last executing test programs: 14m23.243673895s ago: executing program 32 (id=352): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f0000000100)) 13m5.691518517s ago: executing program 33 (id=1026): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setreuid(0xee00, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0) 11m1.803984637s ago: executing program 34 (id=2153): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) 9m56.393035142s ago: executing program 35 (id=2696): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040010) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000100)) 9m28.612968296s ago: executing program 36 (id=2916): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 8m46.855263962s ago: executing program 37 (id=3269): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8m29.283198086s ago: executing program 38 (id=3395): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x2, 0x4458, &(0x7f0000008900)="$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") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname(r0, 0x0, &(0x7f0000000100)) 7m35.571343381s ago: executing program 39 (id=3787): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='W', 0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 6m22.470018548s ago: executing program 40 (id=4472): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) 5m16.296704362s ago: executing program 41 (id=4966): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000005140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x1, 0x2041, 0x0) 4m49.358931626s ago: executing program 42 (id=5110): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003cc0)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002780)="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", 0x9d0}], 0x1, 0x0, 0x0, 0x2000901}], 0x1, 0x40c4844) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) 3m47.68646716s ago: executing program 43 (id=5423): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x38, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x19, 0x4, "51689209c05602c38ea65a59a8d20cf10f4721a02aeae8ba6124599c49203dbc0273"}]}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 2m31.02329822s ago: executing program 44 (id=5901): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r2, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000980)=""/4087, 0xff7}], 0x1}, 0x9}], 0x1, 0x0, 0x0) 2m22.80137162s ago: executing program 4 (id=5955): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f00000003c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 2m21.499918335s ago: executing program 4 (id=5958): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000c00)={{0x1009, 0x6, 0x5, 0x80, 'syz0\x00'}, 0x5, 0x4, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) 2m21.028261126s ago: executing program 4 (id=5962): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$incfs_id(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x2) syz_fuse_handle_req(r0, &(0x7f0000000900)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x7f94, {0x7, 0x28, 0x4, 0x42800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x0, 0x2, 0x81, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m19.926213294s ago: executing program 4 (id=5967): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x1b, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 2m19.23708862s ago: executing program 4 (id=5969): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 2m18.386048319s ago: executing program 4 (id=5972): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1d00000009000800"/20, @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m3.278120892s ago: executing program 45 (id=5972): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1d00000009000800"/20, @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m23.318756974s ago: executing program 9 (id=6283): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000001140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x3, 0x3, 0x7, 0x16, "0069ba7d19080000ffff00000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x200) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) 1m21.95511675s ago: executing program 9 (id=6288): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x5c}, 0x1, 0x0, 0x0, 0x8000800}, 0x50090) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20002014}) 1m20.710536863s ago: executing program 9 (id=6292): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x1, r2, 0x9, r0}, 0x10) 1m18.496158715s ago: executing program 9 (id=6308): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00') 1m18.1122483s ago: executing program 9 (id=6313): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7daa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m17.353952871s ago: executing program 9 (id=6319): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='0') 1m16.563192283s ago: executing program 46 (id=6319): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='0') 1m2.831326169s ago: executing program 8 (id=6385): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioprio_set$uid(0x3, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x4) preadv2(r0, &(0x7f0000003440)=[{&(0x7f0000000000)=""/180, 0xb4}], 0x1, 0x8, 0x0, 0x8) 1m2.138864903s ago: executing program 8 (id=6389): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 1m1.526888973s ago: executing program 8 (id=6392): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) ioprio_set$pid(0x2, 0x0, 0x6000) 58.937659776s ago: executing program 8 (id=6402): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) 58.454158204s ago: executing program 8 (id=6403): lsetxattr$security_capability(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 57.49644581s ago: executing program 8 (id=6405): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) 56.688938507s ago: executing program 47 (id=6405): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) 46.55765434s ago: executing program 7 (id=6454): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000500)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x2, 0x32e, &(0x7f0000000a40)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x37) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) unlink(&(0x7f0000000280)='./file1\x00') 43.346012642s ago: executing program 7 (id=6463): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x1) read$eventfd(r1, &(0x7f0000000040), 0x8) 42.143257256s ago: executing program 7 (id=6473): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r3, r4, 0x1, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0x5, 0x2, 0x2, 0xfffa, 0x412f, 0xe154, 0x6, 0x7, 0xb2bf, 0x7, "fe1d00003413000000000000000caa0000000900007b0000000004b427180010"}}) 41.828220931s ago: executing program 7 (id=6474): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125088, 0x0) 41.687012986s ago: executing program 7 (id=6476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 38.797464901s ago: executing program 7 (id=6490): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) 38.445702253s ago: executing program 48 (id=6490): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) 17.840390703s ago: executing program 0 (id=6602): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1) 16.615068266s ago: executing program 0 (id=6605): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$setstatus(r0, 0x4, 0x50800) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x2, 0x4, 0x3, 0x7fff}}, 0x20) 16.204274557s ago: executing program 0 (id=6608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 15.869117669s ago: executing program 0 (id=6609): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000040)={[{}, {@noblock_validity}, {@jqfmt_vfsold}]}, 0x26, 0x759, &(0x7f0000000d40)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0xd6, &(0x7f00000002c0)=""/214}) 14.85009522s ago: executing program 0 (id=6613): unshare(0x20400) syz_open_dev$vbi(0x0, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x6, @loopback, 0x200000}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40011161, 0x0) 13.541883218s ago: executing program 0 (id=6622): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 12.613035297s ago: executing program 49 (id=6622): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 7.29578151s ago: executing program 5 (id=6659): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r1, &(0x7f0000000280)=""/44, 0x2c) recvmsg$qrtr(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x38, 0x0) 6.50145464s ago: executing program 6 (id=6663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 6.312586633s ago: executing program 6 (id=6665): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.304563754s ago: executing program 5 (id=6666): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xf, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="000d05"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000301"], 0x0, 0x0}, 0x0) 4.205270715s ago: executing program 1 (id=6678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffcb4, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x120) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c8028000000040007000c"], 0x14a8}, 0x1, 0x0, 0x0, 0x800}, 0x4040) 3.733742021s ago: executing program 1 (id=6682): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.514666361s ago: executing program 5 (id=6683): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(0x0, &(0x7f0000000280)='./file0/file0/../file0\x00', 0x0, 0xe5c2b, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 3.360359547s ago: executing program 2 (id=6684): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3.273080567s ago: executing program 1 (id=6685): syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x1f29, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000280)="$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") io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.157841324s ago: executing program 5 (id=6686): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x640100fe}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7, 0x202, 0x4, 0x9, r2}, &(0x7f0000000140)=0x10) 3.157436749s ago: executing program 2 (id=6687): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r3, 0x3, 0x80000000, 0x40}, &(0x7f0000000080)=0x10) 3.117358194s ago: executing program 6 (id=6688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) get_robust_list(r0, 0x0, 0x0) 3.013596155s ago: executing program 3 (id=6689): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/70, 0x0, 0xfec00000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/85, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000003c0)={0x1}) 2.78155413s ago: executing program 2 (id=6690): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193) openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40) fallocate(r0, 0x10, 0x3ffd, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) truncate(0x0, 0xc) 2.674990299s ago: executing program 3 (id=6691): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x204800, &(0x7f0000000640)=ANY=[@ANYBLOB='map=off,dmode=0x00000000000007ff\x00check=relaxed,block=0x0000000000000800,hide,map=acornAhide,unhide,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c636865636b3d72656c617865642c6d61703d6f66662c6d61703d6e6f726d616c2c7362736563746f723d3078303030303030303030303030713030302c66756e736d61636b8873726f6f743d73657373696f6e2c646566636f6e746578743d73797374656d5f752c001f336ec7d5b81047b5874f2c4b510fb00d2307e7e7d337e01a864d5b13375a65ed36eccef44207256b63647d6ffdb6196fae89062a01eacbfdf39664708c1f19d3d919853f045f279ec1a5a54bc3eb88c04c13b8cd45a80e1431290da4372133280b112b51050c38442c040000000000000000000f48841a0000"], 0x0, 0x6ce, &(0x7f0000001600)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x40040, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 2.649529163s ago: executing program 6 (id=6692): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) openat$dlm_monitor(0xffffff9c, &(0x7f0000000140), 0x241, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r1, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x48}}, 0x20000000) 2.536509147s ago: executing program 1 (id=6693): setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) 2.327835442s ago: executing program 1 (id=6694): r0 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x82, 0x1, 0x1, 0x6, 0x80000000000, 0x3, 0x3e, 0x9, 0x6b, 0x40, 0x2001df, 0x0, 0x3e, 0x38, 0x1, 0x7, 0x2, 0x1}, [{0x3, 0x0, 0x6, 0x5, 0x9, 0xb8, 0x7, 0x1}], "", ['\x00']}, 0x178) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./mnt\x00', 0x4) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2.145130359s ago: executing program 2 (id=6695): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) lseek(r0, 0x851, 0x0) 2.143964971s ago: executing program 1 (id=6696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0301003c05000128876b"], 0xffdd) 1.976551198s ago: executing program 5 (id=6697): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.954884696s ago: executing program 3 (id=6698): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000180)="2cd889f0253e14f3d5ac", 0xa) writev(r0, &(0x7f00000032c0)=[{&(0x7f0000001d00)="80508f", 0x3}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40) 1.644953183s ago: executing program 2 (id=6699): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x80, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 1.590267208s ago: executing program 3 (id=6700): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 1.265984563s ago: executing program 6 (id=6701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [], {0x95, 0x0, 0x74}}, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.067316279s ago: executing program 3 (id=6702): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b09b, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$9p_virtio(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x20000, 0x0) 849.837782ms ago: executing program 2 (id=6703): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x805) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)="ac92", 0x2}], 0x1}, 0x3) 75.932538ms ago: executing program 6 (id=6704): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x90000005}) epoll_pwait(r2, &(0x7f0000000580)=[{}], 0x1, 0xfffffffc, 0x0, 0x0) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) close(r0) 6.45998ms ago: executing program 5 (id=6705): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4000005) 0s ago: executing program 3 (id=6706): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0xfffffffffffffffc, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) kernel console output (not intermixed with test programs): ists in 'hsr' [ 853.179612][T23626] Cannot create hsr debugfs directory [ 853.578534][ T5748] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 853.785899][ T5748] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.824989][T23887] loop8: detected capacity change from 0 to 128 [ 853.845886][ T5748] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 853.863425][T23887] ext4: Unknown parameter 'uid<00000000000000000000' [ 853.898270][ T5748] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 853.957500][ T6859] udevd[6859]: incorrect ext4 checksum on /dev/loop8 [ 853.973790][ T5748] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 853.992784][T23887] xt_hashlimit: size too large, truncated to 1048576 [ 854.025587][T23891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5967'. [ 854.129088][ T5748] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 854.212649][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.327306][ T5748] usb 4-1: Product: syz [ 854.393603][ T5748] usb 4-1: Manufacturer: syz [ 854.467854][ T5748] usb 4-1: SerialNumber: syz [ 855.497986][ T5748] cdc_ncm 4-1:1.0: bind() failure [ 855.592477][ T5748] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 855.714652][ T5748] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 855.793949][ T5748] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 855.802598][T23914] loop7: detected capacity change from 0 to 131072 [ 855.810266][T23914] xfs: Deprecated parameter 'ikeep' [ 855.815473][T23914] XFS: ikeep mount option is deprecated. [ 855.866931][ T5748] usb 4-1: USB disconnect, device number 10 [ 855.906402][T23914] XFS (loop7): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 856.182484][T23914] XFS (loop7): Starting recovery (logdev: internal) [ 856.341970][T23914] XFS (loop7): Ending recovery (logdev: internal) [ 856.668423][T15561] XFS (loop7): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 857.474777][T16191] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 857.739594][T16191] usb 9-1: Using ep0 maxpacket: 16 [ 857.762599][T16191] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 857.790075][T16191] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.938043][ T31] audit: type=1326 audit(1777420438.687:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe159cdd9 code=0x7ffc0000 [ 857.966074][T16191] usb 9-1: config 0 descriptor?? [ 858.033299][T16191] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 858.076173][ T31] audit: type=1326 audit(1777420438.687:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe159cdd9 code=0x7ffc0000 [ 858.208131][ T31] audit: type=1326 audit(1777420438.727:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fdfe159cdd9 code=0x7ffc0000 [ 858.328783][ T31] audit: type=1326 audit(1777420438.727:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe159cdd9 code=0x7ffc0000 [ 858.404646][ T31] audit: type=1326 audit(1777420438.727:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe159cdd9 