last executing test programs: 3m44.336204291s ago: executing program 4 (id=70): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, @dev={0xfe, 0x80, '\x00', 0x19}, 0x3, 0x78, 0x800, 0x100, 0x8, 0x4c80356}) 3m44.318669685s ago: executing program 4 (id=71): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_settime(0x0, &(0x7f0000000300)={0x8000000000000001}) 3m44.191402661s ago: executing program 4 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$bind(0x0, 0x0, 0x0, 0x104584c, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) close(0xffffffffffffffff) 3m42.508516216s ago: executing program 4 (id=75): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000000240)='/)\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x804) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$usbfs(0x0, 0x75, 0x109301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) socket$netlink(0x10, 0x3, 0xa) lseek(r0, 0x7fffffffffffffff, 0x2) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) 3m36.141660057s ago: executing program 4 (id=86): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) 3m34.835463124s ago: executing program 4 (id=90): unshare(0x62000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 3m19.567331308s ago: executing program 32 (id=90): unshare(0x62000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 55.484595153s ago: executing program 0 (id=490): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) getpgid(0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) 52.436656221s ago: executing program 0 (id=495): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x400) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x4000060) 48.747235313s ago: executing program 0 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000700)={0x8, 0x120, 0xfa00, {0x1, {0x7fff, 0x0, "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", 0xc, 0xfc, 0xd, 0x0, 0xe, 0xe, 0x6, 0x1}, r4}}, 0x128) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340), 0x1, 0x52a, &(0x7f00000004c0)="$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") 46.892243556s ago: executing program 0 (id=501): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010400, &(0x7f0000000600)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@dmask={'dmask', 0x3d, 0x401}}, {@uni_xlate}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_winnt}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@numtail}, {@fat=@quiet}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x1, 0x37b, &(0x7f0000000940)="$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") syz_pidfd_open(0x0, 0x0) syz_clone(0x24020000, &(0x7f0000000240)="439ad00561c3ccc7656eead74dea016c3b2e963c75", 0x15, &(0x7f0000000340), 0x0, &(0x7f00000003c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@errors_continue}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) 43.958507534s ago: executing program 0 (id=505): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x5000) creat(&(0x7f00000000c0)='./file2\x00', 0x18) socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) unshare(0x4000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0x863, 0x863, 0x0) 35.850674661s ago: executing program 0 (id=518): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x74, r1, 0x28004, 0x8508}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1a}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048801}, 0x20008000) 34.307928624s ago: executing program 33 (id=518): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x74, r1, 0x28004, 0x8508}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1a}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048801}, 0x20008000) 32.509876715s ago: executing program 3 (id=523): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2014713, &(0x7f0000000000), 0x82, 0x492, &(0x7f0000000840)="$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") chdir(&(0x7f0000000140)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) 31.5622673s ago: executing program 3 (id=525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x101, 0x2, 0x0, 0x80], 0x8080000, 0x4}) 31.105023343s ago: executing program 3 (id=526): epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0) epoll_create1(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') getdents(r1, &(0x7f0000001ec0)=""/4096, 0x1000) 30.311338061s ago: executing program 3 (id=529): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file0\x00', 0x80, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105d6, &(0x7f0000010640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 26.455095066s ago: executing program 3 (id=533): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xbb, 0x3, 0x9}]}}, {0x80, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0) 26.288734922s ago: executing program 3 (id=534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x64000600) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0xbea}) 11.244112069s ago: executing program 1 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000140)={[{@nouser_xattr}, {@grpjquota}, {@quota}]}, 0x2, 0x552, &(0x7f00000009c0)="$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") sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x20a, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 11.173998136s ago: executing program 34 (id=534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x64000600) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0xbea}) 8.755872092s ago: executing program 2 (id=551): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='rodir,shortname=win95,flush,dos1xfloppy=win95,nfs=stale_rw,shortname=winnt,errors=continue,shortname=winnt,\x00'], 0xfc, 0x2b8, &(0x7f0000000300)="$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") ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x24000014, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x6a}, 0x14) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r6, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@func_proto={0x0, 0x2, 0x0, 0x2, 0x3, [{0x10000007, 0x4}, {0xf, 0x5}]}, @const={0x0, 0x0, 0x0, 0xb, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x2e]}}, 0x0, 0x4f}, 0x28) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r0) sched_getattr(r3, &(0x7f0000000100)={0x38}, 0x38, 0x0) 8.297126679s ago: executing program 1 (id=552): pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000", @ANYRES32=0x0, @ANYBLOB="40000280e3ff010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x60440c0}, 0x8040) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) listen(r0, 0x5e00) 6.725914541s ago: executing program 2 (id=553): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)="be", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b80)='S', 0x1}], 0x1}}], 0x2, 0x20044040) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1c5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 4.283896454s ago: executing program 2 (id=554): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1e) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 3.3481926s ago: executing program 1 (id=555): r0 = socket(0x2, 0xa, 0x200) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x4002}, 0x90) r1 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0x52000775) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x3, 0x0, 0x0) open(0x0, 0x1431c2, 0x2e) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r8) 2.117148321s ago: executing program 2 (id=556): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) 1.150530053s ago: executing program 2 (id=557): socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r3 = gettid() process_vm_writev(r3, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000001c0)={&(0x7f00007b7000/0x1000)=nil, 0x1000}) 691.259705ms ago: executing program 1 (id=558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x19, &(0x7f0000003780)={@broadcast, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x4}}, {@llc={0x4, {@llc={0x2, 0xc, "a4"}}}}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1f00000000000080f7ffffff0900000002520000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000000010000000000000000"], 0x50) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x176, 0x402) 328.336418ms ago: executing program 1 (id=559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x1b, 0x0}, 0x2}], 0x88, 0x20, 0x0) shutdown(r1, 0x1) 166.590884ms ago: executing program 1 (id=560): lgetxattr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x200400, &(0x7f0000000080)={[{@noinline_xattr}, {@inlinecrypt, 0x0}, {@nolazytime}, {@reserve_root={'reserver_root', 0x3d, 0x100}}, {@background_gc_off}, {@background_gc_on}, {@lazytime}, {@fsync_mode_strict}, {@test_dummy_encryption}, {@nouser_xattr}, {@checkpoint_merge}, {@user_xattr}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@discard}]}, 0x1, 0x5548, &(0x7f0000005880)="$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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x9, 0x1, 0x0, 0x3, 0x8, 0x2, 0xfe, 0xff, 0xfc, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xffffffff, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0xff, 0x85, '\x00', 0xc}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0x1}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0x1c}, {0x7f, 0xd6, 0xb, '\x00', 0xb}, {0xdf, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x3}, {0xff, 0x1, 0xfa, '\x00', 0x1}, {0xfe, 0x81, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x91, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x3, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0xf2, 0x6, 0x2, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x2}, {0x7, 0x6, 0x4}]}}) 0s ago: executing program 2 (id=561): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)="be", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b80)='S', 0x1}], 0x1}}], 0x2, 0x20044040) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1c5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): _rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 216.217506][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 216.218387][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 216.219004][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 216.222599][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 216.263703][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 216.269167][ T6561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.305619][ T6561] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.154632][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 217.160439][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 217.166607][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 217.167247][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 217.168420][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 217.171743][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 217.172329][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 217.571759][ T83] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 217.571832][ T83] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 217.571866][ T83] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 217.576449][ T83] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 217.628189][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.646947][ T6574] sctp: [Deprecated]: syz.2.200 (pid 6574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.646947][ T6574] Use struct sctp_sack_info instead [ 217.778387][ T161] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 217.914008][ T1494] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 217.937502][ T5612] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 219.098249][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.430769][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.582879][ T75] bond0 (unregistering): Released all slaves [ 219.991752][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 220.690719][ T6598] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 220.691163][ T6598] overlayfs: overlapping lowerdir path [ 221.063265][ T6604] loop0: detected capacity change from 0 to 512 [ 221.077335][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.078066][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.083628][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.083920][ T6161] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 221.091264][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.093101][ T5843] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 221.102274][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.102332][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.108956][ T5843] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 221.213189][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.213527][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.214385][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.238959][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.239793][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.240037][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.240165][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.271594][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.271645][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.271684][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.272777][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.273612][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.275266][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.276138][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.361308][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 221.370654][ T6604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.370795][ T6604] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.103620][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 222.206519][ T5614] Bluetooth: hci1: command 0x0405 tx timeout [ 222.206628][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 222.456529][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 223.032881][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 223.035516][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 223.036007][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 223.036382][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 223.037086][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 223.037453][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 223.320447][ T37] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 223.476774][ T5843] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 223.476846][ T5843] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 223.476877][ T5843] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 223.476904][ T5843] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 223.599203][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.599416][ T37] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 223.599462][ T37] usb 4-1: New USB device found, idVendor=056a, idProduct=5a1e, bcdDevice= 0.00 [ 223.599488][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.785799][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.827650][ T161] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 223.896864][ T161] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 223.936028][ T37] usb 4-1: config 0 descriptor?? [ 223.949824][ T5612] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 223.997539][ T6250] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.078408][ T6250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.184129][ T6250] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.255999][ T6250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.561575][ T6632] loop0: detected capacity change from 0 to 512 [ 224.579233][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 224.579413][ T6632] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.579612][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 224.733777][ T6635] loop1: detected capacity change from 0 to 512 [ 224.800890][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 225.013012][ T6161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 225.044461][ T6635] EXT4-fs (loop1): can't read group descriptor 0 [ 225.381200][ T6635] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 225.573813][ T1164] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 225.573877][ T1164] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 225.614669][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 225.614717][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 225.629999][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 225.655524][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 225.675023][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 225.689737][ T6526] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 225.694091][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 225.828320][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 225.873344][ T6250] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 225.878202][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 225.887981][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 225.956917][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 225.998133][ T37] wacom 0003:056A:5A1E.0001: unknown main item tag 0x3 [ 225.998171][ T37] wacom 0003:056A:5A1E.0001: unknown main item tag 0x0 [ 225.998197][ T37] wacom 0003:056A:5A1E.0001: unknown main item tag 0x0 [ 225.998224][ T37] wacom 0003:056A:5A1E.0001: unknown main item tag 0x0 [ 225.998253][ T37] wacom 0003:056A:5A1E.0001: unknown main item tag 0x0 [ 225.998280][ T37] wacom 0003:056A:5A1E.0001: unknown main item tag 0x0 [ 225.998307][ T37] wacom 0003:056A:5A1E.0001: unknown main item tag 0x0 [ 225.998333][ T37] wacom 0003:056A:5A1E.0001: unknown main item tag 0x0 [ 226.082201][ T37] usb 4-1: USB disconnect, device number 4 [ 226.153640][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 226.190178][ T161] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 226.219124][ T6632] EXT4-fs (loop0): 1 orphan inode deleted [ 226.219149][ T6632] EXT4-fs (loop0): 1 truncate cleaned up [ 226.269398][ T6632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.286192][ T6250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.692425][ T6161] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 226.692502][ T6161] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 226.692549][ T6161] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 226.760533][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.798782][ T6526] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 226.833196][ T5612] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 226.990640][ T6659] loop0: detected capacity change from 0 to 512 [ 227.042940][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.043338][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.043818][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.044808][ T4341] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 227.061502][ T6526] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.145001][ T6526] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 227.146953][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.147021][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.148138][ T6161] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 227.202817][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.203221][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.253618][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.271876][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.273316][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.274181][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.274222][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.289938][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.289995][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.290035][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.333726][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.335145][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.336091][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.340046][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.372723][ T6659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.372853][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 227.373790][ T6659] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.761462][ T6672] capability: warning: `syz.2.226' uses deprecated v2 capabilities in a way that may be insecure [ 227.811614][ T6250] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.949357][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 228.255616][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 228.257488][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 228.265576][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 228.296505][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 228.306836][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 228.310167][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 228.483242][ T6250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 228.607473][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 228.719492][ T5886] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 228.719777][ T5886] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 228.719924][ T5886] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 228.749448][ T5886] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 228.806817][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.858830][ T6526] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 228.888428][ T161] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 228.935724][ T5612] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 229.406352][ T6691] loop2: detected capacity change from 0 to 128 [ 229.417477][ T6691] vfat: Unexpected value for 'dos1xfloppy' [ 229.418693][ T6691] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 230.162144][ T6694] loop1: detected capacity change from 0 to 512 [ 230.427211][ T6161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 230.534025][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 230.540910][ T6694] EXT4-fs (loop1): can't read group descriptor 0 [ 230.575568][ T6694] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 231.587166][ T4922] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 232.385950][ T75] hsr_slave_0: left promiscuous mode [ 232.874646][ T75] hsr_slave_1: left promiscuous mode [ 233.039889][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.039975][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.359517][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.359549][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.781905][ T821] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 233.834889][ T6730] loop1: detected capacity change from 0 to 512 [ 233.895304][ T75] veth1_macvtap: left promiscuous mode [ 233.895488][ T75] veth0_macvtap: left promiscuous mode [ 233.895916][ T75] veth1_vlan: left promiscuous mode [ 233.899963][ T75] veth0_vlan: left promiscuous mode [ 233.927390][ T6730] EXT4-fs: Ignoring removed i_version option [ 233.927413][ T6730] EXT4-fs: Ignoring removed nobh option [ 233.938622][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 233.939141][ T6730] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 233.939515][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 233.965867][ T821] usb 3-1: Using ep0 maxpacket: 32 [ 233.981645][ T821] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 233.981675][ T821] usb 3-1: config 0 has no interface number 0 [ 233.981726][ T821] usb 3-1: config 0 interface 184 has no altsetting 0 [ 233.987842][ T50] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 233.988547][ T50] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 233.992818][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 233.993261][ T821] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 233.993372][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.993441][ T821] usb 3-1: Product: syz [ 233.993483][ T821] usb 3-1: Manufacturer: syz [ 233.993525][ T821] usb 3-1: SerialNumber: syz [ 234.071228][ T6526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 234.071315][ T6526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 234.075062][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 234.075473][ T161] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 234.114684][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 234.117738][ T5843] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 234.119758][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 234.146704][ T6526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 234.147902][ T821] usb 3-1: config 0 descriptor?? [ 234.198637][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 234.210854][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 234.216111][ T6730] EXT4-fs (loop1): 1 truncate cleaned up [ 234.272726][ T6730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.441401][ T6736] 9pnet_fd: p9_fd_create_unix (6736): problem connecting socket: éq‰Y’3aK: -111 [ 234.830570][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 234.891216][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 234.891371][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 234.891421][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 234.891869][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 234.891917][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 234.910512][ T821] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 234.910615][ T821] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 235.135890][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.139636][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 235.202536][ T5613] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 236.139316][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.181679][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.183086][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.184546][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.224538][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.277942][ T5624] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 236.440361][ T821] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 236.440392][ T821] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 236.440412][ T821] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 236.440899][ T821] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 236.560470][ T821] usb 3-1: USB disconnect, device number 3 [ 238.513061][ T5624] Bluetooth: hci0: command tx timeout [ 238.629095][ T6785] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 238.629118][ T6785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.258'. [ 239.138538][ T75] team0 (unregistering): Port device team_slave_1 removed [ 239.233655][ T75] team0 (unregistering): Port device team_slave_0 removed [ 239.790633][ T6785] team0: Port device geneve1 added [ 239.850906][ T6765] warning: `syz.1.252' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 240.570689][ T5624] Bluetooth: hci0: command tx timeout [ 241.030710][ T5734] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 241.250404][ T5734] usb 3-1: Using ep0 maxpacket: 16 [ 241.253035][ T5734] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.253062][ T5734] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.282439][ T5734] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.282473][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.282496][ T5734] usb 3-1: Product: syz [ 241.282513][ T5734] usb 3-1: Manufacturer: syz [ 241.282530][ T5734] usb 3-1: SerialNumber: syz [ 241.365431][ T5734] usb 3-1: 0:2 : does not exist [ 241.580931][ T5734] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 242.524097][ T6840] netlink: 'syz.0.272': attribute type 10 has an invalid length. [ 242.524123][ T6840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.272'. [ 242.624332][ T5734] usb 3-1: USB disconnect, device number 4 [ 242.651587][ T5624] Bluetooth: hci0: command tx timeout [ 243.676043][ T6618] udevd[6618]: setting owner of /dev/bus/usb/003/004 to uid=0, gid=0 failed: No such file or directory [ 243.849780][ T6618] udevd[6618]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.129896][ T6757] wg1 speed is unknown, defaulting to 1000 [ 244.158203][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 244.644938][ T6864] input: syz0 as /devices/virtual/input/input9 [ 244.730515][ T5624] Bluetooth: hci0: command tx timeout [ 247.187016][ T6918] input: syz0 as /devices/virtual/input/input10 [ 247.551641][ T6012] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 247.623410][ T6618] udevd[6618]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 247.722269][ T6012] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.725211][ T6012] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.725242][ T6012] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 247.725265][ T6012] usb 3-1: Product: syz [ 247.725281][ T6012] usb 3-1: SerialNumber: syz [ 247.797176][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 249.381387][ T6012] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 249.381438][ T6012] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 249.381460][ T6012] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 249.593675][ T6012] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 249.778479][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.788638][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.721552][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.779964][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.399306][ T6988] input: syz0 as /devices/virtual/input/input11 [ 255.897652][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.922539][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.796388][ T6012] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 257.816811][ T6012] usb 3-1: USB disconnect, device number 5 [ 257.874309][ T6012] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 257.923247][ T1483] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.427105][ T1483] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.709305][ T32] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 258.961602][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 258.964444][ T32] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 258.964475][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.010056][ T32] usb 4-1: config 0 descriptor?? [ 259.023313][ T32] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 259.064925][ T1483] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.120434][ T6012] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 259.255640][ T32] usb 4-1: Detected FT232B [ 259.422686][ T6012] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 259.422715][ T6012] usb 3-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 259.422735][ T6012] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 259.422755][ T6012] usb 3-1: config 220 has 4 interfaces, different from the descriptor's value: 3 [ 259.422798][ T6012] usb 3-1: config 220 has no interface number 3 [ 259.422870][ T6012] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 259.422914][ T6012] usb 3-1: config 220 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 223, changing to 7 [ 259.422942][ T6012] usb 3-1: config 220 interface 0 has no altsetting 0 [ 259.422960][ T6012] usb 3-1: config 220 interface 76 has no altsetting 0 [ 259.422980][ T6012] usb 3-1: config 220 interface 1 has no altsetting 0 [ 259.532359][ T32] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 259.532821][ T32] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 259.554816][ T6012] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 259.554844][ T6012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.554865][ T6012] usb 3-1: Product: syz [ 259.554879][ T6012] usb 3-1: Manufacturer: syz [ 259.554893][ T6012] usb 3-1: SerialNumber: syz [ 259.595777][ T32] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 259.622697][ T32] usb 4-1: USB disconnect, device number 5 [ 259.663020][ T32] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 259.665651][ T32] ftdi_sio 4-1:0.0: device disconnected [ 259.698903][ T1483] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.889207][ T6757] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.889545][ T6757] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.889895][ T6757] bridge_slave_0: entered allmulticast mode [ 