last executing test programs: 52.534081015s ago: executing program 2 (id=106): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b5738", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb", 0x18}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x60}], 0x1}, 0x7fff}], 0x1, 0x10000, 0x0) 51.540650697s ago: executing program 2 (id=109): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x32, &(0x7f00000000c0)={0x3c, 0x8000004, 0x1ff}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r2, &(0x7f0000002bc0)={0x2020}, 0x2020) 51.371981356s ago: executing program 2 (id=110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x3, 0x0, 0xfffffffd, 0x0, 0x1, 0x2}}) close_range(r1, 0xffffffffffffffff, 0x0) 51.247749062s ago: executing program 2 (id=111): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT], 0x25, 0x35e, &(0x7f0000000140)="$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") r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 50.785573197s ago: executing program 2 (id=113): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x11fb, 0x5, 0x7, 0xfffffbff, 0x4}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 50.315338491s ago: executing program 2 (id=119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 49.790456659s ago: executing program 32 (id=119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 48.559965572s ago: executing program 3 (id=130): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x200400d1) 48.380237092s ago: executing program 3 (id=132): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x4001, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 48.006395592s ago: executing program 3 (id=135): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 47.700060038s ago: executing program 3 (id=137): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 47.407443623s ago: executing program 3 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000140)={0x8f, 0x0, 0x2}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 46.70795718s ago: executing program 3 (id=140): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000480)=""/148, 0x94}], 0x1, 0x3, 0x88c7, 0x4) 46.185506477s ago: executing program 33 (id=140): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000480)=""/148, 0x94}], 0x1, 0x3, 0x88c7, 0x4) 3.537976035s ago: executing program 5 (id=363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3.283961928s ago: executing program 5 (id=365): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1511, &(0x7f00000031c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x85a0d8, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c8) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0xfd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x82) 3.006044023s ago: executing program 5 (id=367): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280", 0x13}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff", 0xd}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x42}], 0x1}, 0x0) 2.828105503s ago: executing program 5 (id=368): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1000) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) 2.785455365s ago: executing program 4 (id=369): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xce48, 0x1f280, 0x0, 0x399}) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 2.459611762s ago: executing program 4 (id=371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 2.328182198s ago: executing program 4 (id=372): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x38, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40090) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 2.237855913s ago: executing program 0 (id=373): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000860000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @val=@tracing={0x0, 0x2}}, 0x1c) syz_emit_ethernet(0x1b0, &(0x7f0000000880)=ANY=[], 0x0) 2.027342814s ago: executing program 4 (id=375): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201809a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0xa5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 1.978772327s ago: executing program 0 (id=376): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20008800}], 0x1, 0x40800) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000040)="82ff0000", 0x49, 0x0, 0x0, 0xf) 1.949738868s ago: executing program 1 (id=377): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="fb", 0x55) r1 = accept(r0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x20008451}, 0x90) recvmsg$qrtr(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0), 0x8, 0x0, 0x0, 0x40000001}, 0x38, 0x10002) 1.791771087s ago: executing program 5 (id=378): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1819011, 0x0, 0x43, 0x0, &(0x7f00000001c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964dee674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 1.774949768s ago: executing program 0 (id=379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000004c0)="66f26c670f6902b9590b0000b800000100ba000000000f300f20e035000010000f22e0650f77c4e16cc6cafa66b839000f00d80f090f20e035020000000f22e0c4c3c97f75f9dc", 0x47}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.674463563s ago: executing program 1 (id=380): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x31) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.439796065s ago: executing program 4 (id=381): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x22020600) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, 0x0, &(0x7f0000000280)) 1.439450365s ago: executing program 1 (id=382): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) close(0x3) 1.173678359s ago: executing program 0 (id=383): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r2, @ANYBLOB="08000b00e0000001080002"], 0x60}}, 0x814) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.041697016s ago: executing program 4 (id=384): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0}, &(0x7f0000000640)={0x44, &(0x7f0000000300)={0x60, 0x8, 0x6, "e2b0e6b0c55d"}, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x1, 0x9, 0xc, 0x5, 0x2a46, 0x1, 0x9, 0x2, 0x1ff, 0xff, 0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001440)={0x2c, &(0x7f0000001200)={0x20, 0x11, 0x7, "65ecf34bb2658f"}, 0x0, 0x0, 0x0, 0x0}) 867.896935ms ago: executing program 1 (id=385): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r0, r0, 0xffffffffffffffff, r0, r0], 0x0, 0x10, 0x9}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0xc0000000, 0x3, 0x7}, 0x3, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) 792.001229ms ago: executing program 0 (id=386): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x4, 0x80, 0x0, 0x8, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x40, 0x8000, 0x5, 0x1000}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 686.127055ms ago: executing program 1 (id=387): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) 107.789335ms ago: executing program 5 (id=388): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000022c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)="07e007bb16eca8ae44", 0x9}], 0x1}}], 0x1, 0x8000) sendto$inet(r1, &(0x7f0000000080)='\x00\x00', 0x2, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 51.558788ms ago: executing program 1 (id=389): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000002440)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @f={0x4, 0x2, 0x3, 0x2, 0x4, 0x4, 0x8e, {0x8, 0x30, "3bef03fb5b57734af757c77113f40a3c60e12c5c69191e7680c6ff34c5e651d575f6be33beb406006b09b78194f8ed97"}, 0xcb, 0x4, 0x4, 0x9, 0x57, "a51c28fafadd069e8f01a2b32965c5c8adf84aadebc100e083a9b213db02f5211fbf92bf4de1ba825ff19cb029375e915cd2a2bdb4c58bc9dcae92a3ff509808e2899f5f55ff8320c2fbce3e02bef5b31139f5a2466c6b"}}, 0x98) 0s ago: executing program 0 (id=390): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0xfffffffe, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000000) readv(r0, &(0x7f0000000440)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 78.977571][ T5754] cgroup: Unknown subsys name 'net' [ 79.115421][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.889571][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.565100][ T5768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.575755][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.585466][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.594185][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.603973][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.627736][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.637602][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.666876][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.675924][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.684543][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.687657][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.696305][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.705632][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.708626][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.718497][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.721745][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.730262][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.741820][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.742992][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.756704][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.765226][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.773115][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.781606][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.802116][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.264552][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 83.414003][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 83.440822][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 83.479140][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 83.492124][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.500095][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.509782][ T5771] bridge_slave_0: entered allmulticast mode [ 83.517219][ T5771] bridge_slave_0: entered promiscuous mode [ 83.534537][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.542150][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.549748][ T5771] bridge_slave_1: entered allmulticast mode [ 83.556992][ T5771] bridge_slave_1: entered promiscuous mode [ 83.633286][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.673187][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.784684][ T5771] team0: Port device team_slave_0 added [ 83.791806][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.799766][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.807486][ T5767] bridge_slave_0: entered allmulticast mode [ 83.815089][ T5767] bridge_slave_0: entered promiscuous mode [ 