last executing test programs: 28.885019301s ago: executing program 0 (id=53): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000040)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010100}, 0xc) 28.717009217s ago: executing program 0 (id=57): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) creat(&(0x7f0000000300)='./bus\x00', 0x133) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1022}], 0x2, 0x0, 0xfdef, 0x0) 28.173014917s ago: executing program 0 (id=62): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x80000001, 0xd, 0x34343459, 0x7, 0xa, [{0x8000007, 0x8001}, {0x8, 0xffffff67}, {0x615, 0x59}, {0x8, 0x53}, {0x1ff}, {0x7fffffff, 0xcc6}, {0x81, 0x1}, {0x46, 0x4}], 0x9, 0x6, 0x8, 0x2, 0x2}}) 27.744969837s ago: executing program 0 (id=69): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f66000000000000003030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653c30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f63f4e3c40000000000000000743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7314a9b4696461da9ab46f2d71c895d8cc0032d380f8e6553269f9acc089aae679bcc1b2082ca6f8e0e8667d40b8f121adc31d31f2550df66f61df0cce5883a84fe9c0c90b82b899072b1dbd5c68a889db777f63559d117cf82ee235f8e14b43cc22fc417711a8151ae5df6016c99443f105453598e1ab8185cf638d481054375a328d44707b5fbfbf6ed3f04168f4de65d28869711d6c249967e0d0f18fe32d879"], 0xfc, 0xc4b, &(0x7f0000002800)="$eJzs3U1sHdd9N+D/GZHipfy+FWM7ipPGxU1bpLJiufqKqViFe1XTbAPIshCK2QXgFUmpF6ZIgqQa2UgLupsuughQFF1kRaA1CqRoYDRF0CXTukCy8aLIqiuihY2g6IItAmRlsJi554qXNGnT4oco63ls6nfvzDkz58xczkgEz5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACJ+7+XLZ86mB90KAOAgXR35xplz7v8A8Ei57t//AAAAAAAAAAAAAABw2KUo4olIMXt1NY1V79tqV1q9d+6ODg1vXa0/VTWPVOXLr9rZc+cvfPX5wYudvNKa/oj6e+0L8erI9cv1l2Zuz85Nzs9PTtRHp1vjMxOTO97Cbutvdqo6APXbr92ZuHlzvn7uufMbVt8deL/vsRMDlwafOf10p+zo0PDwyHqRWnf5nvtuSNt2IzyORhGnI8WzP/h5akZEEbs/FrWDPfeb9VedOFV1YnRouOrIVKs5vVCuvNY5EEVEvatSo3OMtj4X0dN7oH3YXiNisWx+2eBTZfdGZptzzRtTk/VrzbmF1kJrZvpaare27E89iriYIpYiYqXvw5vrjSJ6IsX3jq+mGxFxpHMcvlINDN6+HcU+9nEHynbWeyOWiofgnB1ifVHEK5HiF++cjPF8namuNV+OeKXMH0W8VeaLEan8YFyIeG+LzxEPp54o4s/L839pNU1U14POdeXKN+tfn74501W2c135hPeHD10pHtD9oX9THoxDfm2qRRHN6oq/mu7/LzsAAAAAAAAAAAAAAAAA7LX+KOLzkeLlf/ujalxxVOPSj18a/P2B/989Zvypj9lOWfa5iFgsdjYm92geGHgtXUvpAY8lfpTVoog/zuP/3nzQjQEAAAAAAAAAAAAAAAAAAHikFfGzSPHCuyfTUnTPKd6avlW/3rwx1Z4VtjP3b2fO9LW1tbV6amcj51jOxZxLOZdzruSMItfP2cg5lnMx51LO5ZwrOeNIrp+zkXMs52LOpZzLOVdyRk+un7ORcyznYs6lnMs5V3LGIZm7FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg06SIIj6IFN/99mqKFBGNiLFo53LfttW2XwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Lm+VMQPI0X9Dxr3lvVERKr+bztZ/nEhGkfLfDwag2W+GI3LOZtV9jTefADtZ3d6UxE/jRR9tbcj9bSX5fPf235372MQb31n/d0XctkjnZUD7/c9duL4pcHhX3tqu9dpqwacutKavnO3Pjo0PDzStbgn7/3xrmUDeb/FHvWdiPnX33itOTU1OXf/L8qPwC6qP0Qvym+QQ9AMLw7qRfQcimY8mL7zCCjv/+9Fit9+9987N/z2/b8W/6/97t4dPn75J+v3/xc2b2iH9/+ezfXy/b+8p291/3+ia9kL+W8jvT0RtYXbs70nImrzr79xunW7eWvy1uT0hTNnvjY4+LXzZ3qPRtRutqYmu17tyeECAAAAAAAAAAAAAAAAODipiN+NFM2frqZ6RNytxmsNXBp85vTTR+JINd5qw7jtV0euX66/NHN7dm5yfn5yoj463RqfmZjc6e5q1XCv0aHhfenMx+rf5/b3116amX19rnXrDxe2XH+sdvnG/MJcc3zr1dEfRUSje8mpqsGjQ8NVo6dazemq6rUtB9N/cr2piP+IFOMX6ulLeVke/795hP+G8f+Lmze0T+P/P9O1rNxnSkX8MlL81l88FV+q2nksPnTMcrm/iRSnLn4xl4ujZblOGx6vHiLQHhlYlv2fSPEPH2ws2xkP2R6DWJU9u/Mj+3Aoz//xSPHDP/t+/HpetvH5D1uf/2ObN7RP5//JrmXHNjyvYNddJ5//05HixSfejt/Iyz7q+R+dZ2+czIXvPZ9jn87/Z7uWDeT9/ubedB0AAAAAAAAAAOCh1puK+NtI8ePhnvR8XraT3/+b2Lyhffr9r891LZvYm/mKPvbFrg8qAAAAABwSvamIn0WKWwtv3xtDvXH8d9f4z99ZH/85lDatrX7O9yvVcwP28ud/3Qbyfsd2320AAAAAAAAAAAAAAAAAAAA4VFIq4vk8n/pYNZ5/Ytv51Jcjxcv/9Wwul06U5TrzwA9Uf9auzkyfvjw1NTPeXGjemJqsj8w2xyfLuk9GitW//mKuW1Tzq3fmm2/P8b4+F/tcpBj+u07Z9lzsnbnJn1wve7Ys+5lI8Z9/n8uurVVlO/NYf3a97Lmy7F9Fim/908btdsqeWC97viz7/Ujxk2/VO2WPlWU7z0f93HrZ58Znin04KwAAAAAAAAAAAAAAAAAAADxqelMRfxop/vv20r2x/Hn+/96ut5W3vtM13/8md6t5/geq+f+3e30/8/9XzxVY3G6vAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw6ZSiiDcixezV1bTcV75vq11pTd+5Ozo0vHW1/lTVPFKVL79qZ8+dv/DV5wcvdvKj6++1z8erI9cv11+auT07Nzk/PzlRH51ujc9MTO54C7utv9mp6gDUb792Z+Lmzfn6uefOb1h9d+D9vsdODFwafOb0052yo0PDwyNdZXp6P+lO39x2Tdpm+dEo4i8jxbM/+Hn6cV9EEbs/Flt+dvp23otd6q86carqxOjQcNWRqVZzeqFcea1zIIqIelelRucY7dm5uE8frLVtt74RsVg2v2zwqbJ7I7PNueaNqcn6tebcQmuhNTN9LbVbW/anHkVcTBFLEbGyxTnojSJeixTfO76a/rkv4kjnOHzl6sg3zpzbvp3F3nT3fpXtrPdGLBWH4Jw9xPqiiH+MFL9452T8S19ET7S/4ssRr5T5o4i3on2+U/nBuBDx3sF9L7PPeqKI/y3P/6XV9E5feT3oXFeufLP+9embM11lO9eVfbk/HJz+A93bIb821aKIn1RX/NX0r76vAQAAAAAAAAAAAAAAAA6RIn41Urzw7slUjQ++N6a4NX2rfr15Y6o9rK8z9q8zZnptbW2tntrZyDmWczHnUs7lnCs5o8j1czbKrK2tjeX3izmXci7nXMkZR3L9nI2cYzkXcy7lXM65kjN6cv2cjZxjORdzLuVczrmSMw7J2D0AAAAAAAAAAAAAAAAAAODTpaj+S/Hdb6+mtb72/NJj0c5l84F+6v1fAAAA///ZcgND") creat(&(0x7f0000000400)='./bus\x00', 0x1aa) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 27.241969514s ago: executing program 0 (id=75): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x2, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x8) 26.597089723s ago: executing program 0 (id=78): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) 26.146123505s ago: executing program 32 (id=78): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) 5.600039161s ago: executing program 3 (id=161): syz_emit_ethernet(0x8a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @remote, @local, {[@dstopts={0x8, 0x5, '\x00', [@generic={0x27, 0x3, "d777c3"}, @pad1, @calipso={0x7, 0x20, {0x2, 0x6, 0x4, 0xd, [0xa8fd, 0x5, 0x2]}}]}, @routing={0x67, 0x0, 0x2, 0x4}], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xefff}}}}}}}, 0x0) 5.264906492s ago: executing program 3 (id=162): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) close_range(r0, r0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) socket(0xa, 0x3, 0x3a) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/237) pwritev(r1, &(0x7f00000009c0)=[{&(0x7f0000001d00)}, {&(0x7f0000000300)="a670b3ce3650116234482e56bad14c890adbb319b7985f8586d2588831d71ec5", 0x20}], 0x2, 0x7, 0x80) 4.953200821s ago: executing program 3 (id=163): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.413023131s ago: executing program 2 (id=165): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x3, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x4, 0x25, 0x6, 0x0, 0x0, 0x0, 0x4}}) 4.194455991s ago: executing program 2 (id=166): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_setup(0x5f71, &(0x7f0000001000)={0x0, 0xf87b, 0x800, 0x0, 0x10001d4}) 3.921024016s ago: executing program 2 (id=168): syz_open_dev$video4linux(&(0x7f0000000000), 0x40000cc4, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) r0 = io_uring_setup(0x1dd, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.825663535s ago: executing program 1 (id=170): truncate(0x0, 0x96f) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200000, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r3 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3.368805898s ago: executing program 2 (id=171): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000240), 0x4) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r4}) 3.091153053s ago: executing program 2 (id=173): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x22, 0x2, {0x2, 0x30}}, 0x0}, 0x0) 2.904985271s ago: executing program 3 (id=174): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.714111179s ago: executing program 1 (id=175): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd0, 0x0, 0x0) 2.577545471s ago: executing program 1 (id=176): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xba, 0x2}, 0x20) 1.591989583s ago: executing program 4 (id=177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xd}, {0xfff3, 0x8}, {0xb}}}, 0x24}}, 0x20040000) 1.005785137s ago: executing program 4 (id=178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x35b1, &(0x7f0000000400)={0x0, 0x62af, 0x2}) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, 0x0, 0x1) 901.283456ms ago: executing program 4 (id=179): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = syz_io_uring_setup(0x1179, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x7a98, 0x20000000, 0x0, 0x0, 0xfffffffffffffc76) 729.039753ms ago: executing program 4 (id=180): syz_emit_vhci(&(0x7f00000006c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x1, 0x80b}}}, 0x7) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 670.035848ms ago: executing program 4 (id=181): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8f, 0x86c, 0x1, 0x1, 0x2, 0x8, 0xb, 0x80, 0xfffffff7, 0x5, 0x2800, 0x6, 0x9, 0x4, 0x0, 0x11, {0x4, 0xfff7ffff}, 0xd0, 0x1}}) 573.408067ms ago: executing program 1 (id=182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000002c0)={r2, 0x0, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) 492.990015ms ago: executing program 4 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000180)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00', @ANYRES64, @ANYRESOCT], 0x1, 0x4703, &(0x7f0000004800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x800, 0x0, 0x9, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 468.800987ms ago: executing program 3 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0401010000000000140003006970366772653000000000000000000008000a00", @ANYRES32=r1], 0x3c}}, 0x0) 359.782407ms ago: executing program 1 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x72) 172.977324ms ago: executing program 3 (id=186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 74.725114ms ago: executing program 1 (id=187): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 0s ago: executing program 2 (id=188): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 82.180623][ T5752] cgroup: Unknown subsys name 'net' [ 