259.947432][ T6757] bridge_slave_0: entered promiscuous mode [ 260.061946][ T6012] usb 3-1: selecting invalid altsetting 0 [ 260.085124][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.085477][ T6757] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.085815][ T6757] bridge_slave_1: entered allmulticast mode [ 260.086465][ T6012] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 260.086505][ T6012] uvcvideo 3-1:220.0: No valid video chain found. [ 260.126502][ T6757] bridge_slave_1: entered promiscuous mode [ 260.304770][ T6012] usb 3-1: selecting invalid altsetting 0 [ 260.304811][ T6012] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 260.391840][ T6012] usb 3-1: USB disconnect, device number 6 [ 260.775055][ T7050] loop1: detected capacity change from 0 to 512 [ 260.782733][ T5843] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 260.807324][ T5843] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 260.807759][ T7050] EXT4-fs (loop1): can't read group descriptor 0 [ 260.832491][ T6757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.860520][ T83] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 260.916386][ T1164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 260.929301][ T1164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 260.945364][ T1164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 261.306903][ T1164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 261.463573][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 261.754091][ T6526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 261.854360][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 261.937758][ T6526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 261.942071][ T6526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 262.037914][ T6757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.058508][ T6526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 262.171413][ T6618] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 262.794739][ T6757] team0: Port device team_slave_0 added [ 262.817054][ T6757] team0: Port device team_slave_1 added [ 263.174644][ T7070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'. [ 263.318660][ T6757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.318680][ T6757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.318710][ T6757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.380583][ T5624] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 263.460145][ T6757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.460165][ T6757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.501487][ T6757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.830628][ T75] bridge_slave_1: left allmulticast mode [ 263.830665][ T75] bridge_slave_1: left promiscuous mode [ 263.833658][ T7083] binder_alloc: 7081: binder_alloc_buf, no vma [ 263.858399][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.934964][ T75] bridge_slave_0: left allmulticast mode [ 263.935000][ T75] bridge_slave_0: left promiscuous mode [ 263.939867][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.031451][ T6012] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 264.186557][ T6012] usb 2-1: unable to get BOS descriptor or descriptor too short [ 264.187466][ T6012] usb 2-1: not running at top speed; connect to a high speed hub [ 264.189298][ T6012] usb 2-1: config 1 has an invalid descriptor of length 91, skipping remainder of the config [ 264.189323][ T6012] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 264.222258][ T6012] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 264.222290][ T6012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.222314][ T6012] usb 2-1: Product: syz [ 264.222330][ T6012] usb 2-1: Manufacturer: syz [ 264.222347][ T6012] usb 2-1: SerialNumber: syz [ 264.613456][ T6012] usb 2-1: 0:2 : does not exist [ 264.785887][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.817941][ T6012] usb 2-1: USB disconnect, device number 3 [ 264.957720][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.056140][ T75] bond0 (unregistering): Released all slaves [ 265.608967][ T6757] hsr_slave_0: entered promiscuous mode [ 265.639054][ T6757] hsr_slave_1: entered promiscuous mode [ 265.651791][ T6757] debugfs: 'hsr0' already exists in 'hsr' [ 265.651819][ T6757] Cannot create hsr debugfs directory [ 266.395299][ T75] hsr_slave_0: left promiscuous mode [ 266.444300][ T75] hsr_slave_1: left promiscuous mode [ 266.458189][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.488873][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.837416][ T7148] binder: 7147:7148 ioctl 4018620d 0 returned -22 [ 268.175081][ T5616] Bluetooth: hci5: command 0x1003 tx timeout [ 268.208794][ T5624] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 270.172217][ T7166] loop0: detected capacity change from 0 to 32768 [ 270.240074][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.248955][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.249030][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.260762][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.269878][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.270298][ T7166] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 270.294080][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.309611][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.309622][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.312497][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.313926][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.315203][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.315742][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.316173][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.317061][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.318228][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.322474][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.322919][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.325604][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.325990][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.329376][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.337224][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.368204][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.380463][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.387044][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.390072][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.397462][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.399645][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.400598][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.401749][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.405242][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.408078][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.410930][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.411824][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.422284][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.424654][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.426069][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.428952][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.431613][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.432588][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.433653][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.435858][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.436448][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.437844][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.442582][ T50] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 270.498693][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.511442][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.526858][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.554134][ T75] team0 (unregistering): Port device team_slave_1 removed [ 270.571153][ T6526] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.581727][ T50] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 270.601588][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.607402][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.610357][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.612327][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.613581][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.616087][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.616225][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.616641][ T7166] XFS (loop0): Ending clean mount [ 270.618733][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.618860][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.620881][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.621067][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.624325][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.626664][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.629654][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.676595][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.693248][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.944429][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.945457][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.967600][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.979827][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.991036][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.992283][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.994073][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 270.995531][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 271.038138][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 271.044116][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 271.058177][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 271.073220][ T5612] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 271.085309][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 271.085365][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 271.085440][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 271.085571][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 271.127116][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 271.136670][ T4341] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 271.197565][ T4341] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 271.227208][ T75] team0 (unregistering): Port device team_slave_0 removed [ 271.270158][ T4341] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 271.357469][ T5612] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 272.642680][ T7194] binder: 7192:7194 ioctl 4018620d 0 returned -22 [ 273.165530][ T7201] Unsupported ieee802154 address type: 0 [ 273.167066][ T7201] misc userio: No port type given on /dev/userio [ 273.391854][ T5268] 8021q: adding VLAN 0 to HW filter on device eth5 [ 274.162646][ T6012] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 274.310741][ T6012] usb 2-1: Using ep0 maxpacket: 8 [ 274.314041][ T6012] usb 2-1: unable to get BOS descriptor or descriptor too short [ 274.315592][ T6012] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.315622][ T6012] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.318607][ T6012] usb 2-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.40 [ 274.318637][ T6012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.318660][ T6012] usb 2-1: Product: syz [ 274.318736][ T6012] usb 2-1: Manufacturer: syz [ 274.318752][ T6012] usb 2-1: SerialNumber: syz [ 274.916786][ T7224] loop3: detected capacity change from 0 to 512 [ 274.999854][ T4341] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 275.183499][ T6526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 275.603119][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 275.603193][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 275.605249][ T7224] EXT4-fs (loop3): orphan cleanup on readonly fs [ 275.607569][ T83] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 275.616803][ T161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 275.620032][ T161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 275.620896][ T7224] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.384: EA inode hash validation failed [ 275.621356][ T7224] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 275.622327][ T7224] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.384: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 275.622366][ T7224] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 275.711047][ T12] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 275.752826][ T7224] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.384: ea_inode dec ref err=-117 [ 275.767076][ T7224] EXT4-fs (loop3): 1 orphan inode deleted [ 275.770557][ T7224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 275.790324][ T161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 275.823115][ T50] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 275.878444][ T83] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 275.881342][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 275.882678][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 275.883539][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 275.886834][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 276.085928][ T1483] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 276.150423][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.170436][ T83] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 276.230871][ T83] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 276.260485][ T161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 276.261263][ T161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 276.262041][ T161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 276.357121][ T6012] usbhid 2-1:1.0: can't add hid device: -71 [ 276.357279][ T6012] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 276.389348][ T6012] usb 2-1: USB disconnect, device number 4 [ 276.420659][ T6532] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 277.566707][ T7240] binder: 7239:7240 ioctl c0306201 2000000004c0 returned -22 [ 278.840695][ T7196] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 279.352732][ T7253] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 279.679168][ T7256] kvm: pic: non byte read [ 279.679645][ T7256] kvm: pic: non byte read [ 279.679910][ T7256] kvm: pic: non byte read [ 279.681517][ T7256] kvm: pic: non byte read [ 279.682068][ T7256] kvm: pic: non byte read [ 279.682730][ T7256] kvm: pic: non byte read [ 279.684044][ T7256] kvm: pic: non byte read [ 279.684869][ T7256] kvm: pic: non byte read [ 279.772955][ T7256] kvm: pic: non byte read [ 279.776740][ T7256] kvm: pic: non byte read [ 280.084937][ T7263] loop0: detected capacity change from 0 to 512 [ 280.921699][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.173453][ T1164] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.216318][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.217963][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.220976][ T7263] EXT4-fs (loop0): orphan cleanup on readonly fs [ 281.240165][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.255327][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.257116][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.257246][ T7263] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.394: EA inode hash validation failed [ 281.257614][ T7263] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.394: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 281.257662][ T7263] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 281.258013][ T5843] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 281.279089][ T7263] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.394: ea_inode dec ref err=-117 [ 281.279390][ T7263] EXT4-fs (loop0): 1 orphan inode deleted [ 281.281943][ T7263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 281.587686][ T6526] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.599845][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.614218][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.615278][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.617560][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.619703][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.658267][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.659490][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 