code=0x7ffc0000 [ 858.489846][ T31] audit: type=1326 audit(1777420438.727:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fdfe159cdd9 code=0x7ffc0000 [ 858.560111][ T31] audit: type=1326 audit(1777420438.727:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe159cdd9 code=0x7ffc0000 [ 858.675957][ T31] audit: type=1326 audit(1777420438.727:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe159cdd9 code=0x7ffc0000 [ 858.737971][ T31] audit: type=1326 audit(1777420438.737:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fdfe159cdd9 code=0x7ffc0000 [ 858.826215][ T31] audit: type=1326 audit(1777420438.737:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23970 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe159cdd9 code=0x7ffc0000 [ 859.255594][T16191] gspca_sonixj: reg_w1 err -71 [ 859.280679][T16191] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 859.332680][T16191] usb 9-1: USB disconnect, device number 20 [ 860.743308][T23626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 861.150743][T23626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 861.178294][T24004] loop3: detected capacity change from 0 to 131072 [ 861.205125][T24004] F2FS-fs (loop3): invalid crc value [ 861.294823][T23626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 861.341089][T24004] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 861.375086][T24004] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 861.402351][T23626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 861.477494][T23626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 861.600227][T23626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 861.688353][T23626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 861.811890][T23626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 862.399670][T23626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.502940][T23626] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.549696][T13976] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.557185][T13976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.628789][T13976] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.636019][T13976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.983286][T24033] loop7: detected capacity change from 0 to 32768 [ 863.018696][T24033] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6001 (24033) [ 863.075311][T24033] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 863.116130][T24033] BTRFS info (device loop7): using sha256 checksum algorithm [ 863.240703][T24033] BTRFS info (device loop7): enabling ssd optimizations [ 863.294035][T24033] BTRFS info (device loop7): turning on async discard [ 863.344562][T24033] BTRFS info (device loop7): enabling free space tree [ 863.487926][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 863.487948][ T31] audit: type=1800 audit(1777420444.235:585): pid=24033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6001" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 864.380668][T15561] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 864.944240][T23626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.121635][T23626] veth0_vlan: entered promiscuous mode [ 865.195522][T23626] veth1_vlan: entered promiscuous mode [ 865.282108][T23626] veth0_macvtap: entered promiscuous mode [ 865.369625][T23626] veth1_macvtap: entered promiscuous mode [ 865.493647][T23626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.555930][T23626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.638154][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.670510][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.772901][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.806140][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.410710][T13987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.455229][T13987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.493929][T24139] netlink: 'syz.7.6023': attribute type 9 has an invalid length. [ 866.515042][T24139] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6023'. [ 866.695770][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.744251][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.798541][T24149] loop6: detected capacity change from 0 to 1024 [ 866.841442][T24149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 866.935483][T24149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.315927][ T6857] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.703630][T16247] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 867.871916][T16247] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 867.914415][T16247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.952425][T16247] usb 4-1: Product: syz [ 867.965094][T16247] usb 4-1: Manufacturer: syz [ 867.972907][T16247] usb 4-1: SerialNumber: syz [ 867.986796][T16247] usb 4-1: config 0 descriptor?? [ 868.017947][T16247] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 868.468839][ T31] audit: type=1800 audit(1777420449.223:586): pid=24193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6037" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 868.507569][T24194] loop1: detected capacity change from 0 to 128 [ 868.710360][T24194] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 868.731611][T24194] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 868.769750][ T31] audit: type=1800 audit(1777420449.523:587): pid=24194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6038" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 868.886448][T23626] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 869.261747][T16247] gspca_sunplus: reg_w_riv err -71 [ 869.279352][T16247] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 869.346623][T16247] usb 4-1: USB disconnect, device number 11 [ 869.939605][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.950986][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.701931][T24225] loop1: detected capacity change from 0 to 4096 [ 871.340397][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 871.357871][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 871.368474][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 871.381203][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 871.394186][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 871.438572][T24251] loop3: detected capacity change from 0 to 1024 [ 871.528964][T24251] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 871.535542][T24251] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 871.642952][T24251] vhci_hcd vhci_hcd.0: Device attached [ 871.884982][T16208] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 871.935842][T16193] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 872.108847][T16193] usb 4-1: Using ep0 maxpacket: 8 [ 872.131452][T16193] usb 4-1: config index 0 descriptor too short (expected 48685, got 45) [ 872.192721][T16193] usb 4-1: config 110 has an invalid descriptor of length 189, skipping remainder of the config [ 872.234909][T24273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6058'. [ 872.257482][T16193] usb 4-1: config 110 has 0 interfaces, different from the descriptor's value: 22 [ 872.297622][T16193] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 872.344615][T16193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.404117][T24274] loop1: detected capacity change from 0 to 4096 [ 872.471214][T24274] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 872.603378][T24274] ntfs3(loop1): ino=1a, mi_enum_attr [ 872.639039][T24253] usbip_core: unknown command [ 872.644112][T24274] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 872.669354][T16193] usb 4-1: string descriptor 0 read error: -71 [ 872.673498][T24253] vhci_hcd: unknown pdu 285278208 [ 872.694862][T24281] loop8: detected capacity change from 0 to 2048 [ 872.719744][T16193] usb 4-1: USB disconnect, device number 12 [ 872.738957][T24253] usbip_core: unknown command [ 872.778833][ T143] vhci_hcd vhci_hcd.3: stop threads [ 872.783028][T24281] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 872.812336][ T143] vhci_hcd vhci_hcd.3: release socket [ 872.853013][ T143] vhci_hcd vhci_hcd.3: disconnect device [ 872.908285][ T31] audit: type=1800 audit(1777420453.662:588): pid=24281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6061" name="file1" dev="loop8" ino=1367 res=0 errno=0 [ 873.272618][T13969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.276675][T13971] ntfs3(loop1): ino=1e, ntfs3_write_inode failed, -22. [ 873.378733][T13969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.526441][ T5642] Bluetooth: hci4: command tx timeout [ 873.947011][T24293] loop1: detected capacity change from 0 to 32768 [ 873.974692][T24293] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 873.983523][T24293] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 874.012683][T24305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6068'. [ 874.027746][T24306] loop8: detected capacity change from 0 to 1024 [ 874.083967][T24293] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 874.111649][T16193] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 874.113184][T24306] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 874.150554][T16193] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 874.152676][T24306] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 874.240207][T24306] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 874.339458][T24306] EXT4-fs error (device loop8): ext4_get_journal_inode:5896: inode #5: comm syz.8.6069: unexpected bad inode w/o EXT4_IGET_BAD [ 874.409446][T24306] loop8: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 874.412943][T24306] EXT4-fs (loop8): no journal found [ 874.422174][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 874.422203][ C1] EXT4-fs (loop8): initial error at time 1777420455: ext4_get_journal_inode:5896: inode 5 [ 874.422250][ C1] EXT4-fs (loop8): last error at time 1777420455: ext4_get_journal_inode:5896: inode 5 [ 874.633428][T24306] EXT4-fs (loop8): can't get journal size [ 874.683302][T24306] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 874.732343][T24318] loop3: detected capacity change from 0 to 512 [ 874.783846][T13969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.812189][T13969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.823455][T16193] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 672ms [ 874.845651][T24318] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 874.885290][T16193] gfs2: fsid=syz:syz.0: jid=0: Done [ 874.915061][T24293] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 874.943745][T20250] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.980553][T24318] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.6071: bad orphan inode 131083 [ 875.037281][T24318] loop3: lost filesystem error report for type 5 error -117 [ 875.045661][T24318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 875.174917][T24326] geneve2: entered promiscuous mode [ 875.259971][T24326] geneve2: entered allmulticast mode [ 875.430061][T21946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.648504][T24293] gfs2: fsid=syz:syz.0: found 1 quota changes [ 875.679329][ T5642] Bluetooth: hci4: command tx timeout [ 875.994885][T13969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.047347][T13969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.443694][T24348] loop8: detected capacity change from 0 to 512 [ 876.552656][T24348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 876.658308][ T2113] gfs2: fsid=syz:syz.0: fatal: assertion "!atomic_read(&gl->gl_ail_count)" failed - function = inode_go_inval, file = fs/gfs2/glops.c, line = 362 [ 876.675882][ T2113] CPU: 1 UID: 0 PID: 2113 Comm: kworker/1:1H Tainted: G L syzkaller #0 PREEMPT(full) [ 876.675921][ T2113] Tainted: [L]=SOFTLOCKUP [ 876.675931][ T2113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 876.675949][ T2113] Workqueue: gfs2-glock/syz:syz glock_work_func [ 876.675993][ T2113] Call Trace: [ 876.676003][ T2113] [ 876.676014][ T2113] dump_stack_lvl+0xe8/0x150 [ 876.676046][ T2113] gfs2_withdraw+0xc3/0x1b0 [ 876.676087][ T2113] gfs2_assert_withdraw_i+0xae/0xc0 [ 876.676129][ T2113] inode_go_inval+0x301/0x360 [ 876.676166][ T2113] ? __pfx_inode_go_inval+0x10/0x10 [ 876.676200][ T2113] do_xmote+0x289/0x760 [ 876.676247][ T2113] glock_work_func+0x2a8/0x580 [ 876.676286][ T2113] ? process_scheduled_works+0xa70/0x1860 [ 876.676313][ T2113] ? process_scheduled_works+0xa70/0x1860 [ 876.676344][ T2113] process_scheduled_works+0xb5d/0x1860 [ 876.676372][ T2113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.676444][ T2113] ? __pfx_process_scheduled_works+0x10/0x10 [ 876.676480][ T2113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.676510][ T2113] ? assign_work+0x3d5/0x5e0 [ 876.676544][ T2113] worker_thread+0xa53/0xfc0 [ 876.676574][ T2113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.676623][ T2113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.676664][ T2113] kthread+0x388/0x470 [ 876.676700][ T2113] ? __pfx_worker_thread+0x10/0x10 [ 876.676726][ T2113] ? __pfx_kthread+0x10/0x10 [ 876.676762][ T2113] ret_from_fork+0x514/0xb70 [ 876.676796][ T2113] ? __pfx_ret_from_fork+0x10/0x10 [ 876.676823][ T2113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 876.676854][ T2113] ? __switch_to+0xc79/0x1410 [ 876.676896][ T2113] ? __pfx_kthread+0x10/0x10 [ 876.676933][ T2113] ret_from_fork_asm+0x1a/0x30 [ 876.676985][ T2113] [ 876.877404][T24348] EXT4-fs (loop8): blocks per group (34) and clusters per group (32768) inconsistent [ 877.041643][ T2113] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 877.059072][ T2113] CPU: 1 UID: 0 PID: 2113 Comm: kworker/1:1H Tainted: G L syzkaller #0 PREEMPT(full) [ 877.059115][ T2113] Tainted: [L]=SOFTLOCKUP [ 877.059126][ T2113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 877.059144][ T2113] Workqueue: gfs2-glock/syz:syz glock_work_func [ 877.059191][ T2113] Call Trace: [ 877.059201][ T2113] [ 877.059212][ T2113] dump_stack_lvl+0xe8/0x150 [ 877.059260][ T2113] inode_go_inval+0x301/0x360 [ 877.059298][ T2113] ? __pfx_inode_go_inval+0x10/0x10 [ 877.059333][ T2113] do_xmote+0x289/0x760 [ 877.059374][ T2113] glock_work_func+0x2a8/0x580 [ 877.059414][ T2113] ? process_scheduled_works+0xa70/0x1860 [ 877.059442][ T2113] ? process_scheduled_works+0xa70/0x1860 [ 877.059473][ T2113] process_scheduled_works+0xb5d/0x1860 [ 877.059501][ T2113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.059573][ T2113] ? __pfx_process_scheduled_works+0x10/0x10 [ 877.059609][ T2113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.059640][ T2113] ? assign_work+0x3d5/0x5e0 [ 877.059675][ T2113] worker_thread+0xa53/0xfc0 [ 877.059706][ T2113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.059755][ T2113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.059798][ T2113] kthread+0x388/0x470 [ 877.059834][ T2113] ? __pfx_worker_thread+0x10/0x10 [ 877.059861][ T2113] ? __pfx_kthread+0x10/0x10 [ 877.059898][ T2113] ret_from_fork+0x514/0xb70 [ 877.059931][ T2113] ? __pfx_ret_from_fork+0x10/0x10 [ 877.059959][ T2113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.059990][ T2113] ? __switch_to+0xc79/0x1410 [ 877.060039][ T2113] ? __pfx_kthread+0x10/0x10 [ 877.060076][ T2113] ret_from_fork_asm+0x1a/0x30 [ 877.060129][ T2113] [ 877.595085][T13969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.690528][T13969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.702358][T24349] loop6: detected capacity change from 0 to 131072 [ 877.709658][ T5642] Bluetooth: hci4: command tx timeout [ 877.710680][T16208] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 877.722966][T24349] F2FS-fs (loop6): invalid crc value [ 877.826884][T14176] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 877.847226][T24349] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 877.876932][T24349] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 877.914915][T24364] loop3: detected capacity change from 0 to 256 [ 877.927807][T24364] exfat: Deprecated parameter 'utf8' [ 877.942119][T24364] exfat: Deprecated parameter 'utf8' [ 877.955167][T24364] exfat: Deprecated parameter 'utf8' [ 877.987005][T14176] usb 9-1: Using ep0 maxpacket: 16 [ 878.008160][T14176] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.051452][T24364] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 878.054502][T14176] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 878.132172][T14176] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 878.153947][T14176] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.216345][T14176] usb 9-1: Product: syz [ 878.256262][T14176] usb 9-1: Manufacturer: syz [ 878.290289][T14176] usb 9-1: SerialNumber: syz [ 878.332759][T14176] usb 9-1: 0:2 : does not exist [ 878.556568][T14176] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 878.574633][T24372] ceph: No mds server is up or the cluster is laggy [ 878.582487][T16191] libceph: connect (1)[c::]:6789 error -101 [ 878.605276][T16191] libceph: mon0 (1)[c::]:6789 connect error [ 878.942425][T14176] usb 9-1: USB disconnect, device number 21 [ 879.435037][T24400] loop1: detected capacity change from 0 to 64 [ 879.758578][T24404] loop7: detected capacity change from 0 to 4096 [ 879.777850][ T5642] Bluetooth: hci4: command tx timeout [ 879.913109][ T6842] udevd[6842]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 879.955570][T24404] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 880.009784][T24404] ntfs3(loop7): Failed to load $Extend (-22). [ 880.050083][T24404] ntfs3(loop7): Failed to initialize $Extend. [ 880.275767][ T31] audit: type=1800 audit(1777420461.019:589): pid=24404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6095" name="file1" dev="loop7" ino=35 res=0 errno=0 [ 881.465264][T13969] bridge_slave_1: left allmulticast mode [ 881.498139][T13969] bridge_slave_1: left promiscuous mode [ 881.528429][T13969] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.587304][T24463] loop3: detected capacity change from 0 to 128 [ 881.616482][T13969] bridge_slave_0: left allmulticast mode [ 881.663698][T13969] bridge_slave_0: left promiscuous mode [ 881.677087][T24463] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 881.713384][T13969] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.744588][T24463] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 882.054902][T21946] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 882.694242][T24477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6085'. [ 882.987095][T13969] team0: Port device bridge0 removed [ 883.062864][T13969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.116228][T13969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.149465][T13969] bond0 (unregistering): Released all slaves [ 883.521047][ T31] audit: type=1326 audit(1777420464.268:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24497 comm="syz.8.