last executing test programs: 31.197376384s ago: executing program 0 (id=1329): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$incfs_metadata(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0), &(0x7f0000001800)="6fc7612750e2de413ceff05162fdf37cc15289e0b292308c85c7d2accbe401c5217332030662263a62a97ca3291e32491ada5fd3237be307cf", 0xfffe, 0x0) chdir(&(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) 30.400970585s ago: executing program 0 (id=1333): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@datasec={0x6, 0x1, 0x0, 0xf, 0x2, [{0x1}], "da2a"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "759f"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000700)=""/164, 0x48, 0xa4, 0xa}, 0x20) 29.861562102s ago: executing program 0 (id=1336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x44, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x44}}, 0x0) 27.451909594s ago: executing program 2 (id=1351): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x54}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 27.276787718s ago: executing program 2 (id=1353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 27.101112465s ago: executing program 2 (id=1354): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1f, 0xc3, 0x55, 0x10, 0x5e1, 0x408, 0x5931, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfb, 0x90}}]}}]}}, 0x0) getpid() r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000140)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020}, 0x2020) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) 25.96203051s ago: executing program 4 (id=1358): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) futex(&(0x7f0000002500), 0x6, 0x0, &(0x7f0000002540)={0x0, 0x989680}, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000540)) sendmsg$AUDIT_SET(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8011}, 0xc0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x40101288, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d3ca3f27f039ac8a0ca16c313c5b3922c65951dd4e176e8d9e3d9903b5bb3a080be882f0a2335f2dfa977e5bbaac757bff3fa0ed20da6912cdc5bd275503c740", "864dc6211039cc3f1619c91c7009a5fc5a82ac917f5739c1bf8cb0af9acafccee7bcf447eb0369500241fc8f30ac70a5accb9acc1ca00bd9305a084a0de680b8", "1243fb1888261de6dbc37be3cd137e587a618c1668606bf2bb7cdc9481834d6d"}}) sendto$isdn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000080)=""/17, 0x11, 0x0, 0x0, 0x6}}, 0x47) write$UHID_DESTROY(r3, &(0x7f0000000200), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x0, 0x130, 0x26010000, 0x288, 0x130, 0x3a0, 0x220, 0x220, 0x3a0, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x160, 0x288, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x4}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @private}, @mcast1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:fsadm_log_t:s0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 24.093334754s ago: executing program 4 (id=1361): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x113000, 0x0) pidfd_getfd(r1, r0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x2000010, &(0x7f0000000f40)={[{@uid}, {@uid_ignore}, {@utf8}, {@anchor={'anchor', 0x3d, 0x1}}, {}, {@shortad}, {@gid}, {@umask}, {@gid_ignore}, {@noadinicb}, {@undelete}, {}, {@lastblock={'lastblock', 0x3d, 0x1}}, {@uid_ignore}, {@nostrict}]}, 0x1, 0xc43, &(0x7f0000000200)="$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") r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000000)) ioctl$sock_proto_private(r2, 0x8922, &(0x7f0000000240)="7bc0f5bb3a") write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040041e1d113c812e5d601adda05c7b5d27c9"}) r4 = syz_open_pts(r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r8}, {r7}], 0x2, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r9 = dup3(r4, r0, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "58ae9f07d94eb7c5b06135beeeddcdc2424a6a"}) 23.349129546s ago: executing program 2 (id=1362): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$incfs_metadata(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0), &(0x7f0000001800)="6fc7612750e2de413ceff05162fdf37cc15289e0b292308c85c7d2accbe401c5217332030662263a62a97ca3291e32491ada5fd3237be307cf", 0xfffe, 0x0) chdir(&(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) 22.951937942s ago: executing program 2 (id=1363): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}, {0x20, '#! =t\xe0,R\x17\xd3\xb6\xd6\xb8\xec\x9f\x7f\xf0\x94\xa5\xa4\xa7\x92\x1c\xbf\xab\x8a\xe7\xa4\f\xbe\x0e\x19:ps\x12:\xd9B\xde\xe9\x1c\xd1\xfb\xc5\x87%\xb4\xbf+m~\xc5c\x85`<\xea\xac\x88>\xf5\x17\x945G\xb5\xa72z\xd3f%O\x9e\xcf\xc5\xdf\xe3 0#\x01=\xe0\n\xd2y\xf2\xa6\xd8\x97\x02\x00\x00\x00\x00\x00\x00\x00\xb8\xf0\xf5_\xbcl5\x19\xf6\xe3\\\xa4U\xa5\x86\x1dxW\xc4\x0e\xed\xaa\x89m\xb3\xa0\xf4%F\x0ebM\xa74\xcd\xea\xbb\xc1\xcb\x1f\xedE4\\\xcb\xae\x95\xdf\x14\x03\x81|gSTW\xddc\x125\b|\xce\xcen$\xc8'}, {0x20, '\x00'}, {}, {0x20, '+\xcc[-%\xfe$%\xdb]'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0xcd) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@int, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x80000}]}, @var]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x75}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x40090}, 0x4) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001c00)=ANY=[@ANYBLOB="c85e0400000000000000130000", @ANYRES16=r8, @ANYBLOB="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"], 0x1370}, 0x1, 0x0, 0x0, 0x800}, 0x20000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$inet(0x2, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000a40)={@local, @random="bf7d132b5a64", @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x78, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x45c}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) setsockopt$inet_int(r10, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000780)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x7, 0x8c, &(0x7f0000000ac0)=""/140}, 0x90) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000a80)=ANY=[@ANYRES8=r6], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0xb026e000) 22.177982811s ago: executing program 4 (id=1365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x58dc, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r0, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)={[{@fat=@codepage={'codepage', 0x3d, '861'}}, {@fat=@nfs}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@check_normal}, {@nodots}, {@dots}, {@fat=@check_normal}, {@fat=@nfs}, {@nodots}, {@fat=@nocase}, {}, {@dots}, {@nodots}, {}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@nocase}, {@dots}]}, 0x0, 0x1f1, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x5380, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000bc0)={@rand_addr=0x64010100, @local, r3}, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "d2c4924d08b1e22900000000000000f3f70000000400", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000002c0)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"fd0d1af889b4ea07001900005e99e47ac49e4906eddf9edd00004000000029e9", r7, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000300)=0x1f) poll(&(0x7f0000000080)=[{r8}], 0x1, 0x0) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000180)=0x8) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007"], 0xd) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000a40)={@loopback, r3}, 0x14) r10 = fcntl$dupfd(r1, 0x0, r1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x528, 0xffffffff, 0x0, 0x328, 0x108, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff, 0x0, 0xff], [0x0, 0xffffffff, 0xff000000], 'sit0\x00', 'pimreg\x00', {0xff}, {0xff}, 0x5e, 0x6, 0x2, 0x52}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x5, {0xe6ae}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0xfffd, 0x2}}}, {{@uncond, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'wlan1\x00', {0xffff, 0x1, 0x2c, 0x0, 0x3f, 0x3, 0x3, 0x8, 0x20}, {0x3f}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x0, 0x20, 0x2}}, @common=@frag={{0x30}, {[0x1, 0x401], 0x3, 0x1b, 0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x1, 0x460}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000b80)=@urb_type_bulk={0x3, {0xb, 0x1}, 0x800, 0x66, &(0x7f0000000ac0)="7ffc2286d8e22691b5b23726ad31e886384140b24c4fa754fa36428215b3966bf6cf2fc083a6dd026d884354509456cc99d911b2f895d9a452a141e88c800dfa16f975dd764761359a29eed1067e1ab1acbb771c886fb5d406410a000000000000d5eb517112bde5e912ca378d8990bffa48d20511926f09255464723a7904f9ac4362", 0x83, 0x6, 0xffffffc0, 0x3, 0x800, 0x2, &(0x7f0000001b80)="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"}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000a80), 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 21.750481832s ago: executing program 2 (id=1369): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="0986195187a9708f5f24dc2656e9523ac2b614c26365bbea36f61f477a738ef35f3bab9a232be036e6c88da64b0dc6c96e86e0a8018d5527", 0x38}], 0x1}}], 0x1, 0x0) 21.439566384s ago: executing program 4 (id=1374): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 21.113865392s ago: executing program 4 (id=1376): r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_io_uring_setup(0x60f2, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r4, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0xdf, &(0x7f0000000040), &(0x7f0000000080)=0x4) shutdown(r4, 0x1) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0xfffffffffffffe99, 0x4}]}}}]}, 0x90}}, 0x0) 20.584265122s ago: executing program 4 (id=1378): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x0, 0x0, 0xfd}) 6.301365672s ago: executing program 1 (id=1414): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1f, 0xc3, 0x55, 0x10, 0x5e1, 0x408, 0x5931, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfb, 0x90}}]}}]}}, 0x0) getpid() r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000140)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020}, 0x2020) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) 3.195041475s ago: executing program 1 (id=1416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x44, 0x31, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x44}}, 0x0) 2.995078214s ago: executing program 1 (id=1417): socket$inet(0x2, 0x0, 0x84) syz_io_uring_setup(0x73f8, 0x0, &(0x7f0000000100), &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x100c009, &(0x7f0000000880)=ANY=[@ANYBLOB='iocharset=iso8859-14,iocharset=cp936,rodir,uni_xlate=1,rodir,rodir,utf8=0,nfs,uni_xlate=1,iocharset=iso8859-9,uni_xlate=0,shortname=lower,shortname=mixed,shortname=lower,shortname=mixed,shortname=lower,fmask=00000000000000020000005,uid=', @ANYRESDEC=0x0, @ANYBLOB="428fb61a87902da848"], 0x1, 0x36b, &(0x7f0000002e00)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/273, 0x111) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = io_uring_setup(0x2c49, &(0x7f0000002240)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r0], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1) 2.08956592s ago: executing program 3 (id=1418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) ioctl$KDSIGACCEPT(r3, 0x5607, 0x38) 1.894975361s ago: executing program 1 (id=1419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000440)=""/110) 1.718676185s ago: executing program 3 (id=1420): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x18000c0, &(0x7f0000000140)={[{@dax}, {@data_journal}, {@inode_readahead_blks}, {@bh}]}, 0x1, 0x72d, &(0x7f0000000f80)="$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") ioperm(0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() sched_setparam(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f0000000800)=0x7) 1.689885323s ago: executing program 1 (id=1421): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r2, 0x400455c8, 0xb) 1.532231628s ago: executing program 1 (id=1422): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x1000000, &(0x7f0000000180)={[{@pqnoenforce}, {@noquota}, {@attr2}, {@grpquota}, {@ikeep}, {@prjquota}, {@noikeep}]}, 0x1, 0x985b, &(0x7f000001c900)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040c405}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.142902285s ago: executing program 0 (id=1338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x100000000000000, &(0x7f00000006c0)='U'}) 408.46989ms ago: executing program 3 (id=1423): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 342.488611ms ago: executing program 0 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x18, 0x39, 0x1, 0x0, 0x0, {0x4}, [@generic="eb"]}, 0x18}}, 0x0) 183.648443ms ago: executing program 3 (id=1425): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) shutdown(r0, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/36, 0x24}}], 0x1, 0x0, 0x0) 164.139666ms ago: executing program 0 (id=1426): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x3, 0x6ed, &(0x7f0000000900)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0x208e24b) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x4c, &(0x7f0000000340)=[@enter_looper], 0x4, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00'}) 102.425176ms ago: executing program 3 (id=1427): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x44, 0x31, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x44}}, 0x0) 0s ago: executing program 3 (id=1428): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000440)=""/110) kernel console output (not intermixed with test programs): net:caif_netlink_parms(): no params data found [ 345.270537][ T8694] Bluetooth: MGMT ver 1.23 [ 345.403609][ T5110] Bluetooth: hci0: command tx timeout [ 345.522501][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 346.090805][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.129384][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.156990][ T8587] bridge_slave_0: entered allmulticast mode [ 346.186341][ T8587] bridge_slave_0: entered promiscuous mode [ 346.211935][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.222651][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.235275][ T8587] bridge_slave_1: entered allmulticast mode [ 346.307021][ T8587] bridge_slave_1: entered promiscuous mode [ 346.508681][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.560146][ T8722] loop2: detected capacity change from 0 to 512 [ 346.578082][ T8609] chnl_net:caif_netlink_parms(): no params data found [ 346.649247][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.675560][ T8722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 346.747487][ T8722] __quota_error: 33 callbacks suppressed [ 346.747508][ T8722] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 346.764587][ T8722] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 346.776304][ T8728] loop1: detected capacity change from 0 to 512 [ 346.777248][ T8722] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.920: Failed to acquire dquot type 0 [ 346.917740][ T8728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.941629][ T8587] team0: Port device team_slave_0 added [ 346.979151][ T8322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 347.006668][ T8587] team0: Port device team_slave_1 added [ 347.083380][ T5110] Bluetooth: hci4: command tx timeout [ 347.140072][ T8716] loop0: detected capacity change from 0 to 32768 [ 347.514843][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.543445][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.569800][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.658909][ T8587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.706961][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.753392][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.794977][ T8236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.811671][ T8587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.978993][ T8753] netlink: 'syz.1.924': attribute type 3 has an invalid length. [ 347.989079][ T8753] netlink: 'syz.1.924': attribute type 4 has an invalid length. [ 347.998035][ T8753] netlink: 'syz.1.924': attribute type 7 has an invalid length. [ 348.006004][ T8753] netlink: 'syz.1.924': attribute type 8 has an invalid length. [ 348.021071][ T8753] netlink: 'syz.1.924': attribute