last executing test programs: 57.410998612s ago: executing program 1 (id=244): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x2, 0x3, 0xc3, 0x3]}]}, 0x78}}, 0x0) 57.180534886s ago: executing program 1 (id=248): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newsa={0x158, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075c, 0xff}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000080000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a006e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002ebd7000043500000a0001fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x801}, 0x10) 57.068531448s ago: executing program 1 (id=251): setuid(0xee01) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 56.950112941s ago: executing program 1 (id=254): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4004, &(0x7f0000005800)={[{@adaptive_mode}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@noinline_xattr}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@fastboot}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@fastboot}]}, 0x21, 0x5533, &(0x7f00000002c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x14a0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 54.937418862s ago: executing program 1 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='!:kprobes/', 0xa) 52.971210273s ago: executing program 1 (id=293): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}}, 0x0) 52.722531589s ago: executing program 32 (id=293): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}}, 0x0) 6.454263276s ago: executing program 4 (id=894): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) 6.349968218s ago: executing program 4 (id=897): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) 6.250793661s ago: executing program 4 (id=900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xac, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x64, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x4400, @void, @void, @void, @void, @val={0x6, 0x2, 0x2}, @val={0x5, 0x3, {0x4, 0x6e, 0x8}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x6c, 0x1}}, @val={0x2d, 0x1a, {0xc, 0x0, 0x4, 0x0, {0x7, 0x1f81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x3, 0xfff, 0x8}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x2, 0x41}}, @val={0x76, 0x6, {0x7, 0x8, 0x4, 0xe}}}}, @NL80211_ATTR_IE={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xbc}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x177}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]]}, 0xac}}, 0x4880) 6.128267593s ago: executing program 4 (id=901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xf6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 6.058137195s ago: executing program 4 (id=904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000850000007d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, r0}, 0xc) 5.892691878s ago: executing program 4 (id=907): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x4) 1.255174704s ago: executing program 2 (id=962): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000200)={0x0, 0xd, 0x0, "6e145c0ef63b736608314ceb833d278f8739057c56b9f38df459aa6db8a9f4d6"}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x3ff, 0x4, 0x9, 0x1, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0xf3, 0x3, 0xfffffffa, 0x0, 0x5, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x7, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x1, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x10000, 0x7d, 0x4, 0x2, 0xa, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0x9, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0xfffffffe, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x106, 0x7, 0x9, 0x7ffffffe, 0xc, 0xfffffffe, 0x2, 0x8084, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x100, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.189340016s ago: executing program 2 (id=963): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffffffffffff02) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x3) 1.164854956s ago: executing program 0 (id=965): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) 1.036067109s ago: executing program 2 (id=967): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x9, 0x0, 0x3, 0x1, 0xe, 0x1124}, 0x17) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.028531709s ago: executing program 0 (id=968): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000580)="18", 0x1}], 0x1) 929.672621ms ago: executing program 2 (id=970): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x61d9, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 906.536821ms ago: executing program 0 (id=971): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) recvmmsg(r1, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000006d00)=""/4082, 0x1000}, {0x0, 0x1e}], 0x2}, 0x6}], 0x2, 0x2, 0x0) 808.933933ms ago: executing program 0 (id=973): r0 = syz_create_resource$futex(&(0x7f0000000000)) futex(r0, 0x6, 0x0, 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) futex(r0, 0x7, 0x2, 0x0, 0x0, 0x2) 799.617424ms ago: executing program 3 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0,', 0x2) 783.625244ms ago: executing program 2 (id=975): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xf40, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302", 0x6, 0x4004, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 761.641494ms ago: executing program 5 (id=976): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) move_pages(0x0, 0x1, &(0x7f00000009c0)=[&(0x7f0000aeb000/0x3000)=nil], 0x0, &(0x7f0000000a00), 0x2) 737.584835ms ago: executing program 3 (id=977): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, &(0x7f0000000280), 0x0, 0x8) 718.129955ms ago: executing program 0 (id=978): r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000001c0)=0x4) syz_mount_image$ocfs2(&(0x7f0000000340), &(0x7f00000044c0)='./file1\x00', 0x800401, &(0x7f0000000440)={[{@data_ordered}, {@resv_level={'resv_level', 0x3d, 0x2}}, {@heartbeat_none}, {@coherency_buffered}, {@err_cont}, {@barrier={'barrier', 0x3d, 0xffffff}}, {@nouser_xattr}, {@noacl}, {@data_ordered}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x1}}]}, 0x8, 0x4479, &(0x7f0000008c00)="$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") llistxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 693.537626ms ago: executing program 2 (id=979): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xa318, 0x2002) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x0, 0x1}, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 635.085097ms ago: executing program 5 (id=980): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x44444) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) 570.641409ms ago: executing program 3 (id=981): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f00000003c0), 0x4) ppoll(&(0x7f0000000000)=[{r0, 0x100}], 0x54, 0x0, 0x0, 0x0) 472.5617ms ago: executing program 3 (id=982): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 405.931972ms ago: executing program 5 (id=983): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) 321.493654ms ago: executing program 5 (id=984): mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x8cffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000040)) 320.327614ms ago: executing program 3 (id=985): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 299.941064ms ago: executing program 5 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000240), 0x12) 187.382216ms ago: executing program 5 (id=987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x8, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 127.055807ms ago: executing program 3 (id=988): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, 0x0}) 0s ago: executing program 0 (id=989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @rand_addr=0x1, 0xdffd, 0x2, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x0, 0x2000040}}, 0x44) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): ve_1 entered promiscuous mode [ 65.721446][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.730015][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.742113][ T4195] device bridge_slave_1 entered promiscuous mode [ 65.750969][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.761291][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.771273][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.784782][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.810618][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.818720][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.837317][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.861942][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.903620][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.939318][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.955736][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.968714][ T4187] team0: Port device team_slave_0 added [ 65.988281][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.002642][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.018815][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.030467][ T4187] team0: Port device team_slave_1 added [ 66.084482][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.113991][ T4199] team0: Port device team_slave_0 added [ 66.144881][ T4199] team0: Port device team_slave_1 added [ 66.175367][ T4195] team0: Port device team_slave_0 added [ 66.182895][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.196826][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.240937][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.274512][ T4195] team0: Port device team_slave_1 added [ 66.281225][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.288751][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.315251][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.337911][ T4186] team0: Port device team_slave_0 added [ 66.377806][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.381239][ T4186] team0: Port device team_slave_1 added [ 66.390862][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.398512][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.424626][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.437279][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.444255][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.470282][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.491625][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.498933][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.525186][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.538352][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.545347][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.572310][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.572592][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 66.589681][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 66.589827][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 66.602796][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 66.609156][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 66.650127][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.658364][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.670633][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.679770][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.706094][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.720764][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.727949][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.754058][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.785368][ T3850] infiniband rxe0: set active [ 66.790717][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.861934][ T4195] device hsr_slave_0 entered promiscuous mode [ 66.869002][ T4195] device hsr_slave_1 entered promiscuous mode [ 66.876059][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.884633][ T4195] Cannot create hsr debugfs directory [ 66.913683][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.922220][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.928965][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.936615][ T4186] Cannot create hsr debugfs directory [ 66.972241][ T4199] device hsr_slave_0 entered promiscuous mode [ 66.979503][ T4199] device hsr_slave_1 entered promiscuous mode [ 66.986119][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.994050][ T4199] Cannot create hsr debugfs directory [ 67.235804][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.291873][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.312279][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.344598][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.354983][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.424334][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.431573][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.439871][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.457887][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.465052][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.473248][ T4185] device bridge_slave_1 entered promiscuous