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1779cdd9 code=0x7ffc0000 [ 883.602556][ T31] audit: type=1326 audit(1777420464.288:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24497 comm="syz.8.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1779cdd9 code=0x7ffc0000 [ 883.645233][ T31] audit: type=1326 audit(1777420464.308:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24497 comm="syz.8.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1779cdd9 code=0x7ffc0000 [ 883.672182][ T31] audit: type=1326 audit(1777420464.308:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24497 comm="syz.8.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1779cdd9 code=0x7ffc0000 [ 883.699827][ T31] audit: type=1326 audit(1777420464.308:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24497 comm="syz.8.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faf1779cdd9 code=0x7ffc0000 [ 883.722571][ T31] audit: type=1326 audit(1777420464.378:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24497 comm="syz.8.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf1775d60e code=0x7ffc0000 [ 883.745817][ T31] audit: type=1326 audit(1777420464.378:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24497 comm="syz.8.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf1775d60e code=0x7ffc0000 [ 883.798348][ T31] audit: type=1326 audit(1777420464.378:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24497 comm="syz.8.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf1775d60e code=0x7ffc0000 [ 883.849031][ T31] audit: type=1326 audit(1777420464.388:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24497 comm="syz.8.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf1775d60e code=0x7ffc0000 [ 884.527879][T24247] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.564070][T24247] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.608702][T24247] bridge_slave_0: entered allmulticast mode [ 884.652421][T24247] bridge_slave_0: entered promiscuous mode [ 884.743130][T24247] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.801775][T24247] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.864361][T24247] bridge_slave_1: entered allmulticast mode [ 884.954247][T24247] bridge_slave_1: entered promiscuous mode [ 885.365877][T24247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.464355][T24247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.176860][T24546] loop7: detected capacity change from 0 to 131072 [ 886.271252][T24546] F2FS-fs (loop7): Test dummy encryption mode enabled [ 886.281706][T24546] F2FS-fs (loop7): invalid crc value [ 886.374870][T24546] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 886.397336][T24546] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 886.628678][T24247] team0: Port device team_slave_0 added [ 886.655217][T24247] team0: Port device team_slave_1 added [ 886.999873][T16208] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 887.175102][T24247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.175790][T16208] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.203101][T24247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.240660][T16208] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.271153][T16208] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 887.293108][T16208] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.327522][T24247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.327569][T16208] usb 9-1: config 0 descriptor?? [ 887.565673][T24247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.594442][T24247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.638312][T24247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.836563][T13969] hsr_slave_0: left promiscuous mode [ 887.873062][T16208] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 887.883235][T13969] hsr_slave_1: left promiscuous mode [ 887.915508][T13969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.934077][T16208] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 887.968921][T13969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.007504][T13969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.008680][T24594] loop3: detected capacity change from 0 to 128 [ 888.025590][T13969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.054678][T24594] vfat: Unknown parameter 'ÿÿÿÿÿ' [ 888.073941][T16208] cp2112 0003:10C4:EA90.0024: error requesting version [ 888.074124][T24569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.136999][T24569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.156458][T13969] veth1_macvtap: left promiscuous mode [ 888.179165][T16208] cp2112 0003:10C4:EA90.0024: probe with driver cp2112 failed with error -32 [ 888.206601][T13969] veth0_macvtap: left promiscuous mode [ 888.224144][T13969] veth1_vlan: left promiscuous mode [ 888.247735][T13969] veth0_vlan: left promiscuous mode [ 888.279177][T16208] usb 9-1: USB disconnect, device number 22 [ 888.792033][T24598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6142'. [ 888.949267][T24595] loop6: detected capacity change from 0 to 32768 [ 889.015580][T24602] loop8: detected capacity change from 0 to 64 [ 890.121193][T13969] team0 (unregistering): Port device team_slave_1 removed [ 890.199068][T13969] team0 (unregistering): Port device team_slave_0 removed [ 890.420824][T16208] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 890.580839][T16208] usb 9-1: Using ep0 maxpacket: 32 [ 890.595205][T16208] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.620012][T16208] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.649790][T16208] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 890.715605][T16208] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 890.741032][T16208] usb 9-1: Product: syz [ 890.747530][T16208] usb 9-1: Manufacturer: syz [ 890.779858][T16208] hub 9-1:4.0: USB hub found [ 890.829954][T24592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6139'. [ 891.041063][T16208] hub 9-1:4.0: 2 ports detected [ 891.181261][T24247] hsr_slave_0: entered promiscuous mode [ 891.217127][T24247] hsr_slave_1: entered promiscuous mode [ 891.262082][T24247] debugfs: 'hsr0' already exists in 'hsr' [ 891.306292][T24247] Cannot create hsr debugfs directory [ 891.446732][T16208] hub 9-1:4.0: set hub depth failed [ 891.521693][T16208] usb 9-1: USB disconnect, device number 23 [ 891.696845][T13969] IPVS: stop unused estimator thread 0... [ 892.407414][T24680] loop7: detected capacity change from 0 to 256 [ 892.443149][T24680] exfat: Bad value for 'errors' [ 892.738546][T24685] loop8: detected capacity change from 0 to 512 [ 892.801783][T24685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 892.848745][T24685] System zones: 1-12 [ 892.886048][T24685] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #12: comm syz.8.6169: missing EA_INODE flag [ 892.994015][T24685] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 893.001913][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 893.017582][ C1] EXT4-fs (loop8): initial error at time 1777420473: ext4_xattr_inode_iget:441: inode 12 [ 893.027555][ C1] EXT4-fs (loop8): last error at time 1777420473: ext4_xattr_inode_iget:441: inode 12 [ 893.080349][T24685] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.6169: error while reading EA inode 12 err=-117 [ 893.173992][T24685] loop8: lost filesystem error report for type 5 error -117 [ 893.177067][T24685] EXT4-fs (loop8): 1 orphan inode deleted [ 893.267669][T24685] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.721385][T20250] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.048709][T24722] input: syz0 as /devices/virtual/input/input54 [ 894.370080][T24734] loop6: detected capacity change from 0 to 128 [ 894.423460][T24734] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 894.551523][T24734] ext4 filesystem being mounted at /1097/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 894.808701][T24734] fscrypt (loop6, inode 12): Unsupported encryption modes (contents 0, filenames 255) [ 895.009185][T24747] loop3: detected capacity change from 0 to 32768 [ 895.016742][T24747] btrfs: Deprecated parameter 'usebackuproot' [ 895.022934][T24747] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 895.033139][T24747] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6189 (24747) [ 895.056389][T24747] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 895.065781][ T6857] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 895.066793][T24747] BTRFS info (device loop3): using crc32c checksum algorithm [ 895.153759][T14176] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 895.286300][ T1008] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 895.332064][T14176] usb 9-1: Using ep0 maxpacket: 32 [ 895.355543][T24747] BTRFS error (device loop3): failed to load root extent [ 895.358507][T14176] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.364687][T24747] BTRFS warning (device loop3): try to load backup roots slot 1 [ 895.407236][ T143] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 895.463023][T14176] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.481122][T24747] BTRFS warning (device loop3): couldn't read tree root [ 895.488860][T14176] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 895.488896][T14176] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.511580][T24747] BTRFS warning (device loop3): try to load backup roots slot 2 [ 895.521296][ T1008] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 895.567656][T24747] BTRFS warning (device loop3): couldn't read tree root [ 895.578790][T24747] BTRFS warning (device loop3): try to load backup roots slot 3 [ 895.582187][T14176] usb 9-1: config 0 descriptor?? [ 895.706768][T14176] hub 9-1:0.0: USB hub found [ 895.726487][T24747] BTRFS info (device loop3): rebuilding free space tree [ 895.838004][T24747] BTRFS info (device loop3): checking UUID tree [ 895.845016][T24747] BTRFS info (device loop3): enabling ssd optimizations [ 895.851993][T24747] BTRFS info (device loop3): turning on async discard [ 895.857424][T14176] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 895.858874][T24747] BTRFS info (device loop3): enabling free space tree [ 895.875020][T24747] BTRFS info (device loop3): force clearing of disk cache [ 895.882414][T24747] BTRFS info (device loop3): enabling auto defrag [ 895.888852][T24747] BTRFS info (device loop3): trying to use backup root at mount time [ 895.897107][T24747] BTRFS info (device loop3): use zstd compression, level 3 [ 896.128811][T21946] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 896.136483][T24789] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 896.181051][T24789] overlayfs: failed to set xattr on upper [ 896.210522][T24789] overlayfs: ...falling back to redirect_dir=nofollow. [ 896.262968][T24789] overlayfs: ...falling back to index=off. [ 896.301966][T24789] overlayfs: ...falling back to uuid=null. [ 896.310889][T14176] hid-generic 0003:046D:C31C.0025: unknown main item tag 0x0 [ 897.128055][T14176] hid-generic 0003:046D:C31C.0025: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.8-1/input0 [ 897.296971][T14176] usb 9-1: USB disconnect, device number 24 [ 897.412685][ T5748] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 897.451139][T24810] loop3: detected capacity change from 0 to 4096 [ 897.583458][T24814] fido_id[24814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 897.635721][ T5748] usb 7-1: Using ep0 maxpacket: 32 [ 897.683675][ T5748] usb 7-1: config 0 has no interfaces? [ 897.720003][ T5748] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 897.782032][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.824529][T24823] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 897.852287][ T5748] usb 7-1: config 0 descriptor?? [ 897.988332][ T31] kauditd_printk_skb: 114 callbacks suppressed [ 897.988352][ T31] audit: type=1800 audit(1777420478.724:713): pid=24810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6200" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 898.051406][T24827] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 898.145877][ T5748] usb 7-1: USB disconnect, device number 27 [ 898.404734][T24827] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 898.462266][T24827] overlayfs: failed to look up (tracing) for ino (-66) [ 898.535962][T24247] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 898.601091][T24247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 898.621269][T24836] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6210'. [ 898.651176][T24247] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 898.703482][T24247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 898.718442][T24247] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 898.761583][T24247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 898.816988][T24247] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 898.871008][T24247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 898.923263][T23414] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 899.090614][T23414] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 899.127852][T23414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.198864][T23414] usb 4-1: config 0 descriptor?? [ 899.234453][T23414] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 899.333742][T24247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.437785][T24247] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.457434][T23414] gp8psk: usb in 128 operation failed. [ 899.488773][T23414] gp8psk: usb in 137 operation failed. [ 899.509496][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.516675][ T3270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.544157][T23414] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 899.575159][T23414] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 899.608080][T23414] usb 4-1: media controller created [ 899.626362][T13987] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.633571][T13987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.687415][T23414] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 899.875225][T23414] gp8psk_fe: Frontend attached [ 899.929983][T23414] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 900.012588][T23414] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 900.233145][T24872] loop6: detected capacity change from 0 to 128 [ 900.247646][T24858] loop7: detected capacity change from 0 to 131072 [ 900.323924][T24858] F2FS-fs (loop7): Test dummy encryption mode enabled [ 900.324209][T24872] EXT4-fs (loop6): Test dummy encryption mode enabled [ 900.337485][T24858] F2FS-fs (loop7): invalid crc value [ 900.403190][T24872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 900.427092][T24872] System zones: 1-3, 19-19, 35-36 [ 900.446009][T24858] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 900.461951][T24858] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 900.481904][T24872] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 900.497104][T16193] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 900.541499][T24872] ext4 filesystem being mounted at /1104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 900.664438][T16193] usb 9-1: Using ep0 maxpacket: 8 [ 900.708296][T16193] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 900.730472][T23414] gp8psk: usb in 138 operation failed. [ 900.742358][T23414] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 900.755154][T16193] usb 9-1: config 179 has no interface number 0 [ 900.768121][T16193] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 900.787343][T23414] gp8psk: found Genpix USB device pID = 203 (hex) [ 900.833103][T16193] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 900.859858][T23414] usb 4-1: USB disconnect, device number 13 [ 900.912179][T16193] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 900.976822][T16193] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 901.030121][T16193] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 901.050169][T16193] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 901.052416][ T6857] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 901.062745][T16193] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.180164][T24871] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 