82.320534][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.086206][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.958192][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.973897][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.982225][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.996115][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.004336][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.012287][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.020119][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.028457][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.033647][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.044018][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.053117][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.060902][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.062152][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.073933][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.079148][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.084666][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.092834][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.098604][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.111464][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.119007][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.126605][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.174206][ T5080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.182149][ T5080] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.189703][ T5080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.667545][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 86.803470][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 86.895639][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 86.908030][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.915388][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.923868][ T5765] bridge_slave_0: entered allmulticast mode [ 86.931109][ T5765] bridge_slave_0: entered promiscuous mode [ 86.968634][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.976032][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.984081][ T5765] bridge_slave_1: entered allmulticast mode [ 86.991085][ T5765] bridge_slave_1: entered promiscuous mode [ 87.042183][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 87.099857][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.142929][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.170128][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.177581][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.185483][ T5763] bridge_slave_0: entered allmulticast mode [ 87.194142][ T5763] bridge_slave_0: entered promiscuous mode [ 87.202858][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.210138][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.217676][ T5763] bridge_slave_1: entered allmulticast mode [ 87.225510][ T5763] bridge_slave_1: entered promiscuous mode [ 87.362022][ T5765] team0: Port device team_slave_0 added [ 87.368450][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.378157][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.385648][ T5762] bridge_slave_0: entered allmulticast mode [ 87.393309][ T5762] bridge_slave_0: entered promiscuous mode [ 87.402189][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.409471][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.417469][ T5762] bridge_slave_1: entered allmulticast mode [ 87.425089][ T5762] bridge_slave_1: entered promiscuous mode [ 87.435147][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.462025][ T5765] team0: Port device team_slave_1 added [ 87.503078][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.513993][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.521602][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.528897][ T5764] bridge_slave_0: entered allmulticast mode [ 87.536442][ T5764] bridge_slave_0: entered promiscuous mode [ 87.563273][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.588616][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.596247][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.603894][ T5764] bridge_slave_1: entered allmulticast mode [ 87.611585][ T5764] bridge_slave_1: entered promiscuous mode [ 87.637700][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.692487][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.699503][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.726232][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.740436][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.748808][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.775162][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.836091][ T5763] team0: Port device team_slave_0 added [ 87.866725][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.899611][ T5762] team0: Port device team_slave_0 added [ 87.909881][ T5762] team0: Port device team_slave_1 added [ 87.920121][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.948178][ T5763] team0: Port device team_slave_1 added [ 88.097741][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.106793][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.134065][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.145171][ T5080] Bluetooth: hci0: command tx timeout [ 88.150863][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.158645][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.185320][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.205420][ T5764] team0: Port device team_slave_0 added [ 88.211964][ T5080] Bluetooth: hci1: command tx timeout [ 88.212014][ T5769] Bluetooth: hci2: command tx timeout [ 88.225293][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.232620][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.258769][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.271114][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.278362][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.304800][ T5769] Bluetooth: hci3: command tx timeout [ 88.310803][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.332725][ T5765] hsr_slave_0: entered promiscuous mode [ 88.340602][ T5765] hsr_slave_1: entered promiscuous mode [ 88.373787][ T5764] team0: Port device team_slave_1 added [ 88.462014][ T5762] hsr_slave_0: entered promiscuous mode [ 88.469204][ T5762] hsr_slave_1: entered promiscuous mode [ 88.475850][ T5762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.484120][ T5762] Cannot create hsr debugfs directory [ 88.517665][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.524925][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.551813][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.569547][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.577094][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.603686][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.627424][ T5763] hsr_slave_0: entered promiscuous mode [ 88.634626][ T5763] hsr_slave_1: entered promiscuous mode [ 88.641034][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.649658][ T5763] Cannot create hsr debugfs directory [ 88.780902][ T5764] hsr_slave_0: entered promiscuous mode [ 88.787949][ T5764] hsr_slave_1: entered promiscuous mode [ 88.794470][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.803217][ T5764] Cannot create hsr debugfs directory [ 89.130346][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.153557][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.180099][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.204728][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.256830][ T5763] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.275671][ T5763] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.287096][ T5763] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.298148][ T5763] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.406822][ T5762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.418401][ T5762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.429968][ T5762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.452994][ T5762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.564876][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.577541][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.612037][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.643564][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.699612][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.733986][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.774411][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.808403][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.823591][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.831069][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.848935][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.877056][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.884293][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.931757][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.938965][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.950577][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.957859][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.985491][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.009278][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.016477][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.049488][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.056825][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.119414][ T5763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.147716][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.213065][ T5769] Bluetooth: hci0: command tx timeout [ 90.234601][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.292673][ T5769] Bluetooth: hci1: command tx timeout [ 90.298253][ T5769] Bluetooth: hci2: command tx timeout [ 90.306596][ T1301] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.313861][ T1301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.338710][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.345969][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.372405][ T5769] Bluetooth: hci3: command tx timeout [ 90.695742][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.810458][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.831021][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.908649][ T5763] veth0_vlan: entered promiscuous mode [ 90.977632][ T5762] veth0_vlan: entered promiscuous mode [ 91.000592][ T5763] veth1_vlan: entered promiscuous mode [ 91.010585][ T5765] veth0_vlan: entered promiscuous mode [ 91.027709][ T5762] veth1_vlan: entered promiscuous mode [ 91.064950][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.080516][ T5765] veth1_vlan: entered promiscuous mode [ 91.123014][ T5763] veth0_macvtap: entered promiscuous mode [ 91.139222][ T5763] veth1_macvtap: entered promiscuous mode [ 91.168892][ T5762] veth0_macvtap: entered promiscuous mode [ 91.195281][ T5762] veth1_macvtap: entered promiscuous mode [ 91.209604][ T5765] veth0_macvtap: entered promiscuous mode [ 91.234010][ T5765] veth1_macvtap: entered promiscuous mode [ 91.268457][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.283762][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.295917][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.308915][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.325470][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.336339][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.346760][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.358486][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.370228][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.384324][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.393736][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.404818][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.418417][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.426752][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.437992][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.448005][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.458785][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.470835][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.494398][ T5762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.505662][ T5762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.515352][ T5762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.525205][ T5762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.539989][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.549490][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.558438][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.567269][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.583160][ T5763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.592051][ T5763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.600806][ T5763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.610505][ T5763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.622434][ T5764] veth0_vlan: entered promiscuous mode [ 91.678046][ T5764] veth1_vlan: entered promiscuous mode [ 91.815747][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.827425][ T5764] veth0_macvtap: entered promiscuous mode [ 91.834403][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.855420][ T5764] veth1_macvtap: entered promiscuous mode [ 91.943624][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.953038][ T1301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.977037][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.986307][ T1301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.044143][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.045965][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.061305][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.076249][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.084593][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.095375][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.105562][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.116578][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.128975][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.163425][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.176120][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.187612][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.198992][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.208948][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.219533][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.232621][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.273139][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.277388][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.281027][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.296934][ T5764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.297005][ T5764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.297033][ T5764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.333843][ T5769] Bluetooth: hci0: command tx timeout [ 92.339723][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.347368][ T5764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.349939][ T787] cfg80211: failed to load regulatory.db [ 92.372971][ T5080] Bluetooth: hci1: command tx timeout [ 92.378691][ T5769] Bluetooth: hci2: command tx timeout [ 92.451764][ T5769] Bluetooth: hci3: command tx timeout [ 92.671816][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.721943][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.843824][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.943754][ T5865] Bluetooth: MGMT ver 1.22 [ 93.077541][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.703058][ T5869] fuse: Bad value for 'fd' [ 93.726244][ T5872] syz.3.4[5872]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.761409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 94.171355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.273478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.275622][ T5875] xt_socket: unknown flags 0x4c [ 94.283247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.375989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.386266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.682684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.683271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.691527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 94.700685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.658588][ T5874] loop1: detected capacity change from 0 to 128 [ 95.668253][ T5769] Bluetooth: hci0: command tx timeout [ 95.673382][ T5080] Bluetooth: hci2: command tx timeout [ 95.674452][ T5769] Bluetooth: hci1: command tx timeout [ 95.679157][ T5080] Bluetooth: hci3: command tx timeout [ 96.147870][ T5839] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.155489][ T5874] ======================================================= [ 96.155489][ T5874] WARNING: The mand mount option has been deprecated and [ 96.155489][ T5874] and is ignored by this kernel. Remove the mand [ 96.155489][ T5874] option from the mount to silence this warning. [ 96.155489][ T5874] ======================================================= [ 96.515559][ T5881] loop0: detected capacity change from 0 to 128 [ 96.549236][ T5881] EXT4-fs (loop0): Test dummy encryption mode enabled [ 96.656050][ T5881] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.695356][ T5881] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.839896][ T5879] loop2: detected capacity change from 0 to 8192 [ 96.883943][ T5879] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.915910][ T5879] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 96.925963][ T5879] REISERFS (device loop2): using ordered data mode [ 96.934276][ T5879] reiserfs: using flush barriers [ 96.960991][ T5879] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.980188][ T5879] REISERFS (device loop2): checking transaction log (loop2) [ 97.195954][ T5879] REISERFS (device loop2): Using tea hash to sort names [ 97.212515][ T5879] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 97.234501][ T5879] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 97.419063][ T5903] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 97.479440][ T5881] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 97.496833][ T5906] loop3: detected capacity change from 0 to 128 [ 97.519965][ T5906] EXT4-fs: Ignoring removed nobh option [ 97.572698][ T5906] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.633679][ T5906] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.776201][ T5912] bridge0: entered promiscuous mode [ 97.784137][ T5912] bridge0: left promiscuous mode [ 97.922531][ T5764] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.958321][ T5895] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 98.633851][ T5765] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.380660][ T5938] loop0: detected capacity change from 0 to 40427 [ 99.398945][ T5938] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 99.407664][ T5938] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 99.425185][ T5938] F2FS-fs (loop0): invalid crc value [ 99.441541][ T5938] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.523435][ T5938] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 99.530836][ T5938] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.990906][ T5953] loop3: detected capacity change from 0 to 40427 [ 100.057860][ T5953] F2FS-fs (loop3): invalid crc value [ 100.146020][ T5953] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.228203][ T5957] loop2: detected capacity change from 0 to 32768 [ 100.236054][ T5953] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.289803][ T27] audit: type=1800 audit(1767018078.785:2): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.29" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 100.607153][ T5764] syz-executor: attempt to access beyond end of device [ 100.607153][ T5764] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.684155][ T5764] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 100.744048][ T5966] loop0: detected capacity change from 0 to 1024 [ 100.814120][ T5966] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.870347][ T5966] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 100.891678][ T5966] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.903102][ T5966] EXT4-fs error (device loop0): ext4_free_blocks:6676: comm syz.0.33: Freeing blocks not in datazone - block = 0, count = 4096 [ 100.925656][ T5966] EXT4-fs (loop0): 1 orphan inode deleted [ 100.948353][ T5966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.144893][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.739702][ T5978] loop0: detected capacity change from 0 to 32768 [ 101.810882][ T5980] loop1: detected capacity change from 0 to 40427 [ 101.822077][ T5980] F2FS-fs (loop1): Corrupted extension count (92 + 1 > 64) [ 101.829379][ T5980] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 101.838103][ T5980] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 101.846689][ T5978] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 101.856362][ T5978] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 