last executing test programs: 3.532768324s ago: executing program 3 (id=318): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x1d0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xe, 0x10, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff]}}, 0x8, 0x6, 0x8, 0x6, 0x8, 0x2, 'wg0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x0, 0xc1}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x200, 0xdc}}}, {{@arp={@private=0xa010100, @broadcast, 0x0, 0xffffffff, 0xb, 0xa, {@mac=@local, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x8, 0x8001, 0x41, 0x2, 0x3, 'bridge_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8c9, 0x10}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 3.524238875s ago: executing program 0 (id=319): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)="5c7d88a9a89cc38e52b848c7a89dd184c9e1833a9a0d2e5fa15997fb899c63d27a895a5657aa", 0xffc3}, {0x0}], 0x2) 3.268842138s ago: executing program 3 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000) 3.077550603s ago: executing program 3 (id=324): syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000100)={0x1, 0x100000000, 0x9, 0x0, 0x4000040c, 0x4fe4, 0x2401}) 2.55465977s ago: executing program 3 (id=328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000104, 0x0, 0xd8100011e57ecd}]}) 2.083922811s ago: executing program 3 (id=332): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x7351, 0x108001) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x100}) 1.602307473s ago: executing program 1 (id=334): r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x571}]}) 1.564293158s ago: executing program 0 (id=335): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/50, 0x32) getdents(r0, 0xfffffffffffffffd, 0xbb) 1.465069621s ago: executing program 2 (id=336): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) 1.264612587s ago: executing program 0 (id=337): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000100)=[0x9], &(0x7f0000000140), 0x0, 0x0}) 1.169585909s ago: executing program 2 (id=338): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x4000891) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x2, 0x4) 932.31592ms ago: executing program 1 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x90, r2, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x74, 0x2, 0x0, 0x1, [{0x68, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x20004080) 920.078121ms ago: executing program 0 (id=340): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 825.500973ms ago: executing program 2 (id=341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x1d0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xe, 0x10, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff]}}, 0x8, 0x6, 0x8, 0x6, 0x8, 0x2, 'wg0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x0, 0xc1}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x200, 0xdc}}}, {{@arp={@private=0xa010100, @broadcast, 0x0, 0xffffffff, 0xb, 0xa, {@mac=@local, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x8, 0x8001, 0x41, 0x2, 0x3, 'bridge_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8c9, 0x10}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 700.705219ms ago: executing program 0 (id=342): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f0000000f40)="$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") link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) pwrite64(r0, &(0x7f000009dd80)='\"', 0x1, 0x9000) 656.710095ms ago: executing program 2 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xe}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 569.518146ms ago: executing program 1 (id=344): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x204, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="01", 0x1}], 0x1, 0x2) 472.866779ms ago: executing program 2 (id=345): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 369.020072ms ago: executing program 3 (id=346): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000240)="0ffa", 0x2}], 0x2}}], 0x1, 0x4000000) 289.558922ms ago: executing program 1 (id=347): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x40000008) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x21) 289.290482ms ago: executing program 0 (id=348): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000100)=[0x9], &(0x7f0000000140), 0x0, 0x0}) 269.326315ms ago: executing program 2 (id=349): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 161.889029ms ago: executing program 1 (id=350): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="a22032a3bd27afff69f23cbe59b98ee868249ec4db3aa7cd40100275ab", 0x1d}, {&(0x7f0000000040)="cb6e441187f30abfca004c2ae49340ea6e56ff", 0x13}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x40000) 0s ago: executing program 1 (id=351): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x1, 0x3, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0xff, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x0, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0x8c, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x9, 0x9, 0x401, 0xb, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x78, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0x2, 0x2, 0x2, 0x80000001, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x7, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x4, 0x6, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0x9, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x10, 0x1, 0x720a, 0xffff, 0xfff, 0x9, 0x7fff, 0x8, 0x1ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff801, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0xc, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x9, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83b, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x7f, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x81, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x0, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x46, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0xfffffffc, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x7, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x5, 0x8, 0x3c0, 0x9, 0x8, 0x6d5, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0x2, 0xf2, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe00000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x9, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x8, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9, 0x5, 0x1, 0x7, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 61.029723][ T5752] cgroup: Unknown subsys name 'net' [ 61.169121][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.518080][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.417021][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.426240][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.451453][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.459352][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.468556][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.469273][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.478223][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.484934][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.491148][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.500927][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.508576][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.514655][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.519986][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.535754][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.535851][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.545439][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.551594][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.558512][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.565805][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.579920][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.587960][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.604209][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.622683][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.632023][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.980079][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 65.066644][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 65.109672][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.117545][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.126938][ T5766] bridge_slave_0: entered allmulticast mode [ 65.133977][ T5766] bridge_slave_0: entered promiscuous mode [ 65.151044][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.158561][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.165952][ T5766] bridge_slave_1: entered allmulticast mode [ 65.173291][ T5766] bridge_slave_1: entered promiscuous mode [ 