902.104889][T16193] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input55 [ 902.172088][T23414] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 902.238623][T24247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.427650][ T24] usb 9-1: USB disconnect, device number 25 [ 902.427726][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 902.427778][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 902.465838][ T5748] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 902.666358][ T5748] usb 2-1: Using ep0 maxpacket: 32 [ 902.698818][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.745305][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.768431][ T5748] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 902.807297][ T5748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.855812][ T5748] usb 2-1: config 0 descriptor?? [ 902.886783][ T5748] hub 2-1:0.0: USB hub found [ 903.101630][ T5748] hub 2-1:0.0: 1 port detected [ 903.325670][T24932] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6230'. [ 903.385664][T24932] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6230'. [ 903.467712][T24247] veth0_vlan: entered promiscuous mode [ 903.508571][T24247] veth1_vlan: entered promiscuous mode [ 903.667641][T24247] veth0_macvtap: entered promiscuous mode [ 903.726135][T24247] veth1_macvtap: entered promiscuous mode [ 903.738644][T24939] loop8: detected capacity change from 0 to 1024 [ 903.752009][T16247] hub 2-1:0.0: activate --> -90 [ 903.811051][T24939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.846334][T24247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.987442][T24247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.074926][T13987] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.136553][T13987] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.159621][T16208] usb 2-1: USB disconnect, device number 33 [ 904.201847][T13987] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.239301][T13987] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.253406][T24952] loop6: detected capacity change from 0 to 512 [ 904.349083][T24952] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 904.417978][T24952] System zones: 1-20 [ 904.510483][T24952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.559758][T20250] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.690982][ T31] audit: type=1800 audit(1777420485.342:714): pid=24952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6235" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 904.959981][T24970] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6237'. [ 904.971710][ T6857] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.003816][T13981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.050375][T13981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.347033][T13981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.386853][T13981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.737986][T24986] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 905.885260][T16193] hsr0: entered promiscuous mode [ 905.908263][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6244'. [ 907.655298][T14176] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 907.869902][T14176] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 907.931424][T14176] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.981139][T14176] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.003035][T14176] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 908.056685][T14176] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 908.092717][T14176] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 908.142184][T14176] usb 10-1: Manufacturer: syz [ 908.184570][T14176] usb 10-1: config 0 descriptor?? [ 908.518014][T25065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 908.635986][T25068] bond2: (slave vlan0): making interface the new active one [ 908.646967][T14176] appleir 0003:05AC:8243.0026: unknown main item tag 0x0 [ 908.686299][T25068] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 908.728913][T14176] appleir 0003:05AC:8243.0026: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 908.965758][T25082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6274'. [ 908.994266][ T1214] usb 10-1: USB disconnect, device number 18 [ 909.104316][T25083] ip6erspan0: entered promiscuous mode [ 909.234494][T25084] fido_id[25084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 909.666240][T14176] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 909.761174][T25073] loop6: detected capacity change from 0 to 32768 [ 909.848001][T14176] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.872500][T25073] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6273 (25073) [ 909.904422][T25075] loop3: detected capacity change from 0 to 32768 [ 909.907492][T14176] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 909.972713][T14176] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 909.974002][T25075] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6272 (25075) [ 910.002438][T25073] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 910.055124][T14176] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 910.069000][T25073] BTRFS info (device loop6): using blake2b checksum algorithm [ 910.123332][T14176] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.190783][T14176] usb 9-1: config 0 descriptor?? [ 910.221906][T25075] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 910.286135][T25073] BTRFS info (device loop6): enabling ssd optimizations [ 910.304921][T25073] BTRFS info (device loop6): turning on async discard [ 910.324364][T25075] BTRFS info (device loop3): using blake2b checksum algorithm [ 910.325898][T25073] BTRFS info (device loop6): enabling free space tree [ 910.464043][T14176] ath6kl: Failed to submit usb control message: -71 [ 910.513599][T14176] ath6kl: unable to send the bmi data to the device: -71 [ 910.561873][T14176] ath6kl: Unable to send get target info: -71 [ 910.602389][T14176] ath6kl: Failed to init ath6kl core: -71 [ 910.607959][T25075] BTRFS info (device loop3): enabling ssd optimizations [ 910.628703][T25075] BTRFS info (device loop3): turning on sync discard [ 910.675731][T14176] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 910.684639][T25075] BTRFS info (device loop3): enabling free space tree [ 910.729245][T25075] BTRFS info (device loop3): use zstd compression, level 3 [ 910.760237][ T31] audit: type=1800 audit(1777420491.491:715): pid=25073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6273" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 910.802909][T14176] usb 9-1: USB disconnect, device number 26 [ 911.392690][T25096] loop1: detected capacity change from 0 to 32768 [ 911.423996][ T6857] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 911.425368][T25096] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6279 (25096) [ 911.561931][T21946] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 911.592593][T25096] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 911.652581][T25096] BTRFS info (device loop1): using sha256 checksum algorithm [ 912.079390][T25096] BTRFS info (device loop1): enabling ssd optimizations [ 912.135533][T25096] BTRFS info (device loop1): turning on async discard [ 912.174948][T25096] BTRFS info (device loop1): enabling free space tree [ 912.212005][T25096] BTRFS info (device loop1): enabling auto defrag [ 912.231505][T25096] BTRFS info (device loop1): max_inline set to 4096 [ 912.590941][T25179] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.599221][T25179] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.373826][T25179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.424449][T25179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.627895][T23626] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 914.670702][T25191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 914.730393][T25195] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 914.736510][T25195] syzkaller1: Linktype set failed because interface is up [ 914.847061][T23414] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 914.956350][T25224] loop3: detected capacity change from 0 to 256 [ 914.970147][ T38] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.004771][ T38] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.038212][T23414] usb 7-1: Using ep0 maxpacket: 16 [ 915.051970][T25224] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 915.081886][T23414] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.147628][T23414] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 915.175804][T23414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.198096][ T38] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.233280][T23414] usb 7-1: config 0 descriptor?? [ 915.238403][T13969] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.292906][T23414] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input56 [ 915.562402][ T4970] bcm5974 7-1:0.0: could not read from device [ 915.704838][T23414] usb 7-1: USB disconnect, device number 28 [ 915.713666][T25216] bcm5974 7-1:0.0: could not read from device [ 916.329201][T25261] Bluetooth: MGMT ver 1.23 [ 916.407558][T25259] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 916.998805][T13969] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.846207][T25291] loop1: detected capacity change from 0 to 32768 [ 917.990299][T25301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 918.425082][T25291] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 918.581798][T25287] loop8: detected capacity change from 0 to 131072 [ 918.637612][T25287] F2FS-fs (loop8): Test dummy encryption mode enabled [ 918.645943][T25287] F2FS-fs (loop8): invalid crc value [ 918.815925][T25291] XFS (loop1): Ending clean mount [ 918.833399][T25291] XFS (loop1): Quotacheck needed: Please wait. [ 918.921687][T13969] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.081326][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 919.367622][T13969] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.424889][T25307] loop3: detected capacity change from 0 to 131072 [ 919.444982][T25307] F2FS-fs (loop3): invalid crc value [ 919.600867][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 919.611108][T25287] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 919.625931][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 919.629845][T25307] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 919.641741][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 919.651130][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 919.653665][T25287] F2FS-fs (loop8): Start checkpoint disabled! [ 919.666306][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 919.682934][T25287] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 919.694844][T25287] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 919.694841][T25307] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 919.968534][T13969] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.089314][T25291] XFS (loop1): Quotacheck: Done. [ 920.218476][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 920.458506][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 920.493443][ T24] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 920.512990][T25335] loop7: detected capacity change from 0 to 512 [ 920.534238][ T24] usb 7-1: config 0 has no interface number 0 [ 920.575615][T25335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 920.594874][ T24] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 920.647344][ T24] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 920.691551][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.726716][T25335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.743156][ T24] usb 7-1: Product: syz [ 920.747839][ T24] usb 7-1: Manufacturer: syz [ 920.753946][ T24] usb 7-1: SerialNumber: syz [ 920.760564][T25335] ext4 filesystem being mounted at /507/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 920.774480][ T24] usb 7-1: config 0 descriptor?? [ 920.853704][ T24] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 920.968260][ T24] em28xx 7-1:0.132: Video interface 132 found: [ 921.235703][ T24] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 921.340729][T23626] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 921.415095][T15561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.789481][ T5624] Bluetooth: hci2: command tx timeout [ 922.005181][T13969] bridge_slave_1: left allmulticast mode [ 922.011548][T13969] bridge_slave_1: left promiscuous mode [ 922.052305][T13969] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.096193][T13969] bridge_slave_0: left allmulticast mode [ 922.106778][T13969] bridge_slave_0: left promiscuous mode [ 922.147692][T13969] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.617768][ T24] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 922.679361][ T24] em28xx 7-1:0.132: board has no eeprom [ 922.749318][ T24] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 922.783743][ T24] em28xx 7-1:0.132: analog set to bulk mode. [ 922.814694][T23414] em28xx 7-1:0.132: Registering V4L2 extension [ 922.906159][ T24] usb 7-1: USB disconnect, device number 29 [ 922.931345][ T24] em28xx 7-1:0.132: Disconnecting em28xx [ 923.191542][T13969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.226838][T13969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.252661][T13969] bond0 (unregistering): Released all slaves [ 923.305425][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 923.500431][T23414] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 923.526220][T23414] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 923.553171][T23414] em28xx 7-1:0.132: No AC97 audio processor [ 923.861391][ T5624] Bluetooth: hci2: command tx timeout [ 924.022433][T23414] usb 7-1: Decoder not found [ 924.029833][T23414] em28xx 7-1:0.132: failed to create media graph [ 924.038750][T23414] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 924.078061][T23414] em28xx 7-1:0.132: Remote control support is not available for this card. [ 924.087910][ T24] em28xx 7-1:0.132: Closing input extension [ 924.141447][ T24] em28xx 7-1:0.132: Freeing device [ 924.571354][T25399] loop1: detected capacity change from 0 to 4096 [ 924.595293][T25404] loop8: detected capacity change from 0 to 64 [ 924.722368][T13969] hsr_slave_0: left promiscuous mode [ 924.766253][T13969] hsr_slave_1: left promiscuous mode [ 924.800999][T13969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.855022][T13969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.913268][T13969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.951620][T13969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.056792][T13969] veth1_macvtap: left promiscuous mode [ 925.071162][T13969] veth0_macvtap: left promiscuous mode [ 925.087086][T13969] veth1_vlan: left promiscuous mode [ 925.091981][T25414] netlink: 'syz.3.6356': attribute type 83 has an invalid length. [ 925.096141][T13969] veth0_vlan: left promiscuous mode [ 925.864906][T25429] block nbd3: Cannot use ioctl interface on a netlink controlled device. [ 925.912407][T25429] block nbd3: Cannot use ioctl interface on a netlink controlled device. [ 925.939619][ T5624] Bluetooth: hci2: command tx timeout [ 925.970734][T25431] block nbd3: Cannot use ioctl interface on a netlink controlled device. [ 926.504530][T25423] loop1: detected capacity change from 0 to 131072 [ 926.992622][T25423] F2FS-fs (loop1): Test dummy encryption mode enabled [ 927.014352][T25423] F2FS-fs (loop1): invalid crc value [ 927.137437][T25423] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 927.153846][T25423] F2FS-fs (loop1): Start checkpoint disabled! [ 927.175845][T25423] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 927.183952][T25423] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 927.221403][T25429] block nbd3: shutting down sockets [ 927.604218][T25445] loop7: detected capacity change from 0 to 2048 [ 927.643129][T25445] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.974980][T13969] team0 (unregistering): Port device team_slave_1 removed [ 928.059900][ T5624] Bluetooth: hci2: command tx timeout [ 928.140813][T15561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.270427][T13969] team0 (unregistering): Port device team_slave_0 removed [ 928.271275][T25432] loop6: detected capacity change from 0 to 262144 [ 928.293162][T25432] F2FS-fs (loop6): invalid crc value [ 928.448633][T25432] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 928.467042][T25432] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 928.510899][ T31] audit: type=1800 audit(1777420509.247:716): pid=25432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6362" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 929.737702][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 929.778603][T25460] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.222379][T25476] veth1_macvtap: renamed from vlan1 [ 931.029609][T25505] loop8: detected capacity change from 0 to 128 [ 931.173774][T25505] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 931.188136][T25505] ext4 filesystem being mounted at /254/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 931.306724][ T31] audit: type=1800 audit(1777420512.036:717): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6385" name="bus" dev="loop8" ino=12 res=0 errno=0 [ 931.315286][T25311] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.392155][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.427367][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.452785][T25311] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.477876][T25311] bridge_slave_0: entered allmulticast mode [ 931.531590][T25311] bridge_slave_0: entered promiscuous mode [ 931.569237][T25311] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.577786][T20250] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 931.603504][T25311] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.648590][T25311] bridge_slave_1: entered allmulticast mode [ 931.696795][T25311] bridge_slave_1: entered promiscuous mode [ 932.284966][T25529] xt_hashlimit: size too large, truncated to 1048576 [ 933.809088][T25552] loop3: detected capacity change from 0 to 32768 [ 933.821738][T25552] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 933.840993][T25552] JBD2: Ignoring recovery information on journal [ 933.889867][T25552] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 934.033093][ T31] audit: type=1800 audit(1777420514.756:718): pid=25552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6397" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 934.658129][T21946] ocfs2: Unmounting device (7,3) on (node local) [ 934.914449][T13969] bond0 (unregistering): Released all slaves [ 935.015816][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 935.073911][T25311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.097450][T25311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.139504][T13969] tipc: Disabling bearer [ 935.139676][T13969] tipc: Left network mode [ 935.433604][T25311] team0: Port device team_slave_0 added [ 935.493386][T25311] team0: Port device team_slave_1 added [ 935.693994][T25311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.694016][T25311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.694050][T25311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.696040][T25311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.696058][T25311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.696092][T25311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.517261][T25311] hsr_slave_0: entered promiscuous mode [ 936.572872][T25311] hsr_slave_1: entered promiscuous mode [ 936.598807][T25311] debugfs: 'hsr0' already exists in 'hsr' [ 936.621009][T25311] Cannot create hsr debugfs directory [ 936.626900][T16208] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 936.815559][T16208] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.839878][T16208] usb 2-1: config 0 interface 0 has no altsetting 0 [ 936.874600][T16208] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 936.932049][T16208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.961810][T16208] usb 2-1: Product: syz [ 936.972365][T16208] usb 2-1: Manufacturer: syz [ 936.979093][T13969] hsr_slave_0: left promiscuous mode [ 936.998472][T16208] usb 2-1: SerialNumber: syz [ 937.018752][T13969] hsr_slave_1: left promiscuous mode [ 937.042485][T16208] usb 2-1: config 0 descriptor?? [ 937.079133][T16208] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 937.116933][T13969] veth1_macvtap: left promiscuous mode [ 937.132168][T13969] veth0_macvtap: left promiscuous mode [ 937.148249][T13969] veth1_vlan: left promiscuous mode [ 937.149667][T16208] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 937.161834][T13969] veth0_vlan: left promiscuous mode [ 937.199119][T16208] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 937.235864][T16208] usb 2-1: media controller created [ 937.357518][T16208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 937.638277][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 937.657197][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 937.676329][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 937.690710][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 937.698641][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 937.772731][T16208] DVB: Unable to find symbol tda10046_attach() [ 937.792760][T16208] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 937.850550][T16208] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 938.199729][T25595] loop6: detected capacity change from 0 to 32768 [ 938.278849][T25595] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 938.328302][T25595] JBD2: Ignoring recovery information on journal [ 938.333736][T25620] loop3: detected capacity change from 0 to 256 [ 938.345379][T25620] FAT-fs (loop3): Directory bread(block 1285) failed [ 938.362280][T25620] FAT-fs (loop3): Directory bread(block 1286) failed [ 938.382158][T25620] FAT-fs (loop3): Directory bread(block 1287) failed [ 938.389525][T25620] FAT-fs (loop3): Directory bread(block 1288) failed [ 938.404605][T25620] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 938.419904][T25595] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 938.665851][T16208] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 938.748641][T16208] usb 2-1: USB disconnect, device number 34 [ 939.112314][T25632] loop3: detected capacity change from 0 to 32768 [ 939.123080][T25632] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6417 (25632) [ 939.148140][T25632] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 939.158359][T25632] BTRFS info (device loop3): using crc32c checksum algorithm [ 939.357484][T25632] BTRFS info (device loop3): setting nodatasum [ 939.367611][T25632] BTRFS info (device loop3): setting nodatacow [ 939.376859][T25632] BTRFS info (device loop3): turning on async discard [ 939.383859][T25632] BTRFS info (device loop3): enabling free space tree [ 939.390658][T25632] BTRFS info (device loop3): enabling auto defrag [ 939.399109][T25632] BTRFS info (device loop3): max_inline set to 0 [ 939.484924][T25632] BTRFS info (device loop3): scrub: started on devid 1 [ 939.500714][T25632] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 939.793280][ T5642] Bluetooth: hci3: command tx timeout [ 939.820373][T21946] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 940.031627][ T6857] ocfs2: Unmounting device (7,6) on (node local) [ 941.255544][T25638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 941.278682][T25680] loop6: detected capacity change from 0 to 512 [ 941.310373][T25680] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 941.390730][T25680] EXT4-fs (loop6): 1 truncate cleaned up [ 941.467268][T25680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.856050][ T6857] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.873524][ T5642] Bluetooth: hci3: command tx timeout [ 941.907398][T25693] loop7: detected capacity change from 0 to 16 [ 941.978108][T25693] erofs (device loop7): mounted with root inode @ nid 36. [ 942.623987][T25707] loop3: detected capacity change from 0 to 128 [ 943.248380][T13969] IPVS: stop unused estimator thread 0... [ 943.708061][ T5642] Bluetooth: hci6: command 0x0406 tx timeout [ 943.753324][T25734] loop3: detected capacity change from 0 to 128 [ 943.777020][T25734] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 943.840211][T25734] hpfs: filesystem error: improperly stopped [ 943.890690][T25734] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 943.943127][ T5624] Bluetooth: hci3: command tx timeout [ 943.967361][T25734] hpfs: You really don't want any checks? You are crazy... [ 944.056146][T25734] hpfs: hpfs_map_sector(): read error [ 944.098529][T25734] hpfs: code page support is disabled [ 944.125280][T25734] hpfs: hpfs_map_4sectors(): unaligned read [ 944.133350][T25734] hpfs: hpfs_map_4sectors(): unaligned read [ 944.159490][T25734] hpfs: filesystem error: unable to find root dir [ 944.512999][T13969] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.527728][T13969] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.583458][ T24] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 944.768435][ T24] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 944.782949][ T24] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 944.846125][ T24] usb 7-1: Product: syz [ 944.868286][T13969] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.874934][ T24] usb 7-1: Manufacturer: syz [ 944.886015][ T24] usb 7-1: SerialNumber: syz [ 944.896844][T13969] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.910242][ T24] usb 7-1: config 0 descriptor?? [ 944.918216][ T24] ch341 7-1:0.0: ch341-uart converter detected [ 945.222658][T13969] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.234801][T13969] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.500989][T25770] loop3: detected capacity change from 0 to 2048 [ 945.512171][T25770] EXT4-fs: Ignoring removed bh option [ 945.554733][T13969] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.581656][T13969] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.586078][T25770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.724174][T25770] EXT4-fs (loop3): shut down requested (2) [ 945.909617][T21946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.991385][ T24] usb 7-1: ch341-uart converter now attached to ttyUSB0 [ 946.032436][ T5624] Bluetooth: hci3: command tx timeout [ 946.168719][ T24] usb 7-1: USB disconnect, device number 30 [ 946.254737][ T24] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 946.311053][ T24] ch341 7-1:0.0: device disconnected [ 946.678677][T25311] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 946.739465][T25782] loop7: detected capacity change from 0 to 131072 [ 946.795143][T25782] F2FS-fs (loop7): Test dummy encryption mode enabled [ 946.803294][T25782] F2FS-fs (loop7): invalid crc value [ 946.879172][T25782] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 946.902213][T25782] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 946.945124][T25311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 946.987176][T25311] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 947.057141][T25311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 947.096672][T25311] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 947.153850][ T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 947.189857][T25311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 947.253905][T25311] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 947.313055][T25311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 947.386193][ T24] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 947.418186][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.428996][T16208] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 947.476473][ T24] usb 7-1: config 0 descriptor?? [ 947.615856][T16208] usb 4-1: Using ep0 maxpacket: 32 [ 947.666371][T16208] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 947.684409][T16208] usb 4-1: config 0 has no interface number 0 [ 947.704384][T16208] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 947.725458][T16208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.741859][ T24] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 947.744159][T16208] usb 4-1: Product: syz [ 947.755136][T16208] usb 4-1: Manufacturer: syz [ 947.765510][T16208] usb 4-1: SerialNumber: syz [ 947.785086][T16208] usb 4-1: config 0 descriptor?? [ 948.061399][ T24] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 948.068381][ T24] [drm] Initialized udl on minor 2 [ 948.110641][T25797] loop1: detected capacity change from 0 to 32768 [ 948.122943][T25797] btrfs: Deprecated parameter 'usebackuproot' [ 948.143672][T25797] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 948.157610][ T24] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 948.187929][ T24] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 948.195883][T25797] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6452 (25797) [ 948.228165][T25797] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 948.251755][T25797] BTRFS info (device loop1): using crc32c checksum algorithm [ 948.365859][ T24] usb 7-1: USB disconnect, device number 31 [ 948.386858][ T1008] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 948.398541][T14176] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 948.451332][T14176] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 948.469792][T25797] BTRFS error (device loop1): failed to load root extent [ 948.494057][T25797] BTRFS warning (device loop1): try to load backup roots slot 1 [ 948.518651][ T1008] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 948.554141][T25797] BTRFS warning (device loop1): couldn't read tree root [ 948.561405][T25797] BTRFS warning (device loop1): try to load backup roots slot 2 [ 948.588399][ T1008] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 948.607623][T25797] BTRFS warning (device loop1): couldn't read tree root [ 948.623638][T25797] BTRFS warning (device loop1): try to load backup roots slot 3 [ 948.688718][T25797] BTRFS info (device loop1): rebuilding free space tree [ 948.740044][T25797] BTRFS info (device loop1): checking UUID tree [ 948.749677][T25797] BTRFS info (device loop1): enabling ssd optimizations [ 948.758964][T25797] BTRFS info (device loop1): using spread ssd allocation scheme [ 948.781019][T25797] BTRFS info (device loop1): turning on async discard [ 948.808873][T25603] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.819678][T25797] BTRFS info (device loop1): enabling free space tree [ 948.844321][T25603] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.852697][T25797] BTRFS info (device loop1): force clearing of disk cache [ 948.866517][T25603] bridge_slave_0: entered allmulticast mode [ 948.885098][T25797] BTRFS info (device loop1): enabling auto defrag [ 948.896516][T16208] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 948.908545][T25603] bridge_slave_0: entered promiscuous mode [ 948.919309][T25797] BTRFS info (device loop1): trying to use backup root at mount time [ 948.940799][T25603] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.948002][T16208] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 948.957163][T25797] BTRFS info (device loop1): force zlib compression, level 3 [ 948.975311][T25603] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.977469][T16208] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 949.026374][T25603] bridge_slave_1: entered allmulticast mode [ 949.030320][T16208] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 949.093415][T25603] bridge_slave_1: entered promiscuous mode [ 949.101080][T16208] usb 4-1: USB disconnect, device number 14 [ 949.271234][T23626] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 949.315074][T13969] bridge_slave_1: left allmulticast mode [ 949.320901][T13969] bridge_slave_1: left promiscuous mode [ 949.338359][T13969] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.386941][T13969] bridge_slave_0: left allmulticast mode [ 949.392730][T13969] bridge_slave_0: left promiscuous mode [ 949.409300][T13969] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.021748][T25848] loop7: detected capacity change from 0 to 128 [ 950.079756][T25848] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 950.982642][T13969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.012682][T13969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.052954][T13969] bond0 (unregistering): Released all slaves [ 951.086200][T13969] bond1 (unregistering): (slave lo): Releasing backup interface [ 951.097892][T13969] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 951.110237][T13969] bond1 (unregistering): Released all slaves [ 951.149278][T13969] bond2 (unregistering): (slave vlan0): Releasing active interface [ 951.180576][T13969] bond2 (unregistering): Released all slaves [ 951.283226][T25603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.374679][T25603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.585951][T25876] loop1: detected capacity change from 0 to 16 [ 951.674903][T25876] erofs (device loop1): mounted with root inode @ nid 36. [ 951.881432][T25881] loop6: detected capacity change from 0 to 32768 [ 951.889733][T25881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6472 (25881) [ 951.906900][T25881] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 951.917207][T25881] BTRFS info (device loop6): using crc32c checksum algorithm [ 952.035292][T25881] BTRFS info (device loop6): setting nodatasum [ 952.042012][T25881] BTRFS info (device loop6): setting nodatacow [ 952.048313][T25881] BTRFS info (device loop6): turning on async discard [ 952.055179][T25881] BTRFS info (device loop6): enabling free space tree [ 952.062249][T25881] BTRFS info (device loop6): enabling auto defrag [ 952.068740][T25881] BTRFS info (device loop6): max_inline set to 0 [ 952.199342][T25881] BTRFS info (device loop6): scrub: started on devid 1 [ 952.213560][T25881] BTRFS info (device loop6): scrub: finished on devid 1 with status: 0 [ 952.281273][T25603] team0: Port device team_slave_0 added [ 952.358329][ T6857] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 952.769923][T25603] team0: Port device team_slave_1 added [ 953.055693][T25882] loop3: detected capacity change from 0 to 32768 [ 953.077802][T25603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.137499][T25603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.255974][T25603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.430546][T13969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.450959][T13969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.492231][T13969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.523025][T13969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.598398][T25913] input: syz0 as /devices/virtual/input/input57 [ 953.625414][T25913] input: failed to attach handler leds to device input57, error: -6 [ 953.643359][T13969] veth1_macvtap: left promiscuous