 181.402056][ T7540] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 181.410597][ T7540] lock_acquire+0x1db/0x4f0 [ 181.415649][ T7540] down_read+0x45/0x2e0 [ 181.420365][ T7540] ocfs2_start_trans+0x3b7/0x6f0 [ 181.426007][ T7540] ocfs2_mknod+0x15bb/0x2cd0 [ 181.431183][ T7540] ocfs2_create+0x194/0x430 [ 181.436236][ T7540] path_openat+0x130a/0x2f20 [ 181.441373][ T7540] do_filp_open+0x21c/0x460 [ 181.446425][ T7540] do_sys_openat2+0x13b/0x4f0 [ 181.451694][ T7540] __x64_sys_open+0x221/0x270 [ 181.457038][ T7540] do_syscall_64+0x3b/0xb0 [ 181.462000][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.468467][ T7540] [ 181.468467][ T7540] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 181.475979][ T7540] lock_acquire+0x1db/0x4f0 [ 181.481170][ T7540] ocfs2_start_trans+0x2b2/0x6f0 [ 181.486697][ T7540] ocfs2_mknod+0x15bb/0x2cd0 [ 181.491877][ T7540] ocfs2_create+0x194/0x430 [ 181.497019][ T7540] path_openat+0x130a/0x2f20 [ 181.502149][ T7540] do_filp_open+0x21c/0x460 [ 181.507189][ T7540] do_sys_openat2+0x13b/0x4f0 [ 181.512413][ T7540] __x64_sys_open+0x221/0x270 [ 181.517638][ T7540] do_syscall_64+0x3b/0xb0 [ 181.522611][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.529233][ T7540] [ 181.529233][ T7540] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 181.539783][ T7540] lock_acquire+0x1db/0x4f0 [ 181.544838][ T7540] down_write+0x38/0x60 [ 181.549545][ T7540] ocfs2_reserve_local_alloc_bits+0x12e/0x27a0 [ 181.556250][ T7540] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 181.563220][ T7540] ocfs2_mknod+0x1535/0x2cd0 [ 181.568379][ T7540] ocfs2_create+0x194/0x430 [ 181.573432][ T7540] path_openat+0x130a/0x2f20 [ 181.578566][ T7540] do_filp_open+0x21c/0x460 [ 181.583630][ T7540] do_sys_openat2+0x13b/0x4f0 [ 181.588845][ T7540] __x64_sys_open+0x221/0x270 [ 181.594073][ T7540] do_syscall_64+0x3b/0xb0 [ 181.599198][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.605649][ T7540] [ 181.605649][ T7540] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 181.616206][ T7540] validate_chain+0x1649/0x5930 [ 181.621650][ T7540] __lock_acquire+0x1295/0x1ff0 [ 181.627055][ T7540] lock_acquire+0x1db/0x4f0 [ 181.632116][ T7540] down_write+0x38/0x60 [ 181.636860][ T7540] ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 181.643300][ T7540] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 181.650187][ T7540] ocfs2_init_xattr_set_ctxt+0x38f/0x8c0 [ 181.656366][ T7540] ocfs2_xattr_set+0xf46/0x1930 [ 181.661762][ T7540] ocfs2_set_acl+0x4cb/0x570 [ 181.666907][ T7540] ocfs2_iop_set_acl+0x252/0x3c0 [ 181.672396][ T7540] posix_acl_xattr_set+0x33b/0x3a0 [ 181.678254][ T7540] __vfs_setxattr+0x3e7/0x420 [ 181.683484][ T7540] __vfs_setxattr_noperm+0x12a/0x5e0 [ 181.689323][ T7540] vfs_setxattr+0x21d/0x420 [ 181.694378][ T7540] setxattr+0x27e/0x2e0 [ 181.699081][ T7540] __se_sys_fsetxattr+0x194/0x210 [ 181.704664][ T7540] do_syscall_64+0x3b/0xb0 [ 181.709714][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.716161][ T7540] [ 181.716161][ T7540] other info that might help us debug this: [ 181.716161][ T7540] [ 181.726405][ T7540] Chain exists of: [ 181.726405][ T7540] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> jbd2_handle --> &oi->ip_xattr_sem [ 181.726405][ T7540] [ 181.742215][ T7540] Possible unsafe locking scenario: [ 181.742215][ T7540] [ 181.749682][ T7540] CPU0 CPU1 [ 181.755073][ T7540] ---- ---- [ 181.760460][ T7540] lock(&oi->ip_xattr_sem); [ 181.765070][ T7540] lock(jbd2_handle); [ 181.771682][ T7540] lock(&oi->ip_xattr_sem); [ 181.778815][ T7540] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 181.786133][ T7540] [ 181.786133][ T7540] *** DEADLOCK *** [ 181.786133][ T7540] [ 181.794288][ T7540] 3 locks held by syz.1.1077/7540: [ 181.799412][ T7540] #0: ffff888024b38460 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 181.809214][ T7540] #1: ffff88807512df48 (&type->i_mutex_dir_key#17){+.+.}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 181.819529][ T7540] #2: ffff88807512dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 181.829492][ T7540] [ 181.829492][ T7540] stack backtrace: [ 181.835405][ T7540] CPU: 0 PID: 7540 Comm: syz.1.1077 Not tainted 5.15.179-syzkaller #0 [ 181.843587][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.853676][ T7540] Call Trace: [ 181.856978][ T7540] [ 181.859933][ T7540] dump_stack_lvl+0x1e3/0x2d0 [ 181.864641][ T7540] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 181.870306][ T7540] ? print_circular_bug+0x12b/0x1a0 [ 181.875532][ T7540] check_noncircular+0x2f8/0x3b0 [ 181.880517][ T7540] ? add_chain_block+0x850/0x850 [ 181.885480][ T7540] ? lockdep_lock+0x11f/0x2a0 [ 181.890184][ T7540] ? __lock_acquire+0x1295/0x1ff0 [ 181.895240][ T7540] validate_chain+0x1649/0x5930 [ 181.900132][ T7540] ? mark_lock+0x98/0x340 [ 181.904484][ T7540] ? reacquire_held_locks+0x660/0x660 [ 181.909896][ T7540] ? ocfs2_get_system_file_inode+0x1e0/0x7b0 [ 181.915957][ T7540] ? look_up_lock_class+0x77/0x120 [ 181.921104][ T7540] ? register_lock_class+0x100/0x9a0 [ 181.926432][ T7540] ? is_dynamic_key+0x1f0/0x1f0 [ 181.931310][ T7540] ? mark_lock+0x98/0x340 [ 181.935666][ T7540] __lock_acquire+0x1295/0x1ff0 [ 181.940551][ T7540] lock_acquire+0x1db/0x4f0 [ 181.945075][ T7540] ? ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 181.951175][ T7540] ? read_lock_is_recursive+0x10/0x10 [ 181.956584][ T7540] ? __might_sleep+0xc0/0xc0 [ 181.961202][ T7540] ? __lock_acquire+0x1295/0x1ff0 [ 181.966258][ T7540] down_write+0x38/0x60 [ 181.970441][ T7540] ? ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 181.976536][ T7540] ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 181.982467][ T7540] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 181.988482][ T7540] ? print_irqtrace_events+0x210/0x210 [ 181.993987][ T7540] ? do_raw_spin_unlock+0x137/0x8b0 [ 181.999226][ T7540] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 182.005233][ T7540] ? lockdep_hardirqs_on+0x94/0x130 [ 182.010468][ T7540] ? ocfs2_block_group_search+0x490/0x490 [ 182.016218][ T7540] ? stack_trace_save+0x113/0x1c0 [ 182.021280][ T7540] ? stack_trace_snprint+0xe0/0xe0 [ 182.026415][ T7540] ? __lock_acquire+0x1295/0x1ff0 [ 182.031496][ T7540] ? stack_depot_save+0x3db/0x440 [ 182.036550][ T7540] ? ____kasan_kmalloc+0xd1/0xf0 [ 182.041509][ T7540] ? ____kasan_kmalloc+0xba/0xf0 [ 182.046559][ T7540] ? kmem_cache_alloc_trace+0x143/0x290 [ 182.052137][ T7540] ? ocfs2_reserve_new_metadata_blocks+0x113/0x9b0 [ 182.058672][ T7540] ? ocfs2_init_xattr_set_ctxt+0x38f/0x8c0 [ 182.064508][ T7540] ? ocfs2_xattr_set+0xf46/0x1930 [ 182.069554][ T7540] ? ocfs2_set_acl+0x4cb/0x570 [ 182.074343][ T7540] ? ocfs2_iop_set_acl+0x252/0x3c0 [ 182.079480][ T7540] ? posix_acl_xattr_set+0x33b/0x3a0 [ 182.084794][ T7540] ? __vfs_setxattr+0x3e7/0x420 [ 182.089671][ T7540] ? __vfs_setxattr_noperm+0x12a/0x5e0 [ 182.095166][ T7540] ? vfs_setxattr+0x21d/0x420 [ 182.099883][ T7540] ? setxattr+0x27e/0x2e0 [ 182.104242][ T7540] ? __se_sys_fsetxattr+0x194/0x210 [ 182.109463][ T7540] ? do_syscall_64+0x3b/0xb0 [ 182.114078][ T7540] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.120197][ T7540] ? ocfs2_reserve_new_metadata_blocks+0x113/0x9b0 [ 182.126733][ T7540] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 182.133095][ T7540] ? ocfs2_init_steal_slots+0x150/0x150 [ 182.138673][ T7540] ? ocfs2_xattr_block_set+0x32a0/0x32a0 [ 182.144339][ T7540] ? ocfs2_xattr_set+0xef8/0x1930 [ 182.149915][ T7540] ocfs2_init_xattr_set_ctxt+0x38f/0x8c0 [ 182.155576][ T7540] ? ocfs2_prepare_refcount_xattr+0x1220/0x1220 [ 182.161950][ T7540] ? up_write+0x19d/0x580 [ 182.166321][ T7540] ? ocfs2_remove_btree_range+0x18a0/0x18a0 [ 182.172242][ T7540] ? __up_read+0x690/0x690 [ 182.176689][ T7540] ? ocfs2_xattr_set+0x4d1/0x1930 [ 182.181738][ T7540] ocfs2_xattr_set+0xf46/0x1930 [ 182.186611][ T7540] ? print_irqtrace_events+0x210/0x210 [ 182.192105][ T7540] ? __ocfs2_xattr_set_handle+0x1060/0x1060 [ 182.198028][ T7540] ? stack_trace_save+0x113/0x1c0 [ 182.203099][ T7540] ? ____kasan_kmalloc+0xba/0xf0 [ 182.208088][ T7540] ? __kmalloc+0x168/0x300 [ 182.212633][ T7540] ? ocfs2_set_acl+0x11b/0x570 [ 182.217423][ T7540] ? ocfs2_iop_set_acl+0x252/0x3c0 [ 182.222566][ T7540] ? __se_sys_fsetxattr+0x194/0x210 [ 182.227796][ T7540] ? do_syscall_64+0x3b/0xb0 [ 182.232547][ T7540] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.238706][ T7540] ? __kmalloc+0x168/0x300 [ 182.243153][ T7540] ? ocfs2_set_acl+0x11b/0x570 [ 182.247941][ T7540] ocfs2_set_acl+0x4cb/0x570 [ 182.252563][ T7540] ocfs2_iop_set_acl+0x252/0x3c0 [ 182.257581][ T7540] ? ocfs2_xattr_get+0x2b0/0x2b0 [ 182.262641][ T7540] ? posix_acl_valid+0x329/0x3b0 [ 182.267613][ T7540] posix_acl_xattr_set+0x33b/0x3a0 [ 182.272752][ T7540] ? posix_acl_xattr_get+0x560/0x560 [ 182.278160][ T7540] __vfs_setxattr+0x3e7/0x420 [ 182.282873][ T7540] __vfs_setxattr_noperm+0x12a/0x5e0 [ 182.288192][ T7540] vfs_setxattr+0x21d/0x420 [ 182.292725][ T7540] ? xattr_permission+0x4f0/0x4f0 [ 182.297781][ T7540] ? __might_fault+0xb4/0x110 [ 182.302492][ T7540] ? _copy_from_user+0x10f/0x170 [ 182.307497][ T7540] ? posix_acl_fix_xattr_from_user+0xd4/0x120 [ 182.313598][ T7540] setxattr+0x27e/0x2e0 [ 182.317785][ T7540] ? path_setxattr+0x2a0/0x2a0 [ 182.322599][ T7540] ? preempt_count_add+0x8f/0x180 [ 182.327658][ T7540] ? __mnt_want_write+0x1e6/0x260 [ 182.332847][ T7540] __se_sys_fsetxattr+0x194/0x210 [ 182.337932][ T7540] do_syscall_64+0x3b/0xb0 [ 182.342380][ T7540] ? clear_bhb_loop+0x15/0x70 [ 182.347095][ T7540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.353021][ T7540] RIP: 0033:0x7f8e1a966169 [ 182.357467][ T7540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.377095][ T7540] RSP: 002b:00007f8e187cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 182.385548][ T7540] RAX: ffffffffffffffda RBX: 00007f8e1ab7efa0 RCX: 00007f8e1a966169 [ 182.393555][ T7540] RDX: 0000200000000140 RSI: 0000200000000000 RDI: 0000000000000004 SYZFAIL: failed to send rpc fd=3 want=696 sent=0 n=-1 (errno 32: Broken pipe) [ 182.401553][ T7540] RBP: 00007f8e1a9e72a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.409549][ T7540] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 182.417564][ T7540] R13: 0000000000000000 R14: 00007f8e1ab7efa0 R15: 00007ffcd4d59ca8 [ 182.425570][ T7540] [ 182.434362][ T4177] attempt to access beyond end of device [ 182.434362][ T4177] loop2: rw=2049, want=45104, limit=40427 [ 182.633423][ T4170] bond0: (slave syz_tun): Releasing backup interface [ 182.945661][ T4171] bond0: (slave syz_tun): Releasing backup interface [ 183.000656][ T7539] bond0: (slave syz_tun): Releasing backup interface [ 183.166064][ T7539] ocfs2: Unmounting device (7,1) on (node local) [ 183.240529][ T7626] chnl_net:caif_netlink_parms(): no params data found [ 183.338741][ T7626] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.346268][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.354520][ T7626] device bridge_slave_0 entered promiscuous mode [ 183.362667][ T7626] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.371019][ T7626] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.380951][ T7626] device bridge_slave_1 entered promiscuous mode [ 183.452533][ T7626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.489289][ T7626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.517373][ T4229] device hsr_slave_0 left promiscuous mode [ 183.536420][ T4229] device hsr_slave_1 left promiscuous mode [ 183.542831][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.550644][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.558450][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.565978][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.573859][ T4229] device bridge_slave_1 left promiscuous mode [ 183.580205][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.588370][ T4229] device bridge_slave_0 left promiscuous mode [ 183.594819][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.607674][ T4229] device veth1_macvtap left promiscuous mode [ 183.614608][ T4229] device veth0_macvtap left promiscuous mode [ 183.620634][ T4229] device veth1_vlan left promiscuous mode [ 183.626517][ T4229] device veth0_vlan left promiscuous mode [ 183.738066][ T4229] team0 (unregistering): Port device team_slave_1 removed [ 183.751701][ T4229] team0 (unregistering): Port device team_slave_0 removed [ 183.764667][ T4229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.778012][ T4229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.829242][ T4229] bond0 (unregistering): Released all slaves [ 183.877860][ T7626] team0: Port device team_slave_0 added [ 183.888138][ T7626] team0: Port device team_slave_1 added [ 183.907198][ T7626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.914338][ T7626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.940682][ T7626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.970519][ T7626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.977793][ T7626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.031850][ T7626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.066533][ T7626] device hsr_slave_0 entered promiscuous mode [ 184.073302][ T7626] device hsr_slave_1 entered promiscuous mode [ 184.081438][ T7626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.089719][ T7626] Cannot create hsr debugfs directory [ 184.620294][ T7626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.631013][ T7626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.656740][ T7626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.676611][ T7626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.777098][ T7626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.793206][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.807595][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.820858][ T7626] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.831538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.844447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.853093][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.860195][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.880575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.888196][ T4208] Bluetooth: hci2: command 0x0409 tx timeout [ 184.897906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.907753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.921329][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.928449][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.940033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.951361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.978919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.988128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.002268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.012735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.025407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.036825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.048369][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.059545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.161827][ T4229] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.187830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.197103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.215365][ T7626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.240048][ T4229] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.263909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.272680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.290078][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.301845][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.312513][ T7626] device veth0_vlan entered promiscuous mode [ 185.322311][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.331839][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.347063][ T4229] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.362849][ T7626] device veth1_vlan entered promiscuous mode [ 185.385970][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.394442][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.402561][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.412165][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.423535][ T7626] device veth0_macvtap entered promiscuous mode [ 185.439310][ T4229] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.454219][ T7626] device veth1_macvtap entered promiscuous mode [ 185.479611][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.493063][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.503243][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.516770][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.530259][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.543797][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.554182][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.564661][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.574537][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.585988][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.597127][ T7626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.617351][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.626714][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.634988][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.644094][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.654470][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.667564][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.678011][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.690859][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.702534][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.713373][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.723728][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.735046][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.746599][ T7626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.774599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.787655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.800399][ T7626] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.810136][ T7626] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.819232][ T7626] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.828485][ T7626] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.850759][ T4229] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.888650][ T7626] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 185.907792][ T4229] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.932561][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.938149][ T7626] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 185.946419][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.966275][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.966778][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.982171][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.996595][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.010945][ T4229] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.087277][ T4229] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.195420][ T4229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.208296][ T4229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.298712][ T4229] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.310988][ T4229] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.347801][ T4229] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.358248][ T4229] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.451549][ T4229] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.462050][ T4229] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.575835][ T4229] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.617689][ T4229] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.671171][ T4229] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.707798][ T4229] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.880065][ T4229] tipc: Disabling bearer [ 186.887331][ T4229] tipc: Left network mode [ 188.147546][ T4229] device hsr_slave_0 left promiscuous mode [ 188.156155][ T4229] device hsr_slave_1 left promiscuous mode [ 188.166379][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.173909][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.182163][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.190388][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.199310][ T4229] device bridge_slave_1 left promiscuous mode [ 188.205878][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.214674][ T4229] device bridge_slave_0 left promiscuous mode [ 188.220871][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.233449][ T4229] device hsr_slave_0 left promiscuous mode [ 188.239965][ T4229] device hsr_slave_1 left promiscuous mode [ 188.246790][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.254741][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.262308][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.270197][ T4229] device bridge_slave_1 left promiscuous mode [ 188.276519][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.284848][ T4229] device bridge_slave_0 left promiscuous mode [ 188.290988][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.301717][ T4229] device hsr_slave_0 left promiscuous mode [ 188.308472][ T4229] device hsr_slave_1 left promiscuous mode [ 188.314823][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.322248][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.330047][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.337642][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.345541][ T4229] device bridge_slave_1 left promiscuous mode [ 188.351712][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.360120][ T4229] device bridge_slave_0 left promiscuous mode [ 188.366348][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.377704][ T4229] device hsr_slave_0 left promiscuous mode [ 188.384087][ T4229] device hsr_slave_1 left promiscuous mode [ 188.390274][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.397776][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.405743][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.413162][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.428801][ T4229] device veth1_macvtap left promiscuous mode [ 188.435062][ T4229] device veth0_macvtap left promiscuous mode [ 188.441083][ T4229] device veth1_vlan left promiscuous mode [ 188.446962][ T4229] device veth0_vlan left promiscuous mode [ 188.453297][ T4229] device veth1_macvtap left promiscuous mode [ 188.459545][ T4229] device veth0_macvtap left promiscuous mode [ 188.465694][ T4229] device veth1_vlan left promiscuous mode [ 188.471471][ T4229] device veth0_vlan left promiscuous mode [ 188.478242][ T4229] device veth1_macvtap left promiscuous mode [ 188.484809][ T4229] device veth0_macvtap left promiscuous mode [ 188.491178][ T4229] device veth1_vlan left promiscuous mode [ 188.497336][ T4229] device veth0_vlan left promiscuous mode [ 188.504237][ T4229] device veth1_macvtap left promiscuous mode [ 188.510259][ T4229] device veth0_macvtap left promiscuous mode [ 188.516685][ T4229] device veth1_vlan left promiscuous mode [ 188.522448][ T4229] device veth0_vlan left promiscuous mode [ 188.791157][ T4229] team0 (unregistering): Port device team_slave_1 removed [ 188.803235][ T4229] team0 (unregistering): Port device team_slave_0 removed [ 188.817475][ T4229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.829978][ T4229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.884897][ T4229] bond0 (unregistering): Released all slaves [ 188.968632][ T4229] team0 (unregistering): Port device team_slave_1 removed [ 188.980520][ T4229] team0 (unregistering): Port device team_slave_0 removed [ 188.992951][ T4229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.008792][ T4229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.060966][ T4229] bond0 (unregistering): Released all slaves [ 189.158191][ T4229] team0 (unregistering): Port device team_slave_1 removed [ 189.171486][ T4229] team0 (unregistering): Port device team_slave_0 removed [ 189.183600][ T4229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.196463][ T4229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.251121][ T4229] bond0 (unregistering): Released all slaves [ 189.320385][ T4229] team0 (unregistering): Port device team_slave_1 removed [ 189.334316][ T4229] team0 (unregistering): Port device team_slave_0 removed [ 189.346305][ T4229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.358921][ T4229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.410424][ T4229] bond0 (unregistering): Released all slaves