65.206981][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 65.242522][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.255789][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 65.279119][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.367190][ T5766] team0: Port device team_slave_0 added [ 65.374155][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.381941][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.389329][ T5765] bridge_slave_0: entered allmulticast mode [ 65.398708][ T5765] bridge_slave_0: entered promiscuous mode [ 65.426953][ T5766] team0: Port device team_slave_1 added [ 65.435259][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.442925][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.450388][ T5765] bridge_slave_1: entered allmulticast mode [ 65.457462][ T5765] bridge_slave_1: entered promiscuous mode [ 65.510667][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.527866][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.535895][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.543525][ T5767] bridge_slave_0: entered allmulticast mode [ 65.550236][ T5767] bridge_slave_0: entered promiscuous mode [ 65.566926][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.586388][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.594287][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.602342][ T5767] bridge_slave_1: entered allmulticast mode [ 65.609089][ T5767] bridge_slave_1: entered promiscuous mode [ 65.616908][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.626486][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.655797][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.677092][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.684423][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.691877][ T5768] bridge_slave_0: entered allmulticast mode [ 65.698615][ T5768] bridge_slave_0: entered promiscuous mode [ 65.708476][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.715916][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.723602][ T5768] bridge_slave_1: entered allmulticast mode [ 65.730364][ T5768] bridge_slave_1: entered promiscuous mode [ 65.747786][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.754866][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.781400][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.834430][ T5765] team0: Port device team_slave_0 added [ 65.845485][ T5765] team0: Port device team_slave_1 added [ 65.872055][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.887011][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.906599][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.925033][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.945246][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.952572][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.979112][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.037203][ T5768] team0: Port device team_slave_0 added [ 66.044203][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.051184][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.078936][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.106229][ T5766] hsr_slave_0: entered promiscuous mode [ 66.113216][ T5766] hsr_slave_1: entered promiscuous mode [ 66.125711][ T5767] team0: Port device team_slave_0 added [ 66.134765][ T5768] team0: Port device team_slave_1 added [ 66.143127][ T5767] team0: Port device team_slave_1 added [ 66.165435][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.172515][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.198992][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.236854][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.244219][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.270884][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.304244][ T5765] hsr_slave_0: entered promiscuous mode [ 66.311033][ T5765] hsr_slave_1: entered promiscuous mode [ 66.318007][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.326485][ T5765] Cannot create hsr debugfs directory [ 66.332791][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.339748][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.366672][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.384741][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.391808][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.417927][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.500608][ T5767] hsr_slave_0: entered promiscuous mode [ 66.507917][ T5767] hsr_slave_1: entered promiscuous mode [ 66.514858][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.523452][ T5767] Cannot create hsr debugfs directory [ 66.652900][ T5780] Bluetooth: hci1: command tx timeout [ 66.661497][ T5780] Bluetooth: hci0: command tx timeout [ 66.667291][ T5780] Bluetooth: hci2: command tx timeout [ 66.674263][ T5768] hsr_slave_0: entered promiscuous mode [ 66.680680][ T5768] hsr_slave_1: entered promiscuous mode [ 66.686986][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.694852][ T5768] Cannot create hsr debugfs directory [ 66.732039][ T5780] Bluetooth: hci3: command tx timeout [ 66.938680][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.965967][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.976699][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.001961][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.047349][ T5765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.066918][ T5765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.077519][ T5765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.094482][ T5765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.203634][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.218020][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.228579][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.239575][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.314464][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.326214][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.336161][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.346310][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.387332][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.422659][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.473718][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.485877][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.493440][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.504408][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.511601][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.596031][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.633900][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.641385][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.650578][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.658182][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.778372][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.804314][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.844837][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.870130][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.890281][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.897487][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.957044][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.964461][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.976333][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.983514][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.994878][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.002155][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.043747][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.197607][ T5766] veth0_vlan: entered promiscuous mode [ 68.258202][ T5766] veth1_vlan: entered promiscuous mode [ 68.284582][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.349957][ T5766] veth0_macvtap: entered promiscuous mode [ 68.420547][ T5766] veth1_macvtap: entered promiscuous mode [ 68.463882][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.480009][ T5765] veth0_vlan: entered promiscuous mode [ 68.526954][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.554180][ T5765] veth1_vlan: entered promiscuous mode [ 68.570252][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.603533][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.612742][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.621906][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.630743][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.647191][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.687112][ T5768] veth0_vlan: entered promiscuous mode [ 68.700654][ T5765] veth0_macvtap: entered promiscuous mode [ 68.720195][ T5765] veth1_macvtap: entered promiscuous mode [ 68.731902][ T5771] Bluetooth: hci0: command tx timeout [ 68.737435][ T5771] Bluetooth: hci1: command tx timeout [ 68.741398][ T5780] Bluetooth: hci2: command tx timeout [ 68.764250][ T5768] veth1_vlan: entered promiscuous mode [ 68.813174][ T5780] Bluetooth: hci3: command tx timeout [ 68.835251][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.846869][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.859076][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.887206][ T2183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.897450][ T2183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.899173][ T5767] veth0_vlan: entered promiscuous mode [ 68.918372][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.930376][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.942671][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.958696][ T5765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.967688][ T5765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.976663][ T5765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.985860][ T5765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.007871][ T5767] veth1_vlan: entered promiscuous mode [ 69.047240][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.057216][ T5768] veth0_macvtap: entered promiscuous mode [ 69.065999][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.106844][ T5768] veth1_macvtap: entered promiscuous mode [ 69.140590][ T5767] veth0_macvtap: entered promiscuous mode [ 69.178205][ T5767] veth1_macvtap: entered promiscuous mode [ 69.230720][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.251555][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.267533][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.278456][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.287426][ T5850] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.292561][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.331953][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.339924][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.343212][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.364844][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.375525][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.411378][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.425243][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.436525][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.445240][ T5852] __sock_release: fasync list not empty! [ 69.448618][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.464267][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.477050][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.488100][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.518791][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.530689][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.553751][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.569760][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.583449][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.594711][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.604612][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.616397][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.629259][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.655478][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.665726][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.676425][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.706143][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.720312][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.730612][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.739592][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.748503][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.811531][ T5859] syz.3.8[5859]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 69.840339][ T5859] loop3: detected capacity change from 0 to 2048 [ 69.879471][ T5859] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.890914][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.910956][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.029887][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.071519][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.139132][ T5861] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.199379][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.243755][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.284089][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.317263][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.407651][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.435776][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.641024][ T5871] loop3: detected capacity change from 0 to 16 [ 70.725082][ T5871] erofs: (device loop3): mounted with root inode @ nid 36. [ 70.815410][ T5777] Bluetooth: hci2: command tx timeout [ 70.821658][ T5771] Bluetooth: hci0: command tx timeout [ 70.821783][ T5780] Bluetooth: hci1: command tx timeout [ 70.892118][ T5777] Bluetooth: hci3: command tx timeout [ 71.036569][ T5878] loop0: detected capacity change from 0 to 512 [ 71.049106][ T5878] ======================================================= [ 71.049106][ T5878] WARNING: The mand mount option has been deprecated and [ 71.049106][ T5878] and is ignored by this kernel. Remove the mand [ 71.049106][ T5878] option from the mount to silence this warning. [ 71.049106][ T5878] ======================================================= [ 71.102568][ T5878] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.152457][ T5878] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.13: invalid indirect mapped block 4294967295 (level 1) [ 71.185770][ T5878] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.13: invalid indirect mapped block 4294967295 (level 1) [ 71.196240][ T5880] loop3: detected capacity change from 0 to 4096 [ 71.224125][ T5878] EXT4-fs (loop0): 2 truncates cleaned up [ 71.244370][ T5878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.389155][ T5870] loop2: detected capacity change from 0 to 40427 [ 71.441204][ T5870] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 71.470001][ T5878] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.13: bg 0: block 5: invalid block bitmap [ 71.471575][ T5870] F2FS-fs (loop2): Image doesn't support compression [ 71.499459][ T5870] F2FS-fs (loop2): Image doesn't support compression [ 71.554229][ T5870] F2FS-fs (loop2): invalid crc value [ 71.607445][ T5870] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.742688][ T5870] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.780108][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.792872][ T5886] sp0: Synchronizing with TNC [ 71.903653][ T5885] [U] è`` [ 72.019456][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.033612][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.085471][ T5765] syz-executor: attempt to access beyond end of device [ 72.085471][ T5765] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 72.122212][ T5765] F2FS-fs (loop2): Remounting filesystem read-only [ 72.277694][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 72.473930][ T5903] loop3: detected capacity change from 0 to 64 [ 72.563582][ T5903] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 72.891632][ T5777] Bluetooth: hci2: command tx timeout [ 72.893874][ T5780] Bluetooth: hci1: command tx timeout [ 72.897465][ T5777] Bluetooth: hci0: command tx timeout [ 72.971977][ T5777] Bluetooth: hci3: command tx timeout [ 73.327317][ T5902] loop0: detected capacity change from 0 to 40427 [ 73.360817][ T5902] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 73.390684][ T5902] F2FS-fs (loop0): Image doesn't support compression [ 73.419150][ T5902] F2FS-fs (loop0): Image doesn't support compression [ 73.447426][ T5902] F2FS-fs (loop0): invalid crc value [ 73.503375][ T5902] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.671159][ T5902] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 73.762840][ T5933] macsec1: entered allmulticast mode [ 73.768347][ T5933] macvlan1: entered allmulticast mode [ 73.781932][ T5933] veth1_vlan: entered allmulticast mode [ 73.811768][ T5931] loop1: detected capacity change from 0 to 8192 [ 73.812683][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 73.857166][ T5933] macvlan1: left allmulticast mode [ 73.871528][ T5933] veth1_vlan: left allmulticast mode [ 73.940968][ T5767] syz-executor: attempt to access beyond end of device [ 73.940968][ T5767] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.986817][ T5767] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 74.242041][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.461466][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 74.477441][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.501682][ T42] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 