mode [ 953.700089][T13969] veth0_macvtap: left promiscuous mode [ 953.719210][T13969] veth1_vlan: left promiscuous mode [ 953.734732][T13969] veth0_vlan: left promiscuous mode [ 954.700671][T25930] loop6: detected capacity change from 0 to 2048 [ 954.876536][T25930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 955.105858][ T6857] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.241003][T13969] team0 (unregistering): Port device team_slave_1 removed [ 955.270663][T13969] team0 (unregistering): Port device team_slave_0 removed [ 955.549481][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 955.574789][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 955.593076][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 955.629637][T25909] netlink: 'syz.1.6479': attribute type 4 has an invalid length. [ 955.640007][T25603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.649361][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 955.662093][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 955.679782][T25603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.759884][T25603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.016948][T25311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.101123][T25603] hsr_slave_0: entered promiscuous mode [ 956.152974][T25603] hsr_slave_1: entered promiscuous mode [ 956.211562][T25311] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.339389][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.346674][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.504648][T16208] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 956.564263][T13981] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.571500][T13981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.665634][T16208] usb 4-1: Using ep0 maxpacket: 32 [ 956.675449][T16208] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 956.697966][T16208] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 956.730432][T16208] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 956.764070][T16208] usb 4-1: config 1 has no interface number 0 [ 956.779679][T16208] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 956.810056][T16208] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 956.843682][T25957] loop1: detected capacity change from 0 to 32768 [ 956.860840][T25970] binder: 25969:25970 ioctl c0306201 200000000640 returned -22 [ 956.879516][T25957] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6497 (25957) [ 956.901493][T16208] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 956.932612][T16208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.969978][T25957] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 956.996516][T16208] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 957.017739][T25957] BTRFS info (device loop1): using crc32c checksum algorithm [ 957.175201][T25957] BTRFS info (device loop1): enabling ssd optimizations [ 957.232462][T25957] BTRFS info (device loop1): turning on flush-on-commit [ 957.239435][T16208] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 957.255516][T25957] BTRFS info (device loop1): enabling free space tree [ 957.275727][T25957] BTRFS info (device loop1): enabling auto defrag [ 957.283757][T25957] BTRFS info (device loop1): use lzo compression, level 1 [ 957.304726][T25957] BTRFS info (device loop1): max_inline set to 4096 [ 957.583791][T23626] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 957.686708][T23414] usb 4-1: USB disconnect, device number 15 [ 957.743747][T23414] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 957.788233][ T5642] Bluetooth: hci4: command tx timeout [ 958.756066][T14176] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 958.927962][T14176] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.950202][T14176] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.979437][T14176] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 959.005171][T14176] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.040256][T14176] usb 7-1: config 0 descriptor?? [ 959.403379][T26032] loop1: detected capacity change from 0 to 512 [ 959.464495][T26032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.485269][T14176] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 959.495140][T26032] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 959.619310][T14176] cp2112 0003:10C4:EA90.0027: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 959.633582][T23626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.793385][T25311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.838302][T14176] cp2112 0003:10C4:EA90.0027: error requesting version [ 959.867767][ T5642] Bluetooth: hci4: command tx timeout [ 959.911855][T14176] cp2112 0003:10C4:EA90.0027: probe with driver cp2112 failed with error -32 [ 959.981513][T14176] usb 7-1: USB disconnect, device number 32 [ 960.523618][T26066] loop3: detected capacity change from 0 to 1024 [ 960.555240][T26066] hfsplus: Bad value for 'gid' [ 960.703259][T25945] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.736661][T25945] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.773093][T25945] bridge_slave_0: entered allmulticast mode [ 960.802220][T25945] bridge_slave_0: entered promiscuous mode [ 960.843476][T25945] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.868249][T25945] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.878621][T25945] bridge_slave_1: entered allmulticast mode [ 960.898699][T25945] bridge_slave_1: entered promiscuous mode [ 961.052612][T25603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 961.084084][T25603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 961.136381][T25603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 961.175589][T25603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 961.218682][T25945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.255115][T25603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 961.283763][T25603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 961.311467][T25603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 961.331217][T25603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 961.364802][T25945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.462634][T16191] kernel read not supported for file /vcs (pid: 16191 comm: kworker/1:8) [ 961.531265][T25945] team0: Port device team_slave_0 added [ 961.615113][T25945] team0: Port device team_slave_1 added [ 961.793251][T25945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.823885][T25945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.906634][T25945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.949231][ T5642] Bluetooth: hci4: command tx timeout [ 961.959885][T25945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.990913][T25945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.098083][T25945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.133604][T25311] veth0_vlan: entered promiscuous mode [ 962.412500][T25945] hsr_slave_0: entered promiscuous mode [ 962.420872][T25945] hsr_slave_1: entered promiscuous mode [ 962.432261][T25945] debugfs: 'hsr0' already exists in 'hsr' [ 962.441430][T25945] Cannot create hsr debugfs directory [ 962.474290][T25311] veth1_vlan: entered promiscuous mode [ 963.177406][T26147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6541'. [ 963.193680][T25603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.231134][T26147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.268077][T26147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.610959][T25945] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.810925][T25311] veth0_macvtap: entered promiscuous mode [ 963.839416][T25311] veth1_macvtap: entered promiscuous mode [ 963.913923][T25603] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.009082][T25311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.027267][ T5642] Bluetooth: hci4: command tx timeout [ 964.047227][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.054513][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.096598][T16208] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 964.261547][T16208] usb 2-1: config 0 interface 0 has no altsetting 0 [ 964.274896][T16208] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 964.306696][T16208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.623263][T16208] usb 2-1: config 0 descriptor?? [ 965.046233][T13981] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.053453][T13981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.216499][T26174] loop6: detected capacity change from 0 to 131072 [ 965.224156][T26174] xfs: Deprecated parameter 'ikeep' [ 965.229605][T26174] XFS: ikeep mount option is deprecated. [ 965.302595][T26174] XFS (loop6): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 965.336215][T25945] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.364884][T25311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.450862][T26174] XFS (loop6): Starting recovery (logdev: internal) [ 965.502745][T26174] XFS (loop6): Ending recovery (logdev: internal) [ 965.545523][T24442] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.584518][T24442] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.601596][T26210] netlink: 'syz.3.6552': attribute type 10 has an invalid length. [ 965.628503][T24442] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.662613][T26210] veth0_vlan: left promiscuous mode [ 965.681696][T26210] veth0_vlan: entered promiscuous mode [ 965.711649][T26210] team0: Device veth0_vlan failed to register rx_handler [ 965.734917][T16208] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 965.737440][ T6857] XFS (loop6): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 965.981287][T16208] usb 2-1: USB disconnect, device number 35 [ 966.002548][T25945] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.121090][T24442] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.396125][T25945] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.703491][T26227] binder: 26226:26227 ioctl c0306201 200000000640 returned -22 [ 966.878129][T13981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.920798][T13981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.057349][T13971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.108146][T13971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.171645][T26239] loop1: detected capacity change from 0 to 512 [ 967.206967][T26239] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 967.271139][T26239] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.6557: bad orphan inode 131083 [ 967.328388][T26239] loop1: lost filesystem error report for type 5 error -117 [ 967.342041][T26239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.596688][T23626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.943789][T25945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 967.983226][T25945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 968.010221][T25945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 968.044378][T25945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 968.465103][T26256] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.594175][T25945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 968.676240][T26250] loop3: detected capacity change from 0 to 32768 [ 968.687928][T25945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 968.734084][T26250] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 968.759700][T25945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 968.823782][T25945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 968.872342][T26250] XFS (loop3): Ending clean mount [ 969.033063][T26301] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.6567'. [ 969.164581][T26256] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.269841][T21946] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 969.312604][ T5624] Bluetooth: hci0: command 0x0406 tx timeout [ 969.486901][T25945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.626172][T26256] netdevsim netdevsim6 netdevsim1 (unregistering): left allmulticast mode [ 969.683484][T26256] netdevsim netdevsim6 netdevsim1 (unregistering): left promiscuous mode [ 969.719186][T26256] bridge0: port 1(netdevsim1) entered disabled state [ 969.821442][T26256] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.013230][T25603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.231728][T26256] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.410080][T26328] loop3: detected capacity change from 0 to 4096 [ 970.461146][T25945] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.574971][T26334] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 970.741209][T26332] loop5: detected capacity change from 0 to 32768 [ 970.749039][T26332] btrfs: Deprecated parameter 'usebackuproot' [ 970.755215][T26332] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 970.765210][T26332] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6574 (26332) [ 970.812445][T26332] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 970.822624][T26332] BTRFS info (device loop5): using crc32c checksum algorithm [ 970.854206][T13971] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.861722][T13971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.965112][ T143] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 970.983388][T26332] BTRFS error (device loop5): failed to load root extent [ 970.990537][T26332] BTRFS warning (device loop5): try to load backup roots slot 1 [ 970.998742][ T143] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 971.018290][T26332] BTRFS warning (device loop5): couldn't read tree root [ 971.025367][T26332] BTRFS warning (device loop5): try to load backup roots slot 2 [ 971.036348][T13969] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 971.040170][T13971] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.053919][T13971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.094288][T26332] BTRFS warning (device loop5): couldn't read tree root [ 971.101484][T26332] BTRFS warning (device loop5): try to load backup roots slot 3 [ 971.127965][T26351] input: syz1 as /devices/virtual/input/input58 [ 971.155663][T26332] BTRFS info (device loop5): rebuilding free space tree [ 971.294944][T26332] BTRFS info (device loop5): checking UUID tree [ 971.304856][T26332] BTRFS info (device loop5): allowing degraded mounts [ 971.311846][T26332] BTRFS info (device loop5): enabling ssd optimizations [ 971.318903][T26332] BTRFS info (device loop5): using spread ssd allocation scheme [ 971.326726][T26332] BTRFS info (device loop5): turning on async discard [ 971.334719][T26332] BTRFS info (device loop5): enabling free space tree [ 971.335635][T25945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 971.341546][T26332] BTRFS info (device loop5): force clearing of disk cache [ 971.341573][T26332] BTRFS info (device loop5): enabling auto defrag [ 971.341595][T26332] BTRFS info (device loop5): trying to use backup root at mount time [ 971.341618][T26332] BTRFS info (device loop5): force zlib compression, level 3 [ 971.484166][T25945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 971.669758][T25311] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 971.843637][T13969] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.096602][T25603] veth0_vlan: entered promiscuous mode [ 972.114310][T26373] loop5: detected capacity change from 0 to 512 [ 972.312698][T25603] veth1_vlan: entered promiscuous mode [ 972.332367][T24442] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.501387][T24442] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.659014][ T1214] kernel read not supported for file /dsp1 (pid: 1214 comm: kworker/0:2) [ 972.668805][ T38] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.845435][T25603] veth0_macvtap: entered promiscuous mode [ 972.895771][T25603] veth1_macvtap: entered promiscuous mode [ 973.155762][T25603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.263059][T25603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.334474][T13971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.375327][T13971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.430558][T13971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.473719][T13971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.932035][T13971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.978508][T13971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.131215][T13971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.173001][T13971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.504632][T25945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.786621][T25945] veth0_vlan: entered promiscuous mode [ 974.853733][T25945] veth1_vlan: entered promiscuous mode [ 974.940373][ T1214] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 975.006505][T25945] veth0_macvtap: entered promiscuous mode [ 975.065294][T25945] veth1_macvtap: entered promiscuous mode [ 975.132060][ T1214] usb 6-1: Using ep0 maxpacket: 32 [ 975.147998][ T1214] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 975.184536][T25945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.212006][ T1214] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 975.242668][T25945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.247851][ T1214] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 975.293766][ T1214] usb 6-1: Product: syz [ 975.307016][T24442] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.315142][ T1214] usb 6-1: Manufacturer: syz [ 975.345652][ T1214] usb 6-1: SerialNumber: syz [ 