type 7 has an invalid length. [ 348.031020][ T8753] netlink: 198180 bytes leftover after parsing attributes in process `syz.1.924'. [ 348.039990][ T2474] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.205633][ T8740] loop2: detected capacity change from 0 to 32768 [ 348.291056][ T8740] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 348.468550][ T2474] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.562109][ T8740] XFS (loop2): Ending clean mount [ 348.624499][ T8740] XFS (loop2): Quotacheck needed: Please wait. [ 348.641089][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.666936][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.683413][ T8609] bridge_slave_0: entered allmulticast mode [ 348.699662][ T8609] bridge_slave_0: entered promiscuous mode [ 348.759400][ T8740] XFS (loop2): Quotacheck: Done. [ 348.817951][ T2474] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.891549][ T29] audit: type=1800 audit(350.038:113): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.922" name="bus" dev="loop2" ino=9291 res=0 errno=0 [ 348.906884][ T8587] hsr_slave_0: entered promiscuous mode [ 348.941917][ T8587] hsr_slave_1: entered promiscuous mode [ 348.979694][ T8587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.993528][ T8587] Cannot create hsr debugfs directory [ 349.007310][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.028570][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.054137][ T8609] bridge_slave_1: entered allmulticast mode [ 349.061770][ T8609] bridge_slave_1: entered promiscuous mode [ 349.121270][ T5112] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.141438][ T5112] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.172799][ T2474] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.173447][ T5112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.221080][ T8322] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 349.230053][ T5112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.238202][ T5112] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 349.248020][ T5112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.333342][ T8765] loop1: detected capacity change from 0 to 32768 [ 349.369265][ T8609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.405405][ T8765] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 349.547308][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.733389][ T8765] XFS (loop1): Ending clean mount [ 349.842393][ T8609] team0: Port device team_slave_0 added [ 349.876668][ T8609] team0: Port device team_slave_1 added [ 349.909571][ T8236] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.041417][ T8786] mkiss: ax0: crc mode is auto. [ 350.136866][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.154521][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.243560][ T8609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.365482][ T2474] bridge_slave_1: left allmulticast mode [ 350.378161][ T2474] bridge_slave_1: left promiscuous mode [ 350.393592][ T2474] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.426032][ T2474] bridge_slave_0: left allmulticast mode [ 350.437998][ T2474] bridge_slave_0: left promiscuous mode [ 350.454422][ T2474] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.024743][ T2474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.036767][ T2474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.049145][ T2474] bond0 (unregistering): Released all slaves [ 351.062412][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.070942][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.098253][ T8609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.323540][ T5112] Bluetooth: hci3: command tx timeout [ 351.524932][ T8609] hsr_slave_0: entered promiscuous mode [ 351.531694][ T8609] hsr_slave_1: entered promiscuous mode [ 351.541215][ T8609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.550339][ T8609] Cannot create hsr debugfs directory [ 351.872961][ T2474] hsr_slave_0: left promiscuous mode [ 351.923425][ T2474] hsr_slave_1: left promiscuous mode [ 351.935478][ T2474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.943137][ T2474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.957255][ T2474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.969102][ T2474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.055894][ T2474] veth1_macvtap: left promiscuous mode [ 352.061756][ T2474] veth0_macvtap: left promiscuous mode [ 352.074219][ T2474] veth1_vlan: left promiscuous mode [ 352.079675][ T2474] veth0_vlan: left promiscuous mode [ 352.096020][ T8831] loop1: detected capacity change from 0 to 64 [ 352.461557][ T8842] loop1: detected capacity change from 0 to 256 [ 352.567912][ T8842] FAT-fs (loop1): Directory bread(block 64) failed [ 352.583404][ T8842] FAT-fs (loop1): Directory bread(block 65) failed [ 352.590199][ T8842] FAT-fs (loop1): Directory bread(block 66) failed [ 352.610481][ T8842] FAT-fs (loop1): Directory bread(block 67) failed [ 352.631176][ T8842] FAT-fs (loop1): Directory bread(block 68) failed [ 352.640769][ T8842] FAT-fs (loop1): Directory bread(block 69) failed [ 352.673387][ T8842] FAT-fs (loop1): Directory bread(block 70) failed [ 352.680070][ T8842] FAT-fs (loop1): Directory bread(block 71) failed [ 352.690610][ T8842] FAT-fs (loop1): Directory bread(block 72) failed [ 352.697698][ T8842] FAT-fs (loop1): Directory bread(block 73) failed [ 353.097104][ T2474] team0 (unregistering): Port device team_slave_1 removed [ 353.158267][ T2474] team0 (unregistering): Port device team_slave_0 removed [ 353.406760][ T5112] Bluetooth: hci3: command tx timeout [ 354.298152][ T8857] loop2: detected capacity change from 0 to 512 [ 354.455206][ T8857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.507088][ T8769] chnl_net:caif_netlink_parms(): no params data found [ 354.635524][ T8322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.937048][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.951143][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.962221][ T8878] mmap: syz.2.952 (8878) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 354.975868][ T8769] bridge_slave_0: entered allmulticast mode [ 354.988863][ T8769] bridge_slave_0: entered promiscuous mode [ 355.009439][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.033559][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.040874][ T8769] bridge_slave_1: entered allmulticast mode [ 355.052212][ T8769] bridge_slave_1: entered promiscuous mode [ 355.122089][ T8769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.153649][ T8769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.278278][ T8769] team0: Port device team_slave_0 added [ 355.296722][ T8769] team0: Port device team_slave_1 added [ 355.399509][ T2474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.483609][ T5112] Bluetooth: hci3: command tx timeout [ 355.494713][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.512094][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.536213][ T29] audit: type=1326 audit(356.688:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.2.956" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8dcb75a19 code=0x0 [ 355.538673][ T8769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.654277][ T2474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.694037][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.701074][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.739425][ T8769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.859093][ T2474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.910633][ T8880] loop1: detected capacity change from 0 to 40427 [ 355.934034][ T8880] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 355.948112][ T8880] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 355.959206][ T8880] F2FS-fs (loop1): invalid crc value [ 355.979400][ T8880] F2FS-fs (loop1): Found nat_bits in checkpoint [ 355.980781][ T8769] hsr_slave_0: entered promiscuous mode [ 355.999702][ T8769] hsr_slave_1: entered promiscuous mode [ 356.008288][ T8769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.019778][ T8769] Cannot create hsr debugfs directory [ 356.025567][ T8609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 356.061072][ T8880] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 356.068327][ T8880] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 356.101334][ T2474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.399508][ T8609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.411953][ T8609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 357.274766][ T8609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.564786][ T5112] Bluetooth: hci3: command tx timeout [ 358.673083][ T35] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 358.705909][ T35] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 358.765388][ T8587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 358.828041][ T8587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 358.867510][ T8587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 358.927356][ T8587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 359.122948][ T2474] bridge_slave_1: left allmulticast mode [ 359.133607][ T2474] bridge_slave_1: left promiscuous mode [ 359.139427][ T2474] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.182526][ T2474] bridge_slave_0: left allmulticast mode [ 359.214926][ T2474] bridge_slave_0: left promiscuous mode [ 359.227653][ T2474] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.815912][ T2474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.842177][ T2474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.859709][ T2474] bond0 (unregistering): Released all slaves [ 361.083002][ T8920] loop1: detected capacity change from 0 to 512 [ 361.118090][ T8920] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.963: corrupted in-inode xattr: invalid ea_ino [ 361.162708][ T8920] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.963: couldn't read orphan inode 15 (err -117) [ 361.192649][ T8920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.324293][ T8920] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 361.371955][ T8236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.614911][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.813081][ T8609] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.909093][ T2474] hsr_slave_0: left promiscuous mode [ 362.925614][ T2474] hsr_slave_1: left promiscuous mode [ 362.931920][ T2474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.957415][ T2474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.002049][ T2474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.015667][ T2474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.100063][ T2474] veth1_macvtap: left promiscuous mode [ 363.133458][ T2474] veth0_macvtap: left promiscuous mode [ 363.139180][ T2474] veth1_vlan: left promiscuous mode [ 363.161408][ T2474] veth0_vlan: left promiscuous mode [ 364.477293][ T8983] ALSA: mixer_oss: invalid OSS volume '' [ 365.035372][ T8976] loop2: detected capacity change from 0 to 32768 [ 365.042760][ T8976] XFS: attr2 mount option is deprecated. [ 365.070292][ T8976] XFS: ikeep mount option is deprecated. [ 365.089999][ T8976] XFS: noikeep mount option is deprecated. [ 365.119762][ T8976] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 365.188084][ T8976] XFS (loop2): Ending clean mount [ 365.242939][ T8976] XFS (loop2): Quotacheck needed: Please wait. [ 365.389607][ T8976] XFS (loop2): Quotacheck: Done. [ 365.850825][ T2474] team0 (unregistering): Port device team_slave_1 removed [ 366.267959][ T2474] team0 (unregistering): Port device team_slave_0 removed [ 366.536090][ T8322] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 367.618122][ T8386] udevd[8386]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 368.318017][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.325237][ T5188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.405054][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.412371][ T5188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.526556][ T9055] loop2: detected capacity change from 0 to 512 [ 368.599117][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.633767][ T9055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.670760][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.788626][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.795938][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.846867][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.854231][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.064755][ T8769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 369.108982][ T8769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 369.157120][ T8769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 369.391126][ T8769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 370.473038][ T8609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.686169][ T8322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.755912][ T8769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.818129][ T8769] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.900949][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.908185][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.026889][ T9096] ALSA: mixer_oss: invalid OSS volume '' [ 371.200091][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.207324][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.395632][ T9101] loop2: detected capacity change from 0 to 256 [ 372.158309][ T8587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.166279][ T9107] can: request_module (can-proto-0) failed. [ 372.178637][ T9111] loop2: detected capacity change from 0 to 512 [ 372.186037][ T9111] EXT4-fs: Ignoring removed bh option [ 372.221311][ T9111] EXT4-fs error (device loop2): __ext4_iget:4985: inode #15: block 1803188595: comm syz.2.988: invalid block [ 372.244271][ T9107] fuse: Bad value for 'user_id' [ 372.249193][ T9107] fuse: Bad value for 'user_id' [ 372.256913][ T9111] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.988: couldn't read orphan inode 15 (err -117) [ 372.275178][ T9111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.376205][ T8322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.473880][ T9117] loop2: detected capacity change from 0 to 256 [ 372.509465][ T9109] loop1: detected capacity change from 0 to 1024 [ 372.640122][ T8609] veth0_vlan: entered promiscuous mode [ 372.669705][ T8587] veth0_vlan: entered promiscuous mode [ 372.676139][ T9109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.699749][ T8587] veth1_vlan: entered promiscuous mode [ 372.732031][ T8609] veth1_vlan: entered promiscuous mode [ 372.833118][ T9109] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 372.907811][ T8609] veth0_macvtap: entered promiscuous mode [ 372.947177][ T8609] veth1_macvtap: entered promiscuous mode [ 373.028026][ T9126] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 373.042917][ T8769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.069059][ T8587] veth0_macvtap: entered promiscuous mode [ 373.134121][ T8587] veth1_macvtap: entered promiscuous mode [ 373.174848][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.207623][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.219347][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.231622][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.251948][ T9128] loop2: detected capacity change from 0 to 8 [ 373.252742][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.299594][ T9128] SQUASHFS error: zlib decompression failed, data probably corrupt [ 373.310741][ T9128] SQUASHFS error: Failed to read block 0x9b: -5 [ 373.317782][ T9128] SQUASHFS error: Unable to read metadata cache entry [99] [ 373.335839][ T9128] SQUASHFS error: Unable to read inode 0x127 [ 373.340623][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.363986][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.374362][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.385310][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.394792][ T8236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.397708][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.451371][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.464666][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.531626][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.543922][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.559227][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.580167][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.602261][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.618512][ T8609] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.654632][ T8609] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.677854][ T8609] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.687088][ T8609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.716183][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.730465][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.742069][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.757871][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.769270][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.780993][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.801768][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.828635][ T8587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.843040][ T8587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.854545][ T8587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.866561][ T8587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.881969][ T8769] veth0_vlan: entered promiscuous mode [ 373.950713][ T8769] veth1_vlan: entered promiscuous mode [ 374.145926][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.173367][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.188374][ T8769] veth0_macvtap: entered promiscuous mode [ 374.249585][ T8769] veth1_macvtap: entered promiscuous mode [ 374.336214][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.372762][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.387750][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.401606][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.418025][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.421156][ T9144] loop2: detected capacity change from 0 to 512 [ 374.429732][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.455752][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.471671][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.482704][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.493535][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.505570][ T8769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.517065][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.531290][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.543786][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.555824][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.568179][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.584896][ T9144] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.997: corrupted in-inode xattr: invalid ea_ino [ 374.600786][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.611311][ T9144] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.997: couldn't read orphan inode 15 (err -117) [ 374.619657][ T8769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.640401][ T8769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.645828][ T9144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.654995][ T8769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.747817][ T8769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.761370][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.788813][ T8769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.798907][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.807871][ T8769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.819488][ T9144] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 374.827197][ T8769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.892730][ T8322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.908156][ T2833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.925323][ T9142] loop1: detected capacity change from 0 to 32768 [ 374.932678][ T2833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.105136][ T9142] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 375.154606][ T2814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.168612][ T2814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.301603][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.336300][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.456421][ T9142] XFS (loop1): Ending clean mount [ 375.660519][ T8236] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 375.923333][ T1627] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 376.040907][ T9173] ALSA: mixer_oss: invalid OSS volume '' [ 376.143339][ T1627] usb 4-1: Using ep0 maxpacket: 16 [ 376.166279][ T1627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 376.207879][ T1627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 376.256383][ T1627] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 376.300863][ T1627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.330782][ T1627] usb 4-1: config 0 descriptor?? [ 376.921649][ T9188] mkiss: ax0: crc mode is auto. [ 376.956279][ T9160] loop3: detected capacity change from 0 to 1024 [ 376.985205][ T9160] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.030085][ T9160] ext4: Unknown parameter 'obj_user' [ 377.180916][ T1627] hid (null): bogus close delimiter [ 377.244949][ T1627] hid-generic 0003:0158:0100.000C: unknown main item tag 0x0 [ 377.254498][ T1627] hid-generic 0003:0158:0100.000C: unknown main item tag 0x0 [ 377.262301][ T1627] hid-generic 0003:0158:0100.000C: bogus close delimiter [ 377.274514][ T1627] hid-generic 0003:0158:0100.000C: item 0 0 2 10 parsing failed [ 377.341836][ T1627] hid-generic 0003:0158:0100.000C: probe with driver hid-generic failed with error -22 [ 377.433473][ T1627] usb 4-1: USB disconnect, device number 15 [ 377.645155][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.651507][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.676677][ T9195] loop2: detected capacity change from 0 to 1024 [ 378.054928][ T5159] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 378.292712][ T5159] usb 1-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 378.304125][ T5159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.319049][ T5159] usb 1-1: config 0 descriptor?? [ 378.330683][ T5159] usb-storage 1-1:0.0: USB Mass Storage device detected [ 378.357085][ T11] hfsplus: b-tree write err: -5, ino 4 [ 378.914408][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 379.027012][ T5159] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 379.101545][ T9219] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1017'. [ 379.152940][ T9219] loop3: detected capacity change from 0 to 512 [ 379.240914][ T5159] usb 3-1: Using ep0 maxpacket: 16 [ 379.254589][ T5159] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.320391][ T5159] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 379.341444][ T9219] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.1017: inode #0: comm syz.3.1017: iget: illegal inode # [ 379.363936][ T1627] usb 1-1: USB disconnect, device number 15 [ 379.399773][ T9219] EXT4-fs (loop3): Remounting filesystem read-only [ 379.409207][ T5159] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 379.426891][ T9219] EXT4-fs (loop3): get orphan inode failed [ 379.440519][ T5159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.456472][ T9219] EXT4-fs (loop3): mount failed [ 379.481377][ T5159] usb 3-1: config 0 descriptor?? [ 379.494857][ T5159] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 379.555396][ T9227] macsec0: entered promiscuous mode [ 379.562343][ T9227] macsec1: entered promiscuous mode [ 379.822462][ T9231] loop4: detected capacity change from 0 to 1024 [ 380.457933][ T9243] loop3: detected capacity change from 0 to 512 [ 380.482419][ T9243] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 134217747)! [ 380.546620][ T9243] EXT4-fs (loop3): group descriptors corrupted! [ 380.613119][ T62] hfsplus: b-tree write err: -5, ino 4 [ 380.794941][ T9241] 9pnet_fd: Insufficient options for proto=fd [ 380.837287][ T9252] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 381.142971][ T9255] loop1: detected capacity change from 0 to 2048 [ 381.185398][ T9255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.626893][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 381.687775][ T29] audit: type=1804 audit(382.835:115): pid=9255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1031" name="/newroot/70/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 381.728553][ T9257] loop3: detected capacity change from 0 to 512 [ 381.873139][ T8236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.976023][ T5160] usb 3-1: USB disconnect, device number 12 [ 382.379150][ T9271] Bluetooth: MGMT ver 1.23 [ 383.053624][ T5161] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 383.229180][ T9281] ALSA: mixer_oss: invalid OSS volume '' [ 383.283383][ T5161] usb 2-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 383.303591][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.348110][ T5161] usb 2-1: config 0 descriptor?? [ 383.385111][ T5161] usb-storage 2-1:0.0: USB Mass Storage device detected [ 383.414210][ T9283] loop3: detected capacity change from 0 to 512 [ 383.439311][ T9283] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 134217747)! [ 383.481544][ T9283] EXT4-fs (loop3): group descriptors corrupted! [ 383.571478][ T9289] netlink: 'syz.4.1042': attribute type 1 has an invalid length. [ 383.579548][ T9289] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1042'. [ 384.738475][ T9268] loop2: detected capacity change from 0 to 40427 [ 384.779366][ T9268] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 384.815950][ T9268] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 384.867028][ T9268] F2FS-fs (loop2): invalid crc value [ 384.890581][ T5158] usb 2-1: USB disconnect, device number 8 [ 384.922814][ T9268] F2FS-fs (loop2): Found nat_bits in checkpoint [ 384.963752][ T5161] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 385.089864][ T9268] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 385.090302][ T9306] fuse: Bad value for 'user_id' [ 385.109831][ T9268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 385.113709][ T9302] can: request_module (can-proto-0) failed. [ 385.133353][ T9306] fuse: Bad value for 'user_id' [ 385.168556][ T5161] usb 5-1: Using ep0 maxpacket: 16 [ 385.184873][ T5161] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.201073][ T5161] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 385.238672][ T5161] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 385.262360][ T5161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.307617][ T5161] usb 5-1: config 0 descriptor?? [ 385.335656][ T5161] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 385.374949][ T9306] loop3: detected capacity change from 0 to 1024 [ 385.457775][ T9306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.613123][ T9306] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 386.096524][ T8587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.272638][ T9328] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 386.280639][ T9328] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1053'. [ 387.630942][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 388.605758][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 388.665196][ T9337] loop2: detected capacity change from 0 to 512 [ 388.693713][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 388.753986][ T9337] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 388.857328][ T9353] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1060'. [ 389.009774][ T9353] loop1: detected capacity change from 0 to 512 [ 389.209884][ T9353] EXT4-fs error (device loop1): ext4_init_orphan_info:586: comm syz.1.1060: inode #0: comm syz.1.1060: iget: illegal inode # [ 389.231770][ T9353] EXT4-fs (loop1): Remounting filesystem read-only [ 389.239987][ T9353] EXT4-fs (loop1): get orphan inode failed [ 389.312531][ T9353] EXT4-fs (loop1): mount failed [ 389.532381][ T9321] 9pnet_fd: Insufficient options for proto=fd [ 389.801693][ T58] usb 5-1: USB disconnect, device number 9 [ 389.854126][ T5158] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 390.065650][ T5158] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 390.088196][ T5158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.122935][ T5158] usb 3-1: config 0 descriptor?? [ 390.143648][ T5158] usb-storage 3-1:0.0: USB Mass Storage device detected [ 390.182600][ T9377] loop0: detected capacity change from 0 to 512 [ 390.778051][ T9377] EXT4-fs: Ignoring removed i_version option [ 390.808903][ T9377] EXT4-fs: Ignoring removed nobh option [ 390.849574][ T9377] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 390.984157][ T9377] EXT4-fs (loop0): 1 truncate cleaned up [ 391.015228][ T9377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.078286][ T9390] loop3: detected capacity change from 0 to 2048 [ 391.187393][ T9392] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 391.324547][ T8769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.397490][ T5161] usb 3-1: USB disconnect, device number 13 [ 391.481830][ T9390] syz.3.1067 (9390) used greatest stack depth: 18576 bytes left [ 391.614837][ T9392] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 391.786786][ T9392] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 391.819934][ T9392] Remounting filesystem read-only [ 392.873751][ T2474] NILFS (loop3): discard dirty page: offset=0, ino=15 [ 392.913692][ T2474] NILFS (loop3): discard dirty block: blocknr=22, size=1024 [ 392.963446][ T2474] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.029568][ T2474] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.059251][ T2474] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.099661][ T2474] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 393.131312][ T2474] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 393.133551][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1075'. [ 393.156456][ T9405] loop0: detected capacity change from 0 to 4096 [ 393.174400][ T2474] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 393.181838][ T2474] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 393.229409][ T2474] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.286084][ T2474] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 393.320278][ T9413] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 393.331737][ T2474] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.384809][ T2474] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.456824][ T2474] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 393.470323][ T29] audit: type=1800 audit(394.615:116): pid=9405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1073" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 393.480845][ T2474] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 393.655018][ T9417] loop4: detected capacity change from 0 to 256 [ 393.709428][ T9417] FAT-fs (loop4): bogus logical sector size 0 [ 393.715793][ T9417] FAT-fs (loop4): Can't find a valid FAT filesystem [ 394.213457][ T8587] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 394.224306][ T8587] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 394.231207][ T8587] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 394.240211][ T8587] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 394.249717][ T8587] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 394.258173][ T8587] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 394.270929][ T8587] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 394.277750][ T8587] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 394.293256][ T8587] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 394.302173][ T8587] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 394.313930][ T8587] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 394.331474][ T8587] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 