74.527112][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.550091][ T42] usb 2-1: config 0 descriptor?? [ 74.987908][ T42] hid (null): unknown global tag 0xe [ 75.004630][ T42] hid (null): unknown global tag 0xc [ 75.010149][ T42] hid (null): unknown global tag 0x1a [ 75.026792][ T42] hid (null): unknown global tag 0xd [ 75.046348][ T42] hid (null): global environment stack underflow [ 75.061592][ T42] hid (null): unknown global tag 0xd [ 75.067081][ T42] hid (null): invalid report_count 1666728304 [ 75.086533][ T42] hid (null): unknown global tag 0xa1 [ 75.101428][ T42] hid (null): unknown global tag 0xe [ 75.107025][ T42] hid (null): invalid report_size 33679 [ 75.121383][ T42] hid (null): unknown global tag 0xc [ 75.285916][ T42] usb 2-1: USB disconnect, device number 2 [ 75.645243][ T5968] loop0: detected capacity change from 0 to 512 [ 75.675167][ T5968] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.793712][ T5968] EXT4-fs (loop0): 1 orphan inode deleted [ 75.824615][ T5968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.848167][ T2183] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 75.901957][ T2183] EXT4-fs error (device loop0): ext4_release_dquot:6985: comm kworker/u4:6: Failed to release dquot type 1 [ 75.917882][ T5968] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.107083][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.253228][ T5755] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.371935][ T5975] loop2: detected capacity change from 0 to 40427 [ 76.400718][ T5975] F2FS-fs (loop2): Image doesn't support compression [ 76.416512][ T5975] F2FS-fs (loop2): heap/no_heap options were deprecated [ 76.438412][ T5975] F2FS-fs (loop2): invalid crc value [ 76.451810][ T5755] usb 4-1: Using ep0 maxpacket: 8 [ 76.460508][ T5975] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.476434][ T5755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.501876][ T5755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.560723][ T5755] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 76.573957][ T5755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.603024][ T5755] usb 4-1: config 0 descriptor?? [ 76.614745][ T5975] F2FS-fs (loop2): Start checkpoint disabled! [ 76.724452][ T5975] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 76.924661][ T5975] syz.2.50: attempt to access beyond end of device [ 76.924661][ T5975] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 76.959813][ T5975] syz.2.50: attempt to access beyond end of device [ 76.959813][ T5975] loop2: rw=2049, sector=53264, nr_sectors = 24 limit=40427 [ 77.003024][ T5975] syz.2.50: attempt to access beyond end of device [ 77.003024][ T5975] loop2: rw=2049, sector=53296, nr_sectors = 8 limit=40427 [ 77.037447][ T5975] syz.2.50: attempt to access beyond end of device [ 77.037447][ T5975] loop2: rw=2049, sector=53328, nr_sectors = 8 limit=40427 [ 77.057665][ T5975] syz.2.50: attempt to access beyond end of device [ 77.057665][ T5975] loop2: rw=2049, sector=53360, nr_sectors = 8 limit=40427 [ 77.067675][ T5755] uclogic 0003:2179:0053.0002: interface is invalid, ignoring [ 77.094670][ T5975] syz.2.50: attempt to access beyond end of device [ 77.094670][ T5975] loop2: rw=2049, sector=53384, nr_sectors = 16 limit=40427 [ 77.154824][ T5997] loop0: detected capacity change from 0 to 2048 [ 77.235364][ T5997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.385614][ T5755] usb 4-1: USB disconnect, device number 2 [ 77.553211][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.562093][ T48] kworker/u4:3: attempt to access beyond end of device [ 77.562093][ T48] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 77.585352][ T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 77.602806][ T48] kworker/u4:3: attempt to access beyond end of device [ 77.602806][ T48] loop2: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 77.624484][ T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 77.788666][ T6005] loop0: detected capacity change from 0 to 128 [ 77.831003][ T6005] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 77.872447][ T6005] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.102767][ T6009] warning: `syz.3.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.448229][ T6023] process 'syz.0.69' launched './file0' with NULL argv: empty string added [ 79.069079][ T6039] loop2: detected capacity change from 0 to 4096 [ 79.225537][ T6039] ntfs: volume version 3.1. [ 79.245180][ T6049] netlink: 'syz.3.80': attribute type 5 has an invalid length. [ 79.604983][ T2927] tipc: Subscription rejected, illegal request [ 79.921225][ T6070] loop0: detected capacity change from 0 to 64 [ 80.242530][ T6081] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 80.262364][ T2927] kworker/u4:7: attempt to access beyond end of device [ 80.262364][ T2927] loop0: rw=2049, sector=608, nr_sectors = 64 limit=64 [ 80.375256][ T6084] loop3: detected capacity change from 0 to 4096 [ 80.402603][ T6084] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 80.654331][ T6090] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 80.709890][ T6093] ntfs3: loop3: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 80.762638][ T6092] loop1: detected capacity change from 0 to 4096 [ 80.830563][ T6092] ntfs: volume version 3.1. [ 80.875423][ T1070] ntfs3: loop3: ino=1e, failed to parse mft record [ 81.083613][ T6099] bridge_slave_0: invalid flags given to default FDB implementation [ 81.310927][ T6109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.108'. [ 81.322815][ T6104] loop3: detected capacity change from 0 to 4096 [ 81.511772][ T786] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.711743][ T786] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 81.735701][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.757897][ T786] usb 2-1: config 0 descriptor?? [ 81.771622][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.974430][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 82.000295][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 82.019672][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.035373][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.054954][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.101610][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.135258][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.173584][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.229562][ T786] elecom 0003:056E:00FB.0003: unknown main item tag 0x0 [ 82.259216][ T787] cfg80211: failed to load regulatory.db [ 82.269068][ T786] elecom 0003:056E:00FB.0003: unknown main item tag 0x0 [ 82.276277][ T786] elecom 0003:056E:00FB.0003: unknown main item tag 0x0 [ 82.296606][ T786] elecom 0003:056E:00FB.0003: unknown main item tag 0x0 [ 82.316715][ T786] elecom 0003:056E:00FB.0003: unknown main item tag 0x0 [ 82.337061][ T786] elecom 0003:056E:00FB.0003: unknown main item tag 0x0 [ 82.351763][ T786] elecom 0003:056E:00FB.0003: unknown main item tag 0x0 [ 82.398199][ T786] elecom 0003:056E:00FB.0003: hidraw0: USB HID v10.00 Device [HID 056e:00fb] on usb-dummy_hcd.1-1/input0 [ 82.422405][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 82.428220][ T9] usbtmc 3-1:16.0: can't read capabilities [ 82.476164][ T786] usb 2-1: USB disconnect, device number 3 [ 82.659839][ T5848] usb 3-1: USB disconnect, device number 2 [ 83.326911][ T6143] netlink: 72 bytes leftover after parsing attributes in process `syz.2.122'. [ 83.341063][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 83.357746][ T6143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.122'. [ 83.441636][ T6145] loop1: detected capacity change from 0 to 8192 [ 83.477877][ T6145] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.514669][ T6145] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 83.524975][ T6145] REISERFS (device loop1): using ordered data mode [ 83.537319][ T6145] reiserfs: using flush barriers [ 83.548760][ T6145] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.566140][ T6145] REISERFS (device loop1): checking transaction log (loop1) [ 83.608526][ T6145] REISERFS (device loop1): Using r5 hash to sort names [ 83.646605][ T6145] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 84.000045][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 84.048193][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 84.073454][ T6156] netlink: 'syz.0.129': attribute type 6 has an invalid length. [ 84.181467][ T786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.367236][ T6151] loop3: detected capacity change from 0 to 40427 [ 84.384437][ T6151] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 84.402475][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 84.408024][ T6151] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 84.423696][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.435528][ T6151] F2FS-fs (loop3): invalid crc value [ 84.443487][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.455682][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 84.468914][ T786] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 84.480397][ T6151] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.491678][ T786] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.527180][ T786] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 84.545061][ T786] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 84.558259][ T6158] loop1: detected capacity change from 0 to 32768 [ 84.563283][ T786] usb 3-1: Manufacturer: syz [ 84.584804][ T786] usb 3-1: config 0 descriptor?? [ 84.603551][ T6151] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 84.668307][ T6151] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.995113][ T786] rc_core: IR keymap rc-hauppauge not found [ 85.011564][ T786] Registered IR keymap rc-empty [ 85.027332][ T786] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.081419][ T786] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.138294][ T786] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 85.187545][ T786] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 85.187885][ T6162] loop0: detected capacity change from 0 to 32768 [ 85.253620][ T6162] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.131 (6162) [ 85.261649][ T786] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.335440][ T6162] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.352235][ T786] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.381616][ T6162] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 85.381694][ T786] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.390337][ T6162] BTRFS info (device loop0): using free space tree [ 85.436549][ T786] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.501756][ T786] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.531853][ T786] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.562620][ T786] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.588019][ T6162] BTRFS info (device loop0): enabling ssd optimizations [ 85.596797][ T6162] BTRFS info (device loop0): auto enabling async discard [ 85.607703][ T786] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.645905][ T786] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.691579][ T786] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.733489][ T786] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 85.758984][ T786] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 85.815619][ T786] usb 3-1: USB disconnect, device number 3 [ 86.062876][ T6174] loop1: detected capacity change from 0 to 32768 [ 86.127286][ T6174] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 86.133116][ T5767] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.191918][ T6174] XFS (loop1): Ending clean mount [ 86.235975][ T6174] XFS (loop1): Quotacheck needed: Please wait. [ 86.392370][ T6174] XFS (loop1): Quotacheck: Done. [ 86.715880][ T5768] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 87.171770][ T6216] netlink: 68 bytes leftover after parsing attributes in process `syz.1.140'. [ 87.338276][ T6218] mkiss: ax0: crc mode is auto. [ 87.366905][ T6206] loop2: detected capacity change from 0 to 32768 [ 87.445036][ T6206] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.714893][ T6206] XFS (loop2): Ending clean mount [ 87.750590][ T6206] XFS (loop2): Quotacheck needed: Please wait. [ 87.828222][ T6206] XFS (loop2): Quotacheck: Done. [ 88.075479][ T5765] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.554693][ T6227] loop0: detected capacity change from 0 to 32768 [ 88.604468][ T6227] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.146 (6227) [ 88.669830][ T6227] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 88.719988][ T6227] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 88.753523][ T6227] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 88.764310][ T6227] BTRFS info (device loop0): use zstd compression, level 3 [ 88.821395][ T6227] BTRFS info (device loop0): using free space tree [ 89.038429][ T6227] BTRFS info (device loop0): enabling ssd optimizations [ 89.086041][ T6227] BTRFS info (device loop0): auto enabling async discard [ 89.182171][ T27] audit: type=1800 audit(1768616686.610:2): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.146" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 89.263863][ T5767] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 89.405421][ T6301] loop1: detected capacity change from 0 to 64 [ 89.411525][ T786] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 89.547614][ T5760] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop0 scanned by udevd (5760) [ 89.566391][ T6301] Trying to free block not in datazone [ 89.596570][ T6301] Trying to free block not in datazone [ 89.618587][ T786] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 89.639765][ T6301] Trying to free block not in datazone [ 89.647353][ T786] usb 3-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 89.692475][ T786] usb 3-1: config 0 has no interface number 0 [ 89.723925][ T786] usb 3-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.804807][ T786] usb 3-1: config 0 interface 113 has no altsetting 0 [ 89.854530][ T786] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 89.878583][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.911516][ T786] usb 3-1: Product: syz [ 89.915751][ T786] usb 3-1: Manufacturer: syz [ 89.954702][ T786] usb 3-1: SerialNumber: syz [ 89.977654][ T786] usb 3-1: config 0 descriptor?? [ 90.006639][ T786] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 90.224684][ T6321] loop1: detected capacity change from 0 to 4096 [ 90.266437][ T6321] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 90.293884][ T9] usb 3-1: USB disconnect, device number 4 [ 90.426802][ T6321] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 90.452341][ T6331] loop3: detected capacity change from 0 to 256 [ 90.599421][ T6331] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 90.771901][ T6331] exFAT-fs (loop3): error, invalid size(size(21523) > aligned(9223372036854777344) [ 90.771901][ T6331] [ 90.790293][ T6331] exFAT-fs (loop3): Filesystem has been set read-only [ 91.006303][ T6344] loop3: detected capacity change from 0 to 64 [ 91.046252][ T6344] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 91.281471][ T5755] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.308910][ T6355] program syz.0.181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.394840][ T5848] kernel read not supported for file /dsp1 (pid: 5848 comm: kworker/1:6) [ 91.452203][ T6359] loop0: detected capacity change from 0 to 2048 [ 91.481449][ T5755] usb 3-1: Using ep0 maxpacket: 32 [ 91.495271][ T5755] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 91.522682][ T5755] usb 3-1: config 0 has no interface number 0 [ 91.549065][ T6360] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.549495][ T5755] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 91.582279][ T5755] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 91.595307][ T5755] usb 3-1: config 0 interface 126 has no altsetting 0 [ 91.677721][ T5755] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 91.687913][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.716267][ T5755] usb 3-1: Product: syz [ 91.720674][ T5755] usb 3-1: Manufacturer: syz [ 91.760676][ T5755] usb 3-1: SerialNumber: syz [ 91.778017][ T5755] usb 3-1: config 0 descriptor?? [ 91.808981][ T6346] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.831524][ T6346] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.075344][ T6357] loop3: detected capacity change from 0 to 32768 [ 92.138818][ T6357] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.302616][ T5755] ir_usb 3-1:0.126: IR Dongle converter detected [ 92.410638][ T6357] XFS (loop3): Ending clean mount [ 92.511276][ T5755] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 92.649284][ T5766] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.851558][ T9] usb 3-1: USB disconnect, device number 5 [ 92.902249][ T9] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 92.919433][ T9] ir_usb 3-1:0.126: device disconnected [ 93.078429][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.192'. [ 93.279129][ T6404] loop0: detected capacity change from 0 to 256 [ 93.305801][ T6404] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 93.374810][ T6404] exFAT-fs (loop0): error, invalid size(size(21523) > aligned(9223372036854777344) [ 93.374810][ T6404] [ 93.387085][ T786] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.409523][ T6404] exFAT-fs (loop0): Filesystem has been set read-only [ 93.598520][ T786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.631438][ T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.653129][ T786] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.672504][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.681518][ T786] usb 2-1: SerialNumber: syz [ 93.919109][ T6417] program syz.0.206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.926194][ T786] usb 2-1: 0:2 : does not exist [ 94.005242][ T786] usb 2-1: USB disconnect, device number 4 [ 94.255168][ T6425] loop2: detected capacity change from 0 to 65 [ 94.273352][ T6425] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 94.450927][ T6429] kvm: user requested TSC rate below hardware speed [ 94.619679][ T6437] loop0: detected capacity change from 0 to 64 [ 94.689104][ T6437] Trying to free block not in datazone [ 94.706045][ T6437] Trying to free block not in datazone [ 94.733377][ T6437] Trying to free block not in datazone [ 95.120068][ T6455] loop0: detected capacity change from 0 to 1024 [ 95.149546][ T6451] loop3: detected capacity change from 0 to 4096 [ 95.160959][ T6455] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.174492][ T6455] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 95.196392][ T6451] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 95.211853][ T6451] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 95.237161][ T6455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.256828][ T6451] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 95.294808][ T6451] ntfs: volume version 3.1. [ 95.353909][ T6455] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.221: missing EA_INODE flag [ 95.406329][ T6465] loop2: detected capacity change from 0 to 8 [ 95.433939][ T6455] EXT4-fs (loop0): Remounting filesystem read-only [ 95.456886][ T6455] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 95.495131][ T6465] SQUASHFS error: Failed to read block 0x636: -5 [ 95.517604][ T5766] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 95.519492][ T6465] SQUASHFS error: Unable to read metadata cache entry [634] [ 95.555066][ T6465] SQUASHFS error: Unable to read metadata cache entry [634] [ 95.574681][ T6465] SQUASHFS error: Unable to read directory block [634:0] [ 95.587534][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.919843][ T6475] loop0: detected capacity change from 0 to 512 [ 95.940701][ T6475] ext3: Unexpected value for 'inlinecrypt' [ 96.201248][ T6485] netlink: 284 bytes leftover after parsing attributes in process `syz.2.233'. [ 96.231199][ T6487] loop1: detected capacity change from 0 to 512 [ 96.283181][ T6487] EXT4-fs (loop1): Test dummy encryption mode enabled [ 96.310079][ T6487] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 96.322561][ T6487] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 96.338940][ T6487] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #13: comm syz.1.234: iget: bad i_size value: 12154757448730 [ 96.355335][ T6487] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.234: couldn't read orphan inode 13 (err -117) [ 96.369684][ T6487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.385567][ T5831] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 96.453704][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.590394][ T5831] usb 4-1: unable to get BOS descriptor or descriptor too short [ 96.614677][ T5831] usb 4-1: not running at top speed; connect to a high speed hub [ 96.633187][ T5831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.648853][ T5831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.664239][ T5831] usb 4-1: string descriptor 0 read error: -22 [ 96.670915][ T5831] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.681108][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.711435][ T786] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.720620][ T5831] usb 4-1: 0:2 : does not exist [ 96.901981][ T5755] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.929825][ T786] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 96.958430][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.973635][ T786] usb 3-1: config 0 descriptor?? [ 96.990211][ T786] ums-realtek 3-1:0.0: USB Mass Storage device detected [ 97.091810][ T5755] usb 1-1: Using ep0 maxpacket: 32 [ 97.100219][ T5755] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 97.121389][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.142543][ T5755] usb 1-1: config 0 descriptor?? [ 97.227646][ T786] usb 3-1: USB disconnect, device number 6 [ 97.359538][ T5755] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 97.388712][ T5755] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.402212][ T5755] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 97.409929][ T5755] usb 1-1: media controller created [ 97.410522][ T6507] loop1: detected capacity change from 0 to 40427 [ 97.446870][ T6507] F2FS-fs (loop1): invalid crc value [ 97.460538][ T5755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.465568][ T6507] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.544731][ T6507] F2FS-fs (loop1): Start checkpoint disabled! [ 97.569194][ T5755] az6027: usb out operation failed. (-71) [ 97.579106][ T6507] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 97.593321][ T5755] az6027: usb out operation failed. (-71) [ 97.593695][ T5831] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 97.599184][ T5755] stb0899_attach: Driver disabled by Kconfig [ 97.599199][ T5755] az6027: no front-end attached [ 97.599199][ T5755] [ 97.599563][ T5755] az6027: usb out operation failed. (-71) [ 97.633932][ T5831] usb 4-1: Warning! Unlikely big volume range (=20196), cval->res is probably wrong. [ 97.645124][ T5831] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/1 [ 97.659780][ T5755] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 97.666793][ T5831] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 97.674001][ T5755] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 97.696564][ T5755] dvb-usb: schedule remote query interval to 400 msecs. [ 97.716540][ T5831] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 97.721547][ T5755] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 97.761038][ T5755] usb 1-1: USB disconnect, device number 2 [ 97.838480][ T5831] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 97.893203][ T5831] usb 4-1: USB disconnect, device number 3 [ 97.984909][ T5755] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 98.078845][ T1070] kworker/u4:5: attempt to access beyond end of device [ 98.078845][ T1070] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 98.093377][ T1070] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 98.100313][ T1070] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 98.289549][ T6518] kvm: user requested TSC rate below hardware speed [ 98.541817][ T5755] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.743999][ T5755] usb 1-1: unable to get BOS descriptor or descriptor too short [ 98.763167][ T5755] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 98.779410][ T5755] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 98.785971][ T6536] capability: warning: `syz.2.255' uses 32-bit capabilities (legacy support in use) [ 98.795888][ T5755] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 98.815528][ T5755] usb 1-1: config 129 has no interface number 0 [ 98.822493][ T5755] usb 1-1: config 129 has no interface number 1 [ 98.828831][ T5755] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 98.842844][ T5755] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 98.854742][ T5755] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 98.865258][ T6536] program syz.2.255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.868920][ T5755] usb 1-1: config 129 interface 135 has no altsetting 0 [ 98.895113][ T5755] usb 1-1: config 129 interface 5 has no altsetting 0 [ 98.908937][ T5755] usb 1-1: string descriptor 0 read error: -22 [ 98.916296][ T5755] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 98.941416][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.006232][ T5755] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 99.052528][ T5755] usb 1-1: MIDIStreaming interface descriptor not found [ 99.114685][ T6546] loop1: detected capacity change from 0 to 256 [ 99.155822][ T6546] exfat: Deprecated parameter 'utf8' [ 99.187029][ T6546] exfat: Deprecated parameter 'namecase' [ 99.211745][ T6546] exfat: Deprecated parameter 'namecase' [ 99.243429][ T6546] exfat: Deprecated parameter 'utf8' [ 99.280880][ T6546] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 99.400078][ T5755] usb 1-1: USB disconnect, device number 3 [ 99.573834][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 99.770523][ T6559] loop1: detected capacity change from 0 to 1024 [ 99.991136][ T6559] hfsplus: trying to free free bnode 0(1) [ 100.074866][ T2927] hfsplus: b-tree write err: -5, ino 4 [ 