last executing test programs: 6.749915217s ago: executing program 3 (id=983): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x12f4}}, 0x180) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000000500)=""/128, 0x80}], 0x2}, 0x0) 6.684867669s ago: executing program 3 (id=987): keyctl$set_timeout(0xf, 0x0, 0x2) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x40000) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001340)="06b0", 0x2) 5.197764105s ago: executing program 1 (id=1012): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0xa, 0x8000000000000000, 0x6, 0x1d0b, 0x1000, 0x2, 0x1002, 0xc, 0x8000000000000001, 0x7d, 0x0, 0x2371, 0x8bd8, 0x7, 0x3fb, 0x208], 0x25000, 0x216156}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.080657537s ago: executing program 1 (id=1015): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0) 4.832540463s ago: executing program 3 (id=1018): r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa) close(r0) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = timerfd_create(0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 3.887510516s ago: executing program 1 (id=1022): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000002}], 0x10) 3.821807878s ago: executing program 3 (id=1023): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000700)='syzkal', 0x6) close(0xffffffffffffffff) symlink(&(0x7f0000000800)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', &(0x7f0000000900)='./config/usb_gadget/g_syz/configs/c.1/ecm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_syz/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='dummy_udc.0', 0xb) close(r0) nanosleep(0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000d00)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e00)={'syzkaller0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000f00)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random='abcdef'}, 0x14) 3.531515225s ago: executing program 3 (id=1025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f00000002c0)={[{@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x200006}}, {@autodefrag}, {@nossd}, {@nossd_spread}, {@noflushoncommit}, {@nodiscard}, {@compress_force}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@datacow}, {@ssd_spread}]}, 0x9, 0x559d, &(0x7f000000ac40)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='.\x00', 0x20, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) 2.9256872s ago: executing program 1 (id=1036): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000700)='syzkal', 0x6) close(0xffffffffffffffff) symlink(&(0x7f0000000800)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', &(0x7f0000000900)='./config/usb_gadget/g_syz/configs/c.1/ecm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_syz/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='dummy_udc.0', 0xb) close(r0) nanosleep(0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000d00)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e00)={'syzkaller0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000f00)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random='abcdef'}, 0x14) 2.868921761s ago: executing program 0 (id=1037): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x40, 0x101) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) close_range(r0, 0xffffffffffffffff, 0x0) 2.039276741s ago: executing program 0 (id=1039): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 2.038748981s ago: executing program 1 (id=1040): pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.789876967s ago: executing program 3 (id=1042): read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) 1.789718667s ago: executing program 0 (id=1043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6ebe000400442ffffe8000000000000000000000000000aaff02000000000000000000000000000104"], 0x7a) 1.712912218s ago: executing program 4 (id=1044): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESOCT], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba00090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b31ce93ee907000000002990370900be0083000000000b09"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040) 1.67778627s ago: executing program 1 (id=1045): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 1.435108505s ago: executing program 2 (id=1046): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='syzkal', 0x6) close(r0) symlink(&(0x7f0000000800)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', &(0x7f0000000900)='./config/usb_gadget/g_syz/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_syz/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='dummy_udc.0', 0xb) close(r1) nanosleep(0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000d00)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e00)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000f00)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @random='abcdef'}, 0x14) 1.317927448s ago: executing program 0 (id=1047): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) read$watch_queue(r2, &(0x7f00000001c0)=""/178, 0xb2) 1.291496929s ago: executing program 2 (id=1048): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='syzkal', 0x6) close(r0) symlink(&(0x7f0000000800)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', &(0x7f0000000900)='./config/usb_gadget/g_syz/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_syz/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='dummy_udc.0', 0xb) close(r1) nanosleep(0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000d00)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e00)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000f00)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @random='abcdef'}, 0x14) 1.191606621s ago: executing program 2 (id=1049): mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = eventfd2(0x74a6, 0x0) writev(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x20400, 0x0) 1.126947423s ago: executing program 2 (id=1050): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000200)=[r5, r4, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 1.126720453s ago: executing program 2 (id=1051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0) 1.126393143s ago: executing program 4 (id=1052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000640)="b805000000b94f2400000f01c1b976010000b8cf0a9a8dba000000000f30400fd9908b000000470f063e26440fc771ad660fd0a557000000c4c1f95b3a440f20c0350d000000440f22c04b0fc76f09b9b0000040b800800000ba000000000f30", 0x30}], 0x1, 0xf, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 973.897947ms ago: executing program 4 (id=1053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7, 0x4, 0x7, 0x0, 0x0, 0x0, 0x5, 0xa, 0xb, 0x3, 0x8, 0x0, 0x0, 0x2, 0x9, 0x8, 0x3, 0x2e, 0x4, '\x00', 0x1, 0x170e}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000240)) 961.810167ms ago: executing program 4 (id=1055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xeffd, 0x6, 0x8, 0x8, 0x7, 0xe, 0x7, 0x2, 0x8000009654, 0x225c17d03, 0x2003b9ac9ff, 0x0, 0xa, 0x4000007, 0xffff, 0x200cc0, 0x1, 0x5, 0x4, 0x4, 0x0, 0x809, 0x0, 0x5, 0x2, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 940.540217ms ago: executing program 4 (id=1056): signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff1626]}, 0x8, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) mkdir(&(0x7f0000000000)='my_proc\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='my_proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) open(&(0x7f0000000400)='my_proc/modules\x00', 0x0, 0x0) 93.852788ms ago: executing program 0 (id=1057): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setreuid(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) lstat(0x0, 0x0) llistxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) 93.586098ms ago: executing program 4 (id=1058): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fbff", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 10.54741ms ago: executing program 2 (id=1059): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='syzkal', 0x6) close(r0) symlink(&(0x7f0000000800)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', &(0x7f0000000900)='./config/usb_gadget/g_syz/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_syz/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='dummy_udc.0', 0xb) close(r1) nanosleep(0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000d00)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e00)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000f00)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @random='abcdef'}, 0x14) 0s ago: executing program 0 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x1, r0, &(0x7f0000000040), 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 58.123303][ T4175] cgroup: Unknown subsys name 'net' [ 58.270739][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.747236][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.087493][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.178006][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.212387][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.224704][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.233365][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.241903][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.261470][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.279870][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.287061][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.294681][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.344676][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.353858][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.378330][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.456076][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.463204][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.471147][ T4190] device bridge_slave_0 entered promiscuous mode [ 61.479974][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.487335][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.495752][ T4190] device bridge_slave_1 entered promiscuous mode [ 61.510906][ T4188] team0: Port device team_slave_0 added [ 61.532893][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.540303][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.548301][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.557649][ T4188] team0: Port device team_slave_1 added [ 61.563504][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.570766][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.578959][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.588930][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.596373][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.604049][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.641533][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.648783][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.657068][ T4194] device bridge_slave_1 entered promiscuous mode [ 61.665759][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.675541][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.682506][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.708631][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.747238][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.763110][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.770311][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.796639][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.814466][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.824482][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.832096][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.840021][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.856228][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.867885][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.879956][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.889254][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.896593][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.904282][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.924492][ T4190] team0: Port device team_slave_0 added [ 61.961888][ T4188] device hsr_slave_0 entered promiscuous mode [ 61.969179][ T4188] device hsr_slave_1 entered promiscuous mode [ 61.986145][ T4190] team0: Port device team_slave_1 added [ 62.005487][ T4194] team0: Port device team_slave_0 added [ 62.012999][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.037361][ T4189] team0: Port device team_slave_0 added [ 62.051181][ T4194] team0: Port device team_slave_1 added [ 62.063832][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.089779][ T4189] team0: Port device team_slave_1 added [ 62.108204][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.115459][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.141425][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.154628][ T4187] team0: Port device team_slave_0 added [ 62.195154][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.202149][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.228182][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.246623][ T4187] team0: Port device team_slave_1 added [ 62.252716][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.260070][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.286029][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.302337][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.309456][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.335819][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.347299][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.354252][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.380541][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.393761][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.400816][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.426722][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.470928][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.478232][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.504194][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.540888][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.548035][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.574013][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.589514][ T4190] device hsr_slave_0 entered promiscuous mode [ 62.596992][ T4190] device hsr_slave_1 entered promiscuous mode [ 62.603660][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.611520][ T4190] Cannot create hsr debugfs directory [ 62.639298][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.647170][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.653676][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.661498][ T4189] Cannot create hsr debugfs directory [ 62.680508][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.687611][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.694130][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.701833][ T4194] Cannot create hsr debugfs directory [ 62.813157][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.820414][ T4199] Bluetooth: hci3: command 0x0409 tx timeout [ 62.825302][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 62.827271][ T4199] Bluetooth: hci2: command 0x0409 tx timeout [ 62.832856][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 62.838642][ T4199] Bluetooth: hci0: command 0x0409 tx timeout [ 62.838988][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.857533][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.865509][ T4187] Cannot create hsr debugfs directory [ 63.063686][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.083500][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.093158][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.103871][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.138797][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.160617][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.170269][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.188534][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.261146][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.270876][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.282950][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.293015][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.320632][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.357477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.368517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.379530][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.387412][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.397348][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.406654][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.442257][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.452803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.461926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.472150][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.479395][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.527073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.536523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.545697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.554506][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.561705][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.575284][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.606783][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.616685][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.626567][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.635956][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.644299][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.652633][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.676896][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.687048][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.696418][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.705787][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.722597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.731842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.753285][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.764730][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.782034][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.789723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.798532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.827833][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.853777][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.873223][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.881450][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.902637][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.927785][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.940808][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.952127][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.965621][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.974400][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.985764][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.992837][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.000642][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.028484][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.045917][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.054485][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.063231][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.070297][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.078643][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.088090][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.098629][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.107224][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.114254][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.122020][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.131585][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.140356][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.147458][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.156381][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.164094][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.172538][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.180524][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.188375][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.200178][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.209435][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.218192][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.225334][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.253899][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.270186][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.278513][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.288102][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.297206][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.306806][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.315400][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.324320][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.333397][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.342425][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.352467][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.361108][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.368207][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.376434][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.394087][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.402899][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.431884][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.441002][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.451156][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.460797][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.470282][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.479338][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.488414][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.498666][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.507583][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.515885][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.529280][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.540680][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.558463][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.568465][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.580205][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.589278][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.598893][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.607786][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.616839][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.626406][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.636128][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.666562][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.676293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.691769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.724450][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.761528][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.782471][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.792392][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.801757][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.811452][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.821532][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.830237][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.838578][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.846725][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.858841][ T4188] device veth0_vlan entered promiscuous mode [ 64.871771][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.881301][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.905358][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 64.911763][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 64.919482][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.926870][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 64.935974][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.952811][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 64.964122][ T4188] device veth1_vlan entered promiscuous mode [ 64.977306][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 65.000201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.010770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.018558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.027334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.036027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.044312][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.051395][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.060124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.069123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.077922][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.085032][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.092750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.101835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.110840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.130965][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.139687][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.148025][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.172089][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.183920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.196530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.216501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.267438][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.280421][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.293663][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.309439][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.317816][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.326343][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.340705][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.361484][ T4188] device veth0_macvtap entered promiscuous mode [ 65.369569][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.378227][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.387748][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.396288][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.403793][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.414806][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.432166][ T4188] device veth1_macvtap entered promiscuous mode [ 65.449601][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.497378][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.535266][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.544091][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.553811][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.563651][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.573901][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.585682][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.594648][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.607135][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.623993][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.633151][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.642089][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.650903][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.665998][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.677207][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.741672][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.751635][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.760707][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.769439][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.778879][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.787501][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.796198][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.804310][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.817239][ T4194] device veth0_vlan entered promiscuous mode [ 65.832642][ T4189] device veth0_vlan entered promiscuous mode [ 65.840798][ T4190] device veth0_vlan entered promiscuous mode [ 65.850358][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.859218][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.867492][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.876597][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.884220][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.892031][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.927330][ T4190] device veth1_vlan entered promiscuous mode [ 65.939130][ T4189] device veth1_vlan entered promiscuous mode [ 65.956748][ T4194] device veth1_vlan entered promiscuous mode [ 65.978460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.990242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.998821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.007174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.015685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.023103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.043213][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.051923][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.060464][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.069363][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.084251][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.105904][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.114212][ T4194] device veth0_macvtap entered promiscuous mode [ 66.123166][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.155885][ T4189] device veth0_macvtap entered promiscuous mode [ 66.162943][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.172832][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.181078][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.191367][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.199991][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.220334][ T4189] device veth1_macvtap entered promiscuous mode [ 66.230330][ T4194] device veth1_macvtap entered promiscuous mode [ 66.238098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.246985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.287525][ T4190] device veth0_macvtap entered promiscuous mode [ 66.294759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.303978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.315430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.323871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.333546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.354353][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.365054][ T425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.365089][ T425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.382347][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.393444][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.409092][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.420894][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.432821][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.441554][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.452468][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.461626][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.470387][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.478973][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.494031][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.506922][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.516949][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.527995][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.539588][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.549282][ T4190] device veth1_macvtap entered promiscuous mode [ 66.561101][ T4187] device veth0_vlan entered promiscuous mode [ 66.583515][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.596062][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.604841][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.614530][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.623868][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.634346][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.643060][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.659040][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.668881][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.677654][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.686648][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.703425][ T4187] device veth1_vlan entered promiscuous mode [ 66.714099][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.725422][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.739154][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.749819][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.761725][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.801647][ T4263] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.848227][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.858339][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.866952][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.877317][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.888918][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.905804][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.921651][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.933786][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.949649][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.963999][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.982242][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.990238][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 66.996622][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 67.003326][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 67.012935][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.023349][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.032508][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.041524][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.066614][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 67.072735][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.081121][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 67.094018][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.107105][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.118490][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.131710][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.148499][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.162676][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.176005][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.192839][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.214023][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.233477][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.242728][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.252281][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.278310][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.287823][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.297472][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.308759][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.333480][ T4187] device veth0_macvtap entered promiscuous mode [ 67.396903][ T4187] device veth1_macvtap entered promiscuous mode [ 67.457387][ T425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.472969][ T425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.520466][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.528459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.539790][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.556178][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.571738][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.581978][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.592899][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.604732][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.616367][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.626946][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.637704][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.650168][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.661079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.669627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.679585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.712112][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.733592][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.746348][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.776391][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.787981][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.798992][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.809181][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.819955][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.831726][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.848434][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.852549][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.866574][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.875559][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.884651][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.901444][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.921704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.931209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.948828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.982873][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.997485][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.030884][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.098570][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.110481][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.136239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.222825][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.263427][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.109375][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 69.115638][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 69.121685][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 69.145895][ T3518] Bluetooth: hci4: command 0x0419 tx timeout [ 69.152014][ T3518] Bluetooth: hci3: command 0x0419 tx timeout [ 69.204133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.210407][ T4276] block device autoloading is deprecated and will be removed. [ 69.252714][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.282372][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.293969][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.309749][ T4275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.335598][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.363017][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.418572][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.427974][ T4275] bond1: (slave bond0): making interface the new active one [ 69.435956][ T4275] bond1: (slave bond0): Enslaving as an active interface with an up link [ 69.444518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.456344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.508114][ T4279] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 69.525616][ T4279] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.549065][ T4275] syz.0.1 (4275) used greatest stack depth: 20976 bytes left [ 69.570566][ T4279] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 69.614191][ T4283] tc action pedit 'at' offset 6 out of bounds [ 70.030772][ T4293] loop0: detected capacity change from 0 to 32768 [ 70.086547][ T4293] XFS: ikeep mount option is deprecated. [ 70.884647][ T4293] XFS (loop0): Mounting V5 Filesystem [ 71.062330][ T4293] XFS (loop0): Ending clean mount [ 71.074371][ T4293] XFS (loop0): Quotacheck needed: Please wait. [ 71.111166][ T4293] XFS (loop0): Quotacheck: Done. [ 71.617261][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.639608][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.140760][ T4327] db_root: cannot be changed: target drivers registered [ 72.158384][ T4314] Config c/1 of g1 needs at least one function. [ 72.215966][ T4314] udc usbip-vudc.0: failed to start g1: -22 [ 72.324209][ T4329] Zero length message leads to an empty skb [ 72.372929][ T4332] loop1: detected capacity change from 0 to 1024 [ 72.452002][ T4332] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 72.849651][ T4332] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.486101][ T4332] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,mblk_io_submit,,errors=continue. Quota mode: none. [ 74.095158][ T4349] futex_wake_op: syz.2.18 tries to shift op by 144; fix this program [ 74.902522][ T4189] XFS (loop0): Unmounting Filesystem [ 75.188688][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 76.615046][ T4365] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.236064][ T4364] futex_wake_op: syz.1.22 tries to shift op by 144; fix this program [ 78.733270][ T4363] autofs4:pid:4363:autofs_fill_super: called with bogus options [ 78.802455][ T4382] tipc: Started in network mode [ 78.826667][ T4382] tipc: Node identity 2687a87a085c, cluster identity 4711 [ 78.862668][ T4382] tipc: Enabled bearer , priority 0 [ 78.887592][ T4384] loop4: detected capacity change from 0 to 512 [ 78.894185][ T4385] device syzkaller0 entered promiscuous mode [ 78.931381][ T4382] tipc: Resetting bearer [ 78.992355][ T4380] tipc: Resetting bearer [ 78.999993][ T4384] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.28: Unrecognised inode hash code 255 [ 79.042528][ T4384] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.28: Corrupt directory, running e2fsck is recommended [ 79.070477][ T4380] tipc: Disabling bearer [ 79.097021][ T4384] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 79.261452][ T4384] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.28: corrupted in-inode xattr [ 79.329966][ T4384] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.28: couldn't read orphan inode 15 (err -117) [ 79.360057][ T4384] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 80.145654][ T4405] netlink: 'syz.1.32': attribute type 12 has an invalid length. [ 81.151410][ T4384] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.28: Unrecognised inode hash code 255 [ 81.163268][ T4384] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.28: Corrupt directory, running e2fsck is recommended [ 81.397279][ T4384] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 4: comm syz.4.28: path /4/file0: bad entry in directory: rec_len % 4 != 0 - offset=512, inode=4294967295, rec_len=65535, size=1024 fake=0 [ 83.424352][ T4425] device syzkaller0 entered promiscuous mode [ 83.453079][ T4425] tipc: Started in network mode [ 83.632497][ T4425] tipc: Node identity 52135611175a, cluster identity 4711 [ 83.735867][ T4425] tipc: Enabled bearer , priority 0 [ 84.442462][ T4425] tipc: Resetting bearer [ 84.605756][ T4424] tipc: Resetting bearer [ 84.716463][ T4424] tipc: Disabling bearer [ 84.741465][ T4446] loop3: detected capacity change from 0 to 32768 [ 84.786265][ T4446] XFS: ikeep mount option is deprecated. [ 84.806035][ T4453] loop4: detected capacity change from 0 to 4096 [ 84.858389][ T4453] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 84.893264][ T4453] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 84.931030][ T4446] XFS (loop3): Mounting V5 Filesystem [ 84.941452][ T4453] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 84.953327][ T4453] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 84.974860][ T4453] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 84.985553][ T4453] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 85.005973][ T4453] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 85.014706][ T4453] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 85.045859][ T4453] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 85.054632][ T1108] tipc: Node number set to 1162434065 [ 85.058073][ T4453] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 85.142349][ T4446] XFS (loop3): Ending clean mount [ 85.150445][ T4446] XFS (loop3): Quotacheck needed: Please wait. [ 85.251491][ T4446] XFS (loop3): Quotacheck: Done. [ 85.400051][ T4453] ntfs: volume version 3.1. [ 86.737584][ T7] cfg80211: failed to load regulatory.db [ 86.964879][ C1] sched: RT throttling activated [ 87.714832][ T4479] device syzkaller0 entered promiscuous mode [ 87.741086][ T4479] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.48'. [ 88.467344][ T4187] XFS (loop3): Unmounting Filesystem [ 88.510737][ T4483] batman_adv: batadv0: Adding interface: dummy0 [ 88.518494][ T4483] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.545000][ T4483] batman_adv: batadv0: Interface activated: dummy0 [ 89.974426][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.983037][ T4481] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.555559][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.597398][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.053782][ T4510] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 91.500585][ T4481] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.530008][ T4481] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.562731][ T4481] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.572929][ T4481] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.794700][ T4486] batadv0: mtu less than device minimum [ 91.800816][ T4481] syz.2.49 (4481) used greatest stack depth: 20304 bytes left [ 91.829886][ T4486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.842984][ T4486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.855678][ T4486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.868385][ T4486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.881072][ T4486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.893819][ T4486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.906638][ T4486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.919636][ T4486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.932255][ T4486] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.066961][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 95.014918][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!! [ 95.034914][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #11a!!! [ 95.044920][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #11a!!! [ 95.054918][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 95.064918][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 95.074916][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 95.094932][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 96.674902][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 96.684917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 96.694902][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 96.874067][ T4563] device syzkaller0 entered promiscuous mode [ 96.888727][ T4561] device syzkaller0 entered promiscuous mode [ 98.049702][ T4571] device syzkaller0 entered promiscuous mode [ 99.261657][ T4577] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.682881][ T4609] device syzkaller0 entered promiscuous mode [ 105.096203][ T4624] loop2: detected capacity change from 0 to 256 [ 105.152488][ T4626] tipc: Enabled bearer , priority 0 [ 105.160116][ T4624] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 105.176418][ T4626] device syzkaller0 entered promiscuous mode [ 105.309150][ T4626] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 105.428628][ T4626] tipc: Resetting bearer [ 105.483767][ T4625] tipc: Resetting bearer [ 105.548107][ T4625] tipc: Disabling bearer [ 108.055230][ T4649] device syzkaller0 entered promiscuous mode [ 109.381917][ T4670] net_ratelimit: 10 callbacks suppressed [ 109.381937][ T4670] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 109.441993][ T4666] loop1: detected capacity change from 0 to 4096 [ 109.536299][ T4666] EXT4-fs (loop1): inline encryption not supported [ 109.593052][ T4666] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 109.610409][ T4666] System zones: 0-5 [ 109.644616][ T4666] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 110.992866][ T4676] loop3: detected capacity change from 0 to 32768 [ 111.055672][ T4676] XFS: ikeep mount option is deprecated. [ 111.320417][ T4676] XFS (loop3): Mounting V5 Filesystem [ 111.464088][ T4676] XFS (loop3): Ending clean mount [ 111.507761][ T4676] XFS (loop3): Quotacheck needed: Please wait. [ 111.660435][ T4704] configfs-gadget gadget: uvc: uvc_function_bind() [ 111.665248][ T4676] XFS (loop3): Quotacheck: Done. [ 112.776595][ T4711] loop1: detected capacity change from 0 to 32768 [ 113.431791][ T4711] XFS (loop1): Mounting V5 Filesystem [ 113.527393][ T4711] XFS (loop1): Ending clean mount [ 113.538178][ T4711] XFS (loop1): Quotacheck needed: Please wait. [ 113.601588][ T4711] XFS (loop1): Quotacheck: Done. [ 114.308652][ T4187] XFS (loop3): Unmounting Filesystem [ 114.620395][ T4188] XFS (loop1): Unmounting Filesystem [ 114.985469][ T4733] autofs4:pid:4733:autofs_fill_super: called with bogus options [ 115.040600][ T4733] process 'syz.0.110' launched './file1' with NULL argv: empty string added [ 115.778207][ T4737] device syzkaller0 entered promiscuous mode [ 117.780647][ T4747] loop0: detected capacity change from 0 to 256 [ 117.817069][ T4747] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 117.923610][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 117.923626][ T26] audit: type=1326 audit(1785170891.861:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4749 comm="syz.2.