394.338318][ T8587] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 394.345726][ T8587] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 394.355398][ T8587] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 394.364379][ T8587] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 394.581876][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 395.173433][ T5159] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 395.394986][ T5159] usb 2-1: not running at top speed; connect to a high speed hub [ 395.484140][ T5159] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.532602][ T5159] usb 2-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.612679][ T5159] usb 2-1: config 1 interface 0 has no altsetting 0 [ 395.768375][ T5159] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.050939][ T5159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.093841][ T9454] fuse: Bad value for 'user_id' [ 396.103366][ T9454] fuse: Bad value for 'user_id' [ 396.121662][ T5159] usb 2-1: Product: ࠬ [ 396.143323][ T9448] can: request_module (can-proto-0) failed. [ 396.160818][ T5159] usb 2-1: Manufacturer: 倊 [ 396.184165][ T5159] usb 2-1: SerialNumber: п [ 396.229206][ T9438] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 396.448337][ T9460] loop3: detected capacity change from 0 to 2048 [ 396.462258][ T9454] loop4: detected capacity change from 0 to 1024 [ 396.544161][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 396.586174][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.616100][ T9464] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 396.629173][ T9454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.653690][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.756963][ T9454] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 396.787975][ T5110] Bluetooth: hci2: command tx timeout [ 396.861130][ T9461] loop0: detected capacity change from 0 to 512 [ 396.896018][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.910339][ T9464] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 396.923449][ T9464] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 396.944152][ T9464] Remounting filesystem read-only [ 396.950862][ T12] NILFS (loop3): discard dirty page: offset=0, ino=15 [ 396.963905][ T9461] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 396.994101][ T12] NILFS (loop3): discard dirty block: blocknr=22, size=1024 [ 397.030739][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.035431][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.095392][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.129541][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.203072][ T12] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 397.204356][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.254264][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.260585][ T12] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 397.295441][ T8609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.308648][ T12] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 397.328810][ T12] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 397.337624][ T5159] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 397.367865][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.423697][ T5159] usb 2-1: USB disconnect, device number 9 [ 397.431672][ T12] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 397.459368][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.503661][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.531163][ T12] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 397.553073][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.637502][ T12] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 397.677222][ T12] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 397.719029][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.737848][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.748171][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.764927][ T12] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 397.789837][ T12] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 397.802328][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.829441][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.855897][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.878298][ T8587] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 397.917198][ T8587] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 397.931825][ T8587] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.952514][ T8587] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 397.963487][ T8587] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 397.971017][ T8587] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 398.455973][ T9480] loop3: detected capacity change from 0 to 4096 [ 398.493650][ T5159] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 398.535037][ T9484] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 398.680859][ T29] audit: type=1800 audit(399.825:117): pid=9480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1090" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 398.743539][ T5159] usb 5-1: Using ep0 maxpacket: 16 [ 398.760367][ T5159] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 398.787014][ T5159] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 398.810902][ T5159] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 398.836366][ T5159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.879907][ T5159] usb 5-1: config 0 descriptor?? [ 399.181912][ T9433] syz.2.1081 (9433): drop_caches: 2 [ 399.351267][ T9435] syz.2.1081 (9435): drop_caches: 2 [ 399.440636][ T9494] loop0: detected capacity change from 0 to 256 [ 400.344624][ T9474] loop4: detected capacity change from 0 to 1024 [ 400.393099][ T9474] EXT4-fs: Ignoring removed nomblk_io_submit option [ 400.436674][ T9474] ext4: Unknown parameter 'obj_user' [ 400.583698][ T5159] hid (null): bogus close delimiter [ 400.618900][ T9499] loop2: detected capacity change from 0 to 2048 [ 400.628632][ T5159] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 400.640046][ T5159] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 400.667210][ T5159] hid-generic 0003:0158:0100.000D: bogus close delimiter [ 400.674715][ T9502] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.691665][ T5159] hid-generic 0003:0158:0100.000D: item 0 0 2 10 parsing failed [ 400.700419][ T5159] hid-generic 0003:0158:0100.000D: probe with driver hid-generic failed with error -22 [ 400.806323][ T9502] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 400.823364][ T9502] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 400.823399][ T1627] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 400.878200][ T9502] Remounting filesystem read-only [ 400.880667][ T9505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1104'. [ 400.894386][ T5159] usb 5-1: USB disconnect, device number 10 [ 400.906376][ T12] NILFS (loop2): discard dirty page: offset=0, ino=15 [ 400.921877][ T12] NILFS (loop2): discard dirty block: blocknr=22, size=1024 [ 400.929750][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 400.939037][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 400.960260][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 400.974664][ T12] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 400.981412][ T12] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 400.989627][ T12] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 401.010731][ T12] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 401.033282][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 401.047910][ T1627] usb 1-1: Using ep0 maxpacket: 16 [ 401.055729][ T1627] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.083299][ T12] NILFS (loop2): discard dirty page: offset=229376, ino=3 [ 401.107842][ T1627] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 401.131585][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 401.147345][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 401.166820][ T1627] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 401.181986][ T12] NILFS (loop2): discard dirty block: blocknr=50, size=1024 [ 401.189428][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 401.198454][ T12] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 401.205386][ T12] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 401.213337][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 401.222225][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 401.231929][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 401.241632][ T12] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 401.246768][ T1627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.251104][ T12] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 401.485976][ T1627] usb 1-1: config 0 descriptor?? [ 401.600489][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 401.744814][ T1627] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 401.773860][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 401.814763][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 401.903730][ T8322] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 401.955475][ T8322] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 401.990028][ T8322] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 402.001824][ T8322] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 402.010800][ T8322] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 402.020357][ T8322] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 402.696371][ T9533] loop4: detected capacity change from 0 to 256 [ 405.255820][ T9538] loop2: detected capacity change from 0 to 4096 [ 405.461800][ T9538] ntfs3: loop2: Failed to load $Extend (-22). [ 405.469130][ T9538] ntfs3: loop2: Failed to initialize $Extend. [ 405.647018][ T5161] usb 1-1: USB disconnect, device number 16 [ 405.717940][ T9552] loop3: detected capacity change from 0 to 4096 [ 405.785791][ T9556] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 405.950990][ T29] audit: type=1800 audit(407.095:118): pid=9552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1116" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 406.103349][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 406.307313][ T25] usb 2-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 406.337234][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.411027][ T25] usb 2-1: config 0 descriptor?? [ 407.471873][ T9572] loop4: detected capacity change from 0 to 32768 [ 407.479061][ T9572] XFS: ikeep mount option is deprecated. [ 407.500374][ T25] usb-storage 2-1:0.0: USB Mass Storage device detected [ 407.599703][ T9572] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 407.872501][ T9572] XFS (loop4): Ending clean mount [ 407.890902][ T9578] syz.0.1125 (9578): drop_caches: 2 [ 407.921741][ T9585] syz.0.1125 (9585): drop_caches: 2 [ 407.939389][ T9585] syz.0.1125 (9585): drop_caches: 2 [ 407.950983][ T9578] syz.0.1125 (9578): drop_caches: 2 [ 408.006076][ T9591] loop3: detected capacity change from 0 to 256 [ 408.072560][ T8609] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 408.494506][ T46] usb 2-1: USB disconnect, device number 10 [ 408.553137][ T9600] loop3: detected capacity change from 0 to 512 [ 408.637639][ T9600] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1132: corrupted in-inode xattr: bad e_name length [ 408.692781][ T9600] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1132: couldn't read orphan inode 15 (err -117) [ 408.767278][ T9600] EXT4-fs (loop3): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.790988][ T9606] loop4: detected capacity change from 0 to 1024 [ 408.834916][ T29] audit: type=1800 audit(409.985:119): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1129" name="file0" dev="loop4" ino=18 res=0 errno=0 [ 408.898438][ T9600] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 408.961413][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 409.064653][ T8587] EXT4-fs (loop3): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 409.374170][ T9623] loop4: detected capacity change from 0 to 2048 [ 409.417900][ T9616] loop2: detected capacity change from 0 to 4096 [ 409.437724][ T9623] loop4: p3 < > p4 < > [ 409.443607][ T9623] loop4: partition table partially beyond EOD, truncated [ 409.463690][ T9623] loop4: p3 start 4284289 is beyond EOD, truncated [ 410.323389][ T5112] Bluetooth: hci3: command tx timeout [ 410.514606][ T9627] loop3: detected capacity change from 0 to 32768 [ 410.521761][ T9627] XFS: ikeep mount option is deprecated. [ 410.613412][ T46] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 410.619218][ T9627] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 410.639502][ T9616] ntfs3: loop2: Failed to load $Extend (-22). [ 410.654494][ T9616] ntfs3: loop2: Failed to initialize $Extend. [ 410.874034][ T9627] XFS (loop3): Ending clean mount [ 410.909804][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 410.976282][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 411.010983][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.080568][ T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.135630][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.146780][ T8587] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 411.170274][ T46] usb 5-1: config 0 descriptor?? [ 411.179050][ T9623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.644139][ T46] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 411.669677][ T46] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 411.716617][ T46] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 411.741572][ T9651] loop3: detected capacity change from 0 to 256 [ 411.770119][ T9653] loop2: detected capacity change from 0 to 512 [ 411.802997][ T9653] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 411.856057][ T9653] EXT4-fs (loop2): 1 truncate cleaned up [ 411.863065][ T9653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.979229][ T9653] EXT4-fs error (device loop2): ext4_generic_delete_entry:2678: inode #2: block 13: comm syz.2.1148: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 412.327145][ T9653] EXT4-fs (loop2): Remounting filesystem read-only [ 412.487817][ T9653] EXT4-fs warning (device loop2): ext4_rename_delete:3731: inode #2: comm syz.2.1148: Deleting old file: nlink 4, error=-117 [ 412.931490][ T8322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.034906][ T1627] usb 5-1: USB disconnect, device number 11 [ 413.128098][ T9670] loop1: detected capacity change from 0 to 256 [ 413.234666][ T9670] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 413.270459][ T9670] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 413.620698][ T9687] loop2: detected capacity change from 0 to 512 [ 413.628059][ T9687] EXT4-fs: Ignoring removed bh option [ 413.640935][ T9687] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 413.655212][ T9683] loop1: detected capacity change from 0 to 256 [ 413.689695][ T9687] EXT4-fs (loop2): 1 truncate cleaned up [ 413.697817][ T9687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.954088][ T9687] loop2: detected capacity change from 512 to 64 [ 413.985815][ T9687] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 138:freeing already freed block (bit 137); block bitmap corrupt. [ 414.004219][ T9687] EXT4-fs (loop2): pa ffff88805fb3ee80: logic 0, phys. 42, len 128 [ 414.012570][ T9687] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5368: group 0, free 44, pa_free 43 [ 414.023458][ T9687] EXT4-fs error (device loop2): ext4_free_branches:1043: inode #18: block 41: comm syz.2.1160: Read failure [ 414.056342][ T9697] loop4: detected capacity change from 0 to 512 [ 414.097341][ T9697] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 414.141267][ T9697] EXT4-fs (loop4): 1 truncate cleaned up [ 414.149429][ T9697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.822837][ T8501] udevd[8501]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 415.068023][ T9697] EXT4-fs error (device loop4): ext4_generic_delete_entry:2678: inode #2: block 13: comm syz.4.1163: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 415.113669][ T9697] EXT4-fs (loop4): Remounting filesystem read-only [ 415.120258][ T9697] EXT4-fs warning (device loop4): ext4_rename_delete:3731: inode #2: comm syz.4.1163: Deleting old file: nlink 4, error=-117 [ 415.215936][ T8322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.248865][ T8609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.517511][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 415.721304][ T9724] loop2: detected capacity change from 0 to 512 [ 415.783450][ T9724] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 415.823608][ T9728] loop0: detected capacity change from 0 to 256 [ 417.371254][ T9740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.566928][ T9749] loop0: detected capacity change from 0 to 32768 [ 420.574456][ T9749] XFS: ikeep mount option is deprecated. [ 420.598643][ T9752] loop3: detected capacity change from 0 to 256 [ 421.430443][ T9749] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 421.439761][ T9749] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR [ 421.440548][ T9749] XFS (loop0): log mount failed [ 421.522427][ T9763] macvlan2: entered promiscuous mode [ 421.535450][ T9763] macvlan2: entered allmulticast mode [ 421.540970][ T9763] bond0: entered allmulticast mode [ 421.546337][ T9763] bond_slave_0: entered allmulticast mode [ 421.552873][ T9763] bond_slave_1: entered allmulticast mode [ 421.560314][ T9763] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 421.796145][ T9768] loop3: detected capacity change from 0 to 16 [ 421.836916][ T9768] erofs: (device loop3): mounted with root inode @ nid 36. [ 422.112115][ T9779] loop3: detected capacity change from 0 to 256 [ 422.197475][ T9779] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 422.220655][ T9779] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 422.491611][ T9787] loop3: detected capacity change from 0 to 2048 [ 422.602365][ T9787] loop3: p3 < > p4 < > [ 422.612326][ T9787] loop3: partition table partially beyond EOD, truncated [ 422.626742][ T9787] loop3: p3 start 4284289 is beyond EOD, truncated [ 422.660052][ T9792] loop0: detected capacity change from 0 to 64 [ 422.973305][ T5161] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 422.976789][ T9800] macvlan2: entered promiscuous mode [ 423.001045][ T9796] syz.1.1195 (9796): drop_caches: 2 [ 423.045210][ T9800] macvlan2: entered allmulticast mode [ 423.069142][ T9800] bond0: entered allmulticast mode [ 423.094148][ T9800] bond_slave_0: entered allmulticast mode [ 423.110266][ T9800] bond_slave_1: entered allmulticast mode [ 423.127963][ T9800] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 423.130200][ T9801] syz.1.1195 (9801): drop_caches: 2 [ 423.138714][ T9796] syz.1.1195 (9796): drop_caches: 2 [ 423.160438][ T9801] syz.1.1195 (9801): drop_caches: 2 [ 423.214721][ T5161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 423.231419][ T9807] loop4: detected capacity change from 0 to 512 [ 423.256792][ T5161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 423.261580][ T9807] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 423.278308][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 423.322320][ T5161] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 423.344827][ T9807] EXT4-fs (loop4): 1 truncate cleaned up [ 423.351930][ T9807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.363355][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 423.377579][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.390163][ T9807] EXT4-fs error (device loop4): ext4_generic_delete_entry:2678: inode #2: block 13: comm syz.4.1200: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 423.423497][ T9807] EXT4-fs (loop4): Remounting filesystem read-only [ 423.430078][ T9807] EXT4-fs warning (device loop4): ext4_rename_delete:3731: inode #2: comm syz.4.1200: Deleting old file: nlink 4, error=-117 [ 423.431915][ T5161] usb 4-1: config 0 descriptor?? [ 423.482800][ T8609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.484097][ T9793] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 423.546536][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.576282][ T25] usb 3-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.0c [ 423.610696][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.643529][ T25] usb 3-1: Product: syz [ 423.647851][ T25] usb 3-1: Manufacturer: syz [ 423.673739][ T25] usb 3-1: SerialNumber: syz [ 423.696228][ T9816] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 423.723135][ T25] usb 3-1: config 0 descriptor?? [ 423.740871][ T25] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 424.027646][ T5161] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 424.031389][ T25] usb 3-1: USB disconnect, device number 14 [ 424.042200][ T5161] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 424.062564][ T5161] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 424.073331][ T1627] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 424.273412][ T1627] usb 5-1: Using ep0 maxpacket: 8 [ 424.291000][ T1627] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=1e.8d [ 424.313953][ T1627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.341697][ T1627] usb 5-1: config 0 descriptor?? [ 424.569649][ T5159] usb 5-1: USB disconnect, device number 12 [ 424.651648][ T9840] loop0: detected capacity change from 0 to 2048 [ 424.682478][ T9840] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.818972][ T5159] usb 4-1: USB disconnect, device number 16 [ 424.924583][ T5110] Bluetooth: hci1: command tx timeout [ 425.213900][ T9846] loop2: detected capacity change from 0 to 256 [ 425.519473][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 425.968461][ T9867] loop1: detected capacity change from 0 to 2048 [ 426.083432][ T5159] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 426.149654][ T9867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.247679][ T9867] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 426.274073][ T9867] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 426.410649][ T9867] EXT4-fs (loop1): This should not happen!! Data will be lost [ 426.410649][ T9867] [ 426.540945][ T5110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.576561][ T5110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.586075][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.603525][ T5110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.611692][ T5110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 426.619504][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.660313][ T9867] EXT4-fs (loop1): Total free blocks count 0 [ 426.739716][ T9867] EXT4-fs (loop1): Free/Dirty block details [ 426.749005][ T9867] EXT4-fs (loop1): free_blocks=2415919104 [ 426.759198][ T9867] EXT4-fs (loop1): dirty_blocks=32 [ 426.766515][ T9867] EXT4-fs (loop1): Block reservation details [ 426.841688][ T9882] loop2: detected capacity change from 0 to 64 [ 426.861242][ T9867] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 426.944170][ T9882] hfs: inconsistency in B*Tree (2,1,255,1,0) [ 426.950971][ T9882] hfs: get root inode failed [ 427.047751][ T5112] Bluetooth: hci1: command 0x0406 tx timeout [ 427.574310][ T8236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.594434][ T9886] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 427.747907][ T9891] loop2: detected capacity change from 0 to 1024 [ 427.824584][ T29] audit: type=1800 audit(428.975:120): pid=9891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1230" name="file0" dev="loop2" ino=18 res=0 errno=0 [ 427.901458][ T9877] chnl_net:caif_netlink_parms(): no params data found [ 428.033302][ T5159] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 429.061856][ T5112] Bluetooth: hci3: command tx timeout [ 429.147505][ T9877] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.190235][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.275214][ T9912] loop3: detected capacity change from 0 to 32768 [ 429.282616][ T9912] XFS: ikeep mount option is deprecated. [ 429.312878][ T9877] bridge_slave_0: entered allmulticast mode [ 429.323292][ T5159] usb 5-1: Using ep0 maxpacket: 8 [ 429.338289][ T9877] bridge_slave_0: entered promiscuous mode [ 429.358168][ T5159] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=1e.8d [ 429.392903][ T5159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.421972][ T5159] usb 5-1: config 0 descriptor?? [ 429.454253][ T9877] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.475442][ T9877] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.482172][ T9912] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 429.482856][ T9877] bridge_slave_1: entered allmulticast mode [ 429.499103][ T9877] bridge_slave_1: entered promiscuous mode [ 430.191245][ T9912] XFS (loop3): Ending clean mount [ 430.301709][ T9877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.406954][ T8587] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 430.419049][ T5161] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 430.423523][ T25] usb 5-1: USB disconnect, device number 14 [ 430.446302][ T9877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.622677][ T9932] loop2: detected capacity change from 0 to 2048 [ 430.637817][ T9877] team0: Port device team_slave_0 added [ 430.658509][ T9877] team0: Port device team_slave_1 added [ 430.668670][ T5161] usb 2-1: config 0 has an invalid interface number: 94 but max is 0 [ 430.686101][ T5161] usb 2-1: config 0 has no interface number 0 [ 430.698794][ T5161] usb 2-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 430.709166][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.720028][ T5161] usb 2-1: config 0 descriptor?? [ 430.731318][ T9932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.803927][ T9932] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 430.822761][ T9932] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 430.835343][ T9932] EXT4-fs (loop2): This should not happen!! Data will be lost [ 430.835343][ T9932] [ 430.841039][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.845203][ T9932] EXT4-fs (loop2): Total free blocks count 0 [ 430.862621][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.868772][ T9932] EXT4-fs (loop2): Free/Dirty block details [ 430.914807][ T9932] EXT4-fs (loop2): free_blocks=2415919104 [ 430.920636][ T9932] EXT4-fs (loop2): dirty_blocks=32 [ 430.926112][ T9932] EXT4-fs (loop2): Block reservation details [ 430.935713][ T9877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.943288][ T9932] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 430.959959][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.968234][ T5161] usb 2-1: USB disconnect, device number 11 [ 430.986791][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.020594][ T9877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.083528][ T5110] Bluetooth: hci3: command tx timeout [ 431.099544][ T8322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.148505][ T9877] hsr_slave_0: entered promiscuous mode [ 431.163657][ T5112] Bluetooth: hci2: command 0x0406 tx timeout [ 431.173836][ T9877] hsr_slave_1: entered promiscuous mode [ 431.181145][ T9877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.214745][ T9877] Cannot create hsr debugfs directory [ 431.256415][ T9945] loop3: detected capacity change from 0 to 2048 [ 431.283227][ T9946] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 431.371924][ T29] audit: type=1800 audit(432.515:121): pid=9945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1243" name="bus" dev="loop3" ino=15 res=0 errno=0 [ 431.799895][ T9957] loop2: detected capacity change from 0 to 164 [ 431.841579][ T9957] isofs: isofs_export_get_parent(): child directory not normalized! [ 431.932330][ T9877] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.050901][ T9957] netlink: 'syz.2.1246': attribute type 4 has an invalid length. [ 432.164625][ T9962] netlink: 'syz.2.1246': attribute type 4 has an invalid length. [ 432.503391][ T1627] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 432.988283][ T9877] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.011054][ T1627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.153907][ T1627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.168382][ T5112] Bluetooth: hci3: command tx timeout [ 433.174024][ T1627] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 433.183098][ T1627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.199204][ T1627] usb 3-1: config 0 descriptor?? [ 433.208206][ T1627] usbhid 3-1:0.0: can't add hid device: -22 [ 433.218587][ T1627] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 433.298995][ T9877] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.651924][ T5160] usb 3-1: USB disconnect, device number 15 [ 433.861465][ T9988] loop1: detected capacity change from 0 to 256 [ 433.997910][ T9988] FAT-fs (loop1): bogus logical sector size 0 [ 434.004177][ T9988] FAT-fs (loop1): Can't find a valid FAT filesystem [ 434.481593][ T9877] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.851480][ T9877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 434.862048][ T29] audit: type=1326 audit(436.005:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.4.1255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedd2f75a19 code=0x0 [ 434.889610][ T9877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 434.901964][ T9877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 434.916596][ T9877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 435.042045][ T9877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.077297][ T9877] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.094402][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.101647][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.133940][ T5159] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 435.142555][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.149787][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.245130][ T5112] Bluetooth: hci3: command tx timeout [ 435.346425][ T5159] usb 4-1: config 0 has an invalid interface number: 94 but max is 0 [ 435.364026][ T5159] usb 4-1: config 0 has no interface number 0 [ 435.378375][ T5159] usb 4-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 435.383409][T10008] loop2: detected capacity change from 0 to 2048 [ 435.398228][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.418982][ T5159] usb 4-1: config 0 descriptor?? [ 435.439672][T10010] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 435.488649][ T29] audit: type=1800 audit(436.635:123): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1260" name="bus" dev="loop2" ino=15 res=0 errno=0 [ 435.512935][ T9877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.662235][ T9877] veth0_vlan: entered promiscuous mode [ 435.710923][ T9877] veth1_vlan: entered promiscuous mode [ 435.716222][ T5157] usb 4-1: USB disconnect, device number 17 [ 435.749831][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 435.807695][ T9877] veth0_macvtap: entered promiscuous mode [ 435.851023][ T9877] veth1_macvtap: entered promiscuous mode [ 435.918789][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.948316][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.964940][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.983398][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.024534][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.051792][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.072092][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.082416][T10021] loop1: detected capacity change from 0 to 2048 [ 436.108462][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.110299][T10021] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.138896][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.187502][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.223029][ T9877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.277410][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.333262][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.359226][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.393407][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.411376][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.434132][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.464267][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.490228][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.502555][ T9877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.523773][ T9877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.545352][ T9877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.584639][ T9877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.597825][ T9877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.627419][ T9877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.658980][ T9877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.920371][ T9760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.955617][ T9760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.073328][ T9759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.093505][ T9759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.675903][T10054] loop3: detected capacity change from 0 to 2048 [ 437.725029][T10054] loop3: p3 < > p4 < > [ 437.729285][T10054] loop3: partition table partially beyond EOD, truncated [ 437.782596][T10054] loop3: p3 start 4284289 is beyond EOD, truncated [ 438.253268][ T5160] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 438.352742][T10076] loop2: detected capacity change from 0 to 256 [ 439.222663][T10076] FAT-fs (loop2): bogus logical sector size 0 [ 439.228933][T10076] FAT-fs (loop2): Can't find a valid FAT filesystem [ 439.234011][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.242010][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.515428][ T5160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 439.527025][ T5160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 439.569589][ T5160] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.616204][ T5160] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.673411][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.683733][T10088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1289'. [ 439.699440][ T5160] usb 4-1: config 0 descriptor?? [ 439.723114][T10054] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 439.833748][T10088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1289'. [ 440.169762][ T5160] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 440.211481][ T5160] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 440.255562][ T5160] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 441.503419][T10117] loop0: detected capacity change from 0 to 256 [ 441.612964][T10117] FAT-fs (loop0): bogus logical sector size 0 [ 441.619256][T10117] FAT-fs (loop0): Can't find a valid FAT filesystem [ 442.204270][ T29] audit: type=1326 audit(443.345:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.2.1300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8dcb75a19 code=0x0 [ 442.364129][ T5159] usb 4-1: USB disconnect, device number 18 [ 442.391703][T10125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1302'. [ 442.498354][T10125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1302'. [ 442.635348][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'. [ 443.017953][T10154] binder: 10153:10154 ioctl 4018620d 0 returned -22 [ 443.229433][T10158] loop2: detected capacity change from 0 to 2048 [ 443.355385][T10158] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.453741][T10155] Unknown options in mask 4 [ 444.271357][T10148] loop4: detected capacity change from 0 to 32768 [ 444.313542][T10148] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 444.341144][T10171] loop2: detected capacity change from 0 to 2048 [ 444.443547][T10171] loop2: p3 < > p4 < > [ 444.462190][T10171] loop2: partition table partially beyond EOD, truncated [ 444.470034][T10171] loop2: p3 start 4284289 is beyond EOD, truncated [ 444.479217][T10148] XFS (loop4): Ending clean mount [ 444.531327][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1319'. [ 444.641271][ T8609] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 444.659918][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1319'. [ 444.784937][ T5157] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 445.026200][ T5157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 445.093464][ T5157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 445.124607][ T5157] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 445.148738][ T5157] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 445.178953][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.191921][ T5157] usb 3-1: config 0 descriptor?? [ 445.204011][T10171] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 445.303436][T10198] binder: 10197:10198 ioctl 4018620d 0 returned -22 [ 445.332190][T10198] binder: 10197:10198 ioctl c0306201 20000380 returned -11 [ 445.453990][T10196] loop4: detected capacity change from 0 to 4096 [ 445.523761][T10202] loop3: detected capacity change from 0 to 1024 [ 445.531407][T10202] hfsplus: unable to parse mount options [ 445.567481][T10196] ntfs3: loop4: Failed to load $Extend (-22). [ 445.580313][T10196] ntfs3: loop4: Failed to initialize $Extend. [ 445.646473][ T5157] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 445.675978][ T5157] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 445.698404][ T5157] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 445.728537][T10209] loop0: detected capacity change from 0 to 512 [ 445.763434][T10209] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 445.778454][T10209] EXT4-fs (loop0): 1 truncate cleaned up [ 445.791746][T10209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.054565][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1331'. [ 446.204384][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1331'. [ 446.678061][ T5160] usb 3-1: USB disconnect, device number 16 [ 446.762288][T10227] loop4: detected capacity change from 0 to 512 [ 446.770796][T10227] EXT4-fs: Ignoring removed bh option [ 446.780077][T10227] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 446.814342][ T9877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.829882][T10227] EXT4-fs (loop4): 1 truncate cleaned up [ 446.866840][T10227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.981037][ T7368] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.107785][ T8609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.236032][ T7368] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.455887][ T7368] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.480526][T10222] loop3: detected capacity change from 0 to 40427 [ 447.496282][T10222] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 447.512333][T10222] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 447.554844][T10222] F2FS-fs (loop3): Found nat_bits in checkpoint [ 447.656525][ T7368] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.750028][T10222] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 447.786350][T10222] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 447.930042][ T5110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 447.953723][ T5110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 447.962723][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 447.976230][ T5110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 447.984944][ T5110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 447.993621][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 448.035562][T10222] syz.3.1332: attempt to access beyond end of device [ 448.035562][T10222] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 448.091847][ T29] audit: type=1804 audit(449.225:125): pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1332" name="/newroot/62/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 448.147488][ T7368] bridge_slave_1: left allmulticast mode [ 448.157611][ T7368] bridge_slave_1: left promiscuous mode [ 448.163630][ T7368] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.189767][ T7368] bridge_slave_0: left allmulticast mode [ 448.195810][ T7368] bridge_slave_0: left promiscuous mode [ 448.201757][ T7368] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.407532][T10259] loop2: detected capacity change from 0 to 2048 [ 448.470990][T10259] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.222077][ T7368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.241615][ T7368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.259353][ T7368] bond0 (unregistering): Released all slaves [ 449.285493][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 449.454509][ T5159] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 449.650187][ T5159] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 449.670165][ T5159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.681639][ T5159] usb 4-1: Product: syz [ 449.689926][ T5159] usb 4-1: Manufacturer: syz [ 449.699594][ T5159] usb 4-1: SerialNumber: syz [ 449.733763][ T5159] usb 4-1: config 0 descriptor?? [ 449.746034][ T5159] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 449.922764][ T7368] hsr_slave_0: left promiscuous mode [ 449.940106][ T7368] hsr_slave_1: left promiscuous mode [ 449.954565][ T7368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.968272][ T7368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.995940][ T7368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.010816][ T7368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.043376][ T5110] Bluetooth: hci3: command tx timeout [ 450.073816][ T5157] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 450.109320][ T7368] veth1_macvtap: left promiscuous mode [ 450.130500][ T7368] veth0_macvtap: left promiscuous mode [ 450.152611][ T7368] veth1_vlan: left promiscuous mode [ 450.167724][ T7368] veth0_vlan: left promiscuous mode [ 450.283391][ T5157] usb 3-1: Using ep0 maxpacket: 16 [ 450.299210][ T5157] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 450.310941][ T5157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.339164][ T5157] usb 3-1: Product: syz [ 450.353225][ T5157] usb 3-1: Manufacturer: syz [ 450.358509][ T5157] usb 3-1: SerialNumber: syz [ 450.375978][ T5157] usb 3-1: config 0 descriptor?? [ 450.394791][ T5157] usb 3-1: no audio or video endpoints found [ 450.401238][ T5157] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 450.435441][T10297] loop4: detected capacity change from 0 to 128 [ 450.467444][ T5157] libceph: connect (1)[c::]:6789 error -101 [ 450.470752][ T46] libceph: connect (1)[c::]:6789 error -101 [ 450.477717][ T5157] libceph: mon0 (1)[c::]:6789 connect error [ 450.496348][T10297] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 450.500543][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 450.555336][ T46] usb 4-1: USB disconnect, device number 19 [ 450.607859][ T8609] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 450.745756][ T5159] libceph: connect (1)[c::]:6789 error -101 [ 450.751964][ T5159] libceph: mon0 (1)[c::]:6789 connect error [ 450.806263][ T46] libceph: connect (1)[c::]:6789 error -101 [ 450.815868][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 451.091224][T10305] Unknown options in mask 4 [ 451.214122][T10291] ceph: No mds server is up or the cluster is laggy [ 451.214287][T10294] ceph: No mds server is up or the cluster is laggy [ 451.274067][ T5159] libceph: connect (1)[c::]:6789 error -101 [ 451.297133][ T5159] libceph: mon0 (1)[c::]:6789 connect error [ 451.389543][ T5160] libceph: connect (1)[c::]:6789 error -101 [ 451.405857][ T5160] libceph: mon0 (1)[c::]:6789 connect error [ 452.127426][ T5110] Bluetooth: hci3: command tx timeout [ 452.912218][ T7368] team0 (unregistering): Port device team_slave_1 removed [ 452.985974][T10310] loop1: detected capacity change from 0 to 32768 [ 453.011413][T10310] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1360 (10310) [ 453.038099][T10312] loop4: detected capacity change from 0 to 2048 [ 453.042924][T10310] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 453.059897][ T7368] team0 (unregistering): Port device team_slave_0 removed [ 453.070642][T10312] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.071065][T10310] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 453.110089][T10310] BTRFS info (device loop1): using free-space-tree [ 453.448235][ T46] usb 3-1: USB disconnect, device number 17 [ 453.545588][T10335] loop2: detected capacity change from 0 to 512 [ 453.561503][T10335] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 453.599387][T10335] EXT4-fs (loop2): 1 truncate cleaned up [ 453.618855][T10335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.644942][T10310] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 454.024383][T10310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1360'. [ 454.211415][ T5110] Bluetooth: hci3: command tx timeout [ 454.272281][ T8236] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 454.737186][T10343] loop3: detected capacity change from 0 to 256 [ 454.751927][T10343] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 454.829149][T10348] loop1: detected capacity change from 0 to 512 [ 454.867502][T10347] loop4: detected capacity change from 0 to 256 [ 454.876462][T10348] EXT4-fs: Ignoring removed bh option [ 454.891125][T10249] chnl_net:caif_netlink_parms(): no params data found [ 454.904558][T10348] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 454.911863][ T8322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.945140][T10348] EXT4-fs (loop1): 1 truncate cleaned up [ 454.966298][T10348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.108955][T10347] Bluetooth: MGMT ver 1.23 [ 455.165443][ T8236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.197149][T10249] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.253740][T10249] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.274344][T10249] bridge_slave_0: entered allmulticast mode [ 455.282018][T10249] bridge_slave_0: entered promiscuous mode [ 455.311927][T10249] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.353413][T10249] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.377771][T10249] bridge_slave_1: entered allmulticast mode [ 455.383695][T10362] loop3: detected capacity change from 0 to 256 [ 455.427128][T10249] bridge_slave_1: entered promiscuous mode [ 455.486182][T10362] FAT-fs (loop3): Directory bread(block 64) failed [ 455.511230][T10362] FAT-fs (loop3): Directory bread(block 65) failed [ 455.523375][T10362] FAT-fs (loop3): Directory bread(block 66) failed [ 455.536172][T10362] FAT-fs (loop3): Directory bread(block 67) failed [ 455.542861][T10362] FAT-fs (loop3): Directory bread(block 68) failed [ 455.563332][T10362] FAT-fs (loop3): Directory bread(block 69) failed [ 455.570040][T10362] FAT-fs (loop3): Directory bread(block 70) failed [ 455.595105][T10362] FAT-fs (loop3): Directory bread(block 71) failed [ 455.601920][T10362] FAT-fs (loop3): Directory bread(block 72) failed [ 455.611587][T10362] FAT-fs (loop3): Directory bread(block 73) failed [ 455.622651][T10249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.682294][T10249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.720671][T10369] loop1: detected capacity change from 0 to 2048 [ 455.858867][T10369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.866988][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 455.881801][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 455.891282][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 455.912114][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 455.965526][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 455.994215][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 456.171716][T10249] team0: Port device team_slave_0 added [ 456.182388][T10249] team0: Port device team_slave_1 added [ 456.284149][ T5110] Bluetooth: hci3: command tx timeout [ 456.362542][T10249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.382961][T10249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.409204][T10249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.422710][T10249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.440876][T10249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.482280][T10249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.652278][T10249] hsr_slave_0: entered promiscuous