mode [ 67.491536][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.500657][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.510912][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.534573][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.546935][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.581695][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.638987][ T4185] team0: Port device team_slave_0 added [ 67.657667][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.681498][ T4185] team0: Port device team_slave_1 added [ 67.699336][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.723594][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.733356][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.743466][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.769722][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.778423][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.804731][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.817012][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.832524][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.849142][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.856132][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.882295][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.907140][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.924370][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.977810][ T4185] device hsr_slave_0 entered promiscuous mode [ 67.985565][ T4185] device hsr_slave_1 entered promiscuous mode [ 67.992911][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.001054][ T4185] Cannot create hsr debugfs directory [ 68.021533][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.050392][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.063327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.073850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.083253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.092733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.111727][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.121823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.132296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.142169][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.149517][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.193946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.202632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.211896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.221204][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.228348][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.237992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.246926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.255490][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.262649][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.271529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.306798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.315609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.325482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.334167][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.341324][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.351329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.361373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.370380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.380135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.389704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.428710][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.445427][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.468118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.487456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.496204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.511294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.521786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.530876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.541182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.552648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.562075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.572387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.581543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.591289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.599747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.614659][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.642249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.648339][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 68.658665][ T4263] Bluetooth: hci4: command 0x041b tx timeout [ 68.664143][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 68.671747][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 68.678099][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 68.684889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.693857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.702689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.734540][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.753426][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.761417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.771976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.831284][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.871356][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.881027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.890875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.900401][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.907560][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.918229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.927959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.936914][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.944009][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.952897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.961921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.970427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.981748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.997754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.021038][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.035802][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.048520][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.058069][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.070346][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.080173][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.089877][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.099496][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.112560][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.123162][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.158290][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.173875][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.183366][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.199702][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.212527][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.234048][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.243267][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.252953][ T3075] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.260091][ T3075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.271612][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.280085][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.289407][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.298903][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.307159][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.316087][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.325717][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.335894][ T3075] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.343021][ T3075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.358832][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.376244][ T4187] device veth0_vlan entered promiscuous mode [ 69.396331][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.414604][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.424548][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.438410][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.446012][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.454847][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.469279][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.484110][ T4187] device veth1_vlan entered promiscuous mode [ 69.492846][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.503243][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.513370][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.523672][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.567201][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.575744][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.585072][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.594911][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.604113][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.613859][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.634910][ T4187] device veth0_macvtap entered promiscuous mode [ 69.652363][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.666422][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.682990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.694749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.710190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.719539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.730126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.740664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.750180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.763070][ T4187] device veth1_macvtap entered promiscuous mode [ 69.796631][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.804694][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.814217][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.843083][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.869777][ T4195] device veth0_vlan entered promiscuous mode [ 69.884819][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.912089][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.921247][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.952632][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.961338][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.975708][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.983844][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.999086][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.024121][ T4195] device veth1_vlan entered promiscuous mode [ 70.054450][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.063355][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.085035][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.109379][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.119112][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.128842][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.138126][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.159031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.225486][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.237691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.257781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.283086][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.290980][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.307195][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.320080][ T4195] device veth0_macvtap entered promiscuous mode [ 70.343485][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.365495][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.374191][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.383579][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.393753][ T4195] device veth1_macvtap entered promiscuous mode [ 70.424459][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.432906][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.442275][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.452811][ T3075] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.459938][ T3075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.497309][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.505603][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.519274][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.530580][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.540774][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.549711][ T3075] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.556849][ T3075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.572523][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.583859][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.598352][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.617229][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.625293][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.647351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.656169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.666416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.676865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.685599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.698152][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.713012][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.724195][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.731943][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 70.738221][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 70.752693][ T4186] device veth0_vlan entered promiscuous mode [ 70.760125][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 70.767832][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 70.782366][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 70.792496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.802045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.812007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.821318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.830645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.840850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.848847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.859598][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.868872][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.877994][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.888935][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.910589][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.918988][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.930501][ T4186] device veth1_vlan entered promiscuous mode [ 70.941307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.950092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.958699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.968534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.978266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.986184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.017627][ T4199] device veth0_vlan entered promiscuous mode [ 71.030707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.055592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.092879][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.113376][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.143704][ T4199] device veth1_vlan entered promiscuous mode [ 71.175047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.188658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.202469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.211927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.221026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.231250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.242567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.251871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.261097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.291078][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.297767][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.310208][ T4186] device veth0_macvtap entered promiscuous mode [ 71.333645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.342513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.360503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.370579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.381930][ T4186] device veth1_macvtap entered promiscuous mode [ 71.394494][ T690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.417928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.430360][ T690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.440658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.451634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.505496][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.518188][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.538953][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.554762][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.572616][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.583450][ T690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.598525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.613654][ T690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.623053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.633941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.642993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.652804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.670608][ T4199] device veth0_macvtap entered promiscuous mode [ 71.682818][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.695716][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.711460][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.722558][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.736296][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.756314][ T4199] device veth1_macvtap entered promiscuous mode [ 71.766857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.775700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.786208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.797209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.815237][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.828374][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.839496][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.849554][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.883017][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.895017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.907545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.938387][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.960257][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.972340][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.982336][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.994526][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.006193][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.030981][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.045875][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.090503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.131253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.158740][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.196596][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.206465][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.234750][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.245625][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.257605][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.269163][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.291434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.318480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.362843][ T4297] loop0: detected capacity change from 0 to 32768 [ 72.370581][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.384924][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.400481][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.412073][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.443269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.463710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.487626][ T690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.510493][ T690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.553571][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.570395][ T4297] XFS (loop0): Mounting V5 Filesystem [ 72.612024][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.622403][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.631308][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.639481][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.656094][ T4185] device veth0_vlan entered promiscuous mode [ 72.710895][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.750949][ T4297] XFS (loop0): Ending clean mount [ 72.755456][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.777488][ T4185] device veth1_vlan entered promiscuous mode [ 72.807677][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 72.817322][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 72.817519][ T4261] Bluetooth: hci0: command 0x0419 tx timeout [ 72.823388][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 72.839893][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.852623][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.862237][ T4261] Bluetooth: hci4: command 0x0419 tx timeout [ 72.874959][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.909510][ T4185] device veth0_macvtap entered promiscuous mode [ 72.926383][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.936324][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.944818][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.953530][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.964683][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.974027][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.991426][ T4185] device veth1_macvtap entered promiscuous mode [ 73.018941][ T4187] XFS (loop0): Unmounting Filesystem [ 73.044805][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.077074][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.095268][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.111992][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.126436][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.145188][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.155949][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.192304][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.209194][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.227435][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.247938][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.257967][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.278513][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.296804][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.306074][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.334172][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.352207][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.363508][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.376759][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.387235][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.398081][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.408771][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.424207][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.450092][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.464490][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.488039][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.574868][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.604070][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.622770][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.632220][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.699199][ T4343] capability: warning: `syz.4.15' uses 32-bit capabilities (legacy support in use) [ 73.717943][ T4340] loop1: detected capacity change from 0 to 1024 [ 73.759533][ T4343] program syz.4.15 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.792598][ T4346] loop3: detected capacity change from 0 to 764 [ 73.820734][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.840509][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.859060][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.886110][ T4348] nvme_fcloop: unknown parameter or missing value 'ww' [ 73.913167][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.937011][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.945302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.991435][ T4340] hfsplus: invalid length 1280 has been corrected to 255 [ 74.194959][ T4354] loop3: detected capacity change from 0 to 256 [ 74.314539][ T4354] FAT-fs (loop3): Directory bread(block 64) failed [ 74.339883][ T4354] FAT-fs (loop3): Directory bread(block 65) failed [ 74.376763][ T4354] FAT-fs (loop3): Directory bread(block 66) failed [ 74.416751][ T4354] FAT-fs (loop3): Directory bread(block 67) failed [ 74.439569][ T4354] FAT-fs (loop3): Directory bread(block 68) failed [ 74.463296][ T4354] FAT-fs (loop3): Directory bread(block 69) failed [ 74.500556][ T4354] FAT-fs (loop3): Directory bread(block 70) failed [ 74.517732][ T4354] FAT-fs (loop3): Directory bread(block 71) failed [ 74.524398][ T4354] FAT-fs (loop3): Directory bread(block 72) failed [ 74.537613][ T4354] FAT-fs (loop3): Directory bread(block 73) failed [ 74.708065][ T4375] loop0: detected capacity change from 0 to 1024 [ 74.776883][ T4261] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.828647][ T4375] hfsplus: invalid length 1280 has been corrected to 255 [ 74.949276][ T4385] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 74.986398][ T21] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.057116][ T4261] usb 2-1: Using ep0 maxpacket: 16 [ 75.069333][ T4390] program syz.4.33 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.093614][ T4392] loop3: detected capacity change from 0 to 2048 [ 75.111285][ T4392] ======================================================= [ 75.111285][ T4392] WARNING: The mand mount option has been deprecated and [ 75.111285][ T4392] and is ignored by this kernel. Remove the mand [ 75.111285][ T4392] option from the mount to silence this warning. [ 75.111285][ T4392] ======================================================= [ 75.207622][ T4261] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.245407][ T4261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 75.251689][ T4392] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 75.272440][ T4261] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.297210][ T4392] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.323246][ T4395] loop4: detected capacity change from 0 to 2048 [ 75.401095][ T4401] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.496918][ T4261] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 75.514555][ T26] audit: type=1800 audit(1792101940.714:2): pid=4395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.35" name="bus" dev="loop4" ino=2097152 res=0 errno=0 [ 75.516427][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.605375][ T4261] usb 2-1: Product: syz [ 75.612695][ T4261] usb 2-1: Manufacturer: syz [ 75.627763][ T4261] usb 2-1: SerialNumber: syz [ 75.656242][ T4261] usb 2-1: config 0 descriptor?? [ 75.696616][ T4411] syz.0.40 (4411) used greatest stack depth: 20144 bytes left [ 75.729787][ T4261] mcba_usb 2-1:0.0: Can't find endpoints [ 75.748508][ T4415] loop0: detected capacity change from 0 to 736 [ 75.895691][ T4419] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.015676][ T4365] udc-core: couldn't find an available UDC or it's busy [ 76.056709][ T4365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 76.109759][ T4258] usb 2-1: USB disconnect, device number 2 [ 76.131106][ T4425] loop0: detected capacity change from 0 to 2048 [ 76.211833][ T4425] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 76.252766][ T4425] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.275860][ T4429] SET target dimension over the limit! [ 76.299750][ T4425] process 'syz.0.45' launched './file1' with NULL argv: empty string added [ 76.316413][ T4431] bond0: option arp_interval: invalid value ( ) [ 76.317188][ T4407] loop3: detected capacity change from 0 to 32768 [ 76.330056][ T4431] bond0: option arp_interval: allowed values 0 - 2147483647 [ 76.564873][ T4436] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 77.086204][ T4461] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.107043][ T4461] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.232399][ T4477] ip_tables: iptables: counters copy to user failed while replacing table [ 77.528432][ T4493] netlink: 'syz.0.77': attribute type 6 has an invalid length. [ 77.892178][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.500037][ T4550] syz.2.100 (4550) used greatest stack depth: 19088 bytes left [ 78.552701][ T4558] set_capacity_and_notify: 2 callbacks suppressed [ 78.552717][ T4558] loop2: detected capacity change from 0 to 164 [ 78.676465][ T4565] loop3: detected capacity change from 0 to 16 [ 78.784290][ T4565] erofs: (device loop3): mounted with root inode @ nid 36. [ 78.860769][ T4565] erofs: (device loop3): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 78.916661][ T4565] erofs: (device loop3): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 79.664151][ T4617] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 79.683396][ T4619] nfsd: exp_rootfh path not found \ [ 80.343102][ T4601] loop3: detected capacity change from 0 to 32768 [ 80.454720][ T26] audit: type=1400 audit(1792101945.654:3): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=":" pid=4668 comm="syz.1.138" name=":" offset=33 [ 80.516059][ T4671] loop2: detected capacity change from 0 to 256 [ 80.605695][ T4677] loop1: detected capacity change from 0 to 256 [ 80.761004][ T4680] loop3: detected capacity change from 0 to 512 [ 80.962429][ T4680] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.993441][ T4680] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.163099][ T4698] bond0: unable to remove nonexistent ARP target 192.168.1.1 [ 81.163528][ T4680] EXT4-fs error (device loop3): ext4_empty_dir:3138: inode #12: comm syz.3.143: invalid size [ 81.202637][ T4698] bond0: option arp_ip_target: invalid value (-192.168.1.1}÷¢º1Þ3= 504) [ 90.357015][ T4945] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 90.377637][ T4945] F2FS-fs (loop1): build fault injection attr: rate: 64, type: 0x1ffff [ 90.408629][ T4945] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x5 [ 90.476661][ T4945] F2FS-fs (loop1): invalid crc value [ 90.536556][ T4945] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.583900][ T4960] Zero length message leads to an empty skb [ 90.730102][ T4945] F2FS-fs (loop1): Start checkpoint disabled! [ 90.785511][ T4945] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 90.807827][ T4945] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 90.823356][ T4972] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.009990][ T4945] F2FS-fs (loop1) : inject kmalloc in f2fs_kmalloc of __f2fs_setxattr+0x1f7/0x1140 [ 91.037153][ T4945] overlayfs: failed to create directory ./bus/work (errno: 12); mounting read-only [ 91.108765][ T4983] loop4: detected capacity change from 0 to 256 [ 91.142891][ T4186] attempt to access beyond end of device [ 91.142891][ T4186] loop1: rw=524288, want=45072, limit=40427 [ 91.187405][ T4186] attempt to access beyond end of device [ 91.187405][ T4186] loop1: rw=0, want=45072, limit=40427 [ 91.334970][ T4983] FAT-fs (loop4): Directory bread(block 64) failed [ 91.344571][ T4983] FAT-fs (loop4): Directory bread(block 65) failed [ 91.418929][ T4983] FAT-fs (loop4): Directory bread(block 66) failed [ 91.460061][ T4983] FAT-fs (loop4): Directory bread(block 67) failed [ 91.523030][ T5001] loop3: detected capacity change from 0 to 512 [ 91.544751][ T4983] FAT-fs (loop4): Directory bread(block 68) failed [ 91.587520][ T4983] FAT-fs (loop4): Directory bread(block 69) failed [ 91.594908][ T5001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 91.606797][ T5001] System zones: 1-12 [ 91.634097][ T5001] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.280: missing EA_INODE flag [ 91.668637][ T5007] loop2: detected capacity change from 0 to 1024 [ 91.733218][ T4983] FAT-fs (loop4): Directory bread(block 70) failed [ 91.755868][ T5001] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.280: error while reading EA inode 12 err=-117 [ 91.797614][ T4983] FAT-fs (loop4): Directory bread(block 71) failed [ 91.809436][ T5001] EXT4-fs (loop3): 1 orphan inode deleted [ 91.815231][ T5001] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 91.828959][ T4983] FAT-fs (loop4): Directory bread(block 72) failed [ 91.867224][ T5007] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.959352][ T5007] EXT4-fs error (device loop2): __ext4_new_inode:1084: comm syz.2.282: reserved inode found cleared - inode=1 [ 92.021086][ T690] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.074072][ T4983] FAT-fs (loop4): Directory bread(block 73) failed [ 92.103486][ T154] attempt to access beyond end of device [ 92.103486][ T154] loop1: rw=2049, want=40984, limit=40427 [ 92.283661][ T690] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.437394][ T690] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.440982][ T5018] loop3: detected capacity change from 0 to 64 [ 92.522876][ T5018] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 92.571861][ T690] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.538901][ T5023] loop2: detected capacity change from 0 to 32768 [ 93.637294][ T5023] JBD2: Ignoring recovery information on journal [ 93.863667][ T5023] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 93.961451][ T5063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.302'. [ 94.128031][ T5067] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.229850][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 94.696626][ T5084] usb usb7: usbfs: process 5084 (syz.0.308) did not claim interface 0 before use [ 95.143276][ T5067] chnl_net:caif_netlink_parms(): no params data found [ 95.240474][ T5112] netlink: 116 bytes leftover after parsing attributes in process `syz.3.316'. [ 95.334889][ T690] device hsr_slave_0 left promiscuous mode [ 95.360103][ T690] device hsr_slave_1 left promiscuous mode [ 95.394115][ T690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.418528][ T690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.478847][ T5126] loop2: detected capacity change from 0 to 1024 [ 95.604322][ T690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.636702][ T690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.849469][ T690] device bridge_slave_1 left promiscuous mode [ 95.875743][ T5126] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 95.896013][ T690] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.911649][ T5126] EXT4-fs (loop2): Ignoring removed bh option [ 95.980113][ T5126] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,mblk_io_submit,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,nombcache,bsddf,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: none. [ 96.008366][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.015356][ T4256] Bluetooth: hci1: command 0x0409 tx timeout [ 96.032527][ T690] device bridge_slave_0 left promiscuous mode [ 96.039156][ T690] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.067127][ T5126] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.374218][ T690] device veth1_macvtap left promiscuous mode [ 96.392238][ T690] device veth0_macvtap left promiscuous mode [ 96.415078][ T690] device veth1_vlan left promiscuous mode [ 96.442846][ T690] device veth0_vlan left promiscuous mode [ 96.464952][ T5142] CacheFiles: Failed to register: -95 [ 96.479023][ T5141] loop2: detected capacity change from 0 to 512 [ 96.536385][ T5141] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.584411][ T5141] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.615402][ T5141] EXT4-fs (loop2): 1 truncate cleaned up [ 96.653536][ T5141] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,init_itable,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 96.680198][ T5145] loop3: detected capacity change from 0 to 1024 [ 96.829238][ T5145] EXT4-fs (loop3): Ignoring removed nobh option [ 96.835597][ T5145] EXT4-fs (loop3): Ignoring removed orlov option [ 96.873836][ T5145] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.958964][ T5145] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobh,debug_want_extra_isize=0x0000000000000080,orlov,dioread_nolock,noauto_da_alloc,i_version,,errors=continue. Quota mode: writeback. [ 97.317537][ T690] team0 (unregistering): Port device team_slave_1 removed [ 97.345266][ T690] team0 (unregistering): Port device team_slave_0 removed [ 97.370266][ T690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.379417][ T4256] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.407733][ T690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.553547][ T690] bond0 (unregistering): Released all slaves [ 97.704829][ T5067] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.757297][ T5067] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.768090][ T5067] device bridge_slave_0 entered promiscuous mode [ 97.786880][ T4256] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 97.804391][ T4256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.810995][ T5067] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.833229][ T5067] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.851596][ T5067] device bridge_slave_1 entered promiscuous mode [ 97.858531][ T4256] usb 3-1: config 0 descriptor?? [ 97.912242][ T4256] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 97.980935][ T5067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.013406][ T5067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.086906][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 98.094330][ T5171] loop4: detected capacity change from 0 to 64 [ 98.128701][ T5067] team0: Port device team_slave_0 added [ 98.149241][ T5067] team0: Port device team_slave_1 added [ 98.200718][ T5067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.245800][ T5067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.316553][ T5067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.359677][ T5067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.386730][ T5067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.465599][ T5067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.613475][ T5067] device hsr_slave_0 entered promiscuous mode [ 98.641548][ T5067] device hsr_slave_1 entered promiscuous mode [ 98.670290][ T5067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.701557][ T5067] Cannot create hsr debugfs directory [ 98.762019][ T4256] gspca_cpia1: usb_control_msg 02, error -71 [ 98.796819][ T4256] gspca_cpia1: usb_control_msg 05, error -71 [ 98.827050][ T4256] gspca_cpia1: usb_control_msg 04, error -71 [ 98.833180][ T4256] cpia1: probe of 3-1:0.0 failed with error -71 [ 98.865226][ T5195] loop4: detected capacity change from 0 to 128 [ 98.889304][ T4256] usb 3-1: USB disconnect, device number 2 [ 98.951736][ T5195] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 99.057110][ T5175] loop3: detected capacity change from 0 to 32768 [ 99.070817][ T5195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.161049][ T5175] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.338 (5175) [ 99.345837][ T5175] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 99.386760][ T5175] BTRFS info (device loop3): setting nodatacow, compression disabled [ 99.395267][ T5175] BTRFS info (device loop3): turning on flush-on-commit [ 99.439848][ T5067] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.466947][ T5175] BTRFS info (device loop3): using free space tree [ 99.473659][ T5175] BTRFS info (device loop3): has skinny extents [ 99.509018][ T5067] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.552855][ T5067] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.579954][ T5067] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.607973][ T5209] loop2: detected capacity change from 0 to 256 [ 99.719589][ T5209] FAT-fs (loop2): bogus sectors per cluster 0 [ 99.725828][ T5209] FAT-fs (loop2): Can't find a valid FAT filesystem [ 100.110436][ T5175] BTRFS info (device loop3): enabling ssd optimizations [ 100.186764][ T4189] Bluetooth: hci1: command 0x040f tx timeout [ 100.303370][ T5067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.333691][ T5255] netlink: 'syz.0.354': attribute type 11 has an invalid length. [ 100.396964][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.417175][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.445404][ T5067] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.489377][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.521280][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.549275][ T3075] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.556444][ T3075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.568216][ T5265] loop0: detected capacity change from 0 to 128 [ 100.673510][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.682806][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.697234][ T5265] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 100.750162][ T5265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.772842][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.827359][ T3075] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.834478][ T3075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.889421][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.923927][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.969294][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.014456][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.047596][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.077411][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.091281][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.154636][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.189217][ T5067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.222153][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.282757][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.326942][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.335485][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.653645][ T5301] syz.0.367[5301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.653751][ T5301] syz.0.367[5301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.863718][ T5317] loop2: detected capacity change from 0 to 64 [ 101.966827][ T5317] hfs: filesystem is marked locked, mounting read-only. [ 101.977311][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.984856][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.029220][ T5317] hfs: filesystem is marked locked, leaving read-only. [ 102.059833][ T5067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.246548][ T1111] Bluetooth: hci1: command 0x0419 tx timeout [ 102.855437][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.872659][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.873354][ T5358] mmap: syz.4.381 (5358) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 102.929409][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.987729][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.003553][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.037123][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.075038][ T5067] device veth0_vlan entered promiscuous mode [ 103.145253][ T5067] device veth1_vlan entered promiscuous mode [ 103.204916][ T5374] loop2: detected capacity change from 0 to 64 [ 103.267656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.288491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.305171][ T5067] device veth0_macvtap entered promiscuous mode [ 103.357581][ T5067] device veth1_macvtap entered promiscuous mode [ 103.406311][ T5374] hfs: request for non-existent node 131072 in B*Tree [ 103.435496][ T5374] hfs: request for non-existent node 131072 in B*Tree [ 103.447736][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.474199][ T5384] loop0: detected capacity change from 0 to 64 [ 103.501055][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.521317][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.542836][ T5387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.394'. [ 103.566589][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.595119][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 103.623369][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.625754][ T5384] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 103.688573][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.706531][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.736573][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.756152][ T5067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.786705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.820708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.867211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.906233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.945495][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.980321][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.022168][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.047071][ T5407] loop4: detected capacity change from 0 to 512 [ 104.053417][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.109370][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.146561][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.166548][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.202154][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.235223][ T5067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.276215][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.297676][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.328662][ T5067] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.356613][ T5067] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.385725][ T5067] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.416132][ T5067] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.649850][ T5424] loop4: detected capacity change from 0 to 512 [ 104.685584][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.715746][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.737283][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.780049][ T690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.798175][ T690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.834466][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.972070][ T5424] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.402: corrupted inode contents [ 104.994764][ T5424] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 105.005174][ T5424] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.402: corrupted inode contents [ 105.024988][ T5424] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.402: mark_inode_dirty error [ 105.048353][ T5424] EXT4-fs (loop4): 1 orphan inode deleted [ 105.075780][ T5424] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.466047][ T5418] loop2: detected capacity change from 0 to 32768 [ 105.633169][ T5418] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 105.729074][ T5474] loop3: detected capacity change from 0 to 256 [ 105.753507][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.776645][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.792746][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.801763][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.817886][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.837687][ T5474] exfat: Deprecated parameter 'utf8' [ 105.846474][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.858662][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 105.866162][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.906965][ T5474] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 105.921461][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.956812][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.964430][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.989951][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.019849][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.052166][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.070604][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.087271][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.116760][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.124208][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.176773][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.200096][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.220298][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.242662][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.271160][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.286668][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.300225][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.316658][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.334461][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.363105][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.381039][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.399557][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.416611][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.434313][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.444445][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.464676][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.484263][ T5462] loop0: detected capacity change from 0 to 32768 [ 106.486072][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.510448][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.529558][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.546602][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.565116][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.583949][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.601801][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.613367][ T5462] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 106.619928][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.639784][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.651665][ T5462] JBD2: Ignoring recovery information on journal [ 106.654765][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.708669][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.737608][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.765147][ T5462] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.795637][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.815962][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.834674][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.852539][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.866733][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.884534][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.896609][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.914877][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.930339][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.938354][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.945969][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.966266][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.986685][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.994140][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.009522][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.017491][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.024910][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.042939][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.056678][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.075119][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.087194][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.094633][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.102495][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.110348][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.123102][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.131662][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.145196][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.168033][ T21] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 107.308233][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 107.504144][ T5502] fido_id[5502]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.672302][ T5517] netlink: 1 bytes leftover after parsing attributes in process `syz.4.422'. [ 107.794900][ T5532] loop5: detected capacity change from 0 to 64 [ 108.288727][ T5552] loop2: detected capacity change from 0 to 2048 [ 108.375629][ T5552] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.673758][ T5571] loop2: detected capacity change from 0 to 2048 [ 108.694855][ T5575] kernel profiling enabled (shift: 9) [ 108.795962][ T5571] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.865399][ T5588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.453'. [ 108.892090][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 108.892104][ T26] audit: type=1800 audit(1792101974.094:25): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.445" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 109.003458][ T5594] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.102528][ T5599] loop2: detected capacity change from 0 to 256 [ 109.499931][ T5613] sctp: Trying to GSO but underlying device doesn't support it. [ 109.610871][ T5586] loop5: detected capacity change from 0 to 32768 [ 109.700057][ T5586] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.451 (5586) [ 109.753803][ T5586] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 109.781587][ T5586] BTRFS info (device loop5): using free space tree [ 109.796671][ T5586] BTRFS info (device loop5): has skinny extents [ 109.841816][ T5628] loop0: detected capacity change from 0 to 128 [ 109.946076][ T5586] BTRFS info (device loop5): enabling ssd optimizations [ 109.998750][ T26] audit: type=1800 audit(1792101975.204:26): pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.451" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 110.060297][ T5628] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.087122][ T5628] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.205752][ T5628] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x1d) [ 110.746399][ T5670] loop3: detected capacity change from 0 to 128 [ 110.840336][ T5670] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.018239][ T26] audit: type=1400 audit(1792101976.224:27): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=5678 comm="syz.5.476" name="p" offset=79 [ 111.630733][ T5720] tipc: Started in network mode [ 111.643837][ T5720] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 111.653284][ T5720] tipc: Enabled bearer , priority 0 [ 111.761878][ T5732] loop4: detected capacity change from 0 to 736 [ 111.900059][ T5743] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.913613][ T5742] program syz.0.506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.094121][ T5750] loop4: detected capacity change from 0 to 2048 [ 112.145265][ T5750] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 112.204365][ T5750] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.324742][ T5768] loop2: detected capacity change from 0 to 256 [ 112.427532][ T5768] FAT-fs (loop2): Directory bread(block 64) failed [ 112.454357][ T5768] FAT-fs (loop2): Directory bread(block 65) failed [ 112.478504][ T5768] FAT-fs (loop2): Directory bread(block 66) failed [ 112.526053][ T5768] FAT-fs (loop2): Directory bread(block 67) failed [ 112.546444][ T5768] FAT-fs (loop2): Directory bread(block 68) failed [ 112.553590][ T5768] FAT-fs (loop2): Directory bread(block 69) failed [ 112.570695][ T5768] FAT-fs (loop2): Directory bread(block 70) failed [ 112.586612][ T5768] FAT-fs (loop2): Directory bread(block 71) failed [ 112.604965][ T5768] FAT-fs (loop2): Directory bread(block 72) failed [ 112.626719][ T5768] FAT-fs (loop2): Directory bread(block 73) failed [ 112.678238][ T5779] loop5: detected capacity change from 0 to 64 [ 112.769148][ T1111] tipc: Node number set to 43690 [ 113.002389][ T5792] ip_tables: iptables: counters copy to user failed while replacing table [ 113.144017][ T5770] loop4: detected capacity change from 0 to 32768 [ 113.156190][ T5799] loop0: detected capacity change from 0 to 512 [ 113.189117][ T5800] netlink: 'syz.3.530': attribute type 6 has an invalid length. [ 113.298768][ T5770] XFS (loop4): Mounting V5 Filesystem [ 113.327615][ T5799] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.396706][ T5799] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.438189][ T5770] XFS (loop4): Ending clean mount [ 113.484880][ T5791] loop5: detected capacity change from 0 to 32768 [ 113.540490][ T4199] XFS (loop4): Unmounting Filesystem [ 114.042746][ T5840] loop4: detected capacity change from 0 to 2048 [ 114.108127][ T5840] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 114.134985][ T5840] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.231686][ T5845] SET target dimension over the limit! [ 114.715022][ T5862] loop2: detected capacity change from 0 to 1024 [ 114.845967][ T5862] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.550: lblock 2 mapped to illegal pblock 2 (length 1) [ 114.901957][ T5862] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 114.935272][ T5862] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.550: lblock 0 mapped to illegal pblock 48 (length 1) [ 114.975967][ T5868] EXT4-fs (loop0): 1 truncate cleaned up [ 114.988667][ T5868] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 115.010273][ T5862] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 115.102581][ T5862] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.550: Failed to acquire dquot type 0 [ 115.138300][ T26] audit: type=1800 audit(1792101980.344:28): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.552" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 115.176920][ T5868] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.552: invalid indirect mapped block 234881024 (level 0) [ 115.209409][ T5862] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 115.236011][ T5862] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.550: mark_inode_dirty error [ 115.238065][ T5868] EXT4-fs (loop0): Remounting filesystem read-only [ 115.272851][ T5862] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 115.325270][ T5862] EXT4-fs (loop2): 1 orphan inode deleted [ 115.331191][ T5883] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.331818][ T5883] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.349843][ T5268] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.399478][ T5862] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 115.424242][ T5268] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 115.458888][ T5268] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 115.516864][ T5879] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 115.540829][ T4185] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 115.588961][ T4185] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 115.649992][ T4185] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 115.882886][ T5894] set_capacity_and_notify: 4 callbacks suppressed [ 115.882902][ T5894] loop5: detected capacity change from 0 to 1024 [ 115.958170][ T5896] vxcan0: tx address claim with dest, not broadcast [ 116.058271][ T5894] Quota error (device loop5): find_tree_dqentry: Getting block too big (64 >= 6) [ 116.120435][ T5894] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 116.131443][ T5894] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.563: Failed to acquire dquot type 0 [ 116.258763][ T5894] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 116.287246][ T5908] kAFS: bad VL server IP address [ 116.348527][ T5910] loop3: detected capacity change from 0 to 1024 [ 116.355915][ T5894] EXT4-fs (loop5): 1 truncate cleaned up [ 116.376657][ T5894] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.597821][ T5894] CacheFiles: mkdir cache failed with error -105 [ 116.626094][ T5894] CacheFiles: Failed to register: -105 [ 117.017635][ T5906] loop2: detected capacity change from 0 to 131072 [ 117.075880][ T5906] F2FS-fs (loop2): invalid crc value [ 117.178154][ T5906] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.225683][ T5906] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 117.308780][ T5938] loop4: detected capacity change from 0 to 256 [ 117.612417][ T5947] loop5: detected capacity change from 0 to 512 [ 117.655757][ T5947] EXT4-fs (loop5): Ignoring removed bh option [ 117.665306][ T5947] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 117.714509][ T5947] EXT4-fs (loop5): Unrecognized mount option "=" or missing value [ 117.830044][ T5947] ip_tables: iptables: counters copy to user failed while replacing table [ 117.914554][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 118.068889][ T5969] netlink: 'syz.4.597': attribute type 1 has an invalid length. [ 118.087558][ T5969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.095502][ T5969] IPv6: NLM_F_CREATE should be set when creating new route [ 118.102827][ T5969] IPv6: NLM_F_CREATE should be set when creating new route [ 118.155942][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.596'. [ 118.177933][ T5967] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-tlb(5) [ 118.362514][ T5987] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.303816][ T6030] netlink: 104 bytes leftover after parsing attributes in process `syz.4.611'. [ 119.423077][ T6034] loop4: detected capacity change from 0 to 736 [ 119.532456][ T6027] loop0: detected capacity change from 0 to 8192 [ 119.764804][ T6045] loop2: detected capacity change from 0 to 1024 [ 119.858662][ T6048] bonding: no command found in bonding_masters - use +ifname or -ifname [ 119.886153][ T6052] loop5: detected capacity change from 0 to 164 [ 119.985731][ T6055] loop4: detected capacity change from 0 to 1024 [ 120.165079][ T6055] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.616: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.205719][ T6055] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 120.258374][ T6055] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.616: lblock 0 mapped to illegal pblock 48 (length 1) [ 120.327687][ T6055] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 120.444804][ T6055] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.616: Failed to acquire dquot type 0 [ 120.495930][ T6055] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 120.527610][ T6055] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.616: mark_inode_dirty error [ 120.564874][ T6055] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 120.606612][ T6055] EXT4-fs (loop4): 1 orphan inode deleted [ 120.624468][ T6055] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,noblock_validity,nolazytime,max_batch_time=0x0000000000000007,nodiscard,nouid32,noauto_da_alloc,,errors=continue. Quota mode: none. [ 120.654576][ T5268] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.714322][ T5268] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 120.756951][ T5268] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 120.845135][ T6055] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm syz.4.616: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.947411][ T6055] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 1 [ 120.993854][ T6055] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 16877 [ 121.034614][ T6055] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.616: Failed to acquire dquot type 0 [ 121.195508][ T4199] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 121.266031][ T4199] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 121.284546][ T4199] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 121.737456][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.641'. [ 122.090575][ T6137] rose0: tun_chr_ioctl cmd 1074025672 [ 122.106361][ T6137] rose0: ignored: set checksum enabled [ 122.674999][ T6157] set_capacity_and_notify: 3 callbacks suppressed [ 122.675018][ T6157] loop3: detected capacity change from 0 to 1024 [ 122.746336][ T6162] loop5: detected capacity change from 0 to 512 [ 122.798066][ T6164] program syz.2.650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.854792][ T6162] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.917330][ T6162] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.183206][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 123.229157][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 123.284424][ T6191] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.294109][ T6191] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.302904][ T6191] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.311747][ T6191] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.447803][ T6207] rose0: tun_chr_ioctl cmd 1074025672 [ 123.467112][ T6207] rose0: ignored: set checksum enabled [ 123.572541][ T6214] loop0: detected capacity change from 0 to 2048 [ 123.619999][ T6214] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.650105][ T6221] loop4: detected capacity change from 0 to 1024 [ 123.960918][ T6236] loop0: detected capacity change from 0 to 512 [ 124.106014][ T6236] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.128923][ T6236] ext4 filesystem being mounted at /160/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.844895][ T6278] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.116822][ T6261] loop5: detected capacity change from 0 to 32768 [ 125.171403][ T6261] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.681 (6261) [ 125.254998][ T6261] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 125.305559][ T6261] BTRFS info (device loop5): setting nodatasum [ 125.315890][ T6261] BTRFS info (device loop5): force zlib compression, level 3 [ 125.356779][ T6261] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 125.379216][ T6261] BTRFS info (device loop5): use lzo compression, level 0 [ 125.386412][ T6261] BTRFS info (device loop5): turning on flush-on-commit [ 125.418181][ T6265] loop3: detected capacity change from 0 to 32768 [ 125.424706][ T6261] BTRFS info (device loop5): enabling auto defrag [ 125.424886][ T6261] BTRFS info (device loop5): max_inline at 4096 [ 125.424925][ T6261] BTRFS info (device loop5): max_inline at 0 [ 125.424944][ T6261] BTRFS info (device loop5): using free space tree [ 125.424959][ T6261] BTRFS info (device loop5): has skinny extents [ 125.505174][ T6308] loop2: detected capacity change from 0 to 128 [ 125.529411][ T13] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.541049][ T6308] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 125.609893][ T6308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.704333][ T26] audit: type=1800 audit(1792101990.904:29): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.682" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 125.852820][ T6261] BTRFS info (device loop5): enabling ssd optimizations [ 126.228053][ T6334] loop2: detected capacity change from 0 to 2048 [ 126.309889][ T4175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop5 scanned by udevd (4175) [ 126.398906][ T6339] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.447687][ T26] audit: type=1800 audit(1792101991.654:30): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.695" name="bus" dev="loop2" ino=2097152 res=0 errno=0 [ 126.705443][ T6331] overlayfs: statfs failed on './file0' [ 126.790949][ T6342] loop3: detected capacity change from 0 to 8192 [ 127.164128][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'. [ 127.396587][ T6364] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 127.406100][ T6364] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.518912][ T6364] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 127.616738][ T6364] System zones: 0-1, 3-36 [ 127.639830][ T6364] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 127.716405][ T6376] set_capacity_and_notify: 1 callbacks suppressed [ 127.716420][ T6376] loop2: detected capacity change from 0 to 2048 [ 127.852952][ T6380] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.873013][ T6352] loop0: detected capacity change from 0 to 32768 [ 127.927214][ T6352] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.701 (6352) [ 127.995602][ T6352] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 128.027960][ T6352] BTRFS info (device loop0): using free space tree [ 128.034548][ T6352] BTRFS info (device loop0): has skinny extents [ 128.191671][ T6387] loop4: detected capacity change from 0 to 8192 [ 128.325633][ T6352] BTRFS info (device loop0): enabling ssd optimizations [ 128.438309][ T26] audit: type=1800 audit(1792101993.644:31): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.701" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 128.593902][ T6419] loop2: detected capacity change from 0 to 16 [ 128.666787][ T6419] erofs: (device loop2): mounted with root inode @ nid 36. [ 128.751932][ T6419] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 46 [ 128.845170][ T4175] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4175) [ 129.021835][ T6432] loop2: detected capacity change from 0 to 128 [ 129.162197][ T6436] loop3: detected capacity change from 0 to 64 [ 129.261807][ T6436] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported. [ 129.336892][ T6436] MINIX-fs: bad superblock [ 129.543362][ T6448] loop5: detected capacity change from 0 to 64 [ 129.801473][ T6463] loop4: detected capacity change from 0 to 512 [ 130.025552][ T6463] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 130.094356][ T6463] System zones: 1-12 [ 130.181458][ T6463] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.741: Directory hole found for htree index block 0 [ 130.256808][ T6463] EXT4-fs (loop4): Remounting filesystem read-only [ 130.284826][ T6463] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 130.336689][ T6463] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.741: Directory hole found for htree index block 0 [ 130.370369][ T6463] EXT4-fs (loop4): Remounting filesystem read-only [ 130.399935][ T6463] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 130.431557][ T6463] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jblock_validity,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback. [ 130.527498][ T6463] EXT4-fs (loop4): shut down requested (2) [ 130.713563][ T6478] loop3: detected capacity change from 0 to 32768 [ 130.852140][ T6478] Dev loop3 SGI disklabel: csum bad, label corrupted [ 131.084192][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.115419][ T6497] device batadv_slave_0 entered promiscuous mode [ 131.186614][ T6497] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 131.304739][ T6507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.762'. [ 131.365130][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.763'. [ 131.506196][ T6522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.767'. [ 131.525075][ T6522] netem: unknown loss type 0 [ 131.535352][ T6522] netem: change failed [ 131.679493][ T6525] Falling back ldisc for ttyS3. [ 131.922952][ T6543] loop0: detected capacity change from 0 to 4096 [ 132.034955][ T6553] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.394243][ T26] audit: type=1800 audit(1792101997.594:32): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.789" name="features" dev="configfs" ino=41086 res=0 errno=0 [ 132.736990][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.744755][ T6592] loop5: detected capacity change from 0 to 1024 [ 132.753711][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.806732][ T6595] loop4: detected capacity change from 0 to 256 [ 132.818900][ T6597] loop0: detected capacity change from 0 to 512 [ 132.921750][ T5268] hfsplus: b-tree write err: -5, ino 25 [ 132.928386][ T5268] hfsplus: b-tree write err: -5, ino 4 [ 132.934018][ T5268] hfsplus: b-tree write err: -5, ino 2 [ 132.941219][ T6597] FAT-fs (loop0): error, clusters badly computed (0 != 1) [ 132.962822][ T6595] exfat: Deprecated parameter 'utf8' [ 132.987849][ T6597] FAT-fs (loop0): Filesystem has been set read-only [ 133.055997][ T6597] FAT-fs (loop0): error, clusters badly computed (1 != 2) [ 133.105364][ T6595] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 133.315824][ T6615] loop3: detected capacity change from 0 to 64 [ 133.381703][ T26] audit: type=1807 audit(1792101998.584:33): action=measure uid>+ res=0 [ 133.402340][ T6616] ima: policy update failed [ 133.414147][ T26] audit: type=1802 audit(1792101998.594:34): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.804" res=0 errno=0 [ 133.531234][ T26] audit: type=1802 audit(1792101998.654:35): pid=6616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.804" res=0 errno=0 [ 133.620164][ T6621] loop2: detected capacity change from 0 to 2048 [ 133.665402][ T6621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.707852][ T6615] CacheFiles: Can't set xattr on cache [21] (err 95) [ 133.755329][ T6615] CacheFiles: Failed to register: -95 [ 134.113849][ T6640] loop0: detected capacity change from 0 to 1024 [ 134.221732][ T6640] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 134.309129][ T6642] loop3: detected capacity change from 0 to 4096 [ 134.329283][ T6640] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 134.407071][ T6640] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 134.514563][ T6648] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.548305][ T6647] loop2: detected capacity change from 0 to 4096 [ 134.678977][ T6649] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.702628][ T6647] NILFS error (device loop2): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 134.796551][ T6647] Remounting filesystem read-only [ 134.969232][ T6653] loop3: detected capacity change from 0 to 512 [ 135.024459][ T6657] openvswitch: netlink: Actions may not be safe on all matching packets [ 135.081133][ T6653] EXT4-fs error (device loop3): __ext4_iget:4919: inode #11: block 1: comm syz.3.816: invalid block [ 135.182842][ T6653] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.816: couldn't read orphan inode 11 (err -117) [ 135.215607][ T6655] loop0: detected capacity change from 0 to 8192 [ 135.282634][ T6653] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.345712][ T6653] EXT4-fs error (device loop3): ext4_add_entry:2488: inode #2: comm syz.3.816: Directory hole found for htree leaf block 0 [ 135.414654][ T6665] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.820: bad orphan inode 15 [ 135.443544][ T6665] ext4_test_bit(bit=14, block=5) = 0 [ 135.466694][ T6665] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 135.554290][ T6665] EXT4-fs (loop5): shut down requested (2) [ 136.239146][ T6707] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.295612][ T6707] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 136.303860][ T6707] System zones: 1-12 [ 136.318763][ T6707] EXT4-fs (loop5): 1 truncate cleaned up [ 136.324965][ T6707] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 136.349928][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.465061][ T6719] EXT4-fs (loop0): Ignoring removed nobh option [ 136.504438][ T6719] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 136.538396][ T6719] EXT4-fs (loop0): 1 truncate cleaned up [ 136.544098][ T6719] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nobh,data_err=ignore,nolazytime,norecovery,acl,,errors=continue. Quota mode: none. [ 136.701706][ T6723] tipc: Enabling of bearer rejected, media not registered [ 136.877473][ T6725] netlink: 209832 bytes leftover after parsing attributes in process `syz.4.848'. [ 136.944392][ T6697] XFS (loop3): Mounting V5 Filesystem [ 137.203947][ T6697] XFS (loop3): Ending clean mount [ 137.401059][ T6753] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 137.437979][ T6761] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.530435][ T6753] attempt to access beyond end of device [ 137.530435][ T6753] loop4: rw=0, want=3122, limit=2048 [ 137.549532][ T4195] XFS (loop3): Unmounting Filesystem [ 137.567024][ T6753] Buffer I/O error on dev loop4, logical block 1560, async page read [ 137.624358][ T6753] attempt to access beyond end of device [ 137.624358][ T6753] loop4: rw=0, want=3122, limit=2048 [ 137.637701][ T6753] Buffer I/O error on dev loop4, logical block 1560, async page read [ 137.646115][ T26] audit: type=1800 audit(1792102002.844:36): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.858" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 137.763336][ T6767] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #3: block 1: comm syz.0.864: lblock 1 mapped to illegal pblock 1 (length 1) [ 137.802861][ T6767] EXT4-fs (loop0): Remounting filesystem read-only [ 137.818709][ T6767] Quota error (device loop0): write_blk: dquota write failed [ 137.826196][ T6767] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 137.836694][ T6767] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.864: Failed to acquire dquot type 0 [ 137.858179][ T4256] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 137.918949][ T6767] EXT4-fs (loop0): Remounting filesystem read-only [ 137.934319][ T6767] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.864: Freeing blocks not in datazone - block = 0, count = 4096 [ 138.012420][ T6767] EXT4-fs (loop0): Remounting filesystem read-only [ 138.039307][ T6767] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.864: Invalid inode bitmap blk 0 in block_group 0 [ 138.070162][ T154] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.105033][ T154] EXT4-fs (loop0): Remounting filesystem read-only [ 138.115244][ T6767] EXT4-fs (loop0): Remounting filesystem read-only [ 138.129190][ T6767] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 138.131019][ T154] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 138.156678][ T154] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 138.157352][ T6767] EXT4-fs (loop0): Remounting filesystem read-only [ 138.182422][ T6767] EXT4-fs (loop0): 1 orphan inode deleted [ 138.208815][ T154] EXT4-fs (loop0): Remounting filesystem read-only [ 138.226866][ T6767] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; acl,noblock_validity,journal_dev=0x000000000000000f,max_batch_time=0x00000000000008c9,block_validity,errors=remount-ro,. Quota mode: writeback. [ 138.296936][ T4256] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 138.306079][ T4256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.529716][ T6800] set_capacity_and_notify: 6 callbacks suppressed [ 138.529731][ T6800] loop0: detected capacity change from 0 to 1024 [ 138.545606][ T6798] loop4: detected capacity change from 0 to 128 [ 138.606414][ T6798] FAT-fs (loop4): Directory bread(block 32) failed [ 138.613095][ T6798] FAT-fs (loop4): Directory bread(block 33) failed [ 138.630270][ T6798] FAT-fs (loop4): Directory bread(block 34) failed [ 138.650476][ T6798] FAT-fs (loop4): Directory bread(block 35) failed [ 138.657269][ T6800] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 138.690744][ T6798] FAT-fs (loop4): Directory bread(block 36) failed [ 138.714852][ T6798] FAT-fs (loop4): Directory bread(block 37) failed [ 138.724510][ T6800] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,init_itable,nouid32,bsddf,journal_dev=0x0000000000000d76,nomblk_io_submit,delalloc,nolazytime,. Quota mode: none. [ 138.731735][ T6798] FAT-fs (loop4): Directory bread(block 38) failed [ 138.752664][ T6798] FAT-fs (loop4): Directory bread(block 39) failed [ 138.759371][ T6798] FAT-fs (loop4): Directory bread(block 40) failed [ 138.765942][ T6798] FAT-fs (loop4): Directory bread(block 41) failed [ 138.828744][ T4256] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.838456][ T6800] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.912442][ T6800] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz.0.877: path /194/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 138.987987][ T6800] EXT4-fs (loop0): Remounting filesystem read-only [ 139.019356][ T6813] syz.2.883 (6813) used greatest stack depth: 16304 bytes left [ 139.096571][ T4256] usb 4-1: Using ep0 maxpacket: 32 [ 139.256751][ T4256] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 139.276330][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.571840][ T6835] netlink: 'syz.0.893': attribute type 1 has an invalid length. [ 139.664832][ T6839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.895'. [ 139.790585][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'. [ 139.961413][ T6853] Set syz1 is full, maxelem 246 reached [ 139.973976][ T6855] loop2: detected capacity change from 0 to 24 [ 140.027632][ T6855] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 140.085337][ T6855] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 140.224502][ T6865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.908'. [ 140.343797][ T26] audit: type=1400 audit(1792102005.544:37): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6869 comm="syz.0.909" name="p" offset=53 [ 140.545236][ T4256] usb 6-1: USB disconnect, device number 2 [ 140.614529][ T6883] loop5: detected capacity change from 0 to 512 [ 140.665225][ T6883] FAT-fs (loop5): error, clusters badly computed (0 != 1) [ 140.705279][ T6883] FAT-fs (loop5): Filesystem has been set read-only [ 140.726185][ T6883] FAT-fs (loop5): error, clusters badly computed (1 != 2) [ 140.960741][ T6892] loop2: detected capacity change from 0 to 4096 [ 141.073733][ T6892] ntfs3: loop2: Failed to load $Extend. [ 141.191693][ T4185] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 141.213221][ T4185] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 141.588957][ T5655] usb 4-1: USB disconnect, device number 2 [ 141.693547][ T6914] block2mtd: parameter too long [ 141.771703][ T6916] loop2: detected capacity change from 0 to 512 [ 141.841375][ T6916] FAT-fs (loop2): error, clusters badly computed (0 != 1) [ 141.875454][ T6916] FAT-fs (loop2): Filesystem has been set read-only [ 141.902750][ T6916] FAT-fs (loop2): error, clusters badly computed (1 != 2) [ 141.938878][ T6921] loop3: detected capacity change from 0 to 256 [ 142.067369][ T26] audit: type=1800 audit(1792102007.274:38): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.932" name="file2" dev="loop3" ino=1048669 res=0 errno=0 [ 142.244664][ T6933] loop0: detected capacity change from 0 to 8 [ 142.340221][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.939'. [ 142.394148][ T6933] SQUASHFS error: zlib decompression failed, data probably corrupt [ 142.407257][ T1111] Bluetooth: hci5: command 0x1003 tx timeout [ 142.413416][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 142.420522][ T6933] SQUASHFS error: Failed to read block 0x9b: -5 [ 142.450551][ T6941] loop3: detected capacity change from 0 to 512 [ 142.456813][ T6933] SQUASHFS error: Unable to read metadata cache entry [99] [ 142.456942][ T6933] SQUASHFS error: Unable to read inode 0x127 [ 142.537805][ T6941] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.941: iget: bad i_size value: 38620345925642 [ 142.589012][ T6933] loop0: detected capacity change from 0 to 256 [ 142.726841][ T6941] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.941: couldn't read orphan inode 15 (err -117) [ 142.767213][ T6941] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,grpjquota=,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 142.865853][ T9] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 142.952604][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 143.006604][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 143.006604][ T9] [ 143.038226][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 143.044277][ T9] EXT4-fs (loop3): Free/Dirty block details [ 143.073696][ T9] EXT4-fs (loop3): free_blocks=0 [ 143.088690][ T9] EXT4-fs (loop3): dirty_blocks=1 [ 143.108031][ T9] EXT4-fs (loop3): Block reservation details [ 143.115229][ T9] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 143.282614][ T6960] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 143.306415][ T6960] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 143.364922][ T6960] EXT4-fs (loop0): orphan cleanup on readonly fs [ 143.403628][ T6947] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 143.426269][ T6960] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.949: bg 0: block 15: invalid block bitmap [ 143.450566][ T6947] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 143.488394][ T6960] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 143.488684][ T6947] F2FS-fs (loop2): build fault injection attr: rate: 2, type: 0x1ffff [ 143.518315][ T6960] EXT4-fs (loop0): 1 truncate cleaned up [ 143.524023][ T6960] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,dioread_lock,nouid32,data_err=ignore,,errors=continue. Quota mode: none. [ 143.546572][ T6947] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 143.577354][ T6960] EXT4-fs (loop0): shut down requested (1) [ 143.593789][ T6947] F2FS-fs (loop2): invalid crc value [ 143.642590][ T6947] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.758410][ T6947] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 143.765515][ T6947] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.844899][ T6947] F2FS-fs (loop2): switch discard_unit option is not allowed [ 143.884897][ T6947] F2FS-fs (loop2) : inject too big dir depth in f2fs_add_regular_entry of f2fs_do_add_link+0x344/0x640 [ 143.909673][ T6958] set_capacity_and_notify: 2 callbacks suppressed [ 143.909690][ T6958] loop5: detected capacity change from 0 to 32768 [ 144.100330][ T6971] loop0: detected capacity change from 0 to 2048 [ 144.242283][ T6971] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.382976][ T6971] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.412888][ T6977] kAFS: bad VL server IP address [ 144.486624][ T1111] Bluetooth: hci5: command 0x1001 tx timeout [ 144.492761][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 144.682608][ T6985] loop5: detected capacity change from 0 to 128 [ 144.786219][ T6985] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 144.902799][ T5067] sysv_free_block: flc_count > flc_size [ 144.912950][ T5067] sysv_free_block: flc_count > flc_size [ 144.919587][ T5067] sysv_free_block: flc_count > flc_size [ 144.925181][ T5067] sysv_free_block: flc_count > flc_size [ 144.936540][ T5067] sysv_free_block: flc_count > flc_size [ 144.942131][ T5067] sysv_free_block: flc_count > flc_size [ 144.949813][ T5067] sysv_free_block: flc_count > flc_size [ 144.968639][ T5067] sysv_free_block: flc_count > flc_size [ 144.983186][ T5067] sysv_free_block: flc_count > flc_size [ 144.996538][ T5067] sysv_free_block: flc_count > flc_size [ 145.003326][ T5067] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 145.834019][ T7031] loop0: detected capacity change from 0 to 32768 [ 145.890356][ T7031] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 145.931853][ T7031] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. [ 146.087759][ T4187] INFO: trying to register non-static key. [ 146.093658][ T4187] The code is fine but needs lockdep annotation, or maybe [ 146.100792][ T4187] you didn't initialize this object before use? [ 146.107054][ T4187] turning off the locking correctness validator. [ 146.113437][ T4187] CPU: 0 PID: 4187 Comm: syz-executor Not tainted syzkaller #0 [ 146.121019][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.131141][ T4187] Call Trace: [ 146.134460][ T4187] [ 146.137421][ T4187] dump_stack_lvl+0x188/0x250 [ 146.142140][ T4187] ? show_regs_print_info+0x20/0x20 [ 146.147370][ T4187] ? load_image+0x410/0x410 [ 146.151908][ T4187] ? cpumask_next+0xb3/0xd0 [ 146.156469][ T4187] assign_lock_key+0x1ec/0x200 [ 146.161275][ T4187] ? SOFTIRQ_verbose+0x10/0x10 [ 146.166112][ T4187] ? rcu_lock_release+0x5/0x20 [ 146.170924][ T4187] register_lock_class+0x21d/0x880 [ 146.176093][ T4187] ? mark_lock+0x94/0x320 [ 146.180465][ T4187] ? is_dynamic_key+0x1f0/0x1f0 [ 146.185361][ T4187] ? __lock_acquire+0x13b3/0x7d40 [ 146.190436][ T4187] __lock_acquire+0x265/0x7d40 [ 146.195238][ T4187] ? rcu_lock_release+0x5/0x20 [ 146.200046][ T4187] ? unwind_next_frame+0x11ec/0x1cf0 [ 146.205379][ T4187] ? 0xffffffffa0032000 [ 146.209563][ T4187] ? is_bpf_text_address+0x254/0x270 [ 146.214888][ T4187] ? verify_lock_unused+0x140/0x140 [ 146.220127][ T4187] ? __kernel_text_address+0x9a/0x100 [ 146.225552][ T4187] ? unwind_get_return_address+0x49/0x80 [ 146.231455][ T4187] ? stack_trace_save+0xf0/0xf0 [ 146.236342][ T4187] ? arch_stack_walk+0xf2/0x140 [ 146.241242][ T4187] ? mark_lock+0x94/0x320 [ 146.245605][ T4187] lock_acquire+0x19f/0x400 [ 146.250149][ T4187] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 146.256082][ T4187] ? lock_chain_count+0x20/0x20 [ 146.260976][ T4187] ? read_lock_is_recursive+0x10/0x10 [ 146.266385][ T4187] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 146.272667][ T4187] ? lockdep_hardirqs_on+0x94/0x140 [ 146.277904][ T4187] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 146.283404][ T4187] ? lockdep_hardirqs_off+0x70/0x100 [ 146.288778][ T4187] _raw_spin_lock_irqsave+0xb0/0x100 [ 146.294103][ T4187] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 146.300119][ T4187] ? _raw_spin_lock+0x40/0x40 [ 146.304840][ T4187] ? ktime_get+0x247/0x270 [ 146.309288][ T4187] ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 146.315048][ T4187] ? ocfs2_dlm_shutdown+0x230/0x230 [ 146.320286][ T4187] ? slab_free_freelist_hook+0xec/0x170 [ 146.325865][ T4187] ? ocfs2_release_system_inodes+0x426/0x480 [ 146.331881][ T4187] ? kfree+0xef/0x2a0 [ 146.335895][ T4187] ocfs2_dlm_shutdown+0x33/0x230 [ 146.340866][ T4187] ocfs2_dismount_volume+0x457/0x890 [ 146.346185][ T4187] ? ocfs2_enable_quotas+0x4a0/0x4a0 [ 146.351507][ T4187] ? clear_inode+0x150/0x150 [ 146.356127][ T4187] ? __static_call_return0+0x5/0x10 [ 146.361445][ T4187] ? ocfs2_free_inode+0x20/0x20 [ 146.366326][ T4187] generic_shutdown_super+0x130/0x300 [ 146.371733][ T4187] kill_block_super+0x7c/0xe0 [ 146.376448][ T4187] deactivate_locked_super+0x93/0xf0 [ 146.381766][ T4187] cleanup_mnt+0x426/0x4d0 [ 146.386224][ T4187] task_work_run+0x125/0x1a0 [ 146.390852][ T4187] exit_to_user_mode_loop+0x10f/0x130 [ 146.396247][ T4187] exit_to_user_mode_prepare+0xee/0x180 [ 146.401825][ T4187] syscall_exit_to_user_mode+0x16/0x40 [ 146.407315][ T4187] do_syscall_64+0x58/0xa0 [ 146.411758][ T4187] ? clear_bhb_loop+0x30/0x80 [ 146.416453][ T4187] ? clear_bhb_loop+0x30/0x80 [ 146.421151][ T4187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.427085][ T4187] RIP: 0033:0x7fb25e925797 [ 146.431513][ T4187] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 146.451132][ T4187] RSP: 002b:00007ffe56482338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 146.459595][ T4187] RAX: 0000000000000000 RBX: 00007fb25e9bacf3 RCX: 00007fb25e925797 [ 146.467605][ T4187] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe564823f0 [ 146.475591][ T4187] RBP: 00007ffe564823f0 R08: 00007ffe564833f0 R09: 00000000ffffffff [ 146.483574][ T4187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe56483480 [ 146.491552][ T4187] R13: 00007fb25e9bacf3 R14: 0000000000023a59 R15: 00007ffe564834c0 [ 146.499539][ T4187] [ 146.538473][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 146.566693][ T1111] Bluetooth: hci5: command 0x1009 tx timeout