101.890479][ T5978] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 101.905079][ T5839] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 101.913522][ T5839] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 101.949675][ T5839] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 101.963780][ T5839] gfs2: fsid=syz:syz.0: jid=0: Done [ 101.970190][ T5978] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 102.188268][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.311317][ T5839] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.501502][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 102.526095][ T5839] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 102.583034][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.624350][ T5839] usb 2-1: Product: syz [ 102.631755][ T5839] usb 2-1: Manufacturer: syz [ 102.643193][ T5839] usb 2-1: SerialNumber: syz [ 102.689579][ T5839] usb 2-1: config 0 descriptor?? [ 102.953952][ T5839] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 002 [ 103.162306][ T5856] usb 2-1: USB disconnect, device number 2 [ 103.343163][ T6007] loop6: detected capacity change from 0 to 7 [ 103.355350][ T5778] Dev loop6: unable to read RDB block 7 [ 103.361579][ T5778] loop6: unable to read partition table [ 103.367594][ T5778] loop6: partition table beyond EOD, truncated [ 103.385015][ T6007] Dev loop6: unable to read RDB block 7 [ 103.396202][ T6007] loop6: unable to read partition table [ 103.402950][ T6007] loop6: partition table beyond EOD, truncated [ 103.409434][ T6007] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 103.438543][ T5135] Dev loop6: unable to read RDB block 7 [ 103.448122][ T5135] loop6: unable to read partition table [ 103.458046][ T5135] loop6: partition table beyond EOD, truncated [ 103.478904][ T6008] loop3: detected capacity change from 0 to 8192 [ 104.032407][ T6022] loop0: detected capacity change from 0 to 2048 [ 104.140194][ T6022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.225788][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.60'. [ 104.328358][ T6034] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 104.372289][ T5765] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 104.450403][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.501144][ T6036] netlink: 76 bytes leftover after parsing attributes in process `syz.1.64'. [ 104.633505][ T6041] Bluetooth: MGMT ver 1.22 [ 104.646688][ T6041] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 104.868872][ T6048] loop3: detected capacity change from 0 to 512 [ 104.936655][ T6050] loop0: detected capacity change from 0 to 2048 [ 104.952450][ T6048] EXT4-fs (loop3): 1 truncate cleaned up [ 104.959580][ T6048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.984788][ T6048] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.68: bg 0: block 465: padding at end of block bitmap is not set [ 105.005203][ T6048] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28 [ 105.018774][ T6048] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.018774][ T6048] [ 105.030071][ T6048] EXT4-fs (loop3): Total free blocks count 0 [ 105.036429][ T6048] EXT4-fs (loop3): Free/Dirty block details [ 105.042581][ T6048] EXT4-fs (loop3): free_blocks=0 [ 105.047638][ T6048] EXT4-fs (loop3): dirty_blocks=2 [ 105.052930][ T6048] EXT4-fs (loop3): Block reservation details [ 105.058974][ T6048] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 105.118009][ T6050] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.209936][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 105.226943][ T6050] loop0: detected capacity change from 2048 to 0 [ 105.261482][ C1] I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.289249][ C1] I/O error, dev loop0, sector 1408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.338638][ T5765] syz-executor: attempt to access beyond end of device [ 105.338638][ T5765] loop0: rw=0, sector=1408, nr_sectors = 1 limit=0 [ 105.357908][ T5765] syz-executor: attempt to access beyond end of device [ 105.357908][ T5765] loop0: rw=0, sector=1408, nr_sectors = 1 limit=0 [ 105.500243][ T5765] syz-executor: attempt to access beyond end of device [ 105.500243][ T5765] loop0: rw=2049, sector=128, nr_sectors = 1 limit=0 [ 105.547437][ T5765] Buffer I/O error on dev loop0, logical block 128, lost sync page write [ 105.588882][ T6068] xt_hashlimit: size too large, truncated to 1048576 [ 105.970290][ T5765] syz-executor (5765) used greatest stack depth: 20688 bytes left [ 106.199554][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.382357][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.521726][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.725282][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.981597][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.191287][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.220023][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 107.249875][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.298914][ T8] usb 3-1: config 0 descriptor?? [ 107.350276][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 107.420292][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.431135][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.441470][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.463922][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.486690][ T5771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.497585][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.640052][ T6102] loop3: detected capacity change from 0 to 16 [ 107.709955][ T6102] erofs: (device loop3): mounted with root inode @ nid 36. [ 107.735555][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 107.753005][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 107.760514][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 107.780200][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 107.803877][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 107.818124][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 108.061308][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 108.078349][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 108.106183][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 108.120044][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 108.139567][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 108.163636][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 108.187493][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 108.208524][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 108.252141][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 108.335026][ T8] pwc: Registered as video103. [ 108.366249][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 108.466270][ T8] usb 3-1: USB disconnect, device number 2 [ 109.031264][ T27] audit: type=1326 audit(1767018087.525:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.90" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55fe98f749 code=0x0 [ 109.217045][ T6127] loop2: detected capacity change from 0 to 32768 [ 109.327280][ T6096] chnl_net:caif_netlink_parms(): no params data found [ 109.574758][ T5771] Bluetooth: hci1: command tx timeout [ 110.441644][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.448885][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.496752][ T6096] bridge_slave_0: entered allmulticast mode [ 110.518039][ T6096] bridge_slave_0: entered promiscuous mode [ 110.583008][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.590495][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.610823][ T6096] bridge_slave_1: entered allmulticast mode [ 110.622989][ T6096] bridge_slave_1: entered promiscuous mode [ 110.664057][ T11] hsr_slave_0: left promiscuous mode [ 110.670594][ T11] hsr_slave_1: left promiscuous mode [ 110.677760][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.685822][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.695831][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.703690][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.713842][ T11] bridge_slave_1: left allmulticast mode [ 110.719888][ T11] bridge_slave_1: left promiscuous mode [ 110.727800][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.744069][ T11] bridge_slave_0: left allmulticast mode [ 110.749952][ T11] bridge_slave_0: left promiscuous mode [ 110.756464][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.794867][ T11] veth1_macvtap: left promiscuous mode [ 110.801155][ T11] veth0_macvtap: left promiscuous mode [ 110.808309][ T11] veth1_vlan: left promiscuous mode [ 110.815683][ T11] veth0_vlan: left promiscuous mode [ 110.871439][ T5856] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.074739][ T5856] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.091255][ T5856] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.114553][ T5856] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.129752][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 111.166197][ T5856] usb 3-1: SerialNumber: syz [ 111.406753][ T5856] usb 3-1: 0:2 : does not exist [ 111.435142][ T5856] usb 3-1: unit 5: unexpected type 0x03 [ 111.494428][ T5856] usb 3-1: USB disconnect, device number 3 [ 111.607488][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.654013][ T5080] Bluetooth: hci1: command tx timeout [ 111.902660][ T11] team0 (unregistering): Port device team_slave_1 removed [ 111.996842][ T11] team0 (unregistering): Port device team_slave_0 removed [ 112.052729][ T5080] Bluetooth: hci4: command 0x1003 tx timeout [ 112.059728][ T5771] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.289139][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'. [ 112.301370][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.428674][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.624220][ T6163] loop2: detected capacity change from 0 to 512 [ 112.718277][ T6163] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 113.327645][ T11] bond0 (unregistering): Released all slaves [ 113.474918][ T6096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.516492][ T6096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.725836][ T6096] team0: Port device team_slave_0 added [ 113.732900][ T5771] Bluetooth: hci1: command tx timeout [ 113.756916][ T6096] team0: Port device team_slave_1 