281.733013][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.735482][ T1164] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 281.735555][ T1164] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 281.820247][ T5612] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 283.367781][ T5268] 8021q: adding VLAN 0 to HW filter on device eth6 [ 284.067223][ T7314] loop2: detected capacity change from 0 to 512 [ 284.069313][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 284.069671][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 284.326782][ T6161] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 284.326858][ T6161] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 284.327876][ T7314] EXT4-fs (loop2): orphan cleanup on readonly fs [ 284.328459][ T6161] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 284.329524][ T6161] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 284.335322][ T6161] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 284.335482][ T7314] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.406: EA inode hash validation failed [ 284.335848][ T7314] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.406: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 284.335882][ T7314] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 284.337351][ T6161] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 284.340286][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 284.340307][ C0] EXT4-fs (loop2): initial error at time 1778546549: ext4_xattr_inode_update_ref:1037: inode 11 [ 284.340341][ C0] EXT4-fs (loop2): last error at time 1778546549: ext4_xattr_inode_update_ref:1037: inode 11 [ 284.616321][ T7314] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.406: ea_inode dec ref err=-117 [ 284.616679][ T7314] EXT4-fs (loop2): 1 orphan inode deleted [ 284.619614][ T7314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 285.553434][ T5843] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 285.555089][ T5843] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 285.559350][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 285.603997][ T5843] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 285.619515][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 285.624550][ T5843] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 285.659880][ T5843] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 285.680315][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 285.761140][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.762766][ T75] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 285.763128][ T75] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 285.915368][ T5609] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 287.610909][ T7361] loop2: detected capacity change from 0 to 512 [ 287.614016][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 287.615274][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 287.628928][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 287.629005][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 287.629995][ T7361] EXT4-fs (loop2): orphan cleanup on readonly fs [ 287.631005][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 287.632153][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 287.649101][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 287.649531][ T7361] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.420: EA inode hash validation failed [ 287.652066][ T7361] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.420: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 287.652110][ T7361] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 287.655317][ T75] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 287.660863][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 287.660889][ C0] EXT4-fs (loop2): initial error at time 1778546552: ext4_xattr_inode_update_ref:1037: inode 11 [ 287.660925][ C0] EXT4-fs (loop2): last error at time 1778546552: ext4_xattr_inode_update_ref:1037: inode 11 [ 287.838556][ T7361] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.420: ea_inode dec ref err=-117 [ 287.838909][ T7361] EXT4-fs (loop2): 1 orphan inode deleted [ 287.842051][ T7361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 288.091807][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 288.093313][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 288.095161][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 288.096046][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 288.097036][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 288.098314][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 288.100438][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 288.103432][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 288.375386][ T7377] loop3: detected capacity change from 0 to 512 [ 288.398359][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.398712][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.399263][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.402040][ T6526] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 288.415673][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.417581][ T5843] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 288.441714][ T6526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.441836][ T6526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.443258][ T5843] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 288.499245][ T6526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.508575][ T6526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.531848][ T7377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.531968][ T7377] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.974029][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.978346][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.978846][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.978880][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.978915][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.979440][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.979748][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.980047][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.983910][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.983937][ T6161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.987326][ T6161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.987799][ T6161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.988142][ T6161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 288.991308][ T6161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 289.026701][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 289.026841][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 289.026916][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 289.027093][ T6161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 289.134016][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 289.134168][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 289.138648][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 289.138803][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 289.308658][ T6161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 289.317942][ T6161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 289.336153][ T6161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 289.342229][ T6161] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 289.417996][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.495410][ T7396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.500426][ T6526] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 289.500500][ T6526] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 289.649013][ T5609] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 289.729802][ T1483] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 289.738199][ T1483] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 289.738278][ T1483] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 289.744101][ T1483] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 289.768040][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.994530][ T6161] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 290.152743][ T6161] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 290.224890][ T5611] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 290.372196][ T7405] loop2: detected capacity change from 0 to 512 [ 290.621519][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 290.777678][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 290.800416][ T7405] EXT4-fs (loop2): can't read group descriptor 0 [ 291.511412][ T6618] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 295.970309][ T7447] loop0: detected capacity change from 0 to 512 [ 296.062713][ T75] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.183134][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.229510][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.229578][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.230732][ T7447] EXT4-fs (loop0): orphan cleanup on readonly fs [ 296.231183][ T4341] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.237881][ T6526] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.260114][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.268864][ T7447] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.440: EA inode hash validation failed [ 296.273436][ T7447] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.440: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 296.273480][ T7447] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 296.274686][ T4341] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 296.282409][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 296.282432][ C0] EXT4-fs (loop0): initial error at time 1778546561: ext4_xattr_inode_update_ref:1037: inode 11 [ 296.282468][ C0] EXT4-fs (loop0): last error at time 1778546561: ext4_xattr_inode_update_ref:1037: inode 11 [ 296.312091][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.445329][ T7447] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.440: ea_inode dec ref err=-117 [ 296.445678][ T7447] EXT4-fs (loop0): 1 orphan inode deleted [ 296.448923][ T7447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 296.502371][ T6526] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.536757][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.538211][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.581353][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.585354][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.592196][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.593077][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 296.864652][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.927307][ T4341] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 296.927390][ T4341] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 297.025547][ T6532] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 297.179201][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.216337][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.245405][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.246689][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.247477][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.565764][ T7473] loop3: detected capacity change from 0 to 256 [ 297.588837][ T4341] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.596252][ T4341] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.598977][ T4341] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.599877][ T4341] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.603838][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.612427][ T75] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.637916][ T75] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.640401][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.646032][ T6526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.773998][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.775387][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.775422][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.775449][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.775483][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.775509][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.775533][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.775558][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.776832][ T6526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.778026][ T6526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.778831][ T6526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.779617][ T6526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.784359][ T6526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.820939][ T83] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.825779][ T83] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 297.836041][ T83] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 298.003149][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 298.005299][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 298.028638][ T5843] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 298.085845][ T1164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 298.139202][ T6526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 298.148361][ T6526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 299.370403][ T4922] Bluetooth: hci5: command tx timeout [ 301.505850][ T7483] loop2: detected capacity change from 0 to 512 [ 301.542827][ T4922] Bluetooth: hci5: command tx timeout [ 301.585664][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 301.763149][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 301.770592][ T7483] EXT4-fs (loop2): can't read group descriptor 0 [ 302.037534][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.053973][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.057257][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.059546][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.085190][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.099957][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.108958][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.132625][ T5843] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.157853][ T5843] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.216275][ T6618] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 302.350962][ T6526] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 302.351077][ T6526] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 302.436464][ T7487] loop0: detected capacity change from 0 to 2048 [ 302.439522][ T75] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.461365][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.466875][ T6161] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 302.467242][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.468319][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.470986][ T5843] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 302.518606][ T5611] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 302.595132][ T1483] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.597850][ T75] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.597898][ T75] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.633712][ T1164] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.634625][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.635414][ T1164] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.637823][ T1164] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.656356][ T1164] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.665505][ T1164] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.684385][ T1164] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.696139][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.710763][ T7489] loop2: detected capacity change from 0 to 1024 [ 302.713833][ T7489] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.715906][ T6161] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.716129][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.716175][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 