mode [ 456.662312][T10249] hsr_slave_1: entered promiscuous mode [ 456.680107][T10249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.688595][T10249] Cannot create hsr debugfs directory [ 456.783726][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1383'. [ 456.829795][ T7368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.999852][ T7368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.028025][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.048047][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.057018][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 457.065419][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 457.074727][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 457.082143][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 457.199750][ T7368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.299267][T10401] loop1: detected capacity change from 0 to 256 [ 457.404699][T10401] FAT-fs (loop1): Directory bread(block 64) failed [ 457.411610][T10401] FAT-fs (loop1): Directory bread(block 65) failed [ 457.425873][ T7368] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.426292][T10401] FAT-fs (loop1): Directory bread(block 66) failed [ 457.448591][T10401] FAT-fs (loop1): Directory bread(block 67) failed [ 457.477774][T10401] FAT-fs (loop1): Directory bread(block 68) failed [ 457.490134][T10401] FAT-fs (loop1): Directory bread(block 69) failed [ 457.507624][T10401] FAT-fs (loop1): Directory bread(block 70) failed [ 457.518408][T10401] FAT-fs (loop1): Directory bread(block 71) failed [ 457.525468][T10401] FAT-fs (loop1): Directory bread(block 72) failed [ 457.532613][T10401] FAT-fs (loop1): Directory bread(block 73) failed [ 458.043722][ T5112] Bluetooth: hci2: command tx timeout [ 458.188216][T10371] chnl_net:caif_netlink_parms(): no params data found [ 459.247766][ T5112] Bluetooth: hci4: command tx timeout [ 460.123632][ T5110] Bluetooth: hci2: command tx timeout [ 460.342540][T10443] loop3: detected capacity change from 0 to 164 [ 460.357954][T10443] isofs: isofs_export_get_parent(): child directory not normalized! [ 460.389006][T10371] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.400473][T10371] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.408187][T10371] bridge_slave_0: entered allmulticast mode [ 460.416896][T10371] bridge_slave_0: entered promiscuous mode [ 460.425916][T10446] netlink: 'syz.3.1397': attribute type 4 has an invalid length. [ 461.394496][ T5110] Bluetooth: hci4: command tx timeout [ 461.504314][ T7368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.547780][T10443] netlink: 'syz.3.1397': attribute type 4 has an invalid length. [ 461.580487][T10448] loop1: detected capacity change from 0 to 32768 [ 461.587960][T10448] XFS: ikeep mount option is deprecated. [ 461.620080][T10371] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.628537][T10371] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.636400][T10371] bridge_slave_1: entered allmulticast mode [ 461.651548][T10448] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 461.658554][T10371] bridge_slave_1: entered promiscuous mode [ 461.724564][ T5112] Bluetooth: hci0: command 0x0406 tx timeout [ 461.749307][T10448] XFS (loop1): Ending clean mount [ 461.764512][ T5161] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 461.859242][ T7368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.883950][T10371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.902983][T10394] chnl_net:caif_netlink_parms(): no params data found [ 461.962573][ T8236] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 461.967261][T10371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.986091][ T5161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.009175][ T5161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.037306][ T7368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.061536][ T5161] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 462.095977][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.116592][ T5161] usb 4-1: config 0 descriptor?? [ 462.129773][ T5161] usbhid 4-1:0.0: can't add hid device: -22 [ 462.155218][ T5161] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 462.207772][ T5112] Bluetooth: hci2: command tx timeout [ 462.267413][T10461] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 462.317785][ T7368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.361135][T10371] team0: Port device team_slave_0 added [ 462.377581][T10371] team0: Port device team_slave_1 added [ 462.502802][T10249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 462.551523][T10371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.573285][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.600614][T10371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.619954][T10371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.627742][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.653675][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.660477][T10371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.699049][T10249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 462.730629][T10249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 462.900431][T10249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 462.911342][ T5161] usb 4-1: USB disconnect, device number 20 [ 462.977755][T10394] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.987381][T10394] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.997875][T10394] bridge_slave_0: entered allmulticast mode [ 463.006118][T10394] bridge_slave_0: entered promiscuous mode [ 463.014585][T10394] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.021763][T10394] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.032413][T10394] bridge_slave_1: entered allmulticast mode [ 463.040322][T10394] bridge_slave_1: entered promiscuous mode [ 463.112990][T10466] lo: entered promiscuous mode [ 463.121526][T10466] lo: entered allmulticast mode [ 463.191614][T10371] hsr_slave_0: entered promiscuous mode [ 463.211570][T10371] hsr_slave_1: entered promiscuous mode [ 463.218920][T10371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.226724][T10371] Cannot create hsr debugfs directory [ 463.235794][ T7368] bridge_slave_1: left allmulticast mode [ 463.255400][ T7368] bridge_slave_1: left promiscuous mode [ 463.261291][ T7368] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.271745][ T7368] bridge_slave_0: left allmulticast mode [ 463.278226][ T7368] bridge_slave_0: left promiscuous mode [ 463.284274][ T7368] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.296677][ T7368] bridge_slave_1: left allmulticast mode [ 463.302352][ T7368] bridge_slave_1: left promiscuous mode [ 463.308950][ T7368] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.328765][ T7368] bridge_slave_0: left allmulticast mode [ 463.337253][ T7368] bridge_slave_0: left promiscuous mode [ 463.343099][ T7368] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.415635][ T5112] Bluetooth: hci4: command tx timeout [ 463.832817][T10470] loop3: detected capacity change from 0 to 512 [ 463.854297][T10470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.921740][T10470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.993994][ T8587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.285591][ T5112] Bluetooth: hci2: command tx timeout [ 464.442482][ T7368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.455817][ T7368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.468805][ T7368] bond0 (unregistering): Released all slaves [ 464.639123][ T7368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.650696][ T7368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.666576][ T7368] bond0 (unregistering): Released all slaves [ 464.682282][T10394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.701554][T10394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.115280][T10394] team0: Port device team_slave_0 added [ 465.239359][T10394] team0: Port device team_slave_1 added [ 465.388343][T10480] loop3: detected capacity change from 0 to 256 [ 465.434375][T10394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.446690][T10480] FAT-fs (loop3): bogus logical sector size 0 [ 465.452905][T10480] FAT-fs (loop3): Can't find a valid FAT filesystem [ 465.585338][ T5112] Bluetooth: hci4: command tx timeout [ 465.681563][T10394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.003384][T10394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.164046][T10394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.171043][T10394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.209198][T10394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.349148][T10485] loop3: detected capacity change from 0 to 256 [ 466.362685][T10485] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 466.441464][T10394] hsr_slave_0: entered promiscuous mode [ 466.462549][T10394] hsr_slave_1: entered promiscuous mode [ 466.477716][T10394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.491584][T10394] Cannot create hsr debugfs directory [ 467.066040][T10489] loop3: detected capacity change from 0 to 2048 [ 467.091342][ T5112] Bluetooth: hci0: unexpected event 0x30 length: 4 > 3 [ 467.176870][T10489] loop3: p1 < > p4 [ 467.279905][T10489] loop3: p4 size 8388608 extends beyond EOD, truncated [ 467.610085][T10249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.737567][ T7368] hsr_slave_0: left promiscuous mode [ 467.751973][ T7368] hsr_slave_1: left promiscuous mode [ 467.759339][ T7368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.773393][ T7368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.791098][ T7368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.802631][ T7368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.847800][ T7368] hsr_slave_0: left promiscuous mode [ 467.864504][ T7368] hsr_slave_1: left promiscuous mode [ 467.870965][ T7368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.882838][ T7368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.902856][ T7368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.912324][ T7368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.976319][ T7368] veth1_macvtap: left promiscuous mode [ 467.982314][ T7368] veth0_macvtap: left promiscuous mode [ 467.991270][ T7368] veth1_vlan: left promiscuous mode [ 467.996837][ T7368] veth0_vlan: left promiscuous mode [ 468.004046][ T7368] veth1_macvtap: left promiscuous mode [ 468.009699][ T7368] veth0_macvtap: left promiscuous mode [ 468.017998][ T7368] veth1_vlan: left promiscuous mode [ 468.023573][ T7368] veth0_vlan: left promiscuous mode [ 468.119695][T10497] loop3: detected capacity change from 0 to 256 [ 468.175971][ T5160] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 468.385046][ T5160] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 468.404380][ T5160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 468.424412][ T5160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 468.443225][ T5160] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 468.467717][ T5160] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 468.482730][ T5160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.504818][ T5160] usb 2-1: config 0 descriptor?? [ 468.935843][ T5160] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 468.952653][ T5160] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 468.967851][ T5160] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 468.982104][ T5160] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 469.163568][ T5110] Bluetooth: hci0: command 0x0406 tx timeout [ 469.376171][ T5160] usb 2-1: USB disconnect, device number 12 [ 469.469054][ T7368] team0 (unregistering): Port device team_slave_1 removed [ 469.534693][ T7368] team0 (unregistering): Port device team_slave_0 removed [ 470.310962][T10509] loop1: detected capacity change from 0 to 512 [ 470.350605][T10509] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 470.839102][ T58] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 470.994603][ T7368] team0 (unregistering): Port device team_slave_1 removed [ 471.047562][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 471.074816][ T58] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 471.084880][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.092960][ T58] usb 2-1: Product: syz [ 471.102988][ T58] usb 2-1: Manufacturer: syz [ 471.108384][ T7368] team0 (unregistering): Port device team_slave_0 removed [ 471.117542][ T58] usb 2-1: SerialNumber: syz [ 471.138819][ T58] usb 2-1: config 0 descriptor?? [ 471.147563][ T58] usb 2-1: no audio or video endpoints found [ 471.154022][ T58] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 472.168471][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 472.196696][T10505] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 472.223314][T10505] netlink: 'syz.3.1412': attribute type 2 has an invalid length. [ 472.444724][T10249] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.483122][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.490322][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.594391][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.601582][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.828454][T10371] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 472.933704][ T5157] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 472.964532][T10371] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 473.002080][T10371] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 473.027383][T10371] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 473.155191][ T5157] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=56.a0 [ 473.196273][ T5157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.225321][ T5157] usb 4-1: Product: syz [ 473.229602][ T5157] usb 4-1: Manufacturer: syz [ 473.253410][ T5157] usb 4-1: SerialNumber: syz [ 473.277028][ T5157] usb 4-1: config 0 descriptor?? [ 473.305831][ T5157] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 473.473041][T10249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.600032][ T5157] usb 2-1: USB disconnect, device number 13 [ 473.701357][T10394] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 473.746207][T10371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.759512][T10394] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 473.800014][T10394] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 473.841871][T10371] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.861578][ T5157] usb 4-1: USB disconnect, device number 21 [ 473.897356][T10394] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 473.927193][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.934432][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.945288][T10527] loop1: detected capacity change from 0 to 256 [ 473.967270][T10249] veth0_vlan: entered promiscuous mode [ 473.998556][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.000038][T10527] FAT-fs (loop1): Directory bread(block 64) failed [ 474.005787][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.021029][T10527] FAT-fs (loop1): Directory bread(block 65) failed [ 474.027973][T10527] FAT-fs (loop1): Directory bread(block 66) failed [ 474.043696][T10527] FAT-fs (loop1): Directory bread(block 67) failed [ 474.074485][T10527] FAT-fs (loop1): Directory bread(block 68) failed [ 474.074743][T10249] veth1_vlan: entered promiscuous mode [ 474.086679][T10527] FAT-fs (loop1): Directory bread(block 69) failed [ 474.094304][T10527] FAT-fs (loop1): Directory bread(block 70) failed [ 474.102602][T10527] FAT-fs (loop1): Directory bread(block 71) failed [ 474.110541][T10527] FAT-fs (loop1): Directory bread(block 72) failed [ 474.125642][T10527] FAT-fs (loop1): Directory bread(block 73) failed [ 474.363756][T10249] veth0_macvtap: entered promiscuous mode [ 474.398683][T10249] veth1_macvtap: entered promiscuous mode [ 