100.237431][ T6567] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 100.257690][ T6567] syzkaller1: linktype set to 0 [ 100.323786][ T6564] loop3: detected capacity change from 0 to 32768 [ 100.350109][ T6564] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.267 (6564) [ 100.380804][ T6564] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.396862][ T6564] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 100.419875][ T6564] BTRFS info (device loop3): using free space tree [ 100.534785][ T6581] serio: Serial port ttyS3 [ 100.575842][ T6564] BTRFS info (device loop3): enabling ssd optimizations [ 100.606573][ T6564] BTRFS info (device loop3): auto enabling async discard [ 100.919092][ T5766] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.557780][ T6594] loop1: detected capacity change from 0 to 32768 [ 101.700427][ T6594] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 101.899578][ T6594] XFS (loop1): Ending clean mount [ 102.133983][ T5768] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.164338][ T6626] loop3: detected capacity change from 0 to 1024 [ 102.252517][ T6626] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 102.426745][ T6606] loop2: detected capacity change from 0 to 40427 [ 102.491626][ T6606] F2FS-fs (loop2): invalid crc value [ 102.556476][ T6606] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.687550][ T6606] F2FS-fs (loop2): Start checkpoint disabled! [ 102.710226][ T6618] loop0: detected capacity change from 0 to 40427 [ 102.720416][ T6606] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 102.744836][ T6618] F2FS-fs (loop0): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 102.759131][ T6618] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 102.780725][ T6618] F2FS-fs (loop0): heap/no_heap options were deprecated [ 102.790863][ T6618] F2FS-fs (loop0): invalid crc value [ 102.847331][ T6618] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.021919][ T6618] F2FS-fs (loop0): Start checkpoint disabled! [ 103.050726][ T6618] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 103.079387][ T6618] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 103.118855][ T1070] kworker/u4:5: attempt to access beyond end of device [ 103.118855][ T1070] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 103.161427][ T1070] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 103.169589][ T1070] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 103.177099][ T6641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.288'. [ 103.222742][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'. [ 103.251447][ T6641] macvlan0: entered allmulticast mode [ 103.257238][ T6641] veth1_vlan: entered allmulticast mode [ 103.332121][ T12] kworker/u4:1: attempt to access beyond end of device [ 103.332121][ T12] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 103.365268][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 103.373009][ T42] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 103.407271][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 103.425707][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 103.574083][ T42] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.600278][ T42] usb 2-1: config 0 has no interface number 0 [ 103.613940][ T42] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 103.645748][ T42] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 103.667412][ T42] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.677233][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.688511][ T42] usb 2-1: config 0 descriptor?? [ 103.696504][ T6639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.711079][ T42] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 103.974748][ T9] usb 2-1: USB disconnect, device number 5 [ 103.999874][ T6659] loop2: detected capacity change from 0 to 64 [ 104.009124][ T6657] loop0: detected capacity change from 0 to 1024 [ 104.075630][ T6657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.151561][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.201393][ T6666] loop3: detected capacity change from 0 to 4096 [ 104.343602][ T6666] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 104.514716][ T27] audit: type=1800 audit(1768616701.940:3): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.297" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 104.926187][ T6684] loop1: detected capacity change from 0 to 2048 [ 104.946442][ T6684] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.967162][ T6684] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 104.981601][ T6684] UDF-fs: Scanning with blocksize 512 failed [ 104.998957][ T6684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.091892][ T5755] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.112103][ T42] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.311453][ T5755] usb 3-1: Using ep0 maxpacket: 8 [ 105.316771][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 105.333180][ T5755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.351704][ T5755] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.361919][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.381422][ T42] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.400743][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.409271][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.418133][ T6695] loop1: detected capacity change from 0 to 4096 [ 105.420139][ T5755] usb 3-1: config 0 descriptor?? [ 105.445610][ T42] usb 1-1: config 0 descriptor?? [ 105.478320][ T6695] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 105.644937][ T5755] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 105.675053][ T6699] loop3: detected capacity change from 0 to 512 [ 105.697975][ T42] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 105.726111][ T6699] EXT4-fs (loop3): Test dummy encryption mode enabled [ 105.754863][ T6699] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 105.805021][ T6699] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 105.836131][ T6699] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #13: comm syz.3.312: iget: bad i_size value: 12154757448730 [ 105.859453][ T42] usb 3-1: USB disconnect, device number 7 [ 105.881150][ T6699] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.312: couldn't read orphan inode 13 (err -117) [ 105.894118][ T5755] usb 1-1: USB disconnect, device number 4 [ 105.909318][ T6704] loop1: detected capacity change from 0 to 2048 [ 105.927321][ T6699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.969292][ T6704] Alternate GPT is invalid, using primary GPT. [ 105.981074][ T6704] loop1: p1 p2 p3 [ 105.990855][ T6704] loop1: partition table partially beyond EOD, truncated [ 106.057689][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.264650][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 106.271060][ T5756] udevd[5756]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 106.286131][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 106.508890][ T6713] program syz.2.317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.841949][ T5755] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.941042][ T6729] loop2: detected capacity change from 0 to 164 [ 106.985735][ T6729] rock: directory entry would overflow storage [ 106.996065][ T6729] rock: sig=0x66, size=4, remaining=3 [ 107.038516][ T6729] rock: directory entry would overflow storage [ 107.051458][ T5755] usb 1-1: Using ep0 maxpacket: 8 [ 107.060585][ T6729] rock: sig=0x66, size=4, remaining=3 [ 107.070056][ T5755] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 107.095094][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.135605][ T5755] pvrusb2: Hardware description: Terratec Grabster AV400 [ 107.150692][ T6732] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.166407][ T5755] pvrusb2: ********** [ 107.170466][ T5755] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 107.183912][ T5755] pvrusb2: Important functionality might not be entirely working. [ 107.193448][ T5755] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 107.209141][ T5755] pvrusb2: ********** [ 107.349165][ T2315] pvrusb2: Invalid write control endpoint [ 107.545930][ T2315] pvrusb2: Invalid write control endpoint [ 107.582395][ T2315] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 107.624930][ T6742] set_capacity_and_notify: 1 callbacks suppressed [ 107.624946][ T6742] loop1: detected capacity change from 0 to 64 [ 107.629663][ T2315] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 107.685733][ T2315] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 107.726095][ T2315] pvrusb2: Device being rendered inoperable [ 107.758769][ T6717] pvrusb2: Killing an I2C write to 0 that is too large (desired=8192 limit=61) [ 107.804555][ T2315] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 