302.716215][ T5843] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 302.716706][ T1483] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 302.717581][ T6161] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.729719][ T6161] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.749756][ T1483] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 302.774833][ T5843] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.906804][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.906861][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.941874][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.943294][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.946931][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.947710][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.948468][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.948590][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.948699][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.973151][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 302.998157][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 303.031458][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 303.034547][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 303.177861][ T7487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.194016][ T5843] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 303.209419][ T1164] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 303.382497][ T7489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 303.382672][ T7489] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.553293][ T1164] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 303.564075][ T75] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 303.611029][ T4922] Bluetooth: hci5: command tx timeout [ 303.653078][ T1164] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 303.671942][ T7489] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.450: bg 0: block 112: padding at end of block bitmap is not set [ 303.675514][ T1164] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 303.707702][ T7489] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 303.707740][ T7489] EXT4-fs (loop2): This should not happen!! Data will be lost [ 303.707740][ T7489] [ 303.707759][ T7489] EXT4-fs (loop2): Total free blocks count 0 [ 303.707775][ T7489] EXT4-fs (loop2): Free/Dirty block details [ 303.707830][ T7489] EXT4-fs (loop2): free_blocks=0 [ 303.707870][ T7489] EXT4-fs (loop2): dirty_blocks=64 [ 303.707885][ T7489] EXT4-fs (loop2): Block reservation details [ 303.707899][ T7489] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 303.960922][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.033878][ T5843] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 304.058967][ T1483] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 304.114206][ T5612] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 304.199360][ T5843] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 304.282657][ T5609] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 304.394261][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 304.456282][ T1483] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 304.487840][ T75] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 304.533398][ T5609] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 304.607060][ T7517] loop1: detected capacity change from 0 to 512 [ 304.628470][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 304.630098][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 304.640517][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 304.703555][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 304.707206][ T7517] FAT-fs (loop1): Directory bread(block 199916) failed [ 304.707255][ T7517] FAT-fs (loop1): Directory bread(block 199917) failed [ 304.707281][ T7517] FAT-fs (loop1): Directory bread(block 199918) failed [ 304.707307][ T7517] FAT-fs (loop1): Directory bread(block 199919) failed [ 304.707332][ T7517] FAT-fs (loop1): Directory bread(block 199920) failed [ 304.707357][ T7517] FAT-fs (loop1): Directory bread(block 199921) failed [ 304.707383][ T7517] FAT-fs (loop1): Directory bread(block 199922) failed [ 304.707407][ T7517] FAT-fs (loop1): Directory bread(block 199923) failed [ 304.833116][ T4341] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 304.930282][ T83] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 304.936638][ T83] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 304.956742][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 304.957555][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 304.961002][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 304.989009][ T83] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 305.011035][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 305.017493][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 305.046129][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 305.749471][ T4922] Bluetooth: hci5: command tx timeout [ 305.973698][ T7539] loop2: detected capacity change from 0 to 512 [ 306.024296][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 306.202989][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 306.229077][ T7539] EXT4-fs (loop2): can't read group descriptor 0 [ 306.816231][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 306.817477][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 306.818711][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 306.819472][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 306.820243][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 306.820987][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 306.821726][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 306.823382][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 306.824116][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 306.901130][ T6618] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 307.087044][ T1483] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 307.103479][ T5613] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 307.534284][ T7545] input: syz0 as /devices/virtual/input/input13 [ 307.885735][ T7465] wg1 speed is unknown, defaulting to 1000 [ 308.051960][ T7554] loop2: detected capacity change from 0 to 128 [ 308.084925][ T7554] vfat: Unexpected value for 'dos1xfloppy' [ 308.085401][ T7554] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 310.418621][ T7585] tipc: Started in network mode [ 310.418666][ T7585] tipc: Node identity 3aec88d87dc, cluster identity 4711 [ 310.540502][ T7585] tipc: Enabled bearer , priority 0 [ 310.662298][ T7583] tipc: Resetting bearer [ 310.681035][ T7589] syzkaller0: entered promiscuous mode [ 310.681059][ T7589] syzkaller0: entered allmulticast mode [ 310.800818][ T7581] tipc: Resetting bearer [ 310.951746][ T7581] tipc: Disabling bearer [ 311.050642][ T6012] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 311.217307][ T6012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.217344][ T6012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.217370][ T6012] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.217416][ T6012] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.217441][ T6012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.311562][ T6012] usb 1-1: config 0 descriptor?? [ 312.119504][ T6012] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x5 [ 312.119545][ T6012] plantronics 0003:047F:FFFF.0002: item fetching failed at offset 13/15 [ 312.121073][ T6012] plantronics 0003:047F:FFFF.0002: parse failed [ 312.121389][ T6012] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 312.340357][ T6012] usb 1-1: USB disconnect, device number 4 [ 313.978323][ T7637] input: syz0 as /devices/virtual/input/input14 [ 315.266148][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.267802][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.268115][ T7465] bridge_slave_0: entered allmulticast mode [ 315.279162][ T7465] bridge_slave_0: entered promiscuous mode [ 315.289922][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.293817][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.294105][ T7465] bridge_slave_1: entered allmulticast mode [ 315.303180][ T7465] bridge_slave_1: entered promiscuous mode [ 315.540114][ T7465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.571332][ T7465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.009516][ T7465] team0: Port device team_slave_0 added [ 316.039315][ T7465] team0: Port device team_slave_1 added [ 316.463796][ T7666] binder: BINDER_SET_CONTEXT_MGR already set [ 316.463814][ T7666] binder: 7665:7666 ioctl 4018620d 200000000040 returned -16 [ 317.099268][ T7674] loop0: detected capacity change from 0 to 512 [ 317.158386][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 317.175474][ T1483] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 317.175826][ T7674] EXT4-fs (loop0): can't read group descriptor 0 [ 317.932791][ T7674] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 317.982230][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.988811][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.769077][ T7465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.769097][ T7465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.769128][ T7465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.866703][ T7680] loop2: detected capacity change from 0 to 512 [ 318.869643][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 318.872404][ T6161] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 318.875094][ T7680] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 318.962168][ T7680] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 319.114608][ T7465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.114628][ T7465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.114661][ T7465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.240293][ T38] audit: type=1326 audit(1778546583.951:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.489" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92efe4cdd9 code=0x7ffc0000 [ 319.240659][ T38] audit: type=1326 audit(1778546583.971:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.489" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92efe4cdd9 code=0x7ffc0000 [ 321.432751][ T7465] hsr_slave_0: entered promiscuous mode [ 321.435235][ T7465] hsr_slave_1: entered promiscuous mode [ 321.437333][ T7465] debugfs: 'hsr0' already exists in 'hsr' [ 321.437359][ T7465] Cannot create hsr debugfs directory [ 321.972358][ T1164] bridge_slave_1: left allmulticast mode [ 321.972396][ T1164] bridge_slave_1: left promiscuous mode [ 321.972692][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.094311][ T1164] bridge_slave_0: left allmulticast mode [ 322.094349][ T1164] bridge_slave_0: left promiscuous mode [ 322.094632][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.268111][ T7718] binder: BINDER_SET_CONTEXT_MGR already set [ 322.268129][ T7718] binder: 7716:7718 ioctl 4018620d 200000000040 returned -16 [ 322.285267][ T7715] loop2: detected capacity change from 0 to 1024 [ 322.315664][ T50] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 322.316956][ T7715] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 322.316983][ T7715] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (40000) [ 322.367639][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 322.394958][ T50] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 322.397617][ T50] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 322.435004][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 322.438090][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 322.438853][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 322.445875][ T50] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 322.456878][ T50] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 322.481636][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 322.487665][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 322.522101][ T6618] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 325.991857][ T7735] loop0: detected capacity change from 0 to 512 [ 326.022341][ T5843] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 326.168578][ T161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 326.322117][ T7735] EXT4-fs (loop0): can't read group descriptor 0 [ 326.885974][ T1483] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 326.887065][ T1483] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.148969][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.149998][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.179292][ T6526] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.190560][ T5902] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.192138][ T6526] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.199759][ T6526] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.227145][ T6526] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.333412][ T6618] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 327.356406][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.496666][ T7739] loop0: detected capacity change from 0 to 256 [ 327.505804][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.506595][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.507275][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.507567][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.507769][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.508073][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.508815][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.509621][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.509932][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.510694][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.517949][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.518353][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.521061][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.521563][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.521814][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.522295][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.522535][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.522866][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.523142][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.523900][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.526884][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.527361][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.527619][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.527949][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.528182][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.549850][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.553486][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.553915][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.554195][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.554483][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.554687][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.554968][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.557977][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.558336][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.561325][ T5886] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.576762][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.577034][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.577456][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.577695][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.578036][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.578264][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.578535][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.578746][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.579081][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.580608][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.580971][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.581209][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.581637][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.583533][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.583882][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.584132][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.584517][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.584805][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.585166][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.587038][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.587373][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.587627][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.588830][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.589589][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.593059][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.593822][ T50] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.594061][ T7739] FAT-fs (loop0): Directory bread(block 64) failed [ 327.594091][ T7739] FAT-fs (loop0): Directory bread(block 65) failed [ 327.594194][ T7739] FAT-fs (loop0): Directory bread(block 66) failed [ 327.594220][ T7739] FAT-fs (loop0): Directory bread(block 67) failed [ 327.594322][ T7739] FAT-fs (loop0): Directory bread(block 68) failed [ 327.594347][ T7739] FAT-fs (loop0): Directory bread(block 69) failed [ 327.594449][ T7739] FAT-fs (loop0): Directory bread(block 70) failed [ 327.594474][ T7739] FAT-fs (loop0): Directory bread(block 71) failed [ 327.594582][ T7739] FAT-fs (loop0): Directory bread(block 72) failed [ 327.594607][ T7739] FAT-fs (loop0): Directory bread(block 73) failed [ 327.719248][ T5902] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 327.728650][ T83] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 328.277182][ T6161] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 328.767731][ T83] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 328.834557][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.039816][ T1164] bond0 (unregistering): Released all slaves [ 329.194111][ T7715] tipc: Started in network mode [ 329.194143][ T7715] tipc: Node identity 2d6572792c6e6f612e2e, cluster identity 4711 [ 330.384598][ T5612] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 330.384623][ T5612] FAT-fs (loop0): Filesystem has been set read-only [ 331.391474][ T1164] hsr_slave_0: left promiscuous mode [ 332.342312][ T1164] hsr_slave_1: left promiscuous mode [ 332.343437][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.185263][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.082175][ T7788] netlink: 'syz.1.509': attribute type 10 has an invalid length. [ 334.082200][ T7788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.509'. [ 334.575556][ T7790] loop3: detected capacity change from 0 to 512 [ 334.605626][ T83] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 335.044998][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 335.665300][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 335.728621][ T83] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 335.729106][ T7790] EXT4-fs (loop3): can't read group descriptor 0 [ 335.824720][ T1494] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 335.825594][ T1494] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 335.826886][ T1494] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 335.828636][ T1494] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 335.829422][ T1494] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 335.830283][ T1494] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 335.831056][ T1494] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 335.832706][ T1494] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 335.833498][ T1494] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 335.852747][ T6618] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 336.190776][ T7788] team0: Port device geneve1 added [ 336.734862][ T7800] loop2: detected capacity change from 0 to 2048 [ 336.856909][ T161] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 336.857845][ T1494] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 336.858125][ T7800] Dev loop2: RDB in block 1 has bad checksum [ 336.858591][ T1494] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 336.893642][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 336.894765][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 336.895438][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 336.896104][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 336.896812][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 336.897580][ T161] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 336.949861][ T1494] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 336.958697][ T1494] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 336.973194][ T1494] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 336.991775][ T1494] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.047636][ T5268] 8021q: adding VLAN 0 to HW filter on device eth5 [ 337.112828][ T5609] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 337.173277][ T7802] loop2: detected capacity change from 0 to 256 [ 337.221559][ T5902] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 337.278718][ T5886] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.280853][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.280904][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.280938][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.280964][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.280987][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.281010][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.281030][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.377091][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.377162][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.378527][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.379099][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.379776][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.380144][ T5902] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 337.387311][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.397502][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.412273][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.431596][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.445576][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.467951][ T7804] loop3: detected capacity change from 0 to 1024 [ 337.473763][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 337.522527][ T7802] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 337.522553][ T7802] FAT-fs (loop2): Filesystem has been set read-only [ 337.547842][ T1494] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.572883][ T7798] loop1: detected capacity change from 0 to 40427 [ 337.574059][ T7798] f2fs: Unknown parameter 'whint_mode' [ 337.574479][ T7798] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 337.721799][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.722982][ T83] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.723467][ T83] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.729281][ T5886] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.729341][ T5886] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.729369][ T5886] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.779262][ T75] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.793551][ T12] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 337.815836][ T75] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.819279][ T75] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.820036][ T75] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.825896][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.853835][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.853890][ T5843] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.889377][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.908865][ T5902] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.909049][ T5902] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 337.932154][ T5843] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 337.947520][ T4341] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.958362][ T4341] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 337.983554][ T7804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.043830][ T12] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 338.129289][ T75] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 338.170717][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 338.172023][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 338.172746][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 338.173434][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 338.174137][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 338.174268][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 338.174321][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 338.174363][ T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 338.257655][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 338.724234][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 338.765239][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 338.918860][ T6532] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 338.976740][ T5886] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 338.976820][ T5886] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 338.976868][ T5886] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 338.976898][ T5886] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 339.014156][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.100897][ T5902] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 339.177237][ T83] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 339.234498][ T5611] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 340.643225][ T7838] netlink: 'syz.3.522': attribute type 10 has an invalid length. [ 340.643324][ T7838] netlink: 40 bytes leftover after parsing attributes in process `syz.3.522'. [ 341.500843][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.553520][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.568470][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.580140][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.586551][ T7838] team0: Port device geneve1 added [ 341.631080][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.746019][ T83] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.809324][ T83] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.809758][ T83] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.831425][ T83] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.946442][ T7844] loop3: detected capacity change from 0 to 512 [ 341.958580][ T5902] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 341.976527][ T5886] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.002565][ T83] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.002611][ T83] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.002611][ T4341] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.004466][ T4341] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.019994][ T7844] EXT4-fs (loop3): orphan cleanup on readonly fs [ 342.027056][ T5886] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.027574][ T5886] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.030425][ T5886] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.030702][ T7844] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.523: corrupted in-inode xattr: bad e_name length [ 342.030737][ T7844] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 342.030908][ T5886] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 342.031328][ T7844] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.523: couldn't read orphan inode 15 (err -117) [ 342.031360][ T7844] loop3: lost filesystem error report for type 5 error -117 [ 342.031490][ T5886] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 342.037736][ T75] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.061792][ T75] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.073073][ T75] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.085860][ T5902] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.144514][ T5886] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.168237][ T75] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 342.203206][ T7844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 342.626357][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.674666][ T5611] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 343.907616][ T5624] Bluetooth: hci0: command tx timeout [ 343.927398][ T1164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.428530][ T7465] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.782230][ T7465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.788553][ T7465] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.849938][ T7465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.868531][ T7465] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.913893][ T7465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.335779][ T1164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.584254][ T7465] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 345.645051][ T7465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.692047][ T7839] wg1 speed is unknown, defaulting to 1000 [ 346.153959][ T5624] Bluetooth: hci0: command tx timeout [ 346.285881][ T7915] netlink: 'syz.1.531': attribute type 10 has an invalid length. [ 346.285927][ T7915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.531'. [ 347.773088][ T1164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.170881][ T5624] Bluetooth: hci0: command tx timeout [ 348.434922][ T1164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.536896][ T7922] wg1 speed is unknown, defaulting to 1000 [ 349.707312][ T7943] loop1: detected capacity change from 0 to 256 [ 349.709671][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 350.660530][ T83] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 350.670863][ T50] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 350.675161][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 350.678419][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 350.678573][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 350.679405][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 350.683522][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 350.791621][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 350.792589][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 350.794444][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 350.795211][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 350.796451][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 350.856544][ T5624] Bluetooth: hci0: command tx timeout [ 351.110991][ T1483] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 351.135575][ T5613] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 351.270161][ T7948] loop2: detected capacity change from 0 to 4096 [ 351.271593][ T7948] EXT4-fs: inline encryption not supported [ 351.271615][ T7948] EXT4-fs: Ignoring removed mblk_io_submit option [ 351.271661][ T7948] EXT4-fs: Ignoring removed bh option [ 351.280053][ T1494] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 351.311008][ T1494] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 351.316347][ T1494] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.717036][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.719642][ T7948] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 352.720073][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.745182][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.763434][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.774348][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.812798][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.831073][ T1494] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.836888][ T1494] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.850455][ T1494] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.869405][ T50] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.869452][ T50] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.871495][ T1494] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 352.871589][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.879556][ T7948] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 352.879705][ T7948] System zones: 0-5 [ 