474.482938][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.495077][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.505501][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.517011][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.533381][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.545397][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.557963][T10249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.590615][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.603637][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.617023][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.631033][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.641896][T10249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.652650][T10249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.688100][T10249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.772618][T10394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.790767][T10249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.803468][T10249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.812227][T10249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.822564][T10249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.910892][T10371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.019072][T10394] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.082584][ T1627] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.089840][ T1627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.111580][ T1627] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.118845][ T1627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.175253][T10540] loop3: detected capacity change from 0 to 2048 [ 475.188680][T10540] EXT4-fs: Ignoring removed bh option [ 475.216585][ T2488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.231703][T10540] EXT4-fs (loop3): can't mount with both data=journal and dax [ 475.245746][ T2488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.339951][T10371] veth0_vlan: entered promiscuous mode [ 475.367402][ T9760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.384569][ T9760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.611339][T10371] veth1_vlan: entered promiscuous mode [ 476.285455][T10550] binder: 10549:10550 ioctl 4018620d 0 returned -22 [ 476.332904][T10550] binder: 10549:10550 ioctl c0306201 20000380 returned -11 [ 476.348001][T10371] veth0_macvtap: entered promiscuous mode [ 476.460083][T10371] veth1_macvtap: entered promiscuous mode [ 476.491727][T10554] binder: BINDER_SET_CONTEXT_MGR already set [ 476.522400][T10554] binder: 10553:10554 ioctl 40046207 0 returned -16 [ 476.526793][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.571617][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.604797][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.636297][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.658792][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.683185][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.721424][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.742554][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.746833][T10560] binder: 10559:10560 ioctl 4018620d 0 returned -22 [ 476.768749][T10371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.792776][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.831544][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.863106][T10560] loop0: detected capacity change from 0 to 1024 [ 476.873338][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.884033][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.894017][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.907319][T10560] [ 476.907329][T10560] ====================================================== [ 476.907337][T10560] WARNING: possible circular locking dependency detected [ 476.907351][T10560] 6.10.0-next-20240716-syzkaller #0 Not tainted [ 476.907363][T10560] ------------------------------------------------------ [ 476.907372][T10560] syz.0.1426/10560 is trying to acquire lock: [ 476.907384][T10560] ffff88802eead8f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_allocate+0x9e/0x8c0 [ 476.907453][T10560] [ 476.907453][T10560] but task is already holding lock: [ 476.907460][T10560] ffff88807fbf0108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x21b/0x1b70 [ 476.907511][T10560] [ 476.907511][T10560] which lock already depends on the new lock. [ 476.907511][T10560] [ 476.907519][T10560] [ 476.907519][T10560] the existing dependency chain (in reverse order) is: [ 476.907526][T10560] [ 476.907526][T10560] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 476.907556][T10560] lock_acquire+0x1ed/0x550 [ 476.907585][T10560] __mutex_lock+0x136/0xd70 [ 476.907612][T10560] hfsplus_get_block+0x383/0x14f0 [ 476.907634][T10560] block_read_full_folio+0x418/0xcd0 [ 476.907664][T10560] filemap_read_folio+0x1a0/0x790 [ 476.907687][T10560] do_read_cache_folio+0x134/0x820 [ 476.907711][T10560] do_read_cache_page+0x30/0x200 [ 476.907733][T10560] hfsplus_block_allocate+0xee/0x8c0 [ 476.907763][T10560] hfsplus_file_extend+0xade/0x1b70 [ 476.907785][T10560] hfsplus_get_block+0x406/0x14f0 [ 476.907806][T10560] __block_write_begin_int+0x50c/0x1a70 [ 476.907826][T10560] block_write_begin+0x9b/0x1e0 [ 476.907846][T10560] cont_write_begin+0x645/0x890 [ 476.907865][T10560] hfsplus_write_begin+0x8a/0xd0 [ 476.907884][T10560] cont_write_begin+0x319/0x890 [ 476.907904][T10560] hfsplus_write_begin+0x8a/0xd0 [ 476.907923][T10560] generic_cont_expand_simple+0x18f/0x2b0 [ 476.907943][T10560] hfsplus_setattr+0x16d/0x270 [ 476.907962][T10560] notify_change+0xb9d/0xe70 [ 476.907988][T10560] do_ftruncate+0x46b/0x590 [ 476.908019][T10560] __x64_sys_ftruncate+0x95/0xf0 [ 476.908049][T10560] do_syscall_64+0xf3/0x230 [ 476.908079][T10560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.908104][T10560] [ 476.908104][T10560] -> #0 (&sbi->alloc_mutex){+.+.}-{3:3}: [ 476.908136][T10560] validate_chain+0x18ef/0x5920 [ 476.908156][T10560] __lock_acquire+0x1384/0x2050 [ 476.908184][T10560] lock_acquire+0x1ed/0x550 [ 476.908212][T10560] __mutex_lock+0x136/0xd70 [ 476.908239][T10560] hfsplus_block_allocate+0x9e/0x8c0 [ 476.908267][T10560] hfsplus_file_extend+0xade/0x1b70 [ 476.908286][T10560] hfsplus_bmap_reserve+0x105/0x4e0 [ 476.908310][T10560] hfsplus_create_cat+0x1b0/0x1b70 [ 476.908332][T10560] hfsplus_fill_super+0x13ee/0x1ca0 [ 476.908362][T10560] mount_bdev+0x20a/0x2d0 [ 476.908392][T10560] legacy_get_tree+0xee/0x190 [ 476.908411][T10560] vfs_get_tree+0x90/0x2a0 [ 476.908428][T10560] do_new_mount+0x2be/0xb40 [ 476.908446][T10560] __se_sys_mount+0x2d6/0x3c0 [ 476.908465][T10560] do_syscall_64+0xf3/0x230 [ 476.908495][T10560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.908519][T10560] [ 476.908519][T10560] other info that might help us debug this: [ 476.908519][T10560] [ 476.908526][T10560] Possible unsafe locking scenario: [ 476.908526][T10560] [ 476.908532][T10560] CPU0 CPU1 [ 476.908538][T10560] ---- ---- [ 476.908544][T10560] lock(&HFSPLUS_I(inode)->extents_lock); [ 476.908561][T10560] lock(&sbi->alloc_mutex); [ 476.908576][T10560] lock(&HFSPLUS_I(inode)->extents_lock); [ 476.908593][T10560] lock(&sbi->alloc_mutex); [ 476.908607][T10560] [ 476.908607][T10560] *** DEADLOCK *** [ 476.908607][T10560] [ 476.908612][T10560] 4 locks held by syz.0.1426/10560: [ 476.908625][T10560] #0: ffff88801c7e80e0 (&type->s_umount_key#78/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 476.908703][T10560] #1: ffff88802eead998 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0x1380/0x1ca0 [ 476.908765][T10560] #2: ffff88802ea9e0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 [ 476.908823][T10560] #3: ffff88807fbf0108 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x21b/0x1b70 [ 476.908875][T10560] [ 476.908875][T10560] stack backtrace: [ 476.908883][T10560] CPU: 1 UID: 0 PID: 10560 Comm: syz.0.1426 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 476.908916][T10560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 476.908930][T10560] Call Trace: [ 476.908939][T10560] [ 476.908947][T10560] dump_stack_lvl+0x241/0x360 [ 476.908985][T10560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.909018][T10560] ? __pfx__printk+0x10/0x10 [ 476.909056][T10560] print_circular_bug+0x13a/0x1b0 [ 476.909083][T10560] check_noncircular+0x36a/0x4a0 [ 476.909109][T10560] ? __pfx_check_noncircular+0x10/0x10 [ 476.909132][T10560] ? lockdep_lock+0x123/0x2b0 [ 476.909164][T10560] ? __pfx_check_noncircular+0x10/0x10 [ 476.909185][T10560] ? _find_first_zero_bit+0xd3/0x100 [ 476.909217][T10560] validate_chain+0x18ef/0x5920 [ 476.909239][T10560] ? __pfx_lockdep_unlock+0x10/0x10 [ 476.909272][T10560] ? validate_chain+0x15c0/0x5920 [ 476.909302][T10560] ? __pfx_validate_chain+0x10/0x10 [ 476.909332][T10560] ? __pfx_validate_chain+0x10/0x10 [ 476.909354][T10560] ? __pfx_validate_chain+0x10/0x10 [ 476.909387][T10560] ? mark_lock+0x9a/0x360 [ 476.909421][T10560] __lock_acquire+0x1384/0x2050 [ 476.909460][T10560] lock_acquire+0x1ed/0x550 [ 476.909486][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.909489][T10560] ? hfsplus_block_allocate+0x9e/0x8c0 [ 476.909528][T10560] ? __pfx_lock_acquire+0x10/0x10 [ 476.909564][T10560] ? __pfx___might_resched+0x10/0x10 [ 476.909605][T10560] __mutex_lock+0x136/0xd70 [ 476.909636][T10560] ? hfsplus_block_allocate+0x9e/0x8c0 [ 476.909686][T10560] ? rcu_is_watching+0x15/0xb0 [ 476.909708][T10560] ? hfsplus_block_allocate+0x9e/0x8c0 [ 476.909743][T10560] ? __pfx___mutex_lock+0x10/0x10 [ 476.909772][T10560] ? __mutex_lock+0x2ef/0xd70 [ 476.909808][T10560] ? hfsplus_file_extend+0x21b/0x1b70 [ 476.909835][T10560] hfsplus_block_allocate+0x9e/0x8c0 [ 476.909879][T10560] hfsplus_file_extend+0xade/0x1b70 [ 476.909912][T10560] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 476.909936][T10560] ? rcu_is_watching+0x15/0xb0 [ 476.909958][T10560] ? trace_contention_end+0x3c/0x120 [ 476.909988][T10560] ? __mutex_lock+0x2ef/0xd70 [ 476.910032][T10560] ? hfsplus_find_init+0x14a/0x1c0 [ 476.910066][T10560] ? __pfx___mutex_lock+0x10/0x10 [ 476.910100][T10560] hfsplus_bmap_reserve+0x105/0x4e0 [ 476.910139][T10560] hfsplus_create_cat+0x1b0/0x1b70 [ 476.910166][T10560] ? do_raw_spin_unlock+0x13c/0x8b0 [ 476.910199][T10560] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 476.910227][T10560] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 476.910255][T10560] ? __pfx_hfsplus_create_cat+0x10/0x10 [ 476.910287][T10560] ? __mod_timer+0xb89/0xeb0 [ 476.910352][T10560] ? do_raw_spin_unlock+0x13c/0x8b0 [ 476.910383][T10560] ? _raw_spin_unlock+0x28/0x50 [ 476.910407][T10560] ? hfsplus_new_inode+0x53e/0x6c0 [ 476.910434][T10560] hfsplus_fill_super+0x13ee/0x1ca0 [ 476.910482][T10560] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 476.910551][T10560] ? snprintf+0xda/0x120 [ 476.910574][T10560] ? __pfx_lock_release+0x10/0x10 [ 476.910605][T10560] ? do_raw_spin_lock+0x14f/0x370 [ 476.910641][T10560] ? sb_set_blocksize+0x98/0xf0 [ 476.910671][T10560] ? setup_bdev_super+0x4e6/0x5d0 [ 476.910708][T10560] mount_bdev+0x20a/0x2d0 [ 476.910742][T10560] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 476.910777][T10560] ? __pfx_mount_bdev+0x10/0x10 [ 476.910810][T10560] ? vfs_parse_fs_string+0x190/0x230 [ 476.910839][T10560] legacy_get_tree+0xee/0x190 [ 476.910861][T10560] ? __pfx_hfsplus_mount+0x10/0x10 [ 476.910896][T10560] vfs_get_tree+0x90/0x2a0 [ 476.910919][T10560] do_new_mount+0x2be/0xb40 [ 476.910944][T10560] ? __pfx_do_new_mount+0x10/0x10 [ 476.910971][T10560] __se_sys_mount+0x2d6/0x3c0 [ 476.910999][T10560] ? __pfx___se_sys_mount+0x10/0x10 [ 476.911021][T10560] ? exc_page_fault+0x590/0x8c0 [ 476.911054][T10560] ? __x64_sys_mount+0x20/0xc0 [ 476.911077][T10560] do_syscall_64+0xf3/0x230 [ 476.911112][T10560] ? clear_bhb_loop+0x35/0x90 [ 476.911141][T10560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.911167][T10560] RIP: 0033:0x7f8b09f7711a [ 476.911187][T10560] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.911206][T10560] RSP: 002b:00007f8b0ace4e78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 476.911230][T10560] RAX: ffffffffffffffda RBX: 00007f8b0ace4f00 RCX: 00007f8b09f7711a [ 476.911247][T10560] RDX: 0000000020000000 RSI: 0000000020002380 RDI: 00007f8b0ace4ec0 [ 476.911262][T10560] RBP: 0000000020000000 R08: 00007f8b0ace4f00 R09: 0000000000004040 [ 476.911278][T10560] R10: 0000000000004040 R11: 0000000000000206 R12: 0000000020002380 [ 476.911294][T10560] R13: 00007f8b0ace4ec0 R14: 00000000000006ed R15: 00000000200023c0 [ 476.911332][T10560] [ 477.150583][T10545] loop1: detected capacity change from 0 to 32768 [ 477.159587][T10371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.197192][T10545] XFS: attr2 mount option is deprecated. [ 477.203686][T10371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.241194][T10545] XFS: ikeep mount option is deprecated. [ 477.249852][T10371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.279373][T10545] XFS: noikeep mount option is deprecated. [ 477.309159][T10371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.888216][T10371] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.889854][T10545] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 477.896992][T10371] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.897027][T10371] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.925727][ T9759] hfsplus: b-tree write err: -5, ino 4 [ 477.967949][T10545] XFS (loop1): Ending clean mount [ 477.977992][T10394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.987672][T10545] XFS (loop1): Quotacheck needed: Please wait. [ 478.012905][T10545] XFS (loop1): Quotacheck: Done. [ 478.039224][T10371] ieee80211 phy48: Selected rate control algorithm 'minstrel_ht' [ 478.087768][ T8236] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 478.103042][ T9760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.118948][T10371] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht' [ 478.136133][ T9760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.197374][ T7369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.207931][ T7369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.320911][T10394] veth0_vlan: entered promiscuous mode [ 478.333990][T10394] veth1_vlan: entered promiscuous mode [ 478.362296][T10394] veth0_macvtap: entered promiscuous mode [ 478.373952][T10394] veth1_macvtap: entered promiscuous mode [ 478.391544][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.402119][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.412600][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.424210][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.434156][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.446327][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.456272][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.466776][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.476619][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.487985][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.499082][T10394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.512389][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.524915][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.535455][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.545921][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.555881][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.566355][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.576260][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.586782][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.597521][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.608029][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.619160][T10394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.632165][T10394] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.641749][T10394] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.651414][T10394] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.660170][T10394] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.696397][T10394] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 478.722740][ T7369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.725306][T10394] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 478.731486][ T7369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.761038][ T7368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.772795][ T7368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50