107.811885][ T5755] usb 1-1: USB disconnect, device number 5 [ 107.838897][ T2315] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 107.887918][ T2315] pvrusb2: Attached sub-driver cx25840 [ 107.911363][ T2315] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 107.939734][ T2315] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 108.138107][ T6755] loop2: detected capacity change from 0 to 512 [ 108.191909][ T6755] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.333: couldn't read orphan inode 26 (err -116) [ 108.227933][ T6755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.240878][ T6755] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.339974][ T6755] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.333: iget: bad i_size value: 360287970189639690 [ 108.427671][ T6755] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.529113][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.544692][ T6760] loop0: detected capacity change from 0 to 128 [ 108.544730][ T6750] loop3: detected capacity change from 0 to 32768 [ 108.757493][ T6750] JBD2: Ignoring recovery information on journal [ 108.907398][ T6750] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 109.241743][ T6780] netlink: 48 bytes leftover after parsing attributes in process `syz.1.339'. [ 109.432899][ T6782] loop0: detected capacity change from 0 to 1024 [ 109.705313][ T2183] hfsplus: request for non-existent node 33554434 in B*Tree [ 109.741495][ T2183] hfsplus: request for non-existent node 33554434 in B*Tree [ 109.946950][ T5777] Bluetooth: hci2: link tx timeout [ 109.947983][ T5777] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.075044][ T5766] [ 110.077437][ T5766] ====================================================== [ 110.084494][ T5766] WARNING: possible circular locking dependency detected [ 110.091936][ T5766] syzkaller #0 Not tainted [ 110.096376][ T5766] ------------------------------------------------------ [ 110.103503][ T5766] syz-executor/5766 is trying to acquire lock: [ 110.109769][ T5766] ffff88805acad118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: __ocfs2_flush_truncate_log+0x352/0x1130 [ 110.123006][ T5766] [ 110.123006][ T5766] but task is already holding lock: [ 110.130571][ T5766] ffff88805d6ad118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 110.143369][ T5766] [ 110.143369][ T5766] which lock already depends on the new lock. [ 110.143369][ T5766] [ 110.153912][ T5766] [ 110.153912][ T5766] the existing dependency chain (in reverse order) is: [ 110.163091][ T5766] [ 110.163091][ T5766] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 110.173599][ T5766] down_write+0x97/0x200 [ 110.178468][ T5766] __ocfs2_move_extents_range+0x1a63/0x35d0 [ 110.184997][ T5766] ocfs2_move_extents+0x3a7/0x9a0 [ 110.190826][ T5766] ocfs2_ioctl_move_extents+0x527/0x6c0 [ 110.197570][ T5766] ocfs2_ioctl+0x199/0x7e0 [ 110.202777][ T5766] __se_sys_ioctl+0xfd/0x170 [ 110.208565][ T5766] do_syscall_64+0x55/0xa0 [ 110.213788][ T5766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.220375][ T5766] [ 110.220375][ T5766] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 110.231136][ T5766] __lock_acquire+0x2df1/0x7d40 [ 110.236611][ T5766] lock_acquire+0x19e/0x420 [ 110.242277][ T5766] down_write+0x97/0x200 [ 110.248098][ T5766] __ocfs2_flush_truncate_log+0x352/0x1130 [ 110.254435][ T5766] ocfs2_flush_truncate_log+0x4f/0x60 [ 110.260416][ T5766] ocfs2_sync_fs+0x11d/0x330 [ 110.265605][ T5766] sync_filesystem+0x1c2/0x220 [ 110.271281][ T5766] generic_shutdown_super+0x6f/0x2b0 [ 110.277196][ T5766] kill_block_super+0x44/0x90 [ 110.282681][ T5766] deactivate_locked_super+0x97/0x100 [ 110.288755][ T5766] cleanup_mnt+0x43b/0x4d0 [ 110.294099][ T5766] task_work_run+0x1d4/0x260 [ 110.299793][ T5766] exit_to_user_mode_loop+0xe6/0x110 [ 110.305924][ T5766] exit_to_user_mode_prepare+0xee/0x180 [ 110.312164][ T5766] syscall_exit_to_user_mode+0x1a/0x50 [ 110.318229][ T5766] do_syscall_64+0x61/0xa0 [ 110.323240][ T5766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.329818][ T5766] [ 110.329818][ T5766] other info that might help us debug this: [ 110.329818][ T5766] [ 110.340484][ T5766] Possible unsafe locking scenario: [ 110.340484][ T5766] [ 110.347940][ T5766] CPU0 CPU1 [ 110.353616][ T5766] ---- ---- [ 110.358997][ T5766] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 110.366458][ T5766] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 110.376540][ T5766] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 110.386344][ T5766] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 110.393797][ T5766] [ 110.393797][ T5766] *** DEADLOCK *** [ 110.393797][ T5766] [ 110.402197][ T5766] 2 locks held by syz-executor/5766: [ 110.407466][ T5766] #0: ffff88805a8c80e0 (&type->s_umount_key#97){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 110.417877][ T5766] #1: ffff88805d6ad118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 110.431134][ T5766] [ 110.431134][ T5766] stack backtrace: [ 110.437256][ T5766] CPU: 0 PID: 5766 Comm: syz-executor Not tainted syzkaller #0 [ 110.445315][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.456090][ T5766] Call Trace: [ 110.459667][ T5766] [ 110.462643][ T5766] dump_stack_lvl+0x18c/0x250 [ 110.467419][ T5766] ? load_image+0x400/0x400 [ 110.471918][ T5766] ? show_regs_print_info+0x20/0x20 [ 110.477117][ T5766] ? print_circular_bug+0x12b/0x1a0 [ 110.482483][ T5766] check_noncircular+0x2fc/0x400 [ 110.487510][ T5766] ? print_deadlock_bug+0x5d0/0x5d0 [ 110.492888][ T5766] ? lockdep_lock+0xf5/0x230 [ 110.497930][ T5766] ? _find_first_zero_bit+0xd3/0x100 [ 110.503541][ T5766] __lock_acquire+0x2df1/0x7d40 [ 110.508674][ T5766] ? __lock_acquire+0x7d40/0x7d40 [ 110.514038][ T5766] ? verify_lock_unused+0x140/0x140 [ 110.519261][ T5766] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 110.524886][ T5766] ? do_raw_spin_lock+0x11f/0x2c0 [ 110.530021][ T5766] ? mutex_unlock+0x10/0x10 [ 110.534540][ T5766] lock_acquire+0x19e/0x420 [ 110.539225][ T5766] ? __ocfs2_flush_truncate_log+0x352/0x1130 [ 110.545285][ T5766] ? ocfs2_get_system_file_inode+0x202/0x850 [ 110.551254][ T5766] ? __might_sleep+0xe0/0xe0 [ 110.555853][ T5766] ? read_lock_is_recursive+0x20/0x20 [ 110.561226][ T5766] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 110.567596][ T5766] ? __wake_up+0x132/0x1a0 [ 110.572004][ T5766] down_write+0x97/0x200 [ 110.576241][ T5766] ? __ocfs2_flush_truncate_log+0x352/0x1130 [ 110.582210][ T5766] ? down_read_killable+0x340/0x340 [ 110.587580][ T5766] ? _raw_write_unlock+0x28/0x40 [ 110.592600][ T5766] ? jbd2_journal_unlock_updates+0x84/0xe0 [ 110.598588][ T5766] __ocfs2_flush_truncate_log+0x352/0x1130 [ 110.604407][ T5766] ? ocfs2_truncate_log_needs_flush+0x310/0x310 [ 110.610637][ T5766] ? read_lock_is_recursive+0x20/0x20 [ 110.616013][ T5766] ? down_write+0x16e/0x200 [ 110.620523][ T5766] ? down_read_killable+0x340/0x340 [ 110.625833][ T5766] ? __rwlock_init+0x150/0x150 [ 110.630798][ T5766] ocfs2_flush_truncate_log+0x4f/0x60 [ 110.636612][ T5766] ocfs2_sync_fs+0x11d/0x330 [ 110.641287][ T5766] ? ocfs2_put_super+0x1b0/0x1b0 [ 110.646428][ T5766] ? writeback_inodes_sb_nr+0x30/0x30 [ 110.651914][ T5766] ? get_nr_dirty_inodes+0x1d4/0x220 [ 110.657293][ T5766] sync_filesystem+0x1c2/0x220 [ 110.662272][ T5766] generic_shutdown_super+0x6f/0x2b0 [ 110.667559][ T5766] kill_block_super+0x44/0x90 [ 110.672321][ T5766] deactivate_locked_super+0x97/0x100 [ 110.677925][ T5766] cleanup_mnt+0x43b/0x4d0 [ 110.682816][ T5766] task_work_run+0x1d4/0x260 [ 110.687516][ T5766] ? task_work_cancel+0x220/0x220 [ 110.692920][ T5766] ? exit_to_user_mode_loop+0x3b/0x110 [ 110.698863][ T5766] exit_to_user_mode_loop+0xe6/0x110 [ 110.704427][ T5766] exit_to_user_mode_prepare+0xee/0x180 [ 110.709997][ T5766] syscall_exit_to_user_mode+0x1a/0x50 [ 110.716010][ T5766] do_syscall_64+0x61/0xa0 [ 110.720519][ T5766] ? clear_bhb_loop+0x40/0x90 [ 110.725485][ T5766] ? clear_bhb_loop+0x40/0x90 [ 110.730483][ T5766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.736462][ T5766] RIP: 0033:0x7fd849d9bf17 [ 110.740942][ T5766] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 110.760655][ T5766] RSP: 002b:00007ffd08bd5958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 110.769255][ T5766] RAX: 0000000000000000 RBX: 00007fd849e0471f RCX: 00007fd849d9bf17 [ 110.777222][ T5766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd08bd5a10 [ 110.785399][ T5766] RBP: 00007ffd08bd5a10 R08: 00007ffd08bd6a10 R09: 00000000ffffffff [ 110.793357][ T5766] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd08bd6aa0 [ 110.801335][ T5766] R13: 00007fd849e0471f R14: 000000000001abd8 R15: 00007ffd08bd6ae0 [ 110.809826][ T5766] [ 110.920136][ T5766] ocfs2: Unmounting device (7,3) on (node local) [ 112.011592][ T5780] Bluetooth: hci2: command 0x0406 tx timeout