83.834992][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.842396][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.852866][ T5766] bridge_slave_0: entered allmulticast mode [ 83.860046][ T5766] bridge_slave_0: entered promiscuous mode [ 83.869690][ T5771] team0: Port device team_slave_1 added [ 83.875826][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.883308][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.890632][ T5766] bridge_slave_1: entered allmulticast mode [ 83.898033][ T5766] bridge_slave_1: entered promiscuous mode [ 83.917470][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.924678][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.932654][ T5767] bridge_slave_1: entered allmulticast mode [ 83.940510][ T5767] bridge_slave_1: entered promiscuous mode [ 84.001371][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.021171][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.028657][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.035967][ T5773] bridge_slave_0: entered allmulticast mode [ 84.046217][ T5773] bridge_slave_0: entered promiscuous mode [ 84.055077][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.062209][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.088584][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.104144][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.118201][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.129618][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.141990][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.149757][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.157409][ T5773] bridge_slave_1: entered allmulticast mode [ 84.164942][ T5773] bridge_slave_1: entered promiscuous mode [ 84.172485][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.179888][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.207253][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.254012][ T5767] team0: Port device team_slave_0 added [ 84.298098][ T5767] team0: Port device team_slave_1 added [ 84.311440][ T5766] team0: Port device team_slave_0 added [ 84.332794][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.373317][ T5766] team0: Port device team_slave_1 added [ 84.381789][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.434623][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.444063][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.472873][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.502665][ T5771] hsr_slave_0: entered promiscuous mode [ 84.511198][ T5771] hsr_slave_1: entered promiscuous mode [ 84.532638][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.539823][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.566254][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.579567][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.586902][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.613820][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.628943][ T5773] team0: Port device team_slave_0 added [ 84.638184][ T5773] team0: Port device team_slave_1 added [ 84.644756][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.652466][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.679009][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.750511][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.757840][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.784052][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.826135][ T5766] hsr_slave_0: entered promiscuous mode [ 84.833087][ T5766] hsr_slave_1: entered promiscuous mode [ 84.839394][ T5768] Bluetooth: hci3: command tx timeout [ 84.839528][ T5782] Bluetooth: hci0: command tx timeout [ 84.845396][ T5778] Bluetooth: hci1: command tx timeout [ 84.857553][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.865482][ T5766] Cannot create hsr debugfs directory [ 84.872228][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.879857][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.906696][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.918464][ T5778] Bluetooth: hci2: command tx timeout [ 84.965422][ T5767] hsr_slave_0: entered promiscuous mode [ 84.973060][ T5767] hsr_slave_1: entered promiscuous mode [ 84.979926][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.987864][ T5767] Cannot create hsr debugfs directory [ 85.128734][ T5773] hsr_slave_0: entered promiscuous mode [ 85.135444][ T5773] hsr_slave_1: entered promiscuous mode [ 85.142667][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.150985][ T5773] Cannot create hsr debugfs directory [ 85.482675][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.515189][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.526258][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.551333][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.635546][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.654659][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.665851][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.682750][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.784013][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.795032][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.811803][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.824155][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.932113][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.947787][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.962493][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.974931][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.991232][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.041120][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.083940][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.091696][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.125439][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.132687][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.150256][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.213220][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.262454][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.269688][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.310251][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.317677][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.365115][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.423190][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.463753][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.504255][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.531836][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.539112][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.555954][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.563317][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.596209][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.603504][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.623936][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.631209][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.876005][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.928247][ T5778] Bluetooth: hci0: command tx timeout [ 86.933778][ T5778] Bluetooth: hci1: command tx timeout [ 86.939547][ T5768] Bluetooth: hci3: command tx timeout [ 86.996858][ T5778] Bluetooth: hci2: command tx timeout [ 87.043347][ T5771] veth0_vlan: entered promiscuous mode [ 87.100814][ T5771] veth1_vlan: entered promiscuous mode [ 87.172881][ T5771] veth0_macvtap: entered promiscuous mode [ 87.204445][ T5771] veth1_macvtap: entered promiscuous mode [ 87.272972][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.353061][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.430822][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.498004][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.509126][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.524026][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.533986][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.560686][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.613554][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.708335][ T5767] veth0_vlan: entered promiscuous mode [ 87.794424][ T5767] veth1_vlan: entered promiscuous mode [ 87.897961][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.906086][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.920527][ T5773] veth0_vlan: entered promiscuous mode [ 87.979881][ T5767] veth0_macvtap: entered promiscuous mode [ 87.993189][ T5766] veth0_vlan: entered promiscuous mode [ 88.013723][ T5773] veth1_vlan: entered promiscuous mode [ 88.035098][ T5767] veth1_macvtap: entered promiscuous mode [ 88.062065][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.064478][ T5766] veth1_vlan: entered promiscuous mode [ 88.076170][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.150495][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.170569][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.190532][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.247182][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.263948][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.283774][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.296289][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.311524][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.320769][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.332035][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.348780][ T5773] veth0_macvtap: entered promiscuous mode [ 88.361547][ T5766] veth0_macvtap: entered promiscuous mode [ 88.395445][ T5766] veth1_macvtap: entered promiscuous mode [ 88.414948][ T5773] veth1_macvtap: entered promiscuous mode [ 88.533780][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.562226][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.574546][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.593977][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.615972][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.633639][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.654473][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.665951][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.678906][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.691243][ T5836] syz.1.5[5836]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.706319][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.721133][ T5836] loop1: detected capacity change from 0 to 128 [ 88.741678][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.755368][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.778558][ T5836] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.790987][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.807537][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.811762][ T5836] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.843069][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.891162][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.912954][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.943865][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.958756][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.969178][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.980034][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.990636][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.003147][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.007001][ T5778] Bluetooth: hci1: command tx timeout [ 89.018741][ T5768] Bluetooth: hci3: command tx timeout [ 89.019148][ T5782] Bluetooth: hci0: command tx timeout [ 89.035478][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.048429][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.064450][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.073837][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.082823][ T5782] Bluetooth: hci2: command tx timeout [ 89.088616][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.103705][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.112815][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.121821][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.130658][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.144492][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.155036][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.173994][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.278775][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.319326][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.438982][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.457596][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.553676][ T741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.592951][ T741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.710319][ T5845] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.738482][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.750047][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.768887][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.776282][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.144391][ T5856] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.214591][ T5856] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.302949][ T5858] loop2: detected capacity change from 0 to 512 [ 90.347918][ T5858] ======================================================= [ 90.347918][ T5858] WARNING: The mand mount option has been deprecated and [ 90.347918][ T5858] and is ignored by this kernel. Remove the mand [ 90.347918][ T5858] option from the mount to silence this warning. [ 90.347918][ T5858] ======================================================= [ 90.594727][ T5869] loop1: detected capacity change from 0 to 128 [ 90.819467][ T5869] syz.1.13: attempt to access beyond end of device [ 90.819467][ T5869] loop1: rw=2049, sector=145, nr_sectors = 5 limit=128 [ 90.903390][ T5869] syz.1.13: attempt to access beyond end of device [ 90.903390][ T5869] loop1: rw=34817, sector=102, nr_sectors = 27 limit=128 [ 90.938243][ T5869] syz.1.13: attempt to access beyond end of device [ 90.938243][ T5869] loop1: rw=34817, sector=145, nr_sectors = 5 limit=128 [ 91.077454][ T5782] Bluetooth: hci0: command tx timeout [ 91.082968][ T5782] Bluetooth: hci1: command tx timeout [ 91.088332][ T5778] Bluetooth: hci3: command tx timeout [ 91.156979][ T5782] Bluetooth: hci2: command tx timeout [ 91.259824][ T5879] loop0: detected capacity change from 0 to 2048 [ 91.308997][ T5879] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 91.356871][ T5879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.500148][ T5888] syz.3.19 uses obsolete (PF_INET,SOCK_PACKET) [ 92.053142][ T5896] input: syz0 as /devices/virtual/input/input5 [ 92.234150][ T5890] loop1: detected capacity change from 0 to 32768 [ 92.274328][ T5890] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.20 (5890) [ 92.927222][ T788] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.126784][ T788] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 253, using maximum allowed: 30 [ 93.142841][ T788] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 93.161857][ T788] usb 1-1: config 1 interface 0 has no altsetting 0 [ 93.174730][ T788] usb 1-1: string descriptor 0 read error: -22 [ 93.190131][ T788] usb 1-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.40 [ 93.203931][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.206660][ C1] sched: RT throttling activated [ 93.372629][ T5899] loop3: detected capacity change from 0 to 131072 [ 93.391611][ T5890] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 93.411411][ T5890] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 93.423025][ T5899] F2FS-fs (loop3): invalid crc value [ 93.438516][ T968] cfg80211: failed to load regulatory.db [ 93.473759][ T5890] BTRFS info (device loop1): using free space tree [ 93.489627][ T5899] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.544722][ T5899] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 93.806884][ T5890] BTRFS info (device loop1): enabling ssd optimizations [ 93.833954][ T5890] BTRFS info (device loop1): auto enabling async discard [ 93.895736][ T788] holtek_mouse 0003:04D9:A04A.0001: unknown main item tag 0x4 [ 93.943497][ T788] holtek_mouse 0003:04D9:A04A.0001: invalid report_size 11124 [ 93.978062][ T788] holtek_mouse 0003:04D9:A04A.0001: item 0 2 1 7 parsing failed [ 94.006868][ T788] holtek_mouse 0003:04D9:A04A.0001: hid parse failed: -22 [ 94.026713][ T788] holtek_mouse: probe of 0003:04D9:A04A.0001 failed with error -22 [ 94.142923][ T788] usb 1-1: USB disconnect, device number 2 [ 94.532780][ T5771] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 95.915989][ T5937] loop2: detected capacity change from 0 to 131072 [ 95.962686][ T5946] syzkaller1: entered promiscuous mode [ 95.988165][ T5937] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.009983][ T5946] syzkaller1: entered allmulticast mode [ 96.047750][ T5937] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.174315][ T5937] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 96.199735][ T5937] F2FS-fs (loop2): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 96.214733][ T5953] loop0: detected capacity change from 0 to 1024 [ 96.249599][ T5953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.357771][ T5953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.482796][ T5955] loop3: detected capacity change from 0 to 2048 [ 96.572856][ T5770] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.682746][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.037118][ T5967] loop1: detected capacity change from 0 to 256 [ 97.111295][ T28] audit: type=1800 audit(1776712507.306:2): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.41" name="file2" dev="loop1" ino=1048594 res=0 errno=0 [ 97.139038][ T5967] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 97.172665][ T5967] FAT-fs (loop1): Filesystem has been set read-only [ 97.192502][ T5971] loop3: detected capacity change from 0 to 128 [ 97.210896][ T5967] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 97.264808][ T5967] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 97.317470][ T5967] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 97.352668][ T5967] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 97.421406][ T5967] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 97.459322][ T5967] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 97.490328][ T5967] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 97.546032][ T5967] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 97.571908][ T5977] capability: warning: `syz.3.44' uses deprecated v2 capabilities in a way that may be insecure [ 97.583058][ T5967] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 97.937861][ T5980] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 97.990029][ T5980] syzkaller1: Refused to change device type [ 98.066164][ T5987] ªªªªªª: renamed from vlan0 (while UP) [ 98.075645][ T5989] loop3: detected capacity change from 0 to 256 [ 98.178730][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.386770][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 98.415677][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 98.437154][ T9] usb 3-1: config 0 has no interface number 0 [ 98.451242][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 98.463594][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 98.464650][ T5992] loop1: detected capacity change from 0 to 4096 [ 98.484571][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.508981][ T9] usb 3-1: Product: syz [ 98.513251][ T9] usb 3-1: Manufacturer: syz [ 98.542110][ T9] usb 3-1: SerialNumber: syz [ 98.555387][ T9] usb 3-1: config 0 descriptor?? [ 98.576298][ T9] smsc75xx v1.0.0 [ 98.822175][ T5992] ntfs3: loop1: ino=21, "file1" mmap(write) compressed not supported [ 99.407112][ T5811] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.627953][ T5811] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 99.637610][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.645685][ T5811] usb 2-1: Product: syz [ 99.654977][ T5811] usb 2-1: Manufacturer: syz [ 99.660009][ T5811] usb 2-1: SerialNumber: syz [ 99.787015][ T5810] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 99.827731][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 99.856655][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 99.870898][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 99.898419][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 99.902364][ T5811] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 99.918786][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 99.942881][ T5811] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 99.947005][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 99.987786][ T9] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 100.008618][ T9] usb 3-1: USB disconnect, device number 2 [ 100.028054][ T5810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.061651][ T5810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 100.084482][ T6029] loop0: detected capacity change from 0 to 2048 [ 100.096730][ T5810] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 100.130388][ T5810] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 100.163036][ T6029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.178703][ T5810] usb 4-1: New USB device found, idVendor=0525, idProduct=bfa1, bcdDevice= 0.40 [ 100.188343][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.196481][ T5810] usb 4-1: Product: syz [ 100.201275][ T5810] usb 4-1: Manufacturer: syz [ 100.205940][ T5810] usb 4-1: SerialNumber: syz [ 100.218812][ T6021] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 100.241077][ T6029] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 