352.882239][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.883152][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.883920][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.884655][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.887921][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.888720][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.893108][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.899374][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.900145][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.901014][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.901761][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.902491][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.904055][ T4341] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.905842][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.906596][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.914075][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 352.965972][ T1494] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 353.023649][ T5902] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 353.116257][ T7948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.235517][ T1483] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 354.342801][ T83] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 356.856945][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.895155][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.923422][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.924735][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.927833][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.073808][ T1483] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 357.073897][ T1483] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 357.073956][ T1483] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 357.073993][ T1483] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 357.074029][ T1483] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 357.141555][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.227977][ T5902] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 357.309757][ T5609] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 357.790722][ T7968] loop1: detected capacity change from 0 to 40427 [ 357.825229][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 357.826059][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 357.826907][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 357.827637][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 357.828376][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 357.829117][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 357.886539][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 357.911290][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 357.912095][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 357.912858][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 357.918606][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 357.978585][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 357.990930][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.002893][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.013399][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.030726][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.040258][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.051275][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.105807][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.106677][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.127152][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.129578][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.145849][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.146758][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.147571][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.148394][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.149233][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.188978][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.202782][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.210907][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.228340][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.238888][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.239918][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.265273][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.265323][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.265358][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.296449][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.323943][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.363114][ T7968] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 358.363148][ T7968] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 358.497882][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.512938][ T1494] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.513665][ T1494] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.536271][ T1494] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.537144][ T1494] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.540090][ T1494] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.577792][ T1494] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.590360][ T1494] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.597242][ T1494] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.598700][ T1494] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.599449][ T1494] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.634356][ T83] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.635180][ T83] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.639026][ T83] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.673160][ T83] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.722886][ T1494] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.726554][ T1494] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.726923][ T1494] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.757039][ T83] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.757881][ T83] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.759136][ T83] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.844499][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 358.999529][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 359.131724][ T5624] Bluetooth: hci2: command tx timeout [ 359.271562][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 359.303427][ T7968] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 359.342102][ T1483] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 359.370350][ T1483] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 359.375135][ T7968] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 359.375536][ T7968] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 359.429949][ T7968] syz.1.545: attempt to access beyond end of device [ 359.429949][ T7968] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 360.099642][ T7839] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.100083][ T7839] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.119259][ T7839] bridge_slave_0: entered allmulticast mode [ 360.141243][ T7839] bridge_slave_0: entered promiscuous mode [ 360.163862][ T7839] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.166069][ T7839] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.166406][ T7839] bridge_slave_1: entered allmulticast mode [ 360.201918][ T7839] bridge_slave_1: entered promiscuous mode [ 360.442485][ T1164] bridge_slave_1: left allmulticast mode [ 360.442523][ T1164] bridge_slave_1: left promiscuous mode [ 360.445276][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.446329][ T5613] syz-executor: attempt to access beyond end of device [ 360.446329][ T5613] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 360.506954][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 360.507000][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 360.507025][ T5613] Call Trace: [ 360.507034][ T5613] [ 360.507045][ T5613] dump_stack_lvl+0xe8/0x150 [ 360.507082][ T5613] f2fs_stop_checkpoint+0x383/0x540 [ 360.507118][ T5613] f2fs_write_end_io+0x1274/0x1740 [ 360.507185][ T5613] __submit_merged_bio+0x256/0x6a0 [ 360.507222][ T5613] __submit_merged_write_cond+0x3c9/0x4e0 [ 360.507261][ T5613] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 360.507314][ T5613] f2fs_write_data_pages+0x287e/0x34f0 [ 360.507345][ T5613] ? preempt_schedule_common+0x82/0xd0 [ 360.507369][ T5613] ? preempt_schedule_thunk+0x16/0x40 [ 360.507426][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 360.507472][ T5613] ? call_rcu+0x644/0x890 [ 360.507499][ T5613] ? lockdep_hardirqs_on+0x7a/0x110 [ 360.507554][ T5613] ? __lock_acquire+0x6b5/0x2d10 [ 360.507581][ T5613] ? __lock_acquire+0x6b5/0x2d10 [ 360.507627][ T5613] ? do_raw_spin_lock+0x12b/0x2f0 [ 360.507673][ T5613] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 360.507701][ T5613] ? lockdep_hardirqs_on+0x7a/0x110 [ 360.507727][ T5613] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 360.507756][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 360.507789][ T5613] do_writepages+0x32e/0x550 [ 360.507819][ T5613] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 360.507856][ T5613] ? rt_spin_unlock+0x14f/0x200 [ 360.507901][ T5613] filemap_fdatawrite+0x1ec/0x2f0 [ 360.507934][ T5613] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 360.507962][ T5613] ? __lock_acquire+0x6b5/0x2d10 [ 360.508028][ T5613] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 360.508073][ T5613] ? rt_spin_unlock+0x160/0x200 [ 360.508129][ T5613] f2fs_sync_dirty_inodes+0x30e/0x830 [ 360.508181][ T5613] f2fs_write_checkpoint+0x9df/0x26a0 [ 360.508254][ T5613] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 360.508352][ T5613] kill_f2fs_super+0x314/0x730 [ 360.508396][ T5613] ? __pfx_kill_f2fs_super+0x10/0x10 [ 360.508446][ T5613] ? lockdep_hardirqs_on+0x7a/0x110 [ 360.508489][ T5613] deactivate_locked_super+0xbc/0x130 [ 360.508524][ T5613] cleanup_mnt+0x437/0x4d0 [ 360.508558][ T5613] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.508590][ T5613] task_work_run+0x1d9/0x270 [ 360.508622][ T5613] ? __pfx_task_work_run+0x10/0x10 [ 360.508662][ T5613] exit_to_user_mode_loop+0xf3/0x4d0 [ 360.508685][ T5613] ? rcu_is_watching+0x15/0xb0 [ 360.508714][ T5613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.508740][ T5613] do_syscall_64+0x33e/0xf80 [ 360.508771][ T5613] ? clear_bhb_loop+0x40/0x90 [ 360.508799][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.508824][ T5613] RIP: 0033:0x7f563251e017 [ 360.508855][ T5613] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 360.508876][ T5613] RSP: 002b:00007ffde02ccec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 360.508901][ T5613] RAX: 0000000000000000 RBX: 00007f56325b2120 RCX: 00007f563251e017 [ 360.508916][ T5613] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde02ccf80 [ 360.508930][ T5613] RBP: 00007ffde02ccf80 R08: 00007ffde02cdf80 R09: 00000000ffffffff [ 360.508945][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde02ce010 [ 360.508959][ T5613] R13: 00007f56325b2120 R14: 00000000000571ce R15: 00007ffde02ce050 [ 360.509025][ T5613] [ 360.539790][ T5613] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 360.734918][ T50] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 360.837414][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 360.948239][ T1164] bridge_slave_0: left allmulticast mode [ 361.016279][ T1164] bridge_slave_0: left promiscuous mode [ 361.016594][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.210311][ T5624] Bluetooth: hci2: command tx timeout [ 361.706598][ T5613] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 362.346454][ T1164] team0: Port device geneve1 removed [ 362.481035][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.541172][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.565589][ T1164] bond0 (unregistering): Released all slaves [ 363.087685][ T8011] loop1: detected capacity change from 0 to 512 [ 363.088641][ T8011] ext4: Unknown parameter 'nouser_xattr' [ 363.089024][ T8011] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 363.290455][ T5624] Bluetooth: hci2: command tx timeout [ 363.446316][ T5268] 8021q: adding VLAN 0 to HW filter on device eth5 [ 363.594056][ T8013] loop1: detected capacity change from 0 to 256 [ 363.670775][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 363.705241][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 363.735588][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 363.751382][ T161] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 363.984636][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 364.447558][ T83] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 364.591034][ T4922] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.636801][ T4922] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.639979][ T4922] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.657322][ T4922] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.678549][ T4922] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.374434][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 365.375308][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 365.376030][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 365.484643][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 365.507809][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 365.531327][ T161] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 365.556359][ T5624] Bluetooth: hci2: command tx timeout [ 365.707427][ T8019] loop2: detected capacity change from 0 to 128 [ 365.740441][ T5886] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 365.771795][ T8019] vfat: Unexpected value for 'dos1xfloppy' [ 365.774083][ T8019] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 366.060614][ T4341] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 366.061185][ T4341] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 366.064072][ T4341] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 366.089105][ T5613] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 367.356641][ T5624] Bluetooth: hci5: command tx timeout [ 367.500856][ T8024] netlink: 72 bytes leftover after parsing attributes in process `syz.1.552'. [ 367.630712][ T8028] netlink: 'syz.1.552': attribute type 13 has an invalid length. [ 367.630747][ T8028] netlink: 'syz.1.552': attribute type 17 has an invalid length. [ 369.450801][ T5624] Bluetooth: hci5: command tx timeout [ 370.041583][ T7839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.809549][ T7839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.530475][ T5624] Bluetooth: hci5: command tx timeout [ 373.046921][ T5941] wg1 speed is unknown, defaulting to 1000 [ 373.174540][ T7965] wg1 speed is unknown, defaulting to 1000 [ 373.620800][ T5624] Bluetooth: hci5: command tx timeout [ 373.727249][ T7839] team0: Port device team_slave_0 added [ 373.845428][ T7839] team0: Port device team_slave_1 added [ 374.210335][ T1164] hsr_slave_0: left promiscuous mode [ 374.267721][ T1164] hsr_slave_1: left promiscuous mode [ 374.268736][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.268759][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.309525][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.309575][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.572929][ T8057] loop1: detected capacity change from 0 to 40427 [ 375.575131][ T8057] F2FS-fs: inline encryption not supported [ 375.615031][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.628382][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.640505][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.657264][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.666215][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.668478][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.687100][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.708339][ T5886] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 375.734886][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.736478][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.737212][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.739155][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.739880][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.779700][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.788815][ T8057] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 375.789355][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.808556][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.808712][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.809550][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.833919][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.835204][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.835926][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.837650][ T8057] F2FS-fs (loop1): invalid crc value [ 375.837919][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.838214][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.838338][ T8057] F2FS-fs (loop1): invalid crc value [ 375.838370][ T8057] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 375.838427][ T8057] INFO: trying to register non-static key. [ 375.838437][ T8057] The code is fine but needs lockdep annotation, or maybe [ 375.838447][ T8057] you didn't initialize this object before use? [ 375.838457][ T8057] turning off the locking correctness validator. [ 375.838482][ T8057] CPU: 0 UID: 0 PID: 8057 Comm: syz.1.560 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 375.838510][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.838530][ T8057] Call Trace: [ 375.838538][ T8057] [ 375.838548][ T8057] dump_stack_lvl+0xe8/0x150 [ 375.838584][ T8057] assign_lock_key+0x133/0x150 [ 375.838614][ T8057] register_lock_class+0xcc/0x2e0 [ 375.838641][ T8057] __lock_acquire+0xad/0x2d10 [ 375.838670][ T8057] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 375.838694][ T8057] ? __lock_acquire+0x6b5/0x2d10 [ 375.838722][ T8057] ? __lock_acquire+0x6b5/0x2d10 [ 375.838749][ T8057] ? f2fs_exist_written_data+0x53/0x90 [ 375.838784][ T8057] lock_acquire+0x106/0x350 [ 375.838808][ T8057] ? f2fs_exist_written_data+0x53/0x90 [ 375.838844][ T8057] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 375.838870][ T8057] rt_spin_lock+0x83/0x400 [ 375.838905][ T8057] ? f2fs_exist_written_data+0x53/0x90 [ 375.838948][ T8057] ? __pfx_rt_spin_lock+0x10/0x10 [ 375.838983][ T8057] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 375.839013][ T8057] ? preempt_count_add+0x91/0x190 [ 375.839048][ T8057] f2fs_exist_written_data+0x53/0x90 [ 375.839082][ T8057] f2fs_drop_inode+0xda/0xbf0 [ 375.839110][ T8057] iput+0x651/0xe80 [ 375.839144][ T8057] f2fs_fill_super+0x6047/0x7850 [ 375.839204][ T8057] get_tree_bdev_flags+0x431/0x4f0 [ 375.839241][ T8057] ? __pfx_f2fs_fill_super+0x10/0x10 [ 375.839277][ T8057] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 375.839318][ T8057] vfs_get_tree+0x92/0x2a0 [ 375.839354][ T8057] do_new_mount+0x341/0xd30 [ 375.839380][ T8057] ? apparmor_capable+0x126/0x170 [ 375.839409][ T8057] ? __pfx_do_new_mount+0x10/0x10 [ 375.839436][ T8057] ? ns_capable+0x89/0xe0 [ 375.839472][ T8057] ? user_path_at+0xd4/0x160 [ 375.839506][ T8057] ? user_path_at+0xd4/0x160 [ 375.839539][ T8057] __se_sys_mount+0x31d/0x420 [ 375.839569][ T8057] ? __pfx___se_sys_mount+0x10/0x10 [ 375.839600][ T8057] ? __x64_sys_mount+0x20/0xc0 [ 375.839628][ T8057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.839651][ T8057] do_syscall_64+0x15f/0xf80 [ 375.839679][ T8057] ? trace_irq_disable+0x3b/0x140 [ 375.839714][ T8057] ? clear_bhb_loop+0x40/0x90 [ 375.839740][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.839763][ T8057] RIP: 0033:0x7f563251e04a [ 375.839784][ T8057] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.839805][ T8057] RSP: 002b:00007f563076de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 375.839830][ T8057] RAX: ffffffffffffffda RBX: 00007f563076dee0 RCX: 00007f563251e04a [ 375.839849][ T8057] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f563076dea0 [ 375.839866][ T8057] RBP: 0000200000000040 R08: 00007f563076dee0 R09: 0000000000200400 [ 375.839883][ T8057] R10: 0000000000200400 R11: 0000000000000246 R12: 0000200000000000 [ 375.839899][ T8057] R13: 00007f563076dea0 R14: 0000000000005548 R15: 0000200000000080 [ 375.839930][ T8057] [ 375.924729][ T5886] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 375.966207][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.030366][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.083432][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.090267][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.148025][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.234129][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.276880][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.278117][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.278714][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.279225][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.279895][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.280125][ T4341] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.328053][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.328121][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.328698][ T75] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 376.834651][ T1164] veth1_macvtap: left promiscuous mode [ 376.834714][ T1164] veth0_macvtap: left promiscuous mode [ 376.834911][ T1164] veth1_vlan: left promiscuous mode [ 376.835024][ T1164] veth0_vlan: left promiscuous mode [ 376.863576][ T8057] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 377.400936][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 377.420718][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 377.627270][ T7839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.627284][ T7839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.627306][ T7839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.679089][ T7839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.679102][ T7839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.679124][ T7839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.679638][ T8014] wg1 speed is unknown, defaulting to 1000 [ 377.841529][ T7839] hsr_slave_0: entered promiscuous mode [ 377.843077][ T7839] hsr_slave_1: entered promiscuous mode [ 378.421614][ T5268] 8021q: adding VLAN 0 to HW filter on device eth6 [ 378.611476][ T7839] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 378.653369][ T7839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.655040][ T7965] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.655406][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.655591][ T7965] bridge_slave_0: entered allmulticast mode [ 378.657342][ T7965] bridge_slave_0: entered promiscuous mode [ 378.716627][ T7839] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.734525][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.734590][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.754396][ T7839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.755489][ T7965] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.755755][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.755964][ T7965] bridge_slave_1: entered allmulticast mode [ 378.757707][ T7965] bridge_slave_1: entered promiscuous mode [ 378.798328][ T7839] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 378.833372][ T7839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.858078][ T7839] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 378.895227][ T7839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.933389][ T7965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.958642][ T7965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.959130][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.959335][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.959496][ T8014] bridge_slave_0: entered allmulticast mode [ 378.964818][ T8014] bridge_slave_0: entered promiscuous mode [ 379.006397][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.006627][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.006888][ T8014] bridge_slave_1: entered allmulticast mode [ 379.008557][ T8014] bridge_slave_1: entered promiscuous mode [ 379.179008][ T7965] team0: Port device team_slave_0 added [ 379.209946][ T7965] team0: Port device team_slave_1 added [ 379.228197][ T8014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.257530][ T8014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.492521][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.492540][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.492573][ T7965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.549498][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.549511][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.549532][ T7965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.571743][ T8014] team0: Port device team_slave_0 added [ 379.635763][ T8014] team0: Port device team_slave_1 added [ 379.692464][ T5268] 8021q: adding VLAN 0 to HW filter on device eth7 [ 379.832108][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.832122][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.832144][ T8014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.072461][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.072476][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.072557][ T8014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.077505][ T7965] hsr_slave_0: entered promiscuous mode [ 380.078840][ T7965] hsr_slave_1: entered promiscuous mode [ 380.079968][ T7965] debugfs: 'hsr0' already exists in 'hsr' [ 380.079981][ T7965] Cannot create hsr debugfs directory [ 380.365717][ T8014] hsr_slave_0: entered promiscuous mode [ 380.366937][ T8014] hsr_slave_1: entered promiscuous mode [ 380.367997][ T8014] debugfs: 'hsr0' already exists in 'hsr' [ 380.368011][ T8014] Cannot create hsr debugfs directory [ 380.860512][ T12] bridge_slave_1: left allmulticast mode [ 380.860535][ T12] bridge_slave_1: left promiscuous mode [ 380.860681][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.941057][ T12] bridge_slave_0: left allmulticast mode [ 380.941078][ T12] bridge_slave_0: left promiscuous mode [ 380.941204][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.251505][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.351178][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.411352][ T12] bond0 (unregistering): Released all slaves [ 381.603235][ T5268] 8021q: adding VLAN 0 to HW filter on device eth8 [ 381.614601][ T7839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.717977][ T7839] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.732743][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.732814][ T1483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.756499][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.756565][ T1483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.921742][ T12] hsr_slave_0: left promiscuous mode [ 381.960279][ T12] hsr_slave_1: left promiscuous mode [ 381.960890][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.001016][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.331854][ T12] team0 (unregistering): Port device team_slave_1 removed [ 382.371637][ T12] team0 (unregistering): Port device team_slave_0 removed [ 382.542895][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 383.076779][ T8014] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 383.117032][ T8014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.126034][ T8014] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 383.158907][ T8014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.168906][ T8014] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 383.193633][ T8014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.217167][ T8014] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 383.258204][ T8014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.335285][ T7839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.382145][ T7965] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 383.423198][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.426380][ T7965] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 383.459157][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.479709][ T7965] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 383.517083][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.525612][ T7965] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 383.557292][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.756305][ T8014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.819057][ T8014] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.844641][ T1494] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.844764][ T1494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.865668][ T7965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.878691][ T7839] veth0_vlan: entered promiscuous mode [ 383.894462][ T1494] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.894574][ T1494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.935241][ T7839] veth1_vlan: entered promiscuous mode [ 383.948347][ T7965] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.978290][ T1494] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.978386][ T1494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.008940][ T1494] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.009033][ T1494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.076991][ T7839] veth0_macvtap: entered promiscuous mode [ 384.107731][ T7839] veth1_macvtap: entered promiscuous mode [ 384.196754][ T7839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.225150][ T7839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.263473][ T1494] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.264603][ T1494] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.277529][ T1494] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.280813][ T1494] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.483279][ T7839] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 384.534139][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.534161][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.555831][ T7839] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 384.637704][ T1483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.637726][ T1483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.826657][ T7965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.932572][ T8014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.153598][ T7965] veth0_vlan: entered promiscuous mode [ 385.171812][ T7965] veth1_vlan: entered promiscuous mode [ 385.244514][ T7965] veth0_macvtap: entered promiscuous mode [ 385.264104][ T7965] veth1_macvtap: entered promiscuous mode [ 385.273297][ T8014] veth0_vlan: entered promiscuous mode [ 385.298688][ T8014] veth1_vlan: entered promiscuous mode [ 385.316849][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.341482][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.361627][ T5886] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.361790][ T5886] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.361827][ T5886] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.361863][ T5886] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.452859][ T8014] veth0_macvtap: entered promiscuous mode [ 385.509370][ T8014] veth1_macvtap: entered promiscuous mode [ 385.557933][ T7965] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 385.596591][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.598509][ T1483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.598530][ T1483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.626672][ T7965] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 385.646667][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.676773][ T4341] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.677974][ T1483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.678024][ T1483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.679093][ T4341] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.695895][ T4341] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.716296][ T4341] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.866361][ T8014] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 385.905455][ T5902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50