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c78474e99 code=0x0 [ 118.221043][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.355225][ T1108] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 121.365242][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.417032][ T1108] usb 4-1: config 0 descriptor?? [ 121.603320][ T4783] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 121.744594][ T4787] kvm: emulating exchange as write [ 121.799630][ T1108] usb 4-1: USB disconnect, device number 2 [ 121.890350][ T4778] loop2: detected capacity change from 0 to 16 [ 122.081022][ T4778] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 23300) [ 122.986673][ T4798] loop1: detected capacity change from 0 to 512 [ 123.339433][ T4807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.131'. [ 123.401467][ T4804] loop3: detected capacity change from 0 to 32768 [ 123.447876][ T4804] XFS: ikeep mount option is deprecated. [ 123.466005][ T4798] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.646699][ T4804] XFS (loop3): Mounting V5 Filesystem [ 124.222961][ T4804] XFS (loop3): Ending clean mount [ 124.235627][ T4804] XFS (loop3): Quotacheck needed: Please wait. [ 124.284272][ T4804] XFS (loop3): Quotacheck: Done. [ 124.409194][ T4838] input: syz0 as /devices/virtual/input/input5 [ 125.006219][ T4842] device syzkaller0 entered promiscuous mode [ 125.079277][ T4842] tipc: Enabled bearer , priority 0 [ 125.151519][ T4842] tipc: Resetting bearer [ 125.196300][ T4841] tipc: Resetting bearer [ 125.230296][ T4187] XFS (loop3): Unmounting Filesystem [ 125.240477][ T4841] tipc: Disabling bearer [ 125.288650][ T4851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.137'. [ 125.308696][ T4852] ======================================================= [ 125.308696][ T4852] WARNING: The mand mount option has been deprecated and [ 125.308696][ T4852] and is ignored by this kernel. Remove the mand [ 125.308696][ T4852] option from the mount to silence this warning. [ 125.308696][ T4852] ======================================================= [ 125.719819][ T4848] device syzkaller0 entered promiscuous mode [ 126.800406][ T4860] overlayfs: missing 'lowerdir' [ 131.030304][ T4892] loop2: detected capacity change from 0 to 512 [ 131.828307][ T4892] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.393765][ T4190] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /33/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 132.818338][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.824669][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.028727][ T4967] using random self ethernet address [ 140.034181][ T4967] using random host ethernet address [ 140.135457][ T4935] netlink: 'syz.4.161': attribute type 9 has an invalid length. [ 140.270955][ T4967] usb0: HOST MAC 5a:fa:80:b1:20:88 [ 140.315326][ T4967] usb0: MAC 82:d7:d3:0b:6b:76 [ 141.405077][ T4199] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 141.461237][ T4990] hub 8-0:1.0: USB hub found [ 141.468901][ T4990] hub 8-0:1.0: 1 port detected [ 143.332193][ T5001] overlayfs: failed to clone upperpath [ 143.419041][ T4199] usb 1-1: Dual-Role OTG device on HNP port [ 143.444991][ T4199] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 143.606614][ T5007] loop0: detected capacity change from 0 to 8 [ 143.638445][ T4199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.878645][ T4199] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 5a:fa:80:b1:20:88 [ 145.362963][ T5029] loop1: detected capacity change from 0 to 2048 [ 145.621859][ T5029] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.641678][ T5076] autofs4:pid:5076:autofs_fill_super: called with bogus options [ 152.168365][ T5092] loop3: detected capacity change from 0 to 32768 [ 153.288258][ T5092] XFS (loop3): Mounting V5 Filesystem [ 153.726299][ T5092] XFS (loop3): Ending clean mount [ 153.735874][ T5092] XFS (loop3): Quotacheck needed: Please wait. [ 153.837338][ T5092] XFS (loop3): Quotacheck: Done. [ 153.999952][ T4187] XFS (loop3): Unmounting Filesystem [ 154.326364][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 154.348970][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 154.358154][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 154.367420][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 154.376431][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 154.484093][ T5123] 9pnet_virtio: no channels available for device syz [ 155.016286][ T5134] loop2: detected capacity change from 0 to 32768 [ 155.048075][ T5134] XFS: ikeep mount option is deprecated. [ 155.062376][ T5138] tc action pedit 'at' offset 6 out of bounds [ 155.573176][ T5134] XFS (loop2): Mounting V5 Filesystem [ 156.006639][ T5134] XFS (loop2): Ending clean mount [ 156.014648][ T5134] XFS (loop2): Quotacheck needed: Please wait. [ 156.045201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready [ 156.148070][ T5134] XFS (loop2): Quotacheck: Done. [ 158.026662][ T4190] XFS (loop2): Unmounting Filesystem [ 158.081439][ T5168] loop1: detected capacity change from 0 to 256 [ 166.380723][ T5297] loop2: detected capacity change from 0 to 128 [ 166.517618][ T5297] EXT4-fs (loop2): quotafile must be on filesystem root [ 170.207834][ T5330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.278232][ T5335] xt_hashlimit: max too large, truncated to 1048576 [ 171.290243][ T5335] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 173.164458][ T5353] loop3: detected capacity change from 0 to 128 [ 173.271499][ T5353] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.317838][ T5353] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.677535][ T5365] netlink: 272 bytes leftover after parsing attributes in process `syz.2.234'. [ 174.713042][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 179.491297][ T5428] overlayfs: failed to clone upperpath [ 180.341431][ T5427] loop3: detected capacity change from 0 to 32768 [ 181.811742][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.254'. [ 181.826445][ T5449] overlayfs: missing 'lowerdir' [ 185.189724][ T5502] qrtr: Invalid version 0 [ 186.295065][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 186.305269][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 186.325494][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 186.350191][ T5502] syz.0.264 uses obsolete (PF_INET,SOCK_PACKET) [ 186.370810][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 186.385286][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 189.944583][ T5552] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 190.115230][ T5560] sctp: failed to load transform for md5: -2 [ 190.329677][ T5570] netlink: 36 bytes leftover after parsing attributes in process `syz.4.276'. [ 190.516280][ T5574] mmap: syz.2.281 (5574) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 191.337931][ T4280] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 191.401096][ T5588] fuse: Bad value for 'fd' [ 191.407256][ T4280] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.102944][ T5634] syz.4.288 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 194.726793][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.733205][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.949419][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'. [ 194.963168][ T5636] 9pnet_virtio: no channels available for device syz [ 199.330373][ T5668] sctp: failed to load transform for md5: -2 [ 202.311630][ T5699] loop0: detected capacity change from 0 to 256 [ 202.363415][ T5699] FAT-fs (loop0): Unrecognized mount option "uU 鎰#M Di 9!;lN9A\>{CJdV0" or missing value [ 202.621156][ T5698] loop3: detected capacity change from 0 to 4096 [ 202.719213][ T5698] EXT4-fs (loop3): inline encryption not supported [ 203.855222][ T5698] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 203.863571][ T5698] System zones: 0-5 [ 203.873817][ T5718] program syz.1.302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.358582][ T5698] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 205.279000][ T5718] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 206.000117][ T5752] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 206.385447][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 206.634848][ T5774] xt_CT: No such helper "netbios-ns" [ 206.763538][ T5777] block device autoloading is deprecated and will be removed. [ 208.664907][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 208.844951][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 208.935138][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.967250][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.029617][ T5791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 209.038577][ T5791] device bridge_slave_1 left promiscuous mode [ 209.044949][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.057417][ T5791] device bridge_slave_0 left promiscuous mode [ 209.063655][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.145027][ T23] usb 4-1: string descriptor 0 read error: -71 [ 209.152640][ T23] usb 4-1: New USB device found, idVendor=3d6b, idProduct=0101, bcdDevice= 0.40 [ 209.178863][ T5805] loop3: detected capacity change from 0 to 8 [ 209.248796][ T5805] SQUASHFS error: lzo decompression failed, data probably corrupt [ 209.279044][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.365248][ T23] usb 4-1: can't set config #1, error -71 [ 209.373896][ T5805] SQUASHFS error: Failed to read block 0x91: -5 [ 209.425752][ T23] usb 4-1: USB disconnect, device number 3 [ 209.443175][ T5805] SQUASHFS error: Unable to read metadata cache entry [8f] [ 209.482717][ T5805] SQUASHFS error: Unable to read inode 0x11f [ 211.350310][ T5846] bond0 speed is unknown, defaulting to 1000 [ 211.356817][ T5846] bond0 speed is unknown, defaulting to 1000 [ 211.364402][ T5846] bond0 speed is unknown, defaulting to 1000 [ 211.372957][ T5846] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 211.383782][ T5846] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 211.447247][ T5846] bond0 speed is unknown, defaulting to 1000 [ 211.455071][ T5846] bond0 speed is unknown, defaulting to 1000 [ 211.462115][ T5846] bond0 speed is unknown, defaulting to 1000 [ 211.468732][ T5846] bond0 speed is unknown, defaulting to 1000 [ 211.475364][ T5846] bond0 speed is unknown, defaulting to 1000 [ 211.513824][ T5853] loop3: detected capacity change from 0 to 256 [ 211.547166][ T5853] exfat: Deprecated parameter 'utf8' [ 211.673512][ T5853] exfat: Deprecated parameter 'namecase' [ 211.689949][ T5853] exfat: Deprecated parameter 'namecase' [ 211.708084][ T5853] exfat: Deprecated parameter 'utf8' [ 212.505081][ T5853] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 212.560403][ T5853] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xffff0000) [ 212.623038][ T5853] exFAT-fs (loop3): Filesystem has been set read-only [ 212.663616][ T5853] exFAT-fs (loop3): failed to initialize root inode [ 212.827733][ T5880] futex_wake_op: syz.2.341 tries to shift op by 144; fix this program [ 217.243972][ T5944] loop3: detected capacity change from 0 to 64 [ 220.255184][ T3518] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 222.449682][ T3518] usb 4-1: config 0 has an invalid interface number: 61 but max is 0 [ 222.632662][ T3518] usb 4-1: config 0 has no interface number 0 [ 222.639635][ T3518] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 222.649545][ T3518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.666769][ T3518] usb 4-1: config 0 descriptor?? [ 223.291690][ T3518] usb 4-1: USB disconnect, device number 4 [ 227.132754][ T6043] loop3: detected capacity change from 0 to 4096 [ 227.176835][ T6043] EXT4-fs (loop3): inline encryption not supported [ 227.216686][ T6043] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 227.243008][ T6051] device syzkaller0 entered promiscuous mode [ 227.243789][ T6043] System zones: 0-5 [ 227.285958][ T6043] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 227.365335][ T6057] udc-core: couldn't find an available UDC or it's busy [ 227.372340][ T6057] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 229.177888][ T6111] loop3: detected capacity change from 0 to 256 [ 229.270142][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.279865][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.288426][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.341670][ T6111] FAT-fs (loop3): Directory bread(block 64) failed [ 229.394973][ T6111] FAT-fs (loop3): Directory bread(block 65) failed [ 229.411929][ T6111] FAT-fs (loop3): Directory bread(block 66) failed [ 229.420231][ T6111] FAT-fs (loop3): Directory bread(block 67) failed [ 229.432280][ T6111] FAT-fs (loop3): Directory bread(block 68) failed [ 229.441024][ T6111] FAT-fs (loop3): Directory bread(block 69) failed [ 229.452989][ T6111] FAT-fs (loop3): Directory bread(block 70) failed [ 229.478123][ T6111] FAT-fs (loop3): Directory bread(block 71) failed [ 229.526337][ T6111] FAT-fs (loop3): Directory bread(block 72) failed [ 229.573524][ T6111] FAT-fs (loop3): Directory bread(block 73) failed [ 229.922394][ T6127] hub 8-0:1.0: USB hub found [ 229.927461][ T6127] hub 8-0:1.0: 1 port detected [ 230.249048][ T6150] batman_adv: batadv0: Adding interface: dummy0 [ 230.261809][ T6150] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.320944][ T6150] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 230.369929][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 230.379735][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.387924][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.445538][ T6155] device syzkaller0 entered promiscuous mode [ 231.722668][ T6181] x_tables: duplicate underflow at hook 2 [ 231.818990][ T6188] netlink: 34 bytes leftover after parsing attributes in process `syz.1.443'. [ 234.108359][ T6270] loop3: detected capacity change from 0 to 764 [ 234.317688][ T6270] rock: directory entry would overflow storage [ 234.324171][ T6270] rock: sig=0x4654, size=5, remaining=4 [ 234.536166][ T6270] isofs: Unable to find the ".." directory for NFS. [ 235.971244][ T6330] futex_wake_op: syz.0.472 tries to shift op by 144; fix this program [ 239.112933][ T263] block nbd3: Attempted send on invalid socket [ 239.123112][ T263] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.665969][ T6376] futex_wake_op: syz.1.487 tries to shift op by 144; fix this program [ 243.632655][ T6425] futex_wake_op: syz.4.499 tries to shift op by 144; fix this program [ 245.608799][ T6451] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 245.722726][ T6455] program syz.1.507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.402947][ T6455] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 248.099095][ T6471] trusted_key: encrypted_key: hex blob is missing [ 248.210117][ T6476] xt_hashlimit: max too large, truncated to 1048576 [ 248.218872][ T6476] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 249.998583][ T6473] futex_wake_op: syz.4.514 tries to shift op by 144; fix this program [ 250.178636][ T6487] futex_wake_op: syz.4.532 tries to shift op by 144; fix this program [ 251.343333][ T6509] xt_hashlimit: max too large, truncated to 1048576 [ 251.351921][ T6509] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 252.393570][ T6507] loop3: detected capacity change from 0 to 4096 [ 254.954189][ T3978] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 255.164101][ T6553] futex_wake_op: syz.0.535 tries to shift op by 144; fix this program [ 255.204860][ T3978] usb 2-1: Using ep0 maxpacket: 16 [ 255.315124][ T6557] loop3: detected capacity change from 0 to 64 [ 255.325029][ T3978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.356862][ T3978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.427814][ T3978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 255.546400][ T3978] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 255.566202][ T3978] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 255.574257][ T3978] usb 2-1: Manufacturer: syz [ 255.617339][ T3978] usb 2-1: config 0 descriptor?? [ 255.699070][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.705895][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.069816][ T6561] xt_hashlimit: max too large, truncated to 1048576 [ 256.078601][ T6561] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 256.341619][ T3978] usb 2-1: USB disconnect, device number 2 [ 258.075559][ T3978] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 258.092087][ T6587] device geneve2 entered promiscuous mode [ 258.214136][ T6597] futex_wake_op: syz.1.552 tries to shift op by 144; fix this program [ 258.320955][ T3978] usb 4-1: Using ep0 maxpacket: 32 [ 258.605095][ T3978] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 258.625501][ T3978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.651867][ T3978] usb 4-1: Product: syz [ 258.667588][ T3978] usb 4-1: Manufacturer: syz [ 258.691828][ T3978] usb 4-1: SerialNumber: syz [ 258.735643][ T3978] usb 4-1: config 0 descriptor?? [ 258.780100][ T3978] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 258.805349][ T3978] dvb-usb: bulk message failed: -22 (4/0) [ 258.816099][ T3978] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 258.851003][ T3978] dvb-usb: bulk message failed: -22 (5/0) [ 258.858223][ T3978] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 258.935783][ T3978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.982241][ T6565] dvb-usb: bulk message failed: -22 (7/0) [ 258.997255][ T6565] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 259.015100][ T6565] ttusb2: i2c transfer failed. [ 259.015386][ T3978] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 259.040694][ T3978] usb 4-1: media controller created [ 259.092152][ T3978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.182031][ T3978] usb 4-1: selecting invalid altsetting 3 [ 259.191438][ T3978] ttusb2: set interface to alts=3 failed [ 259.269185][ T3978] DVB: Unable to find symbol tda10086_attach() [ 259.281900][ T3978] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 259.325004][ T3978] dvb-usb: bulk message failed: -22 (4/0) [ 259.330778][ T3978] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 259.341477][ T3978] dvb-usb: bulk message failed: -22 (5/0) [ 259.347638][ T3978] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 259.358100][ T3978] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 259.370787][ T3978] usb 4-1: USB disconnect, device number 5 [ 259.411727][ T3978] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 262.882941][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 262.913522][ T6708] netlink: 52 bytes leftover after parsing attributes in process `syz.3.591'. [ 263.073469][ T6723] loop3: detected capacity change from 0 to 512 [ 263.252163][ T6723] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 263.319807][ T6723] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.629554][ T6748] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 263.649904][ T6748] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 263.888041][ T6760] udc-core: couldn't find an available UDC or it's busy [ 263.896790][ T6760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 264.064804][ T4232] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 264.138419][ T6764] futex_wake_op: syz.4.615 tries to shift op by 144; fix this program [ 264.314807][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 264.467265][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.486251][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.511851][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.604925][ T4232] usb 2-1: New USB device found, idVendor=056a, idProduct=8928, bcdDevice=16.90 [ 264.623430][ T4232] usb 2-1: New USB device strings: Mfr=61, Product=0, SerialNumber=0 [ 264.649253][ T4232] usb 2-1: Manufacturer: syz [ 264.662991][ T4232] usb 2-1: config 0 descriptor?? [ 264.704531][ T6778] loop3: detected capacity change from 0 to 512 [ 264.982709][ T6778] EXT4-fs (loop3): Test dummy encryption mode enabled [ 265.002983][ T6778] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 265.056314][ T6778] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 265.090769][ T6778] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.623: bad orphan inode 131083 [ 265.159868][ T4232] wacom 0003:056A:8928.0002: unknown main item tag 0x0 [ 265.161577][ T6778] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none. [ 265.175178][ T4232] wacom 0003:056A:8928.0002: unknown main item tag 0x0 [ 265.199583][ T4232] wacom 0003:056A:8928.0002: unknown main item tag 0x4 [ 265.214771][ T4232] wacom 0003:056A:8928.0002: unknown main item tag 0x0 [ 265.221724][ T4232] wacom 0003:056A:8928.0002: unknown main item tag 0x0 [ 265.228861][ T4232] wacom 0003:056A:8928.0002: unknown main item tag 0x0 [ 265.236400][ T4232] wacom 0003:056A:8928.0002: unknown main item tag 0x0 [ 265.243390][ T4232] wacom 0003:056A:8928.0002: unknown main item tag 0x0 [ 265.250361][ T4232] wacom 0003:056A:8928.0002: unknown main item tag 0x0 [ 265.257598][ T4232] wacom 0003:056A:8928.0002: unknown main item tag 0x0 [ 265.264577][ T4232] wacom 0003:056A:8928.0002: unknown main item tag 0x0 [ 265.271632][ T4232] wacom 0003:056A:8928.0002: unknown main item tag 0x0 [ 265.278620][ T4232] wacom 0003:056A:8928.0002: unknown main item tag 0x0 [ 265.287520][ T4232] wacom 0003:056A:8928.0002: Unknown device_type for 'syz'. Ignoring. [ 265.378872][ T4232] usb 2-1: USB disconnect, device number 3 [ 265.766730][ T6811] udc-core: couldn't find an available UDC or it's busy [ 265.773784][ T6811] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 268.005835][ T6832] loop3: detected capacity change from 0 to 256 [ 268.185982][ T6832] FAT-fs (loop3): Unrecognized mount option "uU 鎰#M Di 9!;lN9A\>{CJdV0" or missing value [ 269.545141][ T6858] futex_wake_op: syz.1.645 tries to shift op by 144; fix this program [ 269.992633][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 270.043369][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 270.071548][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 270.101411][ T6876] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 270.548784][ T6885] loop3: detected capacity change from 0 to 8192 [ 270.591379][ T6885] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "nolargeio" requires an argument [ 270.591379][ T6885] [ 271.236880][ T6911] loop3: detected capacity change from 0 to 2048 [ 271.322117][ T6911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.064547][ T6930] netlink: 88 bytes leftover after parsing attributes in process `syz.2.678'. [ 273.400917][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 274.464110][ T6990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.694'. [ 275.293769][ T7020] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.706'. [ 278.288165][ T7083] loop3: detected capacity change from 0 to 32768 [ 278.327927][ T7083] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.728 (7083) [ 278.345097][ T3978] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 278.430474][ T7104] futex_wake_op: syz.0.734 tries to shift op by 144; fix this program [ 278.594969][ T3978] usb 2-1: Using ep0 maxpacket: 16 [ 278.715312][ T3978] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 278.758073][ T3978] usb 2-1: config 0 has no interface number 0 [ 278.839800][ T3978] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 278.964439][ T3978] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 279.094127][ T3978] usb 2-1: config 0 interface 41 has no altsetting 0 [ 279.279478][ T7083] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 279.290767][ T7083] BTRFS info (device loop3): setting nodatasum [ 279.297533][ T7083] BTRFS info (device loop3): force zlib compression, level 3 [ 279.306542][ T7083] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 279.316745][ T7083] BTRFS info (device loop3): use lzo compression, level 0 [ 279.323896][ T7083] BTRFS info (device loop3): turning on flush-on-commit [ 279.331873][ T7083] BTRFS info (device loop3): enabling auto defrag [ 279.357703][ T7083] BTRFS info (device loop3): max_inline at 4096 [ 279.374288][ T7083] BTRFS info (device loop3): using free space tree [ 279.384408][ T7083] BTRFS info (device loop3): has skinny extents [ 279.404997][ T3978] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 279.414117][ T3978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.434319][ T3978] usb 2-1: Product: syz [ 279.440094][ T3978] usb 2-1: Manufacturer: syz [ 279.445608][ T3978] usb 2-1: SerialNumber: syz [ 279.463356][ T7114] udc-core: couldn't find an available UDC or it's busy [ 279.489052][ T3978] usb 2-1: config 0 descriptor?? [ 279.495118][ T7114] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 279.741481][ T7094] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 279.794506][ T7094] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 280.261590][ T7083] BTRFS info (device loop3): enabling ssd optimizations [ 280.395014][ T7094] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 280.402132][ T7094] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 281.321491][ T3978] sr9700 2-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, 46:81:7d:0d:59:73 [ 281.400832][ T3978] usb 2-1: USB disconnect, device number 4 [ 281.468091][ T3978] sr9700 2-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 282.144495][ T7179] loop3: detected capacity change from 0 to 128 [ 282.293743][ T7179] FAT-fs (loop3): Directory bread(block 128) failed [ 282.323248][ T7179] FAT-fs (loop3): Directory bread(block 129) failed [ 282.331493][ T7192] capability: warning: `syz.0.748' uses deprecated v2 capabilities in a way that may be insecure [ 282.362644][ T7179] FAT-fs (loop3): Directory bread(block 130) failed [ 282.374802][ T7179] FAT-fs (loop3): Directory bread(block 131) failed [ 282.397323][ T7179] FAT-fs (loop3): Directory bread(block 132) failed [ 282.429663][ T7179] FAT-fs (loop3): Directory bread(block 133) failed [ 282.448305][ T7179] FAT-fs (loop3): Directory bread(block 134) failed [ 282.466591][ T7179] FAT-fs (loop3): Directory bread(block 135) failed [ 282.483410][ T7179] FAT-fs (loop3): Directory bread(block 136) failed [ 282.499525][ T7179] FAT-fs (loop3): Directory bread(block 137) failed [ 282.522275][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.750'. [ 282.919430][ T7220] device erspan0 entered promiscuous mode [ 283.484968][ T3978] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 283.965284][ T4238] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 284.554768][ T3978] usb 2-1: Using ep0 maxpacket: 16 [ 284.605162][ T4238] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 284.615757][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.624105][ T4238] usb 4-1: Product: syz [ 284.649898][ T4238] usb 4-1: Manufacturer: syz [ 284.654548][ T4238] usb 4-1: SerialNumber: syz [ 284.674993][ T3978] usb 2-1: config 0 interface 0 has no altsetting 0 [ 284.684885][ T3978] usb 2-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00 [ 284.713128][ T3978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.740321][ T3978] usb 2-1: config 0 descriptor?? [ 285.550896][ T3978] wacom 0003:056A:0304.0003: unknown main item tag 0x2 [ 285.557975][ T3978] wacom 0003:056A:0304.0003: unknown main item tag 0x6 [ 285.566700][ T3978] wacom 0003:056A:0304.0003: ignoring exceeding usage max [ 285.584043][ T3978] wacom 0003:056A:0304.0003: hidraw0: USB HID v0.81 Device [HID 056a:0304] on usb-dummy_hcd.1-1/input0 [ 285.761775][ T23] usb 2-1: USB disconnect, device number 5 [ 286.707059][ T4238] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 286.762629][ T4238] usb 4-1: unit 3 not found! [ 286.826943][ T4238] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x200, wIndex = 0x600, type = 3 [ 286.930452][ T4238] usb 4-1: USB disconnect, device number 6 [ 287.223893][ T7330] loop3: detected capacity change from 0 to 512 [ 287.261523][ T6417] udevd[6417]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.309052][ T7330] EXT4-fs (loop3): Test dummy encryption mode enabled [ 287.329736][ T7330] EXT4-fs (loop3): Ignoring removed oldalloc option [ 287.419088][ T7330] EXT4-fs (loop3): 1 truncate cleaned up [ 287.436911][ T7330] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,bsdgroups,nouid32,auto_da_alloc=0x0000000000000004,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,,errors=continue. Quota mode: none. [ 287.823383][ T7330] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.784: invalid indirect mapped block 234881024 (level 0) [ 288.563295][ T7360] loop3: detected capacity change from 0 to 8192 [ 288.632789][ T7360] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 288.661239][ T7360] REISERFS (device loop3): using ordered data mode [ 288.684235][ T7360] reiserfs: using flush barriers [ 288.711335][ T7360] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 288.756975][ T7360] REISERFS (device loop3): checking transaction log (loop3) [ 288.778454][ T7360] REISERFS (device loop3): Using r5 hash to sort names [ 288.793755][ T7360] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 289.216400][ T7366] loop3: detected capacity change from 0 to 512 [ 289.626303][ T7366] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nombcache,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 289.685190][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 289.978406][ T7366] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.295304][ T23] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 290.324730][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.332786][ T23] usb 2-1: Product: syz [ 290.365333][ T23] usb 2-1: Manufacturer: syz [ 290.369981][ T23] usb 2-1: SerialNumber: syz [ 290.421721][ T7398] IPv6: addrconf: prefix option has invalid lifetime [ 291.387140][ T7417] capability: warning: `syz.4.808' uses 32-bit capabilities (legacy support in use) [ 291.444303][ T7422] udc-core: couldn't find an available UDC or it's busy [ 291.459394][ T7422] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 291.684919][ T3978] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 292.084864][ T3978] usb 4-1: unable to get BOS descriptor or descriptor too short [ 292.119138][ T7441] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 292.165154][ T3978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.195639][ T3978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.305520][ T7452] usb 1-1: USB disconnect, device number 2 [ 292.366671][ T7452] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 292.378036][ T3978] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 292.387642][ T23] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 292.393984][ T3978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.411147][ T23] usb 2-1: unit 3 not found! [ 292.412975][ T3978] usb 4-1: Product: syz [ 292.420929][ T3978] usb 4-1: Manufacturer: syz [ 292.430045][ T3978] usb 4-1: SerialNumber: syz [ 292.434948][ T23] usb 2-1: cannot get ctl value: req = 0x81, wValue = 0x200, wIndex = 0x600, type = 3 [ 292.497584][ T3978] usb 4-1: selecting invalid altsetting 1 [ 292.501053][ T23] usb 2-1: USB disconnect, device number 6 [ 292.522330][ T3978] usb 4-1: unit 6 not found! [ 293.116477][ T3978] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3 [ 293.126524][ T3978] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 293.189479][ T3978] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 293.350754][ T6417] udevd[6417]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 293.432323][ T1108] usb 4-1: USB disconnect, device number 7 [ 293.576366][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 293.751759][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 293.795568][ T7505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.803513][ T7507] ODEBUG: Out of memory. ODEBUG disabled [ 293.844880][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 294.075182][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.210069][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.409599][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.678528][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 294.838483][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.861351][ T7528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.838'. [ 294.862330][ T23] usb 2-1: config 0 descriptor?? [ 295.248415][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.847'. [ 295.303194][ T3978] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 295.350901][ T23] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 295.371498][ T23] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 295.401205][ T23] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 295.420987][ T23] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 295.444363][ T23] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 295.467671][ T23] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 295.485691][ T23] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 295.506658][ T23] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 295.522882][ T23] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 295.537650][ T23] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 295.544768][ T3978] usb 4-1: Using ep0 maxpacket: 16 [ 295.561167][ T23] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 295.571724][ T23] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 295.584716][ T23] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 295.592104][ T23] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 295.645341][ T23] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 295.660192][ T23] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 295.664941][ T3978] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 295.687067][ T3978] usb 4-1: config 0 has no interface number 0 [ 295.692212][ T23] microsoft 0003:045E:07DA.0004: no inputs found [ 295.701216][ T23] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 295.703599][ T3978] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 295.730147][ T7335] udevd[7335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.748094][ T3978] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 295.924996][ T3978] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 295.946495][ T3978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.975316][ T3978] usb 4-1: Product: syz [ 295.979531][ T3978] usb 4-1: Manufacturer: syz [ 295.982908][ T1108] usb 2-1: USB disconnect, device number 7 [ 295.984147][ T3978] usb 4-1: SerialNumber: syz [ 295.997030][ T3978] usb 4-1: config 0 descriptor?? [ 296.015043][ T7537] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 296.022131][ T7537] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 296.264333][ T7537] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 296.284893][ T7537] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 296.514897][ T3978] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 296.594266][ T7597] input: syz0 as /devices/virtual/input/input12 [ 296.945036][ T3978] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 296.971743][ T3978] asix: probe of 4-1:0.34 failed with error -71 [ 297.033966][ T3978] usb 4-1: USB disconnect, device number 8 [ 297.385400][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'. [ 297.398816][ T7631] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 297.605008][ T7642] loop3: detected capacity change from 0 to 128 [ 298.411113][ T7667] device tunl0 entered promiscuous mode [ 298.444884][ T7667] netlink: 'syz.2.867': attribute type 4 has an invalid length. [ 298.452576][ T7667] netlink: 9 bytes leftover after parsing attributes in process `syz.2.867'. [ 298.669903][ T7681] loop3: detected capacity change from 0 to 1024 [ 298.695091][ T7681] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 298.753581][ T7681] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nomblk_io_submit,grpid,nombcache,,errors=continue. Quota mode: none. [ 298.779411][ T7681] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.895684][ T7681] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 8: comm syz.3.872: lblock 8 mapped to illegal pblock 8 (length 8) [ 298.953618][ T7685] syz.3.872 (7685) used greatest stack depth: 20144 bytes left [ 299.185629][ T7695] bridge0: port 3(syz_tun) entered blocking state [ 299.196693][ T7695] bridge0: port 3(syz_tun) entered disabled state [ 299.208944][ T7695] device syz_tun entered promiscuous mode [ 299.249200][ T7695] bridge0: port 3(syz_tun) entered blocking state [ 299.256132][ T7695] bridge0: port 3(syz_tun) entered forwarding state [ 299.487074][ T7709] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 299.542218][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.885'. [ 299.589865][ T7714] loop3: detected capacity change from 0 to 2048 [ 299.601094][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.885'. [ 299.649834][ T7714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.675681][ T7715] device gretap0 entered promiscuous mode [ 299.701355][ T7715] device gretap0 left promiscuous mode [ 299.904789][ T7716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.885'. [ 299.927930][ T7716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.885'. [ 299.960974][ T7716] device gretap0 entered promiscuous mode [ 300.001911][ T7716] device gretap0 left promiscuous mode [ 300.093885][ T7725] futex_wake_op: syz.1.887 tries to shift op by 144; fix this program [ 301.054280][ T7734] input: syz0 as /devices/virtual/input/input13 [ 301.188545][ T7740] bridge0: port 3(syz_tun) entered blocking state [ 301.219480][ T7740] bridge0: port 3(syz_tun) entered disabled state [ 301.233484][ T7740] device syz_tun entered promiscuous mode [ 301.255928][ T7740] bridge0: port 3(syz_tun) entered blocking state [ 301.262472][ T7740] bridge0: port 3(syz_tun) entered forwarding state [ 301.981631][ T7786] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 301.981631][ T7786] The task syz.1.906 (7786) triggered the difference, watch for misbehavior. [ 302.664701][ T4233] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 303.009451][ T7821] 9pnet: Insufficient options for proto=fd [ 303.234833][ T4233] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 303.258675][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.271765][ T7826] overlayfs: failed to clone upperpath [ 303.294921][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.304771][ T4233] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 303.424904][ T4233] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 303.434005][ T4233] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 303.469203][ T4233] usb 4-1: Manufacturer: syz [ 303.491539][ T4233] usb 4-1: config 0 descriptor?? [ 304.925935][ T4233] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 304.965374][ T4233] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 305.139523][ T7846] bridge0: port 3(syz_tun) entered blocking state [ 305.146420][ T7846] bridge0: port 3(syz_tun) entered disabled state [ 305.154178][ T7846] device syz_tun entered promiscuous mode [ 305.164532][ T4233] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 305.179511][ T7846] bridge0: port 3(syz_tun) entered blocking state [ 305.186116][ T7846] bridge0: port 3(syz_tun) entered forwarding state [ 305.238742][ T4233] usb 4-1: USB disconnect, device number 9 [ 305.450010][ T7851] fido_id[7851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 305.687537][ T7875] device vlan2 entered promiscuous mode [ 305.693221][ T7875] device team0 entered promiscuous mode [ 305.699323][ T7875] device team_slave_0 entered promiscuous mode [ 305.706597][ T7875] device team_slave_1 entered promiscuous mode [ 305.716924][ T7875] netlink: 'syz.4.939': attribute type 10 has an invalid length. [ 305.735917][ T7875] netlink: 40 bytes leftover after parsing attributes in process `syz.4.939'. [ 305.845043][ T7875] device