added [ 113.867843][ T6096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.875627][ T6096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.916229][ T6096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.941832][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.955377][ T6096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.968340][ T6096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.031629][ T6096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.183436][ T8] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 114.197100][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.226589][ T8] usb 4-1: Product: syz [ 114.232129][ T8] usb 4-1: Manufacturer: syz [ 114.242406][ T8] usb 4-1: SerialNumber: syz [ 114.255739][ T6195] process 'syz.1.105' launched './file1' with NULL argv: empty string added [ 114.260545][ T8] usb 4-1: config 0 descriptor?? [ 114.293291][ T6096] hsr_slave_0: entered promiscuous mode [ 114.307873][ T6096] hsr_slave_1: entered promiscuous mode [ 114.493154][ T8] cx82310_eth: probe of 4-1:0.0 failed with error -22 [ 114.755904][ T6206] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 114.892591][ T8] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 115.038988][ T6213] input: syz1 as /devices/virtual/input/input6 [ 115.098163][ T8] usb 4-1: USB disconnect, device number 2 [ 115.107312][ T6096] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.164413][ T6096] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.189228][ T6096] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.225332][ T6096] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.463516][ T6229] Zero length message leads to an empty skb [ 115.471931][ T6229] lo: entered allmulticast mode [ 115.519128][ T6229] tunl0: entered allmulticast mode [ 115.529601][ T6229] gre0: entered allmulticast mode [ 115.565075][ T6229] gretap0: entered allmulticast mode [ 115.582345][ T6229] erspan0: entered allmulticast mode [ 115.599186][ T6229] ip_vti0: entered allmulticast mode [ 115.629397][ T6229] ip6_vti0: entered allmulticast mode [ 115.658823][ T6229] sit0: entered allmulticast mode [ 115.752730][ T6239] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 115.812147][ T5771] Bluetooth: hci1: command tx timeout [ 115.822334][ T6229] ip6tnl0: entered allmulticast mode [ 115.861493][ T6229] ip6gre0: entered allmulticast mode [ 115.919562][ T6229] syz_tun: entered allmulticast mode [ 115.955119][ T6229] ip6gretap0: entered allmulticast mode [ 115.973804][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.983966][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.999086][ T6229] bridge0: entered allmulticast mode [ 116.013751][ T6229] vcan0: entered allmulticast mode [ 116.026448][ T6229] bond0: entered allmulticast mode [ 116.031980][ T6229] bond_slave_0: entered allmulticast mode [ 116.037767][ T6229] bond_slave_1: entered allmulticast mode [ 116.056069][ T6229] team0: entered allmulticast mode [ 116.061556][ T6229] team_slave_0: entered allmulticast mode [ 116.067343][ T6229] team_slave_1: entered allmulticast mode [ 116.085089][ T6229] dummy0: entered allmulticast mode [ 116.095515][ T6229] nlmon0: entered allmulticast mode [ 116.105157][ T6229] caif0: entered allmulticast mode [ 116.113576][ T6229] batadv0: entered allmulticast mode [ 116.130210][ T6229] vxcan0: entered allmulticast mode [ 116.137962][ T6229] vxcan1: entered allmulticast mode [ 116.167797][ T6229] veth0: entered allmulticast mode [ 116.194366][ T6229] veth1: entered allmulticast mode [ 116.208659][ T6229] wg0: entered allmulticast mode [ 116.221389][ T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.233051][ T6229] wg1: entered allmulticast mode [ 116.251080][ T6229] wg2: entered allmulticast mode [ 116.260016][ T6229] veth0_to_bridge: entered allmulticast mode [ 116.285820][ T6229] veth1_to_bridge: entered allmulticast mode [ 116.340263][ T6229] veth0_to_bond: entered allmulticast mode [ 116.417649][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 116.443042][ T787] usb 3-1: config 0 has no interfaces? [ 116.448596][ T787] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 116.462842][ T6229] veth1_to_bond: entered allmulticast mode [ 116.471235][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.488732][ T787] usb 3-1: config 0 descriptor?? [ 116.507878][ T6229] veth0_to_team: entered allmulticast mode [ 116.530765][ T6229] veth1_to_team: entered allmulticast mode [ 116.550362][ T6229] veth0_to_batadv: entered allmulticast mode [ 116.563990][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.577653][ T6229] batadv_slave_0: entered allmulticast mode [ 116.593294][ T6229] veth1_to_batadv: entered allmulticast mode [ 116.614110][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.622466][ T6229] batadv_slave_1: entered allmulticast mode [ 116.669273][ T6229] xfrm0: entered allmulticast mode [ 116.679238][ T6229] veth0_to_hsr: entered allmulticast mode [ 116.689110][ T6229] hsr_slave_0: entered allmulticast mode [ 116.722742][ T6229] veth1_to_hsr: entered allmulticast mode [ 116.751955][ T6243] usb 3-1: USB disconnect, device number 4 [ 116.760922][ T6229] hsr_slave_1: entered allmulticast mode [ 116.799389][ T6229] hsr0: entered allmulticast mode [ 116.815497][ T6229] veth1_virt_wifi: entered allmulticast mode [ 116.836952][ T6229] veth0_virt_wifi: entered allmulticast mode [ 116.847745][ T6229] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 116.858993][ T6229] veth1_vlan: entered allmulticast mode [ 116.888326][ T6229] veth0_vlan: entered allmulticast mode [ 116.919478][ T6229] vlan0: entered allmulticast mode [ 116.925539][ T6229] vlan1: entered allmulticast mode [ 116.932112][ T6229] macvlan0: entered allmulticast mode [ 116.953005][ T6229] macvlan1: entered allmulticast mode [ 116.965973][ T6229] ipvlan0: entered allmulticast mode [ 116.971741][ T6229] ipvlan1: entered allmulticast mode [ 116.978288][ T6229] veth1_macvtap: entered allmulticast mode [ 117.009897][ T6229] veth0_macvtap: entered allmulticast mode [ 117.033111][ T6229] macvtap0: entered allmulticast mode [ 117.044662][ T6229] macsec0: entered allmulticast mode [ 117.058510][ T6229] geneve0: entered allmulticast mode [ 117.070664][ T6229] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.084760][ T6229] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.102917][ T6229] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.114217][ T6229] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.124863][ T6229] geneve1: entered allmulticast mode [ 117.142880][ T6229] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 117.154029][ T6229] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 117.177211][ T6229] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 117.201960][ T6229] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 117.229171][ T6229] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 117.291644][ T6229] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 117.302241][ T6229] nicvf0: entered allmulticast mode [ 117.467214][ T6096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.550440][ T6096] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.604339][ T6258] loop1: detected capacity change from 0 to 128 [ 117.630405][ T6258] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 117.650874][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.658124][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.679612][ T6262] loop2: detected capacity change from 0 to 256 [ 117.707656][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.714923][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.790106][ T5782] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.116335][ T6265] loop3: detected capacity change from 0 to 4096 [ 118.152458][ T6265] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 118.231377][ T5863] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.454558][ T6270] loop1: detected capacity change from 0 to 40427 [ 118.486425][ T6270] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 118.497893][ T5863] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 118.541610][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.579155][ T5863] usb 3-1: Product: syz [ 118.601331][ T6265] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 118.603031][ T5863] usb 3-1: Manufacturer: syz [ 118.621940][ T5863] usb 3-1: SerialNumber: syz [ 118.639797][ T5863] usb 3-1: config 0 descriptor?? [ 118.891733][ T5863] usb 3-1: ignoring: probably an ADSL modem [ 118.954592][ T6096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.111699][ T5863] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 119.157575][ T5863] usb 3-1: USB disconnect, device number 5 [ 119.249272][ T6291] Illegal XDP return value 1344150661 on prog (id 9) dev N/A, expect packet loss! [ 119.579649][ T6299] loop3: detected capacity change from 0 to 2048 [ 119.676429][ T6299] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 119.714842][ T6299] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.134615][ T6096] veth0_vlan: entered promiscuous mode [ 120.194937][ T6315] loop2: detected capacity change from 0 to 512 [ 120.246684][ T6319] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.249803][ T6315] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.131: inode has both inline data and extents flags [ 120.334589][ T6315] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.131: couldn't read orphan inode 15 (err -117) [ 120.372030][ T6315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.420712][ T6322] loop1: detected capacity change from 0 to 512 [ 120.443926][ T6322] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.471289][ T6322] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.484891][ T6096] veth1_vlan: entered promiscuous mode [ 120.559190][ T6322] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.133: Allocating blocks 41-42 which overlap fs metadata [ 120.577629][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.644342][ T6322] Quota error (device loop1): write_blk: dquota write failed [ 120.653994][ T6322] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 120.664532][ T6322] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.133: Allocating blocks 41-42 which overlap fs metadata [ 120.681827][ T6322] Quota error (device loop1): write_blk: dquota write failed [ 120.708524][ T6322] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 120.723538][ T6322] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.133: Failed to acquire dquot type 1 [ 120.739615][ T6322] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 120.791533][ T6322] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #12: comm syz.1.133: corrupted inode contents [ 120.845565][ T6322] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #12: comm syz.1.133: mark_inode_dirty error [ 120.874113][ T6329] sctp: [Deprecated]: syz.2.134 (pid 6329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.874113][ T6329] Use struct sctp_sack_info instead [ 120.893669][ T6322] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #12: comm syz.1.133: corrupted inode contents [ 120.942060][ T6322] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.133: mark_inode_dirty error [ 120.981732][ T6322] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #12: comm syz.1.133: corrupted inode contents [ 121.021325][ T6322] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 121.058741][ T6322] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #12: comm syz.1.133: corrupted inode contents [ 121.065168][ T6333] loop2: detected capacity change from 0 to 2048 [ 121.089015][ T6322] EXT4-fs error (device loop1): ext4_truncate:4294: inode #12: comm syz.1.133: mark_inode_dirty error [ 121.125749][ T6322] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 121.185962][ T6322] EXT4-fs (loop1): 1 truncate cleaned up [ 121.202722][ T6322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.231538][ T6336] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.376794][ T6322] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 121.438034][ T6333] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 121.467113][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.483420][ T6333] Remounting filesystem read-only [ 121.502582][ T6340] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 121.865572][ T6348] loop2: detected capacity change from 0 to 2048 [ 121.929409][ T6348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.005622][ T27] audit: type=1800 audit(1767018100.495:4): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.137" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 122.091405][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.239605][ T6355] loop2: detected capacity change from 0 to 64 [ 123.861141][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 123.964278][ T6096] veth0_macvtap: entered promiscuous mode [ 124.026175][ T6096] veth1_macvtap: entered promiscuous mode [ 124.169466][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.142'. [ 124.179273][ T6096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.214588][ T6096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.235940][ T6096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.268046][ T6096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.296770][ T6096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.353052][ T6096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.373691][ T6096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.396879][ T6096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.419029][ T6096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.488578][ T6096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.546956][ T6096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.591273][ T6096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.600060][ T6096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.658768][ T6096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.678716][ T6383] loop3: detected capacity change from 0 to 512 [ 124.704811][ T6383] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.778292][ T6383] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 124.842839][ T6383] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.148: bg 0: block 248: padding at end of block bitmap is not set [ 124.875148][ T6383] Quota error (device loop3): write_blk: dquota write failed [ 124.904926][ T6383] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 124.953506][ T6383] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.148: Failed to acquire dquot type 1 [ 125.002400][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.010293][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.041038][ T6383] EXT4-fs (loop3): 1 truncate cleaned up [ 125.076614][ T6383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 125.089857][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.127504][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.263446][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 125.279540][ T49] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 125.331726][ T49] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:3: Failed to release dquot type 1 [ 125.482444][ T6395] loop2: detected capacity change from 0 to 32768 [ 125.495678][ T6395] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.150 (6395) [ 125.524643][ T6395] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 125.535423][ T6395] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 125.545639][ T6395] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 125.555689][ T6395] BTRFS info (device loop2): use zstd compression, level 3 [ 125.563231][ T6395] BTRFS info (device loop2): using free space tree [ 125.634362][ T27] audit: type=1326 audit(1767018104.135:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fe98f749 code=0x7ffc0000 [ 125.643117][ T6407] mmap: syz.3.151 (6407) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.707716][ T6412] loop4: detected capacity change from 0 to 512 [ 125.732438][ T6412] EXT4-fs: Ignoring removed oldalloc option [ 125.758362][ T6412] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.800465][ T27] audit: type=1326 audit(1767018104.135:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fe98f749 code=0x7ffc0000 [ 125.826187][ T27] audit: type=1326 audit(1767018104.135:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fe98f749 code=0x7ffc0000 [ 125.848811][ T6395] BTRFS info (device loop2): enabling ssd optimizations [ 125.856015][ T6395] BTRFS info (device loop2): auto enabling async discard [ 125.900738][ T27] audit: type=1326 audit(1767018104.135:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fe98f749 code=0x7ffc0000 [ 125.973706][ T27] audit: type=1326 audit(1767018104.135:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f55fe98f749 code=0x7ffc0000 [ 125.981733][ T6412] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 126.055275][ T6412] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.80: bg 0: block 248: padding at end of block bitmap is not set [ 126.079029][ T27] audit: type=1326 audit(1767018104.165:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fe98f749 code=0x7ffc0000 [ 126.167688][ T6412] Quota error (device loop4): write_blk: dquota write failed [ 126.175498][ T6412] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 126.186232][ T6412] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.80: Failed to acquire dquot type 1 [ 126.219015][ T5763] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 126.231320][ T6412] EXT4-fs (loop4): 1 truncate cleaned up [ 126.235040][ T27] audit: type=1326 audit(1767018104.165:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fe98f749 code=0x7ffc0000 [ 126.240529][ T6412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 126.384823][ T27] audit: type=1326 audit(1767018104.175:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f55fe98f749 code=0x7ffc0000 [ 126.385179][ T6412] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 126.498592][ T27] audit: type=1326 audit(1767018104.175:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f55fe98f749 code=0x7ffc0000 [ 126.703430][ T6096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 127.236628][ T6231] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.496867][ T6231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.518519][ T6231] usb 5-1: config 13 has an invalid interface number: 50 but max is 3 [ 127.542241][ T6231] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 127.583771][ T6231] usb 5-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 127.612236][ T6231] usb 5-1: config 13 has no interface number 0 [ 127.632731][ T6231] usb 5-1: config 13 interface 50 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 127.659921][ T6231] usb 5-1: config 13 interface 50 has no altsetting 0 [ 127.675994][ T6231] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 127.693981][ T6231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.714663][ T6231] usb 5-1: Product: syz [ 127.729481][ T6231] usb 5-1: Manufacturer: syz [ 127.761286][ T6231] usb 5-1: SerialNumber: syz [ 128.049657][ T6468] syz.1.164 uses obsolete (PF_INET,SOCK_PACKET) [ 128.129794][ T6231] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 128.141444][ T6242] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.147667][ T11] usb 5-1: Failed to submit usb control message: -71 [ 128.164053][ T11] usb 5-1: unable to send the bmi data to the device: -71 [ 128.173425][ T6231] usb 5-1: USB disconnect, device number 2 [ 128.180119][ T11] usb 5-1: unable to get target info from device [ 128.188691][ T11] usb 5-1: could not get target info (-71) [ 128.217738][ T11] usb 5-1: could not probe fw (-71) [ 128.364702][ T6242] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.401380][ T6242] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 128.418472][ T6242] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 128.438641][ T6242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.464037][ T6242] usb 4-1: config 0 descriptor?? [ 128.724665][ T6242] Bluetooth: Can't get state to change to load ram patch err [ 128.755264][ T6242] Bluetooth: Loading patch file failed [ 128.761009][ T6242] ath3k: probe of 4-1:0.0 failed with error -121 [ 128.773286][ T6485] veth1_to_bond: entered allmulticast mode [ 128.805755][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 128.905843][ T6485] bond0: (slave bond_slave_1): Releasing backup interface [ 128.960775][ T6485] veth1_to_bond (unregistering): left allmulticast mode [ 129.021938][ T6242] usb 