975.347664][T24442] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.394714][ T1214] usb 6-1: config 0 descriptor?? [ 975.406011][ T38] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.458230][T26429] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 975.473699][ T38] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.505366][ T1214] hub 6-1:0.0: bad descriptor, ignoring hub [ 975.519320][T26413] loop1: detected capacity change from 0 to 40427 [ 975.536291][ T1214] hub 6-1:0.0: probe with driver hub failed with error -5 [ 975.557466][T26413] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 975.594447][T26413] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 975.653051][T26413] F2FS-fs (loop1): invalid crc value [ 976.012447][ T3270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.051265][ T3270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.054998][T16191] usb 6-1: USB disconnect, device number 33 [ 976.069340][T26413] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 976.178506][T26413] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 976.222097][T26413] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 976.238483][T24131] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 976.253922][ T3270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.288495][ T3270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.428807][T24131] usb 4-1: Using ep0 maxpacket: 32 [ 976.465546][T24131] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 976.490402][T16191] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 976.507363][T24131] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 976.562273][T24131] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 976.580909][T24131] usb 4-1: config 1 has no interface number 0 [ 976.603214][T24131] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 976.636932][T24131] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 976.674944][T24131] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 976.694817][T16191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 976.712860][T24131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.739916][T16191] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 976.765151][T16191] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 976.786634][T24131] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 976.794579][T16191] usb 6-1: Product: syz [ 976.807040][T16191] usb 6-1: Manufacturer: syz [ 976.825361][T16191] usb 6-1: SerialNumber: syz [ 976.865792][T16191] usb 6-1: config 0 descriptor?? [ 976.906702][T26429] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 976.952385][T16191] hub 6-1:0.0: bad descriptor, ignoring hub [ 976.966937][T16191] hub 6-1:0.0: probe with driver hub failed with error -5 [ 977.011121][T24131] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 977.413768][T16247] usb 6-1: USB disconnect, device number 34 [ 977.531810][T24131] usb 4-1: USB disconnect, device number 16 [ 977.581844][T24131] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 978.026599][T26492] loop0: detected capacity change from 0 to 2048 [ 978.196531][T26492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.298445][T26492] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 978.813873][T25603] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /5/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 978.970956][T25603] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 979.019142][T25603] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 979.562686][T26524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6616'. [ 979.943059][T25603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.395016][T26518] loop3: detected capacity change from 0 to 32768 [ 980.440656][T26518] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6614 (26518) [ 980.586163][T26518] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 980.645155][T26518] BTRFS info (device loop3): using blake2b checksum algorithm [ 980.718032][T13969] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.793726][T26518] BTRFS info (device loop3): enabling ssd optimizations [ 980.810702][T26518] BTRFS info (device loop3): turning on async discard [ 980.827897][T26518] BTRFS info (device loop3): enabling free space tree [ 980.836972][T26518] BTRFS info (device loop3): use zstd compression, level 3 [ 980.892221][ T31] audit: type=1800 audit(1777420561.618:719): pid=26518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6614" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 981.066011][T21946] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 981.371160][T13969] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.805419][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 981.822434][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 981.831329][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 981.850793][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 981.862709][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 981.929108][T26590] loop2: detected capacity change from 0 to 128 [ 982.656223][T13969] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.888349][T26612] loop5: detected capacity change from 0 to 4096 [ 982.935361][T26612] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 982.942976][T26612] ntfs3(loop5): Failed to load $Extend (-22). [ 982.949072][T26612] ntfs3(loop5): Failed to initialize $Extend. [ 982.983326][ T31] audit: type=1800 audit(1777420563.698:720): pid=26612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6640" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 983.214910][T25311] ntfs3(loop5): ino=9, ntfs_sync_fs failed, -22. [ 983.342816][T13969] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.030262][T26594] Bluetooth: hci3: command tx timeout [ 984.124429][ T31] audit: type=1804 audit(1777420564.837:721): pid=26647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6646" name="/newroot/10/file1" dev="tmpfs" ino=71 res=1 errno=0 [ 984.683538][T26651] loop1: detected capacity change from 0 to 32768 [ 984.784716][T26651] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 984.794997][T26651] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 984.856213][T26659] loop5: detected capacity change from 0 to 128 [ 984.886180][T26651] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 984.906962][T16191] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 984.946800][T26659] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 984.995416][T16191] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 985.005368][T26659] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 985.061783][T13969] bridge_slave_1: left allmulticast mode [ 985.083647][T13969] bridge_slave_1: left promiscuous mode [ 985.116132][T13969] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.173416][T13969] bridge_slave_0: left allmulticast mode [ 985.202320][T13969] bridge_slave_0: left promiscuous mode [ 985.221574][T16208] IPVS: starting estimator thread 0... [ 985.226947][T13969] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.310364][T26669] IPVS: using max 25 ests per chain, 60000 per kthread [ 985.333864][T25311] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 985.473180][T16191] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 477ms [ 985.513101][T16191] gfs2: fsid=syz:syz.0: jid=0: Done [ 985.539188][T26651] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 985.645660][T26228] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 985.826646][T26228] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 985.849801][T26228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.859595][T26228] usb 3-1: Product: syz [ 985.884957][T26228] usb 3-1: Manufacturer: syz [ 985.898712][T26228] usb 3-1: SerialNumber: syz [ 986.037535][T26651] gfs2: fsid=syz:syz.0: found 1 quota changes [ 986.109965][T26594] Bluetooth: hci3: command tx timeout [ 986.258381][T13969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.329403][T13969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.393489][T13969] bond0 (unregistering): Released all slaves [ 986.521743][T26228] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 987.387349][T13969] hsr_slave_0: left promiscuous mode [ 987.427966][T13969] hsr_slave_1: left promiscuous mode [ 987.459733][T13969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.474148][T26728] loop1: detected capacity change from 0 to 128 [ 987.489581][T26730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6665'. [ 987.506712][T26728] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 987.513115][T13969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.541639][T26728] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 987.554707][T13969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.575959][T13969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.653767][T13969] veth1_macvtap: left promiscuous mode [ 987.668535][T13969] veth0_macvtap: left promiscuous mode [ 987.682016][T13969] veth1_vlan: left promiscuous mode [ 987.705775][T13969] veth0_vlan: left promiscuous mode [ 987.721966][T16208] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 987.846783][T26737] loop3: detected capacity change from 0 to 512 [ 987.898951][T26737] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 988.058286][T26737] EXT4-fs (loop3): 1 truncate cleaned up [ 988.105110][T26737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.106268][T26739] loop1: detected capacity change from 0 to 32768 [ 988.129988][T26739] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6669 (26739) [ 988.155968][T26739] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 988.166662][T26739] BTRFS info (device loop1): using sha256 checksum algorithm [ 988.175505][T16208] usb 6-1: Using ep0 maxpacket: 16 [ 988.186948][T16208] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 988.195597][T26594] Bluetooth: hci3: command tx timeout [ 988.224689][T16208] usb 6-1: config 0 has no interface number 0 [ 988.237507][T16208] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.285752][T26739] BTRFS info (device loop1): enabling ssd optimizations [ 988.292813][T26739] BTRFS info (device loop1): turning on async discard [ 988.299596][T26739] BTRFS info (device loop1): enabling free space tree [ 988.324664][T16208] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.347814][T26739] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 988.408261][T16208] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 988.423645][T21946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.426374][T26228] usb 3-1: USB disconnect, device number 22 [ 988.465889][T26228] usblp0: removed [ 988.475255][T16208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.567552][T16208] usb 6-1: config 0 descriptor?? [ 988.674646][T23626] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 989.269241][T16208] uclogic 0003:28BD:0071.0028: pen parameters not found [ 989.289062][T16208] uclogic 0003:28BD:0071.0028: interface is invalid, ignoring [ 989.419096][T13969] team0 (unregistering): Port device team_slave_1 removed [ 989.492564][T13969] team0 (unregistering): Port device team_slave_0 removed [ 989.554510][T24131] usb 6-1: USB disconnect, device number 35 [ 989.618554][T26783] netlink: 'syz.1.6678': attribute type 6 has an invalid length. [ 989.648439][T26783] netlink: 'syz.1.6678': attribute type 4 has an invalid length. [ 989.676378][T26783] netlink: 'syz.1.6678': attribute type 5 has an invalid length. [ 989.704308][T26783] netlink: 'syz.1.6678': attribute type 6 has an invalid length. [ 989.729890][T26783] netlink: 'syz.1.6678': attribute type 8 has an invalid length. [ 989.751901][T26783] netlink: 1048 bytes leftover after parsing attributes in process `syz.1.6678'. [ 989.782445][T26783] netlink: 'syz.1.6678': attribute type 1 has an invalid length. [ 990.195934][T26730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6665'. [ 990.222993][T24442] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.251953][T24442] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.271534][T26594] Bluetooth: hci3: command tx timeout [ 990.279212][T24442] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.376649][T24442] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.735208][T26801] loop1: detected capacity change from 0 to 128 [ 990.842182][T26801] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 991.158915][T26820] loop2: detected capacity change from 0 to 2048 [ 991.166901][T26823] loop3: detected capacity change from 0 to 164 [ 991.283113][T26820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 991.499151][T26823] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 991.588961][T25945] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.178124][T26594] block nbd3: Receive control failed (result -32) [ 992.202042][T26594] block nbd3: Receive control failed (result -32) [ 992.256104][T26855] loop2: detected capacity change from 0 to 2048 [ 992.261409][T26826] nbd3: detected capacity change from 0 to 128 [ 992.339240][ T6842] block nbd3: Dead connection, failed to find a fallback [ 992.366547][T26855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.376158][ T6842] block nbd3: shutting down sockets [ 992.416278][ T6842] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 992.463816][ T6842] buffer_io_error: 6 callbacks suppressed [ 992.463839][ T6842] Buffer I/O error on dev nbd3, logical block 0, async page read [ 992.515733][ T31] audit: type=1800 audit(1777420573.236:722): pid=26855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6699" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 992.561513][ T6842] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 992.604897][ T6842] Buffer I/O error on dev nbd3, logical block 0, async page read [ 992.613212][T26868] EXT4-fs (loop2): shut down requested (1) [ 992.646358][ T6842] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 992.695375][ T6842] Buffer I/O error on dev nbd3, logical block 0, async page read [ 992.747319][ T6842] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 992.781374][ T6842] Buffer I/O error on dev nbd3, logical block 0, async page read [ 992.799598][ T6842] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 992.833869][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.840417][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.842807][ T6842] Buffer I/O error on dev nbd3, logical block 0, async page read [ 992.924207][ T6842] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.006803][ T6842] Buffer I/O error on dev nbd3, logical block 0, async page read [ 993.101437][ T6842] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.161734][ T6842] Buffer I/O error on dev nbd3, logical block 0, async page read [ 993.235692][ T6842] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.293115][ T6842] Buffer I/O error on dev nbd3, logical block 0, async page read [ 993.334968][ T6842] ldm_validate_partition_table(): Disk read failed. [ 993.360283][ T6842] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.392259][ T6842] Buffer I/O error on dev nbd3, logical block 0, async page read [ 993.413876][ T6842] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.452949][ T6842] Buffer I/O error on dev nbd3, logical block 0, async page read [ 993.488361][ T6842] Dev nbd3: unable to read RDB block 0 [ 993.512867][ T6842] nbd3: unable to read partition table [ 993.520484][T25945] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.718790][ T6842] ldm_validate_partition_table(): Disk read failed. [ 993.753367][ T6842] Dev nbd3: unable to read RDB block 0 [ 993.798419][ T6842] nbd3: unable to read partition table [ 993.832246][ T6842] [ 993.834700][ T6842] ====================================================== [ 993.842093][ T6842] WARNING: possible circular locking dependency detected [ 993.849134][ T6842] syzkaller #0 Tainted: G L [ 993.855268][ T6842] ------------------------------------------------------ [ 993.862488][ T6842] udevd/6842 is trying to acquire lock: [ 993.868125][ T6842] ffff8880270025a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: __submit_bio+0x1c0/0x580 [ 993.878184][ T6842] [ 993.878184][ T6842] but task is already holding lock: [ 993.885535][ T6842] ffff88802316a080 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x991/0x1ef0 [ 993.895758][ T6842] [ 993.895758][ T6842] which lock already depends on the new lock. [ 993.895758][ T6842] [ 993.906156][ T6842] [ 993.906156][ T6842] the existing dependency chain (in reverse order) is: [ 993.915157][ T6842] [ 993.915157][ T6842] -> #9 (mapping.invalidate_lock){++++}-{4:4}: [ 993.923505][ T6842] down_read+0x47/0x2e0 [ 993.928315][ T6842] page_cache_sync_ra+0x81e/0xa90 [ 993.934062][ T6842] ntfs_read_run_nb_ra+0x5ea/0x10f0 [ 993.939785][ T6842] ntfs_read_bh_ra+0x47/0x7f0 [ 993.944987][ T6842] indx_read_ra+0x2fe/0xc00 [ 993.950106][ T6842] ntfs_readdir+0x862/0xe40 [ 993.955129][ T6842] iterate_dir+0x399/0x570 [ 993.960101][ T6842] __se_sys_getdents64+0xf1/0x280 [ 993.965670][ T6842] do_syscall_64+0x15f/0xf80 [ 993.970797][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.977311][ T6842] [ 993.977311][ T6842] -> #8 (&indx->run_lock){.+.+}-{4:4}: [ 993.985005][ T6842] down_read+0x47/0x2e0 [ 993.989687][ T6842] indx_read_ra+0x2d7/0xc00 [ 993.994717][ T6842] indx_find+0x600/0xe50 [ 993.999482][ T6842] indx_delete_entry+0x582/0x3470 [ 994.005029][ T6842] ni_remove_name+0x22d/0x7d0 [ 994.010232][ T6842] ni_rename+0x7a/0x100 [ 994.014915][ T6842] ntfs_rename+0x6ea/0xb40 [ 994.019845][ T6842] vfs_rename+0xa96/0xeb0 [ 994.024690][ T6842] filename_renameat2+0x539/0x9c0 [ 994.030234][ T6842] __se_sys_rename+0x55/0x2c0 [ 994.035527][ T6842] do_syscall_64+0x15f/0xf80 [ 994.040645][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.047060][ T6842] [ 994.047060][ T6842] -> #7 (&ni->ni_lock/5){+.