last executing test programs: 5.09580385s ago: executing program 1 (id=1027): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000021c0)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x70bd2c, 0x25dfdbfe, {0x2, 0x80, 0x10, 0x6, 0x5, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x8, 0x2, @multicast1}, @FRA_DST={0x8, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.847976782s ago: executing program 1 (id=1030): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000240)={0x79, 0x3, 0x0, {0x0, 0x94, 0x0, '\x00!v>\xe2\xbf~\xd3C\x16H\x84 \xa3\x98\xa1\xee\xf3\xdf\xf5\x98\xcb\xee\xf8\xe0Cd\xff{\x8cX\xac\x0f\xa4\x02\xa0\xde\xa2\x7f\x1a\xb3rg\xae3\xa8\xf2g\xdfLD\xb1\xc8\xcd\xf6`\x00\x00\x00\xb5.\xcb\xa96\v\x1c\xc3\xe7&\xbdN\xaa\xcd\xf0\xee\xbaa8\xd0:o\x8e\x02;\x18\xe8\xed-\xe9\xac\x85\xb7\xfep\xa4\x02\xde\x97K\xc8\xff\xc8\xf5\xabg$\t?\x9c\xb6[R\x00'}}, 0x79) 4.646523162s ago: executing program 1 (id=1032): r0 = syz_open_dev$video4linux(&(0x7f0000003ec0), 0x49, 0x20000) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) 4.388345766s ago: executing program 1 (id=1036): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 4.221839294s ago: executing program 1 (id=1039): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2161, 0xfffffffc], [0x0, 0x0, 0x9], [0x4fdd, 0x2000000000]}) 3.469674163s ago: executing program 0 (id=1044): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43]}, 0x2d) 3.282207432s ago: executing program 1 (id=1045): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x6, 0x7, 0x10021da0, 0x10000, 0xff, "42f407000000195a14c84953dc7e8e5aec7776", 0xfffffffe, 0x9}) 3.220932425s ago: executing program 0 (id=1046): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) 2.783490438s ago: executing program 32 (id=1045): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x6, 0x7, 0x10021da0, 0x10000, 0xff, "42f407000000195a14c84953dc7e8e5aec7776", 0xfffffffe, 0x9}) 2.758419889s ago: executing program 0 (id=1050): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 2.594300987s ago: executing program 2 (id=1054): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x3, 0x1, 0x1, "8e1b6ec8a2195d042a87f93e2190c80e29d26f1088d376c4299af39b41684208", 0xb5315241}) 2.574809059s ago: executing program 4 (id=1055): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@e={0xff, 0x9, 0x0, 0x0, @generic}) 2.53739954s ago: executing program 0 (id=1056): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000005f80)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000a900000095000000000000006c9447c4d681725fcb0fde08b6d708a4ae529e3a44776b1d8ef4163da13199dbd26607f2f2660af41959991eb32eba687ea43b25592b5a71706545a75e7e16fe490e2a1616fba407cf2bf0e8c997c459b0eb75c0e40a225719efbbece14715102393a1064c55c2ca14c412d566e8d7fec11de7ae9198"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 2.298046142s ago: executing program 2 (id=1058): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x49}}) 2.206597707s ago: executing program 0 (id=1059): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.203120767s ago: executing program 4 (id=1060): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000b40032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.829731417s ago: executing program 2 (id=1062): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000dbffffff0000000000000000850000003600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.77589829s ago: executing program 4 (id=1063): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, 0x0, 0x0) 1.437412336s ago: executing program 4 (id=1065): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003200)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000003140, 0x200000003170, 0x2000000031a0], 0x0, 0x0, &(0x7f0000003140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0xfc}, {}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 1.426265287s ago: executing program 2 (id=1066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000) 1.425437797s ago: executing program 3 (id=1067): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 1.153531211s ago: executing program 3 (id=1068): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x48400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) 1.090292434s ago: executing program 4 (id=1069): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x80001, 0xfffffffd, {{0x5, 0x4, 0x1, 0x20, 0x14, 0x66, 0x0, 0xd, 0x4, 0x0, @empty, @empty}}}}) 1.074470665s ago: executing program 2 (id=1070): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6297, &(0x7f0000000600)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 743.149602ms ago: executing program 4 (id=1071): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d63703737352c0000000000000003653d6c6f7765722c73686f72746e616d653d77696e39352c636f6465706167653d3933362c757466383d302c73686f72746e616d653d6c6f7765724bba708c07a9b92c73686f72746e616d653d6d697865696f636861727365c54e00006f383835392d312c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d69736f383835392d322c00"/206], 0x26, 0x35a, &(0x7f00000007c0)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200)={0x40, 0x0, 0xe}, 0x18) 702.432724ms ago: executing program 3 (id=1072): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb702, 0x0) 473.760876ms ago: executing program 3 (id=1073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xb4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x2) 336.098463ms ago: executing program 0 (id=1074): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES8=0x0, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 260.285217ms ago: executing program 3 (id=1075): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000840)={0xb, 0x1, {0x2, 0x3, 0xb, 0x2, 0x4}, 0x40}) 49.793257ms ago: executing program 2 (id=1076): r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x5, 0x2, 0x0, 0x0, 0x100000}}) 0s ago: executing program 3 (id=1077): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) kernel console output (not intermixed with test programs): 9 [ 76.382164][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.390268][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.397105][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.403316][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.411394][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.419049][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.425019][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.432386][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.445879][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.447901][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.453556][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.461041][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.467808][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.475445][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.489097][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.489572][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.497076][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.503579][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.511237][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.519647][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.532082][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.939460][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 76.995483][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 77.143958][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 77.176527][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 77.225752][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 77.235710][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.243941][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.252849][ T4268] device bridge_slave_0 entered promiscuous mode [ 77.261514][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.268905][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.278853][ T4275] device bridge_slave_0 entered promiscuous mode [ 77.306231][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.313499][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.322277][ T4268] device bridge_slave_1 entered promiscuous mode [ 77.330874][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.338164][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.349094][ T4275] device bridge_slave_1 entered promiscuous mode [ 77.413678][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.421214][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.430035][ T4274] device bridge_slave_0 entered promiscuous mode [ 77.458998][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.468674][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.477148][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.485728][ T4274] device bridge_slave_1 entered promiscuous mode [ 77.495054][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.523467][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.555310][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.585243][ T4268] team0: Port device team_slave_0 added [ 77.602973][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.618184][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.625851][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.634756][ T4267] device bridge_slave_0 entered promiscuous mode [ 77.644191][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.652313][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.665061][ T4267] device bridge_slave_1 entered promiscuous mode [ 77.674567][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.682065][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.690906][ T4278] device bridge_slave_0 entered promiscuous mode [ 77.700481][ T4268] team0: Port device team_slave_1 added [ 77.706436][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.716316][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.725166][ T4278] device bridge_slave_1 entered promiscuous mode [ 77.742078][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.774655][ T4275] team0: Port device team_slave_0 added [ 77.816663][ T4275] team0: Port device team_slave_1 added [ 77.828425][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.838700][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.846078][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.873253][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.888904][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.901833][ T4274] team0: Port device team_slave_0 added [ 77.916674][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.926551][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.933741][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.960231][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.980931][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.991743][ T4274] team0: Port device team_slave_1 added [ 78.036155][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.043439][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.070643][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.094384][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.101421][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.128025][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.163235][ T4278] team0: Port device team_slave_0 added [ 78.172950][ T4267] team0: Port device team_slave_0 added [ 78.194298][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.201552][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.229102][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.242710][ T4278] team0: Port device team_slave_1 added [ 78.250313][ T4267] team0: Port device team_slave_1 added [ 78.274679][ T4268] device hsr_slave_0 entered promiscuous mode [ 78.281493][ T4268] device hsr_slave_1 entered promiscuous mode [ 78.288813][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.299446][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.326147][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.362114][ T4275] device hsr_slave_0 entered promiscuous mode [ 78.369924][ T4275] device hsr_slave_1 entered promiscuous mode [ 78.376933][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.385136][ T4275] Cannot create hsr debugfs directory [ 78.411979][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.419176][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.449078][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.487651][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.496095][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.522965][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.535487][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.544993][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.572327][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.608323][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.616289][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.616344][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 78.643383][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 78.649597][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 78.656390][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 78.668748][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.690997][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 78.733421][ T4274] device hsr_slave_0 entered promiscuous mode [ 78.741355][ T4274] device hsr_slave_1 entered promiscuous mode [ 78.748838][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.756805][ T4274] Cannot create hsr debugfs directory [ 78.771447][ T4278] device hsr_slave_0 entered promiscuous mode [ 78.778472][ T4278] device hsr_slave_1 entered promiscuous mode [ 78.785640][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.793305][ T4278] Cannot create hsr debugfs directory [ 78.853416][ T4267] device hsr_slave_0 entered promiscuous mode [ 78.861129][ T4267] device hsr_slave_1 entered promiscuous mode [ 78.867946][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.875732][ T4267] Cannot create hsr debugfs directory [ 79.164964][ T4268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.176900][ T4268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.187710][ T4268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.198053][ T4268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.273984][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.283529][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.300850][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.314156][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.371422][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.406637][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.445184][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.468498][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.496602][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.527584][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.543571][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.553938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.564708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.585019][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.598723][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.616334][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.645872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.658096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.667646][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.675038][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.685135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.696649][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.718229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.729060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.739964][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.747081][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.771726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.789722][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.810126][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.821770][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.831743][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.841281][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.853164][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.861210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.873805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.883223][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.896495][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.912262][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.923520][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.933723][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.959499][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.972589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.983023][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.993309][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.002216][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.009398][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.018132][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.053117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.064071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.074359][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.082078][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.091041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.100566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.115166][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.152138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.169978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.178971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.189700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.217758][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.242859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.252369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.265432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.274982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.286299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.305494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.315598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.347364][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.393647][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.422609][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.446084][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.486906][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.507481][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.518988][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.528730][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.535951][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.581448][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.598451][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.609178][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.620385][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.627634][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.638011][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.647590][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.656787][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.671680][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.687576][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.694748][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 80.699666][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 80.701107][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 80.707218][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 80.733825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.746998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.765985][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.773142][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 80.809043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.821259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.830406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.839122][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.846415][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.856109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.864039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.871909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.881584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.890469][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.897720][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.905939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.915431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.924838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.934439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.965304][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.982061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.999843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.008391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.027410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.037345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.050685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.061834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.071280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.086603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.097273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.112367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.122973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.142049][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.154822][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.175186][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.187576][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.203233][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.230049][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.250664][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.271124][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.279113][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.330505][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.360901][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.374323][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.382034][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.420846][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.440314][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.460432][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.479900][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.487176][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.510363][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.529965][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.545479][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.608641][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.631479][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.658559][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.674075][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.687157][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.702808][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.715417][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.725637][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.736068][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.755337][ T4275] device veth0_vlan entered promiscuous mode [ 81.768920][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.785161][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.795376][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.811049][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.819126][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.835714][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.847783][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.872124][ T4275] device veth1_vlan entered promiscuous mode [ 81.937254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.946060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.961868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.996066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.068694][ T4268] device veth0_vlan entered promiscuous mode [ 82.086021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.110125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.117618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.135664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.149031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.159925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.170250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.178765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.194415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.202285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.215718][ T4275] device veth0_macvtap entered promiscuous mode [ 82.233171][ T4268] device veth1_vlan entered promiscuous mode [ 82.253615][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.274104][ T4275] device veth1_macvtap entered promiscuous mode [ 82.322678][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.338055][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.356083][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.413058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.430341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.440213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.449115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.474318][ T4268] device veth0_macvtap entered promiscuous mode [ 82.492728][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.502915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.515099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.524706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.555022][ T4268] device veth1_macvtap entered promiscuous mode [ 82.568371][ T4278] device veth0_vlan entered promiscuous mode [ 82.576771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.585661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.593744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.602886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.614283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.624003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.633238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.643042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.651561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.659654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.668091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.677853][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.694354][ T4267] device veth0_vlan entered promiscuous mode [ 82.711915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.723022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.738051][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.751298][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.764743][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.769816][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 82.777821][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.781261][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 82.781298][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 82.781327][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 82.825034][ T4278] device veth1_vlan entered promiscuous mode [ 82.838166][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.848988][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.857941][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 82.869159][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.879041][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.912710][ T4267] device veth1_vlan entered promiscuous mode [ 82.921779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.935061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.946196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.955901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.965674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.977910][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.989174][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.001573][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.020772][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.029972][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.038937][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.048234][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.071947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.084726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.095962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.166649][ T4278] device veth0_macvtap entered promiscuous mode [ 83.203313][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.223432][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.234763][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.244751][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.257686][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.267285][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.277220][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.290711][ T4267] device veth0_macvtap entered promiscuous mode [ 83.334219][ T4278] device veth1_macvtap entered promiscuous mode [ 83.368244][ T4267] device veth1_macvtap entered promiscuous mode [ 83.368561][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.387762][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.398991][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.418415][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.435077][ T4274] device veth0_vlan entered promiscuous mode [ 83.459881][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.472671][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.483134][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.492391][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.513533][ T4274] device veth1_vlan entered promiscuous mode [ 83.522021][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.540470][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.552380][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.565847][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.580779][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.606603][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.619870][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.630703][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.642269][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.653055][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.664573][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.676583][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.690309][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.699019][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.707638][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.716637][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.726580][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.737726][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.757982][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.772305][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.781343][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.792191][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.803248][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.814887][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.826266][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.836439][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.851251][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.863087][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.874885][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.884958][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.896067][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.911077][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.936289][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.941384][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.944766][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.958741][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.968914][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.983123][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.993366][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.002418][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.017822][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.028631][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.038055][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.047873][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.089986][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.097884][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.109838][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.118673][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.128237][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.138871][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.177212][ T4274] device veth0_macvtap entered promiscuous mode [ 84.195106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.216648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.234794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.253922][ T4274] device veth1_macvtap entered promiscuous mode [ 84.309647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.318134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.397762][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.418355][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.429032][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.445518][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.458326][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.477380][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.489052][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.500630][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.513417][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.542546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.553517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.585974][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.602290][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.614032][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.627154][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.637985][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.655650][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.666831][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.678683][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.692298][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.704257][ T4359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'. [ 84.716714][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 84.769719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.785363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.849745][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 84.849793][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 84.855984][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 84.862628][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 84.882762][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.907844][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.929854][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 84.930457][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.974659][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.996041][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.032137][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.052452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.101989][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.129363][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.175948][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.176993][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.193895][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.258185][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.312716][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.322909][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.346585][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.349518][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.407537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.420351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.509801][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.517782][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.545769][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.016046][ T4387] loop1: detected capacity change from 0 to 4096 [ 86.057717][ T4387] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 86.317555][ T4387] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22. [ 86.568715][ T4275] ntfs3: loop1: ntfs_evict_inode r=1e failed, -22. [ 86.586527][ T4275] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 86.874787][ T4375] loop4: detected capacity change from 0 to 40427 [ 86.922147][ T4375] F2FS-fs (loop4): Invalid segment/section count (24 != 3 * 1) [ 86.930674][ T129] cfg80211: failed to load regulatory.db [ 87.020065][ T4375] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 87.083971][ T4375] F2FS-fs (loop4): invalid crc value [ 87.158064][ T4375] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.360503][ T4429] capability: warning: `syz.3.32' uses 32-bit capabilities (legacy support in use) [ 87.376951][ T4375] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 87.402237][ T4375] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 87.583903][ T4375] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 87.689769][ T4375] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 87.989565][ T4440] netlink: 'syz.0.37': attribute type 4 has an invalid length. [ 87.997295][ T4440] netlink: 17 bytes leftover after parsing attributes in process `syz.0.37'. [ 88.365617][ T4452] loop3: detected capacity change from 0 to 128 [ 88.480754][ T4452] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 88.532150][ T4452] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.195342][ T4470] netlink: 92 bytes leftover after parsing attributes in process `syz.2.52'. [ 89.265534][ T127] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.405758][ T4474] loop1: detected capacity change from 0 to 4096 [ 89.433995][ T4474] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 89.478942][ T4474] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 89.487821][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 89.504242][ T127] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 89.535547][ T127] usb 4-1: config 0 has no interface number 0 [ 89.575941][ T127] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 89.605773][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.656983][ T127] usb 4-1: Product: syz [ 89.670296][ T127] usb 4-1: Manufacturer: syz [ 89.676332][ T127] usb 4-1: SerialNumber: syz [ 89.718483][ T127] usb 4-1: config 0 descriptor?? [ 89.945580][ T127] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 89.968991][ T127] usb 4-1: No valid video chain found. [ 89.987663][ T127] usb 4-1: USB disconnect, device number 2 [ 90.012928][ T4462] loop0: detected capacity change from 0 to 32768 [ 90.055212][ T4462] ======================================================= [ 90.055212][ T4462] WARNING: The mand mount option has been deprecated and [ 90.055212][ T4462] and is ignored by this kernel. Remove the mand [ 90.055212][ T4462] option from the mount to silence this warning. [ 90.055212][ T4462] ======================================================= [ 90.268293][ T4462] JBD2: Ignoring recovery information on journal [ 90.461845][ T4462] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 90.898876][ T4267] ocfs2: Unmounting device (7,0) on (node local) [ 91.186332][ T27] audit: type=1326 audit(1776745139.660:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13039c819 code=0x7ffc0000 [ 91.208962][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.266982][ T27] audit: type=1326 audit(1776745139.660:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13039c819 code=0x7ffc0000 [ 91.325225][ T27] audit: type=1326 audit(1776745139.730:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4522 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fa13039c819 code=0x7ffc0000 [ 91.416444][ T27] audit: type=1326 audit(1776745139.730:5): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=4522 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13039c819 code=0x7ffc0000 [ 91.526276][ T27] audit: type=1326 audit(1776745139.730:6): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=4522 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13039c819 code=0x7ffc0000 [ 91.592119][ T4529] syz.1.80 (4529) used greatest stack depth: 20344 bytes left [ 91.612835][ T4533] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 91.622732][ T4531] netlink: 772 bytes leftover after parsing attributes in process `syz.0.81'. [ 91.649357][ T27] audit: type=1326 audit(1776745139.800:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec819c819 code=0x7ffc0000 [ 91.689522][ T27] audit: type=1326 audit(1776745139.800:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f8ec819c819 code=0x7ffc0000 [ 91.711484][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.748805][ T4537] netlink: 232 bytes leftover after parsing attributes in process `syz.3.83'. [ 91.770266][ T27] audit: type=1326 audit(1776745139.800:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec819c819 code=0x7ffc0000 [ 91.792683][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.904376][ T27] audit: type=1326 audit(1776745139.800:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec819c819 code=0x7ffc0000 [ 91.927201][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.591854][ T4565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 92.619363][ T4565] netlink: 288 bytes leftover after parsing attributes in process `syz.2.98'. [ 93.493089][ T4597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.114'. [ 93.682159][ T4599] loop4: detected capacity change from 0 to 2048 [ 93.738123][ T4599] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.329309][ T129] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.531258][ T129] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 94.553707][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.586030][ T129] usb 1-1: config 0 descriptor?? [ 95.016679][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.027840][ T129] usb 1-1: Cannot set MAC address [ 95.040359][ T129] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 95.058164][ T4639] loop3: detected capacity change from 0 to 16 [ 95.067840][ T129] usb 1-1: USB disconnect, device number 2 [ 95.084868][ T4639] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 95.124074][ T4373] udevd[4373]: incorrect cramfs checksum on /dev/loop3 [ 95.168147][ T4643] loop4: detected capacity change from 0 to 2048 [ 95.183194][ T4413] udevd[4413]: incorrect cramfs checksum on /dev/loop3 [ 95.219764][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 95.228725][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.254154][ T14] usb 2-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 95.271705][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.294228][ T14] usb 2-1: config 0 descriptor?? [ 95.305732][ T4643] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.455844][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 95.530441][ T129] usb 2-1: USB