4-1: USB disconnect, device number 3 [ 129.167044][ T6487] loop4: detected capacity change from 0 to 32768 [ 129.243944][ T6487] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.256509][ T6498] 9pnet_virtio: no channels available for device syz [ 129.326486][ T6498] syz.1.170: attempt to access beyond end of device [ 129.326486][ T6498] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 129.366243][ T6487] XFS (loop4): Ending clean mount [ 129.376703][ T6498] SQUASHFS error: Failed to read block 0x0: -5 [ 129.471416][ T6096] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.904938][ T5863] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.990291][ T6516] loop4: detected capacity change from 0 to 2048 [ 130.021414][ T6242] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.031313][ T6516] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 130.053560][ T6516] NILFS (loop4): mounting unchecked fs [ 130.114106][ T5863] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 130.129300][ T5863] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 130.158786][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.181389][ T6516] NILFS (loop4): recovery complete [ 130.240091][ T5863] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 130.246899][ T6525] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.263292][ T6523] syz.1.176: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 130.292593][ T6523] CPU: 1 PID: 6523 Comm: syz.1.176 Not tainted syzkaller #0 [ 130.292929][ T6242] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 130.300121][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.319476][ T6523] Call Trace: [ 130.322806][ T6523] [ 130.325795][ T6523] dump_stack_lvl+0x16c/0x230 [ 130.330545][ T6523] ? show_regs_print_info+0x20/0x20 [ 130.335798][ T6523] ? load_image+0x3b0/0x3b0 [ 130.340343][ T6523] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 130.346800][ T6523] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 130.353346][ T6523] warn_alloc+0x210/0x300 [ 130.357722][ T6523] ? stack_trace_save+0x9c/0xe0 [ 130.362717][ T6523] ? zone_watermark_ok_safe+0x230/0x230 [ 130.368322][ T6523] ? kasan_set_track+0x5f/0x70 [ 130.373201][ T6523] ? kasan_set_track+0x4e/0x70 [ 130.378074][ T6523] ? __kasan_kmalloc+0x8f/0xa0 [ 130.382956][ T6523] ? xsk_init_queue+0xb0/0x110 [ 130.387790][ T6523] ? xsk_setsockopt+0x43c/0x6f0 [ 130.392679][ T6523] ? do_sock_setsockopt+0x175/0x1a0 [ 130.397909][ T6523] ? __x64_sys_setsockopt+0x184/0x200 [ 130.403407][ T6523] __vmalloc_node_range+0x126/0x1320 [ 130.408871][ T6523] ? free_vm_area+0x50/0x50 [ 130.413420][ T6523] vmalloc_user+0x74/0x80 [ 130.417826][ T6523] ? xskq_create+0xbf/0x170 [ 130.422476][ T6523] xskq_create+0xbf/0x170 [ 130.426862][ T6523] xsk_init_queue+0xb0/0x110 [ 130.431498][ T6523] xsk_setsockopt+0x43c/0x6f0 [ 130.436222][ T6523] ? xsk_poll+0x670/0x670 [ 130.440610][ T6523] ? __fget_files+0x28/0x4d0 [ 130.445248][ T6523] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 130.450823][ T6523] ? security_socket_setsockopt+0x7e/0xa0 [ 130.457104][ T6523] ? xsk_poll+0x670/0x670 [ 130.461661][ T6523] do_sock_setsockopt+0x175/0x1a0 [ 130.466720][ T6523] ? __fdget+0x180/0x210 [ 130.471012][ T6523] __x64_sys_setsockopt+0x184/0x200 [ 130.476275][ T6523] do_syscall_64+0x55/0xb0 [ 130.480724][ T6523] ? clear_bhb_loop+0x40/0x90 [ 130.485447][ T6523] ? clear_bhb_loop+0x40/0x90 [ 130.490158][ T6523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.496097][ T6523] RIP: 0033:0x7f1358d8f749 [ 130.500562][ T6523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.520384][ T6523] RSP: 002b:00007f1359bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.529014][ T6523] RAX: ffffffffffffffda RBX: 00007f1358fe5fa0 RCX: 00007f1358d8f749 [ 130.537141][ T6523] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 130.545146][ T6523] RBP: 00007f1358e13f91 R08: 0000000000000004 R09: 0000000000000000 [ 130.553232][ T6523] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.561676][ T6523] R13: 00007f1358fe6038 R14: 00007f1358fe5fa0 R15: 00007fff9d320068 [ 130.569798][ T6523] [ 130.581400][ T6523] Mem-Info: [ 130.584654][ T6523] active_anon:6405 inactive_anon:0 isolated_anon:0 [ 130.584654][ T6523] active_file:10673 inactive_file:39928 isolated_file:0 [ 130.584654][ T6523] unevictable:768 dirty:75 writeback:0 [ 130.584654][ T6523] slab_reclaimable:10188 slab_unreclaimable:92448 [ 130.584654][ T6523] mapped:24637 shmem:1887 pagetables:614 [ 130.584654][ T6523] sec_pagetables:0 bounce:0 [ 130.584654][ T6523] kernel_misc_reclaimable:0 [ 130.584654][ T6523] free:1351833 free_pcp:10070 free_cma:0 [ 130.642661][ T6523] Node 0 active_anon:25620kB inactive_anon:0kB active_file:42692kB inactive_file:159512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98548kB dirty:296kB writeback:0kB shmem:6012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12112kB pagetables:2456kB sec_pagetables:0kB all_unreclaimable? no [ 130.688198][ T6523] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 130.700083][ T6242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.782378][ T6523] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.786357][ T6242] usb 4-1: config 0 descriptor?? [ 130.839743][ T6523] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 130.846099][ T6523] Node 0 DMA32 free:1501236kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:26672kB inactive_anon:0kB active_file:42692kB inactive_file:158192kB unevictable:1536kB writepending:292kB present:3129332kB managed:2589640kB mlocked:0kB bounce:0kB free_pcp:19860kB local_pcp:2580kB free_cma:0kB [ 130.881890][ T6523] lowmem_reserve[]: 0 0 1 1 1 [ 130.902966][ T6523] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 130.945759][ T6523] lowmem_reserve[]: 0 0 0 0 0 [ 130.954608][ T6523] Node 1 Normal free:3890728kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19552kB local_pcp:8192kB free_cma:0kB [ 131.036390][ T6523] lowmem_reserve[]: 0 0 0 0 0 [ 131.051868][ T6523] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 131.067984][ T6523] Node 0 DMA32: 1247*4kB (UME) 314*8kB (UME) 78*16kB (UME) 201*32kB (UME) 283*64kB (UME) 58*128kB (UME) 13*256kB (UME) 11*512kB (UM) 9*1024kB (UM) 6*2048kB (ME) 349*4096kB (UM) = 1500684kB [ 131.092657][ T6523] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 131.109966][ T6523] Node 1 Normal: 262*4kB (UME) 56*8kB (UM) 33*16kB (UME) 66*32kB (UME) 16*64kB (UME) 10*128kB (UME) 3*256kB (UME) 1*512kB (U) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3890728kB [ 131.138276][ T6523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.148811][ T6523] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.169582][ T6523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.188888][ T6523] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.249336][ T6523] 52215 total pagecache pages [ 131.281864][ T6523] 8 pages in swap cache [ 131.286152][ T6523] Free swap = 124728kB [ 131.290391][ T6523] Total swap = 124996kB [ 131.304359][ T6523] 2097051 pages RAM [ 131.308528][ T6242] ath6kl: Unsupported hardware version: 0x0 [ 131.316856][ T6523] 0 pages HighMem/MovableOnly [ 131.322937][ T6242] ath6kl: Failed to init ath6kl core: -22 [ 131.329265][ T6242] ath6kl_usb: probe of 4-1:0.0 failed with error -22 [ 131.357622][ T6523] 416127 pages reserved [ 131.365060][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 131.376999][ T6523] 0 pages cma reserved [ 131.399214][ T6534] hsr_slave_0: left promiscuous mode [ 131.405854][ T6534] hsr_slave_1: left promiscuous mode [ 131.524451][ T6242] usb 4-1: USB disconnect, device number 4 [ 131.938939][ T5863] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 131.971884][ T5863] stv0680 3-1:4.0: last error: 2, command = 0x30 [ 131.986055][ T5863] usb 3-1: USB disconnect, device number 6 [ 132.146427][ T6555] ip6gre0: entered promiscuous mode [ 132.168565][ T6555] team0: Device ip6gre0 is of different type [ 132.449816][ T6553] loop4: detected capacity change from 0 to 32768 [ 132.486078][ T6553] (syz.4.183,6553,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.510229][ T6553] (syz.4.183,6553,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.581332][ T6553] JBD2: Ignoring recovery information on journal [ 132.650432][ T6553] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 132.701109][ T6569] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 132.836136][ T6553] [ 132.838554][ T6553] ====================================================== [ 132.845727][ T6553] WARNING: possible circular locking dependency detected [ 132.852798][ T6553] syzkaller #0 Not tainted [ 132.857336][ T6553] ------------------------------------------------------ [ 132.864404][ T6553] syz.4.183/6553 is trying to acquire lock: [ 132.870492][ T6553] ffff8880569b6608 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_setattr+0x95a/0x1b20 [ 132.879533][ T6553] [ 132.879533][ T6553] but task is already holding lock: [ 132.887014][ T6553] ffff88805d5014a0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0x94b/0x1b20 [ 132.896374][ T6553] [ 132.896374][ T6553] which lock already depends on the new lock. [ 132.896374][ T6553] [ 132.906909][ T6553] [ 132.906909][ T6553] the existing dependency chain (in reverse order) is: [ 132.916064][ T6553] [ 132.916064][ T6553] -> #4 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 132.923915][ T6553] down_write+0x97/0x1f0 [ 132.929057][ T6553] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 132.935596][ T6553] ocfs2_xattr_set+0x596/0x11f0 [ 132.941080][ T6553] ocfs2_set_acl+0x4e1/0x590 [ 132.946664][ T6553] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 132.952158][ T6553] vfs_remove_acl+0x4e3/0x740 [ 132.957407][ T6553] ovl_workdir_create+0x409/0x760 [ 132.962973][ T6553] ovl_get_workdir+0x300/0x1740 [ 132.968370][ T6553] ovl_fill_super+0x1345/0x3560 [ 132.973768][ T6553] get_tree_nodev+0xb5/0x140 [ 132.978899][ T6553] vfs_get_tree+0x8c/0x280 [ 132.983864][ T6553] do_new_mount+0x24b/0xa40 [ 132.988909][ T6553] __se_sys_mount+0x2da/0x3c0 [ 132.994135][ T6553] do_syscall_64+0x55/0xb0 [ 132.999091][ T6553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.005533][ T6553] [ 133.005533][ T6553] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 133.013380][ T6553] down_read+0x46/0x2e0 [ 133.018208][ T6553] ocfs2_init_acl+0x2fa/0x720 [ 133.023443][ T6553] ocfs2_mknod+0x12e5/0x20f0 [ 133.028577][ T6553] ocfs2_mkdir+0x196/0x410 [ 133.033551][ T6553] vfs_mkdir+0x296/0x440 [ 133.038531][ T6553] do_mkdirat+0x1d4/0x440 [ 133.043417][ T6553] __x64_sys_mkdirat+0x89/0xa0 [ 133.048739][ T6553] do_syscall_64+0x55/0xb0 [ 133.053791][ T6553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.060411][ T6553] [ 133.060411][ T6553] -> #2 (jbd2_handle){++++}-{0:0}: [ 133.067742][ T6553] start_this_handle+0x1e9d/0x20c0 [ 133.073406][ T6553] jbd2__journal_start+0x2bb/0x5b0 [ 133.079057][ T6553] jbd2_journal_start+0x2a/0x40 [ 133.084459][ T6553] ocfs2_start_trans+0x376/0x6c0 [ 133.089963][ T6553] ocfs2_modify_bh+0xe9/0x470 [ 133.095194][ T6553] ocfs2_local_read_info+0x13fd/0x1770 [ 133.101199][ T6553] dquot_load_quota_sb+0x757/0xb80 [ 133.106865][ T6553] dquot_load_quota_inode+0x2dc/0x5d0 [ 133.112795][ T6553] ocfs2_enable_quotas+0x1c7/0x440 [ 133.118541][ T6553] ocfs2_fill_super+0x3f6d/0x4d90 [ 133.124470][ T6553] mount_bdev+0x22b/0x2d0 [ 133.129372][ T6553] legacy_get_tree+0xea/0x180 [ 133.134595][ T6553] vfs_get_tree+0x8c/0x280 [ 133.139551][ T6553] do_new_mount+0x24b/0xa40 [ 133.144602][ T6553] __se_sys_mount+0x2da/0x3c0 [ 133.149913][ T6553] do_syscall_64+0x55/0xb0 [ 133.154884][ T6553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.161320][ T6553] [ 133.161320][ T6553] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 133.169867][ T6553] down_read+0x46/0x2e0 [ 133.174685][ T6553] ocfs2_start_trans+0x36a/0x6c0 [ 133.180356][ T6553] ocfs2_modify_bh+0xe9/0x470 [ 133.185586][ T6553] ocfs2_local_read_info+0x13fd/0x1770 [ 133.191601][ T6553] dquot_load_quota_sb+0x757/0xb80 [ 133.197279][ T6553] dquot_load_quota_inode+0x2dc/0x5d0 [ 133.203375][ T6553] ocfs2_enable_quotas+0x1c7/0x440 [ 133.209037][ T6553] ocfs2_fill_super+0x3f6d/0x4d90 [ 133.214690][ T6553] mount_bdev+0x22b/0x2d0 [ 133.219993][ T6553] legacy_get_tree+0xea/0x180 [ 133.225217][ T6553] vfs_get_tree+0x8c/0x280 [ 133.230180][ T6553] do_new_mount+0x24b/0xa40 [ 133.235569][ T6553] __se_sys_mount+0x2da/0x3c0 [ 133.240784][ T6553] do_syscall_64+0x55/0xb0 [ 133.245749][ T6553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.252194][ T6553] [ 133.252194][ T6553] -> #0 (sb_internal#4){.+.+}-{0:0}: [ 133.260255][ T6553] __lock_acquire+0x2ddb/0x7c80 [ 133.265696][ T6553] lock_acquire+0x197/0x410 [ 133.270925][ T6553] ocfs2_start_trans+0x26b/0x6c0 [ 133.276444][ T6553] ocfs2_setattr+0x95a/0x1b20 [ 133.281674][ T6553] notify_change+0xb0d/0xe10 [ 133.286814][ T6553] ovl_workdir_create+0x5de/0x760 [ 133.292401][ T6553] ovl_get_workdir+0x300/0x1740 [ 133.297897][ T6553] ovl_fill_super+0x1345/0x3560 [ 133.303308][ T6553] get_tree_nodev+0xb5/0x140 [ 133.308550][ T6553] vfs_get_tree+0x8c/0x280 [ 133.313526][ T6553] do_new_mount+0x24b/0xa40 [ 133.318610][ T6553] __se_sys_mount+0x2da/0x3c0 [ 133.323865][ T6553] do_syscall_64+0x55/0xb0 [ 133.328826][ T6553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.335274][ T6553] [ 133.335274][ T6553] other info that might help us debug this: [ 133.335274][ T6553] [ 133.345696][ T6553] Chain exists of: [ 133.345696][ T6553] sb_internal#4 --> &oi->ip_xattr_sem --> &oi->ip_alloc_sem [ 133.345696][ T6553] [ 133.358949][ T6553] Possible unsafe locking scenario: [ 133.358949][ T6553] [ 133.366425][ T6553] CPU0 CPU1 [ 133.371986][ T6553] ---- ---- [ 133.377370][ T6553] lock(&oi->ip_alloc_sem); [ 133.382094][ T6553] lock(&oi->ip_xattr_sem); [ 133.389396][ T6553] lock(&oi->ip_alloc_sem); [ 133.396626][ T6553] rlock(sb_internal#4); [ 133.400996][ T6553] [ 133.400996][ T6553] *** DEADLOCK *** [ 133.400996][ T6553] [ 133.409184][ T6553] 5 locks held by syz.4.183/6553: [ 133.414225][ T6553] #0: ffff88807d4460e0 (&type->s_umount_key#79/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x920 [ 133.424462][ T6553] #1: ffff8880569b6418 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 133.433739][ T6553] #2: ffff88805d4409d8 (&sb->s_type->i_mutex_key#30/1){+.+.}-{3:3}, at: ovl_workdir_create+0x150/0x760 [ 133.444952][ T6553] #3: ffff88805d501818 (&sb->s_type->i_mutex_key#32){+.+.}-{3:3}, at: ovl_workdir_create+0x557/0x760 [ 133.456038][ T6553] #4: ffff88805d5014a0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0x94b/0x1b20 [ 133.465992][ T6553] [ 133.465992][ T6553] stack backtrace: [ 133.471896][ T6553] CPU: 0 PID: 6553 Comm: syz.4.183 Not tainted syzkaller #0 [ 133.479199][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.489286][ T6553] Call Trace: [ 133.492601][ T6553] [ 133.495563][ T6553] dump_stack_lvl+0x16c/0x230 [ 133.500309][ T6553] ? load_image+0x3b0/0x3b0 [ 133.504849][ T6553] ? show_regs_print_info+0x20/0x20 [ 133.510083][ T6553] ? print_circular_bug+0x12b/0x1a0 [ 133.515659][ T6553] check_noncircular+0x2bd/0x3c0 [ 133.520730][ T6553] ? print_deadlock_bug+0x5d0/0x5d0 [ 133.525998][ T6553] ? lockdep_lock+0xe0/0x220 [ 133.530615][ T6553] ? _find_first_zero_bit+0xd3/0x100 [ 133.535937][ T6553] __lock_acquire+0x2ddb/0x7c80 [ 133.540829][ T6553] ? verify_lock_unused+0x140/0x140 [ 133.546063][ T6553] ? verify_lock_unused+0x140/0x140 [ 133.551386][ T6553] ? verify_lock_unused+0x140/0x140 [ 133.556716][ T6553] lock_acquire+0x197/0x410 [ 133.561336][ T6553] ? ocfs2_setattr+0x95a/0x1b20 [ 133.566224][ T6553] ? __might_sleep+0xe0/0xe0 [ 133.571372][ T6553] ? do_raw_spin_lock+0x121/0x2c0 [ 133.576445][ T6553] ? read_lock_is_recursive+0x20/0x20 [ 133.581954][ T6553] ? __rwlock_init+0x150/0x150 [ 133.586774][ T6553] ? do_raw_spin_unlock+0x121/0x230 [ 133.592024][ T6553] ocfs2_start_trans+0x26b/0x6c0 [ 133.597092][ T6553] ? ocfs2_setattr+0x95a/0x1b20 [ 133.601978][ T6553] ? ocfs2_recovery_exit+0x50/0x50 [ 133.607121][ T6553] ? setattr_prepare+0x1e6/0xac0 [ 133.612109][ T6553] ocfs2_setattr+0x95a/0x1b20 [ 133.616826][ T6553] ? ocfs2_extend_allocation+0x1760/0x1760 [ 133.622753][ T6553] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 133.628614][ T6553] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 133.634886][ T6553] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 133.640807][ T6553] ? current_time+0x18d/0x270 [ 133.645626][ T6553] ? inode_set_ctime_current+0x2d0/0x2d0 [ 133.651462][ T6553] ? down_write+0x162/0x1f0 [ 133.656172][ T6553] ? evm_inode_setattr+0x94/0x6a0 [ 133.661424][ T6553] ? bpf_lsm_inode_setattr+0x9/0x10 [ 133.666641][ T6553] ? try_break_deleg+0x79/0x120 [ 133.671519][ T6553] ? ocfs2_extend_allocation+0x1760/0x1760 [ 133.677355][ T6553] notify_change+0xb0d/0xe10 [ 133.681989][ T6553] ovl_workdir_create+0x5de/0x760 [ 133.687038][ T6553] ? ovl_statfs+0x2f0/0x2f0 [ 133.691562][ T6553] ? rcu_read_lock_any_held+0xb4/0x120 [ 133.697058][ T6553] ? __mnt_want_write+0x223/0x2a0 [ 133.702140][ T6553] ovl_get_workdir+0x300/0x1740 [ 133.707140][ T6553] ? ovl_fill_super+0x3560/0x3560 [ 133.712284][ T6553] ? ovl_inuse_trylock+0xbd/0xd0 [ 133.717249][ T6553] ? __lock_acquire+0x7c80/0x7c80 [ 133.722311][ T6553] ? __rwlock_init+0x150/0x150 [ 133.727188][ T6553] ? clone_mnt+0xa10/0xc60 [ 133.731643][ T6553] ? do_raw_spin_unlock+0x121/0x230 [ 133.736961][ T6553] ? _raw_spin_unlock+0x28/0x40 [ 133.741937][ T6553] ? ovl_inuse_trylock+0xbd/0xd0 [ 133.746917][ T6553] ovl_fill_super+0x1345/0x3560 [ 133.751800][ T6553] ? ida_alloc_range+0x79e/0x830 [ 133.756828][ T6553] ? virtio_fs_zero_page_range+0x140/0x140 [ 133.762662][ T6553] ? sget_fc+0x7f0/0x8d0 [ 133.766949][ T6553] ? __lock_acquire+0x7c80/0x7c80 [ 133.772010][ T6553] ? down_write+0x162/0x1f0 [ 133.776537][ T6553] ? down_read_killable+0x340/0x340 [ 133.781764][ T6553] ? sget_fc+0x7f0/0x8d0 [ 133.786039][ T6553] ? kill_litter_super+0xb0/0xb0 [ 133.791003][ T6553] ? virtio_fs_zero_page_range+0x140/0x140 [ 133.796835][ T6553] get_tree_nodev+0xb5/0x140 [ 133.801545][ T6553] vfs_get_tree+0x8c/0x280 [ 133.806015][ T6553] do_new_mount+0x24b/0xa40 [ 133.810577][ T6553] __se_sys_mount+0x2da/0x3c0 [ 133.815314][ T6553] ? __x64_sys_mount+0xc0/0xc0 [ 133.820111][ T6553] ? lockdep_hardirqs_on+0x98/0x150 [ 133.825345][ T6553] ? __x64_sys_mount+0x20/0xc0 [ 133.830579][ T6553] do_syscall_64+0x55/0xb0 [ 133.835027][ T6553] ? clear_bhb_loop+0x40/0x90 [ 133.839738][ T6553] ? clear_bhb_loop+0x40/0x90 [ 133.844458][ T6553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.850384][ T6553] RIP: 0033:0x7f0f2718f749 [ 133.854826][ T6553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.874551][ T6553] RSP: 002b:00007f0f2801a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 133.882994][ T6553] RAX: ffffffffffffffda RBX: 00007f0f273e5fa0 RCX: 00007f0f2718f749 [ 133.891087][ T6553] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 133.899088][ T6553] RBP: 00007f0f27213f91 R08: 0000200000000180 R09: 0000000000000000 [ 133.907122][ T6553] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 133.915134][ T6553] R13: 00007f0f273e6038 R14: 00007f0f273e5fa0 R15: 00007fffb15f6278 [ 133.923334][ T6553] [ 133.926446][ C0] sched: RT throttling activated [ 133.928320][ T6553] overlayfs: upper fs does not support tmpfile. [ 133.941925][ T6553] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 133.950858][ T6553] overlayfs: upper fs missing required features. [ 133.962213][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.968650][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.118096][ T6575] loop2: detected capacity change from 0 to 1764 [ 134.124947][ T6096] ocfs2: Unmounting device (7,4) on (node local) [ 134.128118][ T6575] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 135.261827][ T1301] hsr_slave_0: left promiscuous mode [ 135.267731][ T1301] hsr_slave_1: left promiscuous mode [ 135.274349][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.283308][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.290977][ T1301] bridge_slave_1: left promiscuous mode [ 135.297138][ T1301] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.305581][ T1301] bridge_slave_0: left promiscuous mode [ 135.311644][ T1301] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.705536][ T1301] team0 (unregistering): Port device team_slave_1 removed [ 135.749850][ T1301] team0 (unregistering): Port device team_slave_0 removed [ 135.794295][ T1301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.843256][ T1301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.306776][ T1301] bond0 (unregistering): Released all slaves