100.317919][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.440003][ T6021] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 100.458660][ T6021] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 100.579444][ T5811] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 100.614708][ T5811] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 100.638983][ T5811] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 100.688953][ T5811] lan78xx: probe of 2-1:1.0 failed with error -71 [ 100.806355][ T5811] usb 2-1: USB disconnect, device number 2 [ 101.074013][ T6021] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 101.087323][ T6021] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 101.342920][ T5810] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 101.363364][ T5810] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 101.506262][ T5810] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 101.574786][ T5810] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 101.695183][ T5810] usb 4-1: USB disconnect, device number 2 [ 101.749994][ T5810] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 102.265508][ T6046] netlink: 36 bytes leftover after parsing attributes in process `syz.2.67'. [ 102.334890][ T6049] loop3: detected capacity change from 0 to 128 [ 102.384676][ T6049] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 102.442845][ T6049] hpfs: filesystem error: improperly stopped [ 102.480700][ T6049] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 102.522095][ T6049] hpfs: You really don't want any checks? You are crazy... [ 102.533559][ T6053] Illegal XDP return value 4294967294 on prog (id 5) dev N/A, expect packet loss! [ 102.555417][ T6049] hpfs: Code page index out of array [ 102.568455][ T6049] hpfs: code page support is disabled [ 102.590492][ T6049] hpfs: hpfs_map_4sectors(): unaligned read [ 102.637383][ T6049] hpfs: hpfs_map_4sectors(): unaligned read [ 102.643485][ T6049] hpfs: filesystem error: unable to find root dir [ 103.420465][ T5810] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.627673][ T5810] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 103.676246][ T5810] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 103.703381][ T5810] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 103.728679][ T5810] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 103.763195][ T5810] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 103.781269][ T5810] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 103.819358][ T5810] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 103.849346][ T5810] usb 2-1: config index 6 descriptor too short (expected 65505, got 72) [ 103.886403][ T5810] usb 2-1: config index 7 descriptor too short (expected 65505, got 72) [ 103.914483][ T5810] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.939258][ T6057] loop2: detected capacity change from 0 to 32768 [ 103.963533][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.008098][ T5810] usb 2-1: Product: syz [ 104.012449][ T5810] usb 2-1: Manufacturer: syz [ 104.022732][ T5810] usb 2-1: SerialNumber: syz [ 104.039432][ T5810] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 104.079047][ T788] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 104.140844][ T6057] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 104.349262][ T6065] random: crng reseeded on system resumption [ 104.471789][ T6057] XFS (loop2): Ending clean mount [ 104.879009][ T5767] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 105.181125][ T788] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 105.239540][ T788] ath9k_htc: Failed to initialize the device [ 105.390812][ T788] usb 2-1: ath9k_htc: USB layer deinitialized [ 105.880635][ T5811] usb 2-1: USB disconnect, device number 3 [ 105.917464][ T6109] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 106.652146][ T6120] loop3: detected capacity change from 0 to 64 [ 107.061863][ T6130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.163385][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b854400: rx timeout, send abort [ 107.356788][ T28] audit: type=1326 audit(1776712517.536:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.0.89" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe8939c819 code=0x0 [ 107.392793][ T6133] loop1: detected capacity change from 0 to 32768 [ 107.403404][ T6133] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.87 (6133) [ 107.426261][ T6133] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.437685][ T6133] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 107.446457][ T6133] BTRFS info (device loop1): enabling auto defrag [ 107.453226][ T6133] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 107.463537][ T6133] BTRFS info (device loop1): use zstd compression, level 3 [ 107.470960][ T6133] BTRFS info (device loop1): turning on async discard [ 107.478182][ T6133] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 107.489150][ T6133] BTRFS info (device loop1): trying to use backup root at mount time [ 107.497487][ T6133] BTRFS info (device loop1): enabling ssd optimizations [ 107.504521][ T6133] BTRFS info (device loop1): using spread ssd allocation scheme [ 107.512372][ T6133] BTRFS info (device loop1): force zlib compression, level 3 [ 107.519895][ T6133] BTRFS info (device loop1): using free space tree [ 107.554985][ T741] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 107.570032][ T6133] BTRFS error (device loop1): failed to load root extent [ 107.578047][ T6133] BTRFS warning (device loop1): try to load backup roots slot 1 [ 107.586165][ T11] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 107.611189][ T6133] BTRFS warning (device loop1): couldn't read tree root [ 107.618505][ T6133] BTRFS warning (device loop1): try to load backup roots slot 2 [ 107.627418][ T1102] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 107.639228][ T6133] BTRFS warning (device loop1): couldn't read tree root [ 107.646253][ T6133] BTRFS warning (device loop1): try to load backup roots slot 3 [ 107.670863][ T6133] BTRFS info (device loop1): rebuilding free space tree [ 107.681351][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b854400: abort rx timeout. Force session deactivation [ 107.716868][ T6133] BTRFS info (device loop1): checking UUID tree [ 107.999338][ T5771] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.504042][ T5772] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (5772) [ 109.026711][ T5811] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.218851][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 109.228476][ T5811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 109.247095][ T788] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.269552][ T5811] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 109.280652][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 109.290033][ T5811] usb 4-1: Product: syz [ 109.294809][ T5811] usb 4-1: Manufacturer: syz [ 109.299726][ T5811] usb 4-1: SerialNumber: syz [ 109.319214][ T5811] usb 4-1: config 0 descriptor?? [ 109.325163][ T6184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 109.342513][ T5811] hub 4-1:0.0: bad descriptor, ignoring hub [ 109.369791][ T5811] hub: probe of 4-1:0.0 failed with error -5 [ 109.450711][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.465688][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.484701][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.495469][ T788] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 109.509777][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.523399][ T788] usb 2-1: config 0 descriptor?? [ 109.910903][ T5811] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 109.947166][ T788] wacom 0003:056A:0010.0002: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 109.965553][ T788] wacom 0003:056A:0010.0002: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.1-1/input0 [ 109.982221][ T788] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.0002/input/input6 [ 109.998498][ T6184] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 110.029689][ T6184] usb 4-1: device reset changed ep0 maxpacket size! [ 110.042053][ T5810] usb 4-1: USB disconnect, device number 3 [ 110.100329][ T5811] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.124590][ T5811] usb 1-1: not running at top speed; connect to a high speed hub [ 110.164886][ T5811] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 110.186452][ T5811] usb 1-1: config 1 interface 0 has no altsetting 0 [ 110.223651][ T5810] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.244462][ T5811] usb 1-1: string descriptor 0 read error: -22 [ 110.251295][ T5811] usb 1-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.40 [ 110.274031][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.307487][ T6204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.385160][ T788] usb 2-1: USB disconnect, device number 4 [ 110.426784][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 110.442091][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 110.476224][ T5810] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 110.493827][ T5810] usb 4-1: can't read configurations, error -71 [ 110.627593][ T6212] loop2: detected capacity change from 0 to 256 [ 110.692843][ T6212] FAT-fs (loop2): Directory bread(block 64) failed [ 110.701181][ T6212] FAT-fs (loop2): Directory bread(block 65) failed [ 110.710332][ T6212] FAT-fs (loop2): Directory bread(block 66) failed [ 110.717740][ T6212] FAT-fs (loop2): Directory bread(block 67) failed [ 110.724630][ T6212] FAT-fs (loop2): Directory bread(block 68) failed [ 110.736490][ T6212] FAT-fs (loop2): Directory bread(block 69) failed [ 110.743994][ T6212] FAT-fs (loop2): Directory bread(block 70) failed [ 110.751389][ T6212] FAT-fs (loop2): Directory bread(block 71) failed [ 110.765709][ T5811] sony 0003:054C:0374.0003: invalid report_size -1149171161 [ 110.773379][ T6212] FAT-fs (loop2): Directory bread(block 72) failed [ 110.797167][ T5811] sony 0003:054C:0374.0003: item 0 4 1 7 parsing failed [ 110.802967][ T6212] FAT-fs (loop2): Directory bread(block 73) failed [ 110.806349][ T5811] sony 0003:054C:0374.0003: parse failed [ 110.840791][ T5811] sony: probe of 0003:054C:0374.0003 failed with error -22 [ 110.975450][ T788] usb 1-1: USB disconnect, device number 3 [ 111.028622][ T5767] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 111.059683][ T5767] FAT-fs (loop2): Filesystem has been set read-only [ 111.159388][ T6218] netlink: 35 bytes leftover after parsing attributes in process `syz.3.114'. [ 111.174653][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 111.693306][ T741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.841561][ T741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.991274][ T741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.110437][ T741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.398849][ T6246] Bluetooth: MGMT ver 1.22 [ 112.871902][ T5768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.882668][ T5768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.891179][ T5768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.947006][ T5768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.956967][ T5768] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 112.965967][ T5768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.534935][ T6280] loop1: detected capacity change from 0 to 512 [ 113.546778][ T6277] capability: warning: `syz.0.131' uses 32-bit capabilities (legacy support in use) [ 113.574183][ T6280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.729736][ T6280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.757034][ T6280] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.054538][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.141171][ T6294] loop3: detected capacity change from 0 to 512 [ 114.153403][ T6294] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.137: inode has both inline data and extents flags [ 114.169355][ T6294] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.137: couldn't read orphan inode 15 (err -117) [ 114.183486][ T6294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.453310][ T6297] loop1: detected capacity change from 0 to 512 [ 114.488014][ T6297] EXT4-fs: Ignoring removed orlov option [ 114.493775][ T6297] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.559279][ T6297] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.136: corrupted in-inode xattr: e_value size too large [ 114.631811][ T6297] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.136: couldn't read orphan inode 15 (err -117) [ 114.647493][ T6297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.675346][ T6297] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.136: Logical block already allocated [ 114.843572][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.995947][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.041310][ T6309] process 'syz.1.139' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 115.077158][ T5782] Bluetooth: hci1: command tx timeout [ 115.342060][ T6258] chnl_net:caif_netlink_parms(): no params data found [ 115.641272][ T741] hsr_slave_0: left promiscuous mode [ 115.649606][ T741] hsr_slave_1: left promiscuous mode [ 115.656255][ T741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.665789][ T741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.690370][ T741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.708949][ T741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.736925][ T741] bridge_slave_1: left allmulticast mode [ 115.755684][ T741] bridge_slave_1: left promiscuous mode [ 115.773696][ T741] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.819174][ T741] bridge_slave_0: left allmulticast mode [ 115.826050][ T741] bridge_slave_0: left promiscuous mode [ 115.847931][ T741] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.938692][ T741] veth1_macvtap: left promiscuous mode [ 115.944850][ T741] veth0_macvtap: left promiscuous mode [ 115.955680][ T741] veth1_vlan: left promiscuous mode [ 115.967212][ T741] veth0_vlan: left promiscuous mode [ 116.043511][ T5768] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 116.050505][ T5782] Bluetooth: hci0: command tx timeout [ 116.050758][ T5778] Bluetooth: hci4: command 0x1003 tx timeout [ 116.456537][ T5768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.468635][ T5768] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.478667][ T5768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.492161][ T5768] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.508545][ T5768] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.516889][ T5768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.158663][ T5778] Bluetooth: hci1: command tx timeout [ 117.180097][ T741] team0 (unregistering): Port device team_slave_1 removed [ 117.226494][ T741] team0 (unregistering): Port device team_slave_0 removed [ 117.280714][ T741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.333502][ T741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.728778][ T741] bond0 (unregistering): Released all slaves [ 117.823598][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.831141][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.838546][ T6258] bridge_slave_0: entered allmulticast mode [ 117.845860][ T6258] bridge_slave_0: entered promiscuous mode [ 117.865669][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.886293][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.893948][ T6258] bridge_slave_1: entered allmulticast mode [ 117.902747][ T6258] bridge_slave_1: entered promiscuous mode [ 117.916985][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 117.938413][ T6340] netlink: 'syz.0.147': attribute type 15 has an invalid length. [ 117.946240][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 117.974529][ T6340] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.984382][ T6340] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.994014][ T6340] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.003472][ T6340] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.021581][ T6340] Zero length message leads to an empty skb [ 118.260620][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.320221][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.503174][ T6258] team0: Port device team_slave_0 added [ 118.561353][ T6258] team0: Port device team_slave_1 added [ 118.603065][ T5778] Bluetooth: hci2: command tx timeout [ 118.696141][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.704002][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.745284][ T6258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.767093][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.774135][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.809354][ T5810] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.810579][ T6258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.981460][ T6364] loop0: detected capacity change from 0 to 1024 [ 119.006462][ T6258] hsr_slave_0: entered promiscuous mode [ 119.013509][ T6364] EXT4-fs: Ignoring removed i_version option [ 119.027919][ T6364] EXT4-fs: Ignoring removed bh option [ 119.033353][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.033382][ T6364] ext4: Unknown parameter 'nouser_xattr' [ 119.065086][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.077580][ T6258] hsr_slave_1: entered promiscuous mode [ 119.085478][ T6258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.098508][ T6258] Cannot create hsr debugfs directory [ 119.121556][ T6333] chnl_net:caif_netlink_parms(): no params data found [ 119.138717][ T5810] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.175127][ T5810] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.203455][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.232411][ T5810] usb 2-1: config 0 descriptor?? [ 119.241125][ T5778] Bluetooth: hci1: command tx timeout [ 119.447937][ T741] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.630531][ T741] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.671111][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.679268][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.689673][ T6333] bridge_slave_0: entered allmulticast mode [ 119.703379][ T5810] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 119.712281][ T6333] bridge_slave_0: entered promiscuous mode [ 119.749786][ T5810] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 119.780899][ T741] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.805289][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.824600][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.842725][ T6333] bridge_slave_1: entered allmulticast mode [ 119.850860][ T6333] bridge_slave_1: entered promiscuous mode [ 119.902320][ T741] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.983024][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.021244][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.159897][ T6333] team0: Port device team_slave_0 added [ 120.185508][ T6333] team0: Port device team_slave_1 added [ 120.251366][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.258660][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.285088][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.338419][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.345490][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.374318][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.676840][ T5778] Bluetooth: hci2: command tx timeout [ 120.769451][ T6333] hsr_slave_0: entered promiscuous mode [ 120.790191][ T6333] hsr_slave_1: entered promiscuous mode [ 120.808313][ T6333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.816050][ T6333] Cannot create hsr debugfs directory [ 120.842672][ T6258] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.952778][ T788] usb 2-1: USB disconnect, device number 5 [ 121.013805][ T6395] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 121.086887][ T6258] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.205906][ T6258] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.304987][ T6258] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.316849][ T5778] Bluetooth: hci1: command tx timeout [ 121.698187][ T6410] loop0: detected capacity change from 0 to 2048 [ 121.815456][ T6411] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.985659][ T28] audit: type=1800 audit(1776712532.176:4): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.159" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 122.218813][ T6417] loop0: detected capacity change from 0 to 256 [ 122.342336][ T6417] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 122.756828][ T5778] Bluetooth: hci2: command tx timeout [ 122.953351][ T6333] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.978229][ T6333] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.008375][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.029842][ T741] hsr_slave_0: left promiscuous mode [ 123.073695][ T741] hsr_slave_1: left promiscuous mode [ 123.099013][ T741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.106535][ T741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.160797][ T741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.181004][ T741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.204633][ T741] bridge_slave_1: left allmulticast mode [ 123.213955][ T741] bridge_slave_1: left promiscuous mode [ 123.237363][ T741] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.313020][ T741] bridge_slave_0: left allmulticast mode [ 123.326709][ T741] bridge_slave_0: left promiscuous mode [ 123.332578][ T741] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.417019][ T741] veth1_macvtap: left promiscuous mode [ 123.426815][ T741] veth0_macvtap: left promiscuous mode [ 123.432583][ T741] veth1_vlan: left promiscuous mode [ 123.447888][ T741] veth0_vlan: left promiscuous mode [ 124.572250][ T6472] loop1: detected capacity change from 0 to 128 [ 124.600471][ T6472] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 124.613196][ T6472] hpfs: filesystem error: improperly stopped [ 124.624587][ T6472] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 124.633757][ T6472] hpfs: You really don't want any checks? You are crazy... [ 124.647784][ T6472] hpfs: Code page index out of array [ 124.653166][ T6472] hpfs: code page support is disabled [ 124.663970][ T6472] hpfs: hpfs_map_4sectors(): unaligned read [ 124.690390][ T6472] hpfs: hpfs_map_4sectors(): unaligned read [ 124.700154][ T6472] hpfs: filesystem error: unable to find root dir [ 124.742217][ T741] team0 (unregistering): Port device team_slave_1 removed [ 124.828950][ T741] team0 (unregistering): Port device team_slave_0 removed [ 124.837268][ T5778] Bluetooth: hci2: command tx timeout [ 124.912950][ T741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.994895][ T741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.549619][ T741] bond0 (unregistering): Released all slaves [ 125.659171][ T6333] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.671950][ T6446] batadv_slave_0: entered promiscuous mode [ 125.686469][ T6458] batadv_slave_0: left promiscuous mode [ 125.704417][ T6333] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.881427][ T6258] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.897867][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.905019][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.972208][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.984931][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.263223][ T6333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.444986][ T6333] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.503000][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.511112][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.583540][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.590872][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.863274][ T6333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.999068][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.615800][ T6333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.849986][ T6258] veth0_vlan: entered promiscuous mode [ 127.900332][ T6258] veth1_vlan: entered promiscuous mode [ 128.004636][ T6258] veth0_macvtap: entered promiscuous mode [ 128.022829][ T6258] veth1_macvtap: entered promiscuous mode [ 128.088463][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.127092][ T6540] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 128.129018][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.186612][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.216635][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.246064][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.280171][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.326113][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.348974][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.385275][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.408919][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.444931][ T6258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.470702][ T6258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.525167][ T6258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.556934][ T6258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.644907][ T23] kernel write not supported for file /vcs (pid: 23 comm: kworker/1:0) [ 128.830987][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.881852][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.918063][ T6560] loop0: detected capacity change from 0 to 512 [ 128.963961][ T6560] EXT4-fs: Ignoring removed orlov option [ 129.019775][ T6560] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 129.052199][ T741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.069646][ T6333] veth0_vlan: entered promiscuous mode [ 129.091926][ T741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.108264][ T6560] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.190: corrupted in-inode xattr: e_value size too large [ 129.133871][ T6560] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.190: couldn't read orphan inode 15 (err -117) [ 129.180616][ T6560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.245669][ T6333] veth1_vlan: entered promiscuous mode [ 129.393637][ T6560] EXT4-fs error (device loop0): ext4_check_dx_root:2266: inode #2: comm syz.0.190: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 129.410743][ T6333] veth0_macvtap: entered promiscuous mode [ 129.459277][ T6544] loop1: detected capacity change from 0 to 32768 [ 129.473071][ T6544] XFS: attr2 mount option is deprecated. [ 129.474667][ T6333] veth1_macvtap: entered promiscuous mode [ 129.577406][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.599377][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.610813][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.621484][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.632606][ T6544] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.642714][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.670649][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.682718][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.696283][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.707108][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.717799][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.728942][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.738932][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.750612][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.764135][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.780797][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.807907][ T6544] XFS (loop1): Ending clean mount [ 129.856472][ T6544] XFS (loop1): Quotacheck needed: Please wait. [ 129.887821][ T6333] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.917706][ T6333] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.938986][ T6333] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.976693][ T6333] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.011059][ T6544] XFS (loop1): Quotacheck: Done. [ 130.016339][ T6567] loop4: detected capacity change from 0 to 8192 [ 130.361048][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.395637][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.509772][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.528264][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.693418][ T5771] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 131.425640][ T6606] loop1: detected capacity change from 0 to 128 [ 131.434593][ T6606] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 131.452291][ T6606] hpfs: filesystem error: improperly stopped [ 131.460079][ T6606] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 131.475016][ T6606] hpfs: You really don't want any checks? You are crazy... [ 131.483173][ T6606] hpfs: Code page index out of array [ 131.489302][ T6606] hpfs: code page support is disabled [ 131.496794][ T6606] hpfs: hpfs_map_4sectors(): unaligned read [ 131.514108][ T6606] hpfs: hpfs_map_4sectors(): unaligned read [ 131.529436][ T6606] hpfs: filesystem error: unable to find root dir [ 131.557741][ T6606] hpfs: hpfs_map_4sectors(): unaligned read [ 132.142957][ T6630] loop1: detected capacity change from 0 to 128 [ 132.307158][ T6630] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/65/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 132.517519][ T6633] loop5: detected capacity change from 0 to 4096 [ 132.855201][ T6642] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.944477][ T28] audit: type=1326 audit(1776712543.136:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.1.204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f623a39c819 code=0x0 [ 133.036755][ T5828] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.226764][ T5828] usb 1-1: Using ep0 maxpacket: 16 [ 133.249468][ T5828] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 133.276626][ T5828] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 133.315634][ T5828] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.329204][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.336876][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.365849][ T6633] syz.5.202 (6633) used greatest stack depth: 19472 bytes left [ 133.391112][ T5828] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 133.411543][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.430416][ T5828] usb 1-1: Product: syz [ 133.439806][ T5828] usb 1-1: Manufacturer: syz [ 133.454967][ T5828] usb 1-1: SerialNumber: syz [ 133.471037][ T5828] usb 1-1: config 0 descriptor?? [ 133.561893][ T6636] loop4: detected capacity change from 0 to 32768 [ 133.580169][ T6636] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.203 (6636) [ 133.603792][ T6636] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.645579][ T6636] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 133.671256][ T6636] BTRFS info (device loop4): force clearing of disk cache [ 133.681052][ T6636] BTRFS info (device loop4): metadata ratio 0 [ 133.687398][ T6636] BTRFS info (device loop4): enabling ssd optimizations [ 133.744559][ T5828] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 133.755535][ T6636] BTRFS info (device loop4): using spread ssd allocation scheme [ 133.797281][ T6636] BTRFS info (device loop4): using free space tree [ 133.947762][ T5828] usb 1-1: USB disconnect, device number 4 [ 134.076708][ T6636] BTRFS info (device loop4): auto enabling async discard [ 134.117569][ T6636] BTRFS info (device loop4): rebuilding free space tree [ 134.610110][ T6258] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.148927][ T6771] "syz.1.232" (6771) uses obsolete ecb(arc4) skcipher [ 137.177755][ T6771] trusted_key: syz.1.232 sent an empty control message without MSG_MORE. [ 137.489039][ T6783] netlink: 64 bytes leftover after parsing attributes in process `syz.1.236'. [ 137.959062][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.110069][ T5828] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 138.176801][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 138.194761][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 138.215111][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 138.238318][ T9] usb 2-1: string descriptor 0 read error: -22 [ 138.248272][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 138.268975][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.309448][ T5828] usb 6-1: config 1 interface 0 has no