+.}-{4:4}: [ 994.054637][ T6842] __mutex_lock+0x1a3/0x1550 [ 994.059784][ T6842] attr_data_get_block+0x219/0x310 [ 994.065411][ T6842] ntfs_iomap_begin+0x55b/0xfd0 [ 994.070874][ T6842] iomap_iter+0x600/0xf90 [ 994.075729][ T6842] iomap_zero_range+0x2c3/0xc50 [ 994.081112][ T6842] ntfs_file_mmap_prepare+0x759/0xa30 [ 994.087007][ T6842] mmap_region+0xe8f/0x22a0 [ 994.092029][ T6842] do_mmap+0xc39/0x10c0 [ 994.096707][ T6842] vm_mmap_pgoff+0x2c9/0x4f0 [ 994.101818][ T6842] ksys_mmap_pgoff+0x51e/0x760 [ 994.107111][ T6842] do_syscall_64+0x15f/0xf80 [ 994.112223][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.118636][ T6842] [ 994.118636][ T6842] -> #6 (&mm->mmap_lock){++++}-{4:4}: [ 994.126207][ T6842] __might_fault+0xcb/0x130 [ 994.131235][ T6842] _copy_from_user+0x28/0xb0 [ 994.136350][ T6842] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 994.142853][ T6842] ip_generic_getfrag+0x149/0x2d0 [ 994.148402][ T6842] __ip6_append_data+0x3902/0x3e90 [ 994.154033][ T6842] ip6_append_data+0x10f/0x280 [ 994.159315][ T6842] rawv6_sendmsg+0x12d3/0x18e0 [ 994.164616][ T6842] ____sys_sendmsg+0x80a/0x9f0 [ 994.169921][ T6842] ___sys_sendmsg+0x2a5/0x360 [ 994.175127][ T6842] __x64_sys_sendmsg+0x1bd/0x2a0 [ 994.180609][ T6842] do_syscall_64+0x15f/0xf80 [ 994.185735][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.192238][ T6842] [ 994.192238][ T6842] -> #5 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 994.199990][ T6842] lock_sock_nested+0x41/0x100 [ 994.205274][ T6842] inet_shutdown+0x6a/0x390 [ 994.210301][ T6842] nbd_mark_nsock_dead+0x2e9/0x560 [ 994.215941][ T6842] sock_shutdown+0x15e/0x260 [ 994.221045][ T6842] nbd_clear_sock+0x24/0x170 [ 994.226150][ T6842] nbd_config_put+0x2dd/0x580 [ 994.231344][ T6842] nbd_genl_connect+0x19d5/0x1cf0 [ 994.236881][ T6842] genl_family_rcv_msg_doit+0x22a/0x330 [ 994.242953][ T6842] genl_rcv_msg+0x61c/0x7a0 [ 994.247982][ T6842] netlink_rcv_skb+0x232/0x4b0 [ 994.253257][ T6842] genl_rcv+0x28/0x40 [ 994.257757][ T6842] netlink_unicast+0x75c/0x8e0 [ 994.263028][ T6842] netlink_sendmsg+0x813/0xb40 [ 994.268311][ T6842] ____sys_sendmsg+0x972/0x9f0 [ 994.273617][ T6842] ___sys_sendmsg+0x2a5/0x360 [ 994.278981][ T6842] __x64_sys_sendmsg+0x1bd/0x2a0 [ 994.284435][ T6842] do_syscall_64+0x15f/0xf80 [ 994.289542][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.295953][ T6842] [ 994.295953][ T6842] -> #4 (&nsock->tx_lock){+.+.}-{4:4}: [ 994.303601][ T6842] __mutex_lock+0x1a3/0x1550 [ 994.308711][ T6842] nbd_queue_rq+0x37b/0x1100 [ 994.313811][ T6842] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 994.319967][ T6842] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 994.326822][ T6842] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 994.333331][ T6842] blk_mq_run_hw_queue+0x348/0x4f0 [ 994.338966][ T6842] blk_mq_dispatch_list+0xd16/0xe10 [ 994.344691][ T6842] blk_mq_flush_plug_list+0x48d/0x570 [ 994.350595][ T6842] __blk_flush_plug+0x3ed/0x4d0 [ 994.355986][ T6842] __submit_bio+0x28d/0x580 [ 994.361049][ T6842] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 994.367208][ T6842] block_read_full_folio+0x7b7/0x830 [ 994.373009][ T6842] filemap_read_folio+0x137/0x3b0 [ 994.378587][ T6842] do_read_cache_folio+0x358/0x590 [ 994.384229][ T6842] read_part_sector+0xb6/0x2b0 [ 994.389520][ T6842] adfspart_check_ICS+0xb1/0x960 [ 994.394994][ T6842] bdev_disk_changed+0x817/0x1770 [ 994.400549][ T6842] blkdev_get_whole+0x380/0x510 [ 994.405931][ T6842] bdev_open+0x31e/0xd30 [ 994.410718][ T6842] blkdev_open+0x470/0x610 [ 994.415648][ T6842] do_dentry_open+0x785/0x14e0 [ 994.420931][ T6842] vfs_open+0x3b/0x340 [ 994.425514][ T6842] path_openat+0x2e08/0x3860 [ 994.430626][ T6842] do_file_open+0x23e/0x4a0 [ 994.435649][ T6842] do_sys_openat2+0x113/0x200 [ 994.440848][ T6842] __x64_sys_openat+0x138/0x170 [ 994.446224][ T6842] do_syscall_64+0x15f/0xf80 [ 994.451336][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.457762][ T6842] [ 994.457762][ T6842] -> #3 (&cmd->lock){+.+.}-{4:4}: [ 994.464979][ T6842] __mutex_lock+0x1a3/0x1550 [ 994.470091][ T6842] nbd_queue_rq+0xc6/0x1100 [ 994.475122][ T6842] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 994.481196][ T6842] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 994.488231][ T6842] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 994.494790][ T6842] blk_mq_run_hw_queue+0x348/0x4f0 [ 994.500454][ T6842] blk_mq_dispatch_list+0xd16/0xe10 [ 994.506209][ T6842] blk_mq_flush_plug_list+0x48d/0x570 [ 994.512287][ T6842] __blk_flush_plug+0x3ed/0x4d0 [ 994.517726][ T6842] __submit_bio+0x28d/0x580 [ 994.522755][ T6842] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 994.528920][ T6842] block_read_full_folio+0x7b7/0x830 [ 994.534718][ T6842] filemap_read_folio+0x137/0x3b0 [ 994.540353][ T6842] do_read_cache_folio+0x358/0x590 [ 994.546010][ T6842] read_part_sector+0xb6/0x2b0 [ 994.551306][ T6842] adfspart_check_ICS+0xb1/0x960 [ 994.556849][ T6842] bdev_disk_changed+0x817/0x1770 [ 994.562407][ T6842] blkdev_get_whole+0x380/0x510 [ 994.567793][ T6842] bdev_open+0x31e/0xd30 [ 994.572572][ T6842] blkdev_open+0x470/0x610 [ 994.577588][ T6842] do_dentry_open+0x785/0x14e0 [ 994.582879][ T6842] vfs_open+0x3b/0x340 [ 994.587477][ T6842] path_openat+0x2e08/0x3860 [ 994.592599][ T6842] do_file_open+0x23e/0x4a0 [ 994.597629][ T6842] do_sys_openat2+0x113/0x200 [ 994.602825][ T6842] __x64_sys_openat+0x138/0x170 [ 994.608282][ T6842] do_syscall_64+0x15f/0xf80 [ 994.613564][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.620081][ T6842] [ 994.620081][ T6842] -> #2 (set->srcu){.+.+}-{0:0}: [ 994.627208][ T6842] __synchronize_srcu+0xca/0x300 [ 994.632750][ T6842] elevator_switch+0x1e8/0x7a0 [ 994.638036][ T6842] elevator_change+0x2cc/0x450 [ 994.643318][ T6842] elevator_set_default+0x36c/0x430 [ 994.649039][ T6842] blk_register_queue+0x3e9/0x4e0 [ 994.654588][ T6842] __add_disk+0x677/0xd50 [ 994.659431][ T6842] add_disk_fwnode+0xfb/0x480 [ 994.664622][ T6842] nbd_dev_add+0x72c/0xb50 [ 994.669557][ T6842] nbd_init+0x168/0x1f0 [ 994.674231][ T6842] do_one_initcall+0x250/0x870 [ 994.679509][ T6842] do_initcall_level+0x104/0x190 [ 994.684960][ T6842] do_initcalls+0x59/0xa0 [ 994.689801][ T6842] kernel_init_freeable+0x2a6/0x3e0 [ 994.695517][ T6842] kernel_init+0x1d/0x1d0 [ 994.700369][ T6842] ret_from_fork+0x514/0xb70 [ 994.705474][ T6842] ret_from_fork_asm+0x1a/0x30 [ 994.710885][ T6842] [ 994.710885][ T6842] -> #1 (&q->elevator_lock){+.+.}-{4:4}: [ 994.718719][ T6842] __mutex_lock+0x1a3/0x1550 [ 994.723831][ T6842] elevator_change+0x1b3/0x450 [ 994.729205][ T6842] elevator_set_none+0xb5/0x140 [ 994.734576][ T6842] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 994.740985][ T6842] nbd_start_device+0x17f/0xb10 [ 994.746347][ T6842] nbd_genl_connect+0x165b/0x1cf0 [ 994.751887][ T6842] genl_family_rcv_msg_doit+0x22a/0x330 [ 994.757992][ T6842] genl_rcv_msg+0x61c/0x7a0 [ 994.763022][ T6842] netlink_rcv_skb+0x232/0x4b0 [ 994.768303][ T6842] genl_rcv+0x28/0x40 [ 994.772806][ T6842] netlink_unicast+0x75c/0x8e0 [ 994.778080][ T6842] netlink_sendmsg+0x813/0xb40 [ 994.783371][ T6842] ____sys_sendmsg+0x972/0x9f0 [ 994.788654][ T6842] ___sys_sendmsg+0x2a5/0x360 [ 994.793867][ T6842] __x64_sys_sendmsg+0x1bd/0x2a0 [ 994.799344][ T6842] do_syscall_64+0x15f/0xf80 [ 994.804452][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.810860][ T6842] [ 994.810860][ T6842] -> #0 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 994.819513][ T6842] __lock_acquire+0x15a5/0x2cf0 [ 994.824883][ T6842] lock_acquire+0x106/0x350 [ 994.829988][ T6842] blk_mq_submit_bio+0x6de/0x28e0 [ 994.835623][ T6842] __submit_bio+0x1c0/0x580 [ 994.840662][ T6842] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 994.846818][ T6842] block_read_full_folio+0x7b7/0x830 [ 994.852654][ T6842] filemap_read_folio+0x137/0x3b0 [ 994.858211][ T6842] filemap_get_pages+0x1744/0x1ef0 [ 994.863837][ T6842] filemap_read+0x447/0x1230 [ 994.868944][ T6842] blkdev_read_iter+0x30a/0x440 [ 994.874301][ T6842] vfs_read+0x582/0xa70 [ 994.878974][ T6842] ksys_read+0x150/0x270 [ 994.883731][ T6842] do_syscall_64+0x15f/0xf80 [ 994.888837][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.895239][ T6842] [ 994.895239][ T6842] other info that might help us debug this: [ 994.895239][ T6842] [ 994.905461][ T6842] Chain exists of: [ 994.905461][ T6842] &q->q_usage_counter(io)#52 --> &indx->run_lock --> mapping.invalidate_lock [ 994.905461][ T6842] [ 994.920177][ T6842] Possible unsafe locking scenario: [ 994.920177][ T6842] [ 994.927621][ T6842] CPU0 CPU1 [ 994.932979][ T6842] ---- ---- [ 994.938327][ T6842] rlock(mapping.invalidate_lock); [ 994.943520][ T6842] lock(&indx->run_lock); [ 994.950455][ T6842] lock(mapping.invalidate_lock); [ 994.958080][ T6842] rlock(&q->q_usage_counter(io)#52); [ 994.963546][ T6842] [ 994.963546][ T6842] *** DEADLOCK *** [ 994.963546][ T6842] [ 994.971674][ T6842] 2 locks held by udevd/6842: [ 994.976330][ T6842] #0: ffff888023169ee8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440 [ 994.987143][ T6842] #1: ffff88802316a080 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x991/0x1ef0 [ 994.997774][ T6842] [ 994.997774][ T6842] stack backtrace: [ 995.003739][ T6842] CPU: 1 UID: 0 PID: 6842 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 995.003769][ T6842] Tainted: [L]=SOFTLOCKUP [ 995.003778][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 995.003792][ T6842] Call Trace: [ 995.003801][ T6842] [ 995.003811][ T6842] dump_stack_lvl+0xe8/0x150 [ 995.003838][ T6842] print_circular_bug+0x2e1/0x300 [ 995.003873][ T6842] check_noncircular+0x12e/0x150 [ 995.003907][ T6842] __lock_acquire+0x15a5/0x2cf0 [ 995.003934][ T6842] ? mempool_alloc_noprof+0x1ce/0x300 [ 995.003957][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.003984][ T6842] ? stack_trace_save+0xa9/0x100 [ 995.004018][ T6842] ? __pfx_stack_trace_save+0x10/0x10 [ 995.004052][ T6842] ? mempool_alloc_noprof+0x1ce/0x300 [ 995.004075][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.004101][ T6842] ? stack_depot_save_flags+0x33/0x810 [ 995.004129][ T6842] ? is_bpf_text_address+0x26/0x2b0 [ 995.004155][ T6842] ? __submit_bio+0x1c0/0x580 [ 995.004189][ T6842] lock_acquire+0x106/0x350 [ 995.004212][ T6842] ? __submit_bio+0x1c0/0x580 [ 995.004248][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.004277][ T6842] ? blk_mq_submit_bio+0x3d1/0x28e0 [ 995.004311][ T6842] ? __submit_bio+0x1c0/0x580 [ 995.004345][ T6842] blk_mq_submit_bio+0x6de/0x28e0 [ 995.004378][ T6842] ? __submit_bio+0x1c0/0x580 [ 995.004413][ T6842] ? blk_mq_submit_bio+0x3d1/0x28e0 [ 995.004454][ T6842] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 995.004488][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.004514][ T6842] ? __lock_acquire+0x6b5/0x2cf0 [ 995.004546][ T6842] __submit_bio+0x1c0/0x580 [ 995.004582][ T6842] ? __pfx___submit_bio+0x10/0x10 [ 995.004619][ T6842] ? bio_associate_blkg+0x6d/0x230 [ 995.004659][ T6842] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 995.004691][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.004721][ T6842] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 995.004755][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.004789][ T6842] block_read_full_folio+0x7b7/0x830 [ 995.004817][ T6842] ? __pfx_blkdev_get_block+0x10/0x10 [ 995.004841][ T6842] filemap_read_folio+0x137/0x3b0 [ 995.004874][ T6842] ? __pfx_blkdev_read_folio+0x10/0x10 [ 995.004910][ T6842] ? __pfx_filemap_read_folio+0x10/0x10 [ 995.004944][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.004970][ T6842] ? down_read+0x270/0x2e0 [ 995.004998][ T6842] ? filemap_get_pages+0x987/0x1ef0 [ 995.005030][ T6842] filemap_get_pages+0x1744/0x1ef0 [ 995.005060][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.005087][ T6842] ? mas_ascend+0x304/0x890 [ 995.005130][ T6842] ? __pfx_filemap_get_pages+0x10/0x10 [ 995.005166][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.005195][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.005226][ T6842] filemap_read+0x447/0x1230 [ 995.005256][ T6842] ? aa_file_perm+0x192/0x15e0 [ 995.005297][ T6842] ? __pfx_filemap_read+0x10/0x10 [ 995.005343][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.005369][ T6842] ? down_read+0x270/0x2e0 [ 995.005396][ T6842] ? blkdev_read_iter+0x177/0x440 [ 995.005418][ T6842] blkdev_read_iter+0x30a/0x440 [ 995.005448][ T6842] vfs_read+0x582/0xa70 [ 995.005484][ T6842] ? __pfx_vfs_read+0x10/0x10 [ 995.005513][ T6842] ? vm_mmap_pgoff+0x373/0x4f0 [ 995.005539][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.005569][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.005598][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.005627][ T6842] ksys_read+0x150/0x270 [ 995.005659][ T6842] ? __pfx_ksys_read+0x10/0x10 [ 995.005690][ T6842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.005721][ T6842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.005745][ T6842] do_syscall_64+0x15f/0xf80 [ 995.005774][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.005797][ T6842] RIP: 0033:0x7f06664a7407 [ 995.005817][ T6842] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 995.005836][ T6842] RSP: 002b:00007ffd7f293cb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 995.005858][ T6842] RAX: ffffffffffffffda RBX: 00007f0666bdc880 RCX: 00007f06664a7407 [ 995.005875][ T6842] RDX: 0000000000000200 RSI: 00007f0666bcc000 RDI: 0000000000000009 [ 995.005890][ T6842] RBP: 000055d5bbbd53b0 R08: 0000000000000000 R09: 0000000000000000 [ 995.005905][ T6842] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 995.005919][ T6842] R13: 0000000000000000 R14: 000055d5bbbc5408 R15: 00007f0666d0339c [ 995.005944][ T6842] [ 999.393225][T26587] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.400408][T26587] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.407741][T26587] bridge_slave_0: entered allmulticast mode [ 999.414851][T26587] bridge_slave_0: entered promiscuous mode [ 999.423291][T26587] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.430409][T26587] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.438772][T26587] bridge_slave_1: entered allmulticast mode [ 999.445949][T26587] bridge_slave_1: entered promiscuous mode [ 999.487924][T26587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.499834][T26587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.542161][T26587] team0: Port device team_slave_0 added [ 999.550176][T26587] team0: Port device team_slave_1 added [ 999.586349][T26587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.596693][T26587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.623515][T26587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.643814][T26587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.650778][T26587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.678062][T26587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.720724][T26587] hsr_slave_0: entered promiscuous mode [ 999.727849][T26587] hsr_slave_1: entered promiscuous mode [ 1000.104607][T26587] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1000.117602][T26587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1000.126021][T26587] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1000.137836][T26587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1000.147134][T26587] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1000.156583][T26587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1000.165211][T26587] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1000.176664][T26587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1000.243456][T26587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.264132][T26587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.277832][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.285005][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.300094][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.307241][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.721381][T26587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.970949][T26587] veth0_vlan: entered promiscuous mode [ 1000.984500][T26587] veth1_vlan: entered promiscuous mode [ 1001.014902][T26587] veth0_macvtap: entered promiscuous mode [ 1001.026694][T26587] veth1_macvtap: entered promiscuous mode [ 1001.046531][T26587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.063479][T26587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.078831][T13987] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.099280][T13987] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.120633][T13987] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.138824][T13987] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.168492][T26587] ieee80211 phy54: Selected rate control algorithm 'minstrel_ht' [ 1001.206131][T13987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.220293][T26587] ieee80211 phy55: Selected rate control algorithm 'minstrel_ht' [ 1001.223493][T13987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.254591][T13987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.272408][T13987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.018874][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1002.321389][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1002.630254][ T5281] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1002.945088][ T5281] 8021q: adding VLAN 0 to HW filter on device eth12