disconnect, device number 2 [ 95.918971][ T4664] xt_hashlimit: size too large, truncated to 1048576 [ 95.927472][ T4664] xt_hashlimit: max too large, truncated to 1048576 [ 96.315957][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 96.703570][ T27] audit: type=1400 audit(1776745145.180:11): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=4688 comm="syz.3.158" [ 96.754878][ T4684] loop2: detected capacity change from 0 to 4096 [ 96.846607][ T4684] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 96.899450][ T129] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.914050][ T4662] loop4: detected capacity change from 0 to 32768 [ 97.066914][ T4662] find_entry called with index = 0 [ 97.068960][ T4696] loop0: detected capacity change from 0 to 64 [ 97.085995][ T4662] find_entry called with index = 0 [ 97.091191][ T129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.130172][ T129] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 97.149307][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.196829][ T129] usb 2-1: config 0 descriptor?? [ 97.551434][ T4705] nftables ruleset with unbound chain [ 97.659588][ T129] ath6kl: Failed to read usb control message: -71 [ 97.666131][ T129] ath6kl: Unable to read the bmi data from the device: -71 [ 97.694725][ T129] ath6kl: Unable to recv target info: -71 [ 97.705875][ T129] ath6kl: Failed to init ath6kl core: -71 [ 97.807187][ T129] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 97.857939][ T129] usb 2-1: USB disconnect, device number 3 [ 98.079541][ T4721] binder: 4718:4721 ioctl 400c620e 0 returned -14 [ 98.369370][ T4729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 98.394983][ T4729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 98.429538][ T4729] netlink: 5 bytes leftover after parsing attributes in process `syz.2.177'. [ 98.773367][ T4744] netlink: 'syz.1.182': attribute type 1 has an invalid length. [ 98.788353][ T4744] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.182'. [ 99.199394][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.268319][ T4756] ipt_ECN: cannot use operation on non-tcp rule [ 99.399418][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 99.410296][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.423124][ T27] audit: type=1326 audit(1776745147.900:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec819c819 code=0x7ffc0000 [ 99.430879][ T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 99.497668][ T27] audit: type=1326 audit(1776745147.930:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec819c819 code=0x7ffc0000 [ 99.525708][ T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 95 [ 99.591341][ T14] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.593140][ T4765] binder: 4763:4765 unknown command 1074553619 [ 99.609404][ T27] audit: type=1326 audit(1776745147.930:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec819c819 code=0x7ffc0000 [ 99.610542][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.641046][ T4765] binder: 4763:4765 ioctl c0306201 200000000540 returned -22 [ 99.665722][ T27] audit: type=1326 audit(1776745147.930:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec819c819 code=0x7ffc0000 [ 99.701698][ T14] usb 2-1: SerialNumber: syz [ 99.734149][ T4748] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 99.779658][ T27] audit: type=1326 audit(1776745147.930:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f8ec819c819 code=0x7ffc0000 [ 99.780509][ T14] cdc_acm 2-1:1.0: skipping garbage [ 99.854387][ T27] audit: type=1326 audit(1776745147.930:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec819c819 code=0x7ffc0000 [ 99.868117][ T14] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 99.948264][ T27] audit: type=1326 audit(1776745147.940:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec819c819 code=0x7ffc0000 [ 100.081604][ T27] audit: type=1326 audit(1776745147.950:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8ec819c819 code=0x7ffc0000 [ 100.145128][ T27] audit: type=1326 audit(1776745147.950:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8ec819c819 code=0x7ffc0000 [ 100.383280][ T4776] loop4: detected capacity change from 0 to 4096 [ 100.427657][ T127] usb 2-1: USB disconnect, device number 4 [ 100.455088][ T4776] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 100.536804][ T4776] ntfs3: loop4: Failed to load $Extend. [ 101.109519][ T129] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.194198][ T4780] loop0: detected capacity change from 0 to 32768 [ 101.207695][ T4780] XFS: noikeep mount option is deprecated. [ 101.309449][ T129] usb 4-1: Using ep0 maxpacket: 8 [ 101.325853][ T129] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 101.345817][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.354620][ T129] usb 4-1: Product: syz [ 101.359686][ T129] usb 4-1: Manufacturer: syz [ 101.365254][ T129] usb 4-1: SerialNumber: syz [ 101.376670][ T4780] XFS (loop0): Mounting V5 Filesystem [ 101.380460][ T129] usb 4-1: config 0 descriptor?? [ 101.392437][ T129] gspca_main: sq930x-2.14.0 probing 2770:930c [ 101.399531][ T4350] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.434381][ T4802] loop2: detected capacity change from 0 to 4096 [ 101.452093][ T4802] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 101.542813][ T4780] XFS (loop0): Ending clean mount [ 101.576634][ T4780] XFS (loop0): Quotacheck needed: Please wait. [ 101.581093][ T4350] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 101.630796][ T4350] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 101.658789][ T4802] ntfs3: loop2: failed to convert "c46c" to macroman [ 101.668924][ T4780] XFS (loop0): Quotacheck: Done. [ 101.677814][ T4350] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.688463][ T4350] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 101.705734][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 101.714747][ T4350] usb 5-1: Product: syz [ 101.719900][ T4350] usb 5-1: Manufacturer: syz [ 101.724623][ T4350] usb 5-1: SerialNumber: syz [ 101.781931][ T4350] usb 5-1: config 0 descriptor?? [ 101.802124][ T129] gspca_sq930x: ucbus_write failed -71 [ 101.820267][ T4350] hub 5-1:0.0: bad descriptor, ignoring hub [ 101.845136][ T4350] hub: probe of 5-1:0.0 failed with error -5 [ 101.866555][ T4350] usb 5-1: selecting invalid altsetting 0 [ 101.969789][ T4267] XFS (loop0): Unmounting Filesystem [ 102.044908][ T4818] loop2: detected capacity change from 0 to 512 [ 102.049761][ T129] gspca_sq930x: Sensor ov9630 not yet treated [ 102.057499][ T129] sq930x: probe of 4-1:0.0 failed with error -22 [ 102.088240][ T129] usb 4-1: USB disconnect, device number 3 [ 102.127701][ T4818] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.177026][ T4818] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 102.238111][ T4818] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 102.379475][ T4818] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.216: corrupted inode contents [ 102.412885][ T4818] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #11: comm syz.2.216: mark_inode_dirty error [ 102.467147][ T4818] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.216: invalid indirect mapped block 1 (level 1) [ 102.499800][ T129] usb 5-1: USB disconnect, device number 2 [ 102.506041][ T4818] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.216: corrupted inode contents [ 102.554624][ T4818] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 102.578138][ T4818] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.216: corrupted inode contents [ 102.590157][ T4829] loop1: detected capacity change from 0 to 64 [ 102.598348][ T4818] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.216: mark_inode_dirty error [ 102.643878][ T4818] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 102.665754][ T4818] EXT4-fs (loop2): 1 truncate cleaned up [ 102.671832][ T4818] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.789518][ T4818] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.216: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 103.066851][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 103.074649][ T4838] loop0: detected capacity change from 0 to 128 [ 103.240836][ T4838] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 103.259423][ T4838] FAT-fs (loop0): Filesystem has been set read-only [ 103.299675][ T4838] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 52) [ 103.307785][ T4838] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 52) [ 103.517996][ T4853] netlink: 'syz.2.232': attribute type 10 has an invalid length. [ 103.723036][ T4853] team0: Port device wlan1 added [ 104.451405][ T4873] loop0: detected capacity change from 0 to 4096 [ 104.479515][ T4873] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 104.721722][ T129] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 104.925982][ T129] usb 2-1: unable to get BOS descriptor or descriptor too short [ 104.950044][ T129] usb 2-1: not running at top speed; connect to a high speed hub [ 104.990337][ T129] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 105.031236][ T129] usb 2-1: config 12 has no interface number 0 [ 105.038396][ T129] usb 2-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 105.068094][ T27] audit: type=1326 audit(1776745153.540:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4898 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08de39c819 code=0x7ffc0000 [ 105.123102][ T129] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 105.153309][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.166926][ T27] audit: type=1326 audit(1776745153.580:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4898 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f08de39c819 code=0x7ffc0000 [ 105.209311][ T129] usb 2-1: Product: syz [ 105.213910][ T129] usb 2-1: Manufacturer: syz [ 105.219082][ T129] usb 2-1: SerialNumber: syz [ 105.249393][ T27] audit: type=1326 audit(1776745153.580:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4898 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08de39c819 code=0x7ffc0000 [ 105.317935][ T4903] loop3: detected capacity change from 0 to 128 [ 105.343293][ T27] audit: type=1326 audit(1776745153.580:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4898 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08de39c819 code=0x7ffc0000 [ 105.405646][ T4903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 105.507038][ T4903] FAT-fs (loop3): Filesystem has been set read-only [ 105.525368][ T4903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 105.542218][ T4879] loop2: detected capacity change from 0 to 32768 [ 105.598666][ T4879] [ 105.598666][ T4879] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.598666][ T4879] [ 105.614244][ T4903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 105.626323][ T4903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 105.685060][ T129] usb 2-1: USB disconnect, device number 5 [ 105.686390][ T4879] read_mapping_page failed! [ 105.695402][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 105.705469][ T4903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 105.705546][ T4903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 105.705571][ T4903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 105.705595][ T4903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 105.705709][ T4903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 105.819421][ T4879] ERROR: (device loop2): txCommit: [ 105.819421][ T4879] [ 105.831840][ T4903] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 105.890749][ T27] audit: type=1800 audit(1776745154.370:25): pid=4903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.258" name="file2" dev="loop3" ino=1048596 res=0 errno=0 [ 105.900965][ T4903] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 105.957634][ T4331] ERROR: (device loop2): diWrite: ixpxd invalid [ 105.957634][ T4331] [ 105.977086][ T4331] ERROR: (device loop2): txCommit: [ 105.977086][ T4331] [ 105.993354][ T4331] jfs_write_inode: jfs_commit_inode failed! [ 106.000965][ T4274] [ 106.000965][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.000965][ T4274] [ 106.013090][ T4274] [ 106.013090][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.013090][ T4274] [ 106.067451][ T4816] udevd[4816]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.114048][ T4903] syz.3.258 (4903) used greatest stack depth: 19600 bytes left [ 106.326914][ T4919] loop0: detected capacity change from 0 to 128 [ 106.403797][ T4919] loop0: detected capacity change from 0 to 128 [ 106.753078][ T4936] loop0: detected capacity change from 0 to 128 [ 106.834057][ T4936] MINIX-fs: deleted inode referenced: 4 [ 106.847698][ T4936] MINIX-fs: deleted inode referenced: 4 [ 107.379348][ T129] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 107.387015][ T4955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.282'. [ 107.475206][ T4955] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.490835][ T4955] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 107.509603][ T4959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.285'. [ 107.571665][ T129] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 107.596734][ T129] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 107.630095][ T129] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 107.678950][ T129] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 107.724300][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 107.754625][ T4968] loop4: detected capacity change from 0 to 64 [ 107.771522][ T129] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 107.812883][ T129] usb 4-1: string descriptor 0 read error: -22 [ 107.844508][ T129] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 107.850327][ T4968] hfs: keylen 40 too large [ 107.874345][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.913557][ T129] usb 4-1: config 0 descriptor?? [ 107.932769][ T4944] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.984207][ T129] hub 4-1:0.0: bad descriptor, ignoring hub [ 107.990760][ T4973] xt_cgroup: path and classid specified [ 107.999433][ T129] hub: probe of 4-1:0.0 failed with error -5 [ 108.014621][ T129] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 108.172010][ T4977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.293'. [ 108.350902][ T129] usb 4-1: USB disconnect, device number 4 [ 108.417662][ T4983] loop1: detected capacity change from 0 to 256 [ 108.454338][ T4983] exfat: Deprecated parameter 'utf8' [ 108.514135][ T4983] exfat: Deprecated parameter 'namecase' [ 108.529739][ T4983] exfat: Deprecated parameter 