altsetting 0 [ 138.354249][ T5828] usb 6-1: string descriptor 0 read error: -22 [ 138.365555][ T5828] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40 [ 138.385456][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.722028][ T9] apple 0003:05AC:025B.0005: invalid report_size -1149171161 [ 138.741779][ T9] apple 0003:05AC:025B.0005: item 0 4 1 7 parsing failed [ 138.752728][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 138.771458][ T9] apple 0003:05AC:025B.0005: parse failed [ 138.786841][ T9] apple: probe of 0003:05AC:025B.0005 failed with error -22 [ 138.947217][ T9] usb 2-1: USB disconnect, device number 6 [ 139.051922][ T5828] greenasia 0003:0E8F:0012.0006: global environment stack underflow [ 139.067607][ T5828] greenasia 0003:0E8F:0012.0006: item 0 4 1 11 parsing failed [ 139.082974][ T5828] greenasia 0003:0E8F:0012.0006: parse failed [ 139.089724][ T5828] greenasia: probe of 0003:0E8F:0012.0006 failed with error -22 [ 139.101029][ T6810] loop4: detected capacity change from 0 to 32768 [ 139.214587][ T6810] JBD2: Ignoring recovery information on journal [ 139.272527][ T9] usb 6-1: USB disconnect, device number 2 [ 139.372845][ T6810] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 139.595762][ T6810] syz.4.241 (6810) used greatest stack depth: 18768 bytes left [ 139.753578][ T6258] ocfs2: Unmounting device (7,4) on (node local) [ 139.983604][ T6839] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 140.377770][ T5811] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.596806][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 140.653975][ T5811] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 140.667582][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.675668][ T5811] usb 2-1: Product: syz [ 140.716738][ T5811] usb 2-1: Manufacturer: syz [ 140.721425][ T5811] usb 2-1: SerialNumber: syz [ 140.740143][ T5811] usb 2-1: config 0 descriptor?? [ 140.770605][ T5811] gspca_main: spca508-2.14.0 probing 041e:4018 [ 140.972992][ T5811] gspca_spca508: reg_read err -32 [ 140.987041][ T5811] gspca_spca508: reg_read err -32 [ 140.992753][ T6867] loop0: detected capacity change from 0 to 4096 [ 141.007154][ T5811] gspca_spca508: reg_read err -32 [ 141.023640][ T5811] gspca_spca508: reg_read err -32 [ 141.067494][ T6874] loop4: detected capacity change from 0 to 764 [ 141.236083][ T5811] gspca_spca508: reg write: error -71 [ 141.262290][ T5811] spca508: probe of 2-1:0.0 failed with error -71 [ 141.297476][ T5811] usb 2-1: USB disconnect, device number 7 [ 141.394510][ T28] audit: type=1800 audit(1776712551.586:6): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.254" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 141.966818][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.081616][ T6874] Symlink component flag not implemented [ 142.104678][ T6874] Symlink component flag not implemented [ 142.117544][ T6874] Symlink component flag not implemented (128) [ 142.137717][ T6900] ISOFS: unable to read i-node block [ 142.144155][ T6874] Symlink component flag not implemented (105) [ 142.166645][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 142.191007][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 142.234128][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.275382][ T9] usb 1-1: Product: syz [ 142.282645][ T9] usb 1-1: Manufacturer: syz [ 142.299476][ T9] usb 1-1: SerialNumber: syz [ 142.317914][ T9] usb 1-1: config 0 descriptor?? [ 142.476458][ T6905] IPVS: persistence engine module ip_vs_pe_ not found [ 142.557258][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 143.370465][ T9] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 143.393534][ T9] usb 1-1: USB disconnect, device number 5 [ 143.707025][ T968] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.990100][ T968] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.032825][ T968] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.073383][ T968] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 144.116222][ T968] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.142651][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.171451][ T968] usb 2-1: Product: syz [ 144.175723][ T968] usb 2-1: Manufacturer: syz [ 144.202899][ T968] usb 2-1: SerialNumber: syz [ 144.473673][ T6937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 145.157725][ T6937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 145.380147][ T968] cdc_ncm 2-1:1.0: bind() failure [ 145.420905][ T968] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 145.448865][ T968] cdc_ncm 2-1:1.1: bind() failure [ 145.651481][ T5833] usb 2-1: USB disconnect, device number 8 [ 146.134682][ T6978] loop5: detected capacity change from 0 to 32768 [ 146.296787][ T6978] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 146.502015][ T6978] XFS (loop5): Ending clean mount [ 146.543507][ T6978] XFS (loop5): Quotacheck needed: Please wait. [ 146.680273][ T6978] XFS (loop5): Quotacheck: Done. [ 146.943675][ T6333] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 147.167794][ T7018] loop2: detected capacity change from 0 to 7 [ 147.191885][ T5772] Dev loop2: unable to read RDB block 7 [ 147.217221][ T5772] loop2: AHDI p2 p3 [ 147.226727][ T5772] loop2: partition table partially beyond EOD, truncated [ 147.286060][ T7018] Dev loop2: unable to read RDB block 7 [ 147.333442][ T7018] loop2: AHDI p2 p3 [ 147.360982][ T7018] loop2: partition table partially beyond EOD, truncated [ 147.442589][ T7022] Dev loop2: unable to read RDB block 7 [ 147.482536][ T7022] loop2: AHDI p2 p3 [ 147.496292][ T7022] loop2: partition table partially beyond EOD, truncated [ 147.529934][ T5138] Dev loop2: unable to read RDB block 7 [ 147.546676][ T5138] loop2: AHDI p2 p3 [ 147.558876][ T5138] loop2: partition table partially beyond EOD, truncated [ 147.600730][ T7028] loop5: detected capacity change from 0 to 512 [ 147.630894][ T7028] EXT4-fs: Ignoring removed oldalloc option [ 147.743726][ T7028] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.285: bad orphan inode 32 [ 147.864549][ T7028] ext4_test_bit(bit=31, block=4) = 0 [ 147.897427][ T7028] EXT4-fs (loop5): 1 truncate cleaned up [ 147.905522][ T7028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.948655][ T7026] loop0: detected capacity change from 0 to 4096 [ 148.031740][ T28] audit: type=1800 audit(1776712558.226:7): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.285" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 148.317255][ T6333] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.356386][ T5828] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.639778][ T5828] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 148.681247][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.693751][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.704522][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 148.719509][ T5828] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 148.757329][ T5828] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 148.786835][ T5828] usb 2-1: Manufacturer: syz [ 148.813271][ T5828] usb 2-1: config 0 descriptor?? [ 149.103868][ T7058] loop5: detected capacity change from 0 to 16 [ 149.185474][ T7058] erofs: (device loop5): mounted with root inode @ nid 36. [ 149.331218][ T5828] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 149.357693][ T5828] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 149.400064][ T5828] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 149.760027][ T7072] loop5: detected capacity change from 0 to 512 [ 149.828680][ T7072] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 149.871124][ T7074] loop0: detected capacity change from 0 to 128 [ 149.871924][ T5811] usb 2-1: USB disconnect, device number 9 [ 149.900783][ T7072] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.947838][ T7074] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 149.976753][ T7072] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 150.009023][ T7072] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 150.018744][ T7072] System zones: 0-2, 18-18, 34-35 [ 150.025667][ T7072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.061681][ T28] audit: type=1800 audit(1776712560.256:8): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.298" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 150.136379][ T7074] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 150.144961][ T7074] FAT-fs (loop0): Filesystem has been set read-only [ 150.152571][ T7074] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 150.190671][ T6333] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.218317][ T28] audit: type=1804 audit(1776712560.256:9): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.298" name="/newroot/27/file2/file1" dev="loop5" ino=15 res=1 errno=0 [ 150.593008][ T7084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.302'. [ 151.603405][ T7080] loop5: detected capacity change from 0 to 32768 [ 151.691997][ T7080] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.856832][ T7080] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 151.957934][ T7080] XFS (loop5): Starting recovery (logdev: internal) [ 152.024303][ T7080] XFS (loop5): Ending recovery (logdev: internal) [ 152.357070][ T6333] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 152.984680][ T7149] binder: 7148:7149 ioctl c0306201 200000000080 returned -14 [ 153.395068][ T7158] loop0: detected capacity change from 0 to 256 [ 153.412703][ T7158] FAT-fs (loop0): Directory bread(block 1285) failed [ 153.421244][ T7158] FAT-fs (loop0): Directory bread(block 1286) failed [ 153.429208][ T7158] FAT-fs (loop0): Directory bread(block 1287) failed [ 153.436446][ T7158] FAT-fs (loop0): Directory bread(block 1288) failed [ 153.438028][ T788] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 153.466258][ T7158] FAT-fs (loop0): Directory bread(block 1285) failed [ 153.483826][ T7158] FAT-fs (loop0): Directory bread(block 1286) failed [ 153.492491][ T7158] FAT-fs (loop0): Directory bread(block 1287) failed [ 153.503445][ T7158] FAT-fs (loop0): Directory bread(block 1288) failed [ 153.528293][ T7158] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 153.554289][ T7158] FAT-fs (loop0): Directory bread(block 1285) failed [ 153.596328][ T7140] loop4: detected capacity change from 0 to 32768 [ 153.659723][ T7140] (syz.4.313,7140,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.689653][ T788] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 153.710799][ T788] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 153.721117][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.729453][ T7140] (syz.4.313,7140,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.804663][ T788] usb 2-1: Product: syz [ 153.828173][ T7140] JBD2: Ignoring recovery information on journal [ 153.829285][ T788] usb 2-1: Manufacturer: syz [ 153.891456][ T788] usb 2-1: SerialNumber: syz [ 153.965723][ T788] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 153.978475][ T7140] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 154.245267][ T7181] pimreg: entered allmulticast mode [ 154.281428][ T7181] pimreg: left allmulticast mode [ 154.338220][ T7140] (syz.4.313,7140,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 154.702427][ T6258] ocfs2: Unmounting device (7,4) on (node local) [ 155.007638][ T788] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 155.193799][ T5828] usb 2-1: USB disconnect, device number 10 [ 155.740636][ T7195] loop5: detected capacity change from 0 to 32768 [ 155.842941][ T7195] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.015775][ T7195] XFS (loop5): Ending clean mount [ 156.097052][ T7235] input: syz0 as /devices/virtual/input/input10 [ 156.227688][ T7238] netlink: 27 bytes leftover after parsing attributes in process `syz.4.340'. [ 156.252094][ T7240] trusted_key: encrypted_key: insufficient parameters specified [ 156.358417][ T6333] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.891185][ T5778] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 156.905233][ T5778] CPU: 1 PID: 5778 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 156.912963][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.923091][ T5778] Workqueue: hci1 hci_rx_work [ 156.927888][ T5778] Call Trace: [ 156.931237][ T5778] [ 156.934305][ T5778] dump_stack_lvl+0x18c/0x250 [ 156.939145][ T5778] ? show_regs_print_info+0x20/0x20 [ 156.944405][ T5778] ? load_image+0x420/0x420 [ 156.949188][ T5778] sysfs_create_dir_ns+0x26e/0x2a0 [ 156.954372][ T5778] ? sysfs_warn_dup+0xa0/0xa0 [ 156.959132][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 156.964481][ T5778] kobject_add_internal+0x61c/0xcc0 [ 156.969743][ T5778] kobject_add+0x164/0x240 [ 156.974196][ T5778] ? __rwlock_init+0x150/0x150 [ 156.979000][ T5778] ? kobject_init+0x1e0/0x1e0 [ 156.983730][ T5778] ? _raw_spin_unlock+0x28/0x40 [ 156.988640][ T5778] ? get_device_parent+0x366/0x390 [ 156.993793][ T5778] device_add+0x408/0xc20 [ 156.998171][ T5778] hci_conn_add_sysfs+0xd5/0x1e0 [ 157.003144][ T5778] le_conn_complete_evt+0xf5d/0x1540 [ 157.008758][ T5778] ? hci_event_packet+0x4cb/0x1270 [ 157.013928][ T5778] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 157.020213][ T5778] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 157.025892][ T5778] ? skb_pull_data+0xfb/0x200 [ 157.030631][ T5778] hci_le_conn_complete_evt+0x187/0x440 [ 157.036234][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 157.042467][ T5778] hci_event_packet+0x7ba/0x1270 [ 157.047450][ T5778] ? bis_list+0x290/0x290 [ 157.051816][ T5778] ? lockdep_hardirqs_on+0x98/0x150 [ 157.057085][ T5778] ? hci_send_to_monitor+0xd7/0x4f0 [ 157.062316][ T5778] hci_rx_work+0x43a/0xd60 [ 157.066789][ T5778] ? process_scheduled_works+0x96f/0x15d0 [ 157.072726][ T5778] process_scheduled_works+0xa5d/0x15d0 [ 157.078335][ T5778] ? worker_attach_to_pool+0x380/0x380 [ 157.083832][ T5778] ? assign_work+0x3d2/0x5d0 [ 157.088464][ T5778] worker_thread+0xa55/0xfc0 [ 157.093127][ T5778] kthread+0x2fa/0x390 [ 157.097269][ T5778] ? pr_cont_work+0x560/0x560 [ 157.102018][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 157.106757][ T5778] ret_from_fork+0x48/0x80 [ 157.111259][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 157.115914][ T5778] ret_from_fork_asm+0x11/0x20 [ 157.120774][ T5778] [ 157.134018][ T5778] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 157.148585][ T5778] Bluetooth: hci1: failed to register connection device [ 157.402120][ T7274] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 157.893665][ T7285] loop1: detected capacity change from 0 to 256 [ 157.974238][ T7285] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 158.419119][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.5.363'. [ 158.561857][ T7312] loop5: detected capacity change from 0 to 256 [ 158.580164][ T7312] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.615098][ T7312] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 158.652488][ T7312] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 159.634214][ T7342] netlink: 'syz.4.372': attribute type 2 has an invalid length. [ 159.651148][ T7342] netlink: 40 bytes leftover after parsing attributes in process `syz.4.372'. [ 159.902111][ T7351] loop4: detected capacity change from 0 to 512 [ 160.017455][ T7356] "syz.1.377" (7356) uses obsolete ecb(arc4) skcipher [ 160.768051][ T7379] netlink: 'syz.0.383': attribute type 11 has an invalid length. [ 160.811464][ T7379] netlink: 56 bytes leftover after parsing attributes in process `syz.0.383'. [ 160.879094][ T7382] netlink: 'syz.0.383': attribute type 11 has an invalid length. [ 160.932999][ T7382] netlink: 56 bytes leftover after parsing attributes in process `syz.0.383'. [ 160.958796][ T7382] netlink: 'syz.0.383': attribute type 11 has an invalid length. [ 160.970200][ T7382] netlink: 56 bytes leftover after parsing attributes in process `syz.0.383'. [ 161.161274][ T7359] loop5: detected capacity change from 0 to 32768 [ 161.167284][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 161.281829][ T7359] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 161.316148][ T7391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.366518][ T7391] team0: Port device bond0 added [ 161.392114][ T23] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 161.410996][ T7396] bridge0: port 3(team0) entered blocking state [ 161.426997][ T7396] bridge0: port 3(team0) entered disabled state [ 161.447268][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.465657][ T7396] team0: entered allmulticast mode [ 161.480709][ T7396] team_slave_0: entered allmulticast mode [ 161.487971][ T23] usb 5-1: config 0 descriptor?? [ 161.515339][ T7396] team_slave_1: entered allmulticast mode [ 161.544076][ T7396] bond0: entered allmulticast mode [ 161.564493][ T7396] bond_slave_0: entered allmulticast mode [ 161.585541][ T7359] VFS: Lookup of '' in ocfs2 loop5 would have caused loop [ 161.593545][ T7396] bond_slave_1: entered allmulticast mode [ 161.615736][ T7396] team0: entered promiscuous mode [ 161.627920][ T7396] team_slave_0: entered promiscuous mode [ 161.647163][ T7396] team_slave_1: entered promiscuous mode [ 161.656501][ T7396] bond0: entered promiscuous mode [ 161.665462][ T7396] bond_slave_0: entered promiscuous mode [ 161.671845][ T7396] bond_slave_1: entered promiscuous mode [ 161.682851][ T7396] bridge0: port 3(team0) entered blocking state [ 161.689776][ T7396] bridge0: port 3(team0) entered forwarding state [ 161.794537][ T6333] ocfs2: Unmounting device (7,5) on (node local) [ 161.829210][ T6333] VFS: Busy inodes after unmount of loop5 (ocfs2) [ 161.829525][ T6333] ------------[ cut here ]------------ [ 161.842078][ T6333] kernel BUG at fs/super.c:697! [ 161.903891][ T6333] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 161.910052][ T6333] CPU: 1 PID: 6333 Comm: syz-executor Not tainted syzkaller #0 [ 161.917655][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 161.927776][ T6333] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0 [ 161.933996][ T6333] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ac 59 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 20 ad d7 8a 48 89 de e8 a3 bc 8b 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 [ 161.953660][ T6333] RSP: 0018:ffffc900037d7d20 EFLAGS: 00010246 [ 161.959790][ T6333] RAX: 000000000000002f RBX: ffff88807a992660 RCX: a821bece33728900 [ 161.967825][ T6333] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 161.975946][ T6333] RBP: 1ffff1100f5324f2 R08: ffffc900037d7a27 R09: 1ffff920006faf44 [ 161.983968][ T6333] R10: dffffc0000000000 R11: fffff520006faf45 R12: 0000000000000000 [ 161.991991][ T6333] R13: dffffc0000000000 R14: ffffffff8d635040 R15: ffff88807a992790 [ 162.000020][ T6333] FS: 000055556c8f9500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 162.009044][ T6333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.015682][ T6333] CR2: 00007fda0740b000 CR3: 000000005d149000 CR4: 00000000003506e0 [ 162.023715][ T6333] Call Trace: [ 162.027045][ T6333] [ 162.030021][ T6333] kill_block_super+0x44/0x90 [ 162.034756][ T6333] deactivate_locked_super+0x97/0x100 [ 162.040187][ T6333] cleanup_mnt+0x43b/0x4d0 [ 162.044661][ T6333] task_work_run+0x1d4/0x260 [ 162.049322][ T6333] ? task_work_cancel+0x220/0x220 [ 162.054488][ T6333] ? exit_to_user_mode_loop+0x3b/0x110 [ 162.059986][ T6333] exit_to_user_mode_loop+0xe6/0x110 [ 162.065316][ T6333] exit_to_user_mode_prepare+0xee/0x180 [ 162.070892][ T6333] syscall_exit_to_user_mode+0x1a/0x50 [ 162.076380][ T6333] do_syscall_64+0x61/0xa0 [ 162.081001][ T6333] ? clear_bhb_loop+0x40/0x90 [ 162.085708][ T6333] ? clear_bhb_loop+0x40/0x90 [ 162.090423][ T6333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.096372][ T6333] RIP: 0033:0x7f66aa39da57 [ 162.100908][ T6333] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 162.120634][ T6333] RSP: 002b:00007ffd21f53e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 162.129089][ T6333] RAX: 0000000000000000 RBX: 00007f66aa432048 RCX: 00007f66aa39da57 [ 162.137090][ T6333] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd21f53f20 [ 162.145087][ T6333] RBP: 00007ffd21f53f20 R08: 00007ffd21f54f20 R09: 00000000ffffffff [ 162.153081][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd21f54fb0 [ 162.161084][ T6333] R13: 00007f66aa432048 R14: 0000000000027711 R15: 00007ffd21f54ff0 [ 162.169089][ T6333] [ 162.172138][ T6333] Modules linked in: [ 162.187225][ T6333] ---[ end trace 0000000000000000 ]--- [ 162.193969][ T6333] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0 [ 162.220971][ T6333] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ac 59 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 20 ad d7 8a 48 89 de e8 a3 bc 8b 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 [ 162.246598][ T6333] RSP: 0018:ffffc900037d7d20 EFLAGS: 00010246 [ 162.255251][ T1132] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 162.277944][ T6333] RAX: 000000000000002f RBX: ffff88807a992660 RCX: a821bece33728900 [ 162.286069][ T6333] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 162.318729][ T6333] RBP: 1ffff1100f5324f2 R08: ffffc900037d7a27 R09: 1ffff920006faf44 [ 162.327063][ T6333] R10: dffffc0000000000 R11: fffff520006faf45 R12: 0000000000000000 [ 162.335094][ T6333] R13: dffffc0000000000 R14: ffffffff8d635040 R15: ffff88807a992790 [ 162.353384][ T6333] FS: 000055556c8f9500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 162.364049][ T6333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.377494][ T6333] CR2: 000000110c250fef CR3: 000000005d149000 CR4: 00000000003506f0 [ 162.390937][ T6333] Kernel panic - not syncing: Fatal exception [ 162.397653][ T6333] Kernel Offset: disabled [ 162.402005][ T6333] Rebooting in 86400 seconds..