geneve0 entered promiscuous mode [ 305.851757][ T7875] team0: Port device geneve0 added [ 306.051037][ T7886] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 308.374699][ T23] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 309.076605][ T23] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 309.098071][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.121174][ T23] usb 2-1: Product: syz [ 309.133793][ T23] usb 2-1: Manufacturer: syz [ 309.145586][ T23] usb 2-1: SerialNumber: syz [ 309.229318][ T7893] loop3: detected capacity change from 0 to 32768 [ 309.253563][ T7893] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.944 (7893) [ 309.286209][ T7893] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 309.300747][ T7893] BTRFS info (device loop3): setting nodatasum [ 309.310365][ T7893] BTRFS info (device loop3): disabling tree log [ 309.318841][ T7893] BTRFS info (device loop3): max_inline at 0 [ 309.331801][ T7893] BTRFS info (device loop3): turning on sync discard [ 309.342313][ T7893] BTRFS info (device loop3): using free space tree [ 309.353722][ T7893] BTRFS info (device loop3): has skinny extents [ 309.596081][ T7893] BTRFS info (device loop3): enabling ssd optimizations [ 309.597440][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.959'. [ 310.605670][ T23] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 310.626457][ T23] usb 2-1: unit 3 not found! [ 310.644757][ T23] usb 2-1: cannot get ctl value: req = 0x81, wValue = 0x200, wIndex = 0x600, type = 3 [ 310.696770][ T23] usb 2-1: USB disconnect, device number 8 [ 310.929061][ T7335] udevd[7335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.231202][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 313.406458][ T8006] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 313.439498][ T8006] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 313.470013][ T8006] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 314.084383][ T8051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.986'. [ 314.119279][ T8056] device syzkaller1 entered promiscuous mode [ 314.339065][ T1108] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 314.514821][ T8088] udc-core: couldn't find an available UDC or it's busy [ 314.530228][ T8088] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 314.595961][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 314.716125][ T1108] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 314.731488][ T1108] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 314.749973][ T1108] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 314.761842][ T1108] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 314.781846][ T1108] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 314.793134][ T1108] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.811035][ T1108] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.822953][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.094834][ T1108] usb 4-1: GET_CAPABILITIES returned 0 [ 315.100715][ T1108] usbtmc 4-1:16.0: can't read capabilities [ 315.314754][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 315.330729][ T8050] usbtmc 4-1:16.0: Unable to send data, error -71 [ 315.345076][ T1108] usb 4-1: USB disconnect, device number 10 [ 317.143215][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.149668][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.491520][ T8203] loop3: detected capacity change from 0 to 32768 [ 317.554817][ T8203] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1025 (8203) [ 317.573313][ T8203] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 317.582857][ T8203] BTRFS info (device loop3): turning off barriers [ 317.589378][ T8203] BTRFS info (device loop3): enabling auto defrag [ 317.595898][ T8203] BTRFS info (device loop3): force zlib compression, level 3 [ 317.603340][ T8203] BTRFS info (device loop3): enabling ssd optimizations [ 317.610162][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 317.610349][ T8203] BTRFS info (device loop3): using spread ssd allocation scheme [ 317.626881][ T8203] BTRFS info (device loop3): using free space tree [ 317.633428][ T8203] BTRFS info (device loop3): has skinny extents [ 318.690167][ T8203] BTRFS info (device loop3): not using ssd optimizations [ 318.698038][ T8203] BTRFS info (device loop3): not using spread ssd allocation scheme [ 318.706158][ T8203] BTRFS info (device loop3): enabling ssd optimizations [ 318.713131][ T8203] BTRFS info (device loop3): using spread ssd allocation scheme [ 319.052427][ T8275] bridge0: port 1(syz_tun) entered blocking state [ 319.061775][ T8275] bridge0: port 1(syz_tun) entered disabled state [ 319.115511][ T8275] device syz_tun entered promiscuous mode [ 319.324698][ T4231] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 319.564668][ T4238] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 319.735110][ T4231] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.914874][ T4238] usb 4-1: Using ep0 maxpacket: 32 [ 320.055724][ T4238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.545168][ T4238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.596537][ T4238] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 320.606345][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.634515][ T4238] usb 4-1: config 0 descriptor?? [ 320.675805][ T4238] hub 4-1:0.0: USB hub found [ 320.713579][ T8333] skbuff: skb_under_panic: text:ffffffff88034440 len:74 put:14 head:ffff888048da9800 data:ffff888048da97f2 tail:0x3c end:0xc0 dev:syz_tun [ 320.727985][ T8333] ------------[ cut here ]------------ [ 320.733456][ T8333] kernel BUG at net/core/skbuff.c:112! [ 320.738978][ T8333] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 320.745062][ T8333] CPU: 1 PID: 8333 Comm: syz.4.1058 Not tainted syzkaller #0 [ 320.752441][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 320.762488][ T8333] RIP: 0010:skb_panic+0x150/0x160 [ 320.767516][ T8333] Code: c7 20 fa 1e 8b 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 41 52 55 41 57 41 56 e8 54 13 f6 ff 48 83 c4 20 <0f> 0b 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 55 48 89 e5 41 57 [ 320.787119][ T8333] RSP: 0018:ffffc90004f36ca0 EFLAGS: 00010286 [ 320.793189][ T8333] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 9540746f03ee3c00 [ 320.794820][ T4231] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 320.801153][ T8333] RDX: ffffc9000e1f9000 RSI: 000000000000489e RDI: 000000000000489f [ 320.801171][ T8333] RBP: 00000000000000c0 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 320.801183][ T8333] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff888048d163d0 [ 320.801196][ T8333] R13: ffff888048da9800 R14: ffff888048da97f2 R15: 000000000000003c [ 320.842066][ T8333] FS: 00007f61c6fd86c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 320.850999][ T8333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.857587][ T8333] CR2: 0000001b32c1eff8 CR3: 0000000048d00000 CR4: 00000000003506e0 [ 320.865552][ T8333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.873527][ T8333] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.881507][ T8333] Call Trace: [ 320.884783][ T8333] [ 320.887705][ T8333] ? eth_header+0x30/0x200 [ 320.892115][ T8333] ? eth_header+0x30/0x200 [ 320.896537][ T8333] skb_push+0xba/0xd0 [ 320.900511][ T8333] eth_header+0x30/0x200 [ 320.904828][ T8333] nf_send_reset6+0xc1d/0xff0 [ 320.909496][ T8333] ? _local_bh_enable+0xa0/0xa0 [ 320.914341][ T8333] ? nf_reject_skb_v6_unreach+0x12d0/0x12d0 [ 320.920223][ T8333] ? __local_bh_enable_ip+0x136/0x1c0 [ 320.925604][ T8333] ? ip6t_do_table+0x1350/0x1500 [ 320.930538][ T8333] nft_reject_inet_eval+0x325/0x680 [ 320.935745][ T8333] nft_do_chain+0x491/0x14d0 [ 320.940330][ T8333] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 320.946313][ T8333] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 320.952203][ T8333] ? nf_nat_inet_fn+0x772/0xad0 [ 320.957066][ T8333] ? ipv6_find_tlv+0x270/0x270 [ 320.961845][ T8333] nft_do_chain_inet+0x25c/0x340 [ 320.966774][ T8333] ? nft_do_chain_arp+0xf0/0xf0 [ 320.971614][ T8333] ? nf_nat_ipv6_in+0x1e8/0x2b0 [ 320.976463][ T8333] ? nf_xfrm_me_harder+0x6a0/0x6a0 [ 320.981573][ T8333] ? ipv6_defrag+0x2d2/0x3a0 [ 320.986174][ T8333] ? nft_do_chain_arp+0xf0/0xf0 [ 320.991029][ T8333] nf_hook_slow+0xb9/0x200 [ 320.995435][ T8333] br_nf_pre_routing_ipv6+0x53a/0x670 [ 321.000801][ T8333] ? br_nf_check_hbh_len+0x590/0x590 [ 321.006076][ T8333] ? br_nf_pre_routing_ipv6+0x670/0x670 [ 321.011610][ T8333] ? br_nf_pre_routing+0x6cb/0x1450 [ 321.016802][ T8333] ? br_nf_hook_thresh+0x4a0/0x4a0 [ 321.021906][ T8333] br_handle_frame+0xec1/0x10d0 [ 321.026747][ T8333] ? br_handle_frame_dummy+0x10/0x10 [ 321.032020][ T8333] ? brport_get_ownership+0x80/0x80 [ 321.037208][ T8333] ? br_handle_frame_dummy+0x10/0x10 [ 321.042482][ T8333] __netif_receive_skb_core+0xfd5/0x3670 [ 321.048103][ T8333] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 321.054083][ T8333] ? lock_chain_count+0x20/0x20 [ 321.058923][ T8333] ? set_rps_cpu+0x660/0x660 [ 321.063519][ T8333] ? ktime_get_with_offset+0xff/0x320 [ 321.068881][ T8333] ? read_lock_is_recursive+0x10/0x10 [ 321.074253][ T8333] __netif_receive_skb+0x74/0x290 [ 321.079283][ T8333] ? ktime_get_with_offset+0x2d7/0x320 [ 321.084737][ T8333] netif_receive_skb+0x19e/0x700 [ 321.089678][ T8333] ? __bpf_trace_softirq+0x10/0x10 [ 321.094778][ T8333] ? netif_receive_skb_core+0x210/0x210 [ 321.100313][ T8333] tun_rx_batched+0x606/0x760 [ 321.104995][ T8333] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 321.110977][ T8333] ? local_bh_enable+0x20/0x20 [ 321.115728][ T8333] ? __local_bh_enable_ip+0x136/0x1c0 [ 321.121093][ T8333] ? read_lock_is_recursive+0x10/0x10 [ 321.126456][ T8333] ? __local_bh_enable_ip+0x136/0x1c0 [ 321.131814][ T8333] ? _local_bh_enable+0xa0/0xa0 [ 321.136655][ T8333] ? skb_set_owner_w+0x213/0x340 [ 321.141589][ T8333] tun_get_user+0x25bf/0x3b60 [ 321.146260][ T8333] ? tun_ring_recv+0xc90/0xc90 [ 321.151186][ T8333] ? rcu_lock_release+0x5/0x20 [ 321.155940][ T8333] ? __lock_acquire+0x7b50/0x7b50 [ 321.160970][ T8333] tun_chr_write_iter+0x112/0x1e0 [ 321.165982][ T8333] vfs_write+0x748/0xd70 [ 321.170216][ T8333] ? file_end_write+0x250/0x250 [ 321.175054][ T8333] ? __fget_files+0x402/0x470 [ 321.179728][ T8333] ? __fdget_pos+0x1e2/0x370 [ 321.184362][ T8333] ? ksys_write+0x70/0x260 [ 321.188799][ T8333] ksys_write+0x153/0x260 [ 321.193125][ T8333] ? __ia32_sys_read+0x80/0x80 [ 321.197901][ T8333] ? lockdep_hardirqs_on+0x94/0x140 [ 321.203087][ T8333] do_syscall_64+0x4c/0xa0 [ 321.207506][ T8333] ? clear_bhb_loop+0x30/0x80 [ 321.212169][ T8333] ? clear_bhb_loop+0x30/0x80 [ 321.216832][ T8333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.222724][ T8333] RIP: 0033:0x7f61c8d406ce [ 321.227149][ T8333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 321.246760][ T8333] RSP: 002b:00007f61c6fd7fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.255164][ T8333] RAX: ffffffffffffffda RBX: 00007f61c6fd86c0 RCX: 00007f61c8d406ce [ 321.263143][ T8333] RDX: 000000000000004a RSI: 0000200000000040 RDI: 00000000000000c8 [ 321.271123][ T8333] RBP: 00007f61c8e15eaf R08: 0000000000000000 R09: 0000000000000000 [ 321.279125][ T8333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.287117][ T8333] R13: 00007f61c9008038 R14: 00007f61c9007fa0 R15: 00007ffd7a935fa8 [ 321.295092][ T8333] [ 321.298121][ T8333] Modules linked in: [ 321.302108][ T8333] ---[ end trace ff6ebf997eafdd42 ]--- [ 321.307620][ T8333] RIP: 0010:skb_panic+0x150/0x160 [ 321.312680][ T8333] Code: c7 20 fa 1e 8b 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 41 52 55 41 57 41 56 e8 54 13 f6 ff 48 83 c4 20 <0f> 0b 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 55 48 89 e5 41 57 [ 321.332343][ T8333] RSP: 0018:ffffc90004f36ca0 EFLAGS: 00010286 [ 321.338465][ T8333] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 9540746f03ee3c00 [ 321.346476][ T8333] RDX: ffffc9000e1f9000 RSI: 000000000000489e RDI: 000000000000489f [ 321.354465][ T8333] RBP: 00000000000000c0 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 321.362461][ T8333] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff888048d163d0 [ 321.370467][ T8333] R13: ffff888048da9800 R14: ffff888048da97f2 R15: 000000000000003c [ 321.378464][ T8333] FS: 00007f61c6fd86c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 321.387426][ T8333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.394003][ T8333] CR2: 0000001b32c1eff8 CR3: 0000000048d00000 CR4: 00000000003506e0 [ 321.402018][ T8333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.410021][ T8333] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 321.418044][ T8333] Kernel panic - not syncing: Fatal exception in interrupt [ 321.425452][ T8333] Kernel Offset: disabled [ 321.429790][ T8333] Rebooting in 86400 seconds..