'namecase' [ 108.567776][ T4983] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 108.620566][ T4989] device vlan0 entered promiscuous mode [ 109.355519][ T27] audit: type=1326 audit(1776745157.830:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd59c819 code=0x7ffc0000 [ 109.428714][ T27] audit: type=1326 audit(1776745157.830:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd59c819 code=0x7ffc0000 [ 109.482663][ T27] audit: type=1326 audit(1776745157.880:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd59c819 code=0x7ffc0000 [ 109.517382][ T5017] SET target dimension over the limit! [ 109.545676][ T27] audit: type=1326 audit(1776745157.880:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd59c819 code=0x7ffc0000 [ 109.594800][ T27] audit: type=1326 audit(1776745157.890:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fbabd59c819 code=0x7ffc0000 [ 109.683179][ T5021] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 109.902881][ T5031] loop2: detected capacity change from 0 to 164 [ 110.098572][ T4315] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 110.291937][ T4315] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 110.303764][ T4315] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 110.353557][ T4315] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 110.383254][ T4315] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 110.400003][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 110.414808][ T5047] sctp: [Deprecated]: syz.2.328 (pid 5047) Use of int in maxseg socket option. [ 110.414808][ T5047] Use struct sctp_assoc_value instead [ 110.436252][ T5049] tmpfs: Bad value for 'mpol' [ 110.444619][ T4315] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 110.490418][ T4315] usb 1-1: string descriptor 0 read error: -22 [ 110.496770][ T4315] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 110.507011][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.543933][ T4315] usb 1-1: config 0 descriptor?? [ 110.550138][ T5025] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.576219][ T4315] hub 1-1:0.0: bad descriptor, ignoring hub [ 110.612405][ T4315] hub: probe of 1-1:0.0 failed with error -5 [ 110.632182][ T4315] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 110.819298][ T129] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 110.848573][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 110.890022][ T5059] device vlan0 entered promiscuous mode [ 110.939458][ T14] usb 1-1: USB disconnect, device number 3 [ 110.955758][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 110.955775][ T27] audit: type=1326 audit(1776745159.430:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.2.335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbabd59c819 code=0x0 [ 111.031167][ T129] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 111.049271][ T129] usb 4-1: config 8 has no interface number 0 [ 111.055740][ T129] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 111.135231][ T129] usb 4-1: config 8 interface 177 has no altsetting 0 [ 111.166094][ T129] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 111.184917][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.212962][ T5051] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 111.248392][ T5069] loop2: detected capacity change from 0 to 128 [ 111.267219][ T5071] xt_hashlimit: size too large, truncated to 1048576 [ 111.304958][ T5069] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 111.337109][ T5069] sysv_free_block: flc_count > flc_size [ 111.378415][ T5069] sysv_free_block: flc_count > flc_size [ 111.409382][ T5069] sysv_free_block: flc_count > flc_size [ 111.415041][ T5069] sysv_free_block: flc_count > flc_size [ 111.432194][ T5069] sysv_free_block: flc_count > flc_size [ 111.455024][ T5069] sysv_free_block: flc_count > flc_size [ 111.461082][ T129] usb 4-1: string descriptor 0 read error: -71 [ 111.479205][ C1] ir_toy 4-1:8.177: out urb status: -71 [ 111.485279][ T5069] sysv_free_block: flc_count > flc_size [ 111.499348][ T5069] sysv_free_block: flc_count > flc_size [ 111.509524][ T5069] sysv_free_block: flc_count > flc_size [ 111.526457][ T5069] sysv_free_block: flc_count > flc_size [ 111.553897][ T5069] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 111.969900][ T5088] netlink: 32 bytes leftover after parsing attributes in process `syz.4.348'. [ 111.994285][ T129] ir_toy 4-1:8.177: could not write reset command: -110 [ 111.998234][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.009027][ T129] ir_toy: probe of 4-1:8.177 failed with error -110 [ 112.026098][ T5088] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 112.030100][ T129] usb 4-1: USB disconnect, device number 5 [ 112.069620][ T4315] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.129553][ T4314] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.269535][ T4315] usb 1-1: Using ep0 maxpacket: 16 [ 112.285297][ T4315] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 112.312571][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.331413][ T4315] usb 1-1: Product: syz [ 112.338852][ T4315] usb 1-1: Manufacturer: syz [ 112.343897][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 112.356046][ T4314] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.364420][ T4315] usb 1-1: SerialNumber: syz [ 112.383346][ T4314] usb 2-1: config 0 has no interface number 0 [ 112.398919][ T4315] r8152-cfgselector 1-1: config 0 descriptor?? [ 112.413517][ T4314] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 112.433544][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.451949][ T4314] usb 2-1: Product: syz [ 112.461304][ T4314] usb 2-1: Manufacturer: syz [ 112.489371][ T4314] usb 2-1: SerialNumber: syz [ 112.500417][ T5082] loop2: detected capacity change from 0 to 32768 [ 112.508955][ T4314] usb 2-1: config 0 descriptor?? [ 112.626568][ T5082] XFS (loop2): Mounting V5 Filesystem [ 112.737275][ T4314] usb 2-1: selecting invalid altsetting 1 [ 112.744528][ T4314] speedtch 2-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 112.756633][ T4314] speedtch 2-1:0.1: usbatm_usb_probe: bind failed: -22! [ 112.764270][ T4314] speedtch: probe of 2-1:0.1 failed with error -22 [ 112.806401][ T4314] usb 2-1: USB disconnect, device number 6 [ 112.833806][ T4315] r8152-cfgselector 1-1: Unknown version 0x0000 [ 112.858056][ T4315] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 112.984229][ T5082] XFS (loop2): Ending clean mount [ 113.057861][ T5082] syz.2.345: attempt to access beyond end of device [ 113.057861][ T5082] loop2: rw=4096, sector=18446744073709547519, nr_sectors = 1 limit=32768 [ 113.220133][ T4274] XFS (loop2): Unmounting Filesystem [ 113.283742][ T5118] device bridge0 entered promiscuous mode [ 114.010199][ T27] audit: type=1326 audit(1776745162.490:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc818f9c819 code=0x7ffc0000 [ 114.137454][ T27] audit: type=1326 audit(1776745162.530:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc818f9c819 code=0x7ffc0000 [ 114.239284][ T27] audit: type=1326 audit(1776745162.530:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fc818f9c819 code=0x7ffc0000 [ 114.329292][ T27] audit: type=1326 audit(1776745162.530:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc818f9c819 code=0x7ffc0000 [ 114.421151][ T5154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.377'. [ 114.430589][ T27] audit: type=1326 audit(1776745162.530:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5140 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc818f9c819 code=0x7ffc0000 [ 114.912208][ T5174] netlink: 'syz.1.386': attribute type 11 has an invalid length. [ 115.480544][ T5195] device macvlan0 entered promiscuous mode [ 115.678019][ T5200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.778745][ T5205] loop1: detected capacity change from 0 to 512 [ 115.948538][ T5205] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.969536][ T5205] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.151703][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 116.313418][ T5221] loop2: detected capacity change from 0 to 4096 [ 116.349381][ T5221] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 116.376824][ T5230] loop1: detected capacity change from 0 to 256 [ 116.627344][ T5221] ntfs3: loop2: failed to convert "c46c" to ascii [ 116.893827][ T5243] netlink: 'syz.3.415': attribute type 2 has an invalid length. [ 116.943858][ T5243] netlink: 44 bytes leftover after parsing attributes in process `syz.3.415'. [ 117.177147][ T5253] capability: warning: `syz.1.419' uses deprecated v2 capabilities in a way that may be insecure [ 117.747223][ T5274] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.794627][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 118.017363][ T5287] loop3: detected capacity change from 0 to 64 [ 118.080057][ T5291] netlink: 'syz.0.438': attribute type 10 has an invalid length. [ 118.171689][ T5291] batman_adv: batadv0: Adding interface: netdevsim0 [ 118.207820][ T5291] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.287759][ T5291] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 118.739528][ T4362] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.947089][ T4362] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 118.977289][ T4362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.019738][ T5321] unsupported nlmsg_type 40 [ 119.043972][ T4362] usb 4-1: config 0 descriptor?? [ 119.062210][ T4362] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 119.092165][ T5324] loop4: detected capacity change from 0 to 512 [ 119.227439][ T5324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.266009][ T5324] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.478469][ T4362] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 119.506910][ T4362] pac7311: probe of 4-1:0.0 failed with error -71 [ 119.520882][ T4362] usb 4-1: USB disconnect, device number 6 [ 119.605234][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 119.649439][ T5340] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 120.046694][ T5354] affs: No valid root block on device nbd2 [ 120.186509][ T5356] netlink: 300 bytes leftover after parsing attributes in process `syz.3.466'. [ 120.436842][ T5365] netlink: 'syz.4.470': attribute type 10 has an invalid length. [ 120.555251][ T5367] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.567392][ T5367] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.574667][ T5367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.855963][ T5379] xt_nfacct: accounting object `syz0' does not exist [ 121.391044][ T5399] process 'syz.2.488' launched './file0' with NULL argv: empty string added [ 121.688430][ T5411] netlink: 308 bytes leftover after parsing attributes in process `syz.4.494'. [ 121.690510][ T5401] loop0: detected capacity change from 0 to 4096 [ 121.735527][ T5401] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 121.812067][ T5401] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 122.064260][ T4267] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 122.086022][ T4267] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 122.106459][ T5419] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 122.297921][ T5423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.499'. [ 122.347039][ T5423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.499'. [ 123.300781][ T5458] loop3: detected capacity change from 0 to 2048 [ 123.444897][ T5467] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.625490][ T5458] NILFS (loop3): error -2 truncating bmap (ino=16) [ 123.778162][ T5467] NILFS (loop3): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 123.807098][ T5467] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 123.849276][ T5467] Remounting filesystem read-only [ 123.858339][ T4278] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 123.938955][ T5480] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 124.035677][ T5486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.531'. [ 124.040304][ T5485] loop4: detected capacity change from 0 to 512 [ 124.060582][ T5486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.531'. [ 124.094637][ T5485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.201559][ T5485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 124.219368][ T5485] ext4 filesystem being mounted at /118/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.259430][ T5493] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 124.293421][ T5485] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 124.329237][ T5493] netlink: 224 bytes leftover after parsing attributes in process `syz.0.534'. [ 124.400995][ T5485] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 124.458414][ T5485] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.532: Failed to acquire dquot type 0 [ 124.588496][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 124.669263][ T5506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.540'. [ 124.701055][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 124.899492][ T127] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.074349][ T5523] netlink: 'syz.2.549': attribute type 7 has an invalid length. [ 125.098261][ T5523] netlink: 'syz.2.549': attribute type 8 has an invalid length. [ 125.108529][ T127] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 125.150064][ T127] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 125.171847][ T127] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 125.191493][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.221892][ T127] usb 1-1: Product: syz [ 125.229496][ T4362] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.257155][ T127] usb 1-1: Manufacturer: syz [ 125.262399][ T127] usb 1-1: SerialNumber: syz [ 125.431793][ T4362] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 125.441433][ T4362] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 125.475042][ T4362] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.515107][ T127] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 125.525074][ T4362] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.543944][ T127] usb 1-1: unit 6 not found! [ 125.549510][ T4362] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 125.557887][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 125.583419][ T127] usb 1-1: unit 4 not found! [ 125.593689][ T4362] usb 2-1: Product: syz [ 125.597922][ T4362] usb 2-1: Manufacturer: syz [ 125.615991][ T4362] usb 2-1: SerialNumber: syz [ 125.652091][ T4362] usb 2-1: config 0 descriptor?? [ 125.662303][ T127] usb 1-1: USB disconnect, device number 5 [ 125.678606][ T4362] hub 2-1:0.0: bad descriptor, ignoring hub [ 125.696824][ T4362] hub: probe of 2-1:0.0 failed with error -5 [ 125.756439][ T4362] usb 2-1: selecting invalid altsetting 0 [ 126.041041][ T7] usb 2-1: USB disconnect, device number 7 [ 126.079512][ T5549] loop2: detected capacity change from 0 to 2048 [ 126.155466][ T5549] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 126.156192][ T5553] netlink: 'syz.4.562': attribute type 1 has an invalid length. [ 126.210938][ T5549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.295440][ T5549] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 126.995506][ T5579] raw_sendmsg: syz.2.575 forgot to set AF_INET. Fix it! [ 127.034547][ T5578] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 127.269306][ T4362] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.471357][ T4362] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 127.498666][ T4362] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 127.515295][ T5599] netlink: 'syz.1.586': attribute type 28 has an invalid length. [ 127.539364][ T5599] netlink: 'syz.1.586': attribute type 29 has an invalid length. [ 127.547660][ T4362] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 127.567181][ T4362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.572346][ T5599] netlink: 132 bytes leftover after parsing attributes in process `syz.1.586'. [ 127.591798][ T4362] usb 4-1: Product: syz [ 127.616707][ T4362] usb 4-1: Manufacturer: syz [ 127.640070][ T4362] usb 4-1: SerialNumber: syz [ 127.886408][ T4362] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 127.888105][ T4362] usb 4-1: unit 6 not found! [ 127.888130][ T4362] usb 4-1: unit 4 not found! [ 127.946519][ T4362] usb 4-1: USB disconnect, device number 7 [ 128.079007][ T5611] Cannot find add_set index 0 as target [ 128.170375][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.890493][ T5639] loop1: detected capacity change from 0 to 256 [ 128.981308][ T5639] FAT-fs (loop1): Directory bread(block 64) failed [ 129.019382][ T5639] FAT-fs (loop1): Directory bread(block 65) failed [ 129.026102][ T5639] FAT-fs (loop1): Directory bread(block 66) failed [ 129.070973][ T5639] FAT-fs (loop1): Directory bread(block 67) failed [ 129.096421][ T5639] FAT-fs (loop1): Directory bread(block 68) failed [ 129.147132][ T5639] FAT-fs (loop1): Directory bread(block 69) failed [ 129.179591][ T5639] FAT-fs (loop1): Directory bread(block 70) failed [ 129.216918][ T5639] FAT-fs (loop1): Directory bread(block 71) failed [ 129.242239][ T5649] overlayfs: missing 'lowerdir' [ 129.248894][ T5639] FAT-fs (loop1): Directory bread(block 72) failed [ 129.269530][ T5639] FAT-fs (loop1): Directory bread(block 73) failed [ 129.689322][ T127] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 129.871532][ T127] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 129.899772][ T127] usb 1-1: config 0 has no interface number 0 [ 129.919500][ T127] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 129.969158][ T127] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 129.996369][ T127] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 130.024155][ T127] usb 1-1: Manufacturer: syz [ 130.028837][ T127] usb 1-1: SerialNumber: syz [ 130.056608][ T127] usb 1-1: config 0 descriptor?? [ 130.510466][ T127] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 130.528666][ T127] usb 1-1: USB disconnect, device number 6 [ 130.548851][ T4413] udevd[4413]: setting owner of /dev/bus/usb/001/006 to uid=0, gid=0 failed: No such file or directory [ 130.811634][ T5693] netlink: 88 bytes leftover after parsing attributes in process `syz.4.633'. [ 131.040774][ T5677] loop2: detected capacity change from 0 to 32768 [ 132.079348][ T127] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.279670][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 132.291431][ T127] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.335482][ T127] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 132.387487][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 132.399109][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.427625][ T127] usb 1-1: Product: syz [ 132.428034][ T5750] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 132.437638][ T127] usb 1-1: Manufacturer: syz [ 132.468135][ T127] usb 1-1: SerialNumber: syz [ 132.484315][ T127] usb 1-1: config 0 descriptor?? [ 132.527454][ T127] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 132.554223][ T127] usb 1-1: selecting invalid altsetting 1 [ 132.798436][ T5760] netlink: 88 bytes leftover after parsing attributes in process `syz.2.664'. [ 133.012255][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.018636][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.025946][ T127] usb 1-1: USB disconnect, device number 7 [ 133.401963][ T5780] netlink: 'syz.2.673': attribute type 9 has an invalid length. [ 133.439306][ T5780] netlink: 'syz.2.673': attribute type 7 has an invalid length. [ 133.447117][ T5780] netlink: 'syz.2.673': attribute type 8 has an invalid length. [ 133.495892][ T5785] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 134.022693][ T5808] loop4: detected capacity change from 0 to 64 [ 134.283098][ T5813] loop3: detected capacity change from 0 to 256 [ 134.406922][ T5813] FAT-fs (loop3): Directory bread(block 64) failed [ 134.456259][ T5813] FAT-fs (loop3): Directory bread(block 65) failed [ 134.472870][ T5813] FAT-fs (loop3): Directory bread(block 66) failed [ 134.520007][ T5813] FAT-fs (loop3): Directory bread(block 67) failed [ 134.529975][ T5813] FAT-fs (loop3): Directory bread(block 68) failed [ 134.536662][ T5813] FAT-fs (loop3): Directory bread(block 69) failed [ 134.555269][ T5813] FAT-fs (loop3): Directory bread(block 70) failed [ 134.564683][ T127] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.576009][ T5813] FAT-fs (loop3): Directory bread(block 71) failed [ 134.586871][ T5813] FAT-fs (loop3): Directory bread(block 72) failed [ 134.598201][ T5813] FAT-fs (loop3): Directory bread(block 73) failed [ 134.762292][ T127] usb 2-1: Using ep0 maxpacket: 8 [ 134.770713][ T127] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.780348][ T4362] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.831024][ T127] usb 2-1: config 179 has no interface number 0 [ 134.837387][ T127] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 134.861889][ T127] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 134.883933][ T127] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.915140][ T127] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 134.964694][ T127] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.989652][ T4362] usb 3-1: Using ep0 maxpacket: 8 [ 134.999657][ T4362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.034495][ T127] usb 2-1: config 179 interface 65 has no altsetting 0 [ 135.044074][ T4362] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 135.073678][ T127] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 135.085570][ T4362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.112407][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.124715][ T4362] usb 3-1: Product: syz [ 135.128955][ T4362] usb 3-1: Manufacturer: syz [ 135.146932][ T4362] usb 3-1: SerialNumber: syz [ 135.178933][ T4362] usb 3-1: config 0 descriptor?? [ 135.194719][ T127] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input9 [ 135.234507][ T4362] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 135.252329][ T4362] usb 3-1: selecting invalid altsetting 1 [ 135.459492][ T5846] openvswitch: netlink: IP tunnel dst address not specified [ 135.501269][ T4362] usb 2-1: USB disconnect, device number 8 [ 135.507571][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 135.531695][ T4362] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 135.662067][ T7] usb 3-1: USB disconnect, device number 2 [ 136.223530][ T4350] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.410271][ T4350] usb 5-1: Using ep0 maxpacket: 16 [ 136.430678][ T4350] usb 5-1: config 0 has no interfaces? [ 136.451250][ T4350] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 136.469334][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 136.472024][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.520219][ T4350] usb 5-1: Product: syz [ 136.524466][ T4350] usb 5-1: Manufacturer: syz [ 136.540217][ T4350] usb 5-1: SerialNumber: syz [ 136.559887][ T4350] r8152-cfgselector 5-1: config 0 descriptor?? [ 136.669280][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 136.679836][ T7] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 136.718931][ T7] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 136.736147][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 136.771301][ T7] usb 2-1: config 1 has no interface number 0 [ 136.776516][ T4350] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 136.777771][ T7] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.813400][ T7] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 136.838852][ T7] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 136.857307][ T5886] loop3: detected capacity change from 0 to 512 [ 136.875156][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.907030][ T7] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 136.967707][ T5886] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 136.983540][ T5890] MTD: Couldn't look up '': -22 [ 137.000058][ T5886] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.012532][ T4350] usb 5-1: USB disconnect, device number 3 [ 137.121642][ T7] snd_usb_pod 2-1:1.1: invalid control EP [ 137.127546][ T7] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 137.162159][ T5886] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.715: corrupted xattr block 33 [ 137.162320][ T7] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 137.228310][ T5886] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.715: corrupted xattr block 33 [ 137.231614][ T7] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 137.262481][ T5873] loop0: detected capacity change from 0 to 32768 [ 137.275602][ T5886] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 137.299770][ T5895] netlink: 312 bytes leftover after parsing attributes in process `syz.2.718'. [ 137.327309][ T5895] netlink: 'syz.2.718': attribute type 1 has an invalid length. [ 137.356793][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 137.506849][ T4350] usb 2-1: USB disconnect, device number 9 [ 138.675935][ T5938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.155218][ T5956] loop1: detected capacity change from 0 to 64 [ 139.348325][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 139.407063][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 139.933191][ T5980] mmap: syz.2.748 (5980) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.127510][ T5987] netlink: 264 bytes leftover after parsing attributes in process `syz.1.762'. [ 140.167290][ T5987] netlink: 56 bytes leftover after parsing attributes in process `syz.1.762'. [ 140.397863][ T5995] netlink: 40 bytes leftover after parsing attributes in process `syz.2.767'. [ 140.446235][ T5995] netlink: 40 bytes leftover after parsing attributes in process `syz.2.767'. [ 140.900664][ T6011] netlink: 108 bytes leftover after parsing attributes in process `syz.4.774'. [ 141.525924][ T27] audit: type=1326 audit(1776745190.000:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc818f9c819 code=0x7ffc0000 [ 141.598855][ T27] audit: type=1326 audit(1776745190.000:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fc818f9c819 code=0x7ffc0000 [ 141.669277][ T27] audit: type=1326 audit(1776745190.000:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc818f9c819 code=0x7ffc0000 [ 141.691595][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.119970][ T6062] loop0: detected capacity change from 0 to 256 [ 142.134873][ T6059] loop1: detected capacity change from 0 to 2048 [ 142.172053][ T6059] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.203725][ T6062] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 142.875305][ T6086] netlink: 'syz.2.812': attribute type 46 has an invalid length. [ 143.373695][ T6105] netlink: 'syz.4.820': attribute type 1 has an invalid length. [ 143.399510][ T6105] netlink: 'syz.4.820': attribute type 2 has an invalid length. [ 143.443636][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 144.034752][ T6126] syz.3.829 uses obsolete (PF_INET,SOCK_PACKET) [ 144.038451][ T6095] loop1: detected capacity change from 0 to 40427 [ 144.084655][ T6095] F2FS-fs (loop1): invalid crc value [ 144.132580][ T6095] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 144.368975][ T6095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 144.885831][ T4362] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.900828][ T6120] loop2: detected capacity change from 0 to 32768 [ 144.947895][ T6120] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.827 (6120) [ 145.039585][ T6120] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 145.062422][ T6148] loop3: detected capacity change from 0 to 512 [ 145.076594][ T6120] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 145.086031][ T6148] EXT4-fs: Ignoring removed nobh option [ 145.092456][ T6146] loop0: detected capacity change from 0 to 4096 [ 145.107941][ T6148] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.117178][ T4362] usb 5-1: Using ep0 maxpacket: 32 [ 145.130280][ T6120] BTRFS info (device loop2): setting nodatacow, compression disabled [ 145.141423][ T4362] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 145.163149][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.181122][ T6146] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 145.218325][ T6120] BTRFS info (device loop2): setting datasum, datacow enabled [ 145.226213][ T6120] BTRFS info (device loop2): force clearing of disk cache [ 145.233590][ T6120] BTRFS info (device loop2): enabling disk space caching [ 145.241036][ T6120] BTRFS info (device loop2): turning on sync discard [ 145.246305][ T6148] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.838: iget: bad i_size value: 38620345925642 [ 145.247778][ T6120] BTRFS info (device loop2): turning off barriers [ 145.267275][ T6120] BTRFS info (device loop2): enabling auto defrag [ 145.274448][ T6120] BTRFS info (device loop2): enabling ssd optimizations [ 145.281652][ T6120] BTRFS info (device loop2): using spread ssd allocation scheme [ 145.307878][ T6120] BTRFS info (device loop2): not using ssd optimizations [ 145.315414][ T6120] BTRFS info (device loop2): not using spread ssd allocation scheme [ 145.324001][ T6120] BTRFS info (device loop2): enabling ssd optimizations [ 145.325648][ T4362] usb 5-1: config 0 descriptor?? [ 145.336805][ T6120] BTRFS info (device loop2): using spread ssd allocation scheme [ 145.347538][ T6120] BTRFS info (device loop2): disk space caching is enabled [ 145.355891][ T6148] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.838: couldn't read orphan inode 15 (err -117) [ 145.388564][ T6148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 145.415278][ T4362] gspca_main: sq930x-2.14.0 probing 041e:403c [ 145.468247][ T6146] ntfs: volume version 3.1. [ 145.597279][ T6146] ntfs: (device loop0): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 145.668996][ T6172] loop1: detected capacity change from 0 to 512 [ 145.734774][ T6172] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 145.755882][ T6120] BTRFS info (device loop2): rebuilding free space tree [ 145.784431][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 145.833769][ T6172] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 145.845448][ T4362] gspca_sq930x: ucbus_write failed -71 [ 145.852777][ T4362] sq930x: probe of 5-1:0.0 failed with error -71 [ 145.879757][ T6172] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.841: Corrupt directory, running e2fsck is recommended [ 145.895265][ T4362] usb 5-1: USB disconnect, device number 4 [ 145.967311][ T6172] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 145.981923][ T6120] BTRFS info (device loop2): disabling free space tree [ 146.005312][ T6120] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.035271][ T6172] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.841: corrupted in-inode xattr [ 146.040848][ T6120] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 146.087521][ T6172] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.841: couldn't read orphan inode 15 (err -117) [ 146.102226][ T6172] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 146.227264][ T6172] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 146.368601][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 146.400826][ T4274] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.082476][ T6210] loop4: detected capacity change from 0 to 512 [ 147.154075][ T6210] EXT4-fs: Ignoring removed nobh option [ 147.197274][ T6210] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.246551][ T6210] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.853: iget: bad i_size value: 38620345925642 [ 147.275660][ T6210] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.853: couldn't read orphan inode 15 (err -117) [ 147.319476][ T6210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.410290][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 147.745316][ T6223] loop0: detected capacity change from 0 to 4096 [ 147.875333][ T6223] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 147.900770][ T6223] ntfs3: loop0: Failed to load $Extend. [ 148.036425][ T27] audit: type=1326 audit(1776745196.510:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08de39c819 code=0x7ffc0000 [ 148.130632][ T46] ntfs3: loop0: ntfs3_write_inode r=9 failed, -22. [ 148.139479][ T4267] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 148.145267][ T27] audit: type=1326 audit(1776745196.540:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08de39c819 code=0x7ffc0000 [ 148.146337][ T4267] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 148.255137][ T27] audit: type=1326 audit(1776745196.540:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08de39c819 code=0x7ffc0000 [ 148.345222][ T27] audit: type=1326 audit(1776745196.550:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f08de39c819 code=0x7ffc0000 [ 148.479415][ T27] audit: type=1326 audit(1776745196.550:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08de39c819 code=0x7ffc0000 [ 148.599240][ T27] audit: type=1326 audit(1776745196.550:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08de39c819 code=0x7ffc0000 [ 148.699560][ T27] audit: type=1326 audit(1776745196.550:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f08de39c819 code=0x7ffc0000 [ 148.809308][ T27] audit: type=1326 audit(1776745196.550:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f08de39c819 code=0x7ffc0000 [ 148.850805][ T6219] loop1: detected capacity change from 0 to 32768 [ 148.907605][ T6219] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.857 (6219) [ 148.982748][ T4350] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 148.993027][ T6219] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 149.039328][ T6219] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 149.048067][ T6219] BTRFS info (device loop1): setting nodatacow, compression disabled [ 149.119315][ T6219] BTRFS info (device loop1): setting datasum, datacow enabled [ 149.126878][ T6219] BTRFS info (device loop1): force clearing of disk cache [ 149.162813][ T6219] BTRFS info (device loop1): enabling disk space caching [ 149.176925][ T6219] BTRFS info (device loop1): turning on sync discard [ 149.179424][ T4350] usb 1-1: Using ep0 maxpacket: 8 [ 149.201138][ T6219] BTRFS info (device loop1): turning off barriers [ 149.217833][ T4350] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 149.227984][ T6219] BTRFS info (device loop1): enabling auto defrag [ 149.248966][ T4350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.257441][ T6219] BTRFS info (device loop1): enabling ssd optimizations [ 149.285037][ T4350] usb 1-1: Product: syz [ 149.303335][ T6219] BTRFS info (device loop1): using spread ssd allocation scheme [ 149.307457][ T4350] usb 1-1: Manufacturer: syz [ 149.326249][ T4350] usb 1-1: SerialNumber: syz [ 149.331279][ T6219] BTRFS info (device loop1): not using ssd optimizations [ 149.338807][ T6219] BTRFS info (device loop1): not using spread ssd allocation scheme [ 149.357991][ T4350] usb 1-1: config 0 descriptor?? [ 149.386425][ T4350] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 149.425297][ T6219] BTRFS info (device loop1): enabling ssd optimizations [ 149.450347][ T6219] BTRFS info (device loop1): using spread ssd allocation scheme [ 149.468366][ T6219] BTRFS info (device loop1): disk space caching is enabled [ 149.761434][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.886'. [ 149.811385][ T4350] gspca_m5602: Failed to find a sensor [ 149.821944][ T4350] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 149.851202][ T6219] BTRFS info (device loop1): rebuilding free space tree [ 149.917044][ T4350] usb 1-1: USB disconnect, device number 8 [ 149.950279][ T6219] BTRFS info (device loop1): disabling free space tree [ 149.957268][ T6219] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.026173][ T6219] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.056507][ T6297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.888'. [ 150.139129][ T6299] Illegal XDP return value 1057193687 on prog (id 44) dev N/A, expect packet loss! [ 150.288511][ T4275] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.547839][ T6306] device ip6tnl1 entered promiscuous mode [ 150.549659][ T6308] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 150.729372][ T6310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.784229][ T6319] netlink: 96 bytes leftover after parsing attributes in process `syz.0.896'. [ 150.818231][ T6317] loop1: detected capacity change from 0 to 2048 [ 150.939378][ T6310] usb 3-1: Using ep0 maxpacket: 16 [ 150.948778][ T6310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.996309][ T6324] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.014397][ T6310] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.071860][ T6310] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 151.105603][ T6310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.134320][ T6310] usb 3-1: Product: syz [ 151.138664][ T6310] usb 3-1: Manufacturer: syz [ 151.148805][ T6310] usb 3-1: SerialNumber: syz [ 151.160569][ T6310] r8152-cfgselector 3-1: config 0 descriptor?? [ 151.353377][ T6332] loop0: detected capacity change from 0 to 16 [ 151.395687][ T6310] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 151.446565][ T6332] erofs: (device loop0): mounted with root inode @ nid 36. [ 151.543449][ T6332] syz.0.902: attempt to access beyond end of device [ 151.543449][ T6332] loop0: rw=0, sector=288, nr_sectors = 8 limit=16 [ 151.595620][ T6332] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 151.617718][ T6310] usb 3-1: USB disconnect, device number 3 [ 151.670589][ T6343] loop4: detected capacity change from 0 to 64 [ 151.671109][ T6341] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.906'. [ 151.868217][ T6345] loop0: detected capacity change from 0 to 1024 [ 152.320552][ T6356] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 152.365925][ T6356] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 152.760195][ T6367] loop1: detected capacity change from 0 to 4096 [ 152.812325][ T6367] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 153.051521][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 153.361502][ T6394] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 153.839308][ T6315] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 154.051491][ T6315] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 154.069229][ T6315] usb 4-1: config 0 has no interface number 0 [ 154.089316][ T6315] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 22765, setting to 64 [ 154.133393][ T6315] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 154.160691][ T6315] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 154.193199][ T6315] usb 4-1: Manufacturer: syz [ 154.197946][ T6315] usb 4-1: SerialNumber: syz [ 154.215777][ T6315] usb 4-1: config 0 descriptor?? [ 154.227199][ T6392] loop4: detected capacity change from 0 to 32768 [ 154.249045][ T6401] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.278310][ T6392] [ 154.278310][ T6392] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.278310][ T6392] [ 154.368702][ T6392] ialloc: diAlloc returned -5! [ 154.456354][ T6423] loop2: detected capacity change from 0 to 4096 [ 154.489505][ T6315] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 154.496702][ T6315] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 154.506250][ T6423] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 154.539313][ T6315] usb 4-1: USB disconnect, device number 8 [ 154.576162][ T4268] [ 154.576162][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.576162][ T4268] [ 154.618180][ T4268] [ 154.618180][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.618180][ T4268] [ 154.660147][ T6429] delete_channel: no stack [ 156.006547][ T6474] loop1: detected capacity change from 0 to 64 [ 156.052295][ T6475] loop0: detected capacity change from 0 to 512 [ 156.110812][ T6475] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 156.127899][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 156.182430][ T6475] EXT4-fs (loop0): orphan cleanup on readonly fs [ 156.265420][ T6475] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 156.332122][ T6475] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.430197][ T6475] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 156.491259][ T6475] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.971: bg 0: block 15: invalid block bitmap [ 156.591349][ T6475] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 156.615931][ T6475] EXT4-fs (loop0): 1 truncate cleaned up [ 156.629875][ T6475] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 156.845864][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 156.876687][ T6478] loop2: detected capacity change from 0 to 32768 [ 157.040501][ T6478] XFS (loop2): Mounting V5 Filesystem [ 157.228422][ T6510] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.984'. [ 157.280461][ T6478] XFS (loop2): Ending clean mount [ 157.331561][ T6510] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 157.349478][ T6512] loop0: detected capacity change from 0 to 2048 [ 157.426687][ T6512] loop0: p1 < > p4 < > [ 157.437213][ T4274] XFS (loop2): Unmounting Filesystem [ 157.583906][ T6494] loop4: detected capacity change from 0 to 32768 [ 157.716162][ T6519] loop1: detected capacity change from 0 to 4096 [ 157.742351][ T6519] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 157.767982][ T6494] XFS (loop4): Mounting V5 Filesystem [ 157.773900][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 157.801126][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.988'. [ 157.810598][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.988'. [ 157.899359][ T6519] ntfs3: loop1: failed to convert "c46c" to euc-jp [ 158.090360][ T6494] XFS (loop4): Ending clean mount [ 158.152068][ T6494] XFS (loop4): Quotacheck needed: Please wait. [ 158.302659][ T6494] XFS (loop4): Quotacheck: Done. [ 158.391027][ T6545] netlink: 'syz.2.997': attribute type 1 has an invalid length. [ 158.435640][ T6545] netlink: 224 bytes leftover after parsing attributes in process `syz.2.997'. [ 158.467670][ T6539] loop3: detected capacity change from 0 to 4096 [ 158.519942][ T6539] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 158.540504][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.657225][ T6539] ntfs: volume version 3.1. [ 158.702602][ T4268] XFS (loop4): Unmounting Filesystem [ 158.741210][ T6552] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1000'. [ 158.771947][ T6552] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 158.978855][ T6556] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.922236][ T6589] netlink: 'syz.0.1019': attribute type 3 has an invalid length. [ 160.671605][ T6611] binfmt_misc: register: failed to install interpreter file ./file2 [ 160.855979][ T6587] loop2: detected capacity change from 0 to 32768 [ 160.885314][ T6587] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1018 (6587) [ 160.968846][ T6587] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.020415][ T6587] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 161.040204][ T6587] BTRFS info (device loop2): using free space tree [ 161.073543][ T6623] loop3: detected capacity change from 0 to 256 [ 161.115728][ T6627] loop1: detected capacity change from 0 to 164 [ 161.230968][ T6623] FAT-fs (loop3): Directory bread(block 64) failed [ 161.245358][ T4275] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 161.280983][ T6623] FAT-fs (loop3): Directory bread(block 65) failed [ 161.288308][ T6623] FAT-fs (loop3): Directory bread(block 66) failed [ 161.303658][ T4275] ISOFS: unable to read i-node block [ 161.314153][ T6587] BTRFS info (device loop2): enabling ssd optimizations [ 161.322126][ T6623] FAT-fs (loop3): Directory bread(block 67) failed [ 161.329124][ T6623] FAT-fs (loop3): Directory bread(block 68) failed [ 161.337783][ T4275] ISOFS: unable to read i-node block [ 161.409464][ T6623] FAT-fs (loop3): Directory bread(block 69) failed [ 161.416437][ T6623] FAT-fs (loop3): Directory bread(block 70) failed [ 161.431889][ T6587] BTRFS error (device loop2): balance: invalid convert system profile single [ 161.459510][ T6623] FAT-fs (loop3): Directory bread(block 71) failed [ 161.529413][ T6623] FAT-fs (loop3): Directory bread(block 72) failed [ 161.536690][ T6623] FAT-fs (loop3): Directory bread(block 73) failed [ 161.567471][ T4274] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.019026][ T6631] 9pnet_fd: p9_fd_create_tcp (6631): problem connecting socket to 127.0.0.1 [ 162.048858][ T6657] binfmt_misc: register: failed to install interpreter file ./file2 [ 162.194438][ T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.398649][ T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.625227][ T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.758746][ T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.487425][ T6692] netlink: 'syz.4.1060': attribute type 11 has an invalid length. [ 163.512612][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.522432][ T6692] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1060'. [ 163.533436][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.542294][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.549987][ T6695] netlink: 'syz.3.1061': attribute type 10 has an invalid length. [ 163.558638][ T6695] netlink: 'syz.3.1061': attribute type 16 has an invalid length. [ 163.567969][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.575834][ T6695] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1061'. [ 163.585475][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.595174][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.619280][ T6313] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 163.771493][ T6703] loop3: detected capacity change from 0 to 128 [ 163.780670][ T6703] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 163.815402][ T6703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.861948][ T6313] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 163.889454][ T6313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.946964][ T6313] usb 1-1: config 0 descriptor?? [ 163.970073][ T6313] cp210x 1-1:0.0: cp210x converter detected [ 164.185917][ T6313] usb 1-1: cp210x converter now attached to ttyUSB0 [ 164.214500][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 164.443473][ T6313] usb 1-1: USB disconnect, device number 9 [ 164.473565][ T6313] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 164.505802][ T6313] cp210x 1-1:0.0: device disconnected [ 164.846841][ T6732] loop4: detected capacity change from 0 to 256 [ 164.936818][ T6732] FAT-fs (loop4): Directory bread(block 64) failed [ 164.997756][ T6732] FAT-fs (loop4): Directory bread(block 65) failed [ 165.022700][ T6696] chnl_net:caif_netlink_parms(): no params data found [ 165.059501][ T6732] FAT-fs (loop4): Directory bread(block 66) failed [ 165.079775][ T6732] FAT-fs (loop4): Directory bread(block 67) failed [ 165.116444][ T6732] FAT-fs (loop4): Directory bread(block 68) failed [ 165.136172][ T6725] loop2: detected capacity change from 0 to 32768 [ 165.155280][ T6732] FAT-fs (loop4): Directory bread(block 69) failed [ 165.182747][ T6725] [ 165.182747][ T6725] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.182747][ T6725] [ 165.195309][ T6732] FAT-fs (loop4): Directory bread(block 70) failed [ 165.229284][ T6732] FAT-fs (loop4): Directory bread(block 71) failed [ 165.235989][ T6732] FAT-fs (loop4): Directory bread(block 72) failed [ 165.262863][ T6725] [ 165.262863][ T6725] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.262863][ T6725] [ 165.272626][ T6738] loop0: detected capacity change from 0 to 2048 [ 165.274967][ T6732] FAT-fs (loop4): Directory bread(block 73) failed [ 165.304200][ T6738] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 165.330480][ T6725] [ 165.330480][ T6725] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.330480][ T6725] [ 165.345977][ T108] [ 165.345977][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.345977][ T108] [ 165.432330][ T4331] [ 165.432330][ T4331] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.432330][ T4331] [ 165.494696][ T4331] [ 165.494696][ T4331] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.494696][ T4331] [ 165.506654][ T4274] [ 165.506654][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.506654][ T4274] [ 165.517808][ T4274] [ 165.517808][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.517808][ T4274] [ 165.559300][ T107] ================================================================== [ 165.567495][ T107] BUG: KASAN: use-after-free in __lock_acquire+0x106/0x7d10 [ 165.574821][ T107] Read of size 8 at addr ffff8880550fa8d8 by task jfsCommit/107 [ 165.582487][ T107] [ 165.584839][ T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 165.592067][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 165.602134][ T107] Call Trace: [ 165.605426][ T107] [ 165.608468][ T107] dump_stack_lvl+0x188/0x24e [ 165.613173][ T107] ? __lock_acquire+0x7d10/0x7d10 [ 165.618213][ T107] ? show_regs_print_info+0x12/0x12 [ 165.623429][ T107] ? load_image+0x400/0x400 [ 165.628205][ T107] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 165.633672][ T107] ? __virt_addr_valid+0x188/0x540 [ 165.638812][ T107] ? __virt_addr_valid+0x465/0x540 [ 165.644026][ T107] ? __lock_acquire+0x106/0x7d10 [ 165.648979][ T107] print_report+0xa8/0x210 [ 165.653410][ T107] kasan_report+0x10b/0x140 [ 165.657938][ T107] ? __lock_acquire+0x106/0x7d10 [ 165.662909][ T107] __lock_acquire+0x106/0x7d10 [ 165.667690][ T107] ? mark_lock+0x94/0x320 [ 165.672062][ T107] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 165.678093][ T107] ? lock_chain_count+0x20/0x20 [ 165.682964][ T107] ? __schedule+0x119d/0x40e0 [ 165.687659][ T107] ? verify_lock_unused+0x140/0x140 [ 165.692871][ T107] ? finish_task_switch+0x265/0x8f0 [ 165.698172][ T107] ? lockdep_hardirqs_on+0x94/0x140 [ 165.703378][ T107] ? finish_task_switch+0x265/0x8f0 [ 165.708590][ T107] ? __schedule+0x11d9/0x40e0 [ 165.713394][ T107] lock_acquire+0x1bb/0x4a0 [ 165.718084][ T107] ? __mutex_lock+0x27d/0xaf0 [ 165.722870][ T107] ? read_lock_is_recursive+0x10/0x10 [ 165.728262][ T107] _raw_spin_lock+0x2a/0x40 [ 165.732779][ T107] ? __mutex_lock+0x27d/0xaf0 [ 165.737469][ T107] __mutex_lock+0x27d/0xaf0 [ 165.741992][ T107] ? jfs_syncpt+0x21/0x90 [ 165.746353][ T107] ? txEnd+0x2d4/0x520 [ 165.750609][ T107] ? mutex_lock_nested+0x10/0x10 [ 165.755568][ T107] ? __rwlock_init+0x140/0x140 [ 165.760339][ T107] jfs_syncpt+0x21/0x90 [ 165.764514][ T107] txEnd+0x2e1/0x520 [ 165.768430][ T107] jfs_lazycommit+0x5a0/0xa70 [ 165.773121][ T107] ? txFreelock+0x5a0/0x5a0 [ 165.777632][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 165.784062][ T107] ? do_task_dead+0xd0/0xd0 [ 165.788665][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 165.794589][ T107] ? __kthread_parkme+0x162/0x1c0 [ 165.799635][ T107] kthread+0x29d/0x330 [ 165.803708][ T107] ? txFreelock+0x5a0/0x5a0 [ 165.808226][ T107] ? kthread_blkcg+0xd0/0xd0 [ 165.812850][ T107] ret_from_fork+0x1f/0x30 [ 165.817283][ T107] [ 165.820321][ T107] [ 165.822655][ T107] Allocated by task 6725: [ 165.826986][ T107] kasan_set_track+0x4b/0x70 [ 165.831596][ T107] __kasan_kmalloc+0x8e/0xa0 [ 165.836198][ T107] lmLogOpen+0x2c0/0xf90 [ 165.840448][ T107] jfs_mount_rw+0xf8/0x5c0 [ 165.844877][ T107] jfs_fill_super+0x594/0xad0 [ 165.849566][ T107] mount_bdev+0x287/0x3c0 [ 165.853905][ T107] legacy_get_tree+0xe6/0x180 [ 165.858595][ T107] vfs_get_tree+0x88/0x270 [ 165.863017][ T107] do_new_mount+0x24a/0xa40 [ 165.867546][ T107] __se_sys_mount+0x2e3/0x3d0 [ 165.872241][ T107] do_syscall_64+0x4c/0xa0 [ 165.876846][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.882750][ T107] [ 165.885081][ T107] Freed by task 4274: [ 165.889064][ T107] kasan_set_track+0x4b/0x70 [ 165.893667][ T107] kasan_save_free_info+0x2d/0x50 [ 165.898713][ T107] ____kasan_slab_free+0x126/0x1e0 [ 165.903846][ T107] slab_free_freelist_hook+0x131/0x1a0 [ 165.909317][ T107] __kmem_cache_free+0xb6/0x1f0 [ 165.914174][ T107] lmLogClose+0x293/0x520 [ 165.918514][ T107] jfs_umount+0x28f/0x360 [ 165.922856][ T107] jfs_put_super+0x88/0x190 [ 165.927371][ T107] generic_shutdown_super+0x130/0x340 [ 165.932839][ T107] kill_block_super+0x7c/0xe0 [ 165.937523][ T107] deactivate_locked_super+0x93/0xf0 [ 165.942823][ T107] cleanup_mnt+0x42c/0x4b0 [ 165.947261][ T107] task_work_run+0x1d0/0x260 [ 165.951871][ T107] exit_to_user_mode_loop+0xe6/0x110 [ 165.957259][ T107] exit_to_user_mode_prepare+0xee/0x180 [ 165.962819][ T107] syscall_exit_to_user_mode+0x16/0x40 [ 165.968289][ T107] do_syscall_64+0x58/0xa0 [ 165.972741][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.978650][ T107] [ 165.980981][ T107] The buggy address belongs to the object at ffff8880550fa800 [ 165.980981][ T107] which belongs to the cache kmalloc-1k of size 1024 [ 165.995130][ T107] The buggy address is located 216 bytes inside of [ 165.995130][ T107] 1024-byte region [ffff8880550fa800, ffff8880550fac00) [ 166.008700][ T107] [ 166.011049][ T107] The buggy address belongs to the physical page: [ 166.017475][ T107] page:ffffea0001543e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x550f8 [ 166.027653][ T107] head:ffffea0001543e00 order:3 compound_mapcount:0 compound_pincount:0 [ 166.036083][ T107] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 166.044250][ T107] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0 [ 166.052846][ T107] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 166.061433][ T107] page dumped because: kasan: bad access detected [ 166.067942][ T107] page_owner tracks the page as allocated [ 166.073781][ T107] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4267, tgid 4267 (syz-executor), ts 82554138509, free_ts 24574226235 [ 166.095344][ T107] post_alloc_hook+0x173/0x1a0 [ 166.100125][ T107] get_page_from_freelist+0x1a1e/0x1ab0 [ 166.105683][ T107] __alloc_pages+0x1ec/0x4f0 [ 166.110286][ T107] alloc_slab_page+0x5d/0x160 [ 166.115056][ T107] new_slab+0x87/0x2c0 [ 166.119136][ T107] ___slab_alloc+0xbc6/0x1240 [ 166.123828][ T107] __kmem_cache_alloc_node+0x1a0/0x260 [ 166.129302][ T107] __kmalloc_node_track_caller+0x9e/0x230 [ 166.135210][ T107] __alloc_skb+0x22a/0x7e0 [ 166.139641][ T107] rtmsg_fib+0xe7/0x4b0 [ 166.143808][ T107] fib_table_insert+0xd7b/0x1b20 [ 166.148765][ T107] fib_magic+0x2e1/0x3c0 [ 166.153105][ T107] fib_add_ifaddr+0x140/0x5e0 [ 166.157790][ T107] fib_inetaddr_event+0x13c/0x1c0 [ 166.162826][ T107] blocking_notifier_call_chain+0x103/0x1b0 [ 166.168740][ T107] __inet_insert_ifa+0x9b8/0xb80 [ 166.173695][ T107] page last free stack trace: [ 166.178372][ T107] free_unref_page_prepare+0x8b4/0x9a0 [ 166.183930][ T107] free_unref_page+0x2e/0x3f0 [ 166.188731][ T107] free_contig_range+0x9d/0x150 [ 166.193591][ T107] destroy_args+0xf0/0xa0a [ 166.198019][ T107] debug_vm_pgtable+0x33c/0x38e [ 166.202880][ T107] do_one_initcall+0x26a/0x840 [ 166.207653][ T107] do_initcall_level+0x137/0x1e4 [ 166.212611][ T107] do_initcalls+0x4b/0x8a [ 166.216948][ T107] kernel_init_freeable+0x415/0x5be [ 166.222161][ T107] kernel_init+0x19/0x1b0 [ 166.226498][ T107] ret_from_fork+0x1f/0x30 [ 166.231098][ T107] [ 166.233477][ T107] Memory state around the buggy address: [ 166.239109][ T107] ffff8880550fa780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.247353][ T107] ffff8880550fa800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.255444][ T107] >ffff8880550fa880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.263525][ T107] ^ [ 166.270469][ T107] ffff8880550fa900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.278591][ T107] ffff8880550fa980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.286709][ T107] ================================================================== [ 166.294872][ T107] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 166.302244][ T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 166.309456][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 166.319538][ T107] Call Trace: [ 166.322845][ T107] [ 166.325906][ T107] dump_stack_lvl+0x188/0x24e [ 166.330704][ T107] ? memcpy+0x3c/0x60 [ 166.334695][ T107] ? show_regs_print_info+0x12/0x12 [ 166.340008][ T107] ? load_image+0x400/0x400 [ 166.344530][ T107] panic+0x2e5/0x730 [ 166.348439][ T107] ? __lock_acquire+0x7d10/0x7d10 [ 166.353475][ T107] ? bpf_jit_dump+0xd0/0xd0 [ 166.358074][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 166.363975][ T107] ? _raw_spin_unlock+0x40/0x40 [ 166.368928][ T107] check_panic_on_warn+0x80/0xa0 [ 166.374233][ T107] ? __lock_acquire+0x106/0x7d10 [ 166.379197][ T107] end_report+0x66/0x110 [ 166.383461][ T107] kasan_report+0x118/0x140 [ 166.387995][ T107] ? __lock_acquire+0x106/0x7d10 [ 166.392979][ T107] __lock_acquire+0x106/0x7d10 [ 166.397826][ T107] ? mark_lock+0x94/0x320 [ 166.402180][ T107] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 166.408176][ T107] ? lock_chain_count+0x20/0x20 [ 166.413482][ T107] ? __schedule+0x119d/0x40e0 [ 166.418202][ T107] ? verify_lock_unused+0x140/0x140 [ 166.423417][ T107] ? finish_task_switch+0x265/0x8f0 [ 166.428633][ T107] ? lockdep_hardirqs_on+0x94/0x140 [ 166.434066][ T107] ? finish_task_switch+0x265/0x8f0 [ 166.439387][ T107] ? __schedule+0x11d9/0x40e0 [ 166.444146][ T107] lock_acquire+0x1bb/0x4a0 [ 166.448698][ T107] ? __mutex_lock+0x27d/0xaf0 [ 166.453405][ T107] ? read_lock_is_recursive+0x10/0x10 [ 166.458805][ T107] _raw_spin_lock+0x2a/0x40 [ 166.463324][ T107] ? __mutex_lock+0x27d/0xaf0 [ 166.468014][ T107] __mutex_lock+0x27d/0xaf0 [ 166.472536][ T107] ? jfs_syncpt+0x21/0x90 [ 166.476927][ T107] ? txEnd+0x2d4/0x520 [ 166.481266][ T107] ? mutex_lock_nested+0x10/0x10 [ 166.486218][ T107] ? __rwlock_init+0x140/0x140 [ 166.491002][ T107] jfs_syncpt+0x21/0x90 [ 166.495223][ T107] txEnd+0x2e1/0x520 [ 166.499194][ T107] jfs_lazycommit+0x5a0/0xa70 [ 166.504010][ T107] ? txFreelock+0x5a0/0x5a0 [ 166.508540][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 166.514454][ T107] ? do_task_dead+0xd0/0xd0 [ 166.519067][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 166.525072][ T107] ? __kthread_parkme+0x162/0x1c0 [ 166.530114][ T107] kthread+0x29d/0x330 [ 166.534312][ T107] ? txFreelock+0x5a0/0x5a0 [ 166.538825][ T107] ? kthread_blkcg+0xd0/0xd0 [ 166.543423][ T107] ret_from_fork+0x1f/0x30 [ 166.547859][ T107] [ 166.551282][ T107] Kernel Offset